Event ID 2008 is logged in the Application log on a domain controller after you install Exchange 2003 Service Pack 2

After you install Microsoft Exchange Server 2003 Service Pack 2 (SP2), the following event is logged in the Application event log on a domain controller:

Event Type: Error
Event Source: NTDS SDPROP
Event Category: Internal Processing
Event ID: 2008
Date: date
Time: time
User: NT AUTHORITY\ANONYMOUS LOGON
Computer: ServerName
Description: Internal error: The security descriptor propagation task encountered an error while processing the following object. The propagation of security descriptors may not be possible until the problem is corrected.

Object: CN=object1,CN=Microsoft Exchange System Objects,DC=Contoso,DC=Com
Additional Data
Error value: -1026 JET_errRecordTooBig, Record larger than maximum size
Internal ID: 20903d5

You experience this problem if you have the Microsoft Exchange Server 2003 Connector for Lotus Notes installed in the organization.

This problem occurs because the Exchange 2003 SP2 Setup program does not automatically update the Lotus Notes proxy address generator file. This file is named Ntspxgen.dll.

The version of Ntspxgen.dll that is included with Exchange 2003 SP2 is 6.5.7638.1. However, after you install Exchange Server 2003 SP2, you notice that an earlier version of Ntspxgen.dll remains installed on the computer.

Because of this problem, the Recipient Update Service may generate many additional Lotus Notes proxy addresses.

To resolve this problem, follow these steps:

1. Manually copy the latest version of the Ntspxgen.dll file to the computer. To do this, first copy the latest version of the Ntspxgen.dll file from the location from which you extracted the Exchange 2003 SP2 files. Typically, the Exchange 2003 SP2 files are located in the following folder:
   E3sp2eng\setup\i386\exchange\address\notes\i386
   After you copy the latest version of the Ntspxgen.dll file, paste the file to the following folder on the computer:
   Exchsrvr\address\notes\i386
2. Stop the Recipient Update Service, and then remove the PROXYADDRESSES values from each object that is mentioned in event ID 2008. For more information about how to do this, click the following article number to view the article in the Microsoft Knowledge Base:
   914036  (http://support.microsoft.com/kb/914036/ ) Windows Server 2003-based domain controllers show a decrease in performance when they process certain Active Directory objects

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

For more information about other issues that may occur with an earlier version of the Ntspxgen.dll file, click the following article number to view the article in the Microsoft Knowledge Base: