When running get-serverhealth checks on our on prem 2016 Exchange servers, after upgrading to cu22, I am now seeing compliance failures. Upon further investigation using the powershell command
Get-HealthReport -Server $server | where {$_.AlertValue -ne "healthy"} | fl
SerializationData : {0, 1, 0, 0, 0, 255, 255, 255, 255, 1, 0, 0, 0, 0, 0, 0...}
RunspaceId : 788647cb-a334-46ca-914e-2c28aa7f98ff
Server : nsc-dagc-06
State : NotApplicable
HealthSet : Compliance
HealthGroup : CustomerTouchPoints
AlertValue : Unhealthy
LastTransitionTime : 11/24/2021 10:04:15 AM
MonitorCount : 43
HaImpactingMonitorCount : 0
and running
Get-MonitoringItemIdentity -Identity "Compliance" -Server $server | where {$_.Name -eq "ELC
MailboxSLAMonitor"}
SerializationData : {0, 1, 0, 0, 0, 255, 255, 255, 255, 1, 0, 0, 0, 0, 0, 0...}
RunspaceId : 788647cb-a334-46ca-914e-2c28aa7f98ff
Server : nsc-dagc-06
HealthSetName : Compliance
Name : ELCMailboxSLAMonitor
TargetResource : Compliance
ItemType : Monitor
Identity : Compliance\ELCMailboxSLAMonitor\Compliance
IsValid : True
ObjectState : New
I then checked the Exchange logs and saw the following
Probe: {Compliance/ELCComponent_LastSuccessTooLongAgo} Mailbox guid: {xxxxx} In Org: {} Is archive: {IsArchiveMailbox = False} With stack trace: {The difference: 385.248046682816 days between today: 11/24/2021 12:24:19 PM and the date of last successful ELC run: 11/4/2020 6:27:07 AM for mailbox: e43093f4-01ae-4958-a4ad-75ca6b828392 is above the threshold: 7; Exception message: Microsoft.Exchange.Context.Core.SignalSignalTypeNotRegisteredException.} Get last ELC exception from Export-MailboxDiagnosticLogs -Component MRM then statistics with -ExtendedProperties and look at all ELC properties, specifically the value of ELCLastSuccessTimestamp. If mailbox is Archive use -Archive.
so I ran Export-MailboxDiagnosticLogs against the mailbox after using get-mailbox and the guid it gave
Export-MailboxDiagnosticLogs -Component MRM -Identity xxxxx
RunspaceId : cbe6428b-38e2-4059-a087-24ed75cf34b7
MailboxLog : 11/24/2021 12:24:18 PM Exception:
Microsoft.Exchange.Context.Core.SignalSignalTypeNotRegisteredException: Forbidden Exception: This is an
unregistered SignalType 399.
at Microsoft.Exchange.Context.Core.SignalTypeMapper.GetSignalType(Int32 signalTypeId)
at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.SignalFolderExpirationEnforcer.EnlistItem(Prope
rtyArrayProxy itemProperties)
at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.SignalFolderExpirationEnforcer.DeleteItemsPastR
etention(IFolder folder, QueryFilter pastRetentionQueryFilter)
at
Microsoft.Exchange.MailboxAssistants.Assistants.ELC.SignalFolderExpirationEnforcer.CollectItemsToExpire()
at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.SysCleanupEnforcerBase.CollectItemsWithGuard()
at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.SysCleanupEnforcerBase.InvokeInternal()
at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.SysCleanupEnforcerBase.Invoke()
at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.ELCAssistant.InvokeSysCleanupEnforcer(MailboxDa
taForTags mailboxDataForTags, SysCleanupEnforcerBase enforcer)
at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.ELCAssistant.InvokeCore(MailboxSession
mailboxSession, List`1 customDataToLog, StatisticsLogEntry logEntry, ElcParameters parameters)
at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.ELCAssistant.<>c__DisplayClass30_0.<InvokeInter
nalAssistant>b__0()
at Microsoft.Exchange.Common.IL.ILUtil.DoTryFilterCatch(Action tryDelegate, Func`2 filterDelegate,
Action`1 catchDelegate)
11/23/2021 12:18:00 PM Exception:
Microsoft.Exchange.Context.Core.SignalSignalTypeNotRegisteredException: Forbidden Exception: This is an
unregistered SignalType 399.
at Microsoft.Exchange.Context.Core.SignalTypeMapper.GetSignalType(Int32 signalTypeId)
at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.SignalFolderExpirationEnforcer.EnlistItem(Prope
rtyArrayProxy itemProperties)
at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.SignalFolderExpirationEnforcer.DeleteItemsPastR
etention(IFolder folder, QueryFilter pastRetentionQueryFilter)
at
Microsoft.Exchange.MailboxAssistants.Assistants.ELC.SignalFolderExpirationEnforcer.CollectItemsToExpire()
at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.SysCleanupEnforcerBase.CollectItemsWithGuard()
at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.SysCleanupEnforcerBase.InvokeInternal()
at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.SysCleanupEnforcerBase.Invoke()
at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.ELCAssistant.InvokeSysCleanupEnforcer(MailboxDa
taForTags mailboxDataForTags, SysCleanupEnforcerBase enforcer)
at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.ELCAssistant.InvokeCore(MailboxSession
mailboxSession, List`1 customDataToLog, StatisticsLogEntry logEntry, ElcParameters parameters)
at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.ELCAssistant.<>c__DisplayClass30_0.<InvokeInter
nalAssistant>b__0()
at Microsoft.Exchange.Common.IL.ILUtil.DoTryFilterCatch(Action tryDelegate, Func`2 filterDelegate,
Action`1 catchDelegate)
11/22/2021 12:20:23 PM Exception:
Microsoft.Exchange.Context.Core.SignalSignalTypeNotRegisteredException: Forbidden Exception: This is an
unregistered SignalType 399.
at Microsoft.Exchange.Context.Core.SignalTypeMapper.GetSignalType(Int32 signalTypeId)
at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.SignalFolderExpirationEnforcer.EnlistItem(Prope
rtyArrayProxy itemProperties)
at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.SignalFolderExpirationEnforcer.DeleteItemsPastR
etention(IFolder folder, QueryFilter pastRetentionQueryFilter)
at
Microsoft.Exchange.MailboxAssistants.Assistants.ELC.SignalFolderExpirationEnforcer.CollectItemsToExpire()
at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.SysCleanupEnforcerBase.CollectItemsWithGuard()
at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.SysCleanupEnforcerBase.InvokeInternal()
at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.SysCleanupEnforcerBase.Invoke()
at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.ELCAssistant.InvokeSysCleanupEnforcer(MailboxDa
taForTags mailboxDataForTags, SysCleanupEnforcerBase enforcer)
at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.ELCAssistant.InvokeCore(MailboxSession
mailboxSession, List`1 customDataToLog, StatisticsLogEntry logEntry, ElcParameters parameters)
at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.ELCAssistant.<>c__DisplayClass30_0.<InvokeInter
nalAssistant>b__0()
at Microsoft.Exchange.Common.IL.ILUtil.DoTryFilterCatch(Action tryDelegate, Func`2 filterDelegate,
Action`1 catchDelegate)
11/21/2021 12:21:36 PM Exception:
Microsoft.Exchange.Context.Core.SignalSignalTypeNotRegisteredException: Forbidden Exception: This is an
unregistered SignalType 399.
at Microsoft.Exchange.Context.Core.SignalTypeMapper.GetSignalType(Int32 signalTypeId)
at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.SignalFolderExpirationEnforcer.EnlistItem(Prope
rtyArrayProxy itemProperties)
at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.SignalFolderExpirationEnforcer.DeleteItemsPastR
etention(IFolder folder, QueryFilter pastRetentionQueryFilter)
LogName : MRM
Identity : xxxxx
IsValid : True
ObjectState : Unchanged
I can't find anything that tells me what code 399 is? Has anyone else seen this when upgrading to cu22? When I exported the mailbox diagnostic logs for that user (there are multiple mailboxes generating this on multiple servers with no obvious pattern) I did see
ELCLastSuccessTimestamp 11/4/2020 6:27:07 AM
when if the Manager Folder Assistant was working correctly on the mailboxes causing the compliance issue, the ELCLastSuccessTimestamp time stamp and date would be within 7 days of today. Could something be corrupted and prohibiting the MFA from checking this mailbox? This did not show up with the last cu, cu20.
0 Answers