Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 454
  • Last Modified:

Microsoft Exchange 5.5 Offline Restore Problems...

Ok, here goes my trials, tribulations and questions....

Yesterday we had a catastrophic disk failure on our Exchange 5.5 / Win2k server.  The server was running Win2k with latest service pack and Exchange 5.5 Enterprise/SP4.  The main drive failed AND the mirrored drive failed as well.  What are the odds? We didn't have a backup of the database, so I spent most the day trying to retrieve data from the drive and I was able to successfully get the data off the drive with Winternals ERD.  I have been planning to migrate this to a new server anyways, just not under these conditions.  I had unwittingly deleted the logical server from the Site/Organization at the other Exchange server, so I know that screwed me on this whole offline restore procedure.  Here's what I did:

I installed Exchange 5.5 and SP4 to a new server which was offline and named the same as the previous server.
Copied the priv.edb, pub.edb and dir.edb to the server in the appropriate places
ran eseutil /r on each of them
ran isinteg -patch on the database
brought the server up and it was running fine, so I connected it back to the network

Email was up an running at around midnight my time, so I called it a night at around 1am when I figured it was stable.  When I woke up this morning and called in to see if all was well, I found that email was up and running but there were no names in the directory anymore.  I am assuming because I deleted the logical server that it replicated with the existing server and wiped those names.  I restored the databases again and repeated the procedure and haven't brought up the other server yet, which is only for OWA anyways.  Now It is running again but I get a message that:

"Could not start the Microsoft Exchange Event Service on Local Computer.
The service did not return an error.  This could be an internal Windows error or an internal service error.
If the problem persists, contact your system administrator."

In the event log I see:

Source:  MSExchangeES
Event ID: 5

An unexpected MAPI error occurred.  Error returned was (0x80004005).

I have tried several of the solutions I have found for this type of error, but I have not had any luck.  The event service was fine after the initial restore, I am assuming that there was a problem with the replication between the servers last night that caused this.  

1)  I need help with settings to get this ES working again
2)  I need help configuring the other server to properly communicate and replicate with this new server so as not to lose the complete directory again.

Thanks.....
0
Timothy Kashin
Asked:
Timothy Kashin
  • 11
  • 8
  • 3
1 Solution
 
amaheshwariCommented:
You mean that you are not having any name in directory is your old server has those name.If so then what you can do is go to tools in Exchange administrator of old server and then do directory export to csv file and then import directory in exchnage 5.5 new server .
0
 
Timothy KashinNetwork AnalystAuthor Commented:
The problem is in the new server resides all the names which is where they were, but in the old server they do not exist.  When the directory replication takes place, the names disappear from the new server.  Will this method work the other way around as well?  Export from the new server and import to the old server?
0
 
amaheshwariCommented:
or

To resolve this issue, use a different service account to start the Event Service, or modify the permissions on the current service account.
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
amaheshwariCommented:
yes but you said that now there is no name in new as well as old server.
0
 
amaheshwariCommented:
You may try this :

To resolve this issue if you know the correct organization, server or site name, modify the appropriate registry value: 1. Start Registry Editor (Regedt32.exe).
2. Locate the appropriate value (Enterprise, Server or Site) under the following key in the registry:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSExchangeSA\Parameters
3. On the Edit menu, click String, modify the value to match the correct organization (enterprise), server or site name, and then click OK.
4. Quit Registry Editor.
NOTE: The Exchange Server organization, server and site names are case sensitive. Make sure that you type the correct name and case for each value.
0
 
Timothy KashinNetwork AnalystAuthor Commented:
I have tried changing the service account and permissions - Didn't work

I have looked at those registry entries and they are correct

THanks
0
 
amaheshwariCommented:
yes but you said that now there is no name in new as well as old server.Is this correct ?
0
 
Timothy KashinNetwork AnalystAuthor Commented:
Correct, the only mailbox that stayed in the new server after the night was administrator.  I have exported all from the new server and then imported to the old server.  That should resolve that issue, correct?
0
 
amaheshwariCommented:
So do you have all the entries in new server or it is blank.
0
 
Timothy KashinNetwork AnalystAuthor Commented:
All the entries were in the new server and not the old.  Now I have exported from the new, merged with the old then exported from the old after the merge and merged with the new so now both have identical directories.
0
 
amaheshwariCommented:
ok so you got your directory entries back .
0
 
Exchange_AdminCommented:
Here are the steps you SHOULD have taken since you deleted the original server from the Organization:
1. Install Exchange 5.5 and select "Join an Existing Site".
2. Apply all the proper Exchange SP's to get it back to where the original server was.
3. Run Performance Optimizer. Do this even if you are not moving any databases. Make note where the PRIV.EDB and PUB.EDB files are located.
4. Stop the Information Store service.
5. Delete the contents of the MDBDATA folder on all drives.
6. Place the PRIV.EDB and PUB.EDB into the MDBDATA folder on the proper drive.
7. Start the Information Store service. You should get a 1011 popup error. If so then open a command prompt, change to the EXCHSRVR\BIN folder and run the following:
ISINTEG -PATCH
8. Start the Information Store service and all the other needed services.
9. In Exchange Admin you will notice that you do not have any users in the recipients container (this is expected). Check in the Mailbox Resources container and you will see the users mailboxes. Run a DS/IS to populate the directory.
0
 
Timothy KashinNetwork AnalystAuthor Commented:
That's exactly how I did it Exchange Admin....

0
 
amaheshwariCommented:
Are you still facing same problem ?
Are you still getting same error of Exchange Event Service?
0
 
Timothy KashinNetwork AnalystAuthor Commented:
Yes, I am still getting the event service error, same one.
0
 
Exchange_AdminCommented:
"That's exactly how I did it Exchange Admin...."
No I don't think you did.
Notice that I did not say to bring back the original DIR.EDB.
You said in your original post that you restored the DIR.EDB.
0
 
Timothy KashinNetwork AnalystAuthor Commented:
I did it that way initially and I didn't hae any users in the recipients container and when I ran the DS/IS, there were recipients.  The problem occurred overnight when the servers replicated.  I suppose you are suggesting that I just delete it all and start again?
0
 
Timothy KashinNetwork AnalystAuthor Commented:
Ok, I have noticed now that since it's been awhile and replication has taken place, all the email aliases have disappeard.  Some people had somebody@blah.com as well as SBody@blah.com and now those are gone except for the original domain addresses.
0
 
Timothy KashinNetwork AnalystAuthor Commented:
I'm still having the Event Service issues, any help out there?
0
 
Timothy KashinNetwork AnalystAuthor Commented:
Anyone? Any help here at all?
0
 
Exchange_AdminCommented:
Have you tried removing the Event service.
Run the Exchange setup program, uncheck ONLY the event service.
Then after it is removed, reboot the server.
Run setup again to install the event service.
0
 
Timothy KashinNetwork AnalystAuthor Commented:
I have tried that process, during the process it said that a file could not be removed so I ignored it.  The process then finished and I restarted the server.  The Event Service shows up in the services but doesn't start, when I try to add it in from Exchange installation, it will not install saying that the event service did not start in a timely manner.  According to the installer, it is not installed.

0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 11
  • 8
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now