Exchange 2010 Mailbox 0kb - Possible to recover?

Long story short, we have a client who's mail server (exchange 2010) had some sort of issue. They decided to go ahead and reboot it because their outlook clients were not connecting. After the reboot, the server was stuck on a completely blank/black screen. They did a hard shut off, powered it back up and we were able to get back into it.

Once it came back up, I checked the log files and it appeared as though there were a lot of logs regarding errors on the disk and it recommended running a chkdsk.

They have two volumes, a primary mirror (operating system) and a raid-5 which was housing the database files. We created a new temporary mailbox so that they could send/receive mail.

The corrupt database currently shows as being 0kb in size... However we have approximately 143GB of log files in the same directory... My question is, can anything be done with those log files to rebuild/repair the corrupt DB? Even if it is unusable afterwards, any chances of us being able to recover mailboxes to a PST file would be tremendously helpful.
LVL 10
Timothy McCartneySYS ADMINISTR I INFRASAsked:
Who is Participating?
 
Simon Butler (Sembee)ConsultantCommented:
You should be able to replay those logs in to a new database.

However I would strongly recommend that you call Microsoft support and get them to assist you. It is possible to recover from the situation you are in, but it has to be done with care.

Take a copy of everything, an image if you can, so you can try again if required.

Simon.
0
 
Neil RussellTechnical Development LeadCommented:
I am assuming you never configured any exchange backups for the client that you can restore from?
0
 
AmitIT ArchitectCommented:
Do you see any event id 55 in system logs. I have faced same issue recently, after running chkdisk edb file is gone back to 0 KB. So the only solution is to restore it back from the backup, and the logs which are present on the server with replay to restored db automatically, so you will be back to most current db state. Do it and let me know the result.
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

 
Timothy McCartneySYS ADMINISTR I INFRASAuthor Commented:
I will look into the replay option.

As far as backups are concerned, you are correct. They had none (only because they denied it... which they are deeply regretting at this point).
0
 
AmitIT ArchitectCommented:
This is for everyone, no use of going to MS, i wasted 2 weeks and MS was unable to provide any solution apart from restoring it from backup.
0
 
Simon Butler (Sembee)ConsultantCommented:
Just because you had a poor experience with MS Support doesn't mean everyone else does. If you were down, you should have asked for the case to be escalated. In a server down situation Microsoft support are the best people to refer to. All of the data is there (in the logs) but to get the data back will take some care.

Simon.
0
 
AmitIT ArchitectCommented:
Sure...I don't disagree with your suggestion, however i shared my exp.
0
 
Timothy McCartneySYS ADMINISTR I INFRASAuthor Commented:
Can anyone provide a walk through of how to perform the replay of those log files into a new empty database?
0
 
Simon Butler (Sembee)ConsultantCommented:
I haven't seen a walk through written down and haven't done it myself for some time.
I hate sounding like a broken record, but seriously, the best option is to call Microsoft Support and get them to do it. Pay their fee. They will make sure that everything is correct for the maximum success. The more times you try yourself the more you reduce your chances of success.

My advice to all clients, no matter what the size, in a server down situation like this, call Microsoft.

Simon.
0
 
Timothy McCartneySYS ADMINISTR I INFRASAuthor Commented:
I understand the best case scenario would be to call Microsoft support and everything, but that is not an option at this time.

The data is not critical enough to pay for additional support. In the end, if no recovery can be done, they will be cutting their losses and moving on.

The command I just ran (and it appeared to 'work') was:

[From the directory of copied, corrupt database]ESEUTIL /r E00 /i /d "NewRecoveryDatabase.edb"

It appears to complete in 1.919 seconds... however I don't feel like this is really doing anything.
0
 
AmitIT ArchitectCommented:
If you have backup for this db, then you can replay these logs. It seems backup is not present, so i don't see much option, as db file is corrupt and can't be recoverd.
0
 
Timothy McCartneySYS ADMINISTR I INFRASAuthor Commented:
So you're saying that in order to replay log files, it must be a recovered copy of the original database? And it cannot be a brand new one?
0
 
AmitIT ArchitectCommented:
That's right.
0
 
ExchangePanditCommented:
I completely agree with Sembee on this one. You should call MS, as its Server down situation, you can make it a Sev A and they will work with till this issue is resolved. You can ask for Escalation and you should be able to get to someone who should be able to get you guys back on track.

Regards
EP
0
 
Timothy McCartneySYS ADMINISTR I INFRASAuthor Commented:
I've requested that this question be deleted for the following reason:

None of the answers solved the issue.
0
 
Neil RussellTechnical Development LeadCommented:
Just because you do not like the answer of NO, Nothing can be done except call MS does not mean you should delete the question. The answers given by the guys who say NO and CALL MS is the correct answer in my opinion.  You asked IF anything can be done, the answer is NO.
0
 
Timothy McCartneySYS ADMINISTR I INFRASAuthor Commented:
I apologize, you are correct. I will assign points to those who offered help and gave me the best 'solution' to my situation.


Thanks again to everyone who took the time to post their answers.
0
 
Neil RussellTechnical Development LeadCommented:
Could we have an explination of the points awarded and as to HOW the problem was solved as first closure stated that NONE of the above helped to solve the issue?
0
 
Timothy McCartneySYS ADMINISTR I INFRASAuthor Commented:
The issue is still unresolved. It appears as though our client has to cut their losses and move on. Hopefully they decide to implement a backup system this time.

I tried to assign points to the answers that served to help me the most in determining my issue is hopeless.
0
 
ID10T3000Commented:
Who else has seen an event ID 55 with Ex210 on W2K8.   We have seen a couple and I would like to avoid them in the future.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.