RE: Exchange backup on SBS2003 'crashes' server

Hi,

Thanks for your update.

If you need more assistance on this issue, please do not hesitate to let me
know. If the issue persists, please gather the info that I mentioned in my
previous response. My emails address: v-chacez@xxxxxxxxxxxxx

I look forward to your update.

Have a great weekend!

Best Regards,

Chace Zhang (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.


--------------------
| Thread-Topic: Exchange backup on SBS2003 'crashes' server
| thread-index: AcbSViNWUOmZ6F2sSkCiT3Vh3vsLPg==
| X-WBNR-Posting-Host: 64.163.25.22
| From: =?Utf-8?B?QWxleA==?= <Alex@xxxxxxxxxxxxxxxxxxxxxxxxx>
| References: <EE07804B-EDF9-4798-A724-D31631725C9D@xxxxxxxxxxxxx>
<MwhVGvY0GHA.4280@xxxxxxxxxxxxxxxxxxxxx>
| Subject: RE: Exchange backup on SBS2003 'crashes' server
| Date: Thu, 7 Sep 2006 01:18:02 -0700
| Lines: 242
| Message-ID: <9326AA52-128C-4613-B969-14FA36F9FFDC@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
| Newsgroups: microsoft.public.windows.server.sbs
| Path: TK2MSFTNGXA01.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:295824
| NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Thanks for the detailed reply! I'll try your suggestions when I can
schedule
| some acceptable downtime.
|
| As for the symptoms: After the crash, no server resources are available
on
| the network. Users at the office noted only a black unresponsive screen,
but
| that could be due to the fact that the monitor was set to power off.
I've
| removed that, so let's see if we get a bsod or two. The time of the
crash in
| the event log is immediately after the time stamp on the last ESE startup
| event. The log created by the backup is completely empty.
|
| Thanks again!
|
|
|
| "chace zhang" wrote:
|
| > Hi,
| >
| > Thank you for posting here.
| >
| > According to your description, I understand the server usual crashed
during
| > NTbackup, and you receive following event 5603, 2003, 1006 from the SBS
| > 2003 event log
| >
| > You mean the SBS crash, do you encountered blue screen?
| >
| > What's the detailed symptom? Did you see any error messages during
backup
| > fail?
| >
| > Based on my research
| >
| >
| > Event 5603
| >
| > Based on my research, this is a by-design behavior. The reasoning
behind
| > the warning is that the operating system informs the administrators
that a
| > WMI provider runs under the LocalSystem context. This is the reason why
we
| > see this warning anytime the WMI service starts up.
| >
| > Event 1016:
| >
| > As the description indicated, the data buffers create for "EXOLEDB" and
| > "IS" services are not aligned on 8-byte boundary. This issue is
by-designed
| > behavior for mdbperf.dll and iasperf.dll. This is a normal behavior for
| > these libraries. You can safely ignore these warning messages.
| >
| > If you do not want to receive the event 1016, you may try the following
| > steps to disable the data buffer alignment test:
| >
| > 1. Click ''Start''-->''Run''-->Type ''regedit'' (without the quotation
| > marks) and press Enter.
| >
| > 2. Navigate to the follow registry:
| >
| > HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Perflib
| >
| > 3. Right-click it and choose ''New''-->''DWORD Value''. Create a new
| > REG_DWORD value named ''Configuration Flags''
| >
| > 4. Double-click the newly created DWORD value and modify the Value data
to 1
| >
| > 5. Close the registry editor and restart the server at a non-business
time
| > to see if the problem occurs again.
| >
| > For more information:
| > 249138 INFO: Controlling the Disabling of Performance Monitor Extensions
| > http://support.microsoft.com/?id=249138
| >
| >
| > =======
| > Event 2003:
| >
| > This event could occur when server was heavy loaded or some particular
| > third-party software was installed on the server. Could you please tell
me
| > if there is any server management software ware such as HP agent
service
| > installed on the SBS server? If so, you may disable the third-party
| > management software to see if the problem will occur again. If the
warning
| > only occurs when the server is starting up, there will be no impact to
your
| > SBS server.
| > More info please refer to following article to troubleshoot.
| > Event ID 2003 Warning Message Logged When Loading Performance Counters
| > http://support.microsoft.com/kb/267831
| >
| > Note: You can safely to use the steps on a SBS 2003 server.
| >
| >
| > I think these events are not related backup exchange crash issue,
currently
| > I would like to suggest you schedule a down time to perfrom a clean
boot. A
| > Clean Boot will allow us to isolate any device drivers or programs that
are
| > loading at startup that may be causing a conflict with other device
drivers
| > or programs that are installed in your computer.
| >
| > A. Click Start, click Run, type "msconfig" (without the quotation
marks)
| > and click OK.
| > B. Select "Selective Startup" and remove the check box for "Load
Startup
| > Items".
| > C. On the "Services" tab, click Enable All.
| > D. Check "Hide all Microsoft Services", click Disable All and clear
"Hide
| > all Microsoft Services".
| > E. Click the OK button and then Click Yes to restart your computer.
| > F. Try again and see if the issue occurs.
| >
| > If the issue persists, please gather backup log for further analysis:
| >
| > If you using NTBackup, please gather backupxx.log files in the folder
| > 'C:\Documents and Settings\SBS Backup User\Local Settings\Application
| > Data\Microsoft\Windows NT\NTBackup\data'; if you using SBS Backup
wizard,
| > please gather Sbsbackuplog0x.log files which can be located under the
| > folder '%sbsprogramdir%\Support\Backup Logs'
| >
| > To do so
| >
| > Best Regards,
| >
| > Chace Zhang (MSFT)
| >
| > Microsoft CSS Online Newsgroup Support
| >
| > Get Secure! - www.microsoft.com/security
| >
| > =====================================================
| > This newsgroup only focuses on SBS technical issues. If you have issues
| > regarding other Microsoft products, you'd better post in the
corresponding
| > newsgroups so that they can be resolved in an efficient and timely
manner.
| > You can locate the newsgroup here:
| > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| >
| > When opening a new thread via the web interface, we recommend you check
the
| > "Notify me of replies" box to receive e-mail notifications when there
are
| > any updates in your thread. When responding to posts via your
newsreader,
| > please "Reply to Group" so that others may learn and benefit from your
| > issue.
| >
| > Microsoft engineers can only focus on one issue per thread. Although we
| > provide other information for your reference, we recommend you post
| > different incidents in different threads to keep the thread clean. In
doing
| > so, it will ensure your issues are resolved in a timely manner.
| >
| > For urgent issues, you may want to contact Microsoft CSS directly.
Please
| > check http://support.microsoft.com for regional support phone numbers.
| >
| > Any input or comments in this thread are highly appreciated.
| >
| > =====================================================
| >
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| >
| > --------------------
| > | Thread-Topic: Exchange backup on SBS2003 'crashes' server
| > | thread-index: AcbRHVpwAQpHc+xcQ0GLboDYvA8Iiw==
| > | X-WBNR-Posting-Host: 64.163.25.22
| > | From: =?Utf-8?B?QWxleA==?= <Alex@xxxxxxxxxxxxxxxxxxxxxxxxx>
| > | Subject: Exchange backup on SBS2003 'crashes' server
| > | Date: Tue, 5 Sep 2006 11:59:02 -0700
| > | Lines: 50
| > | Message-ID: <EE07804B-EDF9-4798-A724-D31631725C9D@xxxxxxxxxxxxx>
| > | MIME-Version: 1.0
| > | Content-Type: text/plain;
| > | charset="Utf-8"
| > | Content-Transfer-Encoding: 7bit
| > | X-Newsreader: Microsoft CDO for Windows 2000
| > | Content-Class: urn:content-classes:message
| > | Importance: normal
| > | Priority: normal
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
| > | Newsgroups: microsoft.public.windows.server.sbs
| > | Path: TK2MSFTNGXA01.phx.gbl
| > | Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:295393
| > | NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250
| > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > |
| > | An SBS2003 server that has been running stable since I set it up 9
months
| > ago
| > | has just started crashing on about every 1 in 4 exchange backups
| > (performed
| > | by NTBackup). The last events in the log before the crash are the
ESE
| > events
| > | notifying that the backup has started.
| > |
| > | After hard reboot, several perflib warnings are logged:
| > | 1.) winmgmt (Event ID 5603):
| > | A provider, PerfProv, has been registered in the WMI namespace,
| > | ROOT\CIMV2\MicrosoftHealthMonitor\PerfMon, but did not specify the
| > | HostingModel property. This provider will be run using the
LocalSystem
| > | account. This account is privileged and the provider may cause a
| > security
| > | violation if it does not correctly impersonate user requests. Ensure
| > that
| > | provider has been reviewed for security behavior and update the
| > HostingModel
| > | property of the provider registration to an account with the least
| > privileges
| > | possible for the required functionality.
| > |
| > | 2.) Perflib (2003):
| > | The configuration information of the performance library
| > | "C:\WINDOWS\system32\aspperf.dll" for the "ASP" service does not
match
| > the
| > | trusted performance library information stored in the registry. The
| > functions
| > | in this library will not be treated as trusted.
| > |
| > | 3.) Perflib (1016):
| > | The data buffer created for the "EXOLEDB" service in the "C:\Program
| > | Files\Exchsrvr\bin\exodbpc.dll" library is not aligned on an 8-byte
| > boundary.
| > | This may cause problems for applications that are trying to read the
| > | performance data buffer. Contact the manufacturer of this library or
| > service
| > | to have this problem corrected or to get a newer version of this
library.
| > |
| > | 4.) Perflib (1016):
| > | The data buffer created for the "MSExchangeIS" service in the
"C:\Program
| > | Files\Exchsrvr\bin\mdbperf.dll" library is not aligned on an 8-byte
| > boundary.
| > | This may cause problems for applications that are trying to read the
| > | performance data buffer. Contact the manufacturer of this library or
| > service
| > | to have this problem corrected or to get a newer version of this
library.
| > |
| > | I've checked out http://support.microsoft.com/kb/226494/ and several
| > other
| > | resources, but haven't found a potential fix. Mainly, I'm not sure
| > whether
| > | the performance monitor is related to the crash, or whether the above
| > | warnings are a result of the crash. There are no other warnings
besides
| > the
| > | ExchangeMTA database recovery alerts, which state that the MTA
database
| > | cleanup was succesful (because of the crash).
| > |
| > | SBS2003 is up to date with SP1, and I have Exchange SP2 installed.
| > NTBackup
| > | also performs a separate data backup, but that never seems to crash
the
| > | server.
| > |
| > | Any ideas or suggestions would be very much appreciated.
| > |
| > | Thanks!
| > |
| >
| >
|

.

Loading