Exchange 2013 Control panel displaying random pop up error ?

Today, when I tried to edit some Mailbox , Meeting Roomor even Distribution group AD attributes I always got this error message:

The object domain.com/Users/Factory Meeting Room 1 has been corrupted, and it's in an inconsistent state. The following validation errors happened:
________________________________________
The access control entry defines the ObjectType '9b099da6-0d3c-164c-8bee-5199d7165cbd' that can't be resolved.

Open in new window


how to get rid of that error message ?

note:
I have confirmed that repadmin /replsum and repadmin /showrepl both returns no error.

Any help would be greatly appreciated.
LVL 9
Senior IT System EngineerIT ProfessionalAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

RoninCommented:
What browser are you using and what's the CU level on the server?
0
Senior IT System EngineerIT ProfessionalAuthor Commented:
I'm using IE and Chrome, both are the same.
As at the moment, it is on CU5.
0
Senior IT System EngineerIT ProfessionalAuthor Commented:
I've found the steps in this article:
http://idmoim.blogspot.com/2015/10/warning-access-control-entry-defines.html

Open in new window


But when I execute:
Get-ACl "AD:\DC=MyDomain,DC=com" | Select Access -ExpandProperty Access | Where-Object {$_.ObjectType -eq "9b099da6-0d3c-164c-8bee-5199d7165cbd"} | Export-csv C:\Result-ACL.csv -NoTypeInformation

Open in new window


I got the very strange result in the IdentityReference column:
CREATOR OWNER and NT AUTHORITY\SELF

Here's the full result of the .CSV file:
ActiveDirectoryRights	InheritanceType	ObjectType	InheritedObjectType	ObjectFlags	AccessControlType	IdentityReference	IsInherited	InheritanceFlags	PropagationFlags
Self	Descendents	9b099da6-0d3c-164c-8bee-5199d7165cbd	bf967e86-0de1-22d0-a984-00bb003049e3	ObjectAceTypePresent, InheritedObjectAceTypePresent	Allow	CREATOR OWNER	FALSE	ContainerInherit	InheritOnly
Self	Descendents	9b099da6-0d3c-164c-8bee-5199d7165cbd	bf967e86-0de1-22d0-a984-00bb003049e3	ObjectAceTypePresent, InheritedObjectAceTypePresent	Allow	NT AUTHORITY\SELF	FALSE	ContainerInherit	InheritOnly

Open in new window


Any idea how to remove that safely from the whole 15000+ mailboxes ?
0
Determine the Perfect Price for Your IT Services

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden with our free interactive tool and use it to determine the right price for your IT services. Download your free eBook now!

RoninCommented:
I suggest you upgrade the server with the latest CU, as first step.
0
Senior IT System EngineerIT ProfessionalAuthor Commented:
Yes, I am now trying to install Exchange Server 2013 CU15 since it is the easiest no .NET Fx update required.

but it is still cumbersome due to many issues with multi-role IIS server :-|

Error:
The following error was generated when "$error.Clear(); Start-SetupProcess -Name "iisreset" -Args "/noforce /timeout:120"
" was run: "Microsoft.Exchange.Configuration.Tasks.TaskException: Process execution failed with exit code 1053.
   at Microsoft.Exchange.Configuration.Tasks.Task.ThrowError(Exception exception, ErrorCategory errorCategory, Object target, String helpUrl)
   at Microsoft.Exchange.Management.Tasks.RunProcessBase.InternalProcessRecord()
   at Microsoft.Exchange.Configuration.Tasks.Task.<ProcessRecord>b__b()
   at Microsoft.Exchange.Configuration.Tasks.Task.InvokeRetryableFunc(String funcName, Action func, Boolean terminatePipelineIfFailed)".

0
RoninCommented:
but it is still cumbersome due to many issues with multi-role IIS server :-|
I'm not sure if I follow, what multi-role ???

Have you updated the server with the latest Windows Updates?
Are you experiencing the same issue with pop-ups errors when trying to open the ECP from different machines?
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Senior IT System EngineerIT ProfessionalAuthor Commented:
Thanks  !
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.