Re: Exchange ntbackup restore ESE BACKUP A checkpoint file is damaged

Please feel free to take a look at KB: http://support.microsoft.com/?id=313184
How to recover the information store on Exchange 2000 Server or Exchange Server 2003 in a single site


--
jesmin ningthoujam

"David Christensen" <DavidChristensen@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:9598976A-7CF4-4FDD-B61F-6930F3A434B3@xxxxxxxxxxxxxxxx
hello, world!

I'm a SBS and Exchange newbie running a tiny home network using MAPS
software. In the afternoont of 8/3/2006, I noticed that Outlook wasn't
connected to
Exchange 2003 on my Microsoft Windows Server 2003 for Small Business Server
Premium. When I logged in to the server, I noted Event Viewer -> Application
had
an error message every minute or so from MSExchangeSA:

The MAPI call 'OpenMsgStore' failed with the following error:
The Microsoft Exchange SErver computer is not available. Either there
are network problems, or the Microsoft Exchange Server Computer is down for
maintenance.
The MAPI provider failed.
Microsoft Exchange Server Information Store
ID no: 8004011d-0526-00000000


Starting Exchange System Manager and drilling down HOLGERDANSKE (EXchange)
-> Servers -> P42800E -> First Storage Group, I noticed that both Mailbox
Store
(P42800E) and Public Folder Store (P42800E) were down. When I tried
mounting them, I received an error from Exchange System Manager and an entry
in Event
Viewer -> Application that led me to discover that my Exchange data store
was corrupt (message text not available).


Using Windows Explorer, I noted a file named something like "E:\Exchange
Transaction Logs\E0000001.log.vir". The .vir extension told me that McAfee
Virus
Scan Enterprise had detected a virus in that file, and renamed the file to
make it inaccessible. Not understanding how the Exchange database works, I
deleted the file and attempted to restart Exchange figuring that Exchange
would regenerate the logs when I mounted the stores. No such wishful
thinking
happened. Again, more error messages and Event Logs (message text not
available).


I have been taking daily full backups of First Storage Group and System
State daily using ntbackup, and have the image from prior to the disaster.
So, I
decided to try to figure out how to restore the Exchange message store using
ntbackup.


STFW, I came up with [1]. I also pulled [2] off the shelf and re-read
Chapter 12, "Backup and Restore".


I made copies of the damaged E:\Exchange Store and E:\Exchange Transaction
Logs folders. I also made *.pst files for every user using Outlook. The
machine
has two single hard drives (C: and E:), so I took Ghost images of both.


I then used Exchange System Manager to check "This database can be
overwritten by a restore" for both Mailbox Store (P42800E) and Public Folder
Store
(P42800E).


I have configured MVSE to not monitor accesses to the E: drive.


I then tried restoring the Exchange data stores using ntbackup:

1. Tools -> Options:

General tab

checked -- Compute selection information before backup and restore
operations

checked -- Use the catalogs on the media to speed up building
restore catalogs on disk

checked -- Verify data after the backup completes

checked -- Back up the contents of mounted drives

checked -- Show alert emssage when I start the Backup Utility and Removable
Storage is not running

checked -- Show alert message when I start the Backup Utility and there is
recognizable media available

checked -- Show alert message when new media is inserted

unchecked -- Always allow use of recognizable media without prompting

Restore tab

selected -- Do not replace the file on my computer (recommended)

unselected -- Replace the file on disk only if the file on disk is older

unselected -- Always replace the file on my computer

Backup Type tab

Default Backup Type -- Normal

Backup Log tab

unselected -- Detailed -- Logs all information, including the names of all
the files and folders

selected -- Summary -- Logs only key operations, such as loading a tape,
starting the backup, or failing to open a file

unselected -- None -- Do not log

Exclude Files tab

Files excluded for all users:

\.*crmlog
\hiberfil.sys
\Pagefile.sys
...
<many more; I've never touched the defaults>

Files excluded for user Administrator:

<empty list>

2. Select Restore and Manage Media tab:

a. In the "Expand the desired media item, then check the box for the
items to restore. Right click on a media item for options:" list:

1. Expand File.

a. Expand P428000-exchange-ss-20060802-204910.bkf created 8/2/2006.

1. Check P42800E\Microsoft Information Store\First Storage Group.

2. Leave unchecked System State.

b. The "Restore files to:" drop-down list is grayed out and set to
"Original Location".

c. Click "Start Restore" button.

3. Restoring Database Store dialog:

a. "Restore To" edit box is already set to P42800E.

b. Set the "Temporary location for log and patch files" to
C:\ntbackup-temp (folder previously created using Windows Explorer).

c. Check "Last Restore Set (Log file replay will start after this
restore completes)".

d. Leave unchecked "Mount Database After Restore"

e. Click "OK" button.

4. Restore Progress dialog appears and Status indicates "Restoring files to
your computer". After 41 seconds, I see The Restore is complete, Status
indicates "Completed", Files indicates 5, and Bytes indicates 547,529,252.
Here is the Report:

Restore Status
Operation: Restore

Backup of "P42800E\Microsoft Information Store\First Storage Group",
Restored to"P42800E\Microsoft Information Store\First Storage Group"
Backup set #1 on media #1
Backup description: "Set created 8/2/2006 at 8:49 PM"

Restore started on 8/7/2006 at 7:57 PM.
Restore completed on 8/7/2006 at 7:58 PM.
Directories: 4
Files: 5
Bytes: 547,529,252
Time: 41 seconds

5. Looking at E:\Exchange Store:

08/07/2006 07:58 PM 513,945,600 priv1.edb
08/07/2006 07:58 PM 8,396,800 priv1.stm
08/07/2006 07:58 PM 17,838,080 pub1.edb
08/07/2006 07:58 PM 2,105,344 pub1.stm

The dates/times on the files correspond to when I ran the restore.

6. Looking at E:\Exchange Transaction Logs:

08/07/2006 07:26 PM 5,242,880 E00.log
08/07/2006 03:26 PM 5,242,880 res1.log
08/07/2006 03:26 PM 5,242,880 res2.log

The date/time on E00.log is stale. The dates/times/ on res1.log and
res2.log are about the time I booted the server.

7. Looking at C:\ntbackup-temp\First Storage Group:

08/07/2006 07:58 PM 5,242,880 E0000101.log
08/07/2006 07:58 PM 1,086 restore.env

The dates/times on the files correspond to when I ran the restore.

8. Looking in Event Viewer -> Application:

a. ESE BACKUP -- Information Store (3948) Callback function call
ErrESECBRestoreComplete ended with error 0xC8000262 Existing log file has bad
signature

b. ESE BACKUP -- Information Store (3948) Restore from directory
C:\ntbackup-temp\First Storage Group ended with error (Existing log file has
bad
signature).

c. MSExchangeSA -- The MAPI call 'OpenMsgStore' failed... (every
minute, as above).

9. If I delete the contents of E:\Exchange Transaction Logs and repeat
steps (2) through (8) above, Event Viewer now has:

a. ESE BACKUP -- Information Store (3948) Callback function call
ErrESECBRestoreComplete ended with error 0xC8000214 A checkpoint file is
damaged.

b. ESE BACKUP -- Information Store (3948) Restore from directory
C:\ntbackup-temp\First Storage Group ended with error (Error returned from an
ESE
function call (-532))

c. MSExchangeSA -- The MAPI call 'OpenMsgStore' failed... (every
minute, as above).


STFW and RTFM yesterday, I concluded that "checkpoint file" means edb.chk.
There are five on my C: drive and none elsewhere:

C:\WINDOWS\NTDS\edb.chk
C:\WINDOWS\security\edb.chk
C:\WINDOWS\system32\CatRoot2\edb.chk
C:\WINDOWS\ntfrs\jet\sys\edb.chk
C:\WINDOWS\SoftwareDistribution\DataStore\Logs\edb.chk


I seem to recall reading that the checkpoint file needs to be removed for
certain database restore operations. So, I moved aside
C:\WINDOWS\SoftwareDistribution\DataStore\Logs\edb.chk repeated step (9)
above, and obtained the same results. I've moved the checkpoint file back,
and I'm
hesitant to mess with the others.


Any suggestions?


TIA,

David Christensen
dpchrist@xxxxxxxxxxxxxxxx


References:

[1] Jon Hoerlein, Chris Frediani, 2002, "Disaster Recovery for Microsoft
Exchange 2000 Server",

http://www.microsoft.com/technet/prodtechnol/exchange/2000/library/disrec00.mspx

[2] Will Willis, Ian McLean, 2004, "MCSA/MCSE Self-Paced Training Kit (Exam
70-284): Implementing and Managing Microsoft Exchange Server 2003",

http://www.microsoft.com/learning/exams/70-284.asp