DOCUMENT:Q152624 01-APR-2001 [exchange] TITLE :XADM: Err Msg: Event IDs 9297 and 3161 PRODUCT :Microsoft Exchange PROD/VER::4.0,4.5,5.0,5.5 OPER/SYS: KEYWORDS:kbusage exc4 exc5 exc55 ====================================================================== ------------------------------------------------------------------------------- The information in this article applies to: - Microsoft Exchange Server, versions 4.0, 5.0, 5.5 - Microsoft BackOffice Small Business Server version 4.5 ------------------------------------------------------------------------------- SUMMARY ======= The following Event IDs are logged in the Windows NT Event Viewer application log if the account listed on the Override tab of the Site Connector in the Microsoft Exchange Administrator program does not have Service Account Admin rights on the Configuration and Site containers. Note: This behavior can also occur by having the wrong password in the startup parameters for the message transfer agent (MTA) service. Application log: Event id: 9297 Source = MS Exchange MTA The user /o=ORGanization /ou=SITE1 /cn=Configuration /cn=Servers /cn=SERVER1 /cn=Microsoft Private MDB has caused a security violation. Locality table (LTAB) index: 5. Windows NT error code: 0. [BASE IL MAIN BASE 1 237] (14) Event id: 3161 Source = MS Exchange MTA An internal MTA error occurred. The logon violated security. Entity name: . Error code: 0. [XAPI MAIN BASE 1 92] (14) NOTE: Always use the Small Business Server Console to make changes to user accounts as the User Manager for Domains does not update linked modules in Small Business Server 4.5. The use of User Manager for Domains in a Small Business Server 4.5 Environment may result in this error. MORE INFORMATION ================ To resolve this, give the account on the Override tab Service Account Admin Permissions on the Configuration and Site containers 1. Click the Site Connector, and on the File menu, click Properties. Note the Windows NT account that is specified on the Override tab, and close the Site Connector Properties page. 2. Click the Configuration container, and on the File menu, click Properties. On the Permissions tab, check to see if the account noted in step 1 is listed. If it is, verify that it has Service Account Admin permissions. If it is not listed, add the account, and give it Service Account Admin permissions. 3. Click the Site container, and on the File menu, click Properties. On the Permissions tab, check to see if the account noted in step 1 is listed. If it is, verify that it has Service Account Admin permissions. If it is not listed, add the account, and give it Service Account Admin permissions. NOTE: Missing permissions can also prevent the Message Transfer Agent from transferring mail to its own local information store. Additional query words: awaiting delivery ====================================================================== Keywords : kbusage exc4 exc5 exc55 Technology : kbAudDeveloper kbExchangeSearch kbExchange500 kbExchange550 kbExchange400 kbZNotKeyword2 kbSBServSearch kbSBServ450 Version : :4.0,4.5,5.0,5.5 Issue type : kbhowto ============================================================================= THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY. Copyright Microsoft Corporation 2001.