MSExchangeTransport 1035

 

上一次修改主题: 2011-03-19

本文对特定 Exchange 事件进行了说明并提供了可能的解决方案。如果您在此处未找到所需内容,请尝试在 Exchange 2010 帮助中进行搜索。

Details

Product Name

Exchange

Product Version

14.0

Event ID

1035

Event Source

MSExchangeTransport

Category

SmtpReceive

Symbolic Name

SmtpReceiveAuthenticationFailed

Message Text

Inbound authentication failed with error %1 for Receive connector %2. The authentication mechanism is %3. The source IP address of the client who tried to authenticate to Microsoft Exchange is [%4].

Explanation

This event indicates that a remote Exchange\ server cannot authenticate in association with the SMTP Receive component of the Microsoft Exchange Transport service on the local Microsoft Exchange server.

The Microsoft Exchange Transport service controls the sending and receiving of messages in Microsoft Exchange Server 2010. The Exchange 2010 transport pipeline uses the SMTP Receive component to validate the message content before the message can be submitted to the Submission queue. The SMTP Receive component applies a series of receive events and, if configured, antivirus and anti-spam events to validate the message. Additionally, the SMTP Receive component authenticates connections to route internal users' messages among servers.

For more information, see the following topics:

User Action

To troubleshoot this issue, do one or more of the following:

  • 有关相关事件,请查看 Exchange 2010 服务器上的应用程序日志和系统日志。例如,在此事件之前和之后发生的事件可能会提供有关导致出现此错误的根本原因的详细信息。

  • Review the Operations Console in Operations Manager for detailed information about the cause of this problem. For more information, see the "Introduction" section in this article.

  • Increase diagnostics logging to log the components in the transport pipeline. To increase diagnostics logging for the Transport components, follow these steps:

    1. In the Exchange Management Console, expand Server Configuration, and then click Hub Transport.

      Note   For and Edge Transport server, click Edge Transport.

    2. In the Actions pane, click Manage Diagnostic Logging Properties for the appropriate server.

    3. Expand MSExchangeTransport.

    4. Click the following components, click Expert, and then click Configure for each component:

    • Smtpreceive

    • Smtpsend

    • DSN

    • Components

    • Remote Delivery

    • Categorizer

  • Verify that the time on the Exchange server is synchronized with the domain controller. Also, verify that the SPN for the SMTP service is registered correctly. For more information, see Microsoft Knowledge Base article 979174, Event ID: 1035 is logged when some e-mail messages are stuck in a remote delivery queue in a Microsoft Exchange Server 2007 environment or in a Microsoft Exchange Server 2010 environment.

  • Increase diagnostics logging for Kerberos on the Exchange server. To do this, follow these steps:

    1. Start Registry Editor (Regedit.exe).

    2. Create the following registry entry if it does not already exist:

      HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Lsa\Kerberos\Parameters
      Value name: loglevel
      Value type: REG_DWORD
      Value data: 1

    3. Examine the Application log for any Kerberos-related events. After you finish troubleshooting the issue, set the loglevel value to 0 (zero) or remove the value.

  • Enable diagnostics logging on the affected receive connector. To do this, follow these steps:

    1. Run the following commands from the Exchange Management shell:

      Set-ReceiveConnector "name of connector " -ProtocolLoggingLevel Verbose

      Set-TransportServer Exchange01 -ConnectivityLogEnabled $true

      Set-TransportServer "Exchange01" -IntraOrgProtocolLoggingLevel Verbose

    2. After Event ID 1035 is logged, , examine the SmtpReceive log file. By default, this file is located in the following directory:

      %ProgramFiles%\Microsoft\Exchange Server\V14\TransportRoles\Logs\ProtocolLog\SmtpReceive

  • If the server is part of an Exchange hosting environment, consider disabling Windows authentication on the client receive connector. In this scenario, you may be unable to control the authentication mechanism used by clients. Clients may be trying to connect by using Basic authentication. To remove Windows authentication, follow these steps:

    1. Start the Exchange Management Console.

    2. Expand Server Configuration, and then click the Hub Transport server.

    3. Click the Receive Connectors tab, click the Client receive connector, and then click Properties in the Actions pane.

    4. Click the Authentication tab, and then click to clear the Integrated Windows authentication check box.

    5. Click OK.

  • 使用自助支持选项、协助支持选项及其他资源来解决您的问题。您可以从 Exchange Server 解决方案中心访问这些资源。在该页中,单击导航窗格中的“自助支持选项”可使用自助服务选项。自助服务选项包括搜索 Microsoft 知识库、在 Exchange Server 论坛上发布问题及其他方法。或者,您可以在导航窗格中单击“协助支持选项”来联系 Microsoft 支持专业人员。由于您的组织可能已有直接与 Microsoft 产品支持服务联系的特定流程,因此,请您务必先查看您组织的准则。

For more information about the transport pipeline in Exchange 2010, see 了解传输管道.

To obtain transport architecture diagrams, see the Exchange Server Team blog article, Exchange 2010 Transport Architecture Diagrams Available for Download.

每个博客的内容及其 URL 如有更改,恕不另行通知。每个博客中的内容均“原样”提供,既不承担任何担保,也未赋予任何权利。对包含的脚本示例或代码的使用受 Microsoft 使用条款中指定的条款的约束。