[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1891
  • Last Modified:

Server 2003 - Microsoft exchange is not working

I am using Server 2003, SP2, and unfortunatly the sistem was unpluged by mistake, for 1 or 2 seconds, and of course the server was unproperly restarted.

Since than, every morning,  Microsoft Exchange stop working, and users can't use outlook. So, after restaring the server, the situation go back to normal till next day.

This are the errors from EVENT WIEWER:

BEFORE REBOOTING THE SERVER:

Event Type:      Error
Event Source:      MSExchangeSA
Event Category:      General
Event ID:      1031
Date:            08/11/2008
Time:            05:14:39
User:            N/A
Computer:      HQ
Description:
One of the System Attendant's task is blocked.
Function: COffLineABScanTask::Work

For more information, click http://www.microsoft.com/contentredirect.asp.

--------------

Event Type:      Information
Event Source:      PDAgent
Event Category:      None
Event ID:      57
Date:            08/11/2008
Time:            08:00:00
User:            N/A
Computer:      HQ
Description:
Schedule (daily)(Daily) started on time.
----------------------

Event Type:      Information
Event Source:      PDEngine
Event Category:      None
Event ID:      18
Date:            08/11/2008
Time:            08:07:32
User:            N/A
Computer:      HQ
Description:
Drive G:\ is 0.2% fragmented.  Fragmentation threshold not exceeded, optimization will not continue.
---------------------
Event Type:      Information
Event Source:      PDAgent
Event Category:      None
Event ID:      60
Date:            08/11/2008
Time:            08:12:39
User:            N/A
Computer:      HQ
Description:
Schedule (daily)(Daily) execution status is (0).
--------------------------
Event Type:      Information
Event Source:      PDAgent
Event Category:      None
Event ID:      61
Date:            08/11/2008
Time:            08:12:39
User:            N/A
Computer:      HQ
Description:
Schedule (daily)(Daily) set to run on 11/9/2008, 8:00:00 AM.
---------------
Event Type:      Warning
Event Source:      CertSvc
Event Category:      None
Event ID:      53
Date:            08/11/2008
Time:            08:34:29
User:            N/A
Computer:      HQ
Description:
Certificate Services denied request 44932 because The permissions on the certificate template do not allow the current user to enroll for this type of certificate. 0x80094012 (-2146877422).  The request was for ARO-ENO\WS0854$.  Additional information: Denied by Policy Module

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
-----------------
Event Type:      Error
Event Source:      MSExchangeIS
Event Category:      General
Event ID:      9646
Date:            08/11/2008
Time:            08:48:27
User:            N/A
Computer:      HQ
Description:
Mapi session "/o=ARO-ENO/ou=First Administrative Group/cn=Recipients/cn=George.Francisc" exceeded the maximum of 32 objects of type "session".

 For more information, click http://www.microsoft.com/contentredirect.asp.

------------------------------------------------
--------------------------------------------------
------------------------------------------------

AFTER REBOOT:



------------------------
Event Type:      Warning
Event Source:      MSDTC
Event Category:      SVC
Event ID:      53258
Date:            08/11/2008
Time:            09:54:18
User:            N/A
Computer:      HQ
Description:
MS DTC could not correctly process a DC Promotion/Demotion event. MS DTC will continue to function and will use the existing security settings. Error Specifics: d:\nt\com\complus\dtc\dtc\adme\uiname.cpp:9351, Pid: 1476
No Callstack,
 CmdLine: C:\WINDOWS\system32\msdtc.exe

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 05 00 07 80               ...?    

......................................................

Event Type:      Warning
Event Source:      MSDTC
Event Category:      SVC
Event ID:      53258
Date:            08/11/2008
Time:            09:54:18
User:            N/A
Computer:      HQ
Description:
MS DTC could not correctly process a DC Promotion/Demotion event. MS DTC will continue to function and will use the existing security settings. Error Specifics: %1

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
.....................................................

Event Type:      Information
Event Source:      MSDTC
Event Category:      TM
Event ID:      4193
Date:            08/11/2008
Time:            09:54:19
User:            N/A
Computer:      HQ
Description:
MS DTC started with the following settings (OFF = 0 and ON = 1):

  Security Configuration:
      Network Administration of Transactions = 0,
      Network Clients = 0,
      Inbound Distributed Transactions using Native MSDTC Protocol = 0,
      Outbound Distributed Transactions using Native MSDTC Protocol = 0,
      Transaction Internet Protocol (TIP) = 0,
      XA Transactions = 0
  Filtering Duplicate events = 1

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

....................
Event Type:      Information
Event Source:      MSSQL$MICROSOFT##SSEE
Event Category:      (2)
Event ID:      17111
Date:            08/11/2008
Time:            09:54:23
User:            N/A
Computer:      HQ
Description:
Logging SQL Server messages in file 'C:\WINDOWS\SYSMSI\SSEE\MSSQL.2005\MSSQL\LOG\ERRORLOG'.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: d7 42 00 00 0a 00 00 00   ×B......
0008: 13 00 00 00 48 00 51 00   ....H.Q.
0010: 5c 00 4d 00 49 00 43 00   \.M.I.C.
0018: 52 00 4f 00 53 00 4f 00   R.O.S.O.
0020: 46 00 54 00 23 00 23 00   F.T.#.#.
0028: 53 00 53 00 45 00 45 00   S.S.E.E.
0030: 00 00 00 00 00 00         ......  

.............................................................
Event Type:      Information
Event Source:      ufad-p2v
Event Category:      None
Event ID:      1
Date:            08/11/2008
Time:            09:54:25
User:            N/A
Computer:      HQ
Description:
The description for Event ID ( 1 ) in Source ( ufad-p2v ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: ufad-p2v service started.

---------------------
Event Type:      Failure Audit
Event Source:      MSSQL$MICROSOFT##SSEE
Event Category:      (4)
Event ID:      18456
Date:            08/11/2008
Time:            09:54:28
User:            NT AUTHORITY\NETWORK SERVICE
Computer:      HQ
Description:
Login failed for user 'NT AUTHORITY\NETWORK SERVICE'. [CLIENT: <named pipe>]

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 18 48 00 00 0e 00 00 00   .H......
0008: 13 00 00 00 48 00 51 00   ....H.Q.
0010: 5c 00 4d 00 49 00 43 00   \.M.I.C.
0018: 52 00 4f 00 53 00 4f 00   R.O.S.O.
0020: 46 00 54 00 23 00 23 00   F.T.#.#.
0028: 53 00 53 00 45 00 45 00   S.S.E.E.
0030: 00 00 07 00 00 00 6d 00   ......m.
0038: 61 00 73 00 74 00 65 00   a.s.t.e.
0040: 72 00 00 00               r...    
-----------------------------
Event Type:      Information
Event Source:      MSExchangeMTA
Event Category:      Field Engineering
Event ID:      9409
Date:            08/11/2008
Time:            09:54:28
User:            N/A
Computer:      HQ
Description:
The Microsoft MTA registry parameter Max RPC Alloc Size is missing.  The default value will be used. [BASE MAIN BASE 1] (14)

For more information, click http://www.microsoft.com/contentredirect.asp.
-------------------
Event Type:      Information
Event Source:      MSSQL$MICROSOFT##SSEE
Event Category:      (2)
Event ID:      9666
Date:            08/11/2008
Time:            09:54:28
User:            N/A
Computer:      HQ
Description:
The Service Broker protocol transport is disabled or not configured.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: c2 25 00 00 0a 00 00 00   Â%......
0008: 13 00 00 00 48 00 51 00   ....H.Q.
0010: 5c 00 4d 00 49 00 43 00   \.M.I.C.
0018: 52 00 4f 00 53 00 4f 00   R.O.S.O.
0020: 46 00 54 00 23 00 23 00   F.T.#.#.
0028: 53 00 53 00 45 00 45 00   S.S.E.E.
0030: 00 00 07 00 00 00 6d 00   ......m.
0038: 61 00 73 00 74 00 65 00   a.s.t.e.
0040: 72 00 00 00               r...    
------------------
Event Type:      Information
Event Source:      MSSQL$MICROSOFT##SSEE
Event Category:      (2)
Event ID:      9688
Date:            08/11/2008
Time:            09:54:28
User:            N/A
Computer:      HQ
Description:
Service Broker manager has started.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: d8 25 00 00 0a 00 00 00   Ø%......
0008: 13 00 00 00 48 00 51 00   ....H.Q.
0010: 5c 00 4d 00 49 00 43 00   \.M.I.C.
0018: 52 00 4f 00 53 00 4f 00   R.O.S.O.
0020: 46 00 54 00 23 00 23 00   F.T.#.#.
0028: 53 00 53 00 45 00 45 00   S.S.E.E.
0030: 00 00 07 00 00 00 6d 00   ......m.
0038: 61 00 73 00 74 00 65 00   a.s.t.e.
0040: 72 00 00 00               r...    
-------------------

Event Type:      Information
Event Source:      MSExchangeMTA
Event Category:      Field Engineering
Event ID:      9409
Date:            08/11/2008
Time:            09:54:29
User:            N/A
Computer:      HQ
Description:
The Microsoft MTA registry parameter Max RPC Alloc Size is missing.  The default value will be used. [BASE MAIN BASE 1] (14)

For more information, click http://www.microsoft.com/contentredirect.asp.
-----------------
Event Type:      Warning
Event Source:      MSExchangeIS
Event Category:      General
Event ID:      9665
Date:            08/11/2008
Time:            09:54:30
User:            N/A
Computer:      HQ
Description:
The memory settings for this server are not optimal for Exchange.

 For more information, click http://support.microsoft.com?kbid=815372 
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 13 00 00 00               ....    
------------------------
Event Type:      Information
Event Source:      MSExchangeIS Mailbox Store
Event Category:      General
Event ID:      1217
Date:            08/11/2008
Time:            09:54:43
User:            N/A
Computer:      HQ
Description:
The Exchange store 'First Storage Group\Mailbox Store (HQ)' has unlimited storage capacity. The current physical size of this database (the .edb file and the .stm file) is 75 GB. The only size constraint for this database is the maximum size that is supported by the database storage engine (8000 GB).

For more information, click http://www.microsoft.com/contentredirect.asp.
--------------------------
Event Type:      Information
Event Source:      MSExchangeIS Public Store
Event Category:      General
Event ID:      1217
Date:            08/11/2008
Time:            09:54:43
User:            N/A
Computer:      HQ
Description:
The Exchange store 'First Storage Group\Public Folder Store (HQ)' has unlimited storage capacity. The current physical size of this database (the .edb file and the .stm file) is 1 GB. The only size constraint for this database is the maximum size that is supported by the database storage engine (8000 GB).

For more information, click http://www.microsoft.com/contentredirect.asp.
-----------------------
Event Type:      Warning
Event Source:      MSExchangeSA
Event Category:      General
Event ID:      5008
Date:            08/11/2008
Time:            09:54:48
User:            N/A
Computer:      HQ
Description:
The message tracking log file G:\temp\msg-tracking\HQ.log\20081102.log was deleted.

For more information, click http://www.microsoft.com/contentredirect.asp.
----------------------

Event Type:      Warning
Event Source:      Windows Server Update Services
Event Category:      Clients
Event ID:      13051
Date:            08/11/2008
Time:            09:56:20
User:            N/A
Computer:      HQ
Description:
No client computers have ever contacted the server.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
-------------
Event Type:      Warning
Event Source:      Windows Server Update Services
Event Category:      Core
Event ID:      10021
Date:            08/11/2008
Time:            09:56:20
User:            N/A
Computer:      HQ
Description:
The catalog was last synchronized successfully 1 or more days ago.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
------------------

_________________________________________
_________________________________________
_________________________________________


... and this is happening every morning since than, with the same error messages

Does any one have a solution to fix the problem?
Thank you!

0
radu580
Asked:
radu580
  • 3
  • 2
1 Solution
 
HousammuhannaCommented:
Let me understand something
is your database size really 75 GB or this is a wronge reading from the system for your Database ?/?
if you turn off the server and start it again
if you try to start the exchange Service manually ... are they going to start
Thanks

0
 
radu580Author Commented:
The database sise is realy 75 GB.
When I am restarting the server, the exchange is working, but only till next morning. When I have to restart it again.

This is happening although the exchange Service seems to be started.
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

 
radu580Author Commented:
Also every night, from the symantec back up  sheduled process, I get this errors in the event viewer:

Event Type:      Error
Event Source:      MSExchangeIS
Event Category:      Exchange VSS Writer
Event ID:      9611
Date:            08/11/2008
Time:            23:11:40
User:            N/A
Computer:      HQ
Description:
Error code 0xfffffdd0 when freezing the Storage groups.

For more information, click http://www.microsoft.com/contentredirect.asp.
Data:
0000: 4a 45 54 20 66 61 69 6c   JET fail
0008: 65 64 20 74 6f 20 66 72   ed to fr
0010: 65 65 7a 65 20 74 68 65   eeze the
0018: 20 69 6e 73 74 61 6e 63    instanc
0020: 65 73 2e 00               es..    

------------------

Event Type:      Error
Event Source:      ESE
Event Category:      ShadowCopy
Event ID:      2002
Date:            08/11/2008
Time:            23:11:40
User:            N/A
Computer:      HQ
Description:
Information Store (4432) Shadow copy instance 1 encountered error -560 on freeze.

For more information, click http://www.microsoft.com/contentredirect.asp.

-----

Event Type:      Error
Event Source:      Backup Exec
Event Category:      None
Event ID:      57860
Date:            08/11/2008
Time:            23:14:51
User:            N/A
Computer:      HQ
Description:
An error occurred while attempting to log in to the following server: "HQ\SHAREPOINT".
 SQL error number: "0011".
 SQL error message: "[DBNETLIB][ConnectionOpen (Connect()).]SQL Server does not exist or access denied.
".

 For more information, click the following link:
http://eventlookup.veritas.com/eventlookup/EventLookup.jhtml
Data:
0000: 11 00 00 00 00 00 00 00   ........
0008: 00 00 00 00 00 00 00 00   ........

----------
Event Type:      Error
Event Source:      Backup Exec
Event Category:      None
Event ID:      34113
Date:            08/11/2008
Time:            23:22:38
User:            N/A
Computer:      HQ
Description:
Backup Exec Alert: Job Failed
(Server: "HQ") (Job: "All-Media Rotation 00001-Daily Incremental Backup") All-Media Rotation 00001-Daily Incremental Backup -- The job failed with the following error: A failure occurred querying the Writer status.
 

 For more information, click the following link:
http://eventlookup.veritas.com/eventlookup/EventLookup.jhtml

0
 
HousammuhannaCommented:
use eseutil for soft recover
 
0
 
radu580Author Commented:
Ididn't use ESEUTIL yet.

I t seams that after the weekly full back up , also the incremental backup worked although Event ID:      57860 is still appearing, and now the server is working fine, without appearing ERROR 1031 any more. So now I am waiting to see what will happen in the next days.

Thanks!
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now