Exchange 2010 MP - CAS servers not beeing discovered

Hi!
I have 2 CAS-servers that are not beeing discovered. Trigger on Demand discovery against  these servers fails. Is there a way I can manually force these servers to this role?
Best regards
Rune Haugen

Hi,
Have you checked the option "Allow this agent to act as a proxy and discover managed objects on other computers" for all your Exchange servers? 
Please also try to flush health service state and caches for the CAS servers.
More details about flush health service state and caches, please refer to the link below:
http://technet.microsoft.com/en-us/library/hh212884.aspx
Regards
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Similar Messages

  • Exchange 2010 "This message could not be sent. Try sending the message again later, or contact your network administrator. Error is [0x80004005-00000000-00000000].

    Exchange 2010 "This message could not be sent. Try sending the message again later, or contact your network administrator.  Error is [0x80004005-00000000-00000000].
    In a mixed client environment, mostly Outlook 2010 & 2013 clients. Only Outlook 2013 clients (about only 4 mailboxes) are receiving this error immediately after sending an email. My temp band-aid at the
    moment is to: from the client, go into the "address book" & select a different address book like "Contacts" & then select the address again & select the Global Address List, which is the default. (it will have the users email
    + at the beginning of the field, it reads, Global Address List - (email of the user), then I close Outlook & open it back up, & the problem is solved. But on some mailboxes, not all, the issue comes back. From my research, I know that our individual
    mailboxes do not send out over 500 emails in one day. Most users will send out maybe 20 or 30 in one day, so I don't think it's that. 
    But I'm not sure if this is related, but I have noticed that the log files for the Exchange 2010 seems to only hold logs with date stamps of only a couple of days. It used to hold log files indefinitely until they were archived, deleted, etc. So, this is
    a new, unusual issue I have seen as well. 
    We have 2 .edb's, one active: 78 GB's and one disabled at 7 GB's. Exchange 2010 is running on Windows Server 2008 r2, Enterprise Ed. We have had Exchange 2010 running now for about almost 2 years now and this is the first time this particular issue has come
    up.
    Thanks.

    Hi,
    You can refer to the following steps to rebuild an Offline Address Book.
    1. Open EMS. Update OAB using the Update-OfflineAddressbook "offline address book" cmdlet. Restart Background Intelligent Transfer Service on the Mailbox server.
    2. Initiate OAB replication from mail box server to CAS server. Execute for each CAS server using the Update-FileDistributionService "CASServerName" cmdlet.
    3. Start Outlook and download OAB.
    What's more, here is an article for your reference.
    How to Quickly Rebuild an Exchange 2010 Offline Address Book
    http://social.technet.microsoft.com/wiki/contents/articles/7725.how-to-quickly-rebuild-an-exchange-2010-offline-address-book.aspx
    Hope this can be helpful to you.
    Best regards,
    Amy Wang
    TechNet Community Support

  • Performance counters for exchange 2013 mailbox & cas servers?

    what are the Performance counters for exchange 2013 mailbox & cas servers?
     similar to rpc request for troubleshooting exchange slowness, I haven't found any technet article for exchange 2013. 

    Hi,
    Please see this:
    Ask the Perf Guy: Sizing Exchange 2013 Deployments
    http://blogs.technet.com/b/exchange/archive/2013/05/06/ask-the-perf-guy-sizing-exchange-2013-deployments.aspx
    Hope it is what you need.
    Thanks
    Mavis
    Mavis Huang
    TechNet Community Support

  • Upgrading from Exchange 2003 Bridgehead servers to Exchange 2010 Transport Hub servers for routing SMTP only

    Our company moved from on-premises Exchange 2003 to Office365 and only have 4 Exchange 2003 servers on-prem that we use for Routing email from application servers to Office365. We need to migrate these servers to Exchange 2010 then to Exchange 2013 and
    only route email only. Is it possible to upgrade to Exchange 2010 by installing the transport Hub & Mailbox server options only? Our OAB and EWS services come from the CAS servers located on Office365 so we should not need a CAS server to set up Transport
    rules or route mail would we? Any assistance with this would be greatly appreciated! - Thanks, DWB
    Dave

    Since it is not internet facing we will not have to worry about configuring an Internet Domain Name when installing the first server, correct? in my planning I was going to
    install the Exchange 2010 CAS/Mailbox/Transport Hub roles on one server, then upgrade it to Exchange 2013. Once this is completed I'll then install the 2 mailbox role servers in one Datacenter, and 3 more in our DRP DC. If something happens to the
    primary Datacenter I would want it to fail over to the other site. For this I would have to install another CAS/mailbox server in the secondary DC. Would this plan sound about right? Since we moved to Office365 in 2010 I have not had a chance to deal with
    actual servers except for the Exchange 2003 servers we still have on-premises. Each of these are located in 4 Regional offices along with single Windows 2008 R2 servers using only the IIS SMTP service for routing mail from on-prem application servers
    and print/scanners which email back to the users. The plan is to move to a routing system which will provide both MTA and redundancy if one has an issue.
    Dave

  • Exchange 2010 DAG Failover does not works

    Hi Experts,
    I have a Exchange 2010 setup in  a DAG environment. We have 2 MBX servers in the main site and 1 MBX server in the DR site , all part of one DAG. We have 2 HUB/CAS servers in the main site and 1 HUB/CAS server in the DR site.
    Recently we had to do our BCP test for audit purpose. We had issues in doing failover to the DR site and below is the error faced.
    Please advise urgently on the possible causes and resolution steps for it as we need to do this test again on the coming weekend.
    "EvictDagClusterNode got exception Microsoft.Exchange.Cluster.Replay.AmClusterEvictWithoutCleanupException: An Active Manager operation failed. Error An error
    occurred while attempting a cluster operation. Error: Evict node 'sme-ho-mbx01' returned without the node being fully cleaned up. Please run cluster.exe node <NodeName> /forcecleanup to complete clean up for this node.. ---> System.ComponentModel.Win32Exception:
    The wait operation timed out"
    So, basically one of the MBX server was not evicting from the Cluster due to which failover did not work.
    Would appreciate some urgent thoughts for the possible resolution.
    regards
    abubakar
    Md.Abubakar Noorani IT Systems Engineer Serco Ltd.

    Hi,
    Yes, you can run the Stop-DatabaseAvailabilityGroup without shutting down the Mailbox server. During the process of DAG failover to DR site, the Stop-DatabaseAvailabilityGroup cmdlet should be run against all servers in the primary datacenter. If the Mailbox
    server is unavailable but Active Directory is operating in the primary datacenter, the Stop-DatabaseAvailabilityGroup command with the ConfigurationOnly parameter must be run against all servers in this state in the primary datacenter.
    And please note that the Stop-DatabaseAvailabilityGroup cmdlet can be run against a DAG only when the DAG is configured with a DatacenterActivationMode value of DagOnly. 
    Based on the error message, it seems that you should run the cluster node nodename /forcecleanup cmdlet against the specified node in the main site. Have you tried this to check the result?
    Best regards,
    Belinda
    Belinda Ma
    TechNet Community Support

  • Exchange 2010 task scheduled scripts not working if not logged on

    Hi All,
    I have done a script for Exchange 2010 and I would like to create a scheduled task for it.
    I have followed the guidance of Mike Pfeiffer's blog.
    http://www.mikepfeiffer.net/2010/02/creating-scheduled-tasks-for-exchange-2010-powershell-scripts/
    However when I set the task as  “Run whether user is logged on or not”, it only works if the user running the task is the administrator. The task is run with high privileges.
    If I do it with a service account (local admin, exchange org admin) it works only when:
    -You run the script for an interactive session of the user or a runas cmd
    -You set the Task as “Run only when the user is logged on” (and the user is logged on)
    If I run the Task as “Run whether user is logged on or not” and the user is not logged on, I get an error on the connection command "Connect-ExchangeServer -auto" (and the task hangs waiting for an answer). The transcript is as follows:
    Transcript started, output file is C:\scripts\informes\pruebasconexion.Log.txt
             Welcome to the Exchange Management Shell!
    Full list of cmdlets: Get-Command
    Only Exchange cmdlets: Get-ExCommand
    Cmdlets that match a specific string: Help *<string>*
    Get general help: Help
    Get help for a cmdlet: Help <cmdlet name> or <cmdlet name> -?
    Show quick reference guide: QuickRef
    Exchange team blog: Get-ExBlog
    Show full output for a command: <command> | Format-List
    Tip of the day #31:
    Tab completion reduces the number of keystrokes required to complete a cmdlet. Just press the TAB key to complete the cmdlet you are typing. Tab completion kicks in whenever there is a hyphen (-) in the input. For example:
     Get-Send<tab>
    should complete to Get-SendConnector. You can even use wildcards, such as:
     Get-U*P*<tab>
    Pressing the TAB key when you enter this command cycles through all cmdlets that match the expression, such as the Unified Messaging Mailbox policy cmdlets.
    WARNING: The service  () isn't running. Connecting to remote Powershell requires this service to be running.
    VERBOSE: Connecting to CAS01.XXX.es
     An internal error occurred. 
        + CategoryInfo          : InvalidArgument: (http://cas01.XX...Ver=14.1.218.15:Uri) [], PSInvalidOperationException
        + FullyQualifiedErrorId : CreateRemoteRunspaceFailed
    VERBOSE: Connecting to CAS02.XXX.es
    An internal error occurred. 
        + CategoryInfo          : InvalidArgument: (http://cas02.XX..Ver=14.1.218.15:Uri) [], PSInvalidOperationException
        + FullyQualifiedErrorId : CreateRemoteRunspaceFailed
    WARNING: The service  () isn't running. Connecting to remote Powershell requires this service to be running.
    VERBOSE: Connecting to MBX02.XXX.es
    An internal error occurred. 
        + CategoryInfo          : InvalidArgument: (http://mbx02.XX...Ver=14.1.218.15:Uri) [], PSInvalidOperationException
        + FullyQualifiedErrorId : CreateRemoteRunspaceFailed
    VERBOSE: Connecting to CAS01.XXX.es
    An internal error occurred. 
        + CategoryInfo          : InvalidArgument: (http://cas01.XX...Ver=14.1.218.15:Uri) [], PSInvalidOperationException
        + FullyQualifiedErrorId : CreateRemoteRunspaceFailed
    VERBOSE: Connecting to CAS02.XXX.es
    An internal error occurred. 
        + CategoryInfo          : InvalidArgument: (http://cas02.XX...Ver=14.1.218.15:Uri) [], PSInvalidOperationException
        + FullyQualifiedErrorId : CreateRemoteRunspaceFailed
    WARNING: The service  () isn't running. Connecting to remote Powershell requires this service to be running.
    VERBOSE: Connecting to MBX02.XXX.es
    An internal error occurred. 
        + CategoryInfo          : InvalidArgument: (http://mbx02.XX...Ver=14.1.218.15:Uri) [], PSInvalidOperationException
        + FullyQualifiedErrorId : CreateRemoteRunspaceFailed
    Failed to connect to an Exchange server in the current site.
    Enter the server FQDN where you want to connect.:
    The error message refers to a unkown "() service", but I have no clue of which service can be needed and it is working only when session is opened.
     The command I run is
    C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -command ". 'c:\Program Files\Microsoft\Exchange Server\V14\bin\RemoteExchange.ps1';c:\scripts\informes\estado_db_dag.ps1"
    UNICAN-SdeI

    I experienced a similar symptom where the scheduled task was getting stuck in the "Running" state. I searched the web for others who have experienced this issue with scheduled tasks, and what I found is that there could be a few reasons why
    this might happen. 
    I resolved my problem by adding -NonInteractive switch before the -command parameter.
    Hope it helps...
    In my case, -NonInteractive does indeed stop the task from getting stuck in a perpetual Running state (until it times out based on the settings in scheduled task), but I was able to deduce why by using Start-Transcript and Stop-Transcript.
    Basically, the connection to Exchange is failing some reason and it sits at a prompt waiting for you to enter a FQDN for an Exchange server (same problem as the OP).  Adding -NonInteractive to the scheduled task does indeed prevent the task from getting
    stuck waiting for someone to enter a FQDN at a prompt that they cannot interact with, the script still does not execute correctly.  Essentially, adding the "-NonInteractive" switch does not fix the underlying problem of the Exchange connection
    failing.
    As far as I am able to tell, this has something do with a WinRM problem.  I'm having the same problem as the OP and am trying to troubleshoot it.  In my case, deleting the user profile for the service account does not fix the problem.

  • Problem: Mixed Exchange 2007 / 2013 CAS Servers with wildcard certificates in Europe and non-wildcard Certficate in China

    Hi,
    we have following problem. We have a mixed multi-domain one-forest AD environment. We also have still a mixed exchange 2007 / 2013 environment. We also have different CAS Servers for 2007 SP3 (RU15) and 2013 (CU8) in europe and one 2007 SP3 (RU15) CAS Server
    in China, because of bad connection to Europe. For the Migration to 2013 in Europe we installed a wildcard-certificate *.xyz.com and used the Set-OutlookProvider EXPR -CertPrincipalName msstd:*.xyz.com, so the wildcard certificate is accepted. Everything in
    Europe works fine, inside and outside also between exchange 2007 and 2013 (both CAS Server 2013 and 2007 use the same wildcard certificate). But since the change of the Set-OutlookProvider EXPR we are facing problems with our CAS Server in China, because this
    server has a different non-wildcard certificate and a different domain name (cas-server.xyz-china.com instead xyz.com). Now we have the problem that this Chinese CAS server the Outlook Anywhere does not work anymore and prompts always for the username. As
    I see it is because of the EXPR change. Is it possible to set the the Outlook-Provider EXPR per Cas-Server ? (They also have their own Autodiscover on this front-end server). Because I see that the Outlook-Provider can only be stored forest-wide.
    If not the other solution would be to register the chinese cas server in our xyz.com domain and use the same wildcard certificate on this system right ?
    Any help would be appreciate….

    Yes setting the EXPR value is most likely the cause of your issue.  When you set this value you are telling Outlook to only accept connections from connections that have the cert with the subject name you specify here.
    Unfortunately, based on my experience I believe this is an organization wide setting and cannot be configured on a CAS by CAS basis (If I'm wrong someone please keep me honest :)).  
    So the only option would you have is to change all the URLs to be on *.xyz.com domain.  There's no need to change the domain the server actually resides on.  The other option would be to purchase a UCC Cert with all the names you need and apply
    to all your CAS servers and reset the EXPR value. 
    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread

  • DAG Kerberos Authentication Issue Exchange 2010 on 2008R2 Servers

    I have 2 Exchange 2010 servers in a DAG. The witness server is in site A along with one the Exchange servers. The second Exchange server is in a DR site. The DAG has been functioning fine for 1.5 yrs. Last weekend after a scheduled reboot of all 3 servers
    involved (2 e-mail servers and the witness server), the e-mail server in the DR site cannot gain access to the witness share directory per the failover cluster manager. It says to check to see if the witness directory is on-line, etc... Using pings and
    explorer, there is no problem for the DR site e-mail server to contact the witness server and directory. Even restablished the Quorem to the same directory, no issues. Upon doing a network trace though, I am receiving KERBEROS pre-authentication errors when
    you start the Cluster service on the DR site e-mail server when it tries to contact the witness server:
    (1.4 is the Witness server; 6.5 is the e-mail server in the DR site)
    Source              Destination
    192.168.1.4","192.168.6.5","KRB5","319","KRB Error: KRB5KDC_ERR_PREAUTH_REQUIRED"
    192.168.6.5","192.168.1.4","TCP","54","26049 > kerberos [FIN, ACK] Seq=235 Ack=266 Win=65792 Len=0"
    192.168.6.5","192.168.1.4","TCP","66","26050 > kerberos [SYN] Seq=0 Win=8192 Len=0 MSS=1460 WS=256 SACK_PERM=1"
    192.168.1.4","192.168.6.5","TCP","60","kerberos > 26049 [ACK] Seq=266 Ack=236 Win=66048 Len=0"
    192.168.1.4","192.168.6.5","TCP","60","kerberos > 26049 [RST, ACK] Seq=266 Ack=236 Win=0 Len=0"
    192.168.1.4","192.168.6.5","TCP","66","kerberos > 26050 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1406 WS=256 SACK_PERM=1"
    192.168.6.5","192.168.1.4","TCP","54","26050 > kerberos [ACK] Seq=1 Ack=1 Win=66048 Len=0"
    192.168.6.5","192.168.1.4","KRB5","368","AS-REQ"
    192.168.1.4","192.168.6.5","KRB5","282","KRB Error: KRB5KDC_ERR_PREAUTH_FAILED"
    192.168.6.5","192.168.1.4","TCP","54","26050 > kerberos [FIN, ACK] Seq=315 Ack=229 Win=65792 Len=0"
    192.168.1.4","192.168.6.5","TCP","60","kerberos > 26050 [ACK] Seq=229 Ack=316 Win=66048 Len=0"
    192.168.1.4","192.168.6.5","TCP","60","kerberos > 26050 [RST, ACK] Seq=229 Ack=316 Win=0 Len=0"
    Thoughts anyone?

    Hi,
    Unfortunately, the available information is not enough to have a clear view of the occurred behavior, it is not an efficient way to work in this community since we may need more resources, for example exchange log, detail cluster log (an application)
    dump or ETL trace, which is not appropriate to handle in the community. I‘d like to suggest that you submit a service request to MS Professional tech support service so that a dedicated Support Professional can further assist with this request.
    Please visit the below link to see the various paid support options that are available to better meet your needs.
    http://support.microsoft.com/default.aspx?id=fh;en-us;offerprophone
    Best regards,
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • Exchange 2010 anti-spam does not work after uninstalling Forefront

    I installed Forefront Security for Exchange for testing, and later removed it because I couldn't afford to let Forefront use over 1GB of RAM on my server. After removal, the built-in anti-spam wasn't working anymore. I discovered that content filtering had been disabled, so I re-enabled it but spam still sails on through. I reinstalled the hub transport role and enabled anti-spam, but the spam keeps on coming. I checked the headers on incoming email for SCL and PCL stamps, there are none. What else can I check that Forefront may have monkeyed with?

    Hi,
    Thank you for the post.
    Before going any further, I’d like to confirm whether you have installed Forefront Security for Exchange(FSE) on Exchange 2010. In fact, it cannot be installed.
    As far as I know, you should install Forefront Protection 2010 for Exchange Server (FPE) on Exchange 2010. When you installing FPE, the opt into antispam will disable Exchange's basic content filtering agent as FPE installs its own content filtering agent.  And uninstalling FPE will not re-enable this agent so you will have to do so manually.
    Regards,
    Nick Gu - MSFT

  • Exchange 2010 Outlook search can not find messages older than 1 year

    Hello,
    I have an exchange 2010 sp2 server. One of my users complains that Outlook search can not find any message older than 1 year. He have all his 5 year mails in the mailbox, but looks like search engine cant recognise them :( 
    Any thoughts? thanks in advance.

    Hi,
    Please verify that indexing is complete in Outlook:
    1. In Outlook, click in the Search box.
    2. Click the Search tab, click Search Tools, and then click Indexing Status.
    3. When the Indexing Status dialog appears, you should see the following:
    Outlook has finished indexing all of your items.
    0 items remaining to be indexed.
    Besides, please use the Search-Mailbox cmdlet to check if you can get messages older than one year in this user mailbox.
    Best regards,
    Belinda
    Belinda Ma
    TechNet Community Support

  • Exchange 2010 SP3 Rollup 7 not showing right version

    I have installed Rollup 7. I can see it in programs installed / updates
    but when I check the version number via the shell or console it show the number corresponding to sp3 no rollups
    tried to re install rollup7, but it fails 

    There is:
    Update Rollup 8 for Exchange Server 2010 SP2,
    and Update Rollup 8 for Exchange Server 2010 SP1
    But, as far as I know, there is no Update Rollup 8 for Exchange Server 2010
    SP3 yet.
    Please take a moment to Vote as Helpful and/or Mark as Answer where applicable. Thanks.
    That's correct Idan.  Exchange 2010 SP3 RU7 is the latest - released in August this year:
    http://blogs.technet.com/b/rmilne/archive/2014/08/26/exchange-2010-sp3-ru7-released.aspx
    Just like in Exchange 2003 & 2007 only service packs increment the version # you see in the management console and shell.  Check the exsetup file as mentioned in the first post Idan linked.
    Cheers,
    Rhoderick
    Microsoft Senior Exchange PFE
    Blog:
    http://blogs.technet.com/rmilne 
    Twitter:   LinkedIn:
      Facebook:
      XING:
    Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

  • Q10, Exchange 2010 ActiveSync - Email will not be deleted on server

    Hey Everyone,
    If you have a Q10 with Exchange ActiveSync, can you remove emails on the server using "Delete from Hub and server" option??
    I am testing this function both with an ipad and Q10. Emails removed from Ipad are removed from Exchange Server whereas emails removed from Q10 with "Delete from Hub and server" option selected are only removed from Q10 but not on the server.
    Is this a broken functionality or are there incorrect settings on the phone?
    Any help is greatly appreciated!
    -T

    the deletes can take a few on my Z30 or Z10
    I know a quick delete would be prefered but maybe the OS deems them as not fast needed
    Click here to Backup the data on your BlackBerry Device! It's important, and FREE!
    Click "Accept as Solution" if your problem is solved. To give thanks, click thumbs up
    Click to search the Knowledge Base at BTSC and click to Read The Fabulous Manuals
    BESAdmin's, please make a signature with your BES environment info.
    SIM Free BlackBerry Unlocking FAQ
    Follow me on Twitter @knottyrope
    Want to thank me? Buy my KnottyRope App here
    BES 12 and BES 5.0.4 with Exchange 2010 and SQL 2012 Hyper V

  • Decommissioning Exchange 2010 Public Folder servers

    I have 4 Exchange 2010 SP3 RU6 Public Folder servers. I need to get rid of 2 of them so I can re-use the hardware. The 2 I need to get rid of are replication partners (one replicates to the other) and only have about 5GB of PF data. I want to move the data
    to the other 2 Public Folder servers (they are replication partners with each other). Those 2 servers have about 200GB of PF data. Do I just run .\MoveAllReplicas.ps1 -Server OldServer -NewServer NewServer on 1 server since it has the same data as the other
    one? I am just trying to figure out how to get the data from the 2 "old" PF servers (it is the same data since 1 replicates to the other) to the 2 newer ones which are the main PF servers (again, one replicates to the other). Also, this command won't
    erase what is already on the newer servers, right? I assume it will just add to the existing.
    Jason
    HDL

    Hi,
    You need to replicate public folder firstly, after you make sure the public folder replication is completed, you can use the .\MoveAllReplicas.ps1 to move all replicas to the server that you want to keep.
    Replicating public folders won't remove the existing public folders.
    You will have to run  .\MoveAllReplicas.ps1 -Server OldServer -NewServer NewServer command on both server, this command actually remove the public folder replicas on the old Exchange server. If you don't remove public folders replicas on the old
    server, you won't remove pulic folder database successfully.
    Best regards,
    Belinda Ma
    TechNet Community Support

  • Server 2012 R2 Hyper-v Servers not being discovered by the mp

    Sorry if this is a dup question. I did see the one for 2008 but that didn't fix my issue.
    I have 4 hyper-v servers running server 2012 r2 in a cluster. I have scom 2012 r2 and it detects the cluster and 3 out of the 4 hyper-v servers. the 4th server it can see under windows but does not discover the hyper-v components.
    Any assistance would be appreciated.

    Hi,
    You can install the Agent on the server manually to check the result.
    http://technet.microsoft.com/en-us/library/hh212853.aspx
    Niki Han
    TechNet Community Support

  • Exchange 2010 Information Store Service not Starting ERROR 1003

    Error message when I try to manually start the service myself :
    Windows could not start the Microsoft Exchange Information Store on Local Computer. For more information, review the System Event Log. If this is a non-Microsoft service, contact the service vendor, and refer to service specific error code -1003.
    Please help me resolve this issue, I have been working on it for two solid days with no progress. 
    The Event Log Report : The Microsoft Exchange Information Store service terminated with service-specific error %%-1003.
    System
    Provider
    [ Name]
    Service Control Manager
    [ Guid]
    {555908d1-a6d7-4695-8e1e-26931d2012f4}
    [ EventSourceName]
    Service Control Manager
    EventID
    7024
    [ Qualifiers]
    49152
    Version
    0
    Level
    2
    Task
    0
    Opcode
    0
    Keywords
    0x8080000000000000
    TimeCreated
    [ SystemTime]
    2013-12-10T09:43:09.741080700Z
    EventRecordID
    680929
    Correlation
    Execution
    [ ProcessID]
    548
    [ ThreadID]
    10672
    Channel
    System
    Computer
    SBS2011.******.local
    Security
    EventData
    param1
    Microsoft Exchange Information Store
    param2
    %%-1003
    Error 0xfffffc15 starting the Microsoft Exchange Information Store. 
    Failed to set Default Jet params.

    The server seemed to have restarted on the weekend and the monday I was alerted of the problem. 
    Yes I did have a anti-virus program running on the server and I have removed the AV Kaspersky Endpoint 8 and the Security Centre but I cannot remove the Mail Server but I think I have turned it off. 
    EDIT: 
    Sorry and yes all the other services seem to start fine.
    Originally discovered the issue when users could not open Outlook then I discovered the Database was un-mounted and the service was not starting. 
    only other event I can find :
    The Microsoft Exchange Information Store service terminated with service-specific error %%-1003.
    System
    Provider
    [ Name]
    Service Control Manager
    [ Guid]
    {555908d1-a6d7-4695-8e1e-26931d2012f4}
    [ EventSourceName]
    Service Control Manager
    EventID
    7024
    [ Qualifiers]
    49152
    Version
    0
    Level
    2
    Task
    0
    Opcode
    0
    Keywords
    0x8080000000000000
    TimeCreated
    [ SystemTime]
    2013-12-10T10:45:38.168386900Z
    EventRecordID
    682044
    Correlation
    Execution
    [ ProcessID]
    548
    [ ThreadID]
    12532
    Channel
    System
    Computer
    SBS2011.xxxxx.local
    Security
    EventData
    param1
    Microsoft Exchange Information Store
    param2
    %%-1003

Maybe you are looking for