Troubleshooting Event ID 9554 using ADFind Utility

Event Type:�Warning
Event Source:�MSExchangeIS
Event Category:�General
Event ID:�9554
User:��N/A

Description:
Unable to update Mailbox SD in the DS.
Mailbox Guid: f83fade5-8dc0-4f58-96bb-f5fd00b6e7c4. Error Code 0x8004010f

This is due to change in permission on Mailbox as stated in the event.

To resolve this issue, we need to identify the mailbox with the problem. KB http://support.microsoft.com/default.aspx?scid=kb;en-us;322308�explains the procedure to locate the Mailbox that causes this Issue. These steps are time consuming & little complicated and have to be executed very carefully.
�
ADFind utility comes to rescue. We can automate this task using excellent ADFind utility from MVP Joe Richards (joe@joeware.net). ADFind can be downloaded from http://www.joeware.net/win/free/tools/adfind.htm. Currently the version available is Version 1.26.00.
�
Save the downloaded file to %systemroot%\system32 on your machine or on the server from where you want to execute and use the following syntax. Substitute the GUID portion of "msExchMailboxGUID" as stated in the event.
�
Syntax:
adfind -gc -b "" -binenc -f " msExchMailboxGUID={{GUID:8be63a77-8f64-498d-a98d-6ee955e5883d}}" -dn
�
Running this command will Convert the 32-character GUID from the Event ID 9554 description to an msExchMailbox value.
�
Sample output:

C:\Documents and Settings\Administrator>adfind -gc -b "" -binenc -f " msExchMailboxGUID={{GUID:8be63a77-8f64-498d-a98d-6ee955e5883d}}" -dn
�
AdFind V01.26.00cpp Joe Richards (joe@joeware.net) February 2005
Transformed Filter:� msExchMailboxGUID=w\3A\E6\8Bd\8F\8DI\A9\8Dn\E9U\E5\88\3D
Using server: <FQDN>
Directory: Windows Server 2003
dn:CN=Mktg User,CN=Users,DC=Contosso,DC=com
1 Objects returned
�
So,�ADFind, will not only convert the 32-character GUID from the Event ID 9554 description to an msExchMailbox value but it also gives the DN of of that msExchMailbox value.
�
Now that you have the�DN of of that msExchMailbox value, you need to identify the user�as stated in the output of ADFind and change mailbox permissions;
�
1. Start the Active Directory Users and Computers snap-in.
�
2. Right-click the user whose permissions you want to change, and then click Properties.
�
3. Click the Security tab, click to select the Allow inheritable permissions from parent to propagate to this object check box, and then click OK.

NOTE: Do not select this check box for the built-in Administrator or for the Domain\Administrator objects.
�

ADFind can be downloaded from http://www.joeware.net/win/free/tools/adfind.htm. For more information regarding this tool, PING MVP Joe Richards (joe@joeware.net).

Microsoft corporation and/or its respective suppliers make no representations about the suitability, reliability, or accuracy of the information and related graphics contained herein. All such information and related graphics are provided "as is" without warranty of any kind. Microsoft and/or its respective suppliers hereby disclaim all warranties and conditions with regard to this information and related graphics, including all implied warranties and conditions of merchantability, fitness for a particular purpose, workmanlike effort, title and non-infringement. You specifically agree that in no event shall Microsoft and/or its suppliers be liable for any direct, indirect, punitive, incidental, special, consequential damages or any damages whatsoever including, without limitation, damages for loss of use, data or profits, arising out of or in any way connected with the use of or inability to use the information and related graphics contained herein, whether based on contract, tort, negligence, strict liability or otherwise, even if Microsoft or any of its suppliers has been advised of the possibility of damages.