RE: Exchange backup on SBS2003 'crashes' server

Thanks for the detailed reply! I'll try your suggestions when I can schedule
some acceptable downtime.

As for the symptoms: After the crash, no server resources are available on
the network. Users at the office noted only a black unresponsive screen, but
that could be due to the fact that the monitor was set to power off. I've
removed that, so let's see if we get a bsod or two. The time of the crash in
the event log is immediately after the time stamp on the last ESE startup
event. The log created by the backup is completely empty.

Thanks again!



"chace zhang" wrote:

Hi,

Thank you for posting here.

According to your description, I understand the server usual crashed during
NTbackup, and you receive following event 5603, 2003, 1006 from the SBS
2003 event log

You mean the SBS crash, do you encountered blue screen?

What's the detailed symptom? Did you see any error messages during backup
fail?

Based on my research


Event 5603

Based on my research, this is a by-design behavior. The reasoning behind
the warning is that the operating system informs the administrators that a
WMI provider runs under the LocalSystem context. This is the reason why we
see this warning anytime the WMI service starts up.

Event 1016:

As the description indicated, the data buffers create for "EXOLEDB" and
"IS" services are not aligned on 8-byte boundary. This issue is by-designed
behavior for mdbperf.dll and iasperf.dll. This is a normal behavior for
these libraries. You can safely ignore these warning messages.

If you do not want to receive the event 1016, you may try the following
steps to disable the data buffer alignment test:

1. Click ''Start''-->''Run''-->Type ''regedit'' (without the quotation
marks) and press Enter.

2. Navigate to the follow registry:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Perflib

3. Right-click it and choose ''New''-->''DWORD Value''. Create a new
REG_DWORD value named ''Configuration Flags''

4. Double-click the newly created DWORD value and modify the Value data to 1

5. Close the registry editor and restart the server at a non-business time
to see if the problem occurs again.

For more information:
249138 INFO: Controlling the Disabling of Performance Monitor Extensions
http://support.microsoft.com/?id=249138


=======
Event 2003:

This event could occur when server was heavy loaded or some particular
third-party software was installed on the server. Could you please tell me
if there is any server management software ware such as HP agent service
installed on the SBS server? If so, you may disable the third-party
management software to see if the problem will occur again. If the warning
only occurs when the server is starting up, there will be no impact to your
SBS server.
More info please refer to following article to troubleshoot.
Event ID 2003 Warning Message Logged When Loading Performance Counters
http://support.microsoft.com/kb/267831

Note: You can safely to use the steps on a SBS 2003 server.


I think these events are not related backup exchange crash issue, currently
I would like to suggest you schedule a down time to perfrom a clean boot. A
Clean Boot will allow us to isolate any device drivers or programs that are
loading at startup that may be causing a conflict with other device drivers
or programs that are installed in your computer.

A. Click Start, click Run, type "msconfig" (without the quotation marks)
and click OK.
B. Select "Selective Startup" and remove the check box for "Load Startup
Items".
C. On the "Services" tab, click Enable All.
D. Check "Hide all Microsoft Services", click Disable All and clear "Hide
all Microsoft Services".
E. Click the OK button and then Click Yes to restart your computer.
F. Try again and see if the issue occurs.

If the issue persists, please gather backup log for further analysis:

If you using NTBackup, please gather backupxx.log files in the folder
'C:\Documents and Settings\SBS Backup User\Local Settings\Application
Data\Microsoft\Windows NT\NTBackup\data'; if you using SBS Backup wizard,
please gather Sbsbackuplog0x.log files which can be located under the
folder '%sbsprogramdir%\Support\Backup Logs'

To do so

Best Regards,

Chace Zhang (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.


--------------------
| Thread-Topic: Exchange backup on SBS2003 'crashes' server
| thread-index: AcbRHVpwAQpHc+xcQ0GLboDYvA8Iiw==
| X-WBNR-Posting-Host: 64.163.25.22
| From: =?Utf-8?B?QWxleA==?= <Alex@xxxxxxxxxxxxxxxxxxxxxxxxx>
| Subject: Exchange backup on SBS2003 'crashes' server
| Date: Tue, 5 Sep 2006 11:59:02 -0700
| Lines: 50
| Message-ID: <EE07804B-EDF9-4798-A724-D31631725C9D@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
| Newsgroups: microsoft.public.windows.server.sbs
| Path: TK2MSFTNGXA01.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:295393
| NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| An SBS2003 server that has been running stable since I set it up 9 months
ago
| has just started crashing on about every 1 in 4 exchange backups
(performed
| by NTBackup). The last events in the log before the crash are the ESE
events
| notifying that the backup has started.
|
| After hard reboot, several perflib warnings are logged:
| 1.) winmgmt (Event ID 5603):
| A provider, PerfProv, has been registered in the WMI namespace,
| ROOT\CIMV2\MicrosoftHealthMonitor\PerfMon, but did not specify the
| HostingModel property. This provider will be run using the LocalSystem
| account. This account is privileged and the provider may cause a
security
| violation if it does not correctly impersonate user requests. Ensure
that
| provider has been reviewed for security behavior and update the
HostingModel
| property of the provider registration to an account with the least
privileges
| possible for the required functionality.
|
| 2.) Perflib (2003):
| The configuration information of the performance library
| "C:\WINDOWS\system32\aspperf.dll" for the "ASP" service does not match
the
| trusted performance library information stored in the registry. The
functions
| in this library will not be treated as trusted.
|
| 3.) Perflib (1016):
| The data buffer created for the "EXOLEDB" service in the "C:\Program
| Files\Exchsrvr\bin\exodbpc.dll" library is not aligned on an 8-byte
boundary.
| This may cause problems for applications that are trying to read the
| performance data buffer. Contact the manufacturer of this library or
service
| to have this problem corrected or to get a newer version of this library.
|
| 4.) Perflib (1016):
| The data buffer created for the "MSExchangeIS" service in the "C:\Program
| Files\Exchsrvr\bin\mdbperf.dll" library is not aligned on an 8-byte
boundary.
| This may cause problems for applications that are trying to read the
| performance data buffer. Contact the manufacturer of this library or
service
| to have this problem corrected or to get a newer version of this library.
|
| I've checked out http://support.microsoft.com/kb/226494/ and several
other
| resources, but haven't found a potential fix. Mainly, I'm not sure
whether
| the performance monitor is related to the crash, or whether the above
| warnings are a result of the crash. There are no other warnings besides
the
| ExchangeMTA database recovery alerts, which state that the MTA database
| cleanup was succesful (because of the crash).
|
| SBS2003 is up to date with SP1, and I have Exchange SP2 installed.
NTBackup
| also performs a separate data backup, but that never seems to crash the
| server.
|
| Any ideas or suggestions would be very much appreciated.
|
| Thanks!
|


.