SMTP authentication errors from this remote site have exceeded the maximum allowed. Microsoft Exchange is disconnecting from the site.

Microsoft.Exchange2007.Transport.MSExchangeTransport.1012 (Rule)

Knowledge Base article:

External

For more information, see the respective topic at the Microsoft Exchange Server TechCenter

Element properties:

TargetMicrosoft.Exchange2007.ServerRole.Transport
CategoryEventCollection
EnabledTrue
Alert GenerateTrue
Alert SeverityWarning
Alert PriorityNormal
RemotableTrue
Alert Message
SMTP authentication errors from this remote site have exceeded the maximum allowed. Microsoft Exchange is disconnecting from the site.
{0}

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Exchange2007.Application.FilteredEventProvider.DS Default
GenerateAlert WriteAction System.Health.GenerateAlert Default

Source Code:

<Rule ID="Microsoft.Exchange2007.Transport.MSExchangeTransport.1012" Enabled="onEssentialMonitoring" Target="ExLibrary!Microsoft.Exchange2007.ServerRole.Transport" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="DS" TypeID="ExDiscovery!Microsoft.Exchange2007.Application.FilteredEventProvider.DS">
<EventSourceName>MSExchangeTransport</EventSourceName>
<EventDisplayNumber>1012</EventDisplayNumber>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="GenerateAlert" TypeID="Health!System.Health.GenerateAlert">
<Priority>1</Priority>
<Severity>1</Severity>
<AlertOwner>$Data/PublisherName$</AlertOwner>
<AlertMessageId>$MPElement[Name="Microsoft.Exchange2007.Transport.MSExchangeTransport.1012.AlertMessage"]$</AlertMessageId>
<AlertParameters>
<AlertParameter1>$Data/EventDescription$</AlertParameter1>
</AlertParameters>
<Suppression>
<SuppressionValue/>
</Suppression>
</WriteAction>
</WriteActions>
</Rule>