| Event Id | 13003 |
| Source | MSExchange POP3 Interface |
| Description | Logon attempt from N.N.N.N to corpdomain/derek has failed: HrLookupCredentials() call failed with error Logon failure: unknown user name or bad password |
| Event Information | According to Microsoft: CAUSE: A custom recipient object on a Microsoft Exchange Server computer does not have a physical mailbox associated with it. Therefore, it is not possible for a POP3 or IMAP client to access a custom recipient object on a Microsoft Exchange Server computer. This behavior is by design. RESOLUTION: Follow these steps: 1. In Exchange Administrator, make sure the Exchange service account has permissions at the site, configuration, and server levels. 2. In Control Panel, double-click Services and make sure all Exchange services start by using this account: a. Select an Exchange service, and then click Startup. b. Make sure that Log On As is selected, and that the Exchange service account is listed. 3. In User Manager for Domains, make sure that this account has the following user rights: • Act as part of the operating system • Log on as a service • Log on locally • Restore files and directories 4. Stop the information store, and then restart it. 5. To test the new configuration, use telnet to connect to port 110. |
| Reference Links | Outlook Express and Outlook repeatedly prompt you for your password XFOR: Testing POP3 Through Telnet Does Not Work, Generates Event 13003 XCON: POP3 and IMAP4 Clients Cannot Log On to Exchange Server, and Event ID 13003 Occurs XADM: Custom Recipients Cannot Be Accessed via IMAP or POP3 Client |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.