Exchange 2013 Event ID 106 MSExchange Common

Event ID 106 is generated on Exchange 2013 ,already updated Perfcounters.ps1 according to this article.still getting
same error.
http://support.microsoft.com/kb/2870416/en-us
Log Name: Application
Source: MSExchange Common
Date: 1/13/2014 8:59:30 PM
Event ID: 106
Task Category: General
Level: Error
Keywords: Classic
User: N/A
Computer: DC4.chickbuns.com
Description:
Performance counter updating error. Counter name is Time in Resource per second, category name is MSExchange Activity Context Resources. Optional code: 2. Exception: The exception thrown is : System.InvalidOperationException: Instance 'ad-w3wp-msexchangeowaapppool'
already exists with a lifetime of Process. It cannot be recreated or reused until it has been removed or until the process using it has exited.
Processes running while Performance counter failed to update:
3148 MSExchangeDelivery
388 wininit
1568 SMSvcHost
8976 w3wp
2748 conhost
6292 w3wp
380 csrss
3924 MSExchangeFrontendTransport
768 svchost
1948 sftracing
1156 spoolsv
956 svchost
7204 w3wp
752 LogonUI
2128 noderunner
3900 MSExchangeSubmission
8968 w3wp
1928 ForefrontActiveDirectoryConnector
1336 taskeng
7048 w3wp
348 svchost
3692 Microsoft.Exchange.EdgeSyncSvc
4676 Microsoft.Exchange.RpcClientAccess.Service
4872 MSExchangeMailboxReplication
340 csrss
1556 UMWorkerProcess
8020 w3wp
3088 Microsoft.Exchange.AntispamUpdateSvc
1312 MSExchangeHMHost
7948 w3wp
424 winlogon
1500 rundll32
4448 MSExchangeMailboxAssistants
900 svchost
6700 scanningprocess
504 lsm
5816 umservice
4244 Microsoft.Exchange.ServiceHost
2736 MSExchangeHMWorker
496 lsass
1840 vmtoolsd
1872 noderunner
488 services
1396 inetinfo
680 svchost
1296 hostcontrollerservice
7036 w3wp
1688 noderunner
1216 svchost
6740 scanningprocess
2364 svchost
1844 svchost
856 svchost
4992 conhost
6760 w3wp
7816 w3wp
4196 Microsoft.Exchange.Pop3Service
2028 updateservice
1236 fms
2220 noderunner
4976 msexchangerepl
7544 w3wp
600 svchost
5364 MSExchangeTransportLogSearch
2464 WMSvc
4376 conhost
1416 Microsoft.Exchange.Diagnostics.Service
3580 Microsoft.Exchange.Imap4Service
6336 scanningprocess
1016 Microsoft.Exchange.Directory.TopologyService
4364 Microsoft.Exchange.Imap4
5992 Microsoft.Exchange.UM.CallRouter
6920 w3wp
2388 wlms
5144 MSExchangeThrottling
808 svchost
3760 Microsoft.Exchange.Search.Service
4744 Microsoft.Exchange.Pop3
248 smss
2964 WmiPrvSE
1584 rundll32
5840 Microsoft.Exchange.Store.Worker
4 System
4336 Microsoft.Exchange.Store.Service

Hi,
Based on my research, the issue can be resolved by removing and re-creating all Exchange performance counters:
add-pssnapin Microsoft.Exchange.Management.PowerShell.Setup
$files=get-childitem “C:\Program Files\Microsoft\Exchange Server\V15\Setup\Perf\" *.xml |where-object {!($_.psiscontainer)}
foreach ($file in $files) {remove-perfcounters -definitionfilename $file.fullname}
foreach ($file in $files) {new-perfcounters -definitionfilename $file.fullname}
For more information, you can refer to the following thread:
http://social.technet.microsoft.com/Forums/exchange/en-US/a8e35d2a-5e09-4ec5-b5c8-43554d3b8b78/lots-of-errors-106-msexchange-common?forum=exchangesvradmin
If you have any question, please feel free to let me know.
Thanks,
Angela Shi
TechNet Community Support

Similar Messages

Lots of errors 106 MSExchange Common

I get lots of errors 106 MSExchange Common. Details:
Performance counter updating error.
After that there is a list of running processes displayed. And after that for each process:
A process is holding onto a transport performance counter. processId : 16852,
etc.
Leo

The event thrown:
- System
- Provider
   [ Name] MSExchange Common
- EventID 106
   [ Qualifiers] 49156
   Level 2
   Task 1
   Keywords 0x80000000000000
- TimeCreated
   [ SystemTime] 2012-12-14T08:09:38.000000000Z
   EventRecordID 46524
   Channel Application
   Computer ITSPECSRV.itspec.local
   Security
- EventData
   2
   Time in Resource per second
   MSExchange Activity Context Resources
   The exception thrown is : System.InvalidOperationException: Instance 'ad-w3wp-msexchangerpcproxyapppool' already exists with a lifetime of Process. It cannot be recreated or reused until it has been removed or until the process using it has exited.
at System.Diagnostics.SharedPerformanceCounter.FindInstance(Int32 instanceNameHashCode, String instanceName, CategoryEntry* categoryPointer, InstanceEntry** returnInstancePointerReference, Boolean activateUnusedInstances, PerformanceCounterInstanceLifetime
lifetime, Boolean& foundFreeInstance) at System.Diagnostics.SharedPerformanceCounter.GetCounter(String counterName, String instanceName, Boolean enableReuse, PerformanceCounterInstanceLifetime lifetime) at System.Diagnostics.SharedPerformanceCounter..ctor(String
catName, String counterName, String instanceName, PerformanceCounterInstanceLifetime lifetime) at System.Diagnostics.PerformanceCounter.InitializeImpl() at System.Diagnostics.PerformanceCounter.get_RawValue() at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.get_RawValue()
Last worker process info : System.ArgumentException: Process with an Id of 13296 is not running. at System.Diagnostics.Process.GetProcessById(Int32 processId) at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.GetLastWorkerProcessInfo() Processes running
while Performance counter failed to update: 60080 rundll32 5392 noderunner 384 smss 1564 certsrv 2152 updateservice 3528 Microsoft.Exchange.AntispamUpdateSvc 1164 svchost 13180 w3wp 4708 MSExchangeFrontendTransport 372 svchost 568 wininit 4900 Microsoft.Exchange.Store.Service
3912 MSExchangeSubmission 956 svchost 560 csrss 1544 svchost 1936 ismserv 2328 sftracing 2524 Microsoft.Exchange.Directory.TopologyService 1144 SMSvcHost 6856 w3wp 1732 fms 6064 msexchangerepl 5668 Microsoft.Exchange.ContentFilter.Wrapper 2736 ForefrontActiveDirectoryConnector
7044 scanningprocess 65552 w3wp 7632 Microsoft.Exchange.Store.Worker 75064 Microsoft.Exchange.RpcClientAccess.Service 1916 inetinfo 2504 WMSvc 672 lsass 7884 LogonUI 3288 SMSvcHost 74404 WmiPrvSE 2892 MSExchangeHMHost 7196 svchost 17664 plasrv 23572 WmiPrvSE
58464 rundll32 3864 Microsoft.Exchange.UM.CallRouter 12728 EdgeTransport 8984 vds 6816 scanningprocess 43456 rundll32 72248 w3wp 1492 Microsoft.ActiveDirectory.WebServices 900 svchost 4444 conhost 8220 svchost 2468 dfssvc 72992 noderunner 5520 scanningprocess
6600 umservice 492 csrss 9356 msdtc 7580 svchost 1668 svchost 12108 w3wp 10324 w3wp 59780 wService 2056 mqsvc 1464 spoolsv 4416 MSExchangeHMWorker 2248 POPconSrv 1688 dns 1148 DynamicUpdate 67648 noderunner 664 services 2436 svchost 856 svchost 4236 Microsoft.Exchange.EdgeSyncSvc
3612 MSExchangeDelivery 75572 w3wp 76664 w3wp 68420 w3wp 5576 MSExchangeThrottling 5068 MSExchangeMailboxAssistants 7544 w3wp 10268 Microsoft.Exchange.Diagnostics.Service 67232 UMWorkerProcess 2172 dwm 840 svchost 444 svchost 6156 MSExchangeTransportLogSearch
7516 MSExchangeTransport 54324 noderunner 1620 dfsrs 3508 w3wp 71712 w3wp 14412 hostcontrollerservice 3576 Microsoft.Exchange.ServiceHost 12832 conhost 9088 csrss 13320 MSExchangeMailboxReplication 6560 svchost 1004 LogonUI 804 MezzmoMediaServer 65616 Microsoft.Exchange.Search.Service
996 dwm 10004 winlogon 596 winlogon 4 System 0 Idle Performance Counters Layout information: A process is holding onto a transport performance counter. processId : 69196, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId:
69196 StartupTime: 129998615365371427, currentInstance : rpca-powershell-defaultdomain(4598AFAF) RefCount=0 SpinLock=0 Offset=34280, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId :
69196, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 69196 StartupTime: 129998615365371427, currentInstance : mb-powershell-defaultdomain(CC014C00) RefCount=0 SpinLock=0 Offset=33952, categoryName: MSExchange Activity
Context Resources A process is holding onto a transport performance counter. processId : 69196, counter : time in resource per second Value=1511 SpinLock=0 Lifetime=Type: 1 ProcessId: 69196 StartupTime: 129998615365371427, currentInstance : ad-powershell-defaultdomain(95CC324A)
RefCount=0 SpinLock=0 Offset=33624, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 72248, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 72248
StartupTime: 129999461529718338, currentInstance : rpca-w3wp-msexchangepowershellfrontendapppool(E1115251) RefCount=1 SpinLock=0 Offset=33296, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId
: 72248, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 72248 StartupTime: 129999461529718338, currentInstance : mb-w3wp-msexchangepowershellfrontendapppool(34B9187E) RefCount=1 SpinLock=0 Offset=32968, categoryName: MSExchange
Activity Context Resources A process is holding onto a transport performance counter. processId : 72248, counter : time in resource per second Value=3 SpinLock=0 Lifetime=Type: 1 ProcessId: 72248 StartupTime: 129999461529718338, currentInstance : ad-w3wp-msexchangepowershellfrontendapppool(FAEFA1B4)
RefCount=1 SpinLock=0 Offset=32640, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 13180, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 13180
StartupTime: 129999188954929953, currentInstance : rpca-w3wp-msexchangeowaapppool(4AA799E7) RefCount=1 SpinLock=0 Offset=32312, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 13180,
counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 13180 StartupTime: 129999188954929953, currentInstance : mb-w3wp-msexchangeowaapppool(C3953468) RefCount=1 SpinLock=0 Offset=31984, categoryName: MSExchange Activity Context
Resources A process is holding onto a transport performance counter. processId : 13180, counter : time in resource per second Value=26326 SpinLock=0 Lifetime=Type: 1 ProcessId: 13180 StartupTime: 129999188954929953, currentInstance : ad-w3wp-msexchangeowaapppool(160BE662)
RefCount=1 SpinLock=0 Offset=31656, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 12108, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 12108
StartupTime: 129992760805840463, currentInstance : rpca-w3wp-msexchangeautodiscoverapppool(6DABF262) RefCount=1 SpinLock=0 Offset=31328, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId
: 12108, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 12108 StartupTime: 129992760805840463, currentInstance : mb-w3wp-msexchangeautodiscoverapppool(D1C6EF4D) RefCount=1 SpinLock=0 Offset=31000, categoryName: MSExchange
Activity Context Resources A process is holding onto a transport performance counter. processId : 12108, counter : time in resource per second Value=1012599 SpinLock=0 Lifetime=Type: 1 ProcessId: 12108 StartupTime: 129992760805840463, currentInstance : ad-w3wp-msexchangeautodiscoverapppool(FD072087)
RefCount=1 SpinLock=0 Offset=30672, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 10324, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10324
StartupTime: 129992756136525826, currentInstance : rpca-w3wp-msexchangeowacalendarapppool(8F10D1B5) RefCount=1 SpinLock=0 Offset=30344, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId
: 10324, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10324 StartupTime: 129992756136525826, currentInstance : mb-w3wp-msexchangeowacalendarapppool(2D8C9EBA) RefCount=1 SpinLock=0 Offset=30016, categoryName: MSExchange
Activity Context Resources A process is holding onto a transport performance counter. processId : 10324, counter : time in resource per second Value=33901 SpinLock=0 Lifetime=Type: 1 ProcessId: 10324 StartupTime: 129992756136525826, currentInstance : ad-w3wp-msexchangeowacalendarapppool(D845E230)
RefCount=1 SpinLock=0 Offset=29688, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6856, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6856 StartupTime:
129992757423214029, currentInstance : rpca-w3wp-msexchangeoabapppool(8149E8D2) RefCount=1 SpinLock=0 Offset=29360, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6856, counter : time
in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6856 StartupTime: 129992757423214029, currentInstance : mb-w3wp-msexchangeoabapppool(58D0A79D) RefCount=1 SpinLock=0 Offset=29032, categoryName: MSExchange Activity Context Resources A process
is holding onto a transport performance counter. processId : 6856, counter : time in resource per second Value=30909 SpinLock=0 Lifetime=Type: 1 ProcessId: 6856 StartupTime: 129992757423214029, currentInstance : ad-w3wp-msexchangeoabapppool(CC31A917) RefCount=1
SpinLock=0 Offset=28704, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7544, counter : time in resource per second Value=449148 SpinLock=0 Lifetime=Type: 1 ProcessId: 7544 StartupTime:
129992797274953614, currentInstance : ad-w3wp-msexchangepowershellapppool(9E48CD5A) RefCount=1 SpinLock=0 Offset=28376, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7544, counter
: time in resource per second Value=1082 SpinLock=0 Lifetime=Type: 1 ProcessId: 7544 StartupTime: 129992797274953614, currentInstance : mb-w3wp-msexchangepowershellapppool(A686C810) RefCount=1 SpinLock=0 Offset=28048, categoryName: MSExchange Activity Context
Resources A process is holding onto a transport performance counter. processId : 7544, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7544 StartupTime: 129992797274953614, currentInstance : rpca-w3wp-msexchangepowershellapppool(3CF18BF)
RefCount=1 SpinLock=0 Offset=27720, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 67648, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 67648
StartupTime: 129999193218524806, currentInstance : rpca-noderunner-contentenginenode1(316BF6E3) RefCount=1 SpinLock=0 Offset=27392, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 67648,
counter : time in resource per second Value=27430 SpinLock=0 Lifetime=Type: 1 ProcessId: 67648 StartupTime: 129999193218524806, currentInstance : mb-noderunner-contentenginenode1(2EE8286C) RefCount=1 SpinLock=0 Offset=27064, categoryName: MSExchange Activity
Context Resources A process is holding onto a transport performance counter. processId : 67648, counter : time in resource per second Value=51257 SpinLock=0 Lifetime=Type: 1 ProcessId: 67648 StartupTime: 129999193218524806, currentInstance : ad-noderunner-contentenginenode1(61591E6)
RefCount=1 SpinLock=0 Offset=26736, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6452, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6452 StartupTime:
129992750435810865, currentInstance : rpca-umworkerprocess-umworkerprocess.exe(970CCE33) RefCount=0 SpinLock=0 Offset=26408, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6452, counter
: time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6452 StartupTime: 129992750435810865, currentInstance : mb-umworkerprocess-umworkerprocess.exe(8A7F8A3C) RefCount=0 SpinLock=0 Offset=26080, categoryName: MSExchange Activity Context
Resources A process is holding onto a transport performance counter. processId : 6452, counter : time in resource per second Value=1209 SpinLock=0 Lifetime=Type: 1 ProcessId: 6452 StartupTime: 129992750435810865, currentInstance : ad-umworkerprocess-umworkerprocess.exe(95818B6)
RefCount=0 SpinLock=0 Offset=25752, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 12728, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 12728
StartupTime: 129992800311275798, currentInstance : rpca-edgetransport-edgetransport.exe(911B6EB3) RefCount=1 SpinLock=0 Offset=25424, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId :
12728, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 12728 StartupTime: 129992800311275798, currentInstance : mb-edgetransport-edgetransport.exe(A5AF4BBC) RefCount=1 SpinLock=0 Offset=25096, categoryName: MSExchange Activity
Context Resources A process is holding onto a transport performance counter. processId : 12728, counter : time in resource per second Value=1130610 SpinLock=0 Lifetime=Type: 1 ProcessId: 12728 StartupTime: 129992800311275798, currentInstance : ad-edgetransport-edgetransport.exe(E79D4A36)
RefCount=1 SpinLock=0 Offset=24768, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7516, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7516 StartupTime:
129992800299263990, currentInstance : rpca-msexchangetransport-msexchangetransport.exe(24F56C33) RefCount=1 SpinLock=0 Offset=24440, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId :
7516, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7516 StartupTime: 129992800299263990, currentInstance : mb-msexchangetransport-msexchangetransport.exe(92FB3D3C) RefCount=1 SpinLock=0 Offset=24112, categoryName: MSExchange
Activity Context Resources A process is holding onto a transport performance counter. processId : 7516, counter : time in resource per second Value=54 SpinLock=0 Lifetime=Type: 1 ProcessId: 7516 StartupTime: 129992800299263990, currentInstance : ad-msexchangetransport-msexchangetransport.exe(2447ECB6)
RefCount=1 SpinLock=0 Offset=23784, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7632, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7632 StartupTime:
129992750543373015, currentInstance : rpca-microsoft.exchange.store.worker-microsoft.exchange.store.worker.exe(ABB009B3) RefCount=1 SpinLock=0 Offset=23456, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance
counter. processId : 7632, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7632 StartupTime: 129992750543373015, currentInstance : mb-microsoft.exchange.store.worker-microsoft.exchange.store.worker.exe(38BA31BC) RefCount=1
SpinLock=0 Offset=23128, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7632, counter : time in resource per second Value=1434838 SpinLock=0 Lifetime=Type: 1 ProcessId: 7632 StartupTime:
129992750543373015, currentInstance : ad-microsoft.exchange.store.worker-microsoft.exchange.store.worker.exe(11106236) RefCount=1 SpinLock=0 Offset=22800, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance
counter. processId : 3864, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3864 StartupTime: 129992750232229526, currentInstance : rpca-microsoft.exchange.um.callrouter-microsoft.exchange.um.callrouter.exe(E8475353) RefCount=1
SpinLock=0 Offset=22472, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 3864, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3864 StartupTime:
129992750232229526, currentInstance : mb-microsoft.exchange.um.callrouter-microsoft.exchange.um.callrouter.exe(8F65881C) RefCount=1 SpinLock=0 Offset=22144, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance
counter. processId : 3864, counter : time in resource per second Value=44 SpinLock=0 Lifetime=Type: 1 ProcessId: 3864 StartupTime: 129992750232229526, currentInstance : ad-microsoft.exchange.um.callrouter-microsoft.exchange.um.callrouter.exe(78F52196) RefCount=1
SpinLock=0 Offset=21816, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6064, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6064 StartupTime:
129992749750676533, currentInstance : rpca-msexchangerepl-msexchangerepl.exe(7148D1D3) RefCount=1 SpinLock=0 Offset=21488, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6064, counter
: time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6064 StartupTime: 129992749750676533, currentInstance : mb-msexchangerepl-msexchangerepl.exe(7544DE9C) RefCount=1 SpinLock=0 Offset=21160, categoryName: MSExchange Activity Context
Resources A process is holding onto a transport performance counter. processId : 6064, counter : time in resource per second Value=4012375 SpinLock=0 Lifetime=Type: 1 ProcessId: 6064 StartupTime: 129992749750676533, currentInstance : ad-msexchangerepl-msexchangerepl.exe(4FE1D16)
RefCount=1 SpinLock=0 Offset=20832, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6600, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6600 StartupTime:
129992749986061560, currentInstance : rpca-umservice-umservice.exe(E39A1133) RefCount=1 SpinLock=0 Offset=20504, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6600, counter : time
in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6600 StartupTime: 129992749986061560, currentInstance : mb-umservice-umservice.exe(FFBB273C) RefCount=1 SpinLock=0 Offset=20176, categoryName: MSExchange Activity Context Resources A process
is holding onto a transport performance counter. processId : 6600, counter : time in resource per second Value=2173470 SpinLock=0 Lifetime=Type: 1 ProcessId: 6600 StartupTime: 129992749986061560, currentInstance : ad-umservice-umservice.exe(9A8AC6B6) RefCount=1
SpinLock=0 Offset=19848, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6156, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6156 StartupTime:
129992749943318526, currentInstance : rpca-msexchangetransportlogsearch-msexchangetransportlogsearch.exe(EF66F2D3) RefCount=1 SpinLock=0 Offset=19520, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter.
processId : 6156, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6156 StartupTime: 129992749943318526, currentInstance : mb-msexchangetransportlogsearch-msexchangetransportlogsearch.exe(B020391C) RefCount=1 SpinLock=0
Offset=19192, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6156, counter : time in resource per second Value=4209 SpinLock=0 Lifetime=Type: 1 ProcessId: 6156 StartupTime: 129992749943318526,
currentInstance : ad-msexchangetransportlogsearch-msexchangetransportlogsearch.exe(20578116) RefCount=1 SpinLock=0 Offset=18864, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 3912,
counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3912 StartupTime: 129992749878269211, currentInstance : rpca-msexchangesubmission-msexchangesubmission.exe(60747EB3) RefCount=1 SpinLock=0 Offset=18536, categoryName: MSExchange
Activity Context Resources A process is holding onto a transport performance counter. processId : 3912, counter : time in resource per second Value=838132 SpinLock=0 Lifetime=Type: 1 ProcessId: 3912 StartupTime: 129992749878269211, currentInstance : mb-msexchangesubmission-msexchangesubmission.exe(67B4173C)
RefCount=1 SpinLock=0 Offset=18208, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 3912, counter : time in resource per second Value=1177907 SpinLock=0 Lifetime=Type: 1 ProcessId:
3912 StartupTime: 129992749878269211, currentInstance : ad-msexchangesubmission-msexchangesubmission.exe(85200236) RefCount=1 SpinLock=0 Offset=17880, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter.
processId : 75064, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 75064 StartupTime: 129999247871067971, currentInstance : rpca-microsoft.exchange.rpcclientaccess.service-microsoft.exchange.rpcclientaccess.service.exe(E4305E13)
RefCount=1 SpinLock=0 Offset=17552, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 75064, counter : time in resource per second Value=27359 SpinLock=0 Lifetime=Type: 1 ProcessId: 75064
StartupTime: 129999247871067971, currentInstance : mb-microsoft.exchange.rpcclientaccess.service-microsoft.exchange.rpcclientaccess.service.exe(BBA60BDC) RefCount=1 SpinLock=0 Offset=17224, categoryName: MSExchange Activity Context Resources A process is holding
onto a transport performance counter. processId : 75064, counter : time in resource per second Value=82804 SpinLock=0 Lifetime=Type: 1 ProcessId: 75064 StartupTime: 129999247871067971, currentInstance : ad-microsoft.exchange.rpcclientaccess.service-microsoft.exchange.rpcclientaccess.service.exe(B6581E56)
RefCount=1 SpinLock=0 Offset=16896, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 5576, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5576 StartupTime:
129992749923195144, currentInstance : rpca-msexchangethrottling-msexchangethrottling.exe(8C1DA893) RefCount=1 SpinLock=0 Offset=16568, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId
: 5576, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5576 StartupTime: 129992749923195144, currentInstance : mb-msexchangethrottling-msexchangethrottling.exe(AB2BADDC) RefCount=1 SpinLock=0 Offset=16240, categoryName:
MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 5576, counter : time in resource per second Value=10 SpinLock=0 Lifetime=Type: 1 ProcessId: 5576 StartupTime: 129992749923195144, currentInstance :
ad-msexchangethrottling-msexchangethrottling.exe(8962F4D6) RefCount=1 SpinLock=0 Offset=15912, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 13320, counter : time in resource per
second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 13320 StartupTime: 129992982379033019, currentInstance : rpca-msexchangemailboxreplication-msexchangemailboxreplication.exe(276F4DB3) RefCount=1 SpinLock=0 Offset=15584, categoryName: MSExchange Activity
Context Resources A process is holding onto a transport performance counter. processId : 13320, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 13320 StartupTime: 129992982379033019, currentInstance : mb-msexchangemailboxreplication-msexchangemailboxreplication.exe(95E41BC)
RefCount=1 SpinLock=0 Offset=15256, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 13320, counter : time in resource per second Value=904140 SpinLock=0 Lifetime=Type: 1 ProcessId:
13320 StartupTime: 129992982379033019, currentInstance : ad-msexchangemailboxreplication-msexchangemailboxreplication.exe(394712B6) RefCount=1 SpinLock=0 Offset=14928, categoryName: MSExchange Activity Context Resources A process is holding onto a transport
performance counter. processId : 5068, counter : time in resource per second Value=53584 SpinLock=0 Lifetime=Type: 1 ProcessId: 5068 StartupTime: 129992749574808748, currentInstance : rpca-msexchangemailboxassistants-msexchangemailboxassistants.exe(DEAC0933)
RefCount=1 SpinLock=0 Offset=14600, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 5068, counter : time in resource per second Value=54866 SpinLock=0 Lifetime=Type: 1 ProcessId: 5068
StartupTime: 129992749574808748, currentInstance : mb-msexchangemailboxassistants-msexchangemailboxassistants.exe(A754293C) RefCount=1 SpinLock=0 Offset=14272, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance
counter. processId : 5068, counter : time in resource per second Value=616057 SpinLock=0 Lifetime=Type: 1 ProcessId: 5068 StartupTime: 129992749574808748, currentInstance : ad-msexchangemailboxassistants-msexchangemailboxassistants.exe(EE890EB6) RefCount=1
SpinLock=0 Offset=13944, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 3576, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3576 StartupTime:
129992749858458492, currentInstance : rpca-microsoft.exchange.servicehost-microsoft.exchange.servicehost.exe(39C8D53) RefCount=1 SpinLock=0 Offset=13616, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance
counter. processId : 3576, counter : time in resource per second Value=41623 SpinLock=0 Lifetime=Type: 1 ProcessId: 3576 StartupTime: 129992749858458492, currentInstance : mb-microsoft.exchange.servicehost-microsoft.exchange.servicehost.exe(E7963A1C) RefCount=1
SpinLock=0 Offset=13288, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 3576, counter : time in resource per second Value=1048750 SpinLock=0 Lifetime=Type: 1 ProcessId: 3576 StartupTime:
129992749858458492, currentInstance : ad-microsoft.exchange.servicehost-microsoft.exchange.servicehost.exe(10E8B196) RefCount=1 SpinLock=0 Offset=12960, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter.
processId : 3508, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3508 StartupTime: 129992760724492119, currentInstance : rpca-w3wp-msexchangeservicesapppool(E8BBF810) RefCount=1 SpinLock=0 Offset=12632, categoryName: MSExchange
Activity Context Resources A process is holding onto a transport performance counter. processId : 3508, counter : time in resource per second Value=222927 SpinLock=0 Lifetime=Type: 1 ProcessId: 3508 StartupTime: 129992760724492119, currentInstance : mb-w3wp-msexchangeservicesapppool(10FE94BF)
RefCount=1 SpinLock=0 Offset=12304, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 3508, counter : time in resource per second Value=1001355 SpinLock=0 Lifetime=Type: 1 ProcessId:
3508 StartupTime: 129992760724492119, currentInstance : ad-w3wp-msexchangeservicesapppool(E0DE475) RefCount=1 SpinLock=0 Offset=11976, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId
: 4900, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4900 StartupTime: 129992749471903110, currentInstance : rpca-microsoft.exchange.store.service-microsoft.exchange.store.service.exe(A07BD4F3) RefCount=1 SpinLock=0
Offset=11648, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 4900, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4900 StartupTime: 129992749471903110,
currentInstance : mb-microsoft.exchange.store.service-microsoft.exchange.store.service.exe(4519AFC) RefCount=1 SpinLock=0 Offset=11320, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId
: 4900, counter : time in resource per second Value=28 SpinLock=0 Lifetime=Type: 1 ProcessId: 4900 StartupTime: 129992749471903110, currentInstance : ad-microsoft.exchange.store.service-microsoft.exchange.store.service.exe(6B0DD0F6) RefCount=1 SpinLock=0 Offset=10992,
categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 4708, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4708 StartupTime: 129992749445169725, currentInstance
: rpca-msexchangefrontendtransport-msexchangefrontendtransport.exe(935D2AB3) RefCount=1 SpinLock=0 Offset=10664, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 4708, counter : time
in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4708 StartupTime: 129992749445169725, currentInstance : mb-msexchangefrontendtransport-msexchangefrontendtransport.exe(52FB38BC) RefCount=1 SpinLock=0 Offset=10336, categoryName: MSExchange
Activity Context Resources A process is holding onto a transport performance counter. processId : 4708, counter : time in resource per second Value=210983 SpinLock=0 Lifetime=Type: 1 ProcessId: 4708 StartupTime: 1...
Leo

Exchange 2013 - Event ID 4999 MS Exchange Common - Watson report about to be sent for process id: 5816

Hi,
We have a single Exchange 2013 server and are getting this error many times in a day. I haven't been able to find a solution and was wondering if anyone came across this error or have any suggestions.
Edition : Standard
AdminDisplayVersion : Version 15.0 (Build 913.22)
Watson report about to be sent for process id: 5816, with parameters: E12IIS, c-RTL-AMD64, 15.00.0913.022, M.Exchange.Imap4, M.Exchange.Net, M.E.N.NetworkConnection.BeginNegotiateTlsAsClient, System.InvalidOperationException, 99a4, 15.00.0913.007.
ErrorReportingEnabled: True
Thanks
Amit

We have exchange 2013 cu6 mailbox server and we keep getting the below event error message
Log Name:      Application
Source:        MSExchange Common
Date:          10/2/2014 1:06:25 PM
Event ID:      4999
Task Category: General
Level:         Error
Keywords:      Classic
User:          N/A
Computer:
Description:
Watson report about to be sent for process id: 30632, with parameters: E12, c-RTL-AMD64, 15.00.0995.029, M.E.RpcClientAccess.Service, M.E.Data.ApplicationLogic, M.E.D.A.U.HttpPhotoRequestBuilder.Build, System.NotSupportedException, 4e29, 15.00.0995.027.
ErrorReportingEnabled: True
Event Xml:
< Event xmlns="">
<System>
    <Provider Name="MSExchange Common" />
    <EventID Qualifiers="16388">4999</EventID>
    <Level>2</Level>
    <Task>1</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-10-02T20:06:25.000000000Z" />
    <EventRecordID>7826297</EventRecordID>
    <Channel>Application</Channel>
    <Computer></Computer>
    <Security />
</System>
<EventData>
    <Data>30632</Data>
    <Data>E12</Data>
    <Data>c-RTL-AMD64</Data>
    <Data>15.00.0995.029</Data>
    <Data>M.E.RpcClientAccess.Service</Data>
    <Data>M.E.Data.ApplicationLogic</Data>
    <Data>M.E.D.A.U.HttpPhotoRequestBuilder.Build</Data>
    <Data>System.NotSupportedException</Data>
    <Data>4e29</Data>
    <Data>15.00.0995.027</Data>
    <Data>True</Data>
    <Data>False</Data>
    <Data>Microsoft.Exchange.RpcClientAccess.Service</Data>
    <Data>
    </Data>
</EventData>
< /Event>
Services seem to be fine (Via test-servicehealth), but i do have a group of users that complain that their outlook 2013 email clients will go non-responsive a few times a days. Wondering if this is related. Also this error is appearing every few minutes.
Anyone else experiencing this?

Exchange 2013 Event ID 4999

Hello,
I have two exchange servers 2013 both running MB and CAS roles. I also have a DAG on my servers. On one of my servers almost every 7-8 minutes I receive the following error event. Could you please assist me with this?
Event 4999, MSExchange Common
Watson report about to be sent for process id: 17084, with parameters: E12IIS, c-RTL-AMD64, 15.00.0995.029, MSExchangeMigrationWorkflow, unknown, M.E.M.L.L.<>c__DisplayClass11.<GetLocalServerData>b__10, System.NullReferenceException, 49af, unknown.
ErrorReportingEnabled: False
Thanks a lot.
Pooriya Aghaalitari

Hi,
DAG Network Automatic configuration may cause the Misconfigured Network sometimes. I recommend you to configure DAG Network manually to solve this problem.
Please refer to the “DAG Networks” section in the following link.
http://technet.microsoft.com/en-us/library/dd298065(v=exchg.150).aspx#Dat
Similar thread for reference.
https://social.technet.microsoft.com/Forums/exchange/en-US/e0496d08-c82b-4e8d-ae70-f64c69dc3913/add-dag-member-event-4999-msexchange-common?forum=exchangesvravailabilityandisasterrecovery
Hope this will be helpful for you.
Best Regards.

Exchange 2013 Event ID 9646 - MoMT 500 Folder

Hello,
I am running Exchange 2013 CU3 and I'm getting an Event ID 9646 in the application event log. Full text below. It would appear it's saying the user is trying to open more than 500 folders but I have looked at her mailbox and while she has a lot of folders,
it's not over 500. Any suggestions or ideas?
Thanks,
Brad
The description for Event ID 9646 from source MSExchangeIS cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
If the event originated on another computer, the display information had to be saved with the event.
The following information was included with the event:
/O=xxxxx/OU=xxxxx/cn=Recipients/cn=JRoberts
MoMT
500
Folder
the message resource is present but the message is not found in the string/message table
BradG87

Hi,
About event 9646, this could be caused when a MAPI session tried to open more than the maximum number of objects that are allowed for the object type specified in the event description.
To resolve this issue, please try to modify the registry key and set the "objtFolder" value to 1000 to check the result.
For more details, please refer to the solution in the following article.
MSExchangeIS 9646
http://technet.microsoft.com/library/ff980641.aspx
Best regards,
Belinda
Belinda Ma
TechNet Community Support

Exchange 2013 event ID 36888 SChannel error 12 and 1203

I am running Windows Server 2012 STD with Exchange 2013 installed on the same server. I know that Microsoft doesnt recommend to do this, but I had no choice. Errors are follow:
A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 10. The Windows SChannel error state is 12.
A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 10. The Windows SChannel error state is 1203.
- System
- Provider
[ Name] Schannel
[ Guid] {1F678132-5938-4686-9FDC-C8FF68F15C85}
EventID 36888
Version 0
Level 2
Task 0
Opcode 0
Keywords 0x8000000000000000
- TimeCreated
[ SystemTime] 2014-11-25T23:30:34.120233400Z
EventRecordID 121125
Correlation
- Execution
[ ProcessID] 1064
[ ThreadID] 20184
Channel System
Computer server
- Security
[ UserID] S-1-5-18
- EventData
AlertDesc 10
ErrorState 12
System
- Provider
[ Name] Schannel
[ Guid] {1F678132-5938-4686-9FDC-C8FF68F15C85}
EventID 36888
Version 0
Level 2
Task 0
Opcode 0
Keywords 0x8000000000000000
- TimeCreated
[ SystemTime] 2014-11-26T05:45:22.650086300Z
EventRecordID 121230
Correlation
- Execution
[ ProcessID] 1064
[ ThreadID] 45336
Channel System
Computer SERVER
- Security
[ UserID] S-1-5-18
- EventData
AlertDesc 10
ErrorState 1203
Process ID 1064 is Isass.exe
I found somewhere that error 1203 could be ignored, but nothing about error 12.
Server is running with selfsigned SAN certificate, hosted 2 exchange domains (10 mailboxes, 5 local, 5 linked for remote domain connected via external 2 way non transitive domain trust).
Thank you very much for any advise.
Regards,
Jan
Šerý

Hi Jan,
Based on my research for the Event 36888, the issue may be caused by not standard or corrupted behavior of web browsers or users, such as user use HTTP protocol to access Exchange service which is a SSL site on port 443.
Please check whether there is a HTTP redirect configured in your IIS Manager of Exchange server. Also reset web browsers to have a try. Here are some similar thread for this issue:
https://social.technet.microsoft.com/Forums/forefront/en-US/92c63737-c2a3-41f7-8878-3b0cf5ee95ff/new-install-event-log-schannel-event-id-36888?forum=Forefrontedgegeneral
http://ficility.net/2013/10/21/exchange-2013-exchange-2010-windows-server-2012-schannel-event-id36888-1203-tlsssl-error-the-root-cause/
Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. Please make
sure that you completely understand the risk before retrieving any suggestions from the above link.
Regards,
Winnie Liang
TechNet Community Support

Exchange 2013, Event 1012, MSExchangeIS

Hi,
on an Exchange 2013 installation I get the following error event reported every 5 minutes:
ID 1012, Error, Source MSExchangeIS:
Exchange Server Information Store has encountered an error while executing a full-text index query ("and(or(itemclass:string("IPM.Note*", mode="and"), itemclass:string("IPM.Schedule.Meeting*", mode="and"), itemclass:string("IPM.OCTEL.VOICE*", mode="and"), itemclass:string("IPM.VOICENOTES*", mode="and")), subject:string("SearchQueryStxProbe*", mode="and"), folderid:string("9805D250E52E1C4BAEEF88B84AC1BDFE00000000000E0000"))"). Error information: System.ServiceModel.FaultException`1[System.ServiceModel.ExceptionDetail]: Internal error while processing request (Fault Detail is equal to An ExceptionDetail, likely created by IncludeExceptionDetailInFaults=true, whose value is:
Microsoft.Ceres.InteractionEngine.Component.ProcessingEngineException: Internal error while processing request
at Microsoft.Ceres.InteractionEngine.Component.CieProcessingEngine.LogAndRethrowException(Exception e)
at Microsoft.Ceres.InteractionEngine.Component.CieProcessingEngine.GetItems(Guid flowIdentifier, String outputName)
at SyncInvokeGetItems(Object , Object[] , Object[] )
at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object instance, Object[] inputs, Object[]& outputs)
at System.ServiceModel.Dispatcher.DispatchOperationRuntime.InvokeBegin(MessageRpc& rpc)
at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage5(MessageRpc& rpc)
at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage31(MessageRpc& rpc)
at System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean isOperationContextSet)).
I do not really have an idea how to approach this and can't find any related information.
Thanks for your help.

I'm also getting the same error, tried the solution to no effect.
Error:
Exchange Server Information Store has encountered an error while executing a full-text index query ("and(or(itemclass:string("IPM.Note*", mode="and"), itemclass:string("IPM.Schedule.Meeting*", mode="and"), itemclass:string("IPM.OCTEL.VOICE*", mode="and"), itemclass:string("IPM.VOICENOTES*", mode="and")), subject:string("SearchQueryStxProbe*", mode="and"), folderid:string("D6A06323C909134BB77B2FE2114D06EA00000000000E0000"))"). Error information: System.ServiceModel.FaultException`1[System.ServiceModel.ExceptionDetail]: Internal error while processing request (Fault Detail is equal to An ExceptionDetail, likely created by IncludeExceptionDetailInFaults=true, whose value is:
Microsoft.Ceres.InteractionEngine.Component.ProcessingEngineException: Internal error while processing request
at Microsoft.Ceres.InteractionEngine.Component.CieProcessingEngine.LogAndRethrowException(Exception e)
at Microsoft.Ceres.InteractionEngine.Component.CieProcessingEngine.ExecuteSearchFlow(String flowName, IEnumerable`1 inputData)
at SyncInvokeExecuteSearchFlow(Object , Object[] , Object[] )
at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object instance, Object[] inputs, Object[]& outputs)
at System.ServiceModel.Dispatcher.DispatchOperationRuntime.InvokeBegin(MessageRpc& rpc)
at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage5(MessageRpc& rpc)
at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage31(MessageRpc& rpc)
at System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean isOperationContextSet)).
My ContentIndexState is Unknown.
I've also noticed this warning in the logs:
Event 1010, MSExchangeFastSearch
An operation attempted against a FAST endpoint exprienced an exception. This operation may be retried. Error details: Microsoft.Exchange.Search.Fast.PerformingFastOperationException: An Exception was received during a FAST operation. ---> System.ServiceModel.FaultException: Failed to create operator of type Microsoft.Exchange.Search.OperatorSchema.TransportRetrieverOperator. The operator type is not known to the system.
Server stack trace:
at System.ServiceModel.Channels.ServiceChannel.HandleReply(ProxyOperationRuntime operation, ProxyRpc& rpc)
at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)
Exception rethrown at [0]:
at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
at Microsoft.Ceres.ContentEngine.Admin.FlowService.IFlowServiceManagementAgent.PutFlow(String name, String serializedFlow)
at Microsoft.Exchange.Search.Fast.IndexManagementClient.<>c__DisplayClass1.<PerformFastOperation>b__0()
at Microsoft.Exchange.Search.Fast.IndexManagementClient.PerformFastOperation[T](Func`1 function, String eventLogKey)
--- End of inner exception stack trace ---
Help would be much appreciated!

Event ID: 4999 - MSExchange Common - Exchange 2010 SP3

Hi all,
I have Exchange 2010 SP3 RU4 and since yesterday without reason (I didn´t patch anything, configure etc.) following error randomly appears in app eventlog:
Watson report about to be sent for process id: 6000, with parameters: E12, c-RTL-AMD64, 14.03.0151.000, AirSync, MSExchange ActiveSync, Microsoft.Exchange.Data.Storage.GlobalObjectId.IsForeignUid, UnexpectedCondition:NullReferenceException, 54b1,
14.03.0151.000.
ErrorReportingEnabled: True
I´ve tried to find some info but no luck.
Does anybody know how to fix this?
Thanks in advance, O.

Resolved..
A few days ago I hid some testing resource mailboxes (rooms) in GAL, which were used in Cisco TMSXE (Videoconferencing SW). Then, when I restarted the IIS, these errors appeared, because of Cisco TMSXE couldn´t find the room mailboxes. So I unhide
them and errors are gone..

Exchange 2013: Event ID 2937 - MSExchangeSubmission.exe - edgetransport.exe - MSExchangeDelivery.exe - MSExchangeFrontendTransport.exe

Hi
I realise that there are a few threads about this specific ID, but all the solutions are unique to the particular occurrence. Could any of you gentleman or ladies have a look and tell me how to fix it please. Thanks in Advance
Process MSExchangeFrontendTransport.exe (PID=6120). Object [CN=VSAT-PM Group,OU=Users,OU=Connecting Africa,DC=connectingafrica,DC=local]. Property [ArbitrationMailbox] is set to value [connectingafrica.local/Deleted Objects/SystemMailbox{1f05a927-9036-4018-a6c3-5c29c152f5ac}
DEL:f068d90d-28c9-4eea-9e5b-e786bb7ff87d], it is pointing to the Deleted Objects container in Active Directory. This property should be fixed as soon as possible.
Process MSExchangeDelivery.exe (PID=5532). Object [CN=VSAT-PM Group,OU=Users,OU=Connecting Africa,DC=connectingafrica,DC=local]. Property [ArbitrationMailbox] is set to value [connectingafrica.local/Deleted Objects/SystemMailbox{1f05a927-9036-4018-a6c3-5c29c152f5ac}
DEL:f068d90d-28c9-4eea-9e5b-e786bb7ff87d], it is pointing to the Deleted Objects container in Active Directory. This property should be fixed as soon as possible.
Process edgetransport.exe (Transport) (PID=15260). Object [CN=VSAT-PM Group,OU=Users,OU=Connecting Africa,DC=connectingafrica,DC=local]. Property [ArbitrationMailbox] is set to value [connectingafrica.local/Deleted Objects/SystemMailbox{1f05a927-9036-4018-a6c3-5c29c152f5ac}
DEL:f068d90d-28c9-4eea-9e5b-e786bb7ff87d], it is pointing to the Deleted Objects container in Active Directory. This property should be fixed as soon as possible.
Process MSExchangeSubmission.exe (PID=3888). Object [CN=VSAT-PM Group,OU=Users,OU=Connecting Africa,DC=connectingafrica,DC=local]. Property [ArbitrationMailbox] is set to value [connectingafrica.local/Deleted Objects/SystemMailbox{1f05a927-9036-4018-a6c3-5c29c152f5ac}
DEL:f068d90d-28c9-4eea-9e5b-e786bb7ff87d], it is pointing to the Deleted Objects container in Active Directory. This property should be fixed as soon as possible.

Hi,
First verify that you have all 5 Arbitration Mailboxes with: Get-Mailbox -Arbitration
The error you see indicates that the database they were on was deleted, possibly in ADSIEdit,and now you have recipients with an old value set. Can't say for sure, but it looks like groups and since they do have an ArbitrationMailbox configured by
default and to fix them all in one go, just run:
Get-DistributionGroup -resultsize unlimited | Set-DistributionGroup -ArbitrationMailbox "SystemMailbox{1f05a927*"
Similar issue here:
http://social.technet.microsoft.com/Forums/exchange/en-US/4378e410-c2c5-47a9-abc2-eb2926ff40da/the-recipient-is-configured-to-use-arbitration-mailbox-but-that-mailbox-has-been-deleted?forum=exchange2010
Martina Miskovic

Exchange 2013 CU7 - Frequent Outlook 2013 Disconnections and Delays

We currently have the following environment:
Windows 2012 VM on Hyper-V with 24GB of RAM and 4 virtual procs (1 socket)
Cisco UCS, B200 M3 Blades
Exchange 2013 CU7
Exchange 2007 is in our environment, but public folders have been removed and only a few stale, unused accounts exist on it.
Two dual-role CAS/Mailbox servers
Mailbox servers are in a DAG
MAPI/HTTP is our connection protocol
.NET Framework 4.5.2
Clients are Outlook 2013 SP1 on Windows 7 and 8.1
(Currently round robin DNS, but we have a hardware load balancer we've temporarily taken out of the mix to solve this problem)
What we're seeing is frequent disconnections from Exchange, regardless of the CAS server. That is, both CAS servers will disconnect clients, but not at the same time. When we look at the Exchange boxes, we notice that the CPU is 99% - 100% each time the
disconnections occur. When we hunt down the IISWorker process causing the sudden CPU run, we see it comes back to the following app pools:
MSExchangeMAPIFrontEndAppPool
MSExchangeMAPIMailboxAppPool
(We were running RPC/HTTP, but switched to MAPI/HTTP to resolve the problem. We had the same issue with equivalent RPC app pools at the time.)
Eventually, within a minute or two, the CPU load will decrease and the clients connected via that CAS will regain connection. As you can imagine, the pain is felt more frequently by uncached clients--although everyone, regardless of caching, will see
the disconnections.
Basically, the problem sounds exactly as shown in this KB: http://support.microsoft.com/kb/2995145 Unfortunately, we already had .NET 4.5.2 installed, and have changed the environment variable and registry as shown in the article.
We're in contact with Microsoft Support, but thus far they're scratching their heads.
I'm clearing up all small errors to decrease the noise in the application error logs, but the most persistent one is Event ID 106 (MSExchange Common):
"Performance counter updating error. Counter name is Time in Resource per second, category name is MSExchange Activity Context Resources. Optional code: 2. Exception: The exception thrown is : System.InvalidOperationException: Instance 'ad-powershell-defaultdomain'
already exists with a lifetime of Process. It cannot be recreated or reused until it has been removed or until the process using it has exited."
Loading/reloading and recreation of the performance counters does not fix the problem, by Microsoft Support or us. Of course, this error existed before we started having issues; I'd just like to clean it up just in case it's a contributing factor.
Has anyone seen anything similar?

We're using a Barracuda load balancer (641), but we've eliminated that as a source of the problem. The CPU spikes and disconnections happen whether or not the load balancer is in use.
This problem is still ongoing, and we're still working with Microsoft Support. Right now they're focused on our environment, but having combed through it numerous times, there's nothing that stands out. I suspect this is a bug in CU7 (yet I would
readily accept our environment being at fault if it means we can identify and resolve the problem), but that's not the road Support is going down.
We've looked at storage I/O on the VM hosts (disk responses are 10 MS or less), added double the CPUs to each mail server (for a total of 8, each), disabled TCP chimney offload, run numerous Experfwiz log collections, etc... Now
the tech is focused on a particular mailbox database being the culprit because it also takes up more CPU when the MAPI app pools are gunning pretty high. I suspect that it is a symptom and not the problem, but I have no choice but to follow his lead.
What is your environment like? Are you also CU7? And did the problem show itself after a cumulative update was applied?

MailboxInSiteFailoverException - OWA session error on database *over (Exchange 2013 SP1)

Hi all, I have noticed an issue with OWA when database(s) are failed over between DAG members. The environments in question (issue can be reproduced in separate implementations of 2013 SP1 all-role servers) are 2 or more DAG members within the same
AD site/subnet. These are also fresh implementations with SP1 and not upgraded. Exchange servers are load balanced via Netscaler.
So to the issue - OWA users experience the below "..MailboxInSiteFailoverException" message when the database copy is activated. Exchange does not immediately proxy the requests to the active database. You can wait several minutes and
the issue is resolved by refreshing the browser or if you recycle the MSExchangeOWAAppPool on both DAG members, the issue is resolved immediately (OWA session re-established on refresh).
Testing so far involved opening multiple OWA sessions and activating a database copy. At that point, upon refresh of the browser the below error is shown (in all test browsers/sessions below) where I would expect any DAG member to be able to proxy
the client request to the active database server immediately (and not after several minutes).
https://netscaler_LB/owa
https://ex2013server-1/owa
https://ex2013server-2/owa

Hi Simon, I have tested with no firewall on the exchange servers and on client machines within the same subnet as the servers. All with the same results.
I can see many ASP.NET 4.0.30319.0 Event ID 1309 logs similar to this and other threads (http://social.technet.microsoft.com/Forums/windowsserver/en-US/c938dda0-b3bc-4544-851e-f27b503cf4ed/exchange-2013-event-id-1309-source-aspnet-40303190).
IIS logs show similar monitoring mailbox issues but I am still currently looking through the logs. Thanks for your input.
2014-03-30 00:00:23 127.0.0.1 POST /owa/proxylogon.owa - 444 - 127.0.0.1 Mozilla/4.0+(compatible;+MSIE+9.0;+Windows+NT+6.1;+MSEXCHMON;+ACTIVEMONITORING;+OWADEEPTEST) - 401 0 0 13
2014-03-30 00:00:23 127.0.0.1 POST /owa/proxylogon.owa - 444 - 127.0.0.1 Mozilla/4.0+(compatible;+MSIE+9.0;+Windows+NT+6.1;+MSEXCHMON;+ACTIVEMONITORING;+OWADEEPTEST) - 401 0 0 13
2014-03-30 00:00:23 127.0.0.1 POST /owa/proxylogon.owa - 444 - 127.0.0.1 Mozilla/4.0+(compatible;+MSIE+9.0;+Windows+NT+6.1;+MSEXCHMON;+ACTIVEMONITORING;+OWADEEPTEST) - 401 1 2148074254 0
2014-03-30 00:00:23 127.0.0.1 POST /owa/proxylogon.owa - 444 - 127.0.0.1 Mozilla/4.0+(compatible;+MSIE+9.0;+Windows+NT+6.1;+MSEXCHMON;+ACTIVEMONITORING;+OWADEEPTEST) - 401 1 2148074254 0
2014-03-30 00:01:23 ::1 POST /owa/proxylogon.owa &ex=UE:Microsoft.Exchange.Data.Storage.IllegalCrossServerConnectionException 444 DOMAIN\SM_3ce57cd622aa4655a ::1 Mozilla/4.0+(compatible;+MSIE+9.0;+Windows+NT+6.1;+MSEXCHMON;+ACTIVEMONITORING;+OWADEEPTEST)
- 302 0 0 47
2014-03-30 00:01:23 ::1 POST /owa/proxylogon.owa &ex=UE:Microsoft.Exchange.Data.Storage.IllegalCrossServerConnectionException 444 DOMAIN\SM_2891f9d41af2422e8 ::1 Mozilla/4.0+(compatible;+MSIE+9.0;+Windows+NT+6.1;+MSEXCHMON;+ACTIVEMONITORING;+OWADEEPTEST)
- 302 0 0 47

Object-Owner missing in Public Folder Calenders after Transition to Exchange 2013 SP1

Hi there,
we transfered all Public Folders from Exchange 2003 to 2010 to 2013 SP1. We have some Calendars with PublicFolderClientPermission Author witch includes EditOwnedItems and DeleteOwnedItems
Unfortunately the Author Rights wont work after migration. it seems like the creator of the object got lost.
since i never notices that in transitions from exchange 2003 to 2010, i think that should be related to the exchange 2013 transition.
Can anybody approve or disprove that behavior?
thanks alot

Noticed now in the Exchange 2013 Event Logs that we're getting quite a few of these warnings:
"Process <Select one exchange releated process>.exe (PID=<whatever>). Object [CN=Public Folder Database,CN=Databases,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=Contoso,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=contoso,DC=local]. Property [PublicFolderDatabase] is set to value [contoso.local/Configuration/Deleted Objects/Public Folder Database
DEL:ca62a715-05b2-4b08-ae0f-7f7c4b7e4cc3], it is pointing to the Deleted Objects container in Active Directory. This property should be fixed as soon as possible."
If i take a look at that mailbox database it's obvious that it's pointing towards the old Public Folder Database, which is quite interesting as Exchange 2013 isn't supposed to used that value at all (according to http://technet.microsoft.com/en-us/library/bb123971(v=exchg.150).aspx):
[PS] C:\Windows\system32>Get-MailboxDatabase -Identity "Mailbox database" | fl
PublicFolderDatabase : contoso.local/Configuration/Deleted Objects/Public Folder Database
DEL:ca62a715-05b2-4b08-ae0f-7f7c4b7e4cc3
I'm assuming this is what happens when messing around with ADSIEdit :) So, further ADSIEdits to set that value to null on the existing Mailboxdatabases, or anyone have any other suggestions?

Installing Exchange 2013 SP1 - Errors MSExchange ADAccess & MSExchange Common

The topology first:
AD-server + Exchange-server
What I am trying to do is just install a full version of Exchange 2013 sp1.
But the problem is that install wizard freezes on the "initializing setup" page. Also eventviewer gives 2 different error messages, MSExchange ADAccess & MSExchange Common.
MSExchange ADAccess:
The description for Event ID 4027 from source MSExchange ADAccess cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local
computer.
If the event originated on another computer, the display information had to be saved with the event.
The following information was included with the event:
ExSetup.exe
2964
Get Servers for mydomain.com
TopologyClientTcpEndpoint (localhost)
3
System.ServiceModel.EndpointNotFoundException: Could not connect to net.tcp://localhost:890/Microsoft.Exchange.Directory.TopologyService. The connection attempt lasted for a time span of 00:00:01.9984949. TCP error code 10061: No connection could be made because
the target machine actively refused it 127.0.0.1:890. ---> System.Net.Sockets.SocketException: No connection could be made because the target machine actively refused it 127.0.0.1:890
   at System.Net.Sockets.Socket.DoConnect(EndPoint endPointSnapshot, SocketAddress socketAddress)
   at System.Net.Sockets.Socket.Connect(EndPoint remoteEP)
   at System.ServiceModel.Channels.SocketConnectionInitiator.Connect(Uri uri, TimeSpan timeout)
   --- End of inner exception stack trace ---
Server stack trace:
   at System.ServiceModel.Channels.SocketConnectionInitiator.Connect(Uri uri, TimeSpan timeout)
   at System.ServiceModel.Channels.BufferedConnectionInitiator.Connect(Uri uri, TimeSpan timeout)
   at System.ServiceModel.Channels.ConnectionPoolHelper.EstablishConnection(TimeSpan timeout)
   at System.ServiceModel.Channels.ClientFramingDuplexSessionChannel.OnOpen(TimeSpan timeout)
   at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
   at System.ServiceModel.Channels.ServiceChannel.OnOpen(TimeSpan timeout)
   at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
Exception rethrown at [0]:
   at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
   at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
   at System.ServiceModel.ICommunicationObject.Open()
   at Microsoft.Exchange.Net.ServiceProxyPool`1.GetClient(Boolean useCache)
   at Microsoft.Exchange.Net.ServiceProxyPool`1.TryCallServiceWithRetry(Action`1 action, String debugMessage, WCFConnectionStateTuple proxyToUse, Int32 numberOfRetries, Boolean doNotReturnProxyOnSuccess, Exception& exception)
the message resource is present but the message is not found in the string/message table
MSExchange Common:
The description for Event ID 106 from source MSExchange Common cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
If the event originated on another computer, the display information had to be saved with the event.
The following information was included with the event:
2
Time in Resource per second
MSExchange Activity Context Resources
The exception thrown is : System.InvalidOperationException: The requested Performance Counter is not a custom counter, it has to be initialized as ReadOnly.
   at System.Diagnostics.PerformanceCounter.InitializeImpl()
   at System.Diagnostics.PerformanceCounter.get_RawValue()
   at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.get_RawValue()
Last worker process info : Last worker process info not available!
Processes running while Performance counter failed to update:
1044 VSSVC
1064 spoolsv
4032 notepad
1416 svchost
700 dwm
3100 SMSvcHost
3616 msdtc
2564 csrss
336 csrss
424 winlogon
244 smss
688 LogonUI
2556 Taskmgr
596 svchost
1124 inetinfo
1920 svchost
1652 SMSvcHost
1400 svchost
2916 taskhostex
492 lsass
2688 dwm
396 wininit
484 services
1104 svchost
388 csrss
384 svchost
1896 svchost
3052 svchost
744 svchost
1180 mmc
3404 conhost
1800 explorer
3668 Setup
552 svchost
712 svchost
2864 svchost
2964 ExSetup
2948 rdpclip
2592 winlogon
900 svchost
808 svchost
4 System
1164 mqsvc
0 Idle
Performance Counters Layout information: FileMappingNotFoundException for category MSExchange Activity Context Resources : Microsoft.Exchange.Diagnostics.FileMappingNotFoundException: Cound not open File mapping for name Global\netfxcustomperfcounters.1.0msexchange
activity context resources. Error Details: 2
   at Microsoft.Exchange.Diagnostics.FileMapping..ctor(String name, Boolean writable)
   at Microsoft.Exchange.Diagnostics.PerformanceCounterMemoryMappedFile.Initialize(String fileMappingName, Boolean writable)
   at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.GetAllInstancesLayout(String categoryName)
the message resource is present but the message is not found in the string/message table

I solved this problem or at least managed to get a workaround for it.
I tried to install Exchange using rdp connection and the installation media was mapped on my local computer. After I copied it to server itself, everything started to work and now I am able to send emails.

Event ID 106 error MSExchange Common: Performance counter updating error

I'm running Exchange Server 2013 on Windows Server 2012 R2, and each time I start the server I get an error event, ID 106, logged in the Application Log. The source is MSExchange Common and the text is:
Performance counter updating error. Counter name is Current Requests Pending, category name is MSExchange LiveIdBasicAuthentication [also MSExchangeRemotePowershell, . Optional code: 2. Exception: The exception thrown is : System.InvalidOperationException:
The requested Performance Counter is not a custom counter, it has to be initialized as ReadOnly
I used a PowerShell script to reload all the performance counters, and it seemed to work for nearly all 217 .xml files in C:\Program Files\Microsoft\Exchange Server\V15\Setup\Perf. But I still get the error when I restart the server. Any
ideas on how to fix this, what it means, or if it's safe to ignore are welcome.
Thanks!

Hi,
Please try to remove and re-create all Exchange performance counters with the following command:
add-pssnapin Microsoft.Exchange.Management.PowerShell.Setup
$files=get-childitem “C:\Program Files\Microsoft\Exchange Server\V15\Setup\Perf\" *.xml |where-object {!($_.psiscontainer)}
foreach ($file in $files) {remove-perfcounters -definitionfilename $file.fullname}
foreach ($file in $files) {new-perfcounters -definitionfilename $file.fullname}
If it doesn’t work, please check this KB.
http://support.microsoft.com/en-us/kb/2870416
Best Regards.
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
Lynn-Li
TechNet Community Support

Exchange 2013 OWA,Async,And OA error MsExchange BackEndRehydration event id 3002

Hi team,
I had issue in My Exchange system.
I had two Exchange 2013 muli role with CAS and MBX
Server A had no problem connection when client access OWA directly (https://servernamefqdn/owa)
but, theres issue when I pointing to server B OWA (https://serverBfqdn/owa). its same when outlook connect (using OA ),and Aysnc connection.
when I failed to connect OWA, theres event id 3002 MsExchange BackEndRehydration event id 3002.
the error show at Server A ( server at a good condition )
heres the error
Thanks

Hello Team,
I have a similar issue with Event ID 3002 filling up the App log on both Mailbox servers. Here is a snippet of the error. Any help is greatly appreciated. Thank you.
"Protocol /EWS failed to process request from identity DOMAIN\CASServer. Exception: Microsoft.Exchange.Security.OAuth.InvalidOAuthTokenException: The user specified by the user-context in the token is ambiguous.
   at Microsoft.Exchange.Security.OAuth.OAuthActAsUser.InternalCreateFromAttributes(OrganizationId organizationId, Boolean calledAtFrontEnd, Dictionary`2 rawAttributes, Dictionary`2 verifiedAttributes)
   at Microsoft.Exchange.Security.Authentication.BackendAuthenticator.OAuthAuthenticator.ExtractActAsUser(OrganizationId organizationId, CommonAccessToken token)
   at Microsoft.Exchange.Security.Authentication.BackendAuthenticator.OAuthAuthenticator.InternalRehydrate(CommonAccessToken token, Boolean wantAuthIdentifier, String& authIdentifier, IPrincipal& principal)
   at Microsoft.Exchange.Security.Authentication.BackendAuthenticator.Rehydrate(CommonAccessToken token, BackendAuthenticator& authenticator, Boolean wantAuthIdentifier, String& authIdentifier, IPrincipal& principal, IAccountValidationContext&
accountValidationContext)
   at Microsoft.Exchange.Security.Authentication.BackendRehydrationModule.ProcessRequest(HttpContext httpContext)
   at Microsoft.Exchange.Security.Authentication.BackendRehydrationModule.OnAuthenticateRequest(Object source, EventArgs args).

Exchange 2013 Event ID 106 MSExchange Common

Similar Messages

Maybe you are looking for