Event ID 12002

[pykim]

I have been searching through Google and Microsoft support site and found nothing on event id 12002. I would appreciate if anyone has insight on this. A sample log entry follows:

Event Type: Error
Event Source: MSExchangeIS
Event Category: Content Engine
Event ID: 12002
Date: 10/10/2002
Time: 9:59:28 AM
User: N/A
Computer: MAIL
Description:
Error 80070005-80000000 occurred while processing message <> from 'Vos experts RONA / Your RONA experts'.

For more information, click

http://www.microsoft.com/contentredirect.asp.

This occurs several times throughout the day. I have been lucky and a user has called me about this email since he could not delete it from his inbox. I have to login to Outlook using my admin accoutn and delete it for him. When he tries to delete, he gets a permissions denial.

I am running W2K server SP2, Exchange 2000 SP3. Thanks.

 

[noeleon]

http://www.microsoft.com/technet/tr...rodtechnol/isa/proddocs/isadocs/ISA_12002.asp

 

[amacqueen]

I am having a similar problem. The user is unable to delete the message that is being referenced in the event. I have been unable to find any reference on how to remove a corrupt message from the mailbox. Anyone have any ideas?

 

[Dovinshka]

Try this.

http://support.microsoft.com/default.aspx?scid=kb;en-us;262054

 

[virtualranger]

Copied from a message on Eventid.net:

I have had this problem for about 6 months and have finally resolved it with some help from Microsoft Consulting Services:

Cause: It appears that this error is caused by some form of corrupt email in the Information Store.

Fix: Give your user account the Exchange Services or Exchange Domain Servers groups. Please note you need to remove yourself from Domain Admins or Administrators as these accounts are explicitly denied access to users mailboxes. See Q262054 for more info.

Once you have done this you need to search your M drive of your mail server for text containing the originating email address contained in the event log.

Once found use your email client, either Web Access or Outlook to open the offending mailbox and delete the message. Do not delete the file directly from Windows Explorer, use the mail client.

Please note your company might have some security issues around your ability to access the users mailbox, but then you could always get the user to delete the offending message. Cheers,
Jamie

 

[amacqueen]

Thanks to all. The M drive solution with Outlook Express worked like a charm.

 

[QuiteHarmless]

It is great to have a solution. But i however am unable to find the person with the problem. My logs are filling with this:

Event Type: Error
Event Source: MSExchangeIS
Event Category: Content Engine
Event ID: 12002
Date: 3/5/2003
Time: 9:02:46 AM
User: N/A
Computer: SERVER
Description:
Error 8004011B-820003A2 occurred while processing message <> from 'Stephen King'.

For more information, click

http://www.microsoft.com/contentredirect.asp.

Yet i have had no comments from any of the staff that they are having issues. I would however like to get rid of this message, but without someone having an issue i have no way of tracking it down. Suggestions?

 

[paxa]

I'm need help. A same problem.

Error 80040305-80000000 occurred while processing message <> from 'Alexey Krukov'.

I can't find corrupted e-mail ...

 

[randy3w]

I had the exact error code (8004011B-820003A2) as QuiteHarmless and this thread gave me the clue to solve.

We had this error posting to the event log every second. Our users store their emails into .pst files in Outlook 2000. We found that our problem was due a bad email with corrupt data in it. It appears that Outlook was trying every second to move the email from the Exchange group into the Personal folders and failing because of the corrupt data. When we deleted the mail from the exchange group (on Outlook Web Access) the Event errors stopped.

We lucked into finding the recipient by doing a Text search (frot the From field) in all the folders and subfolders in the ExchGSvr folder. We found it in on of the .Log Files in the MDBDATA folders. We were able to open the file and find the text of the message along with the recipient name (and were also able to see the corrupt data). Had we done this search after the Exchange backup we never would have found it since the log file would have gone away.


I'm not sure if you will be able to use this approach to find the recipient if your log files are gone. I can offer a couple suggestions:

Search all the files in the MBX folder for the string 'Stephen King'. I personally don't know how to do this but someone else may.

If you have a small number of users, check all their Exchange folder for mail that has not moved to the Personal Folders.


We also realized (after solving the the problem) that the Events stopped over the weekend and started again in the mornings and stopped in the evenings. We now realize that this was when our recipient started his outlook client. Our recipient was always the first person in.

I hope this long winded answer can provide you some clues.

Good luck

 

[bcaston]

Two other ways to search for the message are.
1. Search the tracking logs using the dos find command for name or some subset of the name. THe tracking log only contains the smtp address.
2. Using Exchange System Manager sort the users by log on or log off time and compare these times to the times the 12002 starts or stops in the event log.
3. Searching the Exchange M drive is another solution. One of the downsides is the STM file will increase due to mime conversions. This is discussed in, How to Search the Exchange Store for a Keyword or Subject (812856)

 

[bcaston]

Another alternative is to enable store logging / Mailbox / Logons. This will enable you to see who is logging on when the 12002 is logged. Depending on how busy the server is there may be several logons. You will probably need to create Outlook profiles to view the contents of the the user's InBox to identify the offending message. Search for the message that has a From Name that matches the 12002 error.