Solved

Exchange Server 2007 Transport not working - Microsoft Exchange can't connect to the queue viewer server

Posted on 2010-08-26
27
5,684 Views
Last Modified: 2015-01-09
Here is the situation:

I got a call this morning - client has stated that they can't send or receive e-mails.
On the client's outlook, the messages are just sitting on their outbox.

Server is a SBS 2008 with Exchange 2007 SP1 (but I have just updated to SP3 and didn't solve the issue). Server is using a HUB Transport

Here's what I have found and what has been done:

1. Microsoft Exchange Transport service starts up fine, no problems, no erros
2. under "C:\Program Files\Microsoft\Exchange Server\TransportRoles\data\queue" I can see a file named "tmp.edb" coming and up and disappearing every second... you can see it, and all of sudden it disapeaprs, and it keeps going like that (even after creating a brand-new-empty-queue-folder)
3. Exchange Best Practices Analyzer doesn't say anything
4. When I open the Queue Viewer, I get the following error message: Microsoft Exchange can't connect to the queue viewer server on computer "SERVER.CONTOSO.LOCAL". Verify that the Microsoft Exchange Transport service is started. It was running command 'get-queue -ResultSize '1000' -ReturnPageInfo $true -SortOrder '+NextHopDomain' -SearchForward $true -BookmarkObject $null - BookmarkIndex '-1' -IncludeBookmark $false -server 'server.contoso.local'
5. Fix my network wizard doesn't detect a thing
6. Nslookup resolves the following:

"C:\Users\Sysadmin>nslookup
Default Server:  UnKnown
Address:  fe80::2452:b628:555c:2950

>"

7. Cannot telnet from internal or external to port 25, to either SERVERNAME, LOCALHOST, IPADDRESS or 127.0.0.1
8. No required services are stopped
9. Server has been restarted several times
10. When the problem started, server was Exchange 2007 SP1. I have tried upgrading to SP3 and didn't make any difference
11. I have tried stopping msexchangetransport service, renaming both the "queue" folder and the whole "data" folder under "C:\Program Files\Microsoft\Exchange Server\TransportRoles" and restarting the service so it would recreate the database - issue still persist
12. I have performed database repair and defrag of the queue database using eseutil. nothing...
13. Removed Antivirus/Antispam etc altogether
14. Disabled Windows Firewall
15. Reapplied permission on transport folder
16. Restarted DHCP and DNS servers
17. Checked send connector settings - all ok
18. Run the "Exchange Troubleshooting Assistant"... the only error that comes up is the same one stated on number 4.
19. No errors on Application or System or DNS logs. Although, the Application logs are filling up (i mean, THOUSANDS) of the following event IDs (all Informational) -  17008, 17010, 16022, 300, 301, 4002, 102 and 1020 (all exchange transport related)
20. I have tried to uninstall and reinstall the hub transport role but it's grayed out
21. I have tried restoring the MsExchangeTransport.exe.config and MsExchangeTransport.exe files from previous versions. nothing...


Other than restoring the system from a backup and losing all e-mails they "sent" (the ones stuck on the outbox), what else can I do to fix the issue?

Much appreciated

Rod
0
Comment
Question by:Black-Knight
  • 14
  • 11
  • +1
27 Comments
 
LVL 10

Expert Comment

by:dhruvarajp
Comment Utility
increase diagnostic logging for exchange transport
http://blogs.technet.com/b/ferris/archive/2010/05/03/howto-increase-the-logging-levels-in-exchange-2003-2007-and-2010.aspx

This will give us at lides of what is going with transport

Thank you
Dhruv
0
 

Author Comment

by:Black-Knight
Comment Utility
I have increased to medium level. Is it enough or should i change it to high or expert? I kind have only a few hours to troubleshoot this issue :-)
0
 
LVL 10

Expert Comment

by:dhruvarajp
Comment Utility
ok.. yes do it to expert
ans restart the transport service
0
 

Author Comment

by:Black-Knight
Comment Utility
done... there are aroung 40 events being loggeed every 20 seconds... all informational
0
 

Author Comment

by:Black-Knight
Comment Utility
and they are the same events being logged before... should i be looking anywhere else other than the application log?
0
 
LVL 10

Expert Comment

by:dhruvarajp
Comment Utility
there are aroung 40 events being loggeed every 20 seconds... all informational..

i suspest these events tell that trasnport services started and stopped again

am i correct ?
0
 
LVL 10

Expert Comment

by:dhruvarajp
Comment Utility
what is the size of the  transport database ?
..
0
 

Author Comment

by:Black-Knight
Comment Utility
it was huge... 1.4 gb ... but i renamed the queue folder so it would get recreated... it recreated fine, a brand new tiny database of 2mb (mail.que)... but it didnt solve the issue...

but look - did u see the item number 2? the fact that the tmp.edb keeps coming up and disappearing? yes I agree with you, i believe the service keeps restarting (even though when I refresh the services.msc, it doesnt show anything about a service being stopped and started)

any ideas?
0
 
LVL 10

Expert Comment

by:dhruvarajp
Comment Utility
i think the transport service is hitting the backpreasure

http://www.msexchange.org/articles_tutorials/exchange-server-2007/management-administration/understanding-back-pressure-feature-exchange-server-2007.html

reaching the stage five.. again... and this is going in cycle

0
 
LVL 10

Expert Comment

by:dhruvarajp
Comment Utility
i guess a user is a culprit here.. you might not have the max message size limit.. and someone is trying to
send a huge email .. you have outbox full.. tansport service is not able to deal with the uncommted transcations in the database..

0
 
LVL 10

Expert Comment

by:dhruvarajp
Comment Utility
this is another article for backpreasure
http://technet.microsoft.com/en-us/library/bb201658(EXCHG.80).aspx


Dhruv
0
 

Author Comment

by:Black-Knight
Comment Utility
ill have a look at those articles... im sure I had the max message size limit size set... if it is the outbox issue, how can I fix it? login to each user to find out who has a big message in their outboxes?
0
 
LVL 10

Expert Comment

by:dhruvarajp
Comment Utility
aslo there might be client older that 2003 sp2 .. that does not reject emails larger they are allowed to send
.
0
How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

 
LVL 10

Expert Comment

by:dhruvarajp
Comment Utility
if you have set the max size.. you have a clinet who has PRE outlook 2003 SP2

..
0
 

Author Comment

by:Black-Knight
Comment Utility
everyone is on a terminal server with microsoft office 2003 sp3 :-)
0
 
LVL 10

Expert Comment

by:dhruvarajp
Comment Utility
all this is happening so quickly .. i am not sure
if your network trace will give hint of the ip address that is giving maximum connextions

you can try to take multiple network traces of the HUB server to look for the user ip address ..
once you figure the user.. disable mailbox
0
 

Author Comment

by:Black-Knight
Comment Utility
maybe i should just login to every single user via OWA and check their outboxes... if there are no big messages there then I suppose we crossed one item out of the list of possibilities
0
 

Author Comment

by:Black-Knight
Comment Utility
but if it was a backpressure, wouldnt an event id 15002 be logged?
0
 

Author Comment

by:Black-Knight
Comment Utility
ive tried disabling backpressure... nothing
0
 

Author Comment

by:Black-Knight
Comment Utility
I have checked every single user's mailbox... there are no stuck messages on outbox that are any  bigger than 50kb... and I have tried disabling backpressure and nothing... any other ideas?
0
 
LVL 10

Expert Comment

by:dhruvarajp
Comment Utility
hmm.. we need to take the dump of the transport exe and have msft analyze it and they will expalin what happned

0
 

Author Comment

by:Black-Knight
Comment Utility
also, I have just tried disabling EVERY SINGLE mailbox but the administrator... restarted transport service, still nothing, e-mail won't leave the mailbox, new emails wont come in
0
 

Author Comment

by:Black-Knight
Comment Utility
any ideas? im getting crazy here
0
 

Author Comment

by:Black-Knight
Comment Utility
anyone??
0
 

Accepted Solution

by:
Black-Knight earned 0 total points
Comment Utility
Hey guys, I've solved it.

Turns out IT WAS the Security System.

We have an Endpoint security running from our N.able system... endpoint is nothing but Panda Security for Exchange Servers.

I DID uninstall Panda but i found that one file, named "PSExTransportAgent.dll" was still in the system. After deleting it, Transport service wouldn't startup anymore. I then went to Exchange Management Shell and run a get-transportagent command - found a "Panda Security for Exchange Servers Routing Agent" in the list. I ran a "disable-transportagent "panda security for exchange servers routing agent"" command and the problem has been fixed.

Why this agent was blocking the port 25, I have no idea, I'm going to contact the manufacturer about this issue.

Thanks for the help anyways.
0
 

Expert Comment

by:nera2001
Comment Utility
Thank you Black-Knight!
I had the same issue after deinstalling Spamfighter for Exchange and your Solution did it perfect also for me!

Thank you again!
0
 

Expert Comment

by:Scotty
Comment Utility
After uninstalling Trend Micro Worry free from our SBS 2011 server I experienced the same issue.  This solution did it perfect for me

Thank you!
0

Featured Post

The problems with reply email signatures

Do you wish that you could place an email signature under a reply? Well, unfortunately, you can't. That great Exchange/Office 365 signature you've created will just appear at the bottom of an email chain. What a pain! Is there really no way to solve this? Well, there might be...

Join & Write a Comment

Following basic email etiquette rules will help you write a professional email and achieve a good, lasting impression with your contacts.
This article explains in simple steps how to renew expiring Exchange Server Internal Transport Certificate.
how to add IIS SMTP to handle application/Scanner relays into office 365.
This video discusses moving either the default database or any database to a new volume.

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now