Unable to handle undeliverable messages due to lack of system resources.

Unable_to_handle_undeliverable_messages_due_to_lack_of_system_resources__1_2_Rule (Rule)

Knowledge Base article:

Summary

This event is similar to event 715. The SMTP service stores all undeliverable e-mail in the BadMail folder. This event indicates that the SMTP component was unable to process undeliverable messages because of a lack of system resources.

Sample Event:

Unable to handle undeliverable messages due to lack of system resources.

Related Events:

Event ID 715.

Causes

There are not enough resources on the system.

Resolutions

Resolving problems that occur due to inadequate system resources can be difficult because resources can indicate many issues, such as disk space, threads, physical memory, or virtual memory.

Check the system and ensure that adequate resources are available.

Open Task Manager and check the amount of available physical memory.

If you suspect this server is overloaded, use System Monitor to monitor the use of system resources over a time interval.

Try closing some of the other applications running on the server.

External

For more information about MSExchangeTransport event 716, see:

Element properties:

TargetMicrosoft.Exchange.Protocol.SMTP
CategoryEventCollection
EnabledTrue
Event_ID716
Event SourceMSExchangeTransport
Alert GenerateTrue
Alert SeverityWarning
Alert PriorityNormal
RemotableTrue
Alert Message
Unable to handle undeliverable messages due to lack of system resources.
{0}
Event LogApplication

Member Modules:

ID Module Type TypeId RunAs 
EventDS DataSource Microsoft.Windows.EventProvider Default
GenerateAlert WriteAction System.Health.GenerateAlert Default

Source Code:

<Rule ID="Unable_to_handle_undeliverable_messages_due_to_lack_of_system_resources__1_2_Rule" Enabled="onEssentialMonitoring" Target="Exch2003Core!Microsoft.Exchange.Protocol.SMTP" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="EventDS" TypeID="Windows!Microsoft.Windows.EventProvider">
<ComputerName>.</ComputerName>
<LogName>Application</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>Channel</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>Application</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>MSExchangeTransport</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>716</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="GenerateAlert" TypeID="SystemHealth!System.Health.GenerateAlert">
<Priority>1</Priority>
<Severity>1</Severity>
<AlertOwner>$Data/PublisherName$</AlertOwner>
<AlertMessageId>$MPElement[Name="Unable_to_handle_undeliverable_messages_due_to_lack_of_system_resources__1_2_Rule.AlertMessage"]$</AlertMessageId>
<AlertParameters>
<AlertParameter1>$Data/EventDescription$</AlertParameter1>
</AlertParameters>
<Suppression>
<SuppressionValue/>
</Suppression>
</WriteAction>
</WriteActions>
</Rule>