| Event Id | 9297 |
| Source | MS Exchange MTA |
| Description | The user /o=ORGanization /ou=SITE1 /cn=Configuration /cn=Servers /cn=SERVER1 /cn=Microsoft Private MDB has caused a security violation. Locality table (LTAB) index: 5. Windows NT error code: 0. [BASE IL MAIN BASE 1 237] (14) |
| Event Information | This Event ID and 3161 from the same source, are logged in the Windows NT Event Viewer application log if the account listed on the Override tab of the Site Connector in the Microsoft Exchange Administrator program does not have Service Account Admin rights on the Configuration and Site containers. To resolve this, give the account on the Override tab Service Account Admin Permissions on the Configuration and Site containers Click the Site Connector, and on the File menu, click Properties. Note the Windows NT account that is specified on the Override tab, and close the Site Connector Properties page. Click the Configuration container, and on the File menu, click Properties. On the Permissions tab, check to see if the account noted in step 1 is listed. If it is, verify that it has Service Account Admin permissions. If it is not listed, add the account, and give it Service Account Admin permissions. Click the Site container, and on the File menu, click Properties. On the Permissions tab, check to see if the account noted in step 1 is listed. If it is, verify that it has Service Account Admin permissions. If it is not listed, add the account, and give it Service Account Admin permissions. |
| Reference Links | Err Msg: Event IDs 9297 and 3161 Recipient Policy Cannot Match the FQDN of Any Server in the Organization, 5.4.8 NDRs SMTP Mail Backing Up in MTA Queue, Events 9297 and 3161 Appear Mail Going to IMC or MSMail Stays in Outbox |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.