Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Question
Thursday, April 19, 2018 12:01 PM
Hi guys,
I have kind of strange event in the logs:
The account 'Domain\Server$' provided valid credentials, but it does not have submit permissions on SMTP Receive connector 'Default Frontend MailServer'; failing authentication.
The description is pretty clear what is the problem but it makes scratching my head. There are some services running on the server like WSUS, File Server and they are all set also to send e-mail notification which works without any problem but why the is trying to access the receive connector? It makes no sense. Is possible to see in the logs what is happening or if it was an e-mail? Then I could see the subject and check if it comes from one of the services running there.
thanks in advance
All replies (10)
Friday, April 20, 2018 12:32 AM
Does the server have some sort of mail sending requirement? Based on your description, it looks like it needs to relay emails out.
I would run message tracking to find out what it is sending tho.
Sunday, April 22, 2018 1:53 PM
Hi,
We can enable protocol log on "Default Fronted mailServer" receive connector, figure as below:
Then, locate to %ExchangeInstallPath%TransportRoles\Logs\FrontEnd\ProtocolLog\SmtpReceive, and check the log by sender IP and error message.
Best Regards,
Allen Wang
Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact [email protected].
Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.
Monday, April 23, 2018 11:21 AM
Actually - no, nothing special. Like in the case of WSUS server - it was configured like the others but I have in the logs only one of them. I've checked for example the send connectors and the server has permissions and in the settings they don't have to use smtp authentication. I'm kind of wondering why the WSUS server would need to relay an e-mail. It makes no sense.
Monday, April 23, 2018 11:42 AM
Unless someone setup WSUS to send emails to the admins on what has been downloaded or installed on the servers etc.
Monday, April 23, 2018 12:34 PM
it is set but on 4 WSUS servers and except 1 none of the others was logged on exchange.
Monday, April 23, 2018 1:37 PM
I've also check the logs and looked around the time when the event was logged in the Windows Event logs but I can't find anything there with the IP or Hostname of the server.
Wednesday, April 25, 2018 3:24 AM
Any other service or application on those servers?
Best Regards,
Allen Wang
Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact [email protected].
Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.
Monday, April 30, 2018 11:10 AM
Have you compared the configuration on the working and not working one?
Wednesday, May 2, 2018 8:40 AM
yes, now I did it and made some changes. Let's see if the event comes again.
Friday, May 4, 2018 9:42 AM
Any update now?
Best Regards,
Allen Wang
Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact [email protected].
Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.