Event ID 929 is logged, and mail is not delivered from one mail server to another mail server in an Exchange 2000 Server organization (907969)


The information in this article applies to:

  • Microsoft Exchange 2000 Enterprise Server
  • Microsoft Exchange 2000 Server
Content Maintenance:45054:SOX020624700053

SYMPTOMS

In a Microsoft Exchange 2000 Server organization, mail is not delivered from one mail server to another mail server. When you use Exchange System Manager to view the mail queues for the server that is experiencing the problem, you notice that messages are queued in the Messages with an unreachable destination queue. Additionally, an event that is similar to the following is logged in the Application log:Event Type: Error
Event Source: MSExchangeTransport
Event Category: Routing Engine/Service
Event ID: 929
User: N/A
Computer: Computer_Name
Description: Failed in reading Connector's DS Info Process Id: "XXXX" Process location: C:\WINNT\System32\inetsrv\inetinfo.exe ConnectorDN: CN=Server_Name,CN=Connections,CN=Routing_Group_Name,CN=Routing Groups,CN=Routing_Group_Name,CN=Administrative Groups,CN=Organization_Name,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=Domain_Name,DC=Root _Domain Hr:c00XXXXX Attribute [msExchSourceBridgeheadServersDN]Note X is a number or a letter that changes from Exchange server to Exchange server.

If you restart the Simple Mail Transfer Protocol (SMTP) service and the Microsoft Exchange Routing Engine service, some messages are delivered. However, the problem persists.

CAUSE

This problem occurs because of incorrect access permissions on the Exchange Server objects in the Active Directory directory service.

RESOLUTION

Warning If you use the ADSI Edit snap-in, the LDP utility, or any other LDAP version 3 client, and you incorrectly modify the attributes of Active Directory objects, you can cause serious problems. These problems may require you to reinstall Microsoft Windows 2000 Server, Microsoft Windows Server 2003, Microsoft Exchange 2000 Server, Microsoft Exchange Server 2003, or both Windows and Exchange. Microsoft cannot guarantee that problems that occur if you incorrectly modify Active Directory object attributes can be solved. Modify these attributes at your own risk.

To resolve this problem, use the Active Directory Services Interfaces Editor (ADSI Edit) to verify the permissions on the objects that are reported in the Description field of event ID 929. To do this, follow these steps.

Note You must verify the access permissions for each object that is reported in the Description field of event ID 929.
  1. Identify the hierarchical list of objects in which there is an access problem. The list of objects appears in the Description field in the Error event. For example, if the text in the Description field is similar to the text that is mentioned in the "Symptoms" section, you must verify and correct the access permissions for the following objects:

    CN=Services
    CN=Microsoft Exchange
    CN=Organization_Name
    CN=Administrative Groups
    CN=Routing_Group_Name
    CN=Routing Groups
    CN=Routing_Group_Name
    CN=Connections
    CN=Server_Name

  2. On a server that has the Microsoft Windows Support Tools installed, open a Command Prompt window.
  3. Move to the Drive_Letter:\Program Files\Support Tools folder.
  4. Type adsiedit.msc, and then press ENTER.
  5. On the Action menu, click Connect to.
  6. In the Connection Settings dialog box, type the name of the connection in the Name box.
  7. In the Connection Point area, click Select a well known Naming Context, and then click Configuration in the list.
  8. In the Computer area, click Select or type a domain or Server, and then type the fully qualified domain name (FQDN) of the server in the box. Alternatively, you can click Default (Domain or Server that you logged in to), if appropriate.
  9. Click OK.
  10. Expand DC=Configuration,DC=Your_Domain,DC=Your_Root_Domain
  11. Right-click CN=Services, and then click Properties.
  12. On the Security tab, click Advanced.
  13. Verify that the Allow inheritable permissions from the parent to propagate to this object and all child objects. Include these with entries explicitly defined here check box is selected. If the check box is selected, click OK. Then, go to step 15.
  14. If the check box that is mentioned in step 13 is not selected, click to select the check box. Then, click OK.
  15. Repeat steps 11 to 14 for each object in the list of objects that you identified in step 1.
  16. On the File menu, click Exit.
  17. Restart the Simple Mail Transfer Protocol (SMTP) service and the Microsoft Exchange Routing Engine service.

REFERENCES

For more information about how to use ADSI Edit to apply permissions, visit the following Microsoft Web site:

http://www.microsoft.com/technet/prodtechnol/exchange/guides/E2k3ADPerm/55806ed0-3976-49c2-adbe-8f6fd056ef16.mspx

For more information about mail queues, click the following article number to view the article in the Microsoft Knowledge Base:

823489 How to use Queue Viewer to troubleshoot mail flow issues in Exchange Server 2003

Modification Type:MajorLast Reviewed:11/1/2005
Keywords:kbtshoot kbprb KB907969 kbAudITPRO
©2004 Microsoft Corporation. All rights reserved.