Event ID 5000 - MSExchange Management Application

[salimhurjuk]

Every hour I am getting this event ID with the below error msg, anyone from here assist me here 

Event ID 5000 - MSExchange Management Application 

The description for Event ID 5000 from the source MSExchange Management Application cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

Cmdlet Name: Set-ExchangeServer
Object Modified: SERVER-EXH01
Parameter: Identity = SERVER-EXH01
Parameter: MitigationsApplied = PING1
Parameter: MitigationsAppliedTime = 30-08-2023 04:27:31
Caller: NT AUTHORITY\SYSTEM (Microsoft.Exchange.Mitigation.Service)
ExternalAccess: False
Succeeded: True
Run Date: 2023-08-30T04:27:31
OriginatingServer: SERVER-EXH01 (15.01.2507.032)

First Organization
Exception thrown during AdminLogProvisioningHandler.Validate: Microsoft.Exchange.Data.Storage.ObjectNotFoundException: The discovery mailbox, a hidden default mailbox required to search mailboxes, can't be found. It may have been inadvertently deleted. This mailbox must be re-created before you can search mailboxes.
at Microsoft.Exchange.Data.Storage.Infoworker.MailboxSearch.MailboxDataProvider.GetDiscoveryMailbox(IRecipientSession session)
at Microsoft.Exchange.Management.SystemConfigurationTasks.AdminAuditLogHelper.CheckArbitrationMailboxStatus(OrganizationId organizationId, ADUser& user, ExchangePrincipal& principal, Exception& exception)

The message resource is present but the message was not found in the massage table

[#2]

@salimhurjuk it seems the Discovery Mailbox is missing. Check this and in case re-create it. 

https://learn.microsoft.com/en-us/exchange/architecture/mailbox-servers/recreate-arbitration-mailbox...

[#3]

Is there any impact if I recreate it? How can I remove old stale entries?

[#4]

@salimhurjuk 

First check if it really misses.

For the setup use the same version you're actually running (identical CU). Neither use an older one nor a newer. The setup "stamps" the Active Directory ("E:\Setup.exe /IAcceptExchangeServerLicenseTerms_DiagnosticDataON /PrepareAD"), it doesn't start a setup of Exchange but re-creats missing systen accounts e. g. You have to have the right privileges to run this command (I think schema admin, I'm not sure).

Then you just enable the discovery mailbox described in the link i sent before.

This should have no impact on your running system at all.

[#5]

@Deleted 

I have this many SystemMailBox Accounts.

This is a discoverysearchmailbox I can see AD

[#6]

@salimhurjuk Since the Discovery Mailbox (starting with ID e0dc1c29) exists, the pre-described steps might not help, except the Discovery Mailbox is damaged. At this point I'm not close enough to gather more information or provide more substantial help.

Hope, someone else could.