Thursday, August 23, 2007

Trouble shooting 5.1.1 errors in large Enterprise environment




The user A is belonging to Child Domain A. the user B is belonging to Child Domain B. The Forest infrastructure is as below. User A can sent mail to user B, User B cannot sent mail or reply any of the mails coming from User A. When user B tries to reply, he gets 5.1.1, and mail bounce now, keep it mind these domains are two child domain, and domain controllers on both domains are GC (Global Catalog servers)

Your message did not reach some or all of the intended recipients.

Subject: RE: Test

Sent: 8/21/2007 11:42 AM

The following recipient(s) could not be reached:

oz@usa.Smtp25.org on 8/21/2007 11:42 AM

The e-mail account does not exist at the organization this message was sent to. Check the e-mail address, or contact the recipient directly to find out the correct address.

<sscncchaex2.bio.ri.Smtp25.net #5.1.1>

Now we have three DC/GC involving into our problem scenario

DC1. Archq.SI.Smtp25.net (user A resides)

DC2.BIO.SI.Smtp25.net Another DC/GC (

DC3.BIOSI.Smtp25.net (User B Resides)


We will ask first domain controller is the user object reside in the GC (Global Catalog)

adfind -h DC1.archq.si.Smtp25.net –b dc=archq,dc=RI,dc=Smtp25,dc=Net -gc -f (samaccountname= oz)

It returned below information, so we know the information is there.Now we will ask second DC/GC same question

adfind -h DC2.bio.si.Smtp25.net –b dc=archq,dc=RI,dc=Smtp25,dc=Net -gc -f (samaccountname= oz)

The information is being returned as well.Now we will ask third DC/GC same question

adfind -h DC2.bio.si.Smtp25.net –b dc=archq,dc=RI,dc=Smtp25,dc=Net -gc -f (samaccountname= oz)

We get object cannot be found, BINGO here is where the problem lays. The Third DC/GC does not have the information about the requested user

The Adfind is incredible fast and efficient. I am appreciating more every day how useful Adfind toll is.

We are still working on the failed replication issue, we know the replication failed due to orphan object in AD, and trying to empty to deleted item dumpster in the effected DC/GC

If Joe Nagy won't lose his patient on me I am going to write more about Adfind and exchange and share with Exchange community.


Using server: bfvadtcdc2.bio.ri.Smtp25.net:3268

Directory: Windows Server 2003

dn:CN=Ozugurlu\, Oz (Consultant),OU=Users,OU=CSC,OU=NHQ Region,DC=archq,DC=ri,DC=Smtp25,DC=net

>objectClass: top

>objectClass: person

>objectClass: organizationalPerson

>objectClass: user

>cn: Ozugurlu, Oz (Consultant)

>sn: Ozugurlu

>l: Falls Church

>st: Virginia

>title: Senior Messaging Administrator

>description: NHQJPK1FS1, ETS Ops, 05/26/06

>postalCode: 22042

>physicalDeliveryOfficeName:

>telephoneNumber:

>facsimileTelephoneNumber:

>givenName: Oz

>distinguishedName: CN=Ozugurlu\, Oz (Consultant),OU=Users,OU=CSC,OU=NHQ Region,DC=archq,DC=ri,DC=Smtp25,DC=net

>instanceType: 0

>whenCreated: 20060525194528.0Z

>whenChanged: 20070728124729.0Z

>displayName: Ozugurlu, Oz [Consultant]

>garbageCollPeriod: 0

>mDBUseDefaults: FALSE

>extensionAttribute1:

>extensionAttribute2:

>extensionAttribute3:

>extensionAttribute4:

>extensionAttribute5:

>extensionAttribute6:

>extensionAttribute7:

>extensionAttribute8:

>extensionAttribute9:

>extensionAttribute10:

1 Objects returned


Best

Oz ozugurlu

No comments: