Log Name: Application
Source: MSExchange RBAC
Date: 10/07/2018 14:48:14
Event ID: 74
Task Category: RBAC
Level: Error
Keywords: Classic
User: N/A
Computer: %computername%.domain.suffix
Description:
(Process w3wp.exe, PID 11284) Connection leak detected for key domain.suffix/Support/Administrator in Microsoft.Exchange.Configuration.Authorization.WSManBudgetManager class. Leaked Value 1.
Event Xml:



74
2
2
0x80000000000000

8083671
Application
%computername%.domain.suffix



w3wp.exe
11284
domain.suffix/Support/Administrator
Microsoft.Exchange.Configuration.Authorization.WSManBudgetManager
1

---

This is an error caused by the PowerShell FrontEnd application pool certificate, but I cannot see why. We have upgraded ex16 to cu13 and still see this error.

---

This issue is related to processes attempting to innumerate mailboxes on the server but not having permission, often because the server is a CAS or Front-End server and hosts no mailboxes.

If you run a health check and receive messages that the DataProtection or FEP are not showing as healthy, then this can be a symptom that the system is looking to query mailboxes on servers for which it has no permission, or on which no mailboxes reside.

---