DOCUMENT:Q247787  12-OCT-2001  [exchange]
TITLE   :XFOR: SMTP Mail Staying in MTA Queue, with Events 9297 and 3161
PRODUCT :Microsoft Exchange
PROD/VER::5.0,5.5
OPER/SYS:
KEYWORDS:

======================================================================
-------------------------------------------------------------------------------
The information in this article applies to:

 - Microsoft Exchange Server, versions 5.0, 5.5 
-------------------------------------------------------------------------------

SYMPTOMS
========

When you are administering Microsoft Exchange Server, you may discover that
Simple Mail Transport Protocol (SMTP) mail is sitting in the Message Transfer
Agent (MTA) queue rather than going out through the Internet Mail Service (IMS).
The following events may appear in the Event Viewer:

   Event ID: 9297
   Source: MSExchangeMTA
   Description: The user /o=ORGanization /ou=SITE1 /cn=Configuration /cn=Servers
   /cn=SERVER1 /cn=Microsoft Private MDB has caused a security violation.
   Locality table (LTAB) index: 5. Windows NT error code: 0. [BASE IL MAIN BASE
   1 237] (14)

   Event ID: 3161
   Source: MSExchangeMTA
   Description: An internal MTA error occurred. The logon violated security.
   Entity name: . Error code: 0. [XAPI MAIN BASE 1 92] (14)

RESOLUTION
==========

To resolve this issue, make sure that the Permissions pages for the
organization, site, and configuration objects list the service account with the
Service Account Admin role:

1. Make sure that the Permissions page and the rights and roles are displayed in
   Exchange Administrator:

   a. On the Tools menu, click Options.

   b. Click to select the "Show Permissions page for all objects" check box.

   c. Click to select the "Display rights for roles on Permissions page" check
      box.

2. Click the organization object, and then click Properties on the File menu.

3. Click the Permissions tab, add the service account, and then click Service
   Account Admin from the Role box.

4. Click the site object, and then click Properties on the File menu.

5. Click the Permissions tab, add the service account, and then click Service
   Account Admin from the Role box.

6. Click the configuration object, and then click Properties on the File menu.

7. Click the Permissions tab, add the service account, and then click Service
   Account Admin from the Role box.

8. Stop and then restart IMS and MTA services.

9. Send an Internet-bound e-mail to verify that the IMS is working properly.


Additional query words: SOX980128700065

======================================================================
Keywords          :  
Technology        : kbExchangeSearch kbExchange500 kbExchange550 kbZNotKeyword2
Version           : :5.0,5.5
Issue type        : kbprb

=============================================================================

THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS
PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND.  MICROSOFT DISCLAIMS
ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES
OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.  IN NO
EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR
ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL,
CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF
MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE
POSSIBILITY OF SUCH DAMAGES.  SOME STATES DO NOT ALLOW THE EXCLUSION
OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES
SO THE FOREGOING LIMITATION MAY NOT APPLY.

Copyright Microsoft Corporation 2001.