[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

Exchange 2003, log files deleted, messages getting stuck in queue

Posted on 2011-10-24
16
Medium Priority
?
404 Views
Last Modified: 2012-05-12
Exchange 2003 server running on Windows Server 2003.

While I was away from the office, there was a problem with disc space on the server and some of the log files from:

C:\WINDOWS\system32\LogFiles\W3SVC1 and C:\WINDOWS\system32\LogFiles\SMTPSVC1

have been deleted (Anything older that September is gone) and I don't really have a backup of the C:\ drive on that box, only the Exchange data.

Since the log files were deleted about once a day the server needs a restart otherwise we can't send/receive mail. When i go into System Manager and look in the Queues, there are just loads of messages stuck in there and the state is 'retry' but the queues never go down until the server is restarted, then it seems to work fine again for a few hours to a day until it happens again.

I'm assuming the 2 things have to be related and reading up on those log files they obviously shouldn't have been deleted. Is there anything I can do to get the server running properly again without the old log files?



EDIT: Couple of things from the event log:

Unexpected error <<0xc1050000 - Unknown Error. The logon to the Microsoft Exchange Server computer failed. Microsoft Exchange Server Information Store ID no: 80040111-03ee-80040111>> occurred.

AND:

The MAPI call 'OpenMsgStore' failed with the following error:
The attempt to log on to the Microsoft Exchange Server computer has failed.
The MAPI provider failed.
Microsoft Exchange Server Information Store
ID no: 8004011d-0512-00000000

AND:

Unexpected Exchange mailbox Server error: Server: [ukmx1.stottgroup.local] User: [******@******.com] HTTP status code: [503]. Verify that the Exchange mailbox Server is working correctly.
0
Comment
Question by:mce-man-it
  • 11
  • 3
14 Comments
 
LVL 18

Expert Comment

by:irweazelwallis
ID: 37016801
you will need to take the server offline for a while to sort out the logs, never good if they have been manually deleted.

you can use these two good guide to have a look through and see what state your DB is and how much work you need to do to recover it
http://www.msexchange.org/tutorials/exchange-isinteg-eseutil.html

http://technet.microsoft.com/en-us/library/aa998074%28EXCHG.65%29.aspx
0
 

Author Comment

by:mce-man-it
ID: 37016894
I figured that was the case but eseutil doesn't seem to have a switch to specifically fix log file issues...

What do I actually need to run here?
0
 
LVL 18

Expert Comment

by:irweazelwallis
ID: 37016924
firstly run this one ESEUTIL /G which will tell you what state the DB is in

then use that to figure out what to do next - post it up and i am sure me and some others will be able to help
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 

Author Comment

by:mce-man-it
ID: 37016930
Ok thanks - any idea how long roughly that may take (the DB is about 90gb I think)

Wondering whether I can run it while people are out for lunch or if I should wait til tonight to take it offline
0
 

Author Comment

by:mce-man-it
ID: 37017602
Just been on to Microsoft and they will not help, just because Exchange is running on VMWare, even though the problem is clearly the issue with missing log files and nothing to do with VM.

I'm going to run ESEUTIL /G tonight after hours, but does anyone have any further ideas in the meantime?

thanks
0
 
LVL 18

Expert Comment

by:irweazelwallis
ID: 37018604
are the log files permanently deleted - if you can put them back then it will be easier to do a recovery

on 90GB's it may take a while - dependant on your hardware if you can isolate that host so that there is nothing else on that host and preferably that lun just to make sure its uncontended
0
 

Author Comment

by:mce-man-it
ID: 37019099
Yeah the C:\ drive isn't backed up, only the Exchange data

Will just have to run it tonight and see how it goes on

thanks
0
 

Author Comment

by:mce-man-it
ID: 37024800
Wasn't able to bring the database offline last night as one of the foreign offices was working late

Seems to be more stable today for some reason though
0
 

Author Comment

by:mce-man-it
ID: 37029529
Happened again in the evening - the Queues just get stuck in 'retry' state and have to restart the server to get things going again

Does anyone know any way to stop this happening? Is there anyway to start afresh with the log files or something? Getting desperate now
0
 

Author Comment

by:mce-man-it
ID: 37029544
Wow ok - I've found a different error message this time... at the exact time it went down:

Exchange store 'First Storage Group\Mailbox Store (UKMX1)': The logical size of this database (the logical size equals the physical size of the .edb file and the .stm file minus the logical free space in each) is 77 GB. This database size has exceeded the size limit of 75 GB.

This database will be dismounted immediately.


0
 

Author Comment

by:mce-man-it
ID: 37029562
Does this just mean I need to get people to archive/delete mails to bring the size down or is there another step I need to take after this to ensure the database size is under 75gb?
0
 

Author Comment

by:mce-man-it
ID: 37029747
Also after I've done my archiving is there any way to see the actual size of these files to check they are under 75gb

the sizes now are 62gb + 27gb but obviously that isn't the logical size..
0
 

Accepted Solution

by:
mce-man-it earned 0 total points
ID: 37036637
Well problem solved - was the size of the database

Guess a move to Exchange 2007 is in order
0
 

Author Closing Comment

by:mce-man-it
ID: 37061178
Found the problem, the size of the database - need to upgrade to Exchange 2007
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Steps to fix “Unable to mount database. (hr=0x80004005, ec=1108)”.
Exchange administrators are always vigilant about Exchange crashes and disasters that are possible any time. It is quite essential to identify the symptoms of a possible Exchange issue and be prepared with a proper recovery plan. There are multiple…
This video demonstrates how to sync Microsoft Exchange Public Folders with smartphones using CodeTwo Exchange Sync and Exchange ActiveSync. To learn more about CodeTwo Exchange Sync and download the free trial, go to: http://www.codetwo.com/excha…
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…
Suggested Courses

873 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question