Fix available to alleviate event ID 9548

re: Fix available to alleviate event ID 9548

Scott Bueffel — Wed, 22 Mar 2006 19:36:05 GMT

Thank you, thank you, thank you. I used to have a one-off script to set the attribute for disabled accounts (since we wanted the mailboxes to still function) until NoMAS came along. Actually, I have always preferred MsAccntSidFixer, and I use it to this day. Now I will be able to stop doing that once applied. Thank you so much.

Scott.

Finally a hotfix to change how Exchange handles user accounts without a master account SID.

Aaron Tiensivu's Blog — Wed, 22 Mar 2006 20:06:13 GMT

I'm sure a lot of you have seen event 9548 in your event logs from time to time.
If 9548 isn't ringing a bell, maybe this example text will:

Disabled user /o= Organization Name /ou= Administrative Group Name /cn=Recipients/cn= Computer Name does not

re: Fix available to alleviate event ID 9548

Deji — Wed, 22 Mar 2006 20:31:58 GMT

Well done.

Now, let's examine #2 more closely:

You wrote: If the user account is enabled ...then use objectSid.

No problem with that.

You wrote:
if it is disabled and has msExchMasterAccountSid set to the well-known SELF SID...then use objectSid

My question: Which ObjectSID? The disabled account's SID or SELF?

You wrote:
if the user is disabled has does not have msExchMasterAccountSid...then use objectSid

Again, a question:
Which ObjectSID? The disabled account's SID or SELF?

The last 2 descriptions are not clear (to me) because, in one instance, there is MAS, and in another, there isn't. So, which SID are we using? The way I read KB903158 is that Exchange will always assume that MAS is equal to SELF SID and will ALWAYS use SELF SID even when there is no MAS associated with the disabled account. But your description does not make this clear when you mentioned objectSID.

re: Fix available to alleviate event ID 9548

Deji — Wed, 22 Mar 2006 20:45:20 GMT

Forget what I wrote, ladies and gentlemen. The effects of the morning coffee just set in :)

re: Fix available to alleviate event ID 9548

Alex Seigler — Wed, 22 Mar 2006 20:46:45 GMT

For both questions, the answer is the objectSID of the disabled user account. When the store sees "SELF", it grabs the objectSID and uses that (because that is what SELF means).

So, for disabled user, if MAS is set to SELF, or if it is not set at all, we use the objectSID of the disabled user. The only time we would use the SID in MAS as-is is when the attribute is populated and not SELF (like an NT4 SID or a SID from a different forest).

-aseigler

re: Fix available to alleviate event ID 9548

JamesK — Wed, 22 Mar 2006 21:48:51 GMT

I think I am missing something. I got the hotfix from support. When I run the hotfix it says: "You can install this hotfix on Service Pack 1 only".
I didn't see mention of this limitation anywhere.

Henrik Walther Blog » Blog Archive » Fix available to alleviate event ID 9548

Henrik Walther Blog » Blog Archive » Fix available to alleviate event ID 9548 — Wed, 22 Mar 2006 21:50:58 GMT

PingBack from http://blogs.msexchange.org/walther/2006/03/22/fix-available-to-alleviate-event-id-9548/

re: Fix available to alleviate event ID 9548

Kevin Bingham — Wed, 22 Mar 2006 21:55:00 GMT

Beautiful, Andy. The KBarticle indicates a pre-SP2 version, though, with a February date. Will there be a post-SP2 version?

re: Fix available to alleviate event ID 9548

Kevin Bingham — Wed, 22 Mar 2006 21:57:25 GMT

That should read "Alex", of course...

re: "You can install this hotfix on Service Pack 1 only

aseigler — Wed, 22 Mar 2006 21:57:30 GMT

Correct, the build available right now is for SP1 only. The fix for SP2 servers will be out very shortly.

-aseigler

Beat Exchange Event ID 9548!

(e)Mail Insecurity — Thu, 23 Mar 2006 06:29:58 GMT

Beat Exchange Event ID 9548!

(e)Mail Insecurity — Thu, 23 Mar 2006 06:31:09 GMT

re: Fix available to alleviate event ID 9548

Kevin — Thu, 23 Mar 2006 12:34:02 GMT

Thankyou.
This has been a major annoyance for us when running daily backup jobs, as backup exec always complains when it finds a mailbox without the SELF permission thats associated to a disabled user. even just one disabled user and the backup job reports as having failed. Thankyou again for finally fixing this up.

/var/log » Exchange hotfix: finally!

/var/log » Exchange hotfix: finally! — Thu, 23 Mar 2006 19:43:49 GMT

PingBack from http://www.varlog.us/2006/03/23/exchange-hotfix-finally/

re: Fix available to alleviate event ID 9548

Ilja Summala — Fri, 24 Mar 2006 10:10:26 GMT

5 years of waiting...finally. Way things are going AD and Exchange might start to be better together after all.

re: Fix available to alleviate event ID 9548

Michel — Fri, 24 Mar 2006 13:22:15 GMT

Hmm, have to wait until the PostSP2 version arrives, but since we've waited a long time for this a few more days/weeks don't mind.

I would like a peek on the 'Accepted CDCR' list....

re: Fix available to alleviate event ID 9548

Dave Trevallion — Fri, 24 Mar 2006 14:03:23 GMT

Quick question, if we apply the pre SP2 fix onto a SP1 build is it likely that we will then have to apply the post SP2 fix after we apply SP2.

We are just planning our SP2 rollout and need to decide to apply the fix now or wait for the post SP2 hotfix version.

Very pleased to see this fix though as it's a big issue to us

re: Fix available to alleviate event ID 9548

aseigler — Fri, 24 Mar 2006 16:07:53 GMT

Dave Trevallion, that is correct. I expect the SP2 version to be released any day now.

-aseigler

re: Fix available to alleviate event ID 9548

Veno Mouse — Fri, 24 Mar 2006 22:23:52 GMT

Hmm. ADModify.Net has always worked well in the past. Maybe it's just not well known.

re: Exchange 12 setup error

Jewel — Sat, 25 Mar 2006 01:24:34 GMT

Total: 6 objects. 5 succeeded, 1 failed.

Copy Exchange Files
Completed
Status: Completed.
Elapsed Time: 00:34:16

Organization Preparation
Completed
Status: Completed.
Elapsed Time: 00:20:15

Bridgehead Server Role
Completed
Status: Completed.
Elapsed Time: 00:02:00

Mailbox Server Role
Completed
Status: Completed.
Elapsed Time: 00:04:16

Client Access Server Role
Completed
Status: Completed.
Elapsed Time: 00:01:32

Unified Messaging Server Role
Failed
Installing product E:\server\en\i386\Setup\ServerRoles\UnifiedMessaging\esenus32.MSI failed. Fatal error during installation. Error code is 1603.
Fatal error during installation

Elapsed Time: 00:14:22

re: Fix available to alleviate event ID 9548

Athif — Sun, 26 Mar 2006 16:33:45 GMT

How come the fix is released only for SP1?!!

re: Fix available to alleviate event ID 9548

Alex Seigler — Sun, 26 Mar 2006 17:47:11 GMT

Please read the previous comments, the SP2 fix will be available very soon.

-aseigler

re: Fix available to alleviate event ID 9548

Yonkey — Mon, 27 Mar 2006 09:43:33 GMT

This wont work on Exchange 2000 SP3 correct?

re: Fix available to alleviate event ID 9548

aseigler — Mon, 27 Mar 2006 16:55:37 GMT

Yonkey:

Correct, there are no plans at this time to release a fix for Exchange 2000.

-aseigler

re: Fix available to alleviate event ID 9548

Matt — Tue, 28 Mar 2006 05:54:01 GMT

Alex,
PSS needs to get it's act together then. They've just told me four times that the fix is included in SP2 (including after talking to an "engineer")
How are we meant to find out that the SP2 patch is still on its way when PSS don't know and neither the KB article nor this blog entry say so?

re: Fix available to alleviate event ID 9548

Dan Sheehan — Tue, 28 Mar 2006 16:14:59 GMT

Well done Alex, you are as usual an exceptional coder!
And I suspected Mr.NOMAS wrote this hot fix when I saw the KB article independant of this post. :)

Please keep the good mods coming!
Dan.

re: Fix available to alleviate event ID 9548

Alan — Fri, 31 Mar 2006 18:34:01 GMT

Okay... what I don't understand is. How am I supposed to get this Hotfix? Why isn't it just "available" like every other hotfix Microsoft has ever released. Am I supposed to pay $250 to call PSS so I can get this one hotfix... that's rediculous!! Can't someone just send it to me, I have Exchange 2003 SP1.

re: Fix available to alleviate event ID 9548

Exchange — Fri, 31 Mar 2006 19:31:12 GMT

Alan,

if you call us and ask for the hotfix up front - you will not be charged for the call.

There is actually a pretty good reason for you having to call in for this: this is a hotfix and as such, it did not go through as much testing as rollups or service packs do. So - by calling in, you give us your contact information. If there is a regression or a problem found in the hotfix later, we have a way to contact you and tell you about it and what to do. So - I'd suggest you call in. :)

Weekend reading

subject: exchange — Sun, 02 Apr 2006 16:05:53 GMT

Today this list is longer, since I hadn't the time to post it last week. Sorry...

Exchange on NAS:...

re: Fix available to alleviate event ID 9548

Shannon — Tue, 04 Apr 2006 04:13:37 GMT

PSS do seem to think this fix is *included* in SP2. Apparently, the keyword "kbexchange2003presp2fix" in the KB article means to them that "this fix is included in SP2".

Could the KB be updated to include a definitive statement about SP2 support?

I await the SP2 version with bated breath!

re: Fix available to alleviate event ID 9548

White Ninja — Tue, 04 Apr 2006 04:23:15 GMT

BEWARE of hotfix 903158 if you are using BlackBerry handheld devices in your environment.

I applied 903158 on March 24th and it broke the ability for users to send email from their handheld devices -- everything else seemed to work fine; running E3SP1 and BES 4.0.3.11.

KB 912918 did not fix the problem, had RIM and Rogers -- Service Provider on the horn for 8 hours attempting to resolve. End result, removed the hotfix.

RIM suggested upgrading to 4.0.4 or 4.1; though could not confirm if this would solve the problem.

Still waiting to hear back from RIM SE's for a workaround or fix.

BES = POS

re: Fix available to alleviate event ID 9548

Alex Seigler — Tue, 04 Apr 2006 16:09:14 GMT

The fix has now been released for SP2. The fix is KB916783. The article is not ready, but the content will be identical to 903158.

Thanks,

-aseigler

re: Fix available to alleviate event ID 9548

Jad — Thu, 06 Apr 2006 00:27:18 GMT

Thanks for the update. Any comments on the message by White Ninja for BES compatibility ?

Thanks !

re: Fix available to alleviate event ID 9548

aseigler — Thu, 06 Apr 2006 00:43:34 GMT

I heard of one other instance of BES issues, and it was resolved with 912918. This fix definitely falls into the category in the "Cause" section of 912918.

It doesn't explicitly say so in 912918, but I believe that in order for the changes it recommends to take affect immediately, you must restart the store. Otherwise, you must wait for the cache to flush, similar to what is discussed in 179065 and various other articles.

-aseigler

re: Fix available to alleviate event ID 9548

jdonaldson — Tue, 11 Apr 2006 18:46:03 GMT

Installed the SP2 version with no problem for my Blackberry users. I had previously gone through the steps in 912918 and am running BES 4.0.4.

-jdonaldson

re: Fix available to alleviate event ID 9548

BGT — Wed, 12 Apr 2006 22:35:41 GMT

Where can you get the Post SP2 fix? I have tried to download it from premier support but it states that it is not currently available.

re: Fix available to alleviate event ID 9548

aseigler — Wed, 12 Apr 2006 23:02:54 GMT

BGT: You have to contact support and request KB916783. It is not available for general download.

-aseigler

re: Fix available to alleviate event ID 9548

OliverM — Fri, 14 Apr 2006 22:15:02 GMT

Hi there,

Hi you guys at M$ - just so you know this patch breaks Blackberry Enterprise Server...

I'm guessing you need to finetune it some more or Blackberry have some work to do.

Oliver

re: Fix available to alleviate event ID 9548

Exchange — Fri, 14 Apr 2006 22:36:06 GMT

OliverM,

Please see this: http://blogs.technet.com/exchange/archive/2006/03/22/422799.aspx#424417

re: Fix available to alleviate event ID 9548

vwebb — Thu, 27 Apr 2006 21:55:06 GMT

attempts to contact PSS for 916783 have failed spectacularly. is there a secret password i can use to get the hotfix? thanks!

re: Fix available to alleviate event ID 9548

Exchange — Fri, 28 Apr 2006 00:31:55 GMT

vwebb,

What happened? There is no secret password needed for you to get this patch :). When you call in, just be clear that all you need was a hotfix. I am not sure what happened but maybe try again?

re: Fix available to alleviate event ID 9548

vwebb — Fri, 28 Apr 2006 21:19:00 GMT

called into PSS support noted i needed a hotfix for exchange 03, gave the article number. the liasons(?) were adamant on a few different occasions the aritcle couldn't be found and without an article there is no hotfix. even tried sighting this blog but no one would bite.

re: Fix available to alleviate event ID 9548

Oldeman — Wed, 03 May 2006 21:58:10 GMT

When I installed the hotfix (E2003 SP1, Bes 3.6), Blackberry users could no longer send. KB912918 doesn't help because the BES Administrator already had Send As permission. I removed BES Admin and added using the KB article, but there was no change.