Exchange 2013 Critical Search event 2158 with event 1006
Hi,
I'm running Exchange 2013 CU1. I've noticed in the event logs two errors that continuously keep popping up relating to searching. Actual searching of mail seems fine and the mail databases are in a healthy state.
Event ID 2158 Unified logging service
Event 20 (Search) of severity 'Critical' occurred 11 more time(s) and was suppressed in the event log
and
Event ID 1006 General
The FastFeeder component received a connection exception from FAST. Error details: Microsoft.Exchange.Search.Fast.FastConnectionException: Connection to the Content Submission Service has failed. ---> Microsoft.Ceres.External.ContentApi.ConnectionException:
Recovery failed after 0 retries
at Microsoft.Ceres.External.ContentApi.DocumentFeeder.DocumentFeeder.CheckRecoveryFailed()
at Microsoft.Ceres.External.ContentApi.DocumentFeeder.DocumentFeeder.WaitForAvailable()
at Microsoft.Ceres.External.ContentApi.DocumentFeeder.DocumentFeeder.SubmitDocument(Document document, TimeSpan timeout)
at Microsoft.Ceres.External.ContentApi.DocumentFeeder.DocumentFeeder.SubmitDocument(Document document)
at Microsoft.Exchange.Search.Fast.FastFeeder.SubmitDocumentInternal(Object state)
--- End of inner exception stack trace ---
Hi,
Please take your time to apply the latest CU and see whether the issue fixes.
Regards,
Simon Wu
TechNet Community Support
Similar Messages
-
Need to monitor event ID with Event Level :Critical , Also how to generate (powershell or otherwise) an event with Event Level :Critical
Hi
First, we Need to clarify what do you want.
1) You want to Monitor a Windows Event with the severity "Error" (there is no Critical for Windows Events, only Error").
2) You want to create an Event in SCOM. I think you if you talk about "Event" in SCOM you mean actually an Alert.
There is no direct way like a tool/powershell script of only creating an Alert in SCOM only if you are going to use the SCOM SDK
http://msdn.microsoft.com/en-us/library/hh329086.aspx or using the Orchestrator Create Alert activity.
If you want to create a SCOM alert depending on a Windows Event you either can create a rule
http://technet.microsoft.com/en-us/library/ff730470.aspx or a Monitor
http://jimmoldenhauer.blogspot.ch/2013/03/scom-2012-how-to-generate-alerts-from.html
Cheers,
Stefan
Blog: http://blog.scomfaq.ch -
Missed event monitor with event reset
I have pretty simple request for Scom monitoring, but I don’t know how to do it. My application generates an event in custom log with name Mpis. Event level is Informational, Event ID is 10 and source is Mpis. This event is created every
5 minutes. If application failed, event isn’t created. I have a need to create an alert, if event isn’t created more than one hour and monitor must go into unhealthy state (red). If same event come back, monitor must resolve itself and go back to healthy (green).
I try doing this with missed event monitor with event reset, but they don’t work as I expected, probably because I use the same event for trigger an alert and resolve an alert. Any idea ?There must be something misconfigured. Missed Event Detection -> Windows Event Reset is the correct one.
Use Event ID 10 and Source Mpis as expression in both Simple Event Expression and Missing Event Expression. in Missing Event Detection, use "Based on fixed simple recurring Schedule" and choose 60 minutes/1 hour.
I have configured this in my environment, and this works perfectly; if no events are logged within an hour, i get an alert. If i then create the event, the alert Closes.
www.coretech.dk - blog.coretech.dk -
Exchange 2013 Offline Address Book generat failure Event ID 17004
Hello guys,
i met the following event id when I tried to update the offline address book on my mailbox server (Exchange 2013),
i have done the troubleshooting steps as below,
1 Reboot the mailbox server
2 restart the mailbox assistant service
I'd like know what can i do next step?
Generation of OAB "\Default Offline Address Book" failed.
Dn: CN=Default Offline Address Book,CN=Offline Address Lists,CN=Address Lists Container,CN=zteservices,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=zteservices,DC=eu
ObjectGuid: a603acd4-ea74-47c3-88a5-ebf25cbc663a
Stats: S:OAB='\Default Offline Address Book';I32:Status=2147500037;Dt:StartTime=2014-02-04T14:50:14.9300281Z;Dt:EndTime=0001-01-01T00:00:00.0000000;S:DC=ztedomain01.zteservices.eu;I32:Total.Records=1908;Ti:TimeWritingFiles=00:00:04.7035164;S:Wasted=False;Ti:Al.Unsorted.LdapElapsedTime=00:00:04.6206741;Ti:MailboxDownload.StoreRpcLatency=00:00:00.0160000;I32:MailboxDownload.StoreRpcCount=6;Ti:MailboxDownload.CpuTime=00:00:00.0312500;Ti:MailboxDownload.ElapsedTime=00:00:00.0496183;I32:Template.FS.BytesRead=1499956;I32:Template.FS.BytesWritten=2216646;Ti:Template.FS.Reading.ElapsedTime=00:00:00.0077045;Ti:Template.FS.Writing.ElapsedTime=00:00:00.0285458;Ti:Template.CpuTime=00:00:03.2031250;Ti:Template.ElapsedTime=00:00:04.7140032;I32:AL.Unsorted.FS.BytesRead=0;I32:AL.Unsorted.FS.BytesWritten=1874031;Ti:AL.Unsorted.FS.Reading.ElapsedTime=00:00:00;Ti:AL.Unsorted.FS.Writing.ElapsedTime=00:00:00.0224695;Ti:AL.Unsorted.LdapLatency=00:00:14.1220000;I32:AL.Unsorted.LdapCount=4844;Ti:AL.Unsorted.CpuTime=00:00:09.8125000;Ti:AL.Unsorted.ElapsedTime=00:00:23.4694472;I32:AL.Sorted.FS.BytesRead=1866395;I32:AL.Sorted.FS.BytesWritten=1866419;Ti:AL.Sorted.FS.Reading.ElapsedTime=00:00:00.0157892;Ti:AL.Sorted.FS.Writing.ElapsedTime=00:00:00.0104285;Ti:AL.Sorted.CpuTime=00:00:00.0468750;Ti:AL.Sorted.ElapsedTime=00:00:00.0573755;I32:AL.Compress.FS.BytesRead=1866407;I32:AL.Compress.FS.BytesWritten=1866407;Ti:AL.Compress.FS.Reading.ElapsedTime=00:00:00.0009518;Ti:AL.Compress.FS.Writing.ElapsedTime=00:00:01.3330312;Ti:AL.Compress.CpuTime=00:00:01.3593750;Ti:AL.Compress.ElapsedTime=00:00:01.3756676;I32:DiffGen.FS.BytesRead=0;I32:DiffGen.FS.BytesWritten=0;Ti:DiffGen.FS.Reading.ElapsedTime=00:00:00;Ti:DiffGen.FS.Writing.ElapsedTime=00:00:00;Ti:DiffGen.CpuTime=00:00:00;Ti:DiffGen.ElapsedTime=00:00:00.0155622;Ti:AL.Total.CpuTime=00:00:11.2187500;Ti:AL.Total.ElapsedTime=00:00:24.9209864;Ti:Total.CpuTime=00:00:14.5468750;Ti:Total.ElapsedTime=00:00:29.8092411;;
System.NullReferenceException: Object reference not set to an instance of an object.
at Microsoft.Exchange.OAB.BaseStream.Seek(Int64 offset, SeekOrigin origin)
at Microsoft.Exchange.MailboxAssistants.Assistants.OABGenerator.DiffFileGenerator.ReadFileHeader(Stream stream, Byte[] buffer, Int32& numberOfBytesRead, UInt32& crc)
at Microsoft.Exchange.MailboxAssistants.Assistants.OABGenerator.DiffFileGenerator.CreatePatch(Stream diffStream)
at Microsoft.Exchange.MailboxAssistants.Assistants.OABGenerator.DiffFileGenerator.GenerateDiffFile(FileSet fileSet)
at Microsoft.Exchange.MailboxAssistants.Assistants.OABGenerator.OABGenerator.GenerateDiffFile(OABFile addressListFile, OABFile oldFile)
at Microsoft.Exchange.MailboxAssistants.Assistants.OABGenerator.OABGenerator.GenerateAddressListFiles(ADObjectId addressList, String habRootLegacyDN)
at Microsoft.Exchange.MailboxAssistants.Assistants.OABGenerator.OABGenerator.Generate()
at Microsoft.Exchange.MailboxAssistants.Assistants.OABGenerator.OABGeneratorAssistant.ProcessSingleOAB(MailboxSession mailboxSession, IConfigurationSession perOrgAdSystemConfigSession, OfflineAddressBook oab, SecurityIdentifier mailboxSid, String
mailboxDomain)
Exchange Lync SharepointHi,
Do you mean the new Offline Address Book has been set to default and can be updated successfully? And now, the new issue is that send/receive hang on "Offline address book Connecting to Microsoft Exchange" and will never finish. Is it right?
The following link is a general discussion thread about the same issue. Please refer to it for more helpful suggestions or you can run Test E-mail AutoConfiguration tool and collect some error descriptions to open a new case
for more troubleshooting.
http://social.technet.microsoft.com/Forums/exchange/en-US/548f2ecc-faae-4744-8b33-7de536196d7d/sendreceive-hang-on-offline-address-book-connecting-to-microsoft-exchange-and-will-never-finish?forum=exchangesvrgenerallegacy
Thanks,
Winnie Liang
TechNet Community Support -
After upgrading to CU6 for Exchange 2013, the Application event log is flooded with MSExhange Common error 106: Performance counter updating error. Counter name is Time in Resource per second, category name is MSExchange Activity Context Resources. Optional
code: 2. Exception: The exception thrown is : System.InvalidOperationException: Instance 'ad-powershell-defaultdomain' already exists with a lifetime of Process. It cannot be recreated or reused until it has been removed or until the process using it
has exited.
at System.Diagnostics.SharedPerformanceCounter.FindInstance(Int32 instanceNameHashCode, String instanceName, CategoryEntry* categoryPointer, InstanceEntry** returnInstancePointerReference, Boolean activateUnusedInstances, PerformanceCounterInstanceLifetime
lifetime, Boolean& foundFreeInstance)
at System.Diagnostics.SharedPerformanceCounter.GetCounter(String counterName, String instanceName, Boolean enableReuse, PerformanceCounterInstanceLifetime lifetime)
at System.Diagnostics.SharedPerformanceCounter..ctor(String catName, String counterName, String instanceName, PerformanceCounterInstanceLifetime lifetime)
at System.Diagnostics.PerformanceCounter.InitializeImpl()
at System.Diagnostics.PerformanceCounter.get_RawValue()
at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.get_RawValue()
Last worker process info : System.ArgumentException: Process with an Id of 4776 is not running.
at System.Diagnostics.Process.GetProcessById(Int32 processId)
at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.GetLastWorkerProcessInfo()
Processes running while Performance counter failed to update:
14256 winlogon
15748 powershell
6524 Microsoft.Exchange.UM.CallRouter
5904 w3wp
584 lsass
780 LogonUI
4324 MSExchangeFrontendTransport
6292 Microsoft.Exchange.Store.Worker
2744 WmiPrvSE
576 services
3136 MonitoringHost
12568 svchost
1360 hostcontrollerservice
8648 WmiPrvSE
1752 SMSvcHost
1160 spoolsv
1356 sftracing
9528 TiWorker
10444 explorer
2732 w3wp
14908 WmiPrvSE
3124 Microsoft.Exchange.Store.Worker
4696 Microsoft.Exchange.Store.Service
4892 MSExchangeMailboxAssistants
12208 w3wp
15740 powershell
2128 WMSvc
748 rundll32
8232 w3wp
8400 svchost
3700 MonitoringHost
15716 powershell
5864 MSExchangeThrottling
2908 w3wp
4088 Microsoft.Exchange.EdgeSyncSvc
5660 scanningprocess
2292 wuauclt
5656 umservice
6044 scanningprocess
4076 noderunner
1908 MSExchangeHMHost
2892 Microsoft.Exchange.AntispamUpdateSvc
3876 noderunner
3676 MSExchangeMailboxReplication
15732 powershell
2096 svchost
7096 UMWorkerProcess
516 winlogon
908 svchost
1296 HealthService
1492 svchost
2824 w3wp
12324 dwm
1560 ForefrontActiveDirectoryConnector
304 smss
10820 w3wp
8464 svchost
888 Microsoft.Exchange.ContentFilter.Wrapper
5024 msexchangerepl
488 wininit
8564 taskhostex
5272 Microsoft.Exchange.ServiceHost
3832 noderunner
10088 w3wp
480 csrss
7920 conhost
872 svchost
5992 scanningprocess
4808 msdtc
8352 dllhost
860 TrustedInstaller
4008 rundll32
4400 conhost
656 svchost
9828 w3wp
1832 noderunner
4392 MSExchangeHMWorker
1828 mqsvc
700 svchost
1628 Microsoft.Exchange.Diagnostics.Service
3596 w3wp
2220 Microsoft.Exchange.Directory.TopologyService
1820 MSExchangeDelivery
7532 MSExchangeTransport
13372 svchost
832 svchost
9696 conhost
8316 svchost
1580 dllhost
3980 Microsoft.Exchange.RpcClientAccess.Service
8788 VSSVC
5948 MSExchangeTransportLogSearch
2992 MSExchangeDagMgmt
10632 csrss
1216 fms
3776 rundll32
5356 MSExchangeSubmission
7908 EdgeTransport
11576 w3wp
1600 inetinfo
1008 svchost
416 csrss
808 svchost
7608 w3wp
1588 updateservice
4148 Microsoft.Exchange.Search.Service
640 w3wp
796 dwm
2568 SMSvcHost
1188 svchost
4 System
3484 rdpclip
0 Idle
Performance Counters Layout information: A process is holding onto a transport performance counter. processId : 15716, counter : time in resource per second Value=30 SpinLock=0 Lifetime=Type: 1 ProcessId: 15716 StartupTime: 130608376318179644, currentInstance
: ad-powershell-defaultdomain(95CC324A) RefCount=1 SpinLock=0 Offset=38216, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 15716, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 15716 StartupTime: 130608376318179644, currentInstance : mb-powershell-defaultdomain(CC014C00)
RefCount=1 SpinLock=0 Offset=37888, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 15716, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 15716 StartupTime: 130608376318179644, currentInstance : rpca-powershell-defaultdomain(4598AFAF)
RefCount=1 SpinLock=0 Offset=37560, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3596, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3596 StartupTime: 130608368805385179, currentInstance : rpca-w3wp-msexchangemapimailboxapppool(E28F3117)
RefCount=1 SpinLock=0 Offset=37232, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3596, counter : time in resource per second Value=86 SpinLock=0 Lifetime=Type: 1 ProcessId: 3596 StartupTime: 130608368805385179, currentInstance : mb-w3wp-msexchangemapimailboxapppool(F9439F58)
RefCount=1 SpinLock=0 Offset=36904, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3596, counter : time in resource per second Value=301 SpinLock=0 Lifetime=Type: 1 ProcessId: 3596 StartupTime: 130608368805385179, currentInstance : ad-w3wp-msexchangemapimailboxapppool(35491652)
RefCount=1 SpinLock=0 Offset=36576, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 10088, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10088 StartupTime: 130608368435182301, currentInstance : rpca-w3wp-msexchangemapifrontendapppool(2C7F2005)
RefCount=1 SpinLock=0 Offset=36248, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 10088, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10088 StartupTime: 130608368435182301, currentInstance : mb-w3wp-msexchangemapifrontendapppool(BE5C2DAA)
RefCount=1 SpinLock=0 Offset=35920, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 10088, counter : time in resource per second Value=50 SpinLock=0 Lifetime=Type: 1 ProcessId: 10088 StartupTime: 130608368435182301, currentInstance : ad-w3wp-msexchangemapifrontendapppool(C0FDFAE0)
RefCount=1 SpinLock=0 Offset=35592, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 640, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 640 StartupTime: 130608368405334576, currentInstance : rpca-w3wp-msexchangeowacalendarapppool(8F10D1B5)
RefCount=1 SpinLock=0 Offset=35264, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 640, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 640 StartupTime: 130608368405334576, currentInstance : mb-w3wp-msexchangeowacalendarapppool(2D8C9EBA)
RefCount=1 SpinLock=0 Offset=34936, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 640, counter : time in resource per second Value=75 SpinLock=0 Lifetime=Type: 1 ProcessId: 640 StartupTime: 130608368405334576, currentInstance : ad-w3wp-msexchangeowacalendarapppool(D845E230)
RefCount=1 SpinLock=0 Offset=34608, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 12208, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 12208 StartupTime: 130608368146087354, currentInstance : rpca-w3wp-msexchangeautodiscoverapppool(6DABF262)
RefCount=1 SpinLock=0 Offset=34280, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 12208, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 12208 StartupTime: 130608368146087354, currentInstance : mb-w3wp-msexchangeautodiscoverapppool(D1C6EF4D)
RefCount=1 SpinLock=0 Offset=33952, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 12208, counter : time in resource per second Value=1002 SpinLock=0 Lifetime=Type: 1 ProcessId: 12208 StartupTime: 130608368146087354, currentInstance : ad-w3wp-msexchangeautodiscoverapppool(FD072087)
RefCount=1 SpinLock=0 Offset=33624, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 11576, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 11576 StartupTime: 130608368080143532, currentInstance : rpca-w3wp-msexchangeecpapppool(57806648)
RefCount=1 SpinLock=0 Offset=33296, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 11576, counter : time in resource per second Value=204 SpinLock=0 Lifetime=Type: 1 ProcessId: 11576 StartupTime: 130608368080143532, currentInstance : mb-w3wp-msexchangeecpapppool(E27E6507)
RefCount=1 SpinLock=0 Offset=32968, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 11576, counter : time in resource per second Value=1804 SpinLock=0 Lifetime=Type: 1 ProcessId: 11576 StartupTime: 130608368080143532, currentInstance : ad-w3wp-msexchangeecpapppool(B648688D)
RefCount=1 SpinLock=0 Offset=32640, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 10820, counter : time in resource per second Value=64 SpinLock=0 Lifetime=Type: 1 ProcessId: 10820 StartupTime: 130608368364391554, currentInstance : ad-w3wp-msexchangeoabapppool(CC31A917)
RefCount=1 SpinLock=0 Offset=32312, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 10820, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10820 StartupTime: 130608368364391554, currentInstance : mb-w3wp-msexchangeoabapppool(58D0A79D)
RefCount=1 SpinLock=0 Offset=31984, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 10820, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10820 StartupTime: 130608368364391554, currentInstance : rpca-w3wp-msexchangeoabapppool(8149E8D2)
RefCount=1 SpinLock=0 Offset=31656, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7608, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7608 StartupTime: 130608367931073979, currentInstance : rpca-w3wp-msexchangeowaapppool(4AA799E7)
RefCount=1 SpinLock=0 Offset=31328, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7608, counter : time in resource per second Value=792 SpinLock=0 Lifetime=Type: 1 ProcessId: 7608 StartupTime: 130608367931073979, currentInstance : mb-w3wp-msexchangeowaapppool(C3953468)
RefCount=1 SpinLock=0 Offset=31000, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7608, counter : time in resource per second Value=2537 SpinLock=0 Lifetime=Type: 1 ProcessId: 7608 StartupTime: 130608367931073979, currentInstance : ad-w3wp-msexchangeowaapppool(160BE662)
RefCount=1 SpinLock=0 Offset=30672, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5904, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5904 StartupTime: 130608367955918049, currentInstance : rpca-w3wp-msexchangepowershellapppool(3CF18BF)
RefCount=1 SpinLock=0 Offset=30344, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5904, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5904 StartupTime: 130608367955918049, currentInstance : mb-w3wp-msexchangepowershellapppool(A686C810)
RefCount=1 SpinLock=0 Offset=30016, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5904, counter : time in resource per second Value=2178 SpinLock=0 Lifetime=Type: 1 ProcessId: 5904 StartupTime: 130608367955918049, currentInstance : ad-w3wp-msexchangepowershellapppool(9E48CD5A)
RefCount=1 SpinLock=0 Offset=29688, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3832, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3832 StartupTime: 130608365723574632, currentInstance : rpca-noderunner-contentenginenode1(316BF6E3)
RefCount=1 SpinLock=0 Offset=29360, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3832, counter : time in resource per second Value=1148 SpinLock=0 Lifetime=Type: 1 ProcessId: 3832 StartupTime: 130608365723574632, currentInstance : mb-noderunner-contentenginenode1(2EE8286C)
RefCount=1 SpinLock=0 Offset=29032, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3832, counter : time in resource per second Value=322 SpinLock=0 Lifetime=Type: 1 ProcessId: 3832 StartupTime: 130608365723574632, currentInstance : ad-noderunner-contentenginenode1(61591E6)
RefCount=1 SpinLock=0 Offset=28704, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 8232, counter : time in resource per second Value=73 SpinLock=0 Lifetime=Type: 1 ProcessId: 8232 StartupTime: 130608367954980517, currentInstance : ad-w3wp-msexchangepowershellfrontendapppool(FAEFA1B4)
RefCount=1 SpinLock=0 Offset=28376, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 8232, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 8232 StartupTime: 130608367954980517, currentInstance : mb-w3wp-msexchangepowershellfrontendapppool(34B9187E)
RefCount=1 SpinLock=0 Offset=28048, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 8232, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 8232 StartupTime: 130608367954980517, currentInstance : rpca-w3wp-msexchangepowershellfrontendapppool(E1115251)
RefCount=1 SpinLock=0 Offset=27720, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 9828, counter : time in resource per second Value=909 SpinLock=0 Lifetime=Type: 1 ProcessId: 9828 StartupTime: 130608367291344391, currentInstance : ad-w3wp-msexchangerpcproxyapppool(99BB8ED6)
RefCount=1 SpinLock=0 Offset=27392, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 9828, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 9828 StartupTime: 130608367291344391, currentInstance : mb-w3wp-msexchangerpcproxyapppool(B190F21C)
RefCount=1 SpinLock=0 Offset=27064, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 9828, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 9828 StartupTime: 130608367291344391, currentInstance : rpca-w3wp-msexchangerpcproxyapppool(8B7590B3)
RefCount=1 SpinLock=0 Offset=26736, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7908, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7908 StartupTime: 130608366316230865, currentInstance : rpca-edgetransport-edgetransport.exe(911B6EB3)
RefCount=1 SpinLock=0 Offset=26408, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7908, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7908 StartupTime: 130608366316230865, currentInstance : mb-edgetransport-edgetransport.exe(A5AF4BBC)
RefCount=1 SpinLock=0 Offset=26080, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7908, counter : time in resource per second Value=679 SpinLock=0 Lifetime=Type: 1 ProcessId: 7908 StartupTime: 130608366316230865, currentInstance : ad-edgetransport-edgetransport.exe(E79D4A36)
RefCount=1 SpinLock=0 Offset=25752, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7096, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7096 StartupTime: 130608366107949622, currentInstance : rpca-umworkerprocess-umworkerprocess.exe(970CCE33)
RefCount=1 SpinLock=0 Offset=25424, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7096, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7096 StartupTime: 130608366107949622, currentInstance : mb-umworkerprocess-umworkerprocess.exe(8A7F8A3C)
RefCount=1 SpinLock=0 Offset=25096, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7096, counter : time in resource per second Value=89 SpinLock=0 Lifetime=Type: 1 ProcessId: 7096 StartupTime: 130608366107949622, currentInstance : ad-umworkerprocess-umworkerprocess.exe(95818B6)
RefCount=1 SpinLock=0 Offset=24768, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7532, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7532 StartupTime: 130608366287637157, currentInstance : rpca-msexchangetransport-msexchangetransport.exe(24F56C33)
RefCount=1 SpinLock=0 Offset=24440, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7532, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7532 StartupTime: 130608366287637157, currentInstance : mb-msexchangetransport-msexchangetransport.exe(92FB3D3C)
RefCount=1 SpinLock=0 Offset=24112, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7532, counter : time in resource per second Value=12 SpinLock=0 Lifetime=Type: 1 ProcessId: 7532 StartupTime: 130608366287637157, currentInstance : ad-msexchangetransport-msexchangetransport.exe(2447ECB6)
RefCount=1 SpinLock=0 Offset=23784, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 6292, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6292 StartupTime: 130608366134668487, currentInstance : rpca-microsoft.exchange.store.worker-microsoft.exchange.store.worker.exe(ABB009B3)
RefCount=1 SpinLock=0 Offset=23456, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 6292, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6292 StartupTime: 130608366134668487, currentInstance : mb-microsoft.exchange.store.worker-microsoft.exchange.store.worker.exe(38BA31BC)
RefCount=1 SpinLock=0 Offset=23128, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 6292, counter : time in resource per second Value=704 SpinLock=0 Lifetime=Type: 1 ProcessId: 6292 StartupTime: 130608366134668487, currentInstance : ad-microsoft.exchange.store.worker-microsoft.exchange.store.worker.exe(11106236)
RefCount=1 SpinLock=0 Offset=22800, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 6524, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6524 StartupTime: 130608366054199628, currentInstance : rpca-microsoft.exchange.um.callrouter-microsoft.exchange.um.callrouter.exe(E8475353)
RefCount=1 SpinLock=0 Offset=22472, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 6524, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6524 StartupTime: 130608366054199628, currentInstance : mb-microsoft.exchange.um.callrouter-microsoft.exchange.um.callrouter.exe(8F65881C)
RefCount=1 SpinLock=0 Offset=22144, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 6524, counter : time in resource per second Value=40 SpinLock=0 Lifetime=Type: 1 ProcessId: 6524 StartupTime: 130608366054199628, currentInstance : ad-microsoft.exchange.um.callrouter-microsoft.exchange.um.callrouter.exe(78F52196)
RefCount=1 SpinLock=0 Offset=21816, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5656, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5656 StartupTime: 130608365987637119, currentInstance : rpca-umservice-umservice.exe(E39A1133)
RefCount=1 SpinLock=0 Offset=21488, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5656, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5656 StartupTime: 130608365987637119, currentInstance : mb-umservice-umservice.exe(FFBB273C) RefCount=1
SpinLock=0 Offset=21160, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5656, counter : time in resource per second Value=45 SpinLock=0 Lifetime=Type: 1 ProcessId: 5656 StartupTime: 130608365987637119, currentInstance : ad-umservice-umservice.exe(9A8AC6B6) RefCount=1
SpinLock=0 Offset=20832, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5948, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5948 StartupTime: 130608365970762140, currentInstance : rpca-msexchangetransportlogsearch-msexchangetransportlogsearch.exe(EF66F2D3)
RefCount=1 SpinLock=0 Offset=20504, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5948, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5948 StartupTime: 130608365970762140, currentInstance : mb-msexchangetransportlogsearch-msexchangetransportlogsearch.exe(B020391C)
RefCount=1 SpinLock=0 Offset=20176, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5948, counter : time in resource per second Value=28 SpinLock=0 Lifetime=Type: 1 ProcessId: 5948 StartupTime: 130608365970762140, currentInstance : ad-msexchangetransportlogsearch-msexchangetransportlogsearch.exe(20578116)
RefCount=1 SpinLock=0 Offset=19848, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5864, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5864 StartupTime: 130608365966074661, currentInstance : rpca-msexchangethrottling-msexchangethrottling.exe(8C1DA893)
RefCount=1 SpinLock=0 Offset=19520, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5864, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5864 StartupTime: 130608365966074661, currentInstance : mb-msexchangethrottling-msexchangethrottling.exe(AB2BADDC)
RefCount=1 SpinLock=0 Offset=19192, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5864, counter : time in resource per second Value=8 SpinLock=0 Lifetime=Type: 1 ProcessId: 5864 StartupTime: 130608365966074661, currentInstance : ad-msexchangethrottling-msexchangethrottling.exe(8962F4D6)
RefCount=1 SpinLock=0 Offset=18864, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5356, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5356 StartupTime: 130608365930918390, currentInstance : rpca-msexchangesubmission-msexchangesubmission.exe(60747EB3)
RefCount=1 SpinLock=0 Offset=18536, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5356, counter : time in resource per second Value=400 SpinLock=0 Lifetime=Type: 1 ProcessId: 5356 StartupTime: 130608365930918390, currentInstance : mb-msexchangesubmission-msexchangesubmission.exe(67B4173C)
RefCount=1 SpinLock=0 Offset=18208, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5356, counter : time in resource per second Value=390 SpinLock=0 Lifetime=Type: 1 ProcessId: 5356 StartupTime: 130608365930918390, currentInstance : ad-msexchangesubmission-msexchangesubmission.exe(85200236)
RefCount=1 SpinLock=0 Offset=17880, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3980, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3980 StartupTime: 130608365902793374, currentInstance : rpca-microsoft.exchange.rpcclientaccess.service-microsoft.exchange.rpcclientaccess.service.exe(E4305E13)
RefCount=1 SpinLock=0 Offset=17552, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3980, counter : time in resource per second Value=15105 SpinLock=0 Lifetime=Type: 1 ProcessId: 3980 StartupTime: 130608365902793374, currentInstance : mb-microsoft.exchange.rpcclientaccess.service-microsoft.exchange.rpcclientaccess.service.exe(BBA60BDC)
RefCount=1 SpinLock=0 Offset=17224, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3980, counter : time in resource per second Value=1570 SpinLock=0 Lifetime=Type: 1 ProcessId: 3980 StartupTime: 130608365902793374, currentInstance : ad-microsoft.exchange.rpcclientaccess.service-microsoft.exchange.rpcclientaccess.service.exe(B6581E56)
RefCount=1 SpinLock=0 Offset=16896, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3676, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3676 StartupTime: 130608365883887116, currentInstance : rpca-msexchangemailboxreplication-msexchangemailboxreplication.exe(276F4DB3)
RefCount=1 SpinLock=0 Offset=16568, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3676, counter : time in resource per second Value=55 SpinLock=0 Lifetime=Type: 1 ProcessId: 3676 StartupTime: 130608365883887116, currentInstance : mb-msexchangemailboxreplication-msexchangemailboxreplication.exe(95E41BC)
RefCount=1 SpinLock=0 Offset=16240, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3676, counter : time in resource per second Value=1045 SpinLock=0 Lifetime=Type: 1 ProcessId: 3676 StartupTime: 130608365883887116, currentInstance : ad-msexchangemailboxreplication-msexchangemailboxreplication.exe(394712B6)
RefCount=1 SpinLock=0 Offset=15912, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5272, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5272 StartupTime: 130608365924980876, currentInstance : rpca-microsoft.exchange.servicehost-microsoft.exchange.servicehost.exe(39C8D53)
RefCount=1 SpinLock=0 Offset=15584, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5272, counter : time in resource per second Value=13 SpinLock=0 Lifetime=Type: 1 ProcessId: 5272 StartupTime: 130608365924980876, currentInstance : mb-microsoft.exchange.servicehost-microsoft.exchange.servicehost.exe(E7963A1C)
RefCount=1 SpinLock=0 Offset=15256, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5272, counter : time in resource per second Value=1004 SpinLock=0 Lifetime=Type: 1 ProcessId: 5272 StartupTime: 130608365924980876, currentInstance : ad-microsoft.exchange.servicehost-microsoft.exchange.servicehost.exe(10E8B196)
RefCount=1 SpinLock=0 Offset=14928, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 4892, counter : time in resource per second Value=2260 SpinLock=0 Lifetime=Type: 1 ProcessId: 4892 StartupTime: 130608365821855891, currentInstance : rpca-msexchangemailboxassistants-msexchangemailboxassistants.exe(DEAC0933)
RefCount=1 SpinLock=0 Offset=14600, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 4892, counter : time in resource per second Value=19900 SpinLock=0 Lifetime=Type: 1 ProcessId: 4892 StartupTime: 130608365821855891, currentInstance : mb-msexchangemailboxassistants-msexchangemailboxassistants.exe(A754293C)
RefCount=1 SpinLock=0 Offset=14272, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 4892, counter : time in resource per second Value=3491 SpinLock=0 Lifetime=Type: 1 ProcessId: 4892 StartupTime: 130608365821855891, currentInstance : ad-msexchangemailboxassistants-msexchangemailboxassistants.exe(EE890EB6)
RefCount=1 SpinLock=0 Offset=13944, categoryName...This error is not resolved in CU8.
[PS] C:\>Get-ExchangeServer | fl *version*
AdminDisplayVersion : Version 15.0 (Build 1076.9)
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="MSExchange Common" />
<EventID Qualifiers="49156">106</EventID>
<Level>2</Level>
<Task>1</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2015-04-15T10:14:22.000000000Z" />
<EventRecordID>11366785</EventRecordID>
<Channel>Application</Channel>
<Computer>EX1.domain.com</Computer>
<Security />
</System>
- <EventData>
<Data>2</Data>
<Data>Time in Resource per second</Data>
<Data>MSExchange Activity Context Resources</Data>
<Data>The exception thrown is : System.InvalidOperationException: Instance 'ad-powershell-defaultdomain' already exists with a lifetime of Process. It cannot be recreated or reused until it has been removed or until the process using it has exited. at System.Diagnostics.SharedPerformanceCounter.FindInstance(Int32 instanceNameHashCode, String instanceName, CategoryEntry* categoryPointer, InstanceEntry** returnInstancePointerReference, Boolean activateUnusedInstances, PerformanceCounterInstanceLifetime lifetime, Boolean& foundFreeInstance) at System.Diagnostics.SharedPerformanceCounter.GetCounter(String counterName, String instanceName, Boolean enableReuse, PerformanceCounterInstanceLifetime lifetime) at System.Diagnostics.SharedPerformanceCounter..ctor(String catName, String counterName, String instanceName, PerformanceCounterInstanceLifetime lifetime) at System.Diagnostics.PerformanceCounter.InitializeImpl() at System.Diagnostics.PerformanceCounter.get_RawValue() at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.get_RawValue() Last worker process info : System.ArgumentException: Process with an Id of 884 is not running. at System.Diagnostics.Process.GetProcessById(Int32 processId) at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.GetLastWorkerProcessInfo() Processes running while Performance counter failed to update: 15084 w3wp 16804 powershell 16368 SCNotification 21108 conhost 22744 dllhost 17224 conhost 844 MsMpEng 21100 conhost 5580 taskhostex 1724 Microsoft.Exchange.Diagnostics.Service 3852 MSExchangeDagMgmt 13764 MonitoringHost 1264 fms 832 LogonUI 25828 mmc 1688 inetinfo 7900 Microsoft.Exchange.Store.Worker 3840 rundll32 1252 SMSvcHost 15040 msseces 3916 w3wp 1676 svchost 2968 Microsoft.Exchange.Directory.TopologyService 14600 explorer 5548 MSExchangeMailboxReplication 1236 svchost 5976 scanningprocess 2096 WMSvc 2200 w3wp 13376 WmiPrvSE 19472 powershell 8116 umservice 24492 powershell 24060 conhost 7204 MSExchangeTransportLogSearch 1812 WmiPrvSE 16348 w3wp 10260 svchost 2496 conhost 3784 Microsoft.Exchange.AntispamUpdateSvc 9932 Microsoft.Exchange.ContentFilter.Wrapper 16280 conhost 2056 svchost 1192 spoolsv 2052 noderunner 320 smss 5920 scanningprocess 11152 ParserServer 8068 UMWorkerProcess 3756 conhost 304 svchost 2888 w3wp 732 svchost 1900 winlogon 14948 w3wp 22700 noderunner 2872 updateservice 2000 w3wp 700 svchost 1992 mqsvc 4128 Microsoft.Exchange.EdgeSyncSvc 28636 ParserServer 17912 conhost 20652 ParserServer 1960 svchost 14168 msdtc 11436 ParserServer 19192 ParserServer 4536 Microsoft.Exchange.Imap4Service 16168 WmiPrvSE 10132 w3wp 27800 noderunner 25644 mmc 2452 ParserServer 640 lsass 1932 svchost 632 services 3216 ForefrontActiveDirectoryConnector 17436 svchost 4504 Microsoft.Exchange.Store.Service 4500 ParserServer 2772 WmiPrvSE 28200 dllhost 10528 VSSVC 10520 dllhost 7932 Microsoft.Exchange.Store.Worker 1032 rundll32 1920 sftracing 7492 Microsoft.Exchange.Store.Worker 14384 rdpclip 26016 conhost 24464 powershell 13332 MSExchangeHMHost 1008 svchost 10920 csrss 7040 MSExchangeThrottling 3160 MSExchangeTransport 1004 svchost 572 winlogon 7464 Microsoft.Exchange.Store.Worker 10880 WmiPrvSE 7892 Microsoft.Exchange.Store.Worker 12632 CcmExec 992 svchost 10904 WmiPrvSE 4868 Microsoft.Exchange.Imap4Service 6160 w3wp 14348 conhost 8312 dllhost 14776 w3wp 13480 dwm 5720 Microsoft.Exchange.Pop3 544 wininit 7008 Microsoft.Exchange.UM.CallRouter 4420 Microsoft.Exchange.Imap4 6140 Microsoft.Exchange.Pop3 5764 Microsoft.Exchange.Pop3Service 964 svchost 7428 Microsoft.Exchange.Store.Worker 13580 MonitoringHost 25096 noderunner 5700 scanningprocess 13456 conhost 24656 MSExchangeMailboxAssistants 5260 Microsoft.Exchange.RpcClientAccess.Service 6080 Microsoft.Exchange.Search.Service 11288 powershell 3960 MSExchangeDelivery 4440 MSExchangeFrontendTransport 6112 Microsoft.Exchange.Store.Worker 12712 ParserServer 5248 conhost 1368 HealthService 6536 MSExchangeSubmission 26076 conhost 3084 rundll32 6100 Microsoft.Exchange.Pop3Service 24200 conhost 536 csrss 7812 Microsoft.Exchange.Store.Worker 10396 svchost 10824 conhost 21596 MSExchangeHMWorker 7416 Microsoft.Exchange.Store.Worker 852 dwm 7368 Microsoft.Exchange.Store.Worker 468 csrss 17552 conhost 2260 SMSvcHost 12100 CmRcService 4772 Microsoft.Exchange.Imap4 10372 ParserServer 3044 EdgeTransport 4760 conhost 14672 svchost 15100 hostcontrollerservice 6048 msexchangerepl 5616 Microsoft.Exchange.Store.Worker 436 svchost 4 System 6408 Microsoft.Exchange.ServiceHost 0 Idle Performance Counters Layout information: A process is holding onto a transport performance counter. processId : 23084, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 23084 StartupTime: 130735656036583286, currentInstance : rpca-e14cmdletswrapper-defaultdomain(B61B0DD9) RefCount=0 SpinLock=0 Offset=40184, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 23084, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 23084 StartupTime: 130735656036583286, currentInstance : mb-e14cmdletswrapper-defaultdomain(290EF16) RefCount=0 SpinLock=0 Offset=39856, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 23084, counter : time in resource per second Value=102 SpinLock=0 Lifetime=Type: 1 ProcessId: 23084 StartupTime: 130735656036583286, currentInstance : ad-e14cmdletswrapper-defaultdomain(2CDA669C) RefCount=0 SpinLock=0 Offset=39528, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 11288, counter : time in resource per second Value=81 SpinLock=0 Lifetime=Type: 1 ProcessId: 11288 StartupTime: 130735664378248405, currentInstance : ad-powershell-defaultdomain(95CC324A) RefCount=1 SpinLock=0 Offset=39200, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 11288, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 11288 StartupTime: 130735664378248405, currentInstance : mb-powershell-defaultdomain(CC014C00) RefCount=1 SpinLock=0 Offset=38872, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 11288, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 11288 StartupTime: 130735664378248405, currentInstance : rpca-powershell-defaultdomain(4598AFAF) RefCount=1 SpinLock=0 Offset=38544, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 3044, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3044 StartupTime: 130732607834359955, currentInstance : rpca-edgetransport-edgetransport.exe(911B6EB3) RefCount=1 SpinLock=0 Offset=38216, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 3044, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3044 StartupTime: 130732607834359955, currentInstance : mb-edgetransport-edgetransport.exe(A5AF4BBC) RefCount=1 SpinLock=0 Offset=37888, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 3044, counter : time in resource per second Value=400734 SpinLock=0 Lifetime=Type: 1 ProcessId: 3044 StartupTime: 130732607834359955, currentInstance : ad-edgetransport-edgetransport.exe(E79D4A36) RefCount=1 SpinLock=0 Offset=37560, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 2200, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 2200 StartupTime: 130730082646643505, currentInstance : rpca-w3wp-msexchangeowaapppool(4AA799E7) RefCount=0 SpinLock=0 Offset=37232, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 2200, counter : time in resource per second Value=280053 SpinLock=0 Lifetime=Type: 1 ProcessId: 2200 StartupTime: 130730082646643505, currentInstance : mb-w3wp-msexchangeowaapppool(C3953468) RefCount=0 SpinLock=0 Offset=36904, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 2200, counter : time in resource per second Value=142126 SpinLock=0 Lifetime=Type: 1 ProcessId: 2200 StartupTime: 130730082646643505, currentInstance : ad-w3wp-msexchangeowaapppool(160BE662) RefCount=0 SpinLock=0 Offset=36576, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 14776, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 14776 StartupTime: 130730081973252112, currentInstance : rpca-w3wp-msexchangepowershellapppool(3CF18BF) RefCount=0 SpinLock=0 Offset=36248, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 14776, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 14776 StartupTime: 130730081973252112, currentInstance : mb-w3wp-msexchangepowershellapppool(A686C810) RefCount=0 SpinLock=0 Offset=35920, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 14776, counter : time in resource per second Value=2068875 SpinLock=0 Lifetime=Type: 1 ProcessId: 14776 StartupTime: 130730081973252112, currentInstance : ad-w3wp-msexchangepowershellapppool(9E48CD5A) RefCount=0 SpinLock=0 Offset=35592, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 15084, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 15084 StartupTime: 130730081886009912, currentInstance : rpca-w3wp-msexchangeoabapppool(8149E8D2) RefCount=0 SpinLock=0 Offset=35264, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 15084, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 15084 StartupTime: 130730081886009912, currentInstance : mb-w3wp-msexchangeoabapppool(58D0A79D) RefCount=0 SpinLock=0 Offset=34936, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 15084, counter : time in resource per second Value=55883 SpinLock=0 Lifetime=Type: 1 ProcessId: 15084 StartupTime: 130730081886009912, currentInstance : ad-w3wp-msexchangeoabapppool(CC31A917) RefCount=0 SpinLock=0 Offset=34608, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 14948, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 14948 StartupTime: 130730081557522734, currentInstance : rpca-w3wp-msexchangepowershellfrontendapppool(E1115251) RefCount=0 SpinLock=0 Offset=34280, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 14948, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 14948 StartupTime: 130730081557522734, currentInstance : mb-w3wp-msexchangepowershellfrontendapppool(34B9187E) RefCount=0 SpinLock=0 Offset=33952, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 14948, counter : time in resource per second Value=1576 SpinLock=0 Lifetime=Type: 1 ProcessId: 14948 StartupTime: 130730081557522734, currentInstance : ad-w3wp-msexchangepowershellfrontendapppool(FAEFA1B4) RefCount=0 SpinLock=0 Offset=33624, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 13332, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 13332 StartupTime: 130730081246077528, currentInstance : rpca-msexchangehmhost-msexchangehmhost.exe(87A5B053) RefCount=0 SpinLock=0 Offset=33296, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 13332, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 13332 StartupTime: 130730081246077528, currentInstance : mb-msexchangehmhost-msexchangehmhost.exe(FB9D599C) RefCount=0 SpinLock=0 Offset=32968, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 13332, counter : time in resource per second Value=20422 SpinLock=0 Lifetime=Type: 1 ProcessId: 13332 StartupTime: 130730081246077528, currentInstance : ad-msexchangehmhost-msexchangehmhost.exe(4E220B96) RefCount=0 SpinLock=0 Offset=32640, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 27800, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 27800 StartupTime: 130732559851229547, currentInstance : rpca-noderunner-contentenginenode1(316BF6E3) RefCount=1 SpinLock=0 Offset=32312, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 27800, counter : time in resource per second Value=250572035 SpinLock=0 Lifetime=Type: 1 ProcessId: 27800 StartupTime: 130732559851229547, currentInstance : mb-noderunner-contentenginenode1(2EE8286C) RefCount=1 SpinLock=0 Offset=31984, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 27800, counter : time in resource per second Value=309575 SpinLock=0 Lifetime=Type: 1 ProcessId: 27800 StartupTime: 130732559851229547, currentInstance : ad-noderunner-contentenginenode1(61591E6) RefCount=1 SpinLock=0 Offset=31656, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 21596, counter : time in resource per second Value=276568 SpinLock=0 Lifetime=Type: 1 ProcessId: 21596 StartupTime: 130732616321024370, currentInstance : ad-msexchangehmworker-msexchangehmworker.exe(712B0516) RefCount=1 SpinLock=0 Offset=31328, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 21596, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 21596 StartupTime: 130732616321024370, currentInstance : mb-msexchangehmworker-msexchangehmworker.exe(6177C09C) RefCount=1 SpinLock=0 Offset=31000, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 21596, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 21596 StartupTime: 130732616321024370, currentInstance : rpca-msexchangehmworker-msexchangehmworker.exe(39325ED3) RefCount=1 SpinLock=0 Offset=30672, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 8068, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 8068 StartupTime: 130730079342620471, currentInstance : rpca-umworkerprocess-umworkerprocess.exe(970CCE33) RefCount=0 SpinLock=0 Offset=30344, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 8068, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 8068 StartupTime: 130730079342620471, currentInstance : mb-umworkerprocess-umworkerprocess.exe(8A7F8A3C) RefCount=0 SpinLock=0 Offset=30016, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 8068, counter : time in resource per second Value=489 SpinLock=0 Lifetime=Type: 1 ProcessId: 8068 StartupTime: 130730079342620471, currentInstance : ad-umworkerprocess-umworkerprocess.exe(95818B6) RefCount=0 SpinLock=0 Offset=29688, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 16348, counter : time in resource per second Value=393256 SpinLock=0 Lifetime=Type: 1 ProcessId: 16348 StartupTime: 130730082964967615, currentInstance : ad-w3wp-msexchangeecpapppool(B648688D) RefCount=0 SpinLock=0 Offset=29360, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 16348, counter : time in resource per second Value=4885 SpinLock=0 Lifetime=Type: 1 ProcessId: 16348 StartupTime: 130730082964967615, currentInstance : mb-w3wp-msexchangeecpapppool(E27E6507) RefCount=0 SpinLock=0 Offset=29032, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 16348, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 16348 StartupTime: 130730082964967615, currentInstance : rpca-w3wp-msexchangeecpapppool(57806648) RefCount=0 SpinLock=0 Offset=28704, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 3160, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3160 StartupTime: 130732607510143268, currentInstance : rpca-msexchangetransport-msexchangetransport.exe(24F56C33) RefCount=1 SpinLock=0 Offset=28376, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 3160, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3160 StartupTime: 130732607510143268, currentInstance : mb-msexchangetransport-msexchangetransport.exe(92FB3D3C) RefCount=1 SpinLock=0 Offset=28048, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 3160, counter : time in resource per second Value=42 SpinLock=0 Lifetime=Type: 1 ProcessId: 3160 StartupTime: 130732607510143268, currentInstance : ad-msexchangetransport-msexchangetransport.exe(2447ECB6) RefCount=1 SpinLock=0 Offset=27720, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7008, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7008 StartupTime: 130730079088089233, currentInstance : rpca-microsoft.exchange.um.callrouter-microsoft.exchange.um.callrouter.exe(E8475353) RefCount=0 SpinLock=0 Offset=27392, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7008, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7008 StartupTime: 130730079088089233, currentInstance : mb-microsoft.exchange.um.callrouter-microsoft.exchange.um.callrouter.exe(8F65881C) RefCount=0 SpinLock=0 Offset=27064, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7008, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7008 StartupTime: 130730079088089233, currentInstance : ad-microsoft.exchange.um.callrouter-microsoft.exchange.um.callrouter.exe(78F52196) RefCount=0 SpinLock=0 Offset=26736, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 8116, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 8116 StartupTime: 130730078965276725, currentInstance : rpca-umservice-umservice.exe(E39A1133) RefCount=0 SpinLock=0 Offset=26408, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 8116, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 8116 StartupTime: 130730078965276725, currentInstance : mb-umservice-umservice.exe(FFBB273C) RefCount=0 SpinLock=0 Offset=26080, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 8116, counter : time in resource per second Value=555 SpinLock=0 Lifetime=Type: 1 ProcessId: 8116 StartupTime: 130730078965276725, currentInstance : ad-umservice-umservice.exe(9A8AC6B6) RefCount=0 SpinLock=0 Offset=25752, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7900, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7900 StartupTime: 130730078996839212, currentInstance : rpca-microsoft.exchange.store.worker-microsoft.exchange.store.worker.exe(ABB009B3) RefCount=0 SpinLock=0 Offset=25424, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7900, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7900 StartupTime: 130730078996839212, currentInstance : mb-microsoft.exchange.store.worker-microsoft.exchange.store.worker.exe(38BA31BC) RefCount=0 SpinLock=0 Offset=25096, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7900, counter : time in resource per second Value=218529 SpinLock=0 Lifetime=Type: 1 ProcessId: 7900 StartupTime: 130730078996839212, currentInstance : ad-microsoft.exchange.store.worker-microsoft.exchange.store.worker.exe(11106236) RefCount=0 SpinLock=0 Offset=24768, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7204, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7204 StartupTime: 130730078901370474, currentInstance : rpca-msexchangetransportlogsearch-msexchangetransportlogsearch.exe(EF66F2D3) RefCount=0 SpinLock=0 Offset=24440, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7204, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7204 StartupTime: 130730078901370474, currentInstance : mb-msexchangetransportlogsearch-msexchangetransportlogsearch.exe(B020391C) RefCount=0 SpinLock=0 Offset=24112, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7204, counter : time in resource per second Value=611 SpinLock=0 Lifetime=Type: 1 ProcessId: 7204 StartupTime: 130730078901370474, currentInstance : ad-msexchangetransportlogsearch-msexchangetransportlogsearch.exe(20578116) RefCount=0 SpinLock=0 Offset=23784, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 4868, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4868 StartupTime: 130730078594026714, currentInstance : rpca-microsoft.exchange.imap4service-microsoft.exchange.imap4service.exe(128A1B3) RefCount=0 SpinLock=0 Offset=23456, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 4868, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4868 StartupTime: 130730078594026714, currentInstance : mb-microsoft.exchange.imap4service-microsoft.exchange.imap4service.exe(B4CBDCBC) RefCount=0 SpinLock=0 Offset=23128, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 4868, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4868 StartupTime: 130730078594026714, currentInstance : ad-microsoft.exchange.imap4service-microsoft.exchange.imap4service.exe(F0E98836) RefCount=0 SpinLock=0 Offset=22800, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 5764, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5764 StartupTime: 130730078701682966, currentInstance : rpca-microsoft.exchange.pop3service-microsoft.exchange.pop3service.exe(8961F613) RefCount=0 SpinLock=0 Offset=22472, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 5764, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5764 StartupTime: 130730078701682966, currentInstance : mb-microsoft.exchange.pop3service-microsoft.exchange.pop3service.exe(3C128D5C) RefCount=0 SpinLock=0 Offset=22144, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 5764, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5764 StartupTime: 130730078701682966, currentInstance : ad-microsoft.exchange.pop3service-microsoft.exchange.pop3service.exe(96BB056) RefCount=0 SpinLock=0 Offset=21816, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7040, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7040 StartupTime: 130730078816526722, currentInstance : rpca-msexchangethrottling-msexchangethrottling.exe(8C1DA893) RefCount=0 SpinLock=0 Offset=21488, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7040, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7040 StartupTime: 130730078816526722, currentInstance : mb-msexchangethrottling-msexchangethrottling.exe(AB2BADDC) RefCount=0 SpinLock=0 Offset=21160, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7040, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7040 StartupTime: 130730078816526722, currentInstance : ad-msexchangethrottling-msexchangethrottling.exe(8962F4D6) RefCount=0 SpinLock=0 Offset=20832, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6536, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6536 StartupTime: 130730078769807986, currentInstance : rpca-msexchangesubmission-msexchangesubmission.exe(60747EB3) RefCount=0 SpinLock=0 Offset=20504, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6536, counter : time in resource per second Value=159000 SpinLock=0 Lifetime=Type: 1 ProcessId: 6536 StartupTime: 130730078769807986, currentInstance : mb-msexchangesubmission-msexchangesubmission.exe(67B4173C) RefCount=0 SpinLock=0 Offset=20176, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6536, counter : time in resource per second Value=273020 SpinLock=0 Lifetime=Type: 1 ProcessId: 6536 StartupTime: 130730078769807986, currentInstance : ad-msexchangesubmission-msexchangesubmission.exe(85200236) RefCount=0 SpinLock=0 Offset=19848, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 4420, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4420 StartupTime: 130730078654651715, currentInstance : rpca-microsoft.exchange.imap4-microsoft.exchange.imap4.exe(EAAB5DD3) RefCount=0 SpinLock=0 Offset=19520, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 4420, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4420 StartupTime: 130730078654651715, currentInstance : mb-microsoft.exchange.imap4-microsoft.exchange.imap4.exe(1FC2541C) RefCount=0 SpinLock=0 Offset=19192, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 4420, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4420 StartupTime: 130730078654651715, currentInstance : ad-microsoft.exchange.imap4-microsoft.exchange.imap4.exe(17E0EA16) RefCount=0 SpinLock=0 Offset=18864, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6160, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6160 StartupTime: 130730078749026715, currentInstance : rpca-w3wp-msexchangeservicesapppool(E8BBF810) RefCount=0 SpinLock=0 Offset=18536, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6160, counter : time in resource per second Value=1867617 SpinLock=0 Lifetime=Type: 1 ProcessId: 6160 StartupTime: 130730078749026715, currentInstance : mb-w3wp-msexchangeservicesapppool(10FE94BF) RefCount=0 SpinLock=0 Offset=18208, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6160, counter : time in resource per second Value=3331874 SpinLock=0 Lifetime=Type: 1 ProcessId: 6160 StartupTime: 130730078749026715, currentInstance : ad-w3wp-msexchangeservicesapppool(E0DE475) RefCount=0 SpinLock=0 Offset=17880, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 10132, counter : time in resource per second Value=84124 SpinLock=0 Lifetime=Type: 1 ProcessId: 10132 StartupTime: 130730079880745472, currentInstance : ad-w3wp-msexchangerpcproxyapppool(99BB8ED6) RefCount=0 SpinLock=0 Offset=17552, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 10132, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10132 StartupTime: 130730079880745472, currentInstance : mb-w3wp-msexchangerpcproxyapppool(B190F21C) RefCount=0 SpinLock=0 Offset=17224, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 10132, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10132 StartupTime: 130730079880745472, currentInstance : rpca-w3wp-msexchangerpcproxyapppool(8B7590B3) RefCount=0 SpinLock=0 Offset=16896, cate...</Data>
</EventData>
</Event>
https://support.microsoft.com/en-us/kb/2870416/
I used method
1, but it did not help
me.
Method 2:
[PS] C:\Windows\system32>Add-Pssnapin Microsoft.Exchange.Management.PowerShell.Setup
[PS] C:\Windows\system32>New-PerfCounters -definitionfilename "C:\Program Files\Microsoft\Exchange Server\V15\Setup\Perf
\GlsPerformanceCounters.xml"
New-PerfCounters : The performance counter definition file C:\Program Files\Microsoft\Exchange Server\V15\Setup\Perf\GlsPerformanceCounters.xml could not be found.
Any idea ?
Если Вам помог чей-либо ответ, пожалуйста, не забывайте жать на кнопку "Предложить как ответ" или "Проголосовать за полезное сообщение" -
Exchange 2013, multiple IIS OWA sites with different authentication
Hi
I have an exchange 2013 server with Client Access and Mailbox server installed. The server has an second ip address which I have bound an additional IIS site to. The additional IIS site is named ExchangeExternalFBA.
The default web site is configured for basic and windows authentication with:
Set-EcpVirtualDirectory -identity "ecp (default web site)" -FormsAuthentication:$false
Set-owavirtualdirectory -identity "owa (Default Web Site)" -FormsAuthentication:$false -WindowsAuthentication:$true -BasicAuthentication:$true
Then a new ECP and OWA are configured with:
New-ecpVirtualDirectory -WebSiteName "ExchangeExternalFBA"
New-OwaVirtualDirectory -WebSiteName "ExchangeExternalFBA"
Set-owavirtualdirectory -identity "owa (ExchangeExternalFBA)" -LogonFormat FullDomain -FormsAuthentication:$true -WindowsAuthentication:$false -BasicAuthentication:$true
Set-EcpVirtualDirectory -identity "ecp (ExchangeExternalFBA)" -FormsAuthentication:$true
Then I perform an iisreset.
My problem is that then when I try to access the ECP or OWA on the default website, it loads forms authentication! The ECP or OWA on the ExchangeExternalFBA web site works correctly and also loads forms authentication.
If I run...
get-owavirtualdirectory "owa (ExchangeExternalFBA)"
then it returns:
InternalAuthenticationMethods : {Basic, Ntlm,
WindowsIntegrated}
BasicAuthentication : True
WindowsAuthentication : True
DigestAuthentication : False
FormsAuthentication : False
LiveIdAuthentication : False
AdfsAuthentication : False
OAuthAuthentication : False
If I then run
Set-EcpVirtualDirectory -identity "ecp (default web site)" -FormsAuthentication:$false
Set-owavirtualdirectory -identity "owa (Default Web Site)" -FormsAuthentication:$false -WindowsAuthentication:$true -BasicAuthentication:$true
and perform another iisreset then when I try to access the ECP or OWA on the default website it loads correctly. But then the forms based authentication on the ExchangeExternalFBA website can no longer log in, it does not accept the user name and password.
If I then disable and enable FBA on the ExchangeExternalFBA website then it works but forms based authentication takes over the default web site again!
Whether I perform the above from the gui or from powershell it does not make a difference, the same behaviour is observed. Changing the logontype on the FBA does not make a difference.
This has been tested on exchange 2013 cu1 and cu2.
Similar(if not identical until they get sidetracked) issue reported in http://social.technet.microsoft.com/Forums/exchange/en-US/9fcd360f-6658-4940-add7-2f13265cf86b/multiple-owa-sites-on-a-single-server-2012-with-exchange-2013-mailbox-cas.
This worked fine in outlook 2007 and 2010, why now do my virtual directories break each other?
I can reproduce the issue on a test exchange 2013 I built in dev.
Is this a bug or are you no longer meant to host different forms of authentication on a single cas?
I'm mostly interested to see if this works for other people and why it no longer seems to work in 2013, so please no questions; 'why do you want 2 different forms of authentication'.
Much appreciated, Thanks!Based off of your feedback I have run the following:
Remove-OwaVirtualDirectory "owa (ExchangeExternalFBA)"
Remove-EcpVirtualDirectory "ecp (ExchangeExternalFBA)"
iisreset
Set-EcpVirtualDirectory -identity "ecp (default web site)" -FormsAuthentication:$false
Set-owavirtualdirectory -identity "owa (Default Web Site)" -FormsAuthentication:$false -WindowsAuthentication:$true -BasicAuthentication:$true
New-ecpVirtualDirectory -WebSiteName "ExchangeExternalFBA" -Role ClientAccess
New-OwaVirtualDirectory -WebSiteName "ExchangeExternalFBA" -Role ClientAccess
Set-owavirtualdirectory -identity "owa (ExchangeExternalFBA)" -LogonFormat FullDomain -FormsAuthentication:$true -WindowsAuthentication:$false -BasicAuthentication:$true
Set-EcpVirtualDirectory -identity "ecp (ExchangeExternalFBA)" -FormsAuthentication:$true
iisreset
After this there has been no change in behaviour. After the iisreset, forms have again hijacked the default web site and re-setting the authentication on the default web site removes the forms but breaks the ability to sign in to the forms based page on the
ExchangeExternalFBA web site again.
Note. '-Role Frontend' did not work. It showed the error:
Cannot process argument transformation on parameter 'Role'. Cannot convertvalue "frontend" to type
"Microsoft.Exchange.Management.SystemConfigurationTasks.VirtualDirectoryRole".
Error: "Unable to match the identifier name frontend to a valid enumerator name. Specify one of the following enumerator names and try again:
ClientAccess, Mailbox"
+ CategoryInfo : InvalidData: (:) [New-OwaVirtualDirectory], ParameterBindin...mationException
+ FullyQualifiedErrorId : ParameterArgumentTransformationError,New-OwaVirtualDirectory
Running get-help New-OwaVirtualDirectory -detailed shows the correct usage would be '-Role ClientAccess'?
-Role <ClientAccess | Mailbox>
The Role parameter specifies the configuration that should be used
when the virtual directory is created. The following are the values
that can be used with this parameter:
* FrontEnd Configures the virtual directory for use on a Client Access
server.
* BackEnd Configures the virtual directory for use on a Mailbox server. -
Exchange 2013 MBX in DAG along with Hyper-V and Failover Cluster
Hi Guys! I've tried to find out an answer of my question or some kind of solution, but with no luck that's why I am writing here. The case is as follows. I have two powerful server boxes and iSCSI storage and I have to design high availability
solution, which includes SCOM 2012, SC DPM 2012 and exchange 2013 (two CAS+HUB servers and two MBX servers).
Let me tell you how I plan to do that and you will correct me if proposed solution is wrong.
1. On both hosts - add Hyper-V role.
2. On both hosts - add failover clustering role.
3. Create 2 VMs through failover cluster manager, VMs will be stored on a iSCSI LUN, the first one VM for SCOM 2012 and the second one for SCDPM 2012. Both VMs will be added as failover resource.
4. Create 4 VMs - 2 for CAS+HUB role and 2 for MBX role, VMs will be stored on a iSCSI LUN as well.
5. Create a DAG within the two MBX servers.
In general, that's all. What I wonder is whether I can use failover clustering to acheive High Availability for 2 VMs and at the same time to create DAG between MBX-servers and NLB between CAS-servers?
Excuse me for this question, but I am not proficient in this matter.Hi,
As far as I know, it’s supported to create DAG for mailbox server installed in hyper-v server.
And since load balance has been changed for CAS 2013, it is more worth with DNS round robin instead of NLB. However, you can use NLB in Exchange 2013.
For more information, you can refer to the following article:
http://technet.microsoft.com/en-us/library/jj898588(v=exchg.150).aspx
If you have any question, please feel free to let me know.
Thanks,
Angela Shi
TechNet Community Support -
In Exchange 2013 i cannot open mails with attachments greater than 19.6 MB in EWS or OWA
Hello,
i have in Exchange 2013 CU3 on Windows 2012 the following problem :
When backup mails using EWS i get the message " EWS Error Code : ErrorMessageSizeExceeded." in mails with attachments greater than 20.137 KB ( 19.6 MB).
Then I checked all the settings of the EWS , but the defaults are already significantly higher than these 19.6 MB (Base64 approximately 26.5 MB)
web.config ( maxAllowedContentLength = " 85000000 ").
Settings of the MaxSendSize and ReceiveSize are 300MB .
All requestfiltering settings in IIS are set to 85MB.
When i access via EMS or OWA , file attachments over 19.6 MB can not be opened .
However, the preview shows in OWA the correct mail including attachment and it can be saved from the preview up to the set maximum size.
By double clicking on an email in OWA bigger than 19.6 MB i get the following error message:
"Error : Your request can not be completed right now Please try again later . . "
Send and receive mail can also be up to maxsize .
When accessing via Outlook , this problem does not occur.
i hope anyone here can help me
Thanks in advanceHi,
To change the maximum message size for Outlook Web App clients, you need to change the value of
maxAllowedContentLength, maxRequestLength and both instances of
maxReceivedMessageSize by editing %ExchangeInstallPath%ClientAccess\Owa\web.config in notepad.
To change the maximum message size for Exchange Web Services clients, you need to change the value of
maxAllowedContentLength and all instances of maxReceivedMessageSize="67108864" in %ExchangeInstallPath%ClientAccess\exchweb\ews\web.config.
When you are finished, save and close the Web.config file. Also need to restart IIS by running the following command:
IISReset /noforce
For more information about Configure Client-Specific Message Size Limits on Client Access Servers, please refer to:
http://technet.microsoft.com/en-us/library/hh529949(v=exchg.150).aspx
Thanks,
Winnie Liang
TechNet Community Support -
Exchange 2013 : OWA failing after login with error "HTTPS 400"
Greetings,
I am in phase of Upgrading my existing Exchange 2007 Infra to Exchange 2013.
The environment is as mentioned below:
4 Mailbox Server (DAG)
4 CAS Servers (NLB)
Everything has been configured and working properly, except Only one CAS server is able to pass the login request
https://servername/owa
Rest of all the CAS servers are failing with error "HTTPS 400" while accessing OWA
https://localhost/owa
Its happening only while accessing OWA, ECP works fine.
Please let me know the fix to counter this strange issue.
Thanks in advance.
RegardsHi,
Please check if IIS log is enabled on the CAS server, if not, please enable it.
Then check the detailed error code from IIS logs (Path: inetpub\logs\Logfiles\W3SVC1 ) , some code like 400.1, 400.2 ect.
Refer to this KB for more details
http://support.microsoft.com/kb/943891
After that, please post the OWA related login entry with error code shows 400.
Thanks for your time and patience.
Meanwhile, please check the OWA authentication method by command
Get-OWAVirtualDirectory –Server “Ex2013 CAS server” | fl *authentication*
We should set the authentication as the below:
Get-OWAvirtualdirectory -Server “Ex2013_CAS_server” | set-OWAvirtualdirectory -windowsAuthentication $False -BasicAuthentication $True -FormsAuthentication $True
Then perform iisreset and try to access OWA again.
Best Regards. -
Exchange 2013 EAC will not run with Exchange 2010 CAS\HT servers shut down.
Hi Folks,
A little background - We have just migrated all our user mailboxes and public folders to Office 365 using a hybrid configuration. Now that the migration is essentially finished, I'd like to decommission our on-prem Exchange infrastructure and remove the
hybrid config. We are using dirsync with password sync to replicate our AD to the cloud.
I've read that even if you remove your hybrid configuration, it's a good idea to keep one on-prem Exchange server around so you can edit Exchange attribs (such as email addresses) in a supported manner, rather than using ASDI edit, etc.
To this end, I installed a single Exchange 2013 CA\MBX server. After installation, the EAC worked fine, and I was able to view our on-prem users, groups, etc. Last week, I shut down our two Exchange 2010 CAS\HT servers as a test to see if anything broke
prior to decommissioning them (these were the hybrid servers as well). After doing so, the Exchange 2013 EAC no longer works for some reason, and behaves in a very bizarre fashion. About once every 20 times or so, it will actually start and run. The other
times, it just has you enter your creds, then generates an HTTP 500 internal server error after entering them. It seems to make no difference if you attempt to access it by the fqdn, hostname, or localhost right on the box itself. Same behavior on Chrome or
IE.
Today as a test, I started up one of the 2010 CAS servers and lo and behold, the 2013 EAC ran without difficulty again. Any idea why this might be so? Thanks for any help,
IanHi,
From your description, I recommend you use the following URL to check if you can access EAC. I see it works for several people about this issue.
https://<Exchange 2013 CAS FQDN>/ecp?ExchClientVer=15
Hope it helps.
Best regards,
Amy Wang
TechNet Community Support -
Exchange 2013, Outlook 2007 clients Problems with Outlook Anywhere connection
Hi everyone,
I have a mail system Exchange 2013 SP1, on Windows Server 2012 R2.
I have only one mail server with the Client Access and Mailbox roles Server.
I have a Wildcard certificate type *. Mydomain.com.
All connections to the Outlook Anywhere Outlook 2010, Outook 2013 work correctly.
The ActiveSync connections are working properly, too.
But Outlook 2007 clients connecting with Outlook Anywhere asking for credentials continuously fail continuously.
How can I solve this?
thank you very much
Microsoft Certified IT Professional Server AdministratorHi,
Based on my experience, we need to set Outlook provider with the domain name if it's wildcard certificate:
Set-OutlookProvider -Identity EXPR -CertPrincipalName msstd:*.domain.com
http://technet.microsoft.com/en-us/library/cc535023(EXCHG.80).aspx
Thus, I recommend you try the above configuration and test the Outlook connection again.
Thanks,
Angela Shi
TechNet Community Support -
Event Structure with Event source: This VI and Event: Mouse Up
I downloaded an old example from 2008 on this forum and would like to duplicate it. It uses an event structure with an event case of just Mouse Up. Under Event Specifiers: the Event Source is <This VI> and Event: Mouse Up. This works like I want in LV 2009.
In LV 2009 if I choose for Event Source <This VI> under Events Mouse Up is not an option! I tried Event Source: Pane, and then Event Mouse Up is an option, but this does not trigger the event if you drag the mouse off the pane before you lift the mouse button.
I can copy the Event Structure over to my VI and rewire every case but that does not seem to be a good solution cuz I want this in several VIs.
I have attached the original VI with the Event Specifier I want. How do I get this Event Specifier in LV 2009?
Attachments:
Slider event control.vi 19 KBphillman wrote:
I downloaded an old example from 2008 on this forum and would like to duplicate it. It uses an event structure with an event case of just Mouse Up. Under Event Specifiers: the Event Source is <This VI> and Event: Mouse Up. This works like I want in LV 2009.
In LV 2009 if I choose for Event Source <This VI> under Events Mouse Up is not an option! I tried Event Source: Pane, and then Event Mouse Up is an option, but this does not trigger the event if you drag the mouse off the pane before you lift the mouse button.
So what you can do is monitor the 'Mouse Leave' event for th pane, and then start polling the mouse state.
Technically it is correct that there is no Mouse Up event detected since the Mouse Up is not happening on th epane.
Ton
Free Code Capture Tool! Version 2.1.3 with comments, web-upload, back-save and snippets!
Nederlandse LabVIEW user groep www.lvug.nl
My LabVIEW Ideas
LabVIEW, programming like it should be! -
Exchange 2013 -DiscoveryMaxMailboxes Search Fails
I have set up a throttling policy using the following command Set-ThrottlingPolicy –Name Discovery -DiscoveryMaxConcurrency 2 -DiscoveryMaxMailboxes 25000 , I have applied the policy to a
user who has search permissions in Exchange. I have confirmed its been applied. I have confirmed that DiscoveryMaxMailboxes is 25000. I run the search, and it fails complaining about searching less than 5000 mailboxes.
Exchange 2013 SP1 CU5
Robert Watt
Hold
None
Search
Status:
Run by:
Run on:
Size: 0 B
Items: 0
Errors:
An unknown error occurred on the search server. Please contact your administrator for assistance. The message from the search server
is 'The search exceeded the maximum number of mailboxes that can be searched at a time. Please try searching less than 5000 mailboxes.'.
Statistics:Hi,
I'm afraid that you can't specify the value of DiscoveryMaxMailboxes parameter is more than 5000, there is a limitation to the number of mailboxes that can be searched and it is 5,000*. Any number beyond this and the specified query will return
the following error: An unknown error occurred on the search server. Please contact your administrator for assistance. The message from the search server is 'The search exceeded the maximum number of mailboxes that can be searched at a time. Please try searching
less than 5000 mailboxes.'.
More details refer to the following article:
http://blogs.technet.com/b/johnbai/archive/2014/02/11/exchange-2013-ediscovery-changes.aspx
Best regards!
Niko
Niko Cheng
TechNet Community Support -
Exchange 2013 CAS functionality in coexistence with Exchange 2010 CAS
Hi,
I am planning to migrate Exchange 2010 to Exchange 2013 for 15000 users. We have a pool of 6 CAS 2010 servers added in a single CAS array. So my question is if we introduce a new CAS 2013 server in same site then will it affect CAS traffic anyway ? If we
point our HLB to all CAS servers including CAS 2010 and CAS 2013 so will the CAS 2010 servers wil take traffic or is it only CAS 2013 servers who will take traffic. We will be putting same URLs in CAS 2013 same as CAS 2010. I have read lot of MS articles and
all say that CAS 2013 should be enabled for CAS traffic and it will proxy request to CAS 2010. But I am not sure if we will face any CAS traffic issue whenever we will introduce CAS 2013 servers in same site and traffic will be pointed to CAS 2010 and CAS
2013 both. Is it possible to add CAS 2013 in Exchange 2010 CAS array ? Please guide. Thanks in advance.For mailbox that exist on Exchange 2010, EXCH2013 CAS will proxy the request to an Exchange 2010 Client Access servers that exists within the mailbox’s local site.
For mailboxes that exist on Exchange 2013, EXCH2013 CAS will proxy the request to the Exchange 2013 Mailbox server that is hosting the active copy of the user’s mailbox which will generate the Autodiscover response.
-->Is it possible to add CAS 2013 in Exchange 2010 CAS array ?
No. CAS Array is no longer exits in Exchange 2013. But concept of a single namespace for Outlook connectivity remains. Please check this and this. In
your case you dont need to worry as you have a HLB in place it will do the job
When a new exchange2013 is deployed Outlook Anywhere has been enabled on all Client Access servers within the infrastructure and the mail.contoso.com and autodiscover.contoso.com namespaces have been moved to resolve to Exchange 2013 Client Access server
infrastructure. In your case it is pointed to both as you have a load balancer in place but the same URL should be configured in exch2013
Make sure you have exchange2010-SP3 minimum as it is the prerequisite requirement for upgarding EXCh2010 to 2013.
Please check the exchange server deployment assistant
tool for moving mailboxes
After moving a mailbox check the URLs. Configure autodiscover,EWS,OAB URLs on exchange2013. Please check this as
well for checking URLs.
I hope you know MAPI/RPC (RPC over TCP) traffic is now replaced with RPC over HTTP/s instead in exch2013.
Thanks
MAS
Please don't forget to mark an answer if it answers your question or mark as helpful if it helps -
Exchange 2013 UM on-prem-hybrid with Office365
design:
Exchange 2013 deployment on-prem including UM being used for UM for users. Domain and Exchange are set to companyA.net
companyA.com is set up in O365 for email\calendars etc.
ADFS and DirSync already configured to O365.
Available UPN's in AD are already companyA.com and companyA.net.
Plan:
Setup hybrid so some users can have mailboxes on-prem and others on O365.
Have companyA.com be the primary smtp address
Question:
1) The speech attendant part of UM on prem is a non-negotiable requirement. could the mailboxes be on O365 and still work correctly?
Other considerations:
1) Lync 2013 on-prem is deployed for all features including Enterprise voice. Presence, calendars, and voicemail from exchange required.
Need to have the MWI and calendaring\presence work.1: It should, but first make sure you create the UM Dial Plans other UM properties in Office 365.
Do testing before the move.
I saw one of friend faced issue where as, Voice Mail notification wasn't getting delivered to user Mailbox.
Cheers,
Gulab Prasad
Technology Consultant
Blog:
http://www.exchangeranger.com Twitter:
LinkedIn:
Check out CodeTwo’s tools for Exchange admins
Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.
Maybe you are looking for
-
My genius is not working with a few albums!
Ok.. so i bought the CD of Miley Cyrus' "The Time Of Our Lives" and Nick Jonas & The Administration's "Who I Am" and rippped them into my PC, filled the details, added album art and stuff. Then i updated my genius. but still genius is not detecting t
-
Got myself in a color profile pickle - Windows 7
So I'm using PS CS4 on Windows 7 Release Candidate (build 7100). I have profile my monitor using a cheap Spyder Express colorimeter. This produces an icc profile called spyder2express which is loaded up on startup. I know it loads correctly because i
-
My ipod on my iphone 3gs is not working, what do i do?
please help.. my ipod on my iphone 3gs is not working, what do i do?
-
Folder Icon Not Updated?
The entire app and folder icons updated with OS x.10 install EXCEPT for my Documents and Dropbox folders -- they look like they did in 10.9.X... Why on earth wouldn't two folders update their icon with the rest of the OS? Any info you can provide is
-
I have been charged for an app i dont have and judging by the name i wouldnt be interested in having, how can i get my money back?