Topic Last Modified: 2006-07-07

The Microsoft® Exchange Server Analyzer Tool queries the Win32_NTLogEvent Microsoft Windows® Management Instrumentation (WMI) class to determine whether an Event 4001 warning has been logged for MSExchangeTransport within the last 24 hours.

If the Exchange Server Analyzer finds that an Event 4001 warning has been logged for MSExchangeTransport within the last 24 hours, the Exchange Server Analyzer displays a warning.

This warning usually indicates that an attempt to send mail to a remote server has failed.

An MSExchangeTransport Event 4001 warning can occur when the Simple Mail Transfer Protocol (SMTP) service on Exchange 2000 Server or Exchange Server 2003 has one or more mail-delivery problems. Possible causes of mail-delivery problems include issues with the Domain Name System (DNS), IP configuration, or installation of wrong DLL files.

For more information about an Event 4001 warning, you can locate event details from the Events and Errors Message Center (http://go.microsoft.com/fwlink/?LinkId=34258).

For more information about mail relay issues in Exchange Server, see Microsoft Knowledge Base article 895853, "How to troubleshoot mail relay issues in Exchange Server 2003 and in Exchange 2000 Server" (http://go.microsoft.com/fwlink/?linkid=3052&kbid=895853).

For more information about mail flow and SMTP issues, see "Troubleshooting Mail Flow and SMTP" in the Exchange Server and Transport Routing Guide (http://go.microsoft.com/fwlink/?LinkID=67875).