Exchange 2010 incoming mail delays

Hi,

I have an Exchange 2010 Server (SBS 2012) which is behaving strangely.

The users are complaining that they get no mails for several hours on occasions and then suddenly a whole load of emails arrive in their mailboxes. Further examination has shown that the mail has been received from the Internet in a timely manner, but there has been a delay in moving it to the recipient mailbox. The report below concerns one such email:

Delivery Report for  XXXX XXXXXX ‎(xxxxx@xxxxxxxx.com)‎
Pending
07/04/2015 19:48 xxxxxx-server.xxxxxxx.local
Message was received by  xxxxxx-server.xxxxxxx.loca from in6h.electric.net.
Delivered
08/04/2015 08:14  xxxxxx-server.xxxxxxx.local
The message was successfully delivered.

As you can see the message was delayed by over 12 hours.

Any idea how to go about diagnosing this?

Richard
LVL 1
rpmAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Will SzymkowskiSenior Solution ArchitectCommented:
Have you checked your queue viewer when this happens? This might be due to a speciifc email that is hanging up the rest of the emails to be processed.

I would start by using the queue viewer and see what emails are getting stuck. Also checking the event view as well to ensure that services have not restarted or stopped.

Will.
0
rpmAuthor Commented:
It's tricky to know (remotely) when this is happening, but I'll try and get on at the right time.

What event log should I be looking in?

Richard
0
Will SzymkowskiSenior Solution ArchitectCommented:
The events you will want to filter on are 1001, 1002, 1061, 1005, 1007, 2002, 2019, 2009

If you see theses Inforamtion Events then core Exchange Services have stopped.

You could also just check the services console and go to Microsoft Exchagne (which would be faster)

Will.
0
The 7 Worst Nightmares of a Sysadmin

Fear not! To defend your business’ IT systems we’re going to shine a light on the seven most sinister terrors that haunt sysadmins. That way you can be sure there’s nothing in your stack waiting to go bump in the night.

rpmAuthor Commented:
I can see the following in the log for 08:34 this morning:

"The Information Store has started. Service startup complete, version 14.3 (build 224.2)."

But I cannot see any corresponding shutdown earlier.
0
Will SzymkowskiSenior Solution ArchitectCommented:
I would look for another information log which states that the service has stopped. If the Service has a Stated State then you can assume this service was stopped at this point.

If this is the case then this would be exactly why your users would not receive email. If the Info Store is Stopped then your databases are dismounted. When the Information Store starts backup then your databases are mounted and messages in mail.queue can be commited to the database and your users receive their email.

Look for specifically 1006 which relates to MSExchangeIS Stopped.

Will.
0
rpmAuthor Commented:
The last such event was in February. I am pretty confident there is no log entry for the IS shutting down to correspond to the entry when it started this morning.
0
Will SzymkowskiSenior Solution ArchitectCommented:
Also reference the System Logs as well to see if there is anything in there when this issue occurred.

If there is nothing being referenced in the logs you might need to monitor this over the next few days or until a user complains that they are not receiving their email.

Will.
0
rpmAuthor Commented:
No resolution found!
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
rpmAuthor Commented:
No resolution found!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.