MSExchangeTransport 1023

 

上一次修改主题: 2011-06-21

本文对特定 Exchange 事件进行了说明并提供了可能的解决方案。如果您在此处未找到所需内容,请尝试在 Exchange 2010 帮助中进行搜索。

Details

Product Name

Exchange

Product Version

14.0

Event ID

1023

Event Source

MSExchangeTransport

Category

SmtpReceive

Symbolic Name

SmtpReceiveSubmitDenied

Message Text

SMTP rejected a message from '%1' with '%2' connector. The authenticated user '%3' doesn't have permission to submit e-mail messages to this server.

Explanation

This Error event indicates that the Microsoft Exchange Transport service SMTP Receive component can't process an SMTP message submission from a particular user.

The Microsoft Exchange Transport service controls the sending and receiving of messages in Microsoft Exchange Server 2010. The Exchange 2010 transport pipeline uses the SMTP Receive component to validate the message content before the message can be submitted to the Submission queue. The SMTP Receive component applies a series of receive events and, if configured, antivirus and anti-spam events to validate the message. Additionally, the SMTP Receive component contacts the Active Directory directory service to validate users who submit messages for delivery. This includes connections to route internal users' messages among servers.

Exchange 2010 controls submit permissions to receive connectors by using ACLs that are applied directly to the receive connector. The following ACLs are available on a receive connector:

  • Accept any Sender

  • Accept Authentication Flag

  • Accept Authoritative Domain Send

  • Accept Exch50

  • Accept Organization Headers

  • Accept XShadow

  • Accept Routing Headers

  • Bypass Anti-Spam

  • Bypass Message Size Limit

  • Submit Messages for MLS

  • Submit Messages to any Recipient

  • Submit Messages to Server

The Client <ServerName> receive connector is used to receive SMTP connections from non-MAPI clients, such as POP3 and IMAP4 clients. The Default <ServerName> connector is used to accept connections from other transport servers. By default, members of the Authenticated Users group have the following Allow permissions assigned on the Client <ServerName> receive connector:

  • Bypass Anti-Spam

  • Submit Messages to any Recipient

  • Submit Messages to Server

  • Accept Routing Headers

This event represents an authentication error for a user who tries to submit an SMTP message. This event may be logged when the user does not have sufficient rights to submit a message to a particular receive connector.

For more information, see the following topics:

User Action

To troubleshoot this issue, do one or more of the following:

  • 有关相关事件,请查看 Exchange 2010 服务器上的应用程序日志和系统日志。例如,在此事件之前和之后发生的事件可能会提供有关导致出现此错误的根本原因的详细信息。

  • Review the Operations Console in Operations Manager for detailed information about the cause of this problem. For more information, see the "Introduction" section in this article.

  • Enable diagnostics logging on the affected receive connector. To do this, follow these steps:

    1. Run the following commands from the Exchange Management shell:

      Set-ReceiveConnector "name of connector" -ProtocolLoggingLevel Verbose

      Set-TransportServer Exchange01 -ConnectivityLogEnabled $true

      Set-TransportServer "Exchange01" -IntraOrgProtocolLoggingLevel Verbose

    2. After Event ID 1023 is logged, examine the SmtpReceive log file. By default, this file is located in the following directory:

      %ProgramFiles%\Microsoft\Exchange Server\V14\TransportRoles\Logs\ProtocolLog\SmtpReceive

  • Verify the authentication settings for the receive connector. For more information, see the "Receive Connector Permissions" and "Receive Connector Authentication Settings" sections in 了解接收连接器.

  • Use the ADSI Edit tool to assign the user permissions to the receive connector. To do this, follow these steps:

    1. Click Start, click Run, type adsiedit.msc, and then click OK.

    2. Connect to the Configuration container.

    3. Expand the following path:

      • CN=Configuration,DC=tailspintoys,DC=com

      • CN=Services

      • CN=Microsoft Exchange

      • CN=<Organization>

      • CN=Administrative Groups

      • CN=Exchange Administrative Group

      • CN=Servers

      • CN=<ServerName>

      • CN=Protocols

      • CN=SMTP Receive Connectors

    4. In the details pane, right-click the appropriate connector (for example, CN=Client <ServerName>), and then click Properties.

    5. Click the Security tab, and then assign the user the appropriate permissions. For example, assign the Allow permission Submit Messages to Server.

  • 使用自助支持选项、协助支持选项及其他资源来解决您的问题。您可以从 Exchange Server 解决方案中心访问这些资源。在该页中,单击导航窗格中的“自助支持选项”可使用自助服务选项。自助服务选项包括搜索 Microsoft 知识库、在 Exchange Server 论坛上发布问题及其他方法。或者,您可以在导航窗格中单击“协助支持选项”来联系 Microsoft 支持专业人员。由于您的组织可能已有直接与 Microsoft 产品支持服务联系的特定流程,因此,请您务必先查看您组织的准则。

For more information about the transport pipeline in Exchange 2010, see 了解传输管道.

To obtain transport architecture diagrams, see the Exchange Server Team blog article, Exchange 2010 Transport Architecture Diagrams Available for Download.

每个博客的内容及其 URL 如有更改,恕不另行通知。每个博客中的内容均“原样”提供,既不承担任何担保,也未赋予任何权利。对包含的脚本示例或代码的使用受 Microsoft 使用条款中指定的条款的约束。