Exchange 2013 RBAC 403/log out
HI everyone
We have an issue with password resets via OWA. It was working fine, then one day it starting giving 403 errors. we reset the Virtual directories and ran repairs on dotnet4. Now if you select it, you get logged out of OWA, no 403 just logged out? Can't see
any errors on exchange. Any advise is always appreciated
Regards
Hi,
Since the issue only happens to one user and this user can access mailbox in OWA well, I think the issue should be an Outlook issue. Please create a new Outlook profile with new credentials to have a try.
Thanks,
Winnie Liang
TechNet Community Support
Similar Messages
-
Exchange 2013 and OWA and Out of Office
I can't do shit... can't even fucking log in to ECP now ffs.....
done with this shit.....
Off to be a fishing guide...... I'm not the Exchange admin yet they change something and I'm forced to figure it out. PFFTI've had several reports and it seems to be universal now. If anyone logs in to Outlook Web Access to set their Out of Office (via the gear icon in the top right) it boots them out to the login screen. This was confirmed to be working normally as recently as 2-3 weeks ago.
- It is Exchange 2013
- It doesn't matter if it's Chrome or IE
- It doesn't matter if it's their own email account, or a secondary one they may be responsible for.
Any ideas?
This topic first appeared in the Spiceworks Community -
Exchange 2013 issue / OWA time-out and WiFi/Cell problem.
Hi everybody,
I'm having some issues with an Exchange 2013 server.
When some users try to logon to the OWA page it keeps loading the page and ends with a time-out.
This only applies to 6 or 7 users, other users can login and open the page.
I tried to replace the signed certificate to solve this problem, and did a online analyzer check, most tests come out good.
I can't seem to find the source of this problem.
There are also multiple users that are having trouble to receive e-mail through the wifi on phones and tablets at home but when they switch to 3g it works fine.
You might need more information, just ask.. i don't know where to search anymore.
I tried inheritance on the AD, disabled SSL in the IIS, restarted the server, replaced the signed cert. etc.
Update:
I set the selfsigned cert in the IIS default web page,, to check if it responds to the certificate and it does, so the issue doesn't come from the certificate.
This issue probably came up after CU1, and i've read something about healthboxes..
I'm going to install CU6 and hope for good result.
Kind regards,
TimI've installed CU6, only one of the six users have gained access to OWA or ECP.
Al the other users won't get a logon screen, just a blank page.
So there is no option to insert a username or password to login, the page keeps loading and ends with "the page cannot be displayed"
But on my working spot i can open owa or ecp without any issues.
I've recreated the virtual directory for ECP and OWA with powershell, and checked the certificate.
I checked if the same certificate was connected to the back-end port 444, and this is set correct.
I even reconnected the cert on 444 with the following.
Open the Command Prompt
Run-
netsh http show sslcert
This will show the certs, copy and paste this information into notepad. Under IP:port : 127.0.0.1:443, note the certificate hash and application ID.
Run this command- (Yes, I know there is no :444 listed in the output from the earlier command.)
netsh http delete sslcert ipport=0.0.0.0:444
Run this command. Replace certhas with the certificate hash and appid with the application ID you saved in notepad.
netsh http add sslcert ipport=0.0.0.0:444 certhash=123123123123123 appid="{123123123123-1231231235}"
I used powershell to set the login authentication,
et-Owavirtualdirectory -identity "YourMailBoxServerName\owa (Exchange Back End)" -WindowsAuthentication $True -Basicauthentication $false -Formsauthentication $false
set-Owavirtualdirectory -identity "YourCASserverName\owa (Default Web Site)" -WindowsAuthentication $True -Basicauthentication $false -Formsauthentication $false
and iisreset /noforce
I unchecked the "require SSL" on the default website and left it enabled on the owa and ecp etc.
Checked if HTTP over Proxy is installed, but this one is need to install exchange 2013.
I've checked all ECP/OWA directories in in the IIS, the directories point to the Exchange V15 folders, this should be correct.
Something is really broken, i really can use the help..
I'm going to try to install Exchange 2013 SP1, but i don't know if this one is needed when CU6 has been installed.
The strange thing is, it seem to be location based, not user based.
I can login perfectly, but when i try this at one of the employees, it ends up blank.
When i try to connect on a location dat does not work, at the exact time i press the enter-key to open the page, the eventviewer logs the following:
Event 4634 - An account was logged off.
For the issue on the smartphones and tablets, everything worked fine a few months ago, and happens to users on different ISP connections.
I already checked the inheritance settings on the users in the AD.
Kind regards,
Tim -
Exchange 2013 - Search SMTPReceive logs on CAS
Is there a sensible way to search the SMTP Receive protocol logs on the client access servers? The Get-MessageTrackingLog cmdlet only searches the mailbox servers, but I need to be able to look at what's connecting to the CAS sometimes and manipulate
those logs. The transport logs are entirely too verbose for some of my needs.
I've been parsing the logs via PowerShell using some form of these piped commands I've put together, and it's certainly functional, but I can't help but feel that I'm doing things the hard way.
Get-ChildItem -Path 'C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\Logs\FrontEnd\ProtocolLog\SmtpReceive\*' -Include '*.LOG' |
Where-Object -Filter {$_.LastWriteTime -gt (Get-Date).AddDays(-1)} |
Sort-Object -Property 'LastWriteTime' |
Get-Content |
Where-Object -Filter {$_ -like '*,530 5.7.1 Client was not authenticated,*'} |
ConvertFrom-Csv -Header 'date-time','connector-id','session-id','sequence-number','local-endpoint','remote-endpoint','event','data','context' |
ForEach-Object -Process {
[void]($_.'local-endpoint' -match '(.*):([0-9]*)$')
$lip = [IPAddress]$Matches[1]
$lport = [Int]$Matches[2]
[void]($_.'remote-endpoint' -match '(.*):([0-9]*)$')
New-Object -TypeName PSObject -Property @{
'date-time' = [datetime]$_.'date-time';
'connector-id' = [string]$_.'connector-id';
'session-id' = [string]$_.'session-id';
'sequence-number' = [int]$_.'sequence-number';
'local-endpoint' = [string]$_.'local-endpoint';
'local-endpoint-ip' = $lip;
'local-endpoint-port' = $lport;
'remote-endpoint' = $_.[string]'remote-endpoint';
'remote-endpoint-ip' = [IPAddress]$Matches[1];
'remote-endpoint-port' = $rport = [Int]$Matches[2];
'event' = [string]$_.'event';
'data' = [string]$_.'data';
'context' = [string]$_.'context'
} |
Format-Table -Property 'date-time','remote-endpoint-ip','data'Hi
There will be 4 types of message tracking logs in Exchange 2013 unlike in Exchange 2010 we have only 2.
•MSGTRK These logs are associated with the Transport service.
•MSGTRKMA These logs are associated with the approvals and rejections used by moderated transport. For more information, see Moderated Transport.
•MSGTRKMD These logs are associated with messages delivered to mailboxes by the Mailbox Transport Delivery service.
•MSGTRKMS These logs are associated with messages sent from mailboxes by the Mailbox Transport Submission service
For protocol logs
We just need to navigate to the below location alone in Exchange 2013 and copy the receive connector logs which will be identical to analyze the protocol logs via excel.
“C:\program files\Microsoft\Exchange Server\V15\TransportRoles\Logs\Hub\ProtocolLog\SmtpReceive”
You can refer my blog as well
http://exchangequery.com/2014/02/21/analyzing-the-protocol-logs-and-message-tracking-logs-in-exchange-2013/
Cheers !!
Remember to mark as helpful if you find my contribution useful or as an answer if it does answer your question.That will encourage me - and others - to take time out to help you Check out my latest blog posts on http://exchangequery.com Thanks Sathish
(MVP) -
After upgrading to CU6 for Exchange 2013, the Application event log is flooded with MSExhange Common error 106: Performance counter updating error. Counter name is Time in Resource per second, category name is MSExchange Activity Context Resources. Optional
code: 2. Exception: The exception thrown is : System.InvalidOperationException: Instance 'ad-powershell-defaultdomain' already exists with a lifetime of Process. It cannot be recreated or reused until it has been removed or until the process using it
has exited.
at System.Diagnostics.SharedPerformanceCounter.FindInstance(Int32 instanceNameHashCode, String instanceName, CategoryEntry* categoryPointer, InstanceEntry** returnInstancePointerReference, Boolean activateUnusedInstances, PerformanceCounterInstanceLifetime
lifetime, Boolean& foundFreeInstance)
at System.Diagnostics.SharedPerformanceCounter.GetCounter(String counterName, String instanceName, Boolean enableReuse, PerformanceCounterInstanceLifetime lifetime)
at System.Diagnostics.SharedPerformanceCounter..ctor(String catName, String counterName, String instanceName, PerformanceCounterInstanceLifetime lifetime)
at System.Diagnostics.PerformanceCounter.InitializeImpl()
at System.Diagnostics.PerformanceCounter.get_RawValue()
at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.get_RawValue()
Last worker process info : System.ArgumentException: Process with an Id of 4776 is not running.
at System.Diagnostics.Process.GetProcessById(Int32 processId)
at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.GetLastWorkerProcessInfo()
Processes running while Performance counter failed to update:
14256 winlogon
15748 powershell
6524 Microsoft.Exchange.UM.CallRouter
5904 w3wp
584 lsass
780 LogonUI
4324 MSExchangeFrontendTransport
6292 Microsoft.Exchange.Store.Worker
2744 WmiPrvSE
576 services
3136 MonitoringHost
12568 svchost
1360 hostcontrollerservice
8648 WmiPrvSE
1752 SMSvcHost
1160 spoolsv
1356 sftracing
9528 TiWorker
10444 explorer
2732 w3wp
14908 WmiPrvSE
3124 Microsoft.Exchange.Store.Worker
4696 Microsoft.Exchange.Store.Service
4892 MSExchangeMailboxAssistants
12208 w3wp
15740 powershell
2128 WMSvc
748 rundll32
8232 w3wp
8400 svchost
3700 MonitoringHost
15716 powershell
5864 MSExchangeThrottling
2908 w3wp
4088 Microsoft.Exchange.EdgeSyncSvc
5660 scanningprocess
2292 wuauclt
5656 umservice
6044 scanningprocess
4076 noderunner
1908 MSExchangeHMHost
2892 Microsoft.Exchange.AntispamUpdateSvc
3876 noderunner
3676 MSExchangeMailboxReplication
15732 powershell
2096 svchost
7096 UMWorkerProcess
516 winlogon
908 svchost
1296 HealthService
1492 svchost
2824 w3wp
12324 dwm
1560 ForefrontActiveDirectoryConnector
304 smss
10820 w3wp
8464 svchost
888 Microsoft.Exchange.ContentFilter.Wrapper
5024 msexchangerepl
488 wininit
8564 taskhostex
5272 Microsoft.Exchange.ServiceHost
3832 noderunner
10088 w3wp
480 csrss
7920 conhost
872 svchost
5992 scanningprocess
4808 msdtc
8352 dllhost
860 TrustedInstaller
4008 rundll32
4400 conhost
656 svchost
9828 w3wp
1832 noderunner
4392 MSExchangeHMWorker
1828 mqsvc
700 svchost
1628 Microsoft.Exchange.Diagnostics.Service
3596 w3wp
2220 Microsoft.Exchange.Directory.TopologyService
1820 MSExchangeDelivery
7532 MSExchangeTransport
13372 svchost
832 svchost
9696 conhost
8316 svchost
1580 dllhost
3980 Microsoft.Exchange.RpcClientAccess.Service
8788 VSSVC
5948 MSExchangeTransportLogSearch
2992 MSExchangeDagMgmt
10632 csrss
1216 fms
3776 rundll32
5356 MSExchangeSubmission
7908 EdgeTransport
11576 w3wp
1600 inetinfo
1008 svchost
416 csrss
808 svchost
7608 w3wp
1588 updateservice
4148 Microsoft.Exchange.Search.Service
640 w3wp
796 dwm
2568 SMSvcHost
1188 svchost
4 System
3484 rdpclip
0 Idle
Performance Counters Layout information: A process is holding onto a transport performance counter. processId : 15716, counter : time in resource per second Value=30 SpinLock=0 Lifetime=Type: 1 ProcessId: 15716 StartupTime: 130608376318179644, currentInstance
: ad-powershell-defaultdomain(95CC324A) RefCount=1 SpinLock=0 Offset=38216, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 15716, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 15716 StartupTime: 130608376318179644, currentInstance : mb-powershell-defaultdomain(CC014C00)
RefCount=1 SpinLock=0 Offset=37888, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 15716, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 15716 StartupTime: 130608376318179644, currentInstance : rpca-powershell-defaultdomain(4598AFAF)
RefCount=1 SpinLock=0 Offset=37560, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3596, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3596 StartupTime: 130608368805385179, currentInstance : rpca-w3wp-msexchangemapimailboxapppool(E28F3117)
RefCount=1 SpinLock=0 Offset=37232, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3596, counter : time in resource per second Value=86 SpinLock=0 Lifetime=Type: 1 ProcessId: 3596 StartupTime: 130608368805385179, currentInstance : mb-w3wp-msexchangemapimailboxapppool(F9439F58)
RefCount=1 SpinLock=0 Offset=36904, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3596, counter : time in resource per second Value=301 SpinLock=0 Lifetime=Type: 1 ProcessId: 3596 StartupTime: 130608368805385179, currentInstance : ad-w3wp-msexchangemapimailboxapppool(35491652)
RefCount=1 SpinLock=0 Offset=36576, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 10088, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10088 StartupTime: 130608368435182301, currentInstance : rpca-w3wp-msexchangemapifrontendapppool(2C7F2005)
RefCount=1 SpinLock=0 Offset=36248, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 10088, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10088 StartupTime: 130608368435182301, currentInstance : mb-w3wp-msexchangemapifrontendapppool(BE5C2DAA)
RefCount=1 SpinLock=0 Offset=35920, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 10088, counter : time in resource per second Value=50 SpinLock=0 Lifetime=Type: 1 ProcessId: 10088 StartupTime: 130608368435182301, currentInstance : ad-w3wp-msexchangemapifrontendapppool(C0FDFAE0)
RefCount=1 SpinLock=0 Offset=35592, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 640, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 640 StartupTime: 130608368405334576, currentInstance : rpca-w3wp-msexchangeowacalendarapppool(8F10D1B5)
RefCount=1 SpinLock=0 Offset=35264, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 640, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 640 StartupTime: 130608368405334576, currentInstance : mb-w3wp-msexchangeowacalendarapppool(2D8C9EBA)
RefCount=1 SpinLock=0 Offset=34936, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 640, counter : time in resource per second Value=75 SpinLock=0 Lifetime=Type: 1 ProcessId: 640 StartupTime: 130608368405334576, currentInstance : ad-w3wp-msexchangeowacalendarapppool(D845E230)
RefCount=1 SpinLock=0 Offset=34608, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 12208, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 12208 StartupTime: 130608368146087354, currentInstance : rpca-w3wp-msexchangeautodiscoverapppool(6DABF262)
RefCount=1 SpinLock=0 Offset=34280, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 12208, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 12208 StartupTime: 130608368146087354, currentInstance : mb-w3wp-msexchangeautodiscoverapppool(D1C6EF4D)
RefCount=1 SpinLock=0 Offset=33952, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 12208, counter : time in resource per second Value=1002 SpinLock=0 Lifetime=Type: 1 ProcessId: 12208 StartupTime: 130608368146087354, currentInstance : ad-w3wp-msexchangeautodiscoverapppool(FD072087)
RefCount=1 SpinLock=0 Offset=33624, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 11576, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 11576 StartupTime: 130608368080143532, currentInstance : rpca-w3wp-msexchangeecpapppool(57806648)
RefCount=1 SpinLock=0 Offset=33296, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 11576, counter : time in resource per second Value=204 SpinLock=0 Lifetime=Type: 1 ProcessId: 11576 StartupTime: 130608368080143532, currentInstance : mb-w3wp-msexchangeecpapppool(E27E6507)
RefCount=1 SpinLock=0 Offset=32968, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 11576, counter : time in resource per second Value=1804 SpinLock=0 Lifetime=Type: 1 ProcessId: 11576 StartupTime: 130608368080143532, currentInstance : ad-w3wp-msexchangeecpapppool(B648688D)
RefCount=1 SpinLock=0 Offset=32640, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 10820, counter : time in resource per second Value=64 SpinLock=0 Lifetime=Type: 1 ProcessId: 10820 StartupTime: 130608368364391554, currentInstance : ad-w3wp-msexchangeoabapppool(CC31A917)
RefCount=1 SpinLock=0 Offset=32312, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 10820, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10820 StartupTime: 130608368364391554, currentInstance : mb-w3wp-msexchangeoabapppool(58D0A79D)
RefCount=1 SpinLock=0 Offset=31984, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 10820, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10820 StartupTime: 130608368364391554, currentInstance : rpca-w3wp-msexchangeoabapppool(8149E8D2)
RefCount=1 SpinLock=0 Offset=31656, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7608, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7608 StartupTime: 130608367931073979, currentInstance : rpca-w3wp-msexchangeowaapppool(4AA799E7)
RefCount=1 SpinLock=0 Offset=31328, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7608, counter : time in resource per second Value=792 SpinLock=0 Lifetime=Type: 1 ProcessId: 7608 StartupTime: 130608367931073979, currentInstance : mb-w3wp-msexchangeowaapppool(C3953468)
RefCount=1 SpinLock=0 Offset=31000, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7608, counter : time in resource per second Value=2537 SpinLock=0 Lifetime=Type: 1 ProcessId: 7608 StartupTime: 130608367931073979, currentInstance : ad-w3wp-msexchangeowaapppool(160BE662)
RefCount=1 SpinLock=0 Offset=30672, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5904, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5904 StartupTime: 130608367955918049, currentInstance : rpca-w3wp-msexchangepowershellapppool(3CF18BF)
RefCount=1 SpinLock=0 Offset=30344, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5904, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5904 StartupTime: 130608367955918049, currentInstance : mb-w3wp-msexchangepowershellapppool(A686C810)
RefCount=1 SpinLock=0 Offset=30016, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5904, counter : time in resource per second Value=2178 SpinLock=0 Lifetime=Type: 1 ProcessId: 5904 StartupTime: 130608367955918049, currentInstance : ad-w3wp-msexchangepowershellapppool(9E48CD5A)
RefCount=1 SpinLock=0 Offset=29688, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3832, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3832 StartupTime: 130608365723574632, currentInstance : rpca-noderunner-contentenginenode1(316BF6E3)
RefCount=1 SpinLock=0 Offset=29360, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3832, counter : time in resource per second Value=1148 SpinLock=0 Lifetime=Type: 1 ProcessId: 3832 StartupTime: 130608365723574632, currentInstance : mb-noderunner-contentenginenode1(2EE8286C)
RefCount=1 SpinLock=0 Offset=29032, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3832, counter : time in resource per second Value=322 SpinLock=0 Lifetime=Type: 1 ProcessId: 3832 StartupTime: 130608365723574632, currentInstance : ad-noderunner-contentenginenode1(61591E6)
RefCount=1 SpinLock=0 Offset=28704, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 8232, counter : time in resource per second Value=73 SpinLock=0 Lifetime=Type: 1 ProcessId: 8232 StartupTime: 130608367954980517, currentInstance : ad-w3wp-msexchangepowershellfrontendapppool(FAEFA1B4)
RefCount=1 SpinLock=0 Offset=28376, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 8232, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 8232 StartupTime: 130608367954980517, currentInstance : mb-w3wp-msexchangepowershellfrontendapppool(34B9187E)
RefCount=1 SpinLock=0 Offset=28048, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 8232, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 8232 StartupTime: 130608367954980517, currentInstance : rpca-w3wp-msexchangepowershellfrontendapppool(E1115251)
RefCount=1 SpinLock=0 Offset=27720, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 9828, counter : time in resource per second Value=909 SpinLock=0 Lifetime=Type: 1 ProcessId: 9828 StartupTime: 130608367291344391, currentInstance : ad-w3wp-msexchangerpcproxyapppool(99BB8ED6)
RefCount=1 SpinLock=0 Offset=27392, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 9828, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 9828 StartupTime: 130608367291344391, currentInstance : mb-w3wp-msexchangerpcproxyapppool(B190F21C)
RefCount=1 SpinLock=0 Offset=27064, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 9828, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 9828 StartupTime: 130608367291344391, currentInstance : rpca-w3wp-msexchangerpcproxyapppool(8B7590B3)
RefCount=1 SpinLock=0 Offset=26736, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7908, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7908 StartupTime: 130608366316230865, currentInstance : rpca-edgetransport-edgetransport.exe(911B6EB3)
RefCount=1 SpinLock=0 Offset=26408, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7908, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7908 StartupTime: 130608366316230865, currentInstance : mb-edgetransport-edgetransport.exe(A5AF4BBC)
RefCount=1 SpinLock=0 Offset=26080, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7908, counter : time in resource per second Value=679 SpinLock=0 Lifetime=Type: 1 ProcessId: 7908 StartupTime: 130608366316230865, currentInstance : ad-edgetransport-edgetransport.exe(E79D4A36)
RefCount=1 SpinLock=0 Offset=25752, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7096, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7096 StartupTime: 130608366107949622, currentInstance : rpca-umworkerprocess-umworkerprocess.exe(970CCE33)
RefCount=1 SpinLock=0 Offset=25424, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7096, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7096 StartupTime: 130608366107949622, currentInstance : mb-umworkerprocess-umworkerprocess.exe(8A7F8A3C)
RefCount=1 SpinLock=0 Offset=25096, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7096, counter : time in resource per second Value=89 SpinLock=0 Lifetime=Type: 1 ProcessId: 7096 StartupTime: 130608366107949622, currentInstance : ad-umworkerprocess-umworkerprocess.exe(95818B6)
RefCount=1 SpinLock=0 Offset=24768, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7532, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7532 StartupTime: 130608366287637157, currentInstance : rpca-msexchangetransport-msexchangetransport.exe(24F56C33)
RefCount=1 SpinLock=0 Offset=24440, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7532, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7532 StartupTime: 130608366287637157, currentInstance : mb-msexchangetransport-msexchangetransport.exe(92FB3D3C)
RefCount=1 SpinLock=0 Offset=24112, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7532, counter : time in resource per second Value=12 SpinLock=0 Lifetime=Type: 1 ProcessId: 7532 StartupTime: 130608366287637157, currentInstance : ad-msexchangetransport-msexchangetransport.exe(2447ECB6)
RefCount=1 SpinLock=0 Offset=23784, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 6292, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6292 StartupTime: 130608366134668487, currentInstance : rpca-microsoft.exchange.store.worker-microsoft.exchange.store.worker.exe(ABB009B3)
RefCount=1 SpinLock=0 Offset=23456, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 6292, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6292 StartupTime: 130608366134668487, currentInstance : mb-microsoft.exchange.store.worker-microsoft.exchange.store.worker.exe(38BA31BC)
RefCount=1 SpinLock=0 Offset=23128, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 6292, counter : time in resource per second Value=704 SpinLock=0 Lifetime=Type: 1 ProcessId: 6292 StartupTime: 130608366134668487, currentInstance : ad-microsoft.exchange.store.worker-microsoft.exchange.store.worker.exe(11106236)
RefCount=1 SpinLock=0 Offset=22800, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 6524, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6524 StartupTime: 130608366054199628, currentInstance : rpca-microsoft.exchange.um.callrouter-microsoft.exchange.um.callrouter.exe(E8475353)
RefCount=1 SpinLock=0 Offset=22472, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 6524, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6524 StartupTime: 130608366054199628, currentInstance : mb-microsoft.exchange.um.callrouter-microsoft.exchange.um.callrouter.exe(8F65881C)
RefCount=1 SpinLock=0 Offset=22144, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 6524, counter : time in resource per second Value=40 SpinLock=0 Lifetime=Type: 1 ProcessId: 6524 StartupTime: 130608366054199628, currentInstance : ad-microsoft.exchange.um.callrouter-microsoft.exchange.um.callrouter.exe(78F52196)
RefCount=1 SpinLock=0 Offset=21816, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5656, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5656 StartupTime: 130608365987637119, currentInstance : rpca-umservice-umservice.exe(E39A1133)
RefCount=1 SpinLock=0 Offset=21488, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5656, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5656 StartupTime: 130608365987637119, currentInstance : mb-umservice-umservice.exe(FFBB273C) RefCount=1
SpinLock=0 Offset=21160, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5656, counter : time in resource per second Value=45 SpinLock=0 Lifetime=Type: 1 ProcessId: 5656 StartupTime: 130608365987637119, currentInstance : ad-umservice-umservice.exe(9A8AC6B6) RefCount=1
SpinLock=0 Offset=20832, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5948, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5948 StartupTime: 130608365970762140, currentInstance : rpca-msexchangetransportlogsearch-msexchangetransportlogsearch.exe(EF66F2D3)
RefCount=1 SpinLock=0 Offset=20504, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5948, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5948 StartupTime: 130608365970762140, currentInstance : mb-msexchangetransportlogsearch-msexchangetransportlogsearch.exe(B020391C)
RefCount=1 SpinLock=0 Offset=20176, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5948, counter : time in resource per second Value=28 SpinLock=0 Lifetime=Type: 1 ProcessId: 5948 StartupTime: 130608365970762140, currentInstance : ad-msexchangetransportlogsearch-msexchangetransportlogsearch.exe(20578116)
RefCount=1 SpinLock=0 Offset=19848, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5864, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5864 StartupTime: 130608365966074661, currentInstance : rpca-msexchangethrottling-msexchangethrottling.exe(8C1DA893)
RefCount=1 SpinLock=0 Offset=19520, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5864, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5864 StartupTime: 130608365966074661, currentInstance : mb-msexchangethrottling-msexchangethrottling.exe(AB2BADDC)
RefCount=1 SpinLock=0 Offset=19192, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5864, counter : time in resource per second Value=8 SpinLock=0 Lifetime=Type: 1 ProcessId: 5864 StartupTime: 130608365966074661, currentInstance : ad-msexchangethrottling-msexchangethrottling.exe(8962F4D6)
RefCount=1 SpinLock=0 Offset=18864, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5356, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5356 StartupTime: 130608365930918390, currentInstance : rpca-msexchangesubmission-msexchangesubmission.exe(60747EB3)
RefCount=1 SpinLock=0 Offset=18536, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5356, counter : time in resource per second Value=400 SpinLock=0 Lifetime=Type: 1 ProcessId: 5356 StartupTime: 130608365930918390, currentInstance : mb-msexchangesubmission-msexchangesubmission.exe(67B4173C)
RefCount=1 SpinLock=0 Offset=18208, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5356, counter : time in resource per second Value=390 SpinLock=0 Lifetime=Type: 1 ProcessId: 5356 StartupTime: 130608365930918390, currentInstance : ad-msexchangesubmission-msexchangesubmission.exe(85200236)
RefCount=1 SpinLock=0 Offset=17880, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3980, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3980 StartupTime: 130608365902793374, currentInstance : rpca-microsoft.exchange.rpcclientaccess.service-microsoft.exchange.rpcclientaccess.service.exe(E4305E13)
RefCount=1 SpinLock=0 Offset=17552, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3980, counter : time in resource per second Value=15105 SpinLock=0 Lifetime=Type: 1 ProcessId: 3980 StartupTime: 130608365902793374, currentInstance : mb-microsoft.exchange.rpcclientaccess.service-microsoft.exchange.rpcclientaccess.service.exe(BBA60BDC)
RefCount=1 SpinLock=0 Offset=17224, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3980, counter : time in resource per second Value=1570 SpinLock=0 Lifetime=Type: 1 ProcessId: 3980 StartupTime: 130608365902793374, currentInstance : ad-microsoft.exchange.rpcclientaccess.service-microsoft.exchange.rpcclientaccess.service.exe(B6581E56)
RefCount=1 SpinLock=0 Offset=16896, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3676, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3676 StartupTime: 130608365883887116, currentInstance : rpca-msexchangemailboxreplication-msexchangemailboxreplication.exe(276F4DB3)
RefCount=1 SpinLock=0 Offset=16568, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3676, counter : time in resource per second Value=55 SpinLock=0 Lifetime=Type: 1 ProcessId: 3676 StartupTime: 130608365883887116, currentInstance : mb-msexchangemailboxreplication-msexchangemailboxreplication.exe(95E41BC)
RefCount=1 SpinLock=0 Offset=16240, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3676, counter : time in resource per second Value=1045 SpinLock=0 Lifetime=Type: 1 ProcessId: 3676 StartupTime: 130608365883887116, currentInstance : ad-msexchangemailboxreplication-msexchangemailboxreplication.exe(394712B6)
RefCount=1 SpinLock=0 Offset=15912, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5272, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5272 StartupTime: 130608365924980876, currentInstance : rpca-microsoft.exchange.servicehost-microsoft.exchange.servicehost.exe(39C8D53)
RefCount=1 SpinLock=0 Offset=15584, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5272, counter : time in resource per second Value=13 SpinLock=0 Lifetime=Type: 1 ProcessId: 5272 StartupTime: 130608365924980876, currentInstance : mb-microsoft.exchange.servicehost-microsoft.exchange.servicehost.exe(E7963A1C)
RefCount=1 SpinLock=0 Offset=15256, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5272, counter : time in resource per second Value=1004 SpinLock=0 Lifetime=Type: 1 ProcessId: 5272 StartupTime: 130608365924980876, currentInstance : ad-microsoft.exchange.servicehost-microsoft.exchange.servicehost.exe(10E8B196)
RefCount=1 SpinLock=0 Offset=14928, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 4892, counter : time in resource per second Value=2260 SpinLock=0 Lifetime=Type: 1 ProcessId: 4892 StartupTime: 130608365821855891, currentInstance : rpca-msexchangemailboxassistants-msexchangemailboxassistants.exe(DEAC0933)
RefCount=1 SpinLock=0 Offset=14600, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 4892, counter : time in resource per second Value=19900 SpinLock=0 Lifetime=Type: 1 ProcessId: 4892 StartupTime: 130608365821855891, currentInstance : mb-msexchangemailboxassistants-msexchangemailboxassistants.exe(A754293C)
RefCount=1 SpinLock=0 Offset=14272, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 4892, counter : time in resource per second Value=3491 SpinLock=0 Lifetime=Type: 1 ProcessId: 4892 StartupTime: 130608365821855891, currentInstance : ad-msexchangemailboxassistants-msexchangemailboxassistants.exe(EE890EB6)
RefCount=1 SpinLock=0 Offset=13944, categoryName...This error is not resolved in CU8.
[PS] C:\>Get-ExchangeServer | fl *version*
AdminDisplayVersion : Version 15.0 (Build 1076.9)
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="MSExchange Common" />
<EventID Qualifiers="49156">106</EventID>
<Level>2</Level>
<Task>1</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2015-04-15T10:14:22.000000000Z" />
<EventRecordID>11366785</EventRecordID>
<Channel>Application</Channel>
<Computer>EX1.domain.com</Computer>
<Security />
</System>
- <EventData>
<Data>2</Data>
<Data>Time in Resource per second</Data>
<Data>MSExchange Activity Context Resources</Data>
<Data>The exception thrown is : System.InvalidOperationException: Instance 'ad-powershell-defaultdomain' already exists with a lifetime of Process. It cannot be recreated or reused until it has been removed or until the process using it has exited. at System.Diagnostics.SharedPerformanceCounter.FindInstance(Int32 instanceNameHashCode, String instanceName, CategoryEntry* categoryPointer, InstanceEntry** returnInstancePointerReference, Boolean activateUnusedInstances, PerformanceCounterInstanceLifetime lifetime, Boolean& foundFreeInstance) at System.Diagnostics.SharedPerformanceCounter.GetCounter(String counterName, String instanceName, Boolean enableReuse, PerformanceCounterInstanceLifetime lifetime) at System.Diagnostics.SharedPerformanceCounter..ctor(String catName, String counterName, String instanceName, PerformanceCounterInstanceLifetime lifetime) at System.Diagnostics.PerformanceCounter.InitializeImpl() at System.Diagnostics.PerformanceCounter.get_RawValue() at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.get_RawValue() Last worker process info : System.ArgumentException: Process with an Id of 884 is not running. at System.Diagnostics.Process.GetProcessById(Int32 processId) at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.GetLastWorkerProcessInfo() Processes running while Performance counter failed to update: 15084 w3wp 16804 powershell 16368 SCNotification 21108 conhost 22744 dllhost 17224 conhost 844 MsMpEng 21100 conhost 5580 taskhostex 1724 Microsoft.Exchange.Diagnostics.Service 3852 MSExchangeDagMgmt 13764 MonitoringHost 1264 fms 832 LogonUI 25828 mmc 1688 inetinfo 7900 Microsoft.Exchange.Store.Worker 3840 rundll32 1252 SMSvcHost 15040 msseces 3916 w3wp 1676 svchost 2968 Microsoft.Exchange.Directory.TopologyService 14600 explorer 5548 MSExchangeMailboxReplication 1236 svchost 5976 scanningprocess 2096 WMSvc 2200 w3wp 13376 WmiPrvSE 19472 powershell 8116 umservice 24492 powershell 24060 conhost 7204 MSExchangeTransportLogSearch 1812 WmiPrvSE 16348 w3wp 10260 svchost 2496 conhost 3784 Microsoft.Exchange.AntispamUpdateSvc 9932 Microsoft.Exchange.ContentFilter.Wrapper 16280 conhost 2056 svchost 1192 spoolsv 2052 noderunner 320 smss 5920 scanningprocess 11152 ParserServer 8068 UMWorkerProcess 3756 conhost 304 svchost 2888 w3wp 732 svchost 1900 winlogon 14948 w3wp 22700 noderunner 2872 updateservice 2000 w3wp 700 svchost 1992 mqsvc 4128 Microsoft.Exchange.EdgeSyncSvc 28636 ParserServer 17912 conhost 20652 ParserServer 1960 svchost 14168 msdtc 11436 ParserServer 19192 ParserServer 4536 Microsoft.Exchange.Imap4Service 16168 WmiPrvSE 10132 w3wp 27800 noderunner 25644 mmc 2452 ParserServer 640 lsass 1932 svchost 632 services 3216 ForefrontActiveDirectoryConnector 17436 svchost 4504 Microsoft.Exchange.Store.Service 4500 ParserServer 2772 WmiPrvSE 28200 dllhost 10528 VSSVC 10520 dllhost 7932 Microsoft.Exchange.Store.Worker 1032 rundll32 1920 sftracing 7492 Microsoft.Exchange.Store.Worker 14384 rdpclip 26016 conhost 24464 powershell 13332 MSExchangeHMHost 1008 svchost 10920 csrss 7040 MSExchangeThrottling 3160 MSExchangeTransport 1004 svchost 572 winlogon 7464 Microsoft.Exchange.Store.Worker 10880 WmiPrvSE 7892 Microsoft.Exchange.Store.Worker 12632 CcmExec 992 svchost 10904 WmiPrvSE 4868 Microsoft.Exchange.Imap4Service 6160 w3wp 14348 conhost 8312 dllhost 14776 w3wp 13480 dwm 5720 Microsoft.Exchange.Pop3 544 wininit 7008 Microsoft.Exchange.UM.CallRouter 4420 Microsoft.Exchange.Imap4 6140 Microsoft.Exchange.Pop3 5764 Microsoft.Exchange.Pop3Service 964 svchost 7428 Microsoft.Exchange.Store.Worker 13580 MonitoringHost 25096 noderunner 5700 scanningprocess 13456 conhost 24656 MSExchangeMailboxAssistants 5260 Microsoft.Exchange.RpcClientAccess.Service 6080 Microsoft.Exchange.Search.Service 11288 powershell 3960 MSExchangeDelivery 4440 MSExchangeFrontendTransport 6112 Microsoft.Exchange.Store.Worker 12712 ParserServer 5248 conhost 1368 HealthService 6536 MSExchangeSubmission 26076 conhost 3084 rundll32 6100 Microsoft.Exchange.Pop3Service 24200 conhost 536 csrss 7812 Microsoft.Exchange.Store.Worker 10396 svchost 10824 conhost 21596 MSExchangeHMWorker 7416 Microsoft.Exchange.Store.Worker 852 dwm 7368 Microsoft.Exchange.Store.Worker 468 csrss 17552 conhost 2260 SMSvcHost 12100 CmRcService 4772 Microsoft.Exchange.Imap4 10372 ParserServer 3044 EdgeTransport 4760 conhost 14672 svchost 15100 hostcontrollerservice 6048 msexchangerepl 5616 Microsoft.Exchange.Store.Worker 436 svchost 4 System 6408 Microsoft.Exchange.ServiceHost 0 Idle Performance Counters Layout information: A process is holding onto a transport performance counter. processId : 23084, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 23084 StartupTime: 130735656036583286, currentInstance : rpca-e14cmdletswrapper-defaultdomain(B61B0DD9) RefCount=0 SpinLock=0 Offset=40184, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 23084, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 23084 StartupTime: 130735656036583286, currentInstance : mb-e14cmdletswrapper-defaultdomain(290EF16) RefCount=0 SpinLock=0 Offset=39856, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 23084, counter : time in resource per second Value=102 SpinLock=0 Lifetime=Type: 1 ProcessId: 23084 StartupTime: 130735656036583286, currentInstance : ad-e14cmdletswrapper-defaultdomain(2CDA669C) RefCount=0 SpinLock=0 Offset=39528, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 11288, counter : time in resource per second Value=81 SpinLock=0 Lifetime=Type: 1 ProcessId: 11288 StartupTime: 130735664378248405, currentInstance : ad-powershell-defaultdomain(95CC324A) RefCount=1 SpinLock=0 Offset=39200, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 11288, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 11288 StartupTime: 130735664378248405, currentInstance : mb-powershell-defaultdomain(CC014C00) RefCount=1 SpinLock=0 Offset=38872, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 11288, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 11288 StartupTime: 130735664378248405, currentInstance : rpca-powershell-defaultdomain(4598AFAF) RefCount=1 SpinLock=0 Offset=38544, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 3044, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3044 StartupTime: 130732607834359955, currentInstance : rpca-edgetransport-edgetransport.exe(911B6EB3) RefCount=1 SpinLock=0 Offset=38216, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 3044, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3044 StartupTime: 130732607834359955, currentInstance : mb-edgetransport-edgetransport.exe(A5AF4BBC) RefCount=1 SpinLock=0 Offset=37888, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 3044, counter : time in resource per second Value=400734 SpinLock=0 Lifetime=Type: 1 ProcessId: 3044 StartupTime: 130732607834359955, currentInstance : ad-edgetransport-edgetransport.exe(E79D4A36) RefCount=1 SpinLock=0 Offset=37560, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 2200, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 2200 StartupTime: 130730082646643505, currentInstance : rpca-w3wp-msexchangeowaapppool(4AA799E7) RefCount=0 SpinLock=0 Offset=37232, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 2200, counter : time in resource per second Value=280053 SpinLock=0 Lifetime=Type: 1 ProcessId: 2200 StartupTime: 130730082646643505, currentInstance : mb-w3wp-msexchangeowaapppool(C3953468) RefCount=0 SpinLock=0 Offset=36904, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 2200, counter : time in resource per second Value=142126 SpinLock=0 Lifetime=Type: 1 ProcessId: 2200 StartupTime: 130730082646643505, currentInstance : ad-w3wp-msexchangeowaapppool(160BE662) RefCount=0 SpinLock=0 Offset=36576, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 14776, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 14776 StartupTime: 130730081973252112, currentInstance : rpca-w3wp-msexchangepowershellapppool(3CF18BF) RefCount=0 SpinLock=0 Offset=36248, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 14776, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 14776 StartupTime: 130730081973252112, currentInstance : mb-w3wp-msexchangepowershellapppool(A686C810) RefCount=0 SpinLock=0 Offset=35920, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 14776, counter : time in resource per second Value=2068875 SpinLock=0 Lifetime=Type: 1 ProcessId: 14776 StartupTime: 130730081973252112, currentInstance : ad-w3wp-msexchangepowershellapppool(9E48CD5A) RefCount=0 SpinLock=0 Offset=35592, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 15084, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 15084 StartupTime: 130730081886009912, currentInstance : rpca-w3wp-msexchangeoabapppool(8149E8D2) RefCount=0 SpinLock=0 Offset=35264, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 15084, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 15084 StartupTime: 130730081886009912, currentInstance : mb-w3wp-msexchangeoabapppool(58D0A79D) RefCount=0 SpinLock=0 Offset=34936, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 15084, counter : time in resource per second Value=55883 SpinLock=0 Lifetime=Type: 1 ProcessId: 15084 StartupTime: 130730081886009912, currentInstance : ad-w3wp-msexchangeoabapppool(CC31A917) RefCount=0 SpinLock=0 Offset=34608, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 14948, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 14948 StartupTime: 130730081557522734, currentInstance : rpca-w3wp-msexchangepowershellfrontendapppool(E1115251) RefCount=0 SpinLock=0 Offset=34280, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 14948, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 14948 StartupTime: 130730081557522734, currentInstance : mb-w3wp-msexchangepowershellfrontendapppool(34B9187E) RefCount=0 SpinLock=0 Offset=33952, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 14948, counter : time in resource per second Value=1576 SpinLock=0 Lifetime=Type: 1 ProcessId: 14948 StartupTime: 130730081557522734, currentInstance : ad-w3wp-msexchangepowershellfrontendapppool(FAEFA1B4) RefCount=0 SpinLock=0 Offset=33624, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 13332, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 13332 StartupTime: 130730081246077528, currentInstance : rpca-msexchangehmhost-msexchangehmhost.exe(87A5B053) RefCount=0 SpinLock=0 Offset=33296, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 13332, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 13332 StartupTime: 130730081246077528, currentInstance : mb-msexchangehmhost-msexchangehmhost.exe(FB9D599C) RefCount=0 SpinLock=0 Offset=32968, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 13332, counter : time in resource per second Value=20422 SpinLock=0 Lifetime=Type: 1 ProcessId: 13332 StartupTime: 130730081246077528, currentInstance : ad-msexchangehmhost-msexchangehmhost.exe(4E220B96) RefCount=0 SpinLock=0 Offset=32640, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 27800, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 27800 StartupTime: 130732559851229547, currentInstance : rpca-noderunner-contentenginenode1(316BF6E3) RefCount=1 SpinLock=0 Offset=32312, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 27800, counter : time in resource per second Value=250572035 SpinLock=0 Lifetime=Type: 1 ProcessId: 27800 StartupTime: 130732559851229547, currentInstance : mb-noderunner-contentenginenode1(2EE8286C) RefCount=1 SpinLock=0 Offset=31984, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 27800, counter : time in resource per second Value=309575 SpinLock=0 Lifetime=Type: 1 ProcessId: 27800 StartupTime: 130732559851229547, currentInstance : ad-noderunner-contentenginenode1(61591E6) RefCount=1 SpinLock=0 Offset=31656, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 21596, counter : time in resource per second Value=276568 SpinLock=0 Lifetime=Type: 1 ProcessId: 21596 StartupTime: 130732616321024370, currentInstance : ad-msexchangehmworker-msexchangehmworker.exe(712B0516) RefCount=1 SpinLock=0 Offset=31328, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 21596, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 21596 StartupTime: 130732616321024370, currentInstance : mb-msexchangehmworker-msexchangehmworker.exe(6177C09C) RefCount=1 SpinLock=0 Offset=31000, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 21596, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 21596 StartupTime: 130732616321024370, currentInstance : rpca-msexchangehmworker-msexchangehmworker.exe(39325ED3) RefCount=1 SpinLock=0 Offset=30672, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 8068, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 8068 StartupTime: 130730079342620471, currentInstance : rpca-umworkerprocess-umworkerprocess.exe(970CCE33) RefCount=0 SpinLock=0 Offset=30344, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 8068, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 8068 StartupTime: 130730079342620471, currentInstance : mb-umworkerprocess-umworkerprocess.exe(8A7F8A3C) RefCount=0 SpinLock=0 Offset=30016, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 8068, counter : time in resource per second Value=489 SpinLock=0 Lifetime=Type: 1 ProcessId: 8068 StartupTime: 130730079342620471, currentInstance : ad-umworkerprocess-umworkerprocess.exe(95818B6) RefCount=0 SpinLock=0 Offset=29688, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 16348, counter : time in resource per second Value=393256 SpinLock=0 Lifetime=Type: 1 ProcessId: 16348 StartupTime: 130730082964967615, currentInstance : ad-w3wp-msexchangeecpapppool(B648688D) RefCount=0 SpinLock=0 Offset=29360, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 16348, counter : time in resource per second Value=4885 SpinLock=0 Lifetime=Type: 1 ProcessId: 16348 StartupTime: 130730082964967615, currentInstance : mb-w3wp-msexchangeecpapppool(E27E6507) RefCount=0 SpinLock=0 Offset=29032, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 16348, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 16348 StartupTime: 130730082964967615, currentInstance : rpca-w3wp-msexchangeecpapppool(57806648) RefCount=0 SpinLock=0 Offset=28704, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 3160, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3160 StartupTime: 130732607510143268, currentInstance : rpca-msexchangetransport-msexchangetransport.exe(24F56C33) RefCount=1 SpinLock=0 Offset=28376, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 3160, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3160 StartupTime: 130732607510143268, currentInstance : mb-msexchangetransport-msexchangetransport.exe(92FB3D3C) RefCount=1 SpinLock=0 Offset=28048, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 3160, counter : time in resource per second Value=42 SpinLock=0 Lifetime=Type: 1 ProcessId: 3160 StartupTime: 130732607510143268, currentInstance : ad-msexchangetransport-msexchangetransport.exe(2447ECB6) RefCount=1 SpinLock=0 Offset=27720, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7008, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7008 StartupTime: 130730079088089233, currentInstance : rpca-microsoft.exchange.um.callrouter-microsoft.exchange.um.callrouter.exe(E8475353) RefCount=0 SpinLock=0 Offset=27392, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7008, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7008 StartupTime: 130730079088089233, currentInstance : mb-microsoft.exchange.um.callrouter-microsoft.exchange.um.callrouter.exe(8F65881C) RefCount=0 SpinLock=0 Offset=27064, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7008, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7008 StartupTime: 130730079088089233, currentInstance : ad-microsoft.exchange.um.callrouter-microsoft.exchange.um.callrouter.exe(78F52196) RefCount=0 SpinLock=0 Offset=26736, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 8116, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 8116 StartupTime: 130730078965276725, currentInstance : rpca-umservice-umservice.exe(E39A1133) RefCount=0 SpinLock=0 Offset=26408, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 8116, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 8116 StartupTime: 130730078965276725, currentInstance : mb-umservice-umservice.exe(FFBB273C) RefCount=0 SpinLock=0 Offset=26080, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 8116, counter : time in resource per second Value=555 SpinLock=0 Lifetime=Type: 1 ProcessId: 8116 StartupTime: 130730078965276725, currentInstance : ad-umservice-umservice.exe(9A8AC6B6) RefCount=0 SpinLock=0 Offset=25752, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7900, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7900 StartupTime: 130730078996839212, currentInstance : rpca-microsoft.exchange.store.worker-microsoft.exchange.store.worker.exe(ABB009B3) RefCount=0 SpinLock=0 Offset=25424, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7900, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7900 StartupTime: 130730078996839212, currentInstance : mb-microsoft.exchange.store.worker-microsoft.exchange.store.worker.exe(38BA31BC) RefCount=0 SpinLock=0 Offset=25096, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7900, counter : time in resource per second Value=218529 SpinLock=0 Lifetime=Type: 1 ProcessId: 7900 StartupTime: 130730078996839212, currentInstance : ad-microsoft.exchange.store.worker-microsoft.exchange.store.worker.exe(11106236) RefCount=0 SpinLock=0 Offset=24768, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7204, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7204 StartupTime: 130730078901370474, currentInstance : rpca-msexchangetransportlogsearch-msexchangetransportlogsearch.exe(EF66F2D3) RefCount=0 SpinLock=0 Offset=24440, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7204, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7204 StartupTime: 130730078901370474, currentInstance : mb-msexchangetransportlogsearch-msexchangetransportlogsearch.exe(B020391C) RefCount=0 SpinLock=0 Offset=24112, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7204, counter : time in resource per second Value=611 SpinLock=0 Lifetime=Type: 1 ProcessId: 7204 StartupTime: 130730078901370474, currentInstance : ad-msexchangetransportlogsearch-msexchangetransportlogsearch.exe(20578116) RefCount=0 SpinLock=0 Offset=23784, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 4868, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4868 StartupTime: 130730078594026714, currentInstance : rpca-microsoft.exchange.imap4service-microsoft.exchange.imap4service.exe(128A1B3) RefCount=0 SpinLock=0 Offset=23456, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 4868, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4868 StartupTime: 130730078594026714, currentInstance : mb-microsoft.exchange.imap4service-microsoft.exchange.imap4service.exe(B4CBDCBC) RefCount=0 SpinLock=0 Offset=23128, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 4868, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4868 StartupTime: 130730078594026714, currentInstance : ad-microsoft.exchange.imap4service-microsoft.exchange.imap4service.exe(F0E98836) RefCount=0 SpinLock=0 Offset=22800, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 5764, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5764 StartupTime: 130730078701682966, currentInstance : rpca-microsoft.exchange.pop3service-microsoft.exchange.pop3service.exe(8961F613) RefCount=0 SpinLock=0 Offset=22472, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 5764, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5764 StartupTime: 130730078701682966, currentInstance : mb-microsoft.exchange.pop3service-microsoft.exchange.pop3service.exe(3C128D5C) RefCount=0 SpinLock=0 Offset=22144, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 5764, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5764 StartupTime: 130730078701682966, currentInstance : ad-microsoft.exchange.pop3service-microsoft.exchange.pop3service.exe(96BB056) RefCount=0 SpinLock=0 Offset=21816, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7040, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7040 StartupTime: 130730078816526722, currentInstance : rpca-msexchangethrottling-msexchangethrottling.exe(8C1DA893) RefCount=0 SpinLock=0 Offset=21488, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7040, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7040 StartupTime: 130730078816526722, currentInstance : mb-msexchangethrottling-msexchangethrottling.exe(AB2BADDC) RefCount=0 SpinLock=0 Offset=21160, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7040, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7040 StartupTime: 130730078816526722, currentInstance : ad-msexchangethrottling-msexchangethrottling.exe(8962F4D6) RefCount=0 SpinLock=0 Offset=20832, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6536, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6536 StartupTime: 130730078769807986, currentInstance : rpca-msexchangesubmission-msexchangesubmission.exe(60747EB3) RefCount=0 SpinLock=0 Offset=20504, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6536, counter : time in resource per second Value=159000 SpinLock=0 Lifetime=Type: 1 ProcessId: 6536 StartupTime: 130730078769807986, currentInstance : mb-msexchangesubmission-msexchangesubmission.exe(67B4173C) RefCount=0 SpinLock=0 Offset=20176, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6536, counter : time in resource per second Value=273020 SpinLock=0 Lifetime=Type: 1 ProcessId: 6536 StartupTime: 130730078769807986, currentInstance : ad-msexchangesubmission-msexchangesubmission.exe(85200236) RefCount=0 SpinLock=0 Offset=19848, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 4420, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4420 StartupTime: 130730078654651715, currentInstance : rpca-microsoft.exchange.imap4-microsoft.exchange.imap4.exe(EAAB5DD3) RefCount=0 SpinLock=0 Offset=19520, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 4420, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4420 StartupTime: 130730078654651715, currentInstance : mb-microsoft.exchange.imap4-microsoft.exchange.imap4.exe(1FC2541C) RefCount=0 SpinLock=0 Offset=19192, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 4420, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4420 StartupTime: 130730078654651715, currentInstance : ad-microsoft.exchange.imap4-microsoft.exchange.imap4.exe(17E0EA16) RefCount=0 SpinLock=0 Offset=18864, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6160, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6160 StartupTime: 130730078749026715, currentInstance : rpca-w3wp-msexchangeservicesapppool(E8BBF810) RefCount=0 SpinLock=0 Offset=18536, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6160, counter : time in resource per second Value=1867617 SpinLock=0 Lifetime=Type: 1 ProcessId: 6160 StartupTime: 130730078749026715, currentInstance : mb-w3wp-msexchangeservicesapppool(10FE94BF) RefCount=0 SpinLock=0 Offset=18208, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6160, counter : time in resource per second Value=3331874 SpinLock=0 Lifetime=Type: 1 ProcessId: 6160 StartupTime: 130730078749026715, currentInstance : ad-w3wp-msexchangeservicesapppool(E0DE475) RefCount=0 SpinLock=0 Offset=17880, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 10132, counter : time in resource per second Value=84124 SpinLock=0 Lifetime=Type: 1 ProcessId: 10132 StartupTime: 130730079880745472, currentInstance : ad-w3wp-msexchangerpcproxyapppool(99BB8ED6) RefCount=0 SpinLock=0 Offset=17552, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 10132, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10132 StartupTime: 130730079880745472, currentInstance : mb-w3wp-msexchangerpcproxyapppool(B190F21C) RefCount=0 SpinLock=0 Offset=17224, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 10132, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10132 StartupTime: 130730079880745472, currentInstance : rpca-w3wp-msexchangerpcproxyapppool(8B7590B3) RefCount=0 SpinLock=0 Offset=16896, cate...</Data>
</EventData>
</Event>
https://support.microsoft.com/en-us/kb/2870416/
I used method
1, but it did not help
me.
Method 2:
[PS] C:\Windows\system32>Add-Pssnapin Microsoft.Exchange.Management.PowerShell.Setup
[PS] C:\Windows\system32>New-PerfCounters -definitionfilename "C:\Program Files\Microsoft\Exchange Server\V15\Setup\Perf
\GlsPerformanceCounters.xml"
New-PerfCounters : The performance counter definition file C:\Program Files\Microsoft\Exchange Server\V15\Setup\Perf\GlsPerformanceCounters.xml could not be found.
Any idea ?
Если Вам помог чей-либо ответ, пожалуйста, не забывайте жать на кнопку "Предложить как ответ" или "Проголосовать за полезное сообщение" -
Exchange 2013 backup and log truncation question
I have a scenario where I have 5 Exchange mailbox servers as members of a DAG, everything running fine, log truncation is working, but seems to be working differently than I am expecting it to work, as in previous versions of Exchange. I am used to the
logs being truncated immediately after the full backup completes. What is happening is that the server is retaining a weeks worth of logs. Everything older than 7 days gets truncated after a full backup completes. Is this expected behavior? I am running Exchange
2013 CU3 on Server 2012, backup software is HP Data Protector 8 running the latest updates. I am running a VSS backup. The DAG is not a lagged copy of the DB's either.I will check the HP Data Protector setting, but I do not think that setting is valid or anything configurable.
Here is the contents of some various commands for one of my databases, all of which are configured identically, tell me if you see something set incorrectly. Hopefully I have redacted enough internal stuff:
Get-MailboxDatabaseCopyStatus
RunspaceId : 8467f253-8c82-4206-a002-14779e701b0e
Identity : DB1\EX2013-MB1
Id : DB1\EX2013-MB1
Name : DB1\EX2013-MB1
DatabaseName : DB1
Status : Mounted
InstanceStartTime : 12/10/2013 7:02:44 PM
LastStatusTransitionTime :
MailboxServer : EX2013-MB1
ActiveDatabaseCopy : EX2013-MB1
ActiveCopy : True
ActivationPreference : 1
StatusRetrievedTime : 1/7/2014 12:54:19 PM
WorkerProcessId : 10292
ActivationSuspended : False
ActionInitiator : Unknown
ErrorMessage :
ErrorEventId :
ExtendedErrorInfo :
SuspendComment :
RequiredLogsPresent :
SinglePageRestore : 0
ContentIndexState : Healthy
ContentIndexErrorMessage :
ContentIndexVersion : 1
ContentIndexBacklog : 0
ContentIndexRetryQueueSize : 0
ContentIndexMailboxesToCrawl :
ContentIndexSeedingPercent :
ContentIndexSeedingSource :
CopyQueueLength : 0
ReplayQueueLength : 0
ReplaySuspended : False
ResumeBlocked : False
ReseedBlocked : False
MinimumSupportedDatabaseSchemaVersion : 0.121
MaximumSupportedDatabaseSchemaVersion : 0.126
RequestedDatabaseSchemaVersion :
LatestAvailableLogTime :
LastCopyNotificationedLogTime : 1/7/2014 12:38:09 PM
LastCopiedLogTime :
LastInspectedLogTime :
LastReplayedLogTime :
LastLogGenerated : 3510
LastLogCopyNotified : 3510
LastLogCopied : 0
LastLogInspected : 0
LastLogReplayed : 0
LowestLogPresent : 2875
LastLogInfoIsStale : False
LastLogInfoFromCopierTime : 1/7/2014 12:54:19 PM
LastLogInfoFromClusterTime : 1/7/2014 12:54:16 PM
LastLogInfoFromClusterGen : 3510
LogsReplayedSinceInstanceStart : 0
LogsCopiedSinceInstanceStart : 0
LatestFullBackupTime : 12/9/2013 10:31:32 PM
LatestIncrementalBackupTime :
LatestDifferentialBackupTime :
LatestCopyBackupTime :
SnapshotBackup : True
SnapshotLatestFullBackup : True
SnapshotLatestIncrementalBackup :
SnapshotLatestDifferentialBackup :
SnapshotLatestCopyBackup :
LogReplayQueueIncreasing : False
LogCopyQueueIncreasing : False
ReplayLagStatus : Enabled:False; PlayDownReason:None; Percentage:0; Configured:00:00:00; Actual:00:00:00
DatabaseSeedStatus :
OutstandingDumpsterRequests : {}
OutgoingConnections : {}
IncomingLogCopyingNetwork :
SeedingNetwork :
DiskFreeSpacePercent : 99
DiskFreeSpace : 4.365 TB (4,798,945,292,288 bytes)
DiskTotalSpace : 4.366 TB (4,800,702,836,736 bytes)
ExchangeVolumeMountPoint :
DatabaseVolumeMountPoint : C:\Disks\DB1\
DatabaseVolumeName : \\?\Volume{b95c7aa2-2cd9-430e-ab75-ea4b0efba659}\
DatabasePathIsOnMountedFolder : True
LogVolumeMountPoint : C:\Disks\DB1\
LogVolumeName : \\?\Volume{b95c7aa2-2cd9-430e-ab75-ea4b0efba659}\
LogPathIsOnMountedFolder : True
LastDatabaseVolumeName :
LastDatabaseVolumeNameTransitionTime :
VolumeInfoError :
IsValid : True
ObjectState : Unchanged
[PS] C:\Windows\system32>Get-MailboxDatabase -Identity db1 |fl
RunspaceId : 8467f253-8c82-4206-a002-14779e701b0e
JournalRecipient :
MailboxRetention : 30.00:00:00
OfflineAddressBook : \Default Offline Address Book
OriginalDatabase :
PublicFolderDatabase : CMBS1CC\CMBS1PF\CMBS1PF
ProhibitSendReceiveQuota : Unlimited
ProhibitSendQuota : 2 GB (2,147,483,648 bytes)
RecoverableItemsQuota : 30 GB (32,212,254,720 bytes)
RecoverableItemsWarningQuota : 20 GB (21,474,836,480 bytes)
CalendarLoggingQuota : 6 GB (6,442,450,944 bytes)
IndexEnabled : True
IsExcludedFromProvisioning : False
IsExcludedFromInitialProvisioning : False
IsSuspendedFromProvisioning : False
IsExcludedFromProvisioningBySpaceMonitoring : False
DumpsterStatistics :
DumpsterServersNotAvailable :
ReplicationType : Remote
AdminDisplayVersion : Version 15.0 (Build 775.38)
AdministrativeGroup : Exchange Administrative Group (FYDIBOHF23SPDLT)
AllowFileRestore : False
BackgroundDatabaseMaintenance : True
ReplayBackgroundDatabaseMaintenance :
BackgroundDatabaseMaintenanceSerialization :
BackgroundDatabaseMaintenanceDelay :
ReplayBackgroundDatabaseMaintenanceDelay :
MimimumBackgroundDatabaseMaintenanceInterval :
MaximumBackgroundDatabaseMaintenanceInterval :
BackupInProgress :
DatabaseCreated : True
Description :
EdbFilePath : C:\Disks\DB1\DB\DB1.edb
ExchangeLegacyDN : /o=%%%%%/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=EX2013-MB1/cn=Microsoft
Private MDB
DatabaseCopies : {DB1\EX2013-MB1, DB1\EX2013-MB2, DB1\EX2013-MB3, DB1\EX2013-MB1-DR,
DB1\EX2013-MB2-DR}
InvalidDatabaseCopies : {}
AllDatabaseCopies : {DB1\EX2013-MB1, DB1\EX2013-MB2, DB1\EX2013-MB3, DB1\EX2013-MB1-DR, DB1\EX2013-MB2-DR}
Servers : {EX2013-MB1, EX2013-MB2,
EX2013-MB3, EX2013-MB1-DR, EX2013-MB2-DR}
ActivationPreference : {[EX2013-MB1, 1], [EX2013-MB2, 2], [EX2013-MB3, 3], [EX2013-MB1-DR, 4], [EX2013-MB2-DR, 5]}
ReplayLagTimes : {[EX2013-MB1, 00:00:00], [EX2013-MB2, 00:00:00], [EX2013-MB3,
00:00:00], [EX2013-MB1-DR, 00:00:00], [EX2013-MB2-DR, 00:00:00]}
TruncationLagTimes : {[EX2013-MB1, 00:00:00], [EX2013-MB2, 00:00:00], [EX2013-MB3, 00:00:00], [EX2013-MB1-DR,
00:00:00], [EX2013-MB2-DR, 00:00:00]}
RpcClientAccessServer : EX2013-MB1.%%%%%%.local
MountedOnServer :
DeletedItemRetention : 60.00:00:00
SnapshotLastFullBackup :
SnapshotLastIncrementalBackup :
SnapshotLastDifferentialBackup :
SnapshotLastCopyBackup :
LastFullBackup :
LastIncrementalBackup :
LastDifferentialBackup :
LastCopyBackup :
DatabaseSize :
AvailableNewMailboxSpace :
MaintenanceSchedule : {Sun.1:00 AM-Sun.5:00 AM, Mon.1:00 AM-Mon.5:00 AM, Tue.1:00 AM-Tue.5:00 AM, Wed.1:00
AM-Wed.5:00 AM, Thu.1:00 AM-Thu.5:00 AM, Fri.1:00 AM-Fri.5:00 AM, Sat.1:00 AM-Sat.5:00 AM}
MountAtStartup : True
Mounted :
Organization : %%%%%%%
QuotaNotificationSchedule : {Sun.1:00 AM-Sun.1:15 AM, Mon.1:00 AM-Mon.1:15 AM, Tue.1:00 AM-Tue.1:15 AM, Wed.1:00 AM-Wed.1:15 AM, Thu.1:00 AM-Thu.1:15
AM, Fri.1:00 AM-Fri.1:15 AM, Sat.1:00 AM-Sat.1:15 AM}
Recovery : False
RetainDeletedItemsUntilBackup : False
Server : EX2013-MB1
MasterServerOrAvailabilityGroup : DAG1
WorkerProcessId :
CurrentSchemaVersion :
RequestedSchemaVersion :
AutoDagExcludeFromMonitoring : False
AutoDatabaseMountDial : GoodAvailability
DatabaseGroup :
MasterType : DatabaseAvailabilityGroup
ServerName : EX2013-MB1
IssueWarningQuota : 1.9 GB (2,040,110,080 bytes)
EventHistoryRetentionPeriod : 7.00:00:00
Name : DB1
LogFolderPath : C:\Disks\DB1\LOGS
TemporaryDataFolderPath :
CircularLoggingEnabled : False
LogFilePrefix : E01
LogFileSize : 1024
LogBuffers :
MaximumOpenTables :
MaximumTemporaryTables :
MaximumCursors :
MaximumSessions :
MaximumVersionStorePages :
PreferredVersionStorePages :
DatabaseExtensionSize :
LogCheckpointDepth :
ReplayCheckpointDepth :
CachedClosedTables :
CachePriority :
ReplayCachePriority :
MaximumPreReadPages :
MaximumReplayPreReadPages :
DataMoveReplicationConstraint : SecondCopy
IsMailboxDatabase : True
IsPublicFolderDatabase : False
MailboxProvisioningAttributes :
AdminDisplayName : DB1
ExchangeVersion : 0.10 (14.0.100.0)
DistinguishedName : CN=DB1,CN=Databases,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative
Groups,CN=%%%%%,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=%%%%%%,DC=%%%
Identity : DB1
Guid : 765d01d0-4468-43fd-a1e8-ad205b25c8ee
ObjectCategory : %%%%%%.%%%/Configuration/Schema/ms-Exch-Private-MDB
ObjectClass : {top, msExchMDB, msExchPrivateMDB}
WhenChanged : 12/10/2013 7:02:44 PM
WhenCreated : 11/13/2013 11:00:58 AM
WhenChangedUTC : 12/11/2013 12:02:44 AM
WhenCreatedUTC : 11/13/2013 4:00:58 PM
OrganizationId :
OriginatingServer : %%%%%-DC4.%%%%%.%%%
IsValid : True
ObjectState : Changed
[PS] C:\Windows\system32>Get-MailboxDatabase -Status | ft Name,Server,LastF*Backup,LastI*Backup,LastD*Backup -AutoSize
Name Server LastFullBackup LastIncrementalBackup LastDifferentialBackup
MB1-DB0 EX2013-MB1 1/6/2014 11:30:46 PM
DB1 EX2013-MB1 1/6/2014 11:30:46 PM
DB2 EX2013-MB1 1/6/2014 11:30:46 PM
MB3-DB0 EX2013-MB3 1/6/2014 10:45:44 PM
DB5 EX2013-MB3 1/6/2014 10:45:44 PM
DB6 EX2013-MB3 1/6/2014 10:45:44 PM
MB2-DB0 EX2013-MB2 1/6/2014 10:15:39 PM
DB3 EX2013-MB2 1/6/2014 10:15:39 PM
DB4 EX2013-MB2 1/6/2014 10:15:39 PM
MB1-DR-DB0 EX2013-MB1-DR 1/6/2014 8:00:23 PM
MB2-DR-DB0 EX2013-MB2-DR 1/6/2014 8:15:22 PM -
Exchange 2013 - Cleaning UP logs files (Client Access Server)
I have to client access server and it is running out of space
Is there anywhere in the C:\ drive where I can delete some space (e.g. log files)Hello,
If you refer to C:\inetpub\logs\LogFiles, you can delete them manually or use a Powershell script to delete them.
Here is the similar thread for your reference.
http://social.technet.microsoft.com/Forums/exchange/en-US/703dc324-721e-4c52-b43a-263b5543cfda/how-to-control-iis-logs-on-cas-server?forum=exchange2010
If you refer to other log files, please free let me know.
If you have any feedback on our support, please click
here
Cara Chen
TechNet Community Support -
Exchange 2013 will not send out email using MX records, but will via smart host.
When I use a smart host my email goes out fine, but when I use MX look-up it does not.
Inbound mail works when I use Telnet to test it.
Could this be because I'm testing the server from our office that the FQDN on the Exchange Server will not resolve back to the IP address I'm testing from?Yes almost certainly.
If when the server does the MX lookup for the destination address it resolves to your external IP address then it's quite likely that it won't be able to send. A lot of firewalls can't handle having a connection made from the internal network for an external
IP address that it controls, and won't simply pass the connection back to the internal network. When using the smart host though, the destination is external so the message can reach it and then when the smart host tries to deliver the message to your external
IP it's coming from an external source so it works.
Tricky one to explain but I hope that makes sense. -
Help my Exchange 2013 server is sending out thousands of spam mails!
Hi all,
today i noticed that my Exchange server was using 100% cpu and memory.I noticed that edgetransport service was using all the resource.
Then i opened queue viewer and saw thousands of mails in the queue.Then then get the annoying message that it cannot show more than 1000 messages.I click ok and stop the refreshing.I could mark all e-mails and choose suspend,but after that it starts to refresh
and same annoying message keeps popup (cant display more than 1000 messages)
So i have blocked all incoming port 25 on my TMG and also blocked all trafic out from the mail server.
I than ran the following command on My exchange server : Remove-Message -Server mail01 -filter {status -eq "suspended"} -WithNDR $false
Doesnt seem it helped,since there are still over 1k messages in the queue!
I deleted the queue folder under C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\data\ and it re-created new folder.Still all queue arent removed.
How can i remove all messages in the queue viewer?
I also find it strange why outsiders manage to relay on my server,since i only set allow for couple of internal servers?
Scanned those and no virus there (i dont use those servers to download anything)
any advice please?
Please mark as helpful if you find my contribution useful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you. Thank you! Off2workWould take me to much time to remove one ID by one,since i had over 3k in the queue.
Ended up with the following command:
Remove-Message -Filter {FromAddress -like "*@*"} -WithNDR $false
Remove-Message -Filter {FromAddress -like "*<>*"} -WithNDR $false
First will remove all messages that contains @
Second will remove all messages that contains <> (seems like lots had this in fromaddress)
Then finally all gone and cpu and mem back to normal.
Now have to find a way to block all IPs from China and Russia on my TMG!
Please mark as helpful if you find my contribution useful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you. Thank you! Off2work -
Advice on Setting up Exchange 2013
I put this in the Hyper-V forum because the questions I have are more related to overall Hyper-V config than Exchange. Since I am more familiar with VMWare, I do not know if the concept I have on Hyper-V is correct for Exchange. We have two Hyper-V hosts
connected to an EMC SAN via 10GB iSCSI. On the SAN, we created the Storage Pool and LUNs to handle the Exchange 2013 databases and Logs. The Hyper-V environment already had a CSV for the various VMs and that seems to work nicely. We created the Exchange
VMs in there as well. Now, to add the LUNs for the databases and logs, we also created CSV out of all those LUNs and then started to create virtual hard disks (.vhdx format) to fill up the LUNs. This was done through the Settings on the Exchange 2013 VMs using
a SCSI controller.
So, my question is, should the databases and LUNs be CSVs or should we do this some other way that will allow the VMs to failover and still maintain a connection to the storage. I read about Pass-Through disks and iSCSI within the VM itself, but both of
these seem to have either failover issues or performance issues. So what are my options here?
Thanks.
MCITP Exchange 2010 | MCITP Lync Server 2010 | MCTS Windows 2008Yes, see the recommendations from the Exchange team.
A search immediately took me here:
Best Practices for Virtualizing & Managing Exchange 2013
<cite>download.microsoft.com/download/4/A/C/4AC32FD3-220E-45DC-AA97...</cite>
Best Practices for Virtualizing and Managing Exchange 2013 6 6 Target Audience This guide is intended for IT professionals and technical decision makers (TDMs ...
Brian Ehlert
http://ITProctology.blogspot.com
Learn. Apply. Repeat. -
Exchange Server 2013 Logs Out of Control
I have a fairly new install of Exchange Server 2013 running in full production. Everything has been great except for the high level of log files that are generated on a daily basis. I am able to truncate the Transaction logs everyday with a Server Backup,
but that still does not help me with the other constantly growing log files in C:\Program Files\Microsoft\Exchange Server\V15\Logging. Is there any way to set these to automatically purge after a set amount of days? I have found resources that discuss setting
up a powershell script that will delete everything after a set amount of days, but I want to know if anything in Exchange 2013 will allow me to do this. I am getting tired of expanding my VM disk. Any help would be greatly appreciated.Unfortunately Exchange 2013 creates alot of log files that it does not clean up on it's own. While there isn't a way to tell Exchange to clean up the files after X number of days, there is a very helpful script someone else has already written that does
the work for you. He has 2 versions, 1 that you have to put on each individual server (I like that one in case I lose the server I put the script on) or 1 that you can run on 1 server that takes care of all of your Exchange Servers.
http://www.c7solutions.com/2013/04/removing-old-exchange-2013-log-files-html
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread -
How can I script out automatic mail profile connection to Exchange 2013
We use a program called Desktop Authority 9.1 that is a fully featured kixstart based logon user profile customization tool. It does a full gamout of things like map drives, folder redirection, import registry edits, run silent application installers,
and of course create the Outlook profile.
There's no issues with this tool creating an outlook profile internally to mail.domain.com, and even detecting laptops and configuring it for outlook anywhere to webm.domain.com and cached mode.
Issue I'm having is trying to roll out Exchange 2013. This tool simply does not seem to create the mail profile. On a test computer I have the hosts file pointed to the new 2013 server from these names: webm, mail, autodiscover. At log
on I simply get an error "The name cannot be resolved. The name cannot be matched to a name in the address list." When you click OK you get a little confusing dialog box with the exchange server name: mail and the mailbox: windows
user ID.
So I tried to do this manually in the Mail (32-bit) control panel applet. It doesnt matter if I put in mail, mail.domain.com, webm, webm.domain.com, email (the netbios name of exchange 2013), etc.. I get the same error. I went into More settings
> Connection > connect to microsoft exchange using HTTP and in the proxy settings I have webm.domain.com, connect SSL Only, only connect to proxy servers that have the name: msstd:webm.domain.com, and the rest is checked and NTLM Authentication is checked.
I simply CANNOT manually create an outlook profile at all. I can surely delete this one, start outlook, click next through the wizard taking all the default options and get Outlook configured that way (via Autodiscover service), but I need a way to
do it manually so I can have Desktop Authority do it manually. Why? Two major reasons:
1. If our end users are greeted with an Outlook startup wizard every time they go to a different computer, and have to click next through it, our help desk is going to be overwhelmed with "what is this outlook startup wizzard?" questions.
2. Desktop Authority also attaches additional mailboxes. We need the outlook profile passed through DA's scripting so different users departmental voice mailboxes are attached in their outlook. IE) Mailbox VM_FAX_Accounting is attached
to all of the accounting associates Outlook.Ok I found another way to get autodiscover to work..
In Group Policy go to User Configuration > Administrative Templates > Microsoft Office 2010 (and 2013 in my case) > Miscellaneous > Suppress recommended settings dialog > Change to ENABLED.
Now go to User Configuration > Administrative Templates > Microsoft Outlook 2010 (and 2013 in my case) > Account Settings > Exchange > Automatically configure profile based on Active Directory Primary SMTP address > Change to ENABLED.
Now for the shared mailboxes, I guess when we plan to migrate a department, their shared mailbox MUST be migrated from 2007 to 2013 on the same evening, and then we must go into that shared mailbox and ensure each individual user has "Full access
permissions" to it.
Now in Desktop Authority we publish this reg file:
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Outlook\AutoDiscover\RedirectServers]
"autodiscover-s.outlook.com"=hex(0):
"autodiscover.outlook.com"=hex(0):
"autodiscover.domain.com"=""
[HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Outlook\AutoDiscover\RedirectServers]
"autodiscover-s.outlook.com"=hex(0):
"autodiscover.outlook.com"=hex(0):
"autodiscover.domain.com"=""
[HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Outlook\AutoDiscover\RedirectServers]
"autodiscover-s.outlook.com"=hex(0):
"autodiscover.outlook.com"=hex(0):
"autodiscover.domain.com"=""
Why that? Well it turns out further testing when I added full permission to a new 2013 test shared mailbox, yet another nag screen was presented in Outlook which states "Allow this website to configure [email protected] server settings? autodiscover.domain.com/autodiscover/autodiscover.xml
- Your account was redirected to this website for settings. You should only allow settings from sources you know and trust. (Allow) (Cancel). If end users see this, you can bet our helpdesk calls will be out of control. We undergo security
awareness training and they will question ANYTHING resulting in redirect or dialog boxes asking about trust, and really that's a good thing.
That registry should I think handle Outlook 2007, 2010, 2013, and we will just have to maintain it for future versions.
We maybe have, I dont know less than 5 Outlook 2007 installs and they are on spare laptops, so If I want to cover it all I just have to download the Office 2007 ADMX templates for Group Policy so I can change those two settings above as well.
The other way I thought was to use powershell and script something out to pull from Exchange the GUID, append the @domain.com and put that into a variable that our Desktop Authority application can plug in at startup. But thats a little too much custom
programming whereas I think using GPO's and documented registry keys may be a better fit.
I just have to do testing to figure out what's going to happen to the users profile if it already exists on 2007, then its migrated to 2013. Will it be deleted? Will they lose all of their signatures? I know for many on network
PC's they will be going from direct mapi connection to Cached mode. Is that a good thing? I would imagine less load on the server and network once the mail is downloaded.
We would plan on a slow migration on a departmental basis. Luckily our departments have their own user OU's so applying this group policy can be done in the same manor. -
I have a new Exchange 2013 server with plans to migrate from my current Exchange 2007 Server.
I installed Exchange 2013 SP1 and the only errors I saw in the event log seemed to be long standing known issues that did not indicate an actual problem (based on what I read online).
I updated to CU7 and now lots of errors have appeared (although the old ones seem to have been fixed so I have that going for me).
Currently the Exchange 2013 server is not in use and clients are still hitting the 2007 server.
Issue 1)
After each reboot I get a Kernel-EventTracing 2 error. I cannot find anything on this on the internet so I have no idea what it is.
Session "FastDocTracingSession" failed to start with the following error: 0xC0000035
I did read other accounts of this error with a different name in the quotes but still can’t tell what this is or where it is coming from.
Issue 2)
I am still getting 5 MSExchange Common 106 errors even after reregistering all of the perf counters per this page:
https://support.microsoft.com/kb/2870416?wa=wsignin1.0
One of the perf counters fails to register using the script from the link above.
66 C:\Program Files\Microsoft\Exchange Server\V15\Setup\Perf\InfoWorkerMultiMailboxSearchPerformanceCounters.xml
New-PerfCounters : The performance counter definition file is invalid.
At C:\Users\administrator.<my domain>\Downloads\script\ReloadPerfCounters.ps1:19 char:4
+ New-PerfCounters -DefinitionFileName $f
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo
: InvalidData: (:) [New-PerfCounters], TaskException
+ FullyQualifiedErrorId : [Server=VALIS,RequestId=71b6bcde-d73e-4c14-9a32-03f06e3b2607,TimeStamp=12/18/2014 10:09:
12 PM] [FailureCategory=Cmdlet-TaskException] 33EBD286,Microsoft.Exchange.Management.Tasks.NewPerfCounters
But that one seems unrelated to the ones that still throw errors.
Three of the remaining five errors are (the forum is removing my spacing between the error text so it looks like a wall of text - sorry):
Performance counter updating error. Counter name is Count Matched LowFidelity FingerPrint, but missed HighFidelity FingerPrint, category name is MSExchange Anti-Malware Datacenter Perfcounters. Optional code: 3. Exception: The
exception thrown is : System.InvalidOperationException: The requested Performance Counter is not a custom counter, it has to be initialized as ReadOnly.
at System.Diagnostics.PerformanceCounter.InitializeImpl()
at System.Diagnostics.PerformanceCounter.set_RawValue(Int64 value)
at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.set_RawValue(Int64 value)
Last worker process info : System.ArgumentException: Process with an Id of 7384 is not running.
at System.Diagnostics.Process.GetProcessById(Int32 processId)
at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.GetLastWorkerProcessInfo()
Performance counter updating error. Counter name is Number of items, item is matched with finger printing cache, category name is MSExchange Anti-Malware Datacenter Perfcounters. Optional code: 3. Exception: The exception thrown
is : System.InvalidOperationException: The requested Performance Counter is not a custom counter, it has to be initialized as ReadOnly.
at System.Diagnostics.PerformanceCounter.InitializeImpl()
at System.Diagnostics.PerformanceCounter.set_RawValue(Int64 value)
at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.set_RawValue(Int64 value)
Last worker process info : System.ArgumentException: Process with an Id of 7384 is not running.
at System.Diagnostics.Process.GetProcessById(Int32 processId)
at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.GetLastWorkerProcessInfo()
Performance counter updating error. Counter name is Number of items in Malware Fingerprint cache, category name is MSExchange Anti-Malware Datacenter Perfcounters. Optional code: 3. Exception: The exception thrown is : System.InvalidOperationException:
The requested Performance Counter is not a custom counter, it has to be initialized as ReadOnly.
at System.Diagnostics.PerformanceCounter.InitializeImpl()
at System.Diagnostics.PerformanceCounter.set_RawValue(Int64 value)
at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.set_RawValue(Int64 value)
Last worker process info : System.ArgumentException: Process with an Id of 7384 is not running.
at System.Diagnostics.Process.GetProcessById(Int32 processId)
at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.GetLastWorkerProcessInfo()
Issue 3)
I appear to have some issues related to the healthmailboxes.
I get MSExchangeTransport 1025 errors for multiple healthmailboxes.
SMTP rejected a (P1) mail from 'HealthMailbox23b10b91745648819139ee691dc97eb6@<my domain>.local' with 'Client Proxy <my server>' connector and the user authenticated as 'HealthMailbox23b10b91745648819139ee691dc97eb6'. The Active Directory
lookup for the sender address returned validation errors. Microsoft.Exchange.Data.ProviderError
I reran setup /prepareAD to try and remedy this but I am still getting some.
Issue 4)
I am getting an MSExchange RBAC 74 error.
(Process w3wp.exe, PID 984) Connection leak detected for key <my domain>.local/Admins/Administrator in Microsoft.Exchange.Configuration.Authorization.WSManBudgetManager class. Leaked Value 1.
Issue 5)
I am getting MSExchange Assistants 9042 warnings on both databases.
Service MSExchangeMailboxAssistants. Probe Time Based Assistant for database Database02 (c83dbd91-7cc4-4412-912e-1b87ca6eb0ab) is exiting a work cycle. No mailboxes were successfully processed. 2 mailboxes were skipped due to errors. 0 mailboxes were
skipped due to failure to open a store session. 0 mailboxes were retried. There are 0 mailboxes in this database remaining to be processed.
Some research suggested this may be related to deleted mailboxes however I have never had any actual user mailboxes on this server.
If they are healthmailboxes or arbitration mailboxes that might make sense but I am unsure of what to do on this.
Issue 6)
At boot I am getting an MSExchange ActiveSync warning 1033
The setting SupportedIPMTypes in the Web.Config file was missing.
Using default value of System.Collections.Generic.List`1[System.String].
I don't know why but this forum is removing some of my spacing that would make parts of this easier to read.Hi Eric
Yes I have uninstalled and reinstalled Exchange 2013 CU7 for the 3<sup>rd</sup> time.
I realize you said one issue per forum thread but since I already started this thread with many issues I will at least post what I have discovered on them in case someone finds their way here from a web search.
I have an existing Exchange 2007 server in the environment so I am unable to create email address policies that are defined by “recipient container”.
If I try and do so I get “You can't specify the recipient container because legacy servers are detected.”
So I cannot create a normal email address policy and restrict it to an OU without resorting to some fancy filtering.
Instead what I have done is use PS to modify extensionAttribute1 (otherwise known as Custom Attribute 1 to exchange) for all of my users.
I then applied an address policy to them and gave it the highest priority.
Then I set a default email address policy for the entire organization.
After reinstalling Exchange all of my system mailboxes were created with the internal domain name.
So issue number 3 above has not come up.
For issue number one above I have created a new thread:
https://social.technet.microsoft.com/Forums/office/en-US/7eb12b89-ae9b-46b2-bd34-e50cd52a4c15/microsoftwindowskerneleventtracing-error-2-happens-twice-at-boot-ex2013cu7?forum=exchangesvrdeploy
For issue number four I have posted to this existing thread where there is so far no resolution:
https://social.technet.microsoft.com/Forums/exchange/en-US/2343730c-7303-4067-ae1a-b106cffc3583/exchange-error-id-74-connection-leak-detected-for-key?forum=exchangesvradmin
Issue number Five I have managed to recreate and get rid of in more than one way.
If I create a new database in ECP and set the database and log paths where I want, then this error will appear.
If I create the database in the default location and then use EMS to move it and set the log path, then the error will not appear.
The error will also appear (along with other errors) if I delete the health mailboxes and let them get recreated by restarting the server or the Health Manager service.
If I then go and set the retention period for deleted mailboxes to 0 days and wait a little while, these will all go away.
So my off hand guess is that these are caused by orphaned system mailboxes.
For issue number six I have posted to this existing thread where there is so far no resolution:
https://social.technet.microsoft.com/Forums/exchange/en-US/dff62411-fad8-4d0c-9bdb-037374644845/event-1033-msexchangeactivesync-warning?forum=exchangesvrmobility
So for the remainder of this thread we can try and tackle issue number two which is the perf counters.
The exact same 5 perf counter were coming up and this had been true each time I have uninstalled and reinstalled Exchange 2013CU7.
Actually to be more accurate a LOT of perf counter errors come up after the initial install, but reloading the perf counters using the script I posted above reduces it to the same five.
Using all of your suggestions so far has not removed these 5 remaining errors either. Since there is no discernible impact other than these errors at boot I am not seriously bothered by them but as will all event log errors, I would prefer
to make them go away if possible. -
Can no longer log into ECP on Exchange 2013
I am no longer able to log into my Exchange 2013 SP1 ECP site. Here are a few items to consider:
Installed replacement UC on 5/7/14. Configured services POP, IMAP, SMTP, IIS. Removed IIS from existing UC which still had 6 days of life. Both certs identical. I did no further changes for this new cert other than install it through ECP.
"Old" cert died 5/13/14 @ 8a. New cert took over without any problems.
Continued to use ECP through close of business 5/14/14. Late on 5/14/14 I attempted to log into ECP remotely thru a VPN to migrate users from our Exch 2007 server. Could not access ECP.
When I attempt to access ECP, I enter <domain>\<username> and password. When I hit "enter" or "sign in", the page flashes and the password field is empty.
I am still able to log into OWA
I cannot log into ECP using the server name, localhost or cert name.
Currently using default settings of FBA and Basic authentication
UC is correctly bound to both front and backend of IIS (443, 444)
Everything else is working correctly for the Exchange site. I have been continuing my migrations through Powershell. I just can't log into ECP.
I created a new Exchange Admin user only to find I still could not log into ECP.
Short Version: I was able to login and then, after a four hour stretch, I was not able to login. No errors on the web page or Event logs. Exchange is routing mail correctly.
I have scoured the web for that past couple of days looking for a solution but the issues I find are throwing up a web page with an error of some sort. Since I'm not experiencing that issue, I'm a bit stumped. I'm no expert, but I'm not a novice.
Since 2013 is a new rebuild, I thought it best to ask for a little assistance. Any advice/assistance would be appreciated.You might consider rebuilding the ECP virtual directory:
http://technet.microsoft.com/en-us/library/ff629372.aspx
With the EMS, procedure should be the same for Exchange 2010 and 2013.
Since you state that everything else is working, other virtual directories included (OWA for ex.), it's most likely something with the ECP virtual directory.
But even before that, I would try to look at the (rather cryptic) IIS logs and see if you cannot find any useful information there:
http://social.technet.microsoft.com/Forums/exchange/en-US/935eeb5b-d996-4933-9cbd-0347ebad801d/how-can-i-view-exchange-iis-logs?forum=exchange2010
There were some ideas in this thread but i think you may have seen it already?
http://social.technet.microsoft.com/Forums/exchange/en-US/1736b5ab-e69b-4637-aa59-f2d9bd54ead2/unable-to-access-exchange-2013-eacecp-webpage?forum=exchangesvrdeploy
Please mark as helpful if you find my contribution useful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you. -
Out of office replies in Exchange 2013 not working for external recipients
Hi,
Few days ago a couple of company workers went to vacation. They set up OOF automatic replies in OWA 2013. However automatic replies are not working for external recipients (outside of company). Internal users (company users) receive OOF notification.
I'm using smart host in sender connector configuration (SMTP server of internet provider) to deliver emails. Any clues about this problem ? Please find below part of the transaction log. For testing purposes i set up administrator account
to be on vacation.
HARED... SMTP
[email protected]
{[email protected]} Automatic reply: vacation test
RECEIVE SMTP
[email protected]
{[email protected]} Automatic reply: vacation test
DROP ROUTING
[email protected]
{[email protected]} Automatic reply: vacation test
AGENT... AGENT [email protected]
{[email protected]} Automatic reply: vacation test
HARED... SMTP
[email protected]
{[email protected]} Automatic reply: vacation test
RECEIVE SMTP
[email protected]
{[email protected]} Automatic reply: vacation test
AGENT... AGENT [email protected]
{[email protected]} Automatic reply: vacation test
TRANSFER ROUTING [email protected]
{[email protected]} Automatic reply: vacation test
FAIL SMTP
[email protected]
{[email protected]} Automatic reply: vacation testHi Informus,
Please check if it is allowed in AllowedOOFType of the Remote Domain *
In Exchange 2013, the only way to see or change the current configuration for automatic replying and forwarding to the Internet is via the Exchange Management Shell (EMS) with PowerShell commands.
To get the currently configured Remote Domains, use:
Get-RemoteDomain
Name DomainName
AllowedOOFType
Default *
External
Get-RemoteDomain Default | fl AllowedOOFType, AutoReplyEnabled, AutoForwardEnabled
AllowedOOFType : External
AutoReplyEnabled : False
AutoForwardEnabled : False
To change the settings, use the Set-RemoteDomain command.
Enable automatic replies
Set-RemoteDomain -AutoReplyEnabled $true
Enable automatic forwards
Set-RemoteDomain –AutoForwardEnabled $true
Enable OOF for Outlook 2003 and previous (for Exchange 2007 and 2010 support)
Set-RemoteDomain –AllowedOOFType $ExternalLegacy
To change all these properties at once, you can use:
Set-RemoteDomain Default -AutoReplyEnabled $true –AutoForwardEnabled $true –AllowedOOFType $ExternalLegacy
Note:
Valid settings for the AllowedOOFType property are:
External
This is the default and only allows for the new style OOF messages as introduced in Outlook 2007.
ExternalLegacy
This settings allows for both the new style and old style OOF messages and needs to be set if you want to enable external OOF support for Outlook 2003 as well.
None
This setting doesn’t allow for the use of OOF messages at all (both internal and external).
InternalLegacy
This setting only allows for internal OOF messages to be sent for all Outlook versions.
Regards,
Satyajit
Please “Vote As Helpful”
if you find my contribution useful or “Mark As Answer” if it does answer your question. That will encourage me - and others - to take time out to help you.
Maybe you are looking for
-
Oracle forms 10g 32bit with Oracle 10g database on windows itanium for x64
Hi..... Currently we are planning to have this configuration 1. Oracle10g RAC on HP rx6600 with windows itanium for x64 architecture 2. Oracle Application Server (32-bit) on windows 2003 (forms & reports services) 3. Application migrated from 6i to 1
-
Hi Jschell, I have gone through a lot of posts on jdbc drivers and obviously a lot of them contain your replies. I have a question about JDBC-ODBC bridge and I think you are the right person to answer it with your experience. My project architecture
-
Hello, I am looking for a tutorial on laoding external images using XML. I created a menu with flash that lists catagories for products and a marketing banner with in the fash movie. I need to take those images and place them outside of the flash mov
-
I couldn't acces to my account because of the secret question that I don't remember the answer that I did a long long time ago. what can i do ,please help me ? thanks.
-
Captivate Tracking in Authorware
I am trying to track results to courses we are developing in Captivate. Since we do not have an LMS, we are trying to store data in an Access database. I have very little (alright, I have no) experience setting up Authorware with Access (and very lit