RE: Exchange 2003 sp1 stops responding

From: Pat Cai [MSFT] (v-patcai_at_online.microsoft.com)
Date: 02/04/05 

Date: Fri, 04 Feb 2005 14:09:03 GMT

I found some new clues for the problem.

In the event log, we got a lot of 9527, 9567 warnings and 1021 errors.

-- Open the event viewer
-- Right-click on Application Log, select View/Filters, select to view
error or warning only

9567 indicates there is an operation from antivirus software.
9527 indicates the antivirus firewall detect a worm in the email attachment
and delete the attachment
1021 indicates a user is rejected to logon his mailbox, if the he exceeds
the client connection limitation would cause this error event. I notice
that these error events are get together in a short time period from one
user. For example, in a continued 2 hours, it comes from Haraldn, in
another continued 20 minutes, it comes from Ivan.

So I suspect the situation is:

Some user clients have infected by worm virus so they send virus message to
server in a short period at a huge volume. Which cause the client
connection exceeds the limitation even causes the server hang.

Please check your application log to verify the problem. You may
temporarily block the certain clients and monitor the server performance
again.

Hope the information helps.

BTW: My reply may be delay due to the coming weekend. Thank you for your
understanding.

Regards,

Pat Cai
Microsoft Online Partner Support

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
Business-Critical Phone Support (BCPS) provides you with technical phone
support at no charge during critical LAN outages or "business down"
situations. This benefit is available 24 hours a day, 7 days a week to all
Microsoft technology partners in the United States and Canada. This and
other support options are available here:

BCPS:
https://partner.microsoft.com/US/technicalsupport/supportoverview/40010469
Others: https://partner.microsoft.com/US/technicalsupport/supportoverview/

If you are outside the United States, please visit our International
Support page:
http://support.microsoft.com/default.aspx?scid=%2finternational.aspx.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

Relevant Pages

  • NFS problems with through 2.5.x to 2.6.0-test9
    ... When the server is running the ... kernel, as a client the 2.6 series seem to work perfectly, excluding ... Interesting problem arose when I attempted switch the server's kernel to ... with and without nfsv4 support compiled in (was considering testing it at ...
    (Linux-Kernel)
  • Re: FileCopy vs. Read & Write or CopyFile API
    ... client is copying the file in 5 or 10 seconds is to big. ... Dim errNum as Integer ... synchronize a document in server to its client with VB FileCopy function. ... Microsoft Online Community Support ...
    (microsoft.public.vb.general.discussion)
  • Re: FileCopy vs. Read & Write or CopyFile API
    ... client is copying the file in 5 or 10 seconds is to big. ... Dim errNum as Integer ... synchronize a document in server to its client with VB FileCopy function. ... Microsoft Online Community Support ...
    (microsoft.public.vb.general.discussion)
  • RE: HP officejet 5610
    ... As far as I know none support ... Microsoft MVP - Terminal Server ... Virtual Client Solutions ... printers, assuming the client is Vista SP1 or XP SP3 with RDP Client 6.1. ...
    (microsoft.public.windows.terminal_services)
  • Re: Have you had good results with Trend Micro support?
    ... I spoke with a supervisor for tech support on Thursday regarding this issue. ... Trend Micro Client Server Messaging Security from version 2.0 to 3.6 on ... One of the clients also has a Server 2003 file server and the pattern ... I tried uninstalling the TM Client, ...
    (microsoft.public.windows.server.sbs)
Loading