You are currently offline, waiting for your internet to reconnect

Event ID 2160 is logged in the Application log after you map a user to a certificate in Exchange Server 2010

Symptoms
Assume that you use one of the following account mapping methods together with the altSecurityIdentities attribute to map a user to a certificate in Microsoft Exchange Server 2010:
  • Public Key SHA1 Hash
  • Subject Key Identifier
  • Issuer & Serial Number
  • RFC822
In this situation, the following event is logged in the Application log. Additionally, some Exchange Server 2010 functionality may not work as expected for the user.
Log Name: Application
Source: MSExchange ADAccess
Event ID: 2160
Level: Warning
Computer: Exchange.domain.com
Description:
Process w3wp.exe (). Recipient object CN=<User>,OU=Users,OU=site,DC=lab,DC=contoso,DC=com read from DC.domain.com failed validation and will be excluded from the result set. Set event logging level for Validation category to Expert to get additional events about each failure.
Cause
This issue occurs because Exchange Server 2010 does not support the account mapping methods that are listed in the "Symptoms" section.
Resolution
To resolve this issue, use the following account mapping methods that are supported by Exchange Server 2010:
  • Subject and Issuer Name X509:<I>issuer<S>subject
  • Subject X509:<S>subject
More information
Active Directory 2008 enables alternative account mappings by using the altSecurityIdentities attribute. This attribute contains the user’s certificate information that is used by the Kerberos Authentication service to identify the associated Active Directory user account.

For more information about how to map a user to a certificate, go to the following Microsoft website:
Properties

Article ID: 2737853 - Last Review: 08/03/2012 09:18:00 - Revision: 1.0

Microsoft Exchange Server 2010 Enterprise, Microsoft Exchange Server 2010 Service Pack 1, Microsoft Exchange Server 2010 Service Pack 2, Microsoft Exchange Server 2010 Standard

  • kbsurveynew kbtshoot kbexpertiseinter KB2737853
Feedback
.name='ms.dqp0';m.content='true';document.getElementsByTagName('head')[0].appendChild(m);" onload="var m=document.createElement('meta');m.name='ms.dqp0';m.content='false';document.getElementsByTagName('head')[0].appendChild(m);" src="http://c1.microsoft.com/c.gif?"> tml>