RE: exchange event logs



Hi James,

Thanks for posting in our newsgroup.

From your description, I know that after restore from backup, your mailbox
store can't be mounted and you get event 454, 9518, 9175. If that's not
right, please don't hesitate to let me know.

Based on my research on this issue, please take the following steps to see
if the problem can be resolved:

Step 1: I noticed the repair count attribute in the output is 0 (zero), it
means the eseutil /p command was not run on the database. Please run the
eseutil /p command to make repair:

More info:

XADM: Exchange 2000 Server Eseutil Command Line Switches
http://support.microsoft.com/kb/317014/

Step 2: Check the consistency (state) of the information store databases to
determine if you have to remove the Eseutil log files.

1. Please run the following command:

eseutil /mh "C:\program files\exchsrvr\mdbdata\priv1.edb"

2. Check the output to see if the database state as Clean Shutdown. If so,
all the log files have been committed to the information store.

3. If you see the database state is Dirty Shutdown. This state may occur as
a result of corruption or it may occur if the log files have not been
committed to the information store yet. To determine if this state occurs
because the log files have not been committed to the information store,
wait a few minutes, and then run the command again.

Step 3: If the database state is listed as Clean Shutdown, remove all the
log files from the Mdbdata folder. Put these files in a backup folder.

Step 4: Mount the store again.

1. Start Exchange System Manager. To do so, click Start, point to
Programs, point to Microsoft Exchange, and then click System Manager.
2. Double-click ServerName, right-click Mailbox Store, and then click
Mount Store.

More info:

You cannot mount a database because there is a corrupted transaction log in
Exchange 2000
http://support.microsoft.com/?id=301438

If the problem persists, please help me collect the following information
for deep research:

1. Output when you run the eseutil/mh command

2. MPS Report

1) Visit
http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd9
15706/MPSRPT_Exchange.EXE to download the file.
2) Run the MPSRPT_Exchange.EXE on the server box.
3) Wait for 10~15 minutes.
4) Open Windows explorer, navigate to %SYSTEMROOT%\MPSReports\Exchange\cab\
5) Send the .cab file directly to v-robeli@xxxxxxxxxxxxx with subject:
40844377-exchange event logs.

I am looking forward to hear from you.

If you need further assistance, please don't hesitate to let me know.

Best regards,

Robert Li(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================

This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
<Thread-Topic: exchange event logs
<thread-index: AcgU+mJZipaovE5RQUOz9Y0DCvHAnA==
<X-WBNR-Posting-Host: 207.46.192.207
<From: =?Utf-8?B?SmFtZXM=?= <James@xxxxxxxxxxxxxxxxxxxxxxxxx>
<Subject: exchange event logs
<Date: Mon, 22 Oct 2007 15:25:00 -0700
<Lines: 83
<Message-ID: <20F4E245-2043-4DA0-B9EC-F9EB557C825C@xxxxxxxxxxxxx>
<MIME-Version: 1.0
<Content-Type: text/plain;
< charset="Utf-8"
<Content-Transfer-Encoding: 7bit
<X-Newsreader: Microsoft CDO for Windows 2000
<Content-Class: urn:content-classes:message
<Importance: normal
<Priority: normal
<X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2929
<Newsgroups: microsoft.public.windows.server.sbs
<Path: TK2MSFTNGHUB02.phx.gbl
<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:70961
<NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
<X-Tomcat-NG: microsoft.public.windows.server.sbs
<
<I have posted in here before regarding the following problem after doing a
<full restore of C:\:
<
<"I am running exchange 2003 on Microsoft SBS 2003. When I try to access
OWA
<I
<get the following error message "HTTP/1.1 503 Service Unavailable" I am
not
<able to send or receive any email via exchange server. Any thoughts?"
<
<I try to mount the mailbox stores and 66% of the way through and I get the
<following error: "An internal processing error has occured. Try
restarting
<the Exchange System Manager of the Microsoft Exchange Information Services
or
<both.
<ID no: c1041724
<Exchange System Manager"
<
<The following errors show up in the event log immediately after trying to
<mount the mailbox
<
<Event Type: Error
<Event Source: ESE
<Event Category: Logging/Recovery
<Event ID: 454
<Date: 10/22/2007
<Time: 3:06:18 PM
<User: N/A
<Computer: VILDENCRMSERVER
<Description:
<Information Store (1136) First Storage Group: Database recovery/restore
<failed with unexpected error -515.
<
<For more information, click http://www.microsoft.com/contentredirect.asp.
<
<Event Type: Error
<Event Source: MSExchangeIS
<Event Category: General
<Event ID: 9518
<Date: 10/22/2007
<Time: 3:06:19 PM
<User: N/A
<Computer: VILDENCRMSERVER
<Description:
<Error 0xfffffdfd starting Storage Group
</DC=com/DC=vilden-sales/CN=Configuration/CN=Services/CN=Microsoft
<Exchange/CN=VILDEN-SALES/CN=Administrative Groups/CN=first administrative
<group/CN=Servers/CN=VILDENCRMSERVER/CN=InformationStore/CN=First Storage
<Group on the Microsoft Exchange Information Store.
<Storage Group - Initialization of Jet failed.
<
<For more information, click http://www.microsoft.com/contentredirect.asp.
<
<I have followed the kb article:
<Http://support.microsoft.com/default.aspx?scid=kb;en-us;822449 and I get a
<repair count of "Zero" and a database state of "dirty shutdown"
<
<And lastly the following error message occurs regularly in the event
viewer:
<
<Event Type: Error
<Event Source: MSExchangeSA
<Event Category: MAPI Session
<Event ID: 9175
<Date: 10/22/2007
<Time: 3:23:29 PM
<User: N/A
<Computer: VILDENCRMSERVER
<Description:
<The MAPI call 'OpenMsgStore' failed with the following error:
<The Microsoft Exchange Server computer is not available. Either there are
<network problems or the Microsoft Exchange Server computer is down for
<maintenance.
<The MAPI provider failed.
<Microsoft Exchange Server Information Store
<ID no: 8004011d-0526-00000000
<
<For more information, click http://www.microsoft.com/contentredirect.asp.
<
<I hope I have provided detailed enough information to resolve this issue,
<thanks so much,
<
<James
<
<
<
<
<

.



Relevant Pages

  • Re: DNS and Exchange issues
    ... Typically event 9175 is logged when information store is not mounted. ... the Event 8197, based on my research, this issue can occur if the Exchange ... because there are only one Exchange server in SBS ... If the databases are consistent, move all the log files out of the ...
    (microsoft.public.windows.server.sbs)
  • Exchange Disaster Recovery
    ... Information Store service was not started. ... Microsoft Exchange Information Store: ... Error Message: Could not start the Microsoft Information ...
    (microsoft.public.exchange2000.admin)
  • Re: Information Store not starting
    ... command (and removed the appropriate log files after) ... >> Server Information Store database. ... >> Unable to initialize the Microsoft Exchange Information ...
    (microsoft.public.exchange.admin)
  • Missing LOG file, or not?
    ... some reason stopped working. ... Turned out that it cannot not mount information store because it cannot ... The folder holds log files up to ... If I force a log file replay, Exchange correctly goes trought all log ...
    (microsoft.public.exchange.admin)
  • Re: error in information store and MTA stack
    ... I'm not sure which error you are seeing for the Information store. ... Exchange MVP ... > Source: MSExchangeMTA ... Unable to initialize the Microsoft Exchange Information Store ...
    (microsoft.public.exchange.admin)