Event ID 2158,2161 MSExchange ADAccess

December 27, 2018

Description (MSExchange ADAccess 2158 Validation): Process Microsoft.Exchange.AddressBook.Service.exe. Recipient object CN=XXX,OU=XXX,OU=XX,OU=XX,OU=XX,DC=XXX,DC=XXX,DC=XXX read from <Domain Controller> failed validation. A partially valid object will be returned.  Set event logging level for Validation category to Expert to get additional events about each failure.

Description (MSExchange ADAccess 2161 Validation): Process Microsoft.Exchange.AddressBook.Service.exe Recipient object CN=XXX,OU=XXX,OU=XXX,OU=XXX,DC=XXXX,DC=org read from <Domain Controller> failed validation. Attribute: ExchangeLegacyDN. Error message: You must provide a value for this property.. Invalid data: .

A recent customer who migrated from Exchange 2003 to 2010 are getting repeated errors in the event log from MSExchange ADAccess. They come in pairs quote often and increasing the logging level as suggested only increases the frequency without giving you any further details.

Symptom: The Warning 2158 and 2161 appear repeatedly for the objects that have already been mail-disabled, and the legacyDN is null or references a target that no longer exists like in the case of decommissioning Exchange 2003.

Cause: This can happen after you've mail-disabled the object but they're still references to it in other AD objects

Resolution: Install Exchange 2010 SP1 Rollup 5 or the recently released SP2

Tony Sollars
Tony comes to us with many years of experience both as a Senior Consultant who has worked all over the world but also as a leader who has started and ran his own businesses successfully.

STOP your computer problems with our
Expert IT SUPPORT today!

Our Scalable Cost effective IT support means you can stop focusing on your IT issues and whats it's going to cost, and focus on growing your business instead.

Contact us

Need a quote.