Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I get a log error OAL GENERATOR 9323.

Seems some users have invalid certificates, however, when opening the tab in the user properties under the Global Adress lists preview option. Active directory reports that it cannot op the certificate archive.

ERROR --- Source: MSExchangeSA Category: OAL Generator Event-id: 9323

Entry '###### ######- Search & Co Groep' has invalid or expired e-mail certificates. These certificates will not be included in the offline address list for '\Global Address List'.
- Default Offline Address List

How can I resolve this when I cannot delete the certs? Anyone? :)

share|improve this question

Cant you just renew the certificates? in the CA on the server, just select the certificate assigned and choose renew?

No CA? Here's one who seemed to be able to resolv the problem.

share|improve this answer
Thanks! I've googled and googled for it. But without success. I knew I had to remove the certificates, however non where shown! +1 – Sniek NL Sep 23 '09 at 10:07
Did it solve anything or are you still having the issue? – MrTimpi Sep 24 '09 at 8:48

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.