Solved

Critical Exchange Server 2003 down after planed power outage!!

Posted on 2006-07-17
8
1,430 Views
Last Modified: 2008-01-09
All,

I have the following errors on the Windows 2003 Server with Exchange 2003:
====================================================
Process STORE.EXE (PID=3996). An LDAP Notify call failed - Server=pansffile.Pantheonventures.com Error code=80040952. Base DN=CN=Mailbox Store (PANLONMAIL),CN=London,CN=InformationStore,CN=PANLONMAIL,CN=Servers,CN=Pantheon Group,CN=Administrative Groups,CN=Pantheon Group,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=Pantheonventures,DC=com, Filter=, Scope=0.
For more information, click http://www.microsoft.com/contentredirect.asp.
MSExchangeDSAccess
LDAP
Event 2066
====================================================
DSACCESS returned an error '0x80004005' on DS notification. Microsoft Exchange System Attendant will re-set DS notification later.
MSExchangeSA
Event 9154
====================================================
The Win32 API call 'DsGetDCNameW' returned error code [0x54b] The specified domain either does not exist or could not be contacted.  The service could not be initialized.  Make sure that the operating system was installed properly.
MSExchangeAL
Service Control
Event 8250
====================================================
Unexpected error <<0xc103073a - Unable to create the required MAPI profile. Please verify that you have sufficient permissions to write to the MAPISVC.INF file.>> occurred.
MSExchangeSA
Monitoring
Event 1005
====================================================
LDAP Bind was unsuccessful on directory panlondb1.Pantheonventures.com for distinguished name ''. Directory returned error:[0x51] Server Down.    
MSExchangeAL
LDAP Ops
Event 8026
====================================================
System Attendant Service failed to create session for virtual machine PANLONMAIL. The error number is 0x8007203a.
MSExchangeFBPublish
Event 8213
====================================================


We had a planned power outage at the weekend, and when I brought the server back up last night, no mail. The above errors are evident, amongst other that are usually tehre, so i did not list them.

All email works internally fine. When we send email out, the message with from and subject gets through, but with the body stripped out. No mail gets in at all.

Our business is crippled and I am the only IT guy here due to some recent restructuring!

If anyone at all can help, please...

Will
0
Comment
Question by:PantheonV
  • 4
  • 4
8 Comments
 
LVL 104

Expert Comment

by:Sembee
Comment Utility
If your server is down, then call Microsoft.

Right now.

It will be worth the fee alone.

The server seems to have some problems talking to the domain correctly.

Seriously, if the business is down, then Microsoft are your best option.

Simon.
0
 

Author Comment

by:PantheonV
Comment Utility
Turns out it was GFI (www.gfi.com). This thing has broken our Exchange server 4 times n the last 18 months, and this time I disabled it first before anything else. Still no joy. However, after 8 hours of umming and ahhing with a fellow Exchange guru, and microsoft on a 3-way call, my boss came down and suggested I uninstall GFI. He has less patience with it than I do. At wits end I decided I may as well... rebooted, and it all worked again!

However, at a cost of all emails for yesterday... As far as the internet was concerned, email was getting through tothe server, so email did not queue anywhere at ISP. The Exchange queues never received the mail, so no queueing there... so uninstalling GFI to make it work.. all emails lost!

Needless to say I am on to GFI live chat to find out what they plan to do about it! :(

Thanks for suggestion. I reckon although I of course would have done that eventually, 100 points for the effort.

The rest returned, please, administrator.

Will
0
 
LVL 104

Expert Comment

by:Sembee
Comment Utility
I had GFI do something similar to me a little while ago. All the emails were queued or quarantined. You may want to see if they are in there. If so, drop the physical files in to pickup under \exchsrvr\mailroot\vs 1\ and Exchange will process them again.

Simon.
0
 

Author Comment

by:PantheonV
Comment Utility
Will the files (EML format) work?
0
Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

 
LVL 104

Accepted Solution

by:
Sembee earned 500 total points
Comment Utility
If you have found a pile of eml file and when you look at them in notepad they look like raw SMTP messages, then there is a good chance they will work. Copy them in the folder I outlined. If you copy them then the worst that can happen is that Exchange ignores them.

Simon.
0
 

Author Comment

by:PantheonV
Comment Utility
Simon,

Cheers mate. Before you posted the second post I had found the EML files in question, and I was planning on using Thunderbird to open each one and forward as necessary. But copying them to the pickup folder did the trick, and processed all 500 or so emails in about 30 mins. Fantastic, and worth every point! :)

Cheers
0
 

Author Comment

by:PantheonV
Comment Utility
Oh, for anyone else who might suffer this in furtue, I found the emails in MailSecurity's Failed Mails folder. Previously I was focusing on MailEssentials, and the quarantine,e tc., but could not find anything. I was on the phone to GFI for about 45 mins getting more irate at every iteration of their hold song and sales, when it occurred to me it might not be MailEssentials, and that's why it was different this time to the last 4 times. SO I traced through the MailSecurity folders and found about 500 EML files within the specified date range!

Sorted.
0
 
LVL 104

Expert Comment

by:Sembee
Comment Utility
Mail Security has done that to me before as well.

Simon.
0

Featured Post

Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
This article explains in simple steps how to renew expiring Exchange Server Internal Transport Certificate.
In this video we show how to create a Resource Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: Navigate to the Recipients >> Resources tab.: "Recipients" is our default selection …
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now