Event 4999, MSExchange Common

Hi All,
I am running Ms Exchange 2010 with SP1 in Windows Server 2008 R2 SP1 x64.
One host with role CAS+HT and another host with role Mailbox.
Everyday i see many Event 4999 in the log and I am afraid something might not been configured properly though there are no issue when operational.
Below is the details :
Watson report about to be sent for process id: 3880, with parameters: E12, c-RTL-AMD64, 14.01.0218.015, M.Exchange.Imap4, M.Exchange.Diagnostics, M.E.D.ExEventLog.LogEvent, System.ArgumentException, ea87, 14.01.0218.011.
I've search across the forum but there were no similar error messages for what i have.
Anybody got a hint what this error is about ?
Thanks.

Hi,
We can see in the error you posted that you are running Exchange 2010 SP1 (14.01.0218.011=SP1).
SP1 hasn't been supported since 1/8/2013 and you really should bring your server up to a supported level (read SP3).
See:
Exchange 2010 Lifecycle
Can't say for sure if that will fix the error you are seeing, but over the years (and rollups) there have been many fixes related to Event 4999
Microsoft Exchange Server 2010 Service Pack 3 (SP3)
http://www.microsoft.com/en-us/download/details.aspx?id=36768
Update Rollup 7 for Exchange Server 2010 Service Pack 3
http://support.microsoft.com/kb/2961522
Post back if you still see the error after patching your server(s)
Martina Miskovic

Similar Messages

  • Every morning receive Event Source MSExchange Common ID 4999

    Every morning at 2/2/2012 2:06:02 AM
     for weeks now we receive Event Source MSExchange Common ID
    SBS 2011 
    Standard – Exchange 2010 => build 14.01.0355.002 (Update Rollup 6 for Exchange Server 2010 SP1)
    Event Details:   
     Watson report about to be sent for process id: 12000, with parameters: E12, c-buddy-RTL-AMD64, 14.01.0355.001, BPA, M.E.Data.Directory, M.E.D.D.DSAccessTopologyProvider..ctor, S.IO.FileLoadException, 72f, 14.01.0355.001. ErrorReportingEnabled:
    False
    This is an Intel machine so we are not sure why there is “AMD64” in the details - This Event does not seem to cause any problem that we can detect.
    Anyone tried 
    - Exchange Server 2010 SP2 December 4, 2011 Build 14.2.247.6 on a SBS2011 Standard yet? -
     Since one of the KB articles – I found says -
     Maybe -
    http://support.microsoft.com/kb/2447629 (Rollup 3 but we have 6)

    Hi,
    It seems that the issue is related to the special characters in the database name cause an
    IndexOutOfRangeException exception. This exception crashes the
    MSExchangeServicesAppPool application pool.
    For more detailed information, you could refer to the article below:
    Title: Event ID 4999 is logged on an Exchange Server 2010 Client Access server (CAS)
    URL:
    http://support.microsoft.com/kb/2665115
    From the KB article resolution, you need to obtain Interim Update (IU) by contacting Microsoft Customer Service and Support.
    Regards,
    James
    James Xiong
    TechNet Community Support

  • Event ID: 4999 - MSExchange Common - Exchange 2010 SP3

    Hi all,
    I have Exchange 2010 SP3 RU4 and since yesterday without reason (I didn´t patch anything, configure etc.) following error randomly appears in app eventlog:
    Watson report about to be sent for process id: 6000, with parameters: E12, c-RTL-AMD64, 14.03.0151.000, AirSync, MSExchange ActiveSync, Microsoft.Exchange.Data.Storage.GlobalObjectId.IsForeignUid, UnexpectedCondition:NullReferenceException, 54b1,
    14.03.0151.000.
    ErrorReportingEnabled: True
    I´ve tried to find some info but no luck.
    Does anybody know how to fix this?
    Thanks in advance, O.

    Resolved..
    A few days ago I hid some testing resource mailboxes (rooms) in GAL, which were used in Cisco TMSXE (Videoconferencing SW). Then, when I restarted the IIS, these errors appeared, because of Cisco TMSXE couldn´t find the room mailboxes. So I unhide
    them and errors are gone..

  • Exchange 2010 SP3 UR2 and Event 4999 = AirSync, M.E.Data.Storage, M.E.D.S.AppointmentTombstone

    Hello together,
    i'm having the following event on my cas servers every about 30 minutes:
    Event 4999 MSExchange Common
    Watson report about to be sent for process id: 5780, with parameters: E12, c-RTL-AMD64, 14.03.0151.000, AirSync, M.E.Data.Storage, M.E.D.S.AppointmentTombstone..ctor, System.OverflowException, 7f09, 14.03.0158.001.
    ErrorReportingEnabled: False
    it looks like it is a known bug fixed in SP3 UR3 (http://support.microsoft.com/kb/2891587/de) ?
    http://support.microsoft.com/kb/2888911/de
    they are talking there about a workarround to delete the problematic "thumbstone data". but how to find and identiy them before deletion ?
    "To work around this issue, use the MFCMAPI tool to remove the corrupted tombstone data."
    thanks for feedback,
    best,
    martin

    Hello Martin,
    I have a user who is having this exact same issue. I know this thread is a few months old, did you ever find an answer to where the corrupted tombstone data was located at?
    thanks,
    Emmanuel Fumero Exchange Administrator

  • MSExchange Common event-id 4999

    I'm having errors (2 of them every 5 minutes) on a HT/CAS/Mailbox server:
    MSExchange Common 4999
    Watson report about to be sent for process id: 7960, with parameters: E12, c-RTL-AMD64, 14.03.0224.001, AirSync, MSExchange ActiveSync, Microsoft.Exchange.Data.Storage.GlobalObjectId.IsForeignUid, UnexpectedCondition:NullReferenceException, 54b1, 14.03.0224.001.
    ErrorReportingEnabled: False
    Any ideas?
    PS
    It's not kb2665115, no ( ) : in database names.
    Dario Palermo

    Hi Dario, 
    Thank you for your question.
    There are some reasons which caused event id 4999, for example hid resource mailboxes, the corrupt calendar item.
    We could refer to the following steps to troubleshoot:
    If there are some resource mailboxes which are hid, we could unhidden unhide them, then we could restart IIS and check if there are event id 4999 
    We could refer to the following link to check if there are any the corrupt calendar item via
    Calcheck, we could remove or repair the corrupt calendar item: http://blogs.msdn.com/b/webdav_101/archive/2012/02/28/how-to-check-for-calendar-corruption.aspx
    If the event id persist, I suggest we could update Exchange 2010 to CU8 v2 by the following link, because Exchange 2010 CU8 v1 has been recalled:
     http://www.microsoft.com/en-us/download/details.aspx?id=45225 
    If there are any questions regarding this issue, please be free to let me know. 
    Best Regard,
    Jim

  • Exchange 2013 Event ID 106 MSExchange Common

    Event ID 106 is generated on Exchange 2013 ,already updated  Perfcounters.ps1 according to this article.still  getting
    same error.
    http://support.microsoft.com/kb/2870416/en-us
    Log Name:      Application
    Source:        MSExchange Common
    Date:          1/13/2014 8:59:30 PM
    Event ID:      106
    Task Category: General
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      DC4.chickbuns.com
    Description:
    Performance counter updating error. Counter name is Time in Resource per second, category name is MSExchange Activity Context Resources. Optional code: 2. Exception: The exception thrown is : System.InvalidOperationException: Instance 'ad-w3wp-msexchangeowaapppool'
    already exists with a lifetime of Process.  It cannot be recreated or reused until it has been removed or until the process using it has exited.
    Processes running while Performance counter failed to update: 
    3148 MSExchangeDelivery
    388 wininit
    1568 SMSvcHost
    8976 w3wp
    2748 conhost
    6292 w3wp
    380 csrss
    3924 MSExchangeFrontendTransport
    768 svchost
    1948 sftracing
    1156 spoolsv
    956 svchost
    7204 w3wp
    752 LogonUI
    2128 noderunner
    3900 MSExchangeSubmission
    8968 w3wp
    1928 ForefrontActiveDirectoryConnector
    1336 taskeng
    7048 w3wp
    348 svchost
    3692 Microsoft.Exchange.EdgeSyncSvc
    4676 Microsoft.Exchange.RpcClientAccess.Service
    4872 MSExchangeMailboxReplication
    340 csrss
    1556 UMWorkerProcess
    8020 w3wp
    3088 Microsoft.Exchange.AntispamUpdateSvc
    1312 MSExchangeHMHost
    7948 w3wp
    424 winlogon
    1500 rundll32
    4448 MSExchangeMailboxAssistants
    900 svchost
    6700 scanningprocess
    504 lsm
    5816 umservice
    4244 Microsoft.Exchange.ServiceHost
    2736 MSExchangeHMWorker
    496 lsass
    1840 vmtoolsd
    1872 noderunner
    488 services
    1396 inetinfo
    680 svchost
    1296 hostcontrollerservice
    7036 w3wp
    1688 noderunner
    1216 svchost
    6740 scanningprocess
    2364 svchost
    1844 svchost
    856 svchost
    4992 conhost
    6760 w3wp
    7816 w3wp
    4196 Microsoft.Exchange.Pop3Service
    2028 updateservice
    1236 fms
    2220 noderunner
    4976 msexchangerepl
    7544 w3wp
    600 svchost
    5364 MSExchangeTransportLogSearch
    2464 WMSvc
    4376 conhost
    1416 Microsoft.Exchange.Diagnostics.Service
    3580 Microsoft.Exchange.Imap4Service
    6336 scanningprocess
    1016 Microsoft.Exchange.Directory.TopologyService
    4364 Microsoft.Exchange.Imap4
    5992 Microsoft.Exchange.UM.CallRouter
    6920 w3wp
    2388 wlms
    5144 MSExchangeThrottling
    808 svchost
    3760 Microsoft.Exchange.Search.Service
    4744 Microsoft.Exchange.Pop3
    248 smss
    2964 WmiPrvSE
    1584 rundll32
    5840 Microsoft.Exchange.Store.Worker
    4 System
    4336 Microsoft.Exchange.Store.Service

    Hi,
    Based on my  research, the issue can be resolved by removing and re-creating all Exchange performance counters:
    add-pssnapin Microsoft.Exchange.Management.PowerShell.Setup
    $files=get-childitem “C:\Program Files\Microsoft\Exchange Server\V15\Setup\Perf\" *.xml |where-object {!($_.psiscontainer)}
    foreach ($file in $files) {remove-perfcounters -definitionfilename  $file.fullname}
    foreach ($file in $files) {new-perfcounters -definitionfilename  $file.fullname}
    For more information, you can refer to the following thread:
    http://social.technet.microsoft.com/Forums/exchange/en-US/a8e35d2a-5e09-4ec5-b5c8-43554d3b8b78/lots-of-errors-106-msexchange-common?forum=exchangesvradmin
    If you have any question, please feel free to let me know.
    Thanks, 
    Angela Shi
    TechNet Community Support

  • Event ID 106 error MSExchange Common: Performance counter updating error

    I'm running Exchange Server 2013 on Windows Server 2012 R2, and each time I start the server I get an error event, ID 106, logged in the Application Log.  The source is MSExchange Common and the text is:
    Performance counter updating error. Counter name is Current Requests Pending, category name is MSExchange LiveIdBasicAuthentication [also MSExchangeRemotePowershell, . Optional code: 2. Exception: The exception thrown is : System.InvalidOperationException:
    The requested Performance Counter is not a custom counter, it has to be initialized as ReadOnly
    I used a PowerShell script to reload all the performance counters, and it seemed to work for nearly all 217 .xml files in C:\Program Files\Microsoft\Exchange Server\V15\Setup\Perf.  But I still get the error when I restart the server.  Any
    ideas on how to fix this, what it means, or if it's safe to ignore are welcome.
    Thanks!

    Hi,
    Please try to remove and re-create all Exchange performance counters with the following command:
    add-pssnapin Microsoft.Exchange.Management.PowerShell.Setup
    $files=get-childitem “C:\Program Files\Microsoft\Exchange Server\V15\Setup\Perf\" *.xml |where-object {!($_.psiscontainer)}
    foreach ($file in $files) {remove-perfcounters -definitionfilename  $file.fullname}
    foreach ($file in $files) {new-perfcounters -definitionfilename  $file.fullname}
    If it doesn’t work, please check this KB.
    http://support.microsoft.com/en-us/kb/2870416
    Best Regards.
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
    Lynn-Li
    TechNet Community Support

  • Event 4999 - Watson report about to be sent for process id: 27244 on Mailbox Server every five minutes

    On one of my DAG enabled Exchange 2013 mailbox servers, I get this error in event viewer every five minutes:
    Log Name:      Application
    Source:        MSExchange Common
    Date:          6/25/2014 10:49:46 AM
    Event ID:      4999
    Task Category: General
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:    mailboxserver  
    Description:
    Watson report about to be sent for process id: 27244, with parameters: E12IIS, c-RTL-AMD64, 15.00.0913.022, M.E.RpcClientAccess.Service, unknown, M.E.R.S.U.DatabaseInfo..ctor, System.NullReferenceException, aba8, unknown.
    ErrorReportingEnabled: True 
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="MSExchange Common" />
        <EventID Qualifiers="16388">4999</EventID>
        <Level>2</Level>
        <Task>1</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2014-06-25T17:49:46.000000000Z" />
        <EventRecordID>687360</EventRecordID>
        <Channel>Application</Channel>
        <Computer>mailboxserver</Computer>
        <Security />
      </System>
      <EventData>
        <Data>27244</Data>
        <Data>E12IIS</Data>
        <Data>c-RTL-AMD64</Data>
        <Data>15.00.0913.022</Data>
        <Data>M.E.RpcClientAccess.Service</Data>
        <Data>unknown</Data>
        <Data>M.E.R.S.U.DatabaseInfo..ctor</Data>
        <Data>System.NullReferenceException</Data>
        <Data>aba8</Data>
        <Data>unknown</Data>
        <Data>True</Data>
        <Data>False</Data>
        <Data>Microsoft.Exchange.RpcClientAccess.Service</Data>
        <Data>
        </Data>
      </EventData>
    </Event>
    Everything is working ok, but I'm concerning that I"m seeing this.  
    ST

    Amit,
    I don't see the same type of 4999 error every five minutes anymore.  It only get the 4999 error about 3 times a day.  I get one with the same ID and other completely different process ID.  The error is below:
    Log Name:      Application
    Source:        MSExchange Common
    Date:          7/2/2014 6:01:36 AM
    Event ID:      4999
    Task Category: General
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:     computer
    Description:
    Watson report about to be sent for process id: 13152, with parameters: E12, c-RTL-AMD64, 15.00.0913.022, w3wp#MSExchangeOWAAppPool, M.E.Data.ApplicationLogic, M.E.D.S.GccUtils.GetClientIPEndpointsFromHttpRequest, System.NullReferenceException, 868, 15.00.0913.017.
    ErrorReportingEnabled: True 
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="MSExchange Common" />
        <EventID Qualifiers="16388">4999</EventID>
        <Level>2</Level>
        <Task>1</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2014-07-02T13:01:36.000000000Z" />
        <EventRecordID>825358</EventRecordID>
        <Channel>Application</Channel>
        <Computer>computer</Computer>
        <Security />
      </System>
      <EventData>
        <Data>13152</Data>
        <Data>E12</Data>
        <Data>c-RTL-AMD64</Data>
        <Data>15.00.0913.022</Data>
        <Data>w3wp#MSExchangeOWAAppPool</Data>
        <Data>M.E.Data.ApplicationLogic</Data>
        <Data>M.E.D.S.GccUtils.GetClientIPEndpointsFromHttpRequest</Data>
        <Data>System.NullReferenceException</Data>
        <Data>868</Data>
        <Data>15.00.0913.017</Data>
        <Data>True</Data>
        <Data>False</Data>
        <Data>w3wp#MSExchangeOWAAppPool</Data>
        <Data>
        </Data>
      </EventData>
    </Event>
    Going to keep an eye on it, but its not causing any issues. 
    ST

  • Installing Exchange 2013 SP1 - Errors MSExchange ADAccess & MSExchange Common

    The topology first:
    AD-server + Exchange-server
    What I am trying to do is just install a full version of Exchange 2013 sp1.
    But the problem is that install wizard freezes on the "initializing setup" page. Also eventviewer gives 2 different error messages, MSExchange ADAccess & MSExchange Common.
    MSExchange ADAccess:
    The description for Event ID 4027 from source MSExchange ADAccess cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local
    computer.
    If the event originated on another computer, the display information had to be saved with the event.
    The following information was included with the event:
    ExSetup.exe
    2964
    Get Servers for mydomain.com
    TopologyClientTcpEndpoint (localhost)
    3
    System.ServiceModel.EndpointNotFoundException: Could not connect to net.tcp://localhost:890/Microsoft.Exchange.Directory.TopologyService. The connection attempt lasted for a time span of 00:00:01.9984949. TCP error code 10061: No connection could be made because
    the target machine actively refused it 127.0.0.1:890.  ---> System.Net.Sockets.SocketException: No connection could be made because the target machine actively refused it 127.0.0.1:890
       at System.Net.Sockets.Socket.DoConnect(EndPoint endPointSnapshot, SocketAddress socketAddress)
       at System.Net.Sockets.Socket.Connect(EndPoint remoteEP)
       at System.ServiceModel.Channels.SocketConnectionInitiator.Connect(Uri uri, TimeSpan timeout)
       --- End of inner exception stack trace ---
    Server stack trace:
       at System.ServiceModel.Channels.SocketConnectionInitiator.Connect(Uri uri, TimeSpan timeout)
       at System.ServiceModel.Channels.BufferedConnectionInitiator.Connect(Uri uri, TimeSpan timeout)
       at System.ServiceModel.Channels.ConnectionPoolHelper.EstablishConnection(TimeSpan timeout)
       at System.ServiceModel.Channels.ClientFramingDuplexSessionChannel.OnOpen(TimeSpan timeout)
       at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
       at System.ServiceModel.Channels.ServiceChannel.OnOpen(TimeSpan timeout)
       at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
    Exception rethrown at [0]:
       at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
       at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
       at System.ServiceModel.ICommunicationObject.Open()
       at Microsoft.Exchange.Net.ServiceProxyPool`1.GetClient(Boolean useCache)
       at Microsoft.Exchange.Net.ServiceProxyPool`1.TryCallServiceWithRetry(Action`1 action, String debugMessage, WCFConnectionStateTuple proxyToUse, Int32 numberOfRetries, Boolean doNotReturnProxyOnSuccess, Exception& exception)
    the message resource is present but the message is not found in the string/message table
    MSExchange Common:
    The description for Event ID 106 from source MSExchange Common cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
    If the event originated on another computer, the display information had to be saved with the event.
    The following information was included with the event:
    2
    Time in Resource per second
    MSExchange Activity Context Resources
    The exception thrown is : System.InvalidOperationException: The requested Performance Counter is not a custom counter, it has to be initialized as ReadOnly.
       at System.Diagnostics.PerformanceCounter.InitializeImpl()
       at System.Diagnostics.PerformanceCounter.get_RawValue()
       at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.get_RawValue()
    Last worker process info : Last worker process info not available!
    Processes running while Performance counter failed to update:
    1044 VSSVC
    1064 spoolsv
    4032 notepad
    1416 svchost
    700 dwm
    3100 SMSvcHost
    3616 msdtc
    2564 csrss
    336 csrss
    424 winlogon
    244 smss
    688 LogonUI
    2556 Taskmgr
    596 svchost
    1124 inetinfo
    1920 svchost
    1652 SMSvcHost
    1400 svchost
    2916 taskhostex
    492 lsass
    2688 dwm
    396 wininit
    484 services
    1104 svchost
    388 csrss
    384 svchost
    1896 svchost
    3052 svchost
    744 svchost
    1180 mmc
    3404 conhost
    1800 explorer
    3668 Setup
    552 svchost
    712 svchost
    2864 svchost
    2964 ExSetup
    2948 rdpclip
    2592 winlogon
    900 svchost
    808 svchost
    4 System
    1164 mqsvc
    0 Idle
    Performance Counters Layout information: FileMappingNotFoundException for category MSExchange Activity Context Resources : Microsoft.Exchange.Diagnostics.FileMappingNotFoundException: Cound not open File mapping for name Global\netfxcustomperfcounters.1.0msexchange
    activity context resources. Error Details: 2
       at Microsoft.Exchange.Diagnostics.FileMapping..ctor(String name, Boolean writable)
       at Microsoft.Exchange.Diagnostics.PerformanceCounterMemoryMappedFile.Initialize(String fileMappingName, Boolean writable)
       at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.GetAllInstancesLayout(String categoryName)
    the message resource is present but the message is not found in the string/message table

    I solved this problem or at least managed to get a workaround for it.
    I tried to install Exchange using rdp connection and the installation media was mapped on my local computer. After I copied it to server itself, everything started to work and now I am able to send emails.

  • MSExchange Common Error

    Hello,
    I installed two Exchange 2013 servers with combined roles (A fresh installation). on both the servers, there is an error message appearing again and again
    Source MSExchange Common
    Event ID 106
    Performance counter updating error. Counter name is Time in Resource per second, category name is
    MSExchange Activity Context Resources. Optional code: 2. Exception: The exception thrown is :
    System.InvalidOperationException: Instance 'ad-powershell-defaultdomain' already exists with a lifetime
    of Process.  It cannot be recreated or reused until it has been removed or until the process using it
    has exited.
       at System.Diagnostics.SharedPerformanceCounter.FindInstance(Int32 instanceNameHashCode, String
    instanceName, CategoryEntry* categoryPointer, InstanceEntry** returnInstancePointerReference, Boolean
    activateUnusedInstances, PerformanceCounterInstanceLifetime lifetime, Boolean& foundFreeInstance)
       at System.Diagnostics.SharedPerformanceCounter.GetCounter(String counterName, String instanceName,
    Boolean enableReuse, PerformanceCounterInstanceLifetime lifetime)
       at System.Diagnostics.SharedPerformanceCounter..ctor(String catName, String counterName, String
    instanceName, PerformanceCounterInstanceLifetime lifetime)
       at System.Diagnostics.PerformanceCounter.InitializeImpl()
       at System.Diagnostics.PerformanceCounter.get_RawValue()
       at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.get_RawValue()
    Last worker process info : System.ArgumentException: Process with an Id of 12856 is not running.
       at System.Diagnostics.Process.GetProcessById(Int32 processId)
       at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.GetLastWorkerProcessInfo()
    Processes running while Performance counter failed to update:
    616 lsass
    11620 w3wp
    3148 MonitoringHost
    5708 UMWorkerProcess
    1764 inetinfo
    1172 svchost
    8656 w3wp
    11588 taskhost
    13096 WmiPrvSE
    6484 rhs
    5980 VSSVC
    1356 spoolsv
    6280 w3wp
    1748 ServerManager
    6900 Microsoft.Exchange.EdgeSyncSvc
    9232 powershell
    1548 taskhostex
    364 svchost
    6468 CcmExec
    5680 SMSvcHost
    14072 SCNotification
    3904 MSExchangeThrottling
    8040 MSExchangeMailboxAssistants
    2720 svchost
    1536 hostcontrollerservice
    548 winlogon
    4476 powershell
    2712 rundll32
    2120 SMSvcHost
    8156 svchost
    10588 w3wp
    11572 w3wp
    2312 sqlbrowser
    8572 w3wp
    7544 MSExchangeTransport
    11676 explorer
    6828 w3wp
    1512 updateservice
    13672 WmiPrvSE
    2692 scanningprocess
    2888 Microsoft.Exchange.Directory.TopologyService
    12788 WmiPrvSE
    324 umservice
    520 wininit
    316 smss
    2088 noderunner
    2284 sftracing
    7600 rhs
    5432 Microsoft.Exchange.UM.CallRouter
    2672 svchost
    2868 ForefrontActiveDirectoryConnector
    7792 rdpclip
    1684 svchost
    6016 CmRcService
    2468 noderunner
    6012 w3wp
    3844 scanningprocess
    6696 MSExchangeDelivery
    2064 Microsoft.Exchange.AntispamUpdateSvc
    808 svchost
    6940 rhs
    512 csrss
    676 svchost
    13676 powershell
    11864 w3wp
    14264 svchost
    2640 sqlwriter
    3624 MonitoringHost
    11892 w3wp
    2440 rundll32
    1576 sqlservr
    1544 WmiPrvSE
    4728 WmiPrvSE
    8136 conhost
    3420 conhost
    2828 WMSvc
    5512 clussvc
    12612 policyHost
    3652 dwm
    8160 WmiPrvSE
    12428 conhost
    4632 csrss
    7940 Microsoft.Exchange.Store.Worker
    4196 scanningprocess
    452 svchost
    14552 mmc
    7520 MSExchangeFrontendTransport
    504 svchost
    3796 Microsoft.Exchange.ServiceHost
    14236 winlogon
    3400 MSExchangeHMWorker
    2020 MSExchangeHMHost
    3004 MSExchangeMigrationWorkflow
    6548 MSExchangeMailboxReplication
    10684 w3wp
    3936 MSExchangeSubmission
    7924 Microsoft.Exchange.Store.Service
    1924 mqsvc
    14028 PccNTMon
    828 dwm
    8904 svchost
    13728 taskhostex
    5944 MSExchangeDagMgmt
    1480 HealthService
    1016 svchost
    2788 WmiPrvSE
    4128 Microsoft.Exchange.Store.Worker
    3376 msexchangerepl
    10664 w3wp
    2192 noderunner
    812 LogonUI
    1796 Microsoft.Exchange.Diagnostics.Service
    3568 Microsoft.Exchange.RpcClientAccess.Service
    708 svchost
    4748 MSExchangeTransportLogSearch
    608 services
    2576 noderunner
    7708 EdgeTransport
    4936 powershell
    444 csrss
    13996 powershell
    7100 Microsoft.Exchange.Search.Service
    7508 Microsoft.Exchange.Store.Worker
    1384 svchost
    4 System
    1080 Microsoft.Exchange.Store.Worker
    1412 fms
    13200 msdtc
    0 Idle
    Performance Counters Layout information: A process is holding onto a transport performance counter.
    processId : 2020, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId:
    2020 StartupTime: 130715770218422781, currentInstance : rpca-msexchangehmhost-msexchangehmhost.exe
    (87A5B053) RefCount=1 SpinLock=0 Offset=38216, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 2020, counter : time in resource
    per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 2020 StartupTime: 130715770218422781,
    currentInstance : mb-msexchangehmhost-msexchangehmhost.exe(FB9D599C) RefCount=1 SpinLock=0
    Offset=37888, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 2020, counter : time in resource
    per second Value=78 SpinLock=0 Lifetime=Type: 1 ProcessId: 2020 StartupTime: 130715770218422781,
    currentInstance : ad-msexchangehmhost-msexchangehmhost.exe(4E220B96) RefCount=1 SpinLock=0
    Offset=37560, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 11892, counter : time in
    resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 11892 StartupTime:
    130715772666720885, currentInstance : rpca-w3wp-msexchangeoabapppool(8149E8D2) RefCount=1 SpinLock=0
    Offset=37232, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 11892, counter : time in
    resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 11892 StartupTime:
    130715772666720885, currentInstance : mb-w3wp-msexchangeoabapppool(58D0A79D) RefCount=1 SpinLock=0
    Offset=36904, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 11892, counter : time in
    resource per second Value=1268 SpinLock=0 Lifetime=Type: 1 ProcessId: 11892 StartupTime:
    130715772666720885, currentInstance : ad-w3wp-msexchangeoabapppool(CC31A917) RefCount=1 SpinLock=0
    Offset=36576, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 11864, counter : time in
    resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 11864 StartupTime:
    130715772666095859, currentInstance : rpca-w3wp-msexchangepowershellfrontendapppool(E1115251)
    RefCount=1 SpinLock=0 Offset=36248, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 11864, counter : time in
    resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 11864 StartupTime:
    130715772666095859, currentInstance : mb-w3wp-msexchangepowershellfrontendapppool(34B9187E) RefCount=1
    SpinLock=0 Offset=35920, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 11864, counter : time in
    resource per second Value=503 SpinLock=0 Lifetime=Type: 1 ProcessId: 11864 StartupTime:
    130715772666095859, currentInstance : ad-w3wp-msexchangepowershellfrontendapppool(FAEFA1B4) RefCount=1
    SpinLock=0 Offset=35592, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 11620, counter : time in
    resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 11620 StartupTime:
    130715772643281776, currentInstance : rpca-w3wp-msexchangemapimailboxapppool(E28F3117) RefCount=1
    SpinLock=0 Offset=35264, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 11620, counter : time in
    resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 11620 StartupTime:
    130715772643281776, currentInstance : mb-w3wp-msexchangemapimailboxapppool(F9439F58) RefCount=1
    SpinLock=0 Offset=34936, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 11620, counter : time in
    resource per second Value=1008 SpinLock=0 Lifetime=Type: 1 ProcessId: 11620 StartupTime:
    130715772643281776, currentInstance : ad-w3wp-msexchangemapimailboxapppool(35491652) RefCount=1
    SpinLock=0 Offset=34608, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 11572, counter : time in
    resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 11572 StartupTime:
    130715772641719161, currentInstance : rpca-w3wp-msexchangemapifrontendapppool(2C7F2005) RefCount=1
    SpinLock=0 Offset=34280, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 11572, counter : time in
    resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 11572 StartupTime:
    130715772641719161, currentInstance : mb-w3wp-msexchangemapifrontendapppool(BE5C2DAA) RefCount=1
    SpinLock=0 Offset=33952, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 11572, counter : time in
    resource per second Value=610 SpinLock=0 Lifetime=Type: 1 ProcessId: 11572 StartupTime:
    130715772641719161, currentInstance : ad-w3wp-msexchangemapifrontendapppool(C0FDFAE0) RefCount=1
    SpinLock=0 Offset=33624, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 8656, counter : time in resource
    per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 8656 StartupTime: 130715772310286694,
    currentInstance : rpca-w3wp-msexchangeautodiscoverapppool(6DABF262) RefCount=1 SpinLock=0 Offset=33296,
    categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 8656, counter : time in resource
    per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 8656 StartupTime: 130715772310286694,
    currentInstance : mb-w3wp-msexchangeautodiscoverapppool(D1C6EF4D) RefCount=1 SpinLock=0 Offset=32968,
    categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 8656, counter : time in resource
    per second Value=812 SpinLock=0 Lifetime=Type: 1 ProcessId: 8656 StartupTime: 130715772310286694,
    currentInstance : ad-w3wp-msexchangeautodiscoverapppool(FD072087) RefCount=1 SpinLock=0 Offset=32640,
    categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 10588, counter : time in
    resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10588 StartupTime:
    130715772186212281, currentInstance : rpca-w3wp-msexchangepowershellapppool(3CF18BF) RefCount=1
    SpinLock=0 Offset=32312, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 10588, counter : time in
    resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10588 StartupTime:
    130715772186212281, currentInstance : mb-w3wp-msexchangepowershellapppool(A686C810) RefCount=1
    SpinLock=0 Offset=31984, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 10588, counter : time in
    resource per second Value=4488 SpinLock=0 Lifetime=Type: 1 ProcessId: 10588 StartupTime:
    130715772186212281, currentInstance : ad-w3wp-msexchangepowershellapppool(9E48CD5A) RefCount=1
    SpinLock=0 Offset=31656, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 10684, counter : time in
    resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10684 StartupTime:
    130715772191837830, currentInstance : rpca-w3wp-msexchangeowacalendarapppool(8F10D1B5) RefCount=1
    SpinLock=0 Offset=31328, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 10684, counter : time in
    resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10684 StartupTime:
    130715772191837830, currentInstance : mb-w3wp-msexchangeowacalendarapppool(2D8C9EBA) RefCount=1
    SpinLock=0 Offset=31000, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 10684, counter : time in
    resource per second Value=483 SpinLock=0 Lifetime=Type: 1 ProcessId: 10684 StartupTime:
    130715772191837830, currentInstance : ad-w3wp-msexchangeowacalendarapppool(D845E230) RefCount=1
    SpinLock=0 Offset=30672, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 10664, counter : time in
    resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10664 StartupTime:
    130715772191212763, currentInstance : rpca-w3wp-msexchangesyncapppool(9F5D0139) RefCount=1 SpinLock=0
    Offset=30344, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 10664, counter : time in
    resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10664 StartupTime:
    130715772191212763, currentInstance : mb-w3wp-msexchangesyncapppool(37D39796) RefCount=1 SpinLock=0
    Offset=30016, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 10664, counter : time in
    resource per second Value=646 SpinLock=0 Lifetime=Type: 1 ProcessId: 10664 StartupTime:
    130715772191212763, currentInstance : ad-w3wp-msexchangesyncapppool(15C89D5C) RefCount=1 SpinLock=0
    Offset=29688, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 13676, counter : time in
    resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 13676 StartupTime:
    130715781070343634, currentInstance : rpca-powershell-defaultdomain(4598AFAF) RefCount=1 SpinLock=0
    Offset=29360, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 13676, counter : time in
    resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 13676 StartupTime:
    130715781070343634, currentInstance : mb-powershell-defaultdomain(CC014C00) RefCount=1 SpinLock=0
    Offset=29032, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 13676, counter : time in
    resource per second Value=168 SpinLock=0 Lifetime=Type: 1 ProcessId: 13676 StartupTime:
    130715781070343634, currentInstance : ad-powershell-defaultdomain(95CC324A) RefCount=1 SpinLock=0
    Offset=28704, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 2088, counter : time in resource
    per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 2088 StartupTime: 130715770329985275,
    currentInstance : rpca-noderunner-contentenginenode1(316BF6E3) RefCount=1 SpinLock=0 Offset=28376,
    categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 2088, counter : time in resource
    per second Value=4188 SpinLock=0 Lifetime=Type: 1 ProcessId: 2088 StartupTime: 130715770329985275,
    currentInstance : mb-noderunner-contentenginenode1(2EE8286C) RefCount=1 SpinLock=0 Offset=28048,
    categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 2088, counter : time in resource
    per second Value=2896 SpinLock=0 Lifetime=Type: 1 ProcessId: 2088 StartupTime: 130715770329985275,
    currentInstance : ad-noderunner-contentenginenode1(61591E6) RefCount=1 SpinLock=0 Offset=27720,
    categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 6828, counter : time in resource
    per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6828 StartupTime: 130715772024242610,
    currentInstance : rpca-w3wp-msexchangerpcproxyapppool(8B7590B3) RefCount=1 SpinLock=0 Offset=27392,
    categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 6828, counter : time in resource
    per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6828 StartupTime: 130715772024242610,
    currentInstance : mb-w3wp-msexchangerpcproxyapppool(B190F21C) RefCount=1 SpinLock=0 Offset=27064,
    categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 6828, counter : time in resource
    per second Value=358 SpinLock=0 Lifetime=Type: 1 ProcessId: 6828 StartupTime: 130715772024242610,
    currentInstance : ad-w3wp-msexchangerpcproxyapppool(99BB8ED6) RefCount=1 SpinLock=0 Offset=26736,
    categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 8572, counter : time in resource
    per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 8572 StartupTime: 130715771541860278,
    currentInstance : rpca-w3wp-msexchangeowaapppool(4AA799E7) RefCount=1 SpinLock=0 Offset=26408,
    categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 8572, counter : time in resource
    per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 8572 StartupTime: 130715771541860278,
    currentInstance : mb-w3wp-msexchangeowaapppool(C3953468) RefCount=1 SpinLock=0 Offset=26080,
    categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 8572, counter : time in resource
    per second Value=1277 SpinLock=0 Lifetime=Type: 1 ProcessId: 8572 StartupTime: 130715771541860278,
    currentInstance : ad-w3wp-msexchangeowaapppool(160BE662) RefCount=1 SpinLock=0 Offset=25752,
    categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 7708, counter : time in resource
    per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7708 StartupTime: 130715771429672784,
    currentInstance : rpca-edgetransport-edgetransport.exe(911B6EB3) RefCount=1 SpinLock=0 Offset=25424,
    categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 7708, counter : time in resource
    per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7708 StartupTime: 130715771429672784,
    currentInstance : mb-edgetransport-edgetransport.exe(A5AF4BBC) RefCount=1 SpinLock=0 Offset=25096,
    categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 7708, counter : time in resource
    per second Value=732 SpinLock=0 Lifetime=Type: 1 ProcessId: 7708 StartupTime: 130715771429672784,
    currentInstance : ad-edgetransport-edgetransport.exe(E79D4A36) RefCount=1 SpinLock=0 Offset=24768,
    categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 4128, counter : time in resource
    per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4128 StartupTime: 130715771453735304,
    currentInstance : rpca-microsoft.exchange.store.worker-microsoft.exchange.store.worker.exe(ABB009B3)
    RefCount=1 SpinLock=0 Offset=24440, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 4128, counter : time in resource
    per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4128 StartupTime: 130715771453735304,
    currentInstance : mb-microsoft.exchange.store.worker-microsoft.exchange.store.worker.exe(38BA31BC)
    RefCount=1 SpinLock=0 Offset=24112, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 4128, counter : time in resource
    per second Value=181 SpinLock=0 Lifetime=Type: 1 ProcessId: 4128 StartupTime: 130715771453735304,
    currentInstance : ad-microsoft.exchange.store.worker-microsoft.exchange.store.worker.exe(11106236)
    RefCount=1 SpinLock=0 Offset=23784, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 6548, counter : time in resource
    per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6548 StartupTime: 130715771389516527,
    currentInstance : rpca-msexchangemailboxreplication-msexchangemailboxreplication.exe(276F4DB3)
    RefCount=1 SpinLock=0 Offset=23456, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 6548, counter : time in resource
    per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6548 StartupTime: 130715771389516527,
    currentInstance : mb-msexchangemailboxreplication-msexchangemailboxreplication.exe(95E41BC) RefCount=1
    SpinLock=0 Offset=23128, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 6548, counter : time in resource
    per second Value=170 SpinLock=0 Lifetime=Type: 1 ProcessId: 6548 StartupTime: 130715771389516527,
    currentInstance : ad-msexchangemailboxreplication-msexchangemailboxreplication.exe(394712B6) RefCount=1
    SpinLock=0 Offset=22800, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 7544, counter : time in resource
    per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7544 StartupTime: 130715771408266547,
    currentInstance : rpca-msexchangetransport-msexchangetransport.exe(24F56C33) RefCount=1 SpinLock=0
    Offset=22472, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 7544, counter : time in resource
    per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7544 StartupTime: 130715771408266547,
    currentInstance : mb-msexchangetransport-msexchangetransport.exe(92FB3D3C) RefCount=1 SpinLock=0
    Offset=22144, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 7544, counter : time in resource
    per second Value=36 SpinLock=0 Lifetime=Type: 1 ProcessId: 7544 StartupTime: 130715771408266547,
    currentInstance : ad-msexchangetransport-msexchangetransport.exe(2447ECB6) RefCount=1 SpinLock=0
    Offset=21816, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 8040, counter : time in resource
    per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 8040 StartupTime: 130715771367016527,
    currentInstance : rpca-msexchangemailboxassistants-msexchangemailboxassistants.exe(DEAC0933) RefCount=1
    SpinLock=0 Offset=21488, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 8040, counter : time in resource
    per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 8040 StartupTime: 130715771367016527,
    currentInstance : mb-msexchangemailboxassistants-msexchangemailboxassistants.exe(A754293C) RefCount=1
    SpinLock=0 Offset=21160, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 8040, counter : time in resource
    per second Value=64 SpinLock=0 Lifetime=Type: 1 ProcessId: 8040 StartupTime: 130715771367016527,
    currentInstance : ad-msexchangemailboxassistants-msexchangemailboxassistants.exe(EE890EB6) RefCount=1
    SpinLock=0 Offset=20832, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 7924, counter : time in resource
    per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7924 StartupTime: 130715771357016538,
    currentInstance : rpca-microsoft.exchange.store.service-microsoft.exchange.store.service.exe(A07BD4F3)
    RefCount=1 SpinLock=0 Offset=20504, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 7924, counter : time in resource
    per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7924 StartupTime: 130715771357016538,
    currentInstance : mb-microsoft.exchange.store.service-microsoft.exchange.store.service.exe(4519AFC)
    RefCount=1 SpinLock=0 Offset=20176, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 7924, counter : time in resource
    per second Value=696 SpinLock=0 Lifetime=Type: 1 ProcessId: 7924 StartupTime: 130715771357016538,
    currentInstance : ad-microsoft.exchange.store.service-microsoft.exchange.store.service.exe(6B0DD0F6)
    RefCount=1 SpinLock=0 Offset=19848, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 7520, counter : time in resource
    per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7520 StartupTime: 130715771321704036,
    currentInstance : rpca-msexchangefrontendtransport-msexchangefrontendtransport.exe(935D2AB3) RefCount=1
    SpinLock=0 Offset=19520, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 7520, counter : time in resource
    per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7520 StartupTime: 130715771321704036,
    currentInstance : mb-msexchangefrontendtransport-msexchangefrontendtransport.exe(52FB38BC) RefCount=1
    SpinLock=0 Offset=19192, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 7520, counter : time in resource
    per second Value=810 SpinLock=0 Lifetime=Type: 1 ProcessId: 7520 StartupTime: 130715771321704036,
    currentInstance : ad-msexchangefrontendtransport-msexchangefrontendtransport.exe(409CE636) RefCount=1
    SpinLock=0 Offset=18864, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 7100, counter : time in resource
    per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7100 StartupTime: 130715771278422784,
    currentInstance : rpca-microsoft.exchange.search.service-microsoft.exchange.search.service.exe
    (3A401CB3) RefCount=1 SpinLock=0 Offset=18536, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 7100, counter : time in resource
    per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7100 StartupTime: 130715771278422784,
    currentInstance : mb-microsoft.exchange.search.service-microsoft.exchange.search.service.exe(C67EE73C)
    RefCount=1 SpinLock=0 Offset=18208, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 7100, counter : time in resource
    per second Value=560 SpinLock=0 Lifetime=Type: 1 ProcessId: 7100 StartupTime: 130715771278422784,
    currentInstance : ad-microsoft.exchange.search.service-microsoft.exchange.search.service.exe(FFDEB6B6)
    RefCount=1 SpinLock=0 Offset=17880, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 6280, counter : time in resource
    per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6280 StartupTime: 130715771204829034,
    currentInstance : rpca-w3wp-msexchangeecpapppool(57806648) RefCount=1 SpinLock=0 Offset=17552,
    categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 6280, counter : time in resource
    per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6280 StartupTime: 130715771204829034,
    currentInstance : mb-w3wp-msexchangeecpapppool(E27E6507) RefCount=1 SpinLock=0 Offset=17224,
    categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 6280, counter : time in resource
    per second Value=2671 SpinLock=0 Lifetime=Type: 1 ProcessId: 6280 StartupTime: 130715771204829034,
    currentInstance : ad-w3wp-msexchangeecpapppool(B648688D) RefCount=1 SpinLock=0 Offset=16896,
    categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 6012, counter : time in resource
    per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6012 StartupTime: 130715771172641540,
    currentInstance : rpca-w3wp-msexchangeservicesapppool(E8BBF810) RefCount=1 SpinLock=0 Offset=16568,
    categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 6012, counter : time in resource
    per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6012 StartupTime: 130715771172641540,
    currentInstance : mb-w3wp-msexchangeservicesapppool(10FE94BF) RefCount=1 SpinLock=0 Offset=16240,
    categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 6012, counter : time in resource
    per second Value=749 SpinLock=0 Lifetime=Type: 1 ProcessId: 6012 StartupTime: 130715771172641540,
    currentInstance : ad-w3wp-msexchangeservicesapppool(E0DE475) RefCount=1 SpinLock=0 Offset=15912,
    categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 6900, counter : time in resource
    per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6900 StartupTime: 130715771259047792,
    currentInstance : rpca-microsoft.exchange.edgesyncsvc-microsoft.exchange.edgesyncsvc.exe(5590F433)
    RefCount=1 SpinLock=0 Offset=15584, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 6900, counter : time in resource
    per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6900 StartupTime: 130715771259047792,
    currentInstance : mb-microsoft.exchange.edgesyncsvc-microsoft.exchange.edgesyncsvc.exe(AC0B4E3C)
    RefCount=1 SpinLock=0 Offset=15256, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 6900, counter : time in resource
    per second Value=545 SpinLock=0 Lifetime=Type: 1 ProcessId: 6900 StartupTime: 130715771259047792,
    currentInstance : ad-microsoft.exchange.edgesyncsvc-microsoft.exchange.edgesyncsvc.exe(7321B36)
    RefCount=1 SpinLock=0 Offset=14928, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 5944, counter : time in resource
    per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5944 StartupTime: 130715771193266533,
    currentInstance : rpca-msexchangedagmgmt-msexchangedagmgmt.exe(AEDE63B3) RefCount=1 SpinLock=0
    Offset=14600, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 5944, counter : time in resource
    per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5944 StartupTime: 130715771193266533,
    currentInstance : mb-msexchangedagmgmt-msexchangedagmgmt.exe(55FA86BC) RefCount=1 SpinLock=0
    Offset=14272, categoryName: MSExchange Activity Context Resources
    A process is holding onto a transport performance counter. processId : 5944, counter : time in resource
    per second Value=242 SpinLock=...
    I deleted all the health mailboxes and re-created them according to one of the aricle but no use.
    Can anyone please help me how to resolve the issue?
    Thanks in advance...

    Hello Sawag,
    These are the Performance counters below are the steps to performed.
    Within the Exchange Management Shell, we’ve to run the following commands:
    add-pssnapin Microsoft.Exchange.Management.PowerShell.Setup
    New-PerfCounters -definitionfilename “$exinstall\Setup\Perf\RpcClientAccessPerformanceCounters.xml”
    New-PerfCounters -definitionfilename “$exinstall\Setup\Perf\AdminAuditPerfCounters.xml”
    New-PerfCounters -definitionfilename “$exinstall\Setup\Perf\ResourceHealthPerformanceCounters.xml”
    New-PerfCounters -definitionfilename “$exinstall\Setup\Perf\ThrottlingPerformanceCounters.xml”
    New-PerfCounters -definitionfilename “$exinstall\Setup\Perf\MiddleTierStoragePerformanceCounters.xml”
    New-PerfCounters -definitionfilename “$exinstall\Setup\Perf\IsMemberOfResolverPerfCounters.xml”
    New-PerfCounters -definitionfilename “$exinstall\Setup\Perf\ADRecipientCachePerformanceCounters.xml”
    New-PerfCounters -definitionfilename “$exinstall\Setup\Perf\ExchangeTopologyPerformanceCounters.xml”
    New-PerfCounters -definitionfilename “$exinstall\Setup\Perf\ExSearchPerformanceCounters.xml”
    New-PerfCounters -definitionfilename “$exinstall\Setup\Perf\ExSearchCatalogPerformanceCounters.xml”
    Also please follow the below article
    http://support.microsoft.com/en-us/kb/2870416
    Note: If there is any Antivirus running on this machine would request to please turn off temporarily.
    Regards,
    Praveen
    Remember to mark as helpful if you find my contribution useful or as an answer if it does answer your question.That will encourage me - and others - to take time out to help you Check out my latest blog posts @ Techrid.com

  • Lots of errors 106 MSExchange Common

    I get lots of errors 106 MSExchange Common. Details:
    Performance counter updating error.
    After that there is a list of running processes displayed. And after that for each process:
    A process is holding onto a transport performance counter. processId : 16852,
    etc.
    Leo

    The event thrown:
    - System
      - Provider
       [ Name]  MSExchange Common
      - EventID 106
       [ Qualifiers]  49156
       Level 2
       Task 1
       Keywords 0x80000000000000
      - TimeCreated
       [ SystemTime]  2012-12-14T08:09:38.000000000Z
       EventRecordID 46524
       Channel Application
       Computer ITSPECSRV.itspec.local
       Security
    - EventData
       2
       Time in Resource per second
       MSExchange Activity Context Resources
       The exception thrown is : System.InvalidOperationException: Instance 'ad-w3wp-msexchangerpcproxyapppool' already exists with a lifetime of Process. It cannot be recreated or reused until it has been removed or until the process using it has exited.
    at System.Diagnostics.SharedPerformanceCounter.FindInstance(Int32 instanceNameHashCode, String instanceName, CategoryEntry* categoryPointer, InstanceEntry** returnInstancePointerReference, Boolean activateUnusedInstances, PerformanceCounterInstanceLifetime
    lifetime, Boolean& foundFreeInstance) at System.Diagnostics.SharedPerformanceCounter.GetCounter(String counterName, String instanceName, Boolean enableReuse, PerformanceCounterInstanceLifetime lifetime) at System.Diagnostics.SharedPerformanceCounter..ctor(String
    catName, String counterName, String instanceName, PerformanceCounterInstanceLifetime lifetime) at System.Diagnostics.PerformanceCounter.InitializeImpl() at System.Diagnostics.PerformanceCounter.get_RawValue() at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.get_RawValue()
    Last worker process info : System.ArgumentException: Process with an Id of 13296 is not running. at System.Diagnostics.Process.GetProcessById(Int32 processId) at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.GetLastWorkerProcessInfo() Processes running
    while Performance counter failed to update: 60080 rundll32 5392 noderunner 384 smss 1564 certsrv 2152 updateservice 3528 Microsoft.Exchange.AntispamUpdateSvc 1164 svchost 13180 w3wp 4708 MSExchangeFrontendTransport 372 svchost 568 wininit 4900 Microsoft.Exchange.Store.Service
    3912 MSExchangeSubmission 956 svchost 560 csrss 1544 svchost 1936 ismserv 2328 sftracing 2524 Microsoft.Exchange.Directory.TopologyService 1144 SMSvcHost 6856 w3wp 1732 fms 6064 msexchangerepl 5668 Microsoft.Exchange.ContentFilter.Wrapper 2736 ForefrontActiveDirectoryConnector
    7044 scanningprocess 65552 w3wp 7632 Microsoft.Exchange.Store.Worker 75064 Microsoft.Exchange.RpcClientAccess.Service 1916 inetinfo 2504 WMSvc 672 lsass 7884 LogonUI 3288 SMSvcHost 74404 WmiPrvSE 2892 MSExchangeHMHost 7196 svchost 17664 plasrv 23572 WmiPrvSE
    58464 rundll32 3864 Microsoft.Exchange.UM.CallRouter 12728 EdgeTransport 8984 vds 6816 scanningprocess 43456 rundll32 72248 w3wp 1492 Microsoft.ActiveDirectory.WebServices 900 svchost 4444 conhost 8220 svchost 2468 dfssvc 72992 noderunner 5520 scanningprocess
    6600 umservice 492 csrss 9356 msdtc 7580 svchost 1668 svchost 12108 w3wp 10324 w3wp 59780 wService 2056 mqsvc 1464 spoolsv 4416 MSExchangeHMWorker 2248 POPconSrv 1688 dns 1148 DynamicUpdate 67648 noderunner 664 services 2436 svchost 856 svchost 4236 Microsoft.Exchange.EdgeSyncSvc
    3612 MSExchangeDelivery 75572 w3wp 76664 w3wp 68420 w3wp 5576 MSExchangeThrottling 5068 MSExchangeMailboxAssistants 7544 w3wp 10268 Microsoft.Exchange.Diagnostics.Service 67232 UMWorkerProcess 2172 dwm 840 svchost 444 svchost 6156 MSExchangeTransportLogSearch
    7516 MSExchangeTransport 54324 noderunner 1620 dfsrs 3508 w3wp 71712 w3wp 14412 hostcontrollerservice 3576 Microsoft.Exchange.ServiceHost 12832 conhost 9088 csrss 13320 MSExchangeMailboxReplication 6560 svchost 1004 LogonUI 804 MezzmoMediaServer 65616 Microsoft.Exchange.Search.Service
    996 dwm 10004 winlogon 596 winlogon 4 System 0 Idle Performance Counters Layout information: A process is holding onto a transport performance counter. processId : 69196, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId:
    69196 StartupTime: 129998615365371427, currentInstance : rpca-powershell-defaultdomain(4598AFAF) RefCount=0 SpinLock=0 Offset=34280, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId :
    69196, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 69196 StartupTime: 129998615365371427, currentInstance : mb-powershell-defaultdomain(CC014C00) RefCount=0 SpinLock=0 Offset=33952, categoryName: MSExchange Activity
    Context Resources A process is holding onto a transport performance counter. processId : 69196, counter : time in resource per second Value=1511 SpinLock=0 Lifetime=Type: 1 ProcessId: 69196 StartupTime: 129998615365371427, currentInstance : ad-powershell-defaultdomain(95CC324A)
    RefCount=0 SpinLock=0 Offset=33624, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 72248, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 72248
    StartupTime: 129999461529718338, currentInstance : rpca-w3wp-msexchangepowershellfrontendapppool(E1115251) RefCount=1 SpinLock=0 Offset=33296, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId
    : 72248, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 72248 StartupTime: 129999461529718338, currentInstance : mb-w3wp-msexchangepowershellfrontendapppool(34B9187E) RefCount=1 SpinLock=0 Offset=32968, categoryName: MSExchange
    Activity Context Resources A process is holding onto a transport performance counter. processId : 72248, counter : time in resource per second Value=3 SpinLock=0 Lifetime=Type: 1 ProcessId: 72248 StartupTime: 129999461529718338, currentInstance : ad-w3wp-msexchangepowershellfrontendapppool(FAEFA1B4)
    RefCount=1 SpinLock=0 Offset=32640, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 13180, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 13180
    StartupTime: 129999188954929953, currentInstance : rpca-w3wp-msexchangeowaapppool(4AA799E7) RefCount=1 SpinLock=0 Offset=32312, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 13180,
    counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 13180 StartupTime: 129999188954929953, currentInstance : mb-w3wp-msexchangeowaapppool(C3953468) RefCount=1 SpinLock=0 Offset=31984, categoryName: MSExchange Activity Context
    Resources A process is holding onto a transport performance counter. processId : 13180, counter : time in resource per second Value=26326 SpinLock=0 Lifetime=Type: 1 ProcessId: 13180 StartupTime: 129999188954929953, currentInstance : ad-w3wp-msexchangeowaapppool(160BE662)
    RefCount=1 SpinLock=0 Offset=31656, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 12108, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 12108
    StartupTime: 129992760805840463, currentInstance : rpca-w3wp-msexchangeautodiscoverapppool(6DABF262) RefCount=1 SpinLock=0 Offset=31328, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId
    : 12108, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 12108 StartupTime: 129992760805840463, currentInstance : mb-w3wp-msexchangeautodiscoverapppool(D1C6EF4D) RefCount=1 SpinLock=0 Offset=31000, categoryName: MSExchange
    Activity Context Resources A process is holding onto a transport performance counter. processId : 12108, counter : time in resource per second Value=1012599 SpinLock=0 Lifetime=Type: 1 ProcessId: 12108 StartupTime: 129992760805840463, currentInstance : ad-w3wp-msexchangeautodiscoverapppool(FD072087)
    RefCount=1 SpinLock=0 Offset=30672, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 10324, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10324
    StartupTime: 129992756136525826, currentInstance : rpca-w3wp-msexchangeowacalendarapppool(8F10D1B5) RefCount=1 SpinLock=0 Offset=30344, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId
    : 10324, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10324 StartupTime: 129992756136525826, currentInstance : mb-w3wp-msexchangeowacalendarapppool(2D8C9EBA) RefCount=1 SpinLock=0 Offset=30016, categoryName: MSExchange
    Activity Context Resources A process is holding onto a transport performance counter. processId : 10324, counter : time in resource per second Value=33901 SpinLock=0 Lifetime=Type: 1 ProcessId: 10324 StartupTime: 129992756136525826, currentInstance : ad-w3wp-msexchangeowacalendarapppool(D845E230)
    RefCount=1 SpinLock=0 Offset=29688, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6856, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6856 StartupTime:
    129992757423214029, currentInstance : rpca-w3wp-msexchangeoabapppool(8149E8D2) RefCount=1 SpinLock=0 Offset=29360, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6856, counter : time
    in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6856 StartupTime: 129992757423214029, currentInstance : mb-w3wp-msexchangeoabapppool(58D0A79D) RefCount=1 SpinLock=0 Offset=29032, categoryName: MSExchange Activity Context Resources A process
    is holding onto a transport performance counter. processId : 6856, counter : time in resource per second Value=30909 SpinLock=0 Lifetime=Type: 1 ProcessId: 6856 StartupTime: 129992757423214029, currentInstance : ad-w3wp-msexchangeoabapppool(CC31A917) RefCount=1
    SpinLock=0 Offset=28704, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7544, counter : time in resource per second Value=449148 SpinLock=0 Lifetime=Type: 1 ProcessId: 7544 StartupTime:
    129992797274953614, currentInstance : ad-w3wp-msexchangepowershellapppool(9E48CD5A) RefCount=1 SpinLock=0 Offset=28376, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7544, counter
    : time in resource per second Value=1082 SpinLock=0 Lifetime=Type: 1 ProcessId: 7544 StartupTime: 129992797274953614, currentInstance : mb-w3wp-msexchangepowershellapppool(A686C810) RefCount=1 SpinLock=0 Offset=28048, categoryName: MSExchange Activity Context
    Resources A process is holding onto a transport performance counter. processId : 7544, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7544 StartupTime: 129992797274953614, currentInstance : rpca-w3wp-msexchangepowershellapppool(3CF18BF)
    RefCount=1 SpinLock=0 Offset=27720, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 67648, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 67648
    StartupTime: 129999193218524806, currentInstance : rpca-noderunner-contentenginenode1(316BF6E3) RefCount=1 SpinLock=0 Offset=27392, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 67648,
    counter : time in resource per second Value=27430 SpinLock=0 Lifetime=Type: 1 ProcessId: 67648 StartupTime: 129999193218524806, currentInstance : mb-noderunner-contentenginenode1(2EE8286C) RefCount=1 SpinLock=0 Offset=27064, categoryName: MSExchange Activity
    Context Resources A process is holding onto a transport performance counter. processId : 67648, counter : time in resource per second Value=51257 SpinLock=0 Lifetime=Type: 1 ProcessId: 67648 StartupTime: 129999193218524806, currentInstance : ad-noderunner-contentenginenode1(61591E6)
    RefCount=1 SpinLock=0 Offset=26736, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6452, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6452 StartupTime:
    129992750435810865, currentInstance : rpca-umworkerprocess-umworkerprocess.exe(970CCE33) RefCount=0 SpinLock=0 Offset=26408, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6452, counter
    : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6452 StartupTime: 129992750435810865, currentInstance : mb-umworkerprocess-umworkerprocess.exe(8A7F8A3C) RefCount=0 SpinLock=0 Offset=26080, categoryName: MSExchange Activity Context
    Resources A process is holding onto a transport performance counter. processId : 6452, counter : time in resource per second Value=1209 SpinLock=0 Lifetime=Type: 1 ProcessId: 6452 StartupTime: 129992750435810865, currentInstance : ad-umworkerprocess-umworkerprocess.exe(95818B6)
    RefCount=0 SpinLock=0 Offset=25752, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 12728, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 12728
    StartupTime: 129992800311275798, currentInstance : rpca-edgetransport-edgetransport.exe(911B6EB3) RefCount=1 SpinLock=0 Offset=25424, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId :
    12728, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 12728 StartupTime: 129992800311275798, currentInstance : mb-edgetransport-edgetransport.exe(A5AF4BBC) RefCount=1 SpinLock=0 Offset=25096, categoryName: MSExchange Activity
    Context Resources A process is holding onto a transport performance counter. processId : 12728, counter : time in resource per second Value=1130610 SpinLock=0 Lifetime=Type: 1 ProcessId: 12728 StartupTime: 129992800311275798, currentInstance : ad-edgetransport-edgetransport.exe(E79D4A36)
    RefCount=1 SpinLock=0 Offset=24768, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7516, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7516 StartupTime:
    129992800299263990, currentInstance : rpca-msexchangetransport-msexchangetransport.exe(24F56C33) RefCount=1 SpinLock=0 Offset=24440, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId :
    7516, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7516 StartupTime: 129992800299263990, currentInstance : mb-msexchangetransport-msexchangetransport.exe(92FB3D3C) RefCount=1 SpinLock=0 Offset=24112, categoryName: MSExchange
    Activity Context Resources A process is holding onto a transport performance counter. processId : 7516, counter : time in resource per second Value=54 SpinLock=0 Lifetime=Type: 1 ProcessId: 7516 StartupTime: 129992800299263990, currentInstance : ad-msexchangetransport-msexchangetransport.exe(2447ECB6)
    RefCount=1 SpinLock=0 Offset=23784, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7632, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7632 StartupTime:
    129992750543373015, currentInstance : rpca-microsoft.exchange.store.worker-microsoft.exchange.store.worker.exe(ABB009B3) RefCount=1 SpinLock=0 Offset=23456, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance
    counter. processId : 7632, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7632 StartupTime: 129992750543373015, currentInstance : mb-microsoft.exchange.store.worker-microsoft.exchange.store.worker.exe(38BA31BC) RefCount=1
    SpinLock=0 Offset=23128, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7632, counter : time in resource per second Value=1434838 SpinLock=0 Lifetime=Type: 1 ProcessId: 7632 StartupTime:
    129992750543373015, currentInstance : ad-microsoft.exchange.store.worker-microsoft.exchange.store.worker.exe(11106236) RefCount=1 SpinLock=0 Offset=22800, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance
    counter. processId : 3864, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3864 StartupTime: 129992750232229526, currentInstance : rpca-microsoft.exchange.um.callrouter-microsoft.exchange.um.callrouter.exe(E8475353) RefCount=1
    SpinLock=0 Offset=22472, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 3864, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3864 StartupTime:
    129992750232229526, currentInstance : mb-microsoft.exchange.um.callrouter-microsoft.exchange.um.callrouter.exe(8F65881C) RefCount=1 SpinLock=0 Offset=22144, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance
    counter. processId : 3864, counter : time in resource per second Value=44 SpinLock=0 Lifetime=Type: 1 ProcessId: 3864 StartupTime: 129992750232229526, currentInstance : ad-microsoft.exchange.um.callrouter-microsoft.exchange.um.callrouter.exe(78F52196) RefCount=1
    SpinLock=0 Offset=21816, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6064, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6064 StartupTime:
    129992749750676533, currentInstance : rpca-msexchangerepl-msexchangerepl.exe(7148D1D3) RefCount=1 SpinLock=0 Offset=21488, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6064, counter
    : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6064 StartupTime: 129992749750676533, currentInstance : mb-msexchangerepl-msexchangerepl.exe(7544DE9C) RefCount=1 SpinLock=0 Offset=21160, categoryName: MSExchange Activity Context
    Resources A process is holding onto a transport performance counter. processId : 6064, counter : time in resource per second Value=4012375 SpinLock=0 Lifetime=Type: 1 ProcessId: 6064 StartupTime: 129992749750676533, currentInstance : ad-msexchangerepl-msexchangerepl.exe(4FE1D16)
    RefCount=1 SpinLock=0 Offset=20832, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6600, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6600 StartupTime:
    129992749986061560, currentInstance : rpca-umservice-umservice.exe(E39A1133) RefCount=1 SpinLock=0 Offset=20504, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6600, counter : time
    in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6600 StartupTime: 129992749986061560, currentInstance : mb-umservice-umservice.exe(FFBB273C) RefCount=1 SpinLock=0 Offset=20176, categoryName: MSExchange Activity Context Resources A process
    is holding onto a transport performance counter. processId : 6600, counter : time in resource per second Value=2173470 SpinLock=0 Lifetime=Type: 1 ProcessId: 6600 StartupTime: 129992749986061560, currentInstance : ad-umservice-umservice.exe(9A8AC6B6) RefCount=1
    SpinLock=0 Offset=19848, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6156, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6156 StartupTime:
    129992749943318526, currentInstance : rpca-msexchangetransportlogsearch-msexchangetransportlogsearch.exe(EF66F2D3) RefCount=1 SpinLock=0 Offset=19520, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter.
    processId : 6156, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6156 StartupTime: 129992749943318526, currentInstance : mb-msexchangetransportlogsearch-msexchangetransportlogsearch.exe(B020391C) RefCount=1 SpinLock=0
    Offset=19192, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6156, counter : time in resource per second Value=4209 SpinLock=0 Lifetime=Type: 1 ProcessId: 6156 StartupTime: 129992749943318526,
    currentInstance : ad-msexchangetransportlogsearch-msexchangetransportlogsearch.exe(20578116) RefCount=1 SpinLock=0 Offset=18864, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 3912,
    counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3912 StartupTime: 129992749878269211, currentInstance : rpca-msexchangesubmission-msexchangesubmission.exe(60747EB3) RefCount=1 SpinLock=0 Offset=18536, categoryName: MSExchange
    Activity Context Resources A process is holding onto a transport performance counter. processId : 3912, counter : time in resource per second Value=838132 SpinLock=0 Lifetime=Type: 1 ProcessId: 3912 StartupTime: 129992749878269211, currentInstance : mb-msexchangesubmission-msexchangesubmission.exe(67B4173C)
    RefCount=1 SpinLock=0 Offset=18208, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 3912, counter : time in resource per second Value=1177907 SpinLock=0 Lifetime=Type: 1 ProcessId:
    3912 StartupTime: 129992749878269211, currentInstance : ad-msexchangesubmission-msexchangesubmission.exe(85200236) RefCount=1 SpinLock=0 Offset=17880, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter.
    processId : 75064, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 75064 StartupTime: 129999247871067971, currentInstance : rpca-microsoft.exchange.rpcclientaccess.service-microsoft.exchange.rpcclientaccess.service.exe(E4305E13)
    RefCount=1 SpinLock=0 Offset=17552, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 75064, counter : time in resource per second Value=27359 SpinLock=0 Lifetime=Type: 1 ProcessId: 75064
    StartupTime: 129999247871067971, currentInstance : mb-microsoft.exchange.rpcclientaccess.service-microsoft.exchange.rpcclientaccess.service.exe(BBA60BDC) RefCount=1 SpinLock=0 Offset=17224, categoryName: MSExchange Activity Context Resources A process is holding
    onto a transport performance counter. processId : 75064, counter : time in resource per second Value=82804 SpinLock=0 Lifetime=Type: 1 ProcessId: 75064 StartupTime: 129999247871067971, currentInstance : ad-microsoft.exchange.rpcclientaccess.service-microsoft.exchange.rpcclientaccess.service.exe(B6581E56)
    RefCount=1 SpinLock=0 Offset=16896, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 5576, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5576 StartupTime:
    129992749923195144, currentInstance : rpca-msexchangethrottling-msexchangethrottling.exe(8C1DA893) RefCount=1 SpinLock=0 Offset=16568, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId
    : 5576, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5576 StartupTime: 129992749923195144, currentInstance : mb-msexchangethrottling-msexchangethrottling.exe(AB2BADDC) RefCount=1 SpinLock=0 Offset=16240, categoryName:
    MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 5576, counter : time in resource per second Value=10 SpinLock=0 Lifetime=Type: 1 ProcessId: 5576 StartupTime: 129992749923195144, currentInstance :
    ad-msexchangethrottling-msexchangethrottling.exe(8962F4D6) RefCount=1 SpinLock=0 Offset=15912, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 13320, counter : time in resource per
    second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 13320 StartupTime: 129992982379033019, currentInstance : rpca-msexchangemailboxreplication-msexchangemailboxreplication.exe(276F4DB3) RefCount=1 SpinLock=0 Offset=15584, categoryName: MSExchange Activity
    Context Resources A process is holding onto a transport performance counter. processId : 13320, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 13320 StartupTime: 129992982379033019, currentInstance : mb-msexchangemailboxreplication-msexchangemailboxreplication.exe(95E41BC)
    RefCount=1 SpinLock=0 Offset=15256, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 13320, counter : time in resource per second Value=904140 SpinLock=0 Lifetime=Type: 1 ProcessId:
    13320 StartupTime: 129992982379033019, currentInstance : ad-msexchangemailboxreplication-msexchangemailboxreplication.exe(394712B6) RefCount=1 SpinLock=0 Offset=14928, categoryName: MSExchange Activity Context Resources A process is holding onto a transport
    performance counter. processId : 5068, counter : time in resource per second Value=53584 SpinLock=0 Lifetime=Type: 1 ProcessId: 5068 StartupTime: 129992749574808748, currentInstance : rpca-msexchangemailboxassistants-msexchangemailboxassistants.exe(DEAC0933)
    RefCount=1 SpinLock=0 Offset=14600, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 5068, counter : time in resource per second Value=54866 SpinLock=0 Lifetime=Type: 1 ProcessId: 5068
    StartupTime: 129992749574808748, currentInstance : mb-msexchangemailboxassistants-msexchangemailboxassistants.exe(A754293C) RefCount=1 SpinLock=0 Offset=14272, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance
    counter. processId : 5068, counter : time in resource per second Value=616057 SpinLock=0 Lifetime=Type: 1 ProcessId: 5068 StartupTime: 129992749574808748, currentInstance : ad-msexchangemailboxassistants-msexchangemailboxassistants.exe(EE890EB6) RefCount=1
    SpinLock=0 Offset=13944, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 3576, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3576 StartupTime:
    129992749858458492, currentInstance : rpca-microsoft.exchange.servicehost-microsoft.exchange.servicehost.exe(39C8D53) RefCount=1 SpinLock=0 Offset=13616, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance
    counter. processId : 3576, counter : time in resource per second Value=41623 SpinLock=0 Lifetime=Type: 1 ProcessId: 3576 StartupTime: 129992749858458492, currentInstance : mb-microsoft.exchange.servicehost-microsoft.exchange.servicehost.exe(E7963A1C) RefCount=1
    SpinLock=0 Offset=13288, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 3576, counter : time in resource per second Value=1048750 SpinLock=0 Lifetime=Type: 1 ProcessId: 3576 StartupTime:
    129992749858458492, currentInstance : ad-microsoft.exchange.servicehost-microsoft.exchange.servicehost.exe(10E8B196) RefCount=1 SpinLock=0 Offset=12960, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter.
    processId : 3508, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3508 StartupTime: 129992760724492119, currentInstance : rpca-w3wp-msexchangeservicesapppool(E8BBF810) RefCount=1 SpinLock=0 Offset=12632, categoryName: MSExchange
    Activity Context Resources A process is holding onto a transport performance counter. processId : 3508, counter : time in resource per second Value=222927 SpinLock=0 Lifetime=Type: 1 ProcessId: 3508 StartupTime: 129992760724492119, currentInstance : mb-w3wp-msexchangeservicesapppool(10FE94BF)
    RefCount=1 SpinLock=0 Offset=12304, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 3508, counter : time in resource per second Value=1001355 SpinLock=0 Lifetime=Type: 1 ProcessId:
    3508 StartupTime: 129992760724492119, currentInstance : ad-w3wp-msexchangeservicesapppool(E0DE475) RefCount=1 SpinLock=0 Offset=11976, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId
    : 4900, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4900 StartupTime: 129992749471903110, currentInstance : rpca-microsoft.exchange.store.service-microsoft.exchange.store.service.exe(A07BD4F3) RefCount=1 SpinLock=0
    Offset=11648, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 4900, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4900 StartupTime: 129992749471903110,
    currentInstance : mb-microsoft.exchange.store.service-microsoft.exchange.store.service.exe(4519AFC) RefCount=1 SpinLock=0 Offset=11320, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId
    : 4900, counter : time in resource per second Value=28 SpinLock=0 Lifetime=Type: 1 ProcessId: 4900 StartupTime: 129992749471903110, currentInstance : ad-microsoft.exchange.store.service-microsoft.exchange.store.service.exe(6B0DD0F6) RefCount=1 SpinLock=0 Offset=10992,
    categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 4708, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4708 StartupTime: 129992749445169725, currentInstance
    : rpca-msexchangefrontendtransport-msexchangefrontendtransport.exe(935D2AB3) RefCount=1 SpinLock=0 Offset=10664, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 4708, counter : time
    in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4708 StartupTime: 129992749445169725, currentInstance : mb-msexchangefrontendtransport-msexchangefrontendtransport.exe(52FB38BC) RefCount=1 SpinLock=0 Offset=10336, categoryName: MSExchange
    Activity Context Resources A process is holding onto a transport performance counter. processId : 4708, counter : time in resource per second Value=210983 SpinLock=0 Lifetime=Type: 1 ProcessId: 4708 StartupTime: 1...
    Leo

  • MSExchange Common Warning 6005 after update to CU7

    I am getting this at every boot since I upgraded to CU7.  I can't find anything online about it. 
    Log Name:      Application
    Source:        MSExchange Common
    Date:          12/19/2014 1:10:38 PM
    Event ID:      6005
    Task Category: Logging
    Level:         Warning
    Keywords:      Classic
    User:          N/A
    Computer:      Server.contoso.com
    Description:
    ConnectivityLog: Failed to flush logging requests fast enough (maximum requests of 50000); was forced to flush synchronously. This indicates high disk latency or issues with thread starvation and indicates a performance problem.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="MSExchange Common" />
        <EventID Qualifiers="32772">6005</EventID>
        <Level>3</Level>
        <Task>3</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2014-12-19T20:10:38.000000000Z" />
        <EventRecordID>69515</EventRecordID>
        <Channel>Application</Channel>
        <Computer>Server.contoso.com</Computer>
        <Security />
      </System>
      <EventData>
        <Data>ConnectivityLog</Data>
        <Data>50000</Data>
      </EventData>
    </Event>

    Hi MnM,
    According to the log description, it seems that there is a performance issue on the hardware（Hard disk / CPU）.
    You can ignore this warning safely if you do not intend to increase hardware for a short time.
    Best regards,
    Niko Cheng
    TechNet Community Support

  • Event 2193, MSExchange ADAccess

    Hi,
    After updating our Exchange 2013 SP1 servers to CU6 we get a lot of these errors in the Application log on them. All our DCs except two that is on the same site as the Exchange servers, is in the error messages. It is a bit random in time but each
    DC gives an error about every 25 minutes on both Exchange servers. Any idea?
    Event Id: 2193
    Source: MSExchange ADAccess
    Process Microsoft.Exchange.Directory.TopologyService.exe (PID=3576). Suitability check failed for server xxxxxx.domain.local with an exception. Error: System.InvalidOperationException: GetDomainControllerInfo() called on an invalid handle.
       at Microsoft.Exchange.Win32.SafeDomainControllerInfoHandle.GetDomainControllerInfo()
       at Microsoft.Exchange.Data.Directory.TopologyDiscovery.SuitabilityVerifier.CheckNetLogon(SuitabilityCheckContext context) (in CheckNetLogon).

    Hi,
    From your description, I recommend you use the Dcdiag to check your DC health at first and verify if there is any issue with the DCs.
    Here is an article about Dcdiag for your reference.
    Dcdiag
    http://technet.microsoft.com/en-us/library/cc731968.aspx
    Hope this can be helpful to you.
    Best regards,
    If you have feedback for TechNet Subscriber Support, contact
    [email protected]
    Amy Wang
    TechNet Community Support

  • Event Log Trigger on New-Mailbox Event in MSExchange Management Event Log and Email in HTML Format

    I created a custom event view and created "Attach Task to this custom view" task scheduler job based on the custom view. Whenever a new user is created a receive the email however, the body of the email is blank. I'd like to pass the event detail
    into the body of the email as HTML. Any assistance on how to create a script to accomplish is much appreciated.

    Did you find an answer to this question yet?
    ¯\_(ツ)_/¯

  • Perflib and MSExchange Common Error on Exchange 2013

    Hello,
    I am getting two error messages (in attachment) again and again on two newly installed Exchange 2013 SP1 servers with combined Exchange roles. I found a lot but could not find and solution. Please guide how to resolve the issue;
    Thanks in advance.
    Regards,

    Hi,
    For the first error, please try the following steps to check this issue.
    1. Write down the name that is mentioned as [module] in your Event ID 1023 message.
    2. Click Start, click Run and type Regedit [enter] (If you do not have a run option just hit the Windows key + R)
    3. In the Registry browse to the key:
    HKLM\SYSTEM\CurrentControlSet\Services\ServiceName\Performance
    Where ServiceName references to the [module] name you wrote down in step 1.
    4. Under the Performance branch check the entry that says “Library”.
    5. Check if the file exits in the folder that is referenced in the registry Library entry. 
    6. Search the computer for that filename to see if it exists on other locations.
    7. Compare file size and versions of the files that are found. If the DLL from step 5 is older/lower version then the ones in other folders you might want to rename this DLL and copy a newer one to the folder.
    If you are unable to find the DLL anywhere else on the computer check the original media (CD/DVD) you installed the product from to see if the DLL exist on there. Copy or extract it to the folder where the Perflib expects it.
    Then start a Command prompt and type:
    REGSVR32 [path][file.dll] – where path and file.dll refer to the complete path and filename of the file you just copied.
    And refer to this document
    https://technet.microsoft.com/en-us/library/cc727009%28v=ws.10%29.aspx?f=255&MSPPError=-2147217396
    Best Regards.
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
    Lynn-Li
    TechNet Community Support

Maybe you are looking for