A user is locked out of a mailbox because an incorrect PIN was entered multiple times
Topic Last Modified: 2007-11-16
The Microsoft Exchange Server 2007 Management Pack for Operations Manager monitors the Windows Application log on computers that are running Exchange Server 2007 and generates this alert when the event or events specified in the following Details table are logged.
To learn more about this alert, if you are using Microsoft Operations Manager 2005, do one or more of the following:
From the Operator Console, select this alert, and then click the Properties tab. Review the description of the alert that includes the variables specific to your environment.
From the Operator Console, click the Events tab, and then double-click the event in the list for which you want to review the event description. Review the events that have been logged that meet the criteria of this Operations Manager alert.
To learn more about this alert, if you are using System Center Operations Manager 2007, do one or more of the following:
From the Operations Console, double-click this alert, and then click the General tab. Review the description of the alert that includes the variables specific to your environment.
From the Operations Console, double-click this alert, and then click the Alert Context tab. Review the events that have been logged that meet the criteria of this Operations Manager alert.
Details
Product Name |
Exchange |
Product Version |
8.0 (Exchange Server 2007) |
Event ID |
1012 |
Event Source |
MSExchange Unified Messaging |
Alert Type |
Warning |
MOM Rule Path |
Microsoft Exchange Server/Exchange 2007/Unified Messaging |
MOM Rule Name |
A user is locked out of a mailbox because an incorrect PIN was entered multiple times. The PIN must be reset before the user can log on to the mailbox from the telephone again. |
Explanation
This Warning event indicates that a Unified Messaging–enabled user tried to log on to their mailbox multiple, consecutive times with an incorrect PIN. In addition, this event may indicate that the user has reset their PIN one or more times.
Therefore, the user was locked out by the Unified Messaging (UM) system. When this occurs, the UM users will not be able to access their mailbox by telephone until their PIN has been reset by the user or by the Exchange administrator. Specifically, when this event is logged, the UM server may issue a voice prompt such as, "Logon failed. For security reasons, you've been locked out of the system. Reset your PIN in Outlook, or contact the administrator for your organization." The UM server then disconnects the telephone call with the user. This event may occur when the following conditions are true:
When a UM-enabled user has incorrectly entered their PIN multiple, sequential times. Every time that a user tries to log on by using a PIN and does not use the correct password is considered a logon failure.
When the number of failed logon attempts exceeds the value that is defined in the Failed logon attempts before lockout UM mailbox policy setting with which the user is associated. For information about additional options that you can configure at the UM policy level, see Organization Configuration > Unified Messaging > UM Mailbox Policies > PIN Policies Tab.
User Action
To resolve this warning, do the following:
Reset the users UM PIN. You can do this by using Exchange Management Console or the Exchange Management Shell. Alternatively, you can have the user reset their own PIN using Microsoft Office Outlook 2007. For more information, see How to Reset a User's Unified Messaging PIN and How to Reset the Voice Mail PIN.
After the PIN is reset, the user must use the new PIN to log on to the UM system. The UM PIN is generated by the UM server and e-mailed to the user. Users can change their UM PIN when they first use UM to log on to their mailbox. Alternatively, they can change it upon later use of the voice mail system.
For more information about how to configure PIN security for UM-enabled users, see Configuring PIN Security for UM-enabled Users.
For More Information
To search the Microsoft Knowledge Base articles based on criteria that generated this alert, visit the Search the Support Knowledge Base (KB) Web site.
To review Exchange 2007 event message articles that may not be represented by Exchange 2007 MOM alerts, see the Events and Errors Message Center.
If you are not already doing so, consider running the tools that Microsoft Exchange offers to help administrators analyze and troubleshoot their Exchange environment. These tools can help you make sure that your configuration is in line with Microsoft best practices. They can also help you identify and resolve performance issues, improve mail flow, and better manage disaster recovery scenarios. Go to the Toolbox node of the Exchange Management Console to run these tools now. For more information about these tools, see Toolbox in the Exchange Server 2007 Help.