Event 8197 is repeatedly logged in the Application log on a server that is running Exchange Server 2003 or Exchange 2000 Server
On This PageSUMMARYEvent 8197 may be logged in the Application log every 25 minutes on a server that is running Microsoft Exchange Server 2003 or Microsoft Exchange 2000 Server. This issue occurs when the Exchange Server background task that polls the free/busy system folder is not able to bind to a global catalog server. This free/busy polling task uses the Microsoft Windows referral mechanism to locate a global catalog server instead of using the Exchange Server DSAccess component. Therefore, Event 8197 may be repeatedly logged even if Exchange Server appears to be running correctly. To resolve this issue, use one or more of the following methods:
SYMPTOMSOn a computer that is running Exchange Server 2003 or
Exchange 2000 Server, the following event may be logged in the Application log
every 25 minutes: Event Type: Error CAUSE The most common reason that Event 8197 is logged is that
the free/busy polling task is not able to bind to a global catalog server.
Most Exchange Server tasks use the DSAccess component to locate global catalog servers. However, the free/busy polling task relies on the Windows referral mechanism to locate a global catalog server. The method that the Windows referral mechanism uses to select a global catalog server differs slightly from the method that is used by the DSAccess component.Therefore, the free/busy polling task may not use the same global catalog server as most other Exchange Server tasks. Therefore, the free/busy polling task may be unsuccessful even when other tasks on the Exchange server run correctly. The "Description" line in the event message indicates that the error number is 0x80040111. This error number corresponds to Error -2147221231. Error -2147221231 has the following definition: ecLoginFailure-MAPI_E_LOGON_FAILED Event 8197 may be generated when one or more of the following
conditions are true:
RESOLUTIONTo resolve this issue, use one or more of the following
methods. Method 1: Restart the Exchange Server servicesIf Exchange Server was not restarted after the domain controllers and the global catalog servers in the organization were restarted, you must restart the Exchange Server services. To do this, follow these steps:
Method 2: Verify the LAN Manager authentication settingsImportant This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:322756 (http://support.microsoft.com/kb/322756/) How to back up and restore the registry in Windows You may experience the issue that is described in the "Symptoms" section when the following conditions are true:
This setting might also be modified by a Group Policy. To verify whether the setting is modified by a Group Policy, view the LAN Manager Authentication Level Group Policy object. To do this, follow these steps. Note Because there are several versions of Microsoft Windows, the following steps may be different on your computer. If they are, see your product documentation to complete these steps.
823659 (http://support.microsoft.com/kb/823659/)
Client, service, and program incompatibilities that may occur when you modify security settings and user rights assignments
305379 (http://support.microsoft.com/kb/305379/) Authentication Problems in Windows 2000 with NTLM 2 Levels Above 2 in a Windows NT 4.0 Domain
239869 (http://support.microsoft.com/kb/239869/) How to enable NTLM 2 authentication
Method 3: Troubleshoot connectivity to the global catalog server to which the free/busy polling task tries to bindStep 1: Determine the global catalog server to which the free/busy polling task tries to bind
Note This registry entry differs from the following registry entry. You can use the following entry registry to configure the DSAccess component to use only one directory server or global catalog server: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Exchange\Exchange Provider\DS Note This registry entry is intended for use on client computers only.
This registry entry should not be present on the server computer. If the registry entry is present, a problem occurs..Note The directory server registry subkey pertains only to directory access that involves the DSAccess component. After you determine the global catalog server to which the free/busy polling task tries to bind, perform general network connectivity troubleshooting steps to make sure that the global catalog server is responsive and is operating correctly. Step 2: Verify the trust relationship between domainsVerify that a trust relationship exists between the domain in which Exchange Server is running and the domain that contains the global catalog server to which the free/busy polling task tries to bind.If you have a mixed-mode environment that has Exchange Server 5.5 running in a Windows NT 4.0 domain, the issue might be caused by a missing trust relationship between the Windows NT 4.0 domain and the domain that contains the global catalog server. For free/busy compatibility between a server that is running Exchange Server 5.5 and a server that is running Exchange 2000 Server or Exchange Server 2003, the free/busy polling task must impersonate the Exchange Server 5.5 service account. If no trust relationship exists between the Windows NT 4.0 domain and the domain that contains the global catalog server, Exchange Server generates Event 8197. This occurs when the free/busy polling task unsuccessfully tries to bind to the global catalog server by using the Exchange Server 5.5 service account. This scenario is more likely to occur when a global catalog server is in a root domain and Exchange Server is in a child domain in the same Active Directory site. The Windows referral mechanism ignores domain membership when the mechanism tries to locate a global catalog server. Consider the following sample scenario:
To work around this issue, follow these steps:
For more information, click the following article number to view the article in the Microsoft Knowledge Base: 828764 (http://support.microsoft.com/kb/828764/)
"Event 8197" error message is logged repeatedly in the Application event log
Step 3: Verify whether an incorrect global catalog server entry is in Active DirectoryIf the particular global catalog server with which you experience this issue is responsive and appears to function correctly, verify whether an incorrect global catalog server entry is located in Active Directory. Incorrect global catalog server entries may also cause Event 8197 errors.To verify whether these entries exist, enter the following query at a command prompt: ldifde -f output.ldf -d "dc=mydomain,dc=com" -t 3268 -p subtree -r "(&(objectclass=*)(name=SERVERNAME))" In this command, replace mydomain and
com with the corresponding names of your domain.
Also, replace SERVERNAME with the name of the global
catalog server to which the free/busy polling task tries to bind. After you run
this command, view the contents of the Output.ldf file to determine whether
entries exist that resemble the following output:dn: CN=SERVERNAME,CN=Computers,DC=mysubdomain,DC=mydomain,DC=com In this sample output, the global catalog server entry is
incorrect. This entry incorrectly appears in the Computers
container as follows: distinguishedName: CN=SERVERNAME,CN=Computers,DC=na,DC=mydomain,DC=com CN=Computers A valid global catalog server must have an entry in the
Domain Controllers container, as shown in the following sample
output:dn: CN=SERVERNAME,OU=Domain Controllers,DC=mydomain,DC=com When both correct and incorrect global catalog server entries
appear in Active Directory, a DNS query for a global catalog server may return
the incorrect global catalog server entry. Therefore, the free/busy polling
task's attempt to bind to the global catalog server is unsuccessful.
distinguishedName: CN=SERVERNAME,OU=Domain Controllers,DC=mydomain,DC=com An incorrect global catalog server entry may be created when the following conditions are true:
Method 4: Verify whether Outlook is installed on the Exchange serverWe recommend that you do not install Outlook on the same computer that is running Exchange Server. This is because conflicts might occur between the Exchange Server versions and the Outlook versions of the following files:
For example, Exchange Server uses the Emsabp32.dll file to pass credentials, to authenticate, and to perform an Nspbind operation to the global catalog server for address lookup operations. The Outlook version of this file prompts users for their credentials when it is used to perform these operations. The Exchange Server version of this file uses a different mechanism to pass the credentials for the local system account under which Exchange Server runs. Therefore, if you have Outlook installed on a computer that is running Exchange Server, you may experience authentication errors or other instability in the Exchange Server environment. To resolve this issue, remove Outlook, and then reinstall Exchange Server. MORE INFORMATIONThe Exchange Server Mailbox Manager component also relies on
the Windows referral mechanism to locate a global catalog server. Generally,
when you experience Event 8197 errors that occur with the free/busy polling
task, the Mailbox Manager also experiences failures. In this situation, both of
the following events are logged in the Application log: Event Type: Error Event Type: Error APPLIES TO
| Article Translations
|

Back to the top
