Score:0

Ex 2016 Cu22 upgrade is now causing ELCLastSuccessTimestamp and get-serverhealth compliance errors

cn flag
Bbb

When running get-serverhealth checks on our on prem 2016 Exchange servers, after upgrading to cu22, I am now seeing compliance failures. Upon further investigation using the powershell command

Get-HealthReport -Server $server | where {$_.AlertValue -ne "healthy"} | fl

SerializationData       : {0, 1, 0, 0, 0, 255, 255, 255, 255, 1, 0, 0, 0, 0, 0, 0...}
RunspaceId              : 788647cb-a334-46ca-914e-2c28aa7f98ff
Server                  : nsc-dagc-06
State                   : NotApplicable
HealthSet               : Compliance
HealthGroup             : CustomerTouchPoints
AlertValue              : Unhealthy
LastTransitionTime      : 11/24/2021 10:04:15 AM
MonitorCount            : 43
HaImpactingMonitorCount : 0

and running

Get-MonitoringItemIdentity -Identity "Compliance" -Server $server | where {$_.Name -eq "ELC
MailboxSLAMonitor"}


SerializationData : {0, 1, 0, 0, 0, 255, 255, 255, 255, 1, 0, 0, 0, 0, 0, 0...}
RunspaceId        : 788647cb-a334-46ca-914e-2c28aa7f98ff
Server            : nsc-dagc-06
HealthSetName     : Compliance
Name              : ELCMailboxSLAMonitor
TargetResource    : Compliance
ItemType          : Monitor
Identity          : Compliance\ELCMailboxSLAMonitor\Compliance
IsValid           : True
ObjectState       : New

I then checked the Exchange logs and saw the following

Probe: {Compliance/ELCComponent_LastSuccessTooLongAgo} Mailbox guid: {xxxxx} In Org: {} Is archive: {IsArchiveMailbox = False} With stack trace: {The difference: 385.248046682816 days between today: 11/24/2021 12:24:19 PM and the date of last successful ELC run: 11/4/2020 6:27:07 AM for mailbox: e43093f4-01ae-4958-a4ad-75ca6b828392 is above the threshold: 7; Exception message: Microsoft.Exchange.Context.Core.SignalSignalTypeNotRegisteredException.} Get last ELC exception from Export-MailboxDiagnosticLogs -Component MRM then statistics with -ExtendedProperties and look at all ELC properties, specifically the value of ELCLastSuccessTimestamp. If mailbox is Archive use -Archive.

so I ran Export-MailboxDiagnosticLogs against the mailbox after using get-mailbox and the guid it gave

Export-MailboxDiagnosticLogs -Component MRM -Identity xxxxx


RunspaceId  : cbe6428b-38e2-4059-a087-24ed75cf34b7
MailboxLog  : 11/24/2021 12:24:18 PM Exception:
              Microsoft.Exchange.Context.Core.SignalSignalTypeNotRegisteredException: Forbidden Exception: This is an
              unregistered SignalType 399.
                 at Microsoft.Exchange.Context.Core.SignalTypeMapper.GetSignalType(Int32 signalTypeId)
                 at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.SignalFolderExpirationEnforcer.EnlistItem(Prope
              rtyArrayProxy itemProperties)
                 at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.SignalFolderExpirationEnforcer.DeleteItemsPastR
              etention(IFolder folder, QueryFilter pastRetentionQueryFilter)
                 at
              Microsoft.Exchange.MailboxAssistants.Assistants.ELC.SignalFolderExpirationEnforcer.CollectItemsToExpire()
                 at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.SysCleanupEnforcerBase.CollectItemsWithGuard()
                 at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.SysCleanupEnforcerBase.InvokeInternal()
                 at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.SysCleanupEnforcerBase.Invoke()
                 at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.ELCAssistant.InvokeSysCleanupEnforcer(MailboxDa
              taForTags mailboxDataForTags, SysCleanupEnforcerBase enforcer)
                 at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.ELCAssistant.InvokeCore(MailboxSession
              mailboxSession, List`1 customDataToLog, StatisticsLogEntry logEntry, ElcParameters parameters)
                 at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.ELCAssistant.<>c__DisplayClass30_0.<InvokeInter
              nalAssistant>b__0()
                 at Microsoft.Exchange.Common.IL.ILUtil.DoTryFilterCatch(Action tryDelegate, Func`2 filterDelegate,
              Action`1 catchDelegate)
              11/23/2021 12:18:00 PM Exception:
              Microsoft.Exchange.Context.Core.SignalSignalTypeNotRegisteredException: Forbidden Exception: This is an
              unregistered SignalType 399.
                 at Microsoft.Exchange.Context.Core.SignalTypeMapper.GetSignalType(Int32 signalTypeId)
                 at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.SignalFolderExpirationEnforcer.EnlistItem(Prope
              rtyArrayProxy itemProperties)
                 at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.SignalFolderExpirationEnforcer.DeleteItemsPastR
              etention(IFolder folder, QueryFilter pastRetentionQueryFilter)
                 at
              Microsoft.Exchange.MailboxAssistants.Assistants.ELC.SignalFolderExpirationEnforcer.CollectItemsToExpire()
                 at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.SysCleanupEnforcerBase.CollectItemsWithGuard()
                 at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.SysCleanupEnforcerBase.InvokeInternal()
                 at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.SysCleanupEnforcerBase.Invoke()
                 at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.ELCAssistant.InvokeSysCleanupEnforcer(MailboxDa
              taForTags mailboxDataForTags, SysCleanupEnforcerBase enforcer)
                 at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.ELCAssistant.InvokeCore(MailboxSession
              mailboxSession, List`1 customDataToLog, StatisticsLogEntry logEntry, ElcParameters parameters)
                 at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.ELCAssistant.<>c__DisplayClass30_0.<InvokeInter
              nalAssistant>b__0()
                 at Microsoft.Exchange.Common.IL.ILUtil.DoTryFilterCatch(Action tryDelegate, Func`2 filterDelegate,
              Action`1 catchDelegate)
              11/22/2021 12:20:23 PM Exception:
              Microsoft.Exchange.Context.Core.SignalSignalTypeNotRegisteredException: Forbidden Exception: This is an
              unregistered SignalType 399.
                 at Microsoft.Exchange.Context.Core.SignalTypeMapper.GetSignalType(Int32 signalTypeId)
                 at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.SignalFolderExpirationEnforcer.EnlistItem(Prope
              rtyArrayProxy itemProperties)
                 at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.SignalFolderExpirationEnforcer.DeleteItemsPastR
              etention(IFolder folder, QueryFilter pastRetentionQueryFilter)
                 at
              Microsoft.Exchange.MailboxAssistants.Assistants.ELC.SignalFolderExpirationEnforcer.CollectItemsToExpire()
                 at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.SysCleanupEnforcerBase.CollectItemsWithGuard()
                 at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.SysCleanupEnforcerBase.InvokeInternal()
                 at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.SysCleanupEnforcerBase.Invoke()
                 at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.ELCAssistant.InvokeSysCleanupEnforcer(MailboxDa
              taForTags mailboxDataForTags, SysCleanupEnforcerBase enforcer)
                 at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.ELCAssistant.InvokeCore(MailboxSession
              mailboxSession, List`1 customDataToLog, StatisticsLogEntry logEntry, ElcParameters parameters)
                 at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.ELCAssistant.<>c__DisplayClass30_0.<InvokeInter
              nalAssistant>b__0()
                 at Microsoft.Exchange.Common.IL.ILUtil.DoTryFilterCatch(Action tryDelegate, Func`2 filterDelegate,
              Action`1 catchDelegate)
              11/21/2021 12:21:36 PM Exception:
              Microsoft.Exchange.Context.Core.SignalSignalTypeNotRegisteredException: Forbidden Exception: This is an
              unregistered SignalType 399.
                 at Microsoft.Exchange.Context.Core.SignalTypeMapper.GetSignalType(Int32 signalTypeId)
                 at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.SignalFolderExpirationEnforcer.EnlistItem(Prope
              rtyArrayProxy itemProperties)
                 at Microsoft.Exchange.MailboxAssistants.Assistants.ELC.SignalFolderExpirationEnforcer.DeleteItemsPastR
              etention(IFolder folder, QueryFilter pastRetentionQueryFilter)

LogName     : MRM
Identity    : xxxxx
IsValid     : True
ObjectState : Unchanged

I can't find anything that tells me what code 399 is? Has anyone else seen this when upgrading to cu22? When I exported the mailbox diagnostic logs for that user (there are multiple mailboxes generating this on multiple servers with no obvious pattern) I did see

ELCLastSuccessTimestamp 11/4/2020 6:27:07 AM

when if the Manager Folder Assistant was working correctly on the mailboxes causing the compliance issue, the ELCLastSuccessTimestamp time stamp and date would be within 7 days of today. Could something be corrupted and prohibiting the MFA from checking this mailbox? This did not show up with the last cu, cu20.

Louisl avatar
tr flag
I have to say I never see such errors, but I think you should check the MS Exchange Mailbox Assistants service and restart it. Then try starting the MFA manually with https://docs.microsoft.com/en-us/powershell/module/exchange/start-managedfolderassistant?view=exchange-ps
mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.