We help IT Professionals succeed at work.

Mailbox Store Problem

emrahtufan
emrahtufan asked
on
Medium Priority
1,172 Views
Last Modified: 2008-03-04
Hi
I Have a problem with my mailbox store
In exchange server 2000 with service pack 3, suddenly mailbox and public folder stores became offline. When  I restart the and look at the event viewer of the system I saw the following error mesage in the applicvation log.

date 05.04.2004.
source MSExchange IS
Time 17:49
Category General
Type Error
Event ID 9518
User N/A
Computer SAGE

Description:
Error Current log file missing starting Storage Group /DC=TR/DC=GOV/DC=TUBITAK/DC=SAGE/CN=CONFIGURATION/CN=SERVICES/CN=MICROSOFT EXCHANGE/CN=SAGE/CN=ADMINISTRATIVE GROUPS/CN=FIRST ADMINISTRATIVE GROUP/CN=SERVERS/CN=SAGEMAIL/CN=INFORMATIONSTORE/CN=FIRST STORAGE GROUP on the Microsoft Exchange Information Store.
<NULL>.

For more information, click http://www.microsoft.com/contentredirect.asp.

What should I do to correct this error
Thanks
Comment
Watch Question

Top Expert 2004

Commented:
Hi there
Fist have a look at this:
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q294367

Deb :))
Top Expert 2004

Commented:
And just in case this has been done:
Issues That Might Occur If You Place Exchange Data Files on Network Shares
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q314916

Author

Commented:
Hi
I understand the source of the problem
Norton antivures quarantines the e00.log file and the problem occurs just because of this.
The rest of the logs are complete and only missing file is the e00.log
So what should I do.
Thanks
Top Expert 2004
Commented:
Unlock this solution and get a sample of our free trial.
(No credit card required)
UNLOCK SOLUTION

Author

Commented:
Hi again
By the way our exchange server runs on a microsoft active/passive cluster
is that changes anything?
Top Expert 2004

Commented:
Hi - Sorry but Clustering is not my field. I would definitely take the advice given in the first link, Make a copy of the databases and transaction logs before attempting any recovery!
http://www.winnetmag.com/Articles/ArticleID/20016/pg/2/2.html 
http://support.microsoft.com/default.aspx?scid=http://support.microsoft.com:80/support/kb/articles/q266/6/89.asp&NoWebContent=1

If you can I'd wait for another expert to take a look at this if you're not sure or don't have recourse to a good back-up, sorry but I don't want to comment on stuff I'm not 100% certain about ;-)

Deb :))

Author

Commented:
Hello
In default configuration Norton Antivirus exclude the exchange server directory in Program files under (generally) C. But in my case the database folder of the mailboxes (MDBDATA) is under E just because of the cluster. (Our cluster implementation includes the SAN). Therefore we ignore or forget excluding the exchange folder in SAN.  Afterthat, the exchange folder in disk E is infected by the netskyQ and norton quarantines the log files which is currently written by the exchange server. Because of this, the mailbox store becomes unmounted and database of the exchange becomes inconsistent. (actually dirty shutdown).

After I defined the problem What I performed is that;
1. from the service in the control panel I disabled all the services related with the exchange for both servers in the cluster.
2. the e00.log file is under quarantine so there is no e00.log file in the MDBDATA.
3. I excluded the exchange folder in disk E.
4. I restarted the both servers.
5. Because exchange services are disabled the excahnge services in the cluster administartor are failed to start.
6. I enabled the exchange services.
7. From the cluster administartor, I brought the exchange group online.

After I Performed all the thisngs above, the new e00.log file is created and database store of the exchange is mounted.

The next thing I want to ask is ,can these procedure be a solution for this problem.
This seems to be very illogical. Everything happens out of my control which makes me very uncomfortable.

Thanks

Top Expert 2004

Commented:
Hi there,

Yes this will act as a solution for this problem as fortunately things have gone exactly the way that they should with the E00.log being recreated -  but it would be better to exclude the E00.log in E from scanning anyway as a matter of course - you can scan everything else - just exclude the specific log files and databases listed from scanning or monitoring by the av - Do you have anitivirus scanning the mailboxes etc - ie antivirus for exchange? Some av systems detect what they assume is a virus signature in the E00.log and then quarantine it, but actually it's safe to restore the quarantined log to it's original position, hence it's better to just exclude it. You can set the av to exclude these files from monitoring and scanning as a matter of course by using the exclude specific files and folders options in the av configuration. I have done this, and we haven't had any problems with it.

Anyway, I'm glad it's back up and running but probably not as glad as you are ;-)

Deb :))

Author

Commented:
H&#305; Deb,
Although it did not solve my problem, your comments gained me a better understanding of exchange server database.
Therefore I am glad to accept your answer as accepted one.
Many many thanks
The same exact thing happened to my server today.  First thing tomorrow morning i will try your solution.
Thanks,
Unlock the solution to this question.
Thanks for using Experts Exchange.

Please provide your email to receive a sample view!

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.