Exchange 2013 UM on-prem-hybrid with Office365
design:
Exchange 2013 deployment on-prem including UM being used for UM for users. Domain and Exchange are set to companyA.net
companyA.com is set up in O365 for email\calendars etc.
ADFS and DirSync already configured to O365.
Available UPN's in AD are already companyA.com and companyA.net.
Plan:
Setup hybrid so some users can have mailboxes on-prem and others on O365.
Have companyA.com be the primary smtp address
Question:
1) The speech attendant part of UM on prem is a non-negotiable requirement. could the mailboxes be on O365 and still work correctly?
Other considerations:
1) Lync 2013 on-prem is deployed for all features including Enterprise voice. Presence, calendars, and voicemail from exchange required.
Need to have the MWI and calendaring\presence work.
1: It should, but first make sure you create the UM Dial Plans other UM properties in Office 365.
Do testing before the move.
I saw one of friend faced issue where as, Voice Mail notification wasn't getting delivered to user Mailbox.
Cheers,
Gulab Prasad
Technology Consultant
Blog:
http://www.exchangeranger.com Twitter:
LinkedIn:
Check out CodeTwo’s tools for Exchange admins
Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.
Similar Messages
-
Exchange 2013 EAC will not run with Exchange 2010 CAS\HT servers shut down.
Hi Folks,
A little background - We have just migrated all our user mailboxes and public folders to Office 365 using a hybrid configuration. Now that the migration is essentially finished, I'd like to decommission our on-prem Exchange infrastructure and remove the
hybrid config. We are using dirsync with password sync to replicate our AD to the cloud.
I've read that even if you remove your hybrid configuration, it's a good idea to keep one on-prem Exchange server around so you can edit Exchange attribs (such as email addresses) in a supported manner, rather than using ASDI edit, etc.
To this end, I installed a single Exchange 2013 CA\MBX server. After installation, the EAC worked fine, and I was able to view our on-prem users, groups, etc. Last week, I shut down our two Exchange 2010 CAS\HT servers as a test to see if anything broke
prior to decommissioning them (these were the hybrid servers as well). After doing so, the Exchange 2013 EAC no longer works for some reason, and behaves in a very bizarre fashion. About once every 20 times or so, it will actually start and run. The other
times, it just has you enter your creds, then generates an HTTP 500 internal server error after entering them. It seems to make no difference if you attempt to access it by the fqdn, hostname, or localhost right on the box itself. Same behavior on Chrome or
IE.
Today as a test, I started up one of the 2010 CAS servers and lo and behold, the 2013 EAC ran without difficulty again. Any idea why this might be so? Thanks for any help,
IanHi,
From your description, I recommend you use the following URL to check if you can access EAC. I see it works for several people about this issue.
https://<Exchange 2013 CAS FQDN>/ecp?ExchClientVer=15
Hope it helps.
Best regards,
Amy Wang
TechNet Community Support -
Certificate configuring for exchange 2013 and office 365 hybrid deployment
Please advise on what digital certificate requirements for hybrid deployment and to configure it.
Hi sphilip,
If you want to deploy AD FS with Single Sign-On(SSO), we need use certificate to establish secure trust between on-premises Exchange 2013 and Office online.
We can use and configure a trusted third-part CA within all on-premises Exchange 2013 Mailbox and Client Access servers to ensure secure mail transport, more details about
Office 365 Hybrid Configuration Certificate Planning, for your reference:
http://blogs.technet.com/b/neiljohn/archive/2011/08/25/office-365-hybrid-configuration-certificate-planning-adfs-exchange-web-services-owa-oa.aspx
Best Regards,
Allen Wang -
Exchange 2013, multiple IIS OWA sites with different authentication
Hi
I have an exchange 2013 server with Client Access and Mailbox server installed. The server has an second ip address which I have bound an additional IIS site to. The additional IIS site is named ExchangeExternalFBA.
The default web site is configured for basic and windows authentication with:
Set-EcpVirtualDirectory -identity "ecp (default web site)" -FormsAuthentication:$false
Set-owavirtualdirectory -identity "owa (Default Web Site)" -FormsAuthentication:$false -WindowsAuthentication:$true -BasicAuthentication:$true
Then a new ECP and OWA are configured with:
New-ecpVirtualDirectory -WebSiteName "ExchangeExternalFBA"
New-OwaVirtualDirectory -WebSiteName "ExchangeExternalFBA"
Set-owavirtualdirectory -identity "owa (ExchangeExternalFBA)" -LogonFormat FullDomain -FormsAuthentication:$true -WindowsAuthentication:$false -BasicAuthentication:$true
Set-EcpVirtualDirectory -identity "ecp (ExchangeExternalFBA)" -FormsAuthentication:$true
Then I perform an iisreset.
My problem is that then when I try to access the ECP or OWA on the default website, it loads forms authentication! The ECP or OWA on the ExchangeExternalFBA web site works correctly and also loads forms authentication.
If I run...
get-owavirtualdirectory "owa (ExchangeExternalFBA)"
then it returns:
InternalAuthenticationMethods : {Basic, Ntlm,
WindowsIntegrated}
BasicAuthentication : True
WindowsAuthentication : True
DigestAuthentication : False
FormsAuthentication : False
LiveIdAuthentication : False
AdfsAuthentication : False
OAuthAuthentication : False
If I then run
Set-EcpVirtualDirectory -identity "ecp (default web site)" -FormsAuthentication:$false
Set-owavirtualdirectory -identity "owa (Default Web Site)" -FormsAuthentication:$false -WindowsAuthentication:$true -BasicAuthentication:$true
and perform another iisreset then when I try to access the ECP or OWA on the default website it loads correctly. But then the forms based authentication on the ExchangeExternalFBA website can no longer log in, it does not accept the user name and password.
If I then disable and enable FBA on the ExchangeExternalFBA website then it works but forms based authentication takes over the default web site again!
Whether I perform the above from the gui or from powershell it does not make a difference, the same behaviour is observed. Changing the logontype on the FBA does not make a difference.
This has been tested on exchange 2013 cu1 and cu2.
Similar(if not identical until they get sidetracked) issue reported in http://social.technet.microsoft.com/Forums/exchange/en-US/9fcd360f-6658-4940-add7-2f13265cf86b/multiple-owa-sites-on-a-single-server-2012-with-exchange-2013-mailbox-cas.
This worked fine in outlook 2007 and 2010, why now do my virtual directories break each other?
I can reproduce the issue on a test exchange 2013 I built in dev.
Is this a bug or are you no longer meant to host different forms of authentication on a single cas?
I'm mostly interested to see if this works for other people and why it no longer seems to work in 2013, so please no questions; 'why do you want 2 different forms of authentication'.
Much appreciated, Thanks!Based off of your feedback I have run the following:
Remove-OwaVirtualDirectory "owa (ExchangeExternalFBA)"
Remove-EcpVirtualDirectory "ecp (ExchangeExternalFBA)"
iisreset
Set-EcpVirtualDirectory -identity "ecp (default web site)" -FormsAuthentication:$false
Set-owavirtualdirectory -identity "owa (Default Web Site)" -FormsAuthentication:$false -WindowsAuthentication:$true -BasicAuthentication:$true
New-ecpVirtualDirectory -WebSiteName "ExchangeExternalFBA" -Role ClientAccess
New-OwaVirtualDirectory -WebSiteName "ExchangeExternalFBA" -Role ClientAccess
Set-owavirtualdirectory -identity "owa (ExchangeExternalFBA)" -LogonFormat FullDomain -FormsAuthentication:$true -WindowsAuthentication:$false -BasicAuthentication:$true
Set-EcpVirtualDirectory -identity "ecp (ExchangeExternalFBA)" -FormsAuthentication:$true
iisreset
After this there has been no change in behaviour. After the iisreset, forms have again hijacked the default web site and re-setting the authentication on the default web site removes the forms but breaks the ability to sign in to the forms based page on the
ExchangeExternalFBA web site again.
Note. '-Role Frontend' did not work. It showed the error:
Cannot process argument transformation on parameter 'Role'. Cannot convertvalue "frontend" to type
"Microsoft.Exchange.Management.SystemConfigurationTasks.VirtualDirectoryRole".
Error: "Unable to match the identifier name frontend to a valid enumerator name. Specify one of the following enumerator names and try again:
ClientAccess, Mailbox"
+ CategoryInfo : InvalidData: (:) [New-OwaVirtualDirectory], ParameterBindin...mationException
+ FullyQualifiedErrorId : ParameterArgumentTransformationError,New-OwaVirtualDirectory
Running get-help New-OwaVirtualDirectory -detailed shows the correct usage would be '-Role ClientAccess'?
-Role <ClientAccess | Mailbox>
The Role parameter specifies the configuration that should be used
when the virtual directory is created. The following are the values
that can be used with this parameter:
* FrontEnd Configures the virtual directory for use on a Client Access
server.
* BackEnd Configures the virtual directory for use on a Mailbox server. -
Exchange 2013 MBX in DAG along with Hyper-V and Failover Cluster
Hi Guys! I've tried to find out an answer of my question or some kind of solution, but with no luck that's why I am writing here. The case is as follows. I have two powerful server boxes and iSCSI storage and I have to design high availability
solution, which includes SCOM 2012, SC DPM 2012 and exchange 2013 (two CAS+HUB servers and two MBX servers).
Let me tell you how I plan to do that and you will correct me if proposed solution is wrong.
1. On both hosts - add Hyper-V role.
2. On both hosts - add failover clustering role.
3. Create 2 VMs through failover cluster manager, VMs will be stored on a iSCSI LUN, the first one VM for SCOM 2012 and the second one for SCDPM 2012. Both VMs will be added as failover resource.
4. Create 4 VMs - 2 for CAS+HUB role and 2 for MBX role, VMs will be stored on a iSCSI LUN as well.
5. Create a DAG within the two MBX servers.
In general, that's all. What I wonder is whether I can use failover clustering to acheive High Availability for 2 VMs and at the same time to create DAG between MBX-servers and NLB between CAS-servers?
Excuse me for this question, but I am not proficient in this matter.Hi,
As far as I know, it’s supported to create DAG for mailbox server installed in hyper-v server.
And since load balance has been changed for CAS 2013, it is more worth with DNS round robin instead of NLB. However, you can use NLB in Exchange 2013.
For more information, you can refer to the following article:
http://technet.microsoft.com/en-us/library/jj898588(v=exchg.150).aspx
If you have any question, please feel free to let me know.
Thanks,
Angela Shi
TechNet Community Support -
In Exchange 2013 i cannot open mails with attachments greater than 19.6 MB in EWS or OWA
Hello,
i have in Exchange 2013 CU3 on Windows 2012 the following problem :
When backup mails using EWS i get the message " EWS Error Code : ErrorMessageSizeExceeded." in mails with attachments greater than 20.137 KB ( 19.6 MB).
Then I checked all the settings of the EWS , but the defaults are already significantly higher than these 19.6 MB (Base64 approximately 26.5 MB)
web.config ( maxAllowedContentLength = " 85000000 ").
Settings of the MaxSendSize and ReceiveSize are 300MB .
All requestfiltering settings in IIS are set to 85MB.
When i access via EMS or OWA , file attachments over 19.6 MB can not be opened .
However, the preview shows in OWA the correct mail including attachment and it can be saved from the preview up to the set maximum size.
By double clicking on an email in OWA bigger than 19.6 MB i get the following error message:
"Error : Your request can not be completed right now Please try again later . . "
Send and receive mail can also be up to maxsize .
When accessing via Outlook , this problem does not occur.
i hope anyone here can help me
Thanks in advanceHi,
To change the maximum message size for Outlook Web App clients, you need to change the value of
maxAllowedContentLength, maxRequestLength and both instances of
maxReceivedMessageSize by editing %ExchangeInstallPath%ClientAccess\Owa\web.config in notepad.
To change the maximum message size for Exchange Web Services clients, you need to change the value of
maxAllowedContentLength and all instances of maxReceivedMessageSize="67108864" in %ExchangeInstallPath%ClientAccess\exchweb\ews\web.config.
When you are finished, save and close the Web.config file. Also need to restart IIS by running the following command:
IISReset /noforce
For more information about Configure Client-Specific Message Size Limits on Client Access Servers, please refer to:
http://technet.microsoft.com/en-us/library/hh529949(v=exchg.150).aspx
Thanks,
Winnie Liang
TechNet Community Support -
After upgrading to CU6 for Exchange 2013, the Application event log is flooded with MSExhange Common error 106: Performance counter updating error. Counter name is Time in Resource per second, category name is MSExchange Activity Context Resources. Optional
code: 2. Exception: The exception thrown is : System.InvalidOperationException: Instance 'ad-powershell-defaultdomain' already exists with a lifetime of Process. It cannot be recreated or reused until it has been removed or until the process using it
has exited.
at System.Diagnostics.SharedPerformanceCounter.FindInstance(Int32 instanceNameHashCode, String instanceName, CategoryEntry* categoryPointer, InstanceEntry** returnInstancePointerReference, Boolean activateUnusedInstances, PerformanceCounterInstanceLifetime
lifetime, Boolean& foundFreeInstance)
at System.Diagnostics.SharedPerformanceCounter.GetCounter(String counterName, String instanceName, Boolean enableReuse, PerformanceCounterInstanceLifetime lifetime)
at System.Diagnostics.SharedPerformanceCounter..ctor(String catName, String counterName, String instanceName, PerformanceCounterInstanceLifetime lifetime)
at System.Diagnostics.PerformanceCounter.InitializeImpl()
at System.Diagnostics.PerformanceCounter.get_RawValue()
at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.get_RawValue()
Last worker process info : System.ArgumentException: Process with an Id of 4776 is not running.
at System.Diagnostics.Process.GetProcessById(Int32 processId)
at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.GetLastWorkerProcessInfo()
Processes running while Performance counter failed to update:
14256 winlogon
15748 powershell
6524 Microsoft.Exchange.UM.CallRouter
5904 w3wp
584 lsass
780 LogonUI
4324 MSExchangeFrontendTransport
6292 Microsoft.Exchange.Store.Worker
2744 WmiPrvSE
576 services
3136 MonitoringHost
12568 svchost
1360 hostcontrollerservice
8648 WmiPrvSE
1752 SMSvcHost
1160 spoolsv
1356 sftracing
9528 TiWorker
10444 explorer
2732 w3wp
14908 WmiPrvSE
3124 Microsoft.Exchange.Store.Worker
4696 Microsoft.Exchange.Store.Service
4892 MSExchangeMailboxAssistants
12208 w3wp
15740 powershell
2128 WMSvc
748 rundll32
8232 w3wp
8400 svchost
3700 MonitoringHost
15716 powershell
5864 MSExchangeThrottling
2908 w3wp
4088 Microsoft.Exchange.EdgeSyncSvc
5660 scanningprocess
2292 wuauclt
5656 umservice
6044 scanningprocess
4076 noderunner
1908 MSExchangeHMHost
2892 Microsoft.Exchange.AntispamUpdateSvc
3876 noderunner
3676 MSExchangeMailboxReplication
15732 powershell
2096 svchost
7096 UMWorkerProcess
516 winlogon
908 svchost
1296 HealthService
1492 svchost
2824 w3wp
12324 dwm
1560 ForefrontActiveDirectoryConnector
304 smss
10820 w3wp
8464 svchost
888 Microsoft.Exchange.ContentFilter.Wrapper
5024 msexchangerepl
488 wininit
8564 taskhostex
5272 Microsoft.Exchange.ServiceHost
3832 noderunner
10088 w3wp
480 csrss
7920 conhost
872 svchost
5992 scanningprocess
4808 msdtc
8352 dllhost
860 TrustedInstaller
4008 rundll32
4400 conhost
656 svchost
9828 w3wp
1832 noderunner
4392 MSExchangeHMWorker
1828 mqsvc
700 svchost
1628 Microsoft.Exchange.Diagnostics.Service
3596 w3wp
2220 Microsoft.Exchange.Directory.TopologyService
1820 MSExchangeDelivery
7532 MSExchangeTransport
13372 svchost
832 svchost
9696 conhost
8316 svchost
1580 dllhost
3980 Microsoft.Exchange.RpcClientAccess.Service
8788 VSSVC
5948 MSExchangeTransportLogSearch
2992 MSExchangeDagMgmt
10632 csrss
1216 fms
3776 rundll32
5356 MSExchangeSubmission
7908 EdgeTransport
11576 w3wp
1600 inetinfo
1008 svchost
416 csrss
808 svchost
7608 w3wp
1588 updateservice
4148 Microsoft.Exchange.Search.Service
640 w3wp
796 dwm
2568 SMSvcHost
1188 svchost
4 System
3484 rdpclip
0 Idle
Performance Counters Layout information: A process is holding onto a transport performance counter. processId : 15716, counter : time in resource per second Value=30 SpinLock=0 Lifetime=Type: 1 ProcessId: 15716 StartupTime: 130608376318179644, currentInstance
: ad-powershell-defaultdomain(95CC324A) RefCount=1 SpinLock=0 Offset=38216, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 15716, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 15716 StartupTime: 130608376318179644, currentInstance : mb-powershell-defaultdomain(CC014C00)
RefCount=1 SpinLock=0 Offset=37888, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 15716, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 15716 StartupTime: 130608376318179644, currentInstance : rpca-powershell-defaultdomain(4598AFAF)
RefCount=1 SpinLock=0 Offset=37560, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3596, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3596 StartupTime: 130608368805385179, currentInstance : rpca-w3wp-msexchangemapimailboxapppool(E28F3117)
RefCount=1 SpinLock=0 Offset=37232, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3596, counter : time in resource per second Value=86 SpinLock=0 Lifetime=Type: 1 ProcessId: 3596 StartupTime: 130608368805385179, currentInstance : mb-w3wp-msexchangemapimailboxapppool(F9439F58)
RefCount=1 SpinLock=0 Offset=36904, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3596, counter : time in resource per second Value=301 SpinLock=0 Lifetime=Type: 1 ProcessId: 3596 StartupTime: 130608368805385179, currentInstance : ad-w3wp-msexchangemapimailboxapppool(35491652)
RefCount=1 SpinLock=0 Offset=36576, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 10088, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10088 StartupTime: 130608368435182301, currentInstance : rpca-w3wp-msexchangemapifrontendapppool(2C7F2005)
RefCount=1 SpinLock=0 Offset=36248, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 10088, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10088 StartupTime: 130608368435182301, currentInstance : mb-w3wp-msexchangemapifrontendapppool(BE5C2DAA)
RefCount=1 SpinLock=0 Offset=35920, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 10088, counter : time in resource per second Value=50 SpinLock=0 Lifetime=Type: 1 ProcessId: 10088 StartupTime: 130608368435182301, currentInstance : ad-w3wp-msexchangemapifrontendapppool(C0FDFAE0)
RefCount=1 SpinLock=0 Offset=35592, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 640, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 640 StartupTime: 130608368405334576, currentInstance : rpca-w3wp-msexchangeowacalendarapppool(8F10D1B5)
RefCount=1 SpinLock=0 Offset=35264, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 640, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 640 StartupTime: 130608368405334576, currentInstance : mb-w3wp-msexchangeowacalendarapppool(2D8C9EBA)
RefCount=1 SpinLock=0 Offset=34936, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 640, counter : time in resource per second Value=75 SpinLock=0 Lifetime=Type: 1 ProcessId: 640 StartupTime: 130608368405334576, currentInstance : ad-w3wp-msexchangeowacalendarapppool(D845E230)
RefCount=1 SpinLock=0 Offset=34608, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 12208, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 12208 StartupTime: 130608368146087354, currentInstance : rpca-w3wp-msexchangeautodiscoverapppool(6DABF262)
RefCount=1 SpinLock=0 Offset=34280, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 12208, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 12208 StartupTime: 130608368146087354, currentInstance : mb-w3wp-msexchangeautodiscoverapppool(D1C6EF4D)
RefCount=1 SpinLock=0 Offset=33952, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 12208, counter : time in resource per second Value=1002 SpinLock=0 Lifetime=Type: 1 ProcessId: 12208 StartupTime: 130608368146087354, currentInstance : ad-w3wp-msexchangeautodiscoverapppool(FD072087)
RefCount=1 SpinLock=0 Offset=33624, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 11576, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 11576 StartupTime: 130608368080143532, currentInstance : rpca-w3wp-msexchangeecpapppool(57806648)
RefCount=1 SpinLock=0 Offset=33296, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 11576, counter : time in resource per second Value=204 SpinLock=0 Lifetime=Type: 1 ProcessId: 11576 StartupTime: 130608368080143532, currentInstance : mb-w3wp-msexchangeecpapppool(E27E6507)
RefCount=1 SpinLock=0 Offset=32968, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 11576, counter : time in resource per second Value=1804 SpinLock=0 Lifetime=Type: 1 ProcessId: 11576 StartupTime: 130608368080143532, currentInstance : ad-w3wp-msexchangeecpapppool(B648688D)
RefCount=1 SpinLock=0 Offset=32640, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 10820, counter : time in resource per second Value=64 SpinLock=0 Lifetime=Type: 1 ProcessId: 10820 StartupTime: 130608368364391554, currentInstance : ad-w3wp-msexchangeoabapppool(CC31A917)
RefCount=1 SpinLock=0 Offset=32312, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 10820, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10820 StartupTime: 130608368364391554, currentInstance : mb-w3wp-msexchangeoabapppool(58D0A79D)
RefCount=1 SpinLock=0 Offset=31984, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 10820, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10820 StartupTime: 130608368364391554, currentInstance : rpca-w3wp-msexchangeoabapppool(8149E8D2)
RefCount=1 SpinLock=0 Offset=31656, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7608, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7608 StartupTime: 130608367931073979, currentInstance : rpca-w3wp-msexchangeowaapppool(4AA799E7)
RefCount=1 SpinLock=0 Offset=31328, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7608, counter : time in resource per second Value=792 SpinLock=0 Lifetime=Type: 1 ProcessId: 7608 StartupTime: 130608367931073979, currentInstance : mb-w3wp-msexchangeowaapppool(C3953468)
RefCount=1 SpinLock=0 Offset=31000, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7608, counter : time in resource per second Value=2537 SpinLock=0 Lifetime=Type: 1 ProcessId: 7608 StartupTime: 130608367931073979, currentInstance : ad-w3wp-msexchangeowaapppool(160BE662)
RefCount=1 SpinLock=0 Offset=30672, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5904, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5904 StartupTime: 130608367955918049, currentInstance : rpca-w3wp-msexchangepowershellapppool(3CF18BF)
RefCount=1 SpinLock=0 Offset=30344, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5904, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5904 StartupTime: 130608367955918049, currentInstance : mb-w3wp-msexchangepowershellapppool(A686C810)
RefCount=1 SpinLock=0 Offset=30016, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5904, counter : time in resource per second Value=2178 SpinLock=0 Lifetime=Type: 1 ProcessId: 5904 StartupTime: 130608367955918049, currentInstance : ad-w3wp-msexchangepowershellapppool(9E48CD5A)
RefCount=1 SpinLock=0 Offset=29688, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3832, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3832 StartupTime: 130608365723574632, currentInstance : rpca-noderunner-contentenginenode1(316BF6E3)
RefCount=1 SpinLock=0 Offset=29360, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3832, counter : time in resource per second Value=1148 SpinLock=0 Lifetime=Type: 1 ProcessId: 3832 StartupTime: 130608365723574632, currentInstance : mb-noderunner-contentenginenode1(2EE8286C)
RefCount=1 SpinLock=0 Offset=29032, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3832, counter : time in resource per second Value=322 SpinLock=0 Lifetime=Type: 1 ProcessId: 3832 StartupTime: 130608365723574632, currentInstance : ad-noderunner-contentenginenode1(61591E6)
RefCount=1 SpinLock=0 Offset=28704, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 8232, counter : time in resource per second Value=73 SpinLock=0 Lifetime=Type: 1 ProcessId: 8232 StartupTime: 130608367954980517, currentInstance : ad-w3wp-msexchangepowershellfrontendapppool(FAEFA1B4)
RefCount=1 SpinLock=0 Offset=28376, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 8232, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 8232 StartupTime: 130608367954980517, currentInstance : mb-w3wp-msexchangepowershellfrontendapppool(34B9187E)
RefCount=1 SpinLock=0 Offset=28048, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 8232, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 8232 StartupTime: 130608367954980517, currentInstance : rpca-w3wp-msexchangepowershellfrontendapppool(E1115251)
RefCount=1 SpinLock=0 Offset=27720, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 9828, counter : time in resource per second Value=909 SpinLock=0 Lifetime=Type: 1 ProcessId: 9828 StartupTime: 130608367291344391, currentInstance : ad-w3wp-msexchangerpcproxyapppool(99BB8ED6)
RefCount=1 SpinLock=0 Offset=27392, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 9828, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 9828 StartupTime: 130608367291344391, currentInstance : mb-w3wp-msexchangerpcproxyapppool(B190F21C)
RefCount=1 SpinLock=0 Offset=27064, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 9828, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 9828 StartupTime: 130608367291344391, currentInstance : rpca-w3wp-msexchangerpcproxyapppool(8B7590B3)
RefCount=1 SpinLock=0 Offset=26736, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7908, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7908 StartupTime: 130608366316230865, currentInstance : rpca-edgetransport-edgetransport.exe(911B6EB3)
RefCount=1 SpinLock=0 Offset=26408, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7908, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7908 StartupTime: 130608366316230865, currentInstance : mb-edgetransport-edgetransport.exe(A5AF4BBC)
RefCount=1 SpinLock=0 Offset=26080, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7908, counter : time in resource per second Value=679 SpinLock=0 Lifetime=Type: 1 ProcessId: 7908 StartupTime: 130608366316230865, currentInstance : ad-edgetransport-edgetransport.exe(E79D4A36)
RefCount=1 SpinLock=0 Offset=25752, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7096, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7096 StartupTime: 130608366107949622, currentInstance : rpca-umworkerprocess-umworkerprocess.exe(970CCE33)
RefCount=1 SpinLock=0 Offset=25424, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7096, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7096 StartupTime: 130608366107949622, currentInstance : mb-umworkerprocess-umworkerprocess.exe(8A7F8A3C)
RefCount=1 SpinLock=0 Offset=25096, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7096, counter : time in resource per second Value=89 SpinLock=0 Lifetime=Type: 1 ProcessId: 7096 StartupTime: 130608366107949622, currentInstance : ad-umworkerprocess-umworkerprocess.exe(95818B6)
RefCount=1 SpinLock=0 Offset=24768, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7532, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7532 StartupTime: 130608366287637157, currentInstance : rpca-msexchangetransport-msexchangetransport.exe(24F56C33)
RefCount=1 SpinLock=0 Offset=24440, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7532, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7532 StartupTime: 130608366287637157, currentInstance : mb-msexchangetransport-msexchangetransport.exe(92FB3D3C)
RefCount=1 SpinLock=0 Offset=24112, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7532, counter : time in resource per second Value=12 SpinLock=0 Lifetime=Type: 1 ProcessId: 7532 StartupTime: 130608366287637157, currentInstance : ad-msexchangetransport-msexchangetransport.exe(2447ECB6)
RefCount=1 SpinLock=0 Offset=23784, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 6292, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6292 StartupTime: 130608366134668487, currentInstance : rpca-microsoft.exchange.store.worker-microsoft.exchange.store.worker.exe(ABB009B3)
RefCount=1 SpinLock=0 Offset=23456, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 6292, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6292 StartupTime: 130608366134668487, currentInstance : mb-microsoft.exchange.store.worker-microsoft.exchange.store.worker.exe(38BA31BC)
RefCount=1 SpinLock=0 Offset=23128, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 6292, counter : time in resource per second Value=704 SpinLock=0 Lifetime=Type: 1 ProcessId: 6292 StartupTime: 130608366134668487, currentInstance : ad-microsoft.exchange.store.worker-microsoft.exchange.store.worker.exe(11106236)
RefCount=1 SpinLock=0 Offset=22800, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 6524, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6524 StartupTime: 130608366054199628, currentInstance : rpca-microsoft.exchange.um.callrouter-microsoft.exchange.um.callrouter.exe(E8475353)
RefCount=1 SpinLock=0 Offset=22472, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 6524, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6524 StartupTime: 130608366054199628, currentInstance : mb-microsoft.exchange.um.callrouter-microsoft.exchange.um.callrouter.exe(8F65881C)
RefCount=1 SpinLock=0 Offset=22144, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 6524, counter : time in resource per second Value=40 SpinLock=0 Lifetime=Type: 1 ProcessId: 6524 StartupTime: 130608366054199628, currentInstance : ad-microsoft.exchange.um.callrouter-microsoft.exchange.um.callrouter.exe(78F52196)
RefCount=1 SpinLock=0 Offset=21816, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5656, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5656 StartupTime: 130608365987637119, currentInstance : rpca-umservice-umservice.exe(E39A1133)
RefCount=1 SpinLock=0 Offset=21488, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5656, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5656 StartupTime: 130608365987637119, currentInstance : mb-umservice-umservice.exe(FFBB273C) RefCount=1
SpinLock=0 Offset=21160, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5656, counter : time in resource per second Value=45 SpinLock=0 Lifetime=Type: 1 ProcessId: 5656 StartupTime: 130608365987637119, currentInstance : ad-umservice-umservice.exe(9A8AC6B6) RefCount=1
SpinLock=0 Offset=20832, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5948, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5948 StartupTime: 130608365970762140, currentInstance : rpca-msexchangetransportlogsearch-msexchangetransportlogsearch.exe(EF66F2D3)
RefCount=1 SpinLock=0 Offset=20504, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5948, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5948 StartupTime: 130608365970762140, currentInstance : mb-msexchangetransportlogsearch-msexchangetransportlogsearch.exe(B020391C)
RefCount=1 SpinLock=0 Offset=20176, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5948, counter : time in resource per second Value=28 SpinLock=0 Lifetime=Type: 1 ProcessId: 5948 StartupTime: 130608365970762140, currentInstance : ad-msexchangetransportlogsearch-msexchangetransportlogsearch.exe(20578116)
RefCount=1 SpinLock=0 Offset=19848, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5864, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5864 StartupTime: 130608365966074661, currentInstance : rpca-msexchangethrottling-msexchangethrottling.exe(8C1DA893)
RefCount=1 SpinLock=0 Offset=19520, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5864, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5864 StartupTime: 130608365966074661, currentInstance : mb-msexchangethrottling-msexchangethrottling.exe(AB2BADDC)
RefCount=1 SpinLock=0 Offset=19192, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5864, counter : time in resource per second Value=8 SpinLock=0 Lifetime=Type: 1 ProcessId: 5864 StartupTime: 130608365966074661, currentInstance : ad-msexchangethrottling-msexchangethrottling.exe(8962F4D6)
RefCount=1 SpinLock=0 Offset=18864, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5356, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5356 StartupTime: 130608365930918390, currentInstance : rpca-msexchangesubmission-msexchangesubmission.exe(60747EB3)
RefCount=1 SpinLock=0 Offset=18536, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5356, counter : time in resource per second Value=400 SpinLock=0 Lifetime=Type: 1 ProcessId: 5356 StartupTime: 130608365930918390, currentInstance : mb-msexchangesubmission-msexchangesubmission.exe(67B4173C)
RefCount=1 SpinLock=0 Offset=18208, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5356, counter : time in resource per second Value=390 SpinLock=0 Lifetime=Type: 1 ProcessId: 5356 StartupTime: 130608365930918390, currentInstance : ad-msexchangesubmission-msexchangesubmission.exe(85200236)
RefCount=1 SpinLock=0 Offset=17880, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3980, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3980 StartupTime: 130608365902793374, currentInstance : rpca-microsoft.exchange.rpcclientaccess.service-microsoft.exchange.rpcclientaccess.service.exe(E4305E13)
RefCount=1 SpinLock=0 Offset=17552, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3980, counter : time in resource per second Value=15105 SpinLock=0 Lifetime=Type: 1 ProcessId: 3980 StartupTime: 130608365902793374, currentInstance : mb-microsoft.exchange.rpcclientaccess.service-microsoft.exchange.rpcclientaccess.service.exe(BBA60BDC)
RefCount=1 SpinLock=0 Offset=17224, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3980, counter : time in resource per second Value=1570 SpinLock=0 Lifetime=Type: 1 ProcessId: 3980 StartupTime: 130608365902793374, currentInstance : ad-microsoft.exchange.rpcclientaccess.service-microsoft.exchange.rpcclientaccess.service.exe(B6581E56)
RefCount=1 SpinLock=0 Offset=16896, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3676, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3676 StartupTime: 130608365883887116, currentInstance : rpca-msexchangemailboxreplication-msexchangemailboxreplication.exe(276F4DB3)
RefCount=1 SpinLock=0 Offset=16568, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3676, counter : time in resource per second Value=55 SpinLock=0 Lifetime=Type: 1 ProcessId: 3676 StartupTime: 130608365883887116, currentInstance : mb-msexchangemailboxreplication-msexchangemailboxreplication.exe(95E41BC)
RefCount=1 SpinLock=0 Offset=16240, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3676, counter : time in resource per second Value=1045 SpinLock=0 Lifetime=Type: 1 ProcessId: 3676 StartupTime: 130608365883887116, currentInstance : ad-msexchangemailboxreplication-msexchangemailboxreplication.exe(394712B6)
RefCount=1 SpinLock=0 Offset=15912, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5272, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5272 StartupTime: 130608365924980876, currentInstance : rpca-microsoft.exchange.servicehost-microsoft.exchange.servicehost.exe(39C8D53)
RefCount=1 SpinLock=0 Offset=15584, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5272, counter : time in resource per second Value=13 SpinLock=0 Lifetime=Type: 1 ProcessId: 5272 StartupTime: 130608365924980876, currentInstance : mb-microsoft.exchange.servicehost-microsoft.exchange.servicehost.exe(E7963A1C)
RefCount=1 SpinLock=0 Offset=15256, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5272, counter : time in resource per second Value=1004 SpinLock=0 Lifetime=Type: 1 ProcessId: 5272 StartupTime: 130608365924980876, currentInstance : ad-microsoft.exchange.servicehost-microsoft.exchange.servicehost.exe(10E8B196)
RefCount=1 SpinLock=0 Offset=14928, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 4892, counter : time in resource per second Value=2260 SpinLock=0 Lifetime=Type: 1 ProcessId: 4892 StartupTime: 130608365821855891, currentInstance : rpca-msexchangemailboxassistants-msexchangemailboxassistants.exe(DEAC0933)
RefCount=1 SpinLock=0 Offset=14600, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 4892, counter : time in resource per second Value=19900 SpinLock=0 Lifetime=Type: 1 ProcessId: 4892 StartupTime: 130608365821855891, currentInstance : mb-msexchangemailboxassistants-msexchangemailboxassistants.exe(A754293C)
RefCount=1 SpinLock=0 Offset=14272, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 4892, counter : time in resource per second Value=3491 SpinLock=0 Lifetime=Type: 1 ProcessId: 4892 StartupTime: 130608365821855891, currentInstance : ad-msexchangemailboxassistants-msexchangemailboxassistants.exe(EE890EB6)
RefCount=1 SpinLock=0 Offset=13944, categoryName...This error is not resolved in CU8.
[PS] C:\>Get-ExchangeServer | fl *version*
AdminDisplayVersion : Version 15.0 (Build 1076.9)
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="MSExchange Common" />
<EventID Qualifiers="49156">106</EventID>
<Level>2</Level>
<Task>1</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2015-04-15T10:14:22.000000000Z" />
<EventRecordID>11366785</EventRecordID>
<Channel>Application</Channel>
<Computer>EX1.domain.com</Computer>
<Security />
</System>
- <EventData>
<Data>2</Data>
<Data>Time in Resource per second</Data>
<Data>MSExchange Activity Context Resources</Data>
<Data>The exception thrown is : System.InvalidOperationException: Instance 'ad-powershell-defaultdomain' already exists with a lifetime of Process. It cannot be recreated or reused until it has been removed or until the process using it has exited. at System.Diagnostics.SharedPerformanceCounter.FindInstance(Int32 instanceNameHashCode, String instanceName, CategoryEntry* categoryPointer, InstanceEntry** returnInstancePointerReference, Boolean activateUnusedInstances, PerformanceCounterInstanceLifetime lifetime, Boolean& foundFreeInstance) at System.Diagnostics.SharedPerformanceCounter.GetCounter(String counterName, String instanceName, Boolean enableReuse, PerformanceCounterInstanceLifetime lifetime) at System.Diagnostics.SharedPerformanceCounter..ctor(String catName, String counterName, String instanceName, PerformanceCounterInstanceLifetime lifetime) at System.Diagnostics.PerformanceCounter.InitializeImpl() at System.Diagnostics.PerformanceCounter.get_RawValue() at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.get_RawValue() Last worker process info : System.ArgumentException: Process with an Id of 884 is not running. at System.Diagnostics.Process.GetProcessById(Int32 processId) at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.GetLastWorkerProcessInfo() Processes running while Performance counter failed to update: 15084 w3wp 16804 powershell 16368 SCNotification 21108 conhost 22744 dllhost 17224 conhost 844 MsMpEng 21100 conhost 5580 taskhostex 1724 Microsoft.Exchange.Diagnostics.Service 3852 MSExchangeDagMgmt 13764 MonitoringHost 1264 fms 832 LogonUI 25828 mmc 1688 inetinfo 7900 Microsoft.Exchange.Store.Worker 3840 rundll32 1252 SMSvcHost 15040 msseces 3916 w3wp 1676 svchost 2968 Microsoft.Exchange.Directory.TopologyService 14600 explorer 5548 MSExchangeMailboxReplication 1236 svchost 5976 scanningprocess 2096 WMSvc 2200 w3wp 13376 WmiPrvSE 19472 powershell 8116 umservice 24492 powershell 24060 conhost 7204 MSExchangeTransportLogSearch 1812 WmiPrvSE 16348 w3wp 10260 svchost 2496 conhost 3784 Microsoft.Exchange.AntispamUpdateSvc 9932 Microsoft.Exchange.ContentFilter.Wrapper 16280 conhost 2056 svchost 1192 spoolsv 2052 noderunner 320 smss 5920 scanningprocess 11152 ParserServer 8068 UMWorkerProcess 3756 conhost 304 svchost 2888 w3wp 732 svchost 1900 winlogon 14948 w3wp 22700 noderunner 2872 updateservice 2000 w3wp 700 svchost 1992 mqsvc 4128 Microsoft.Exchange.EdgeSyncSvc 28636 ParserServer 17912 conhost 20652 ParserServer 1960 svchost 14168 msdtc 11436 ParserServer 19192 ParserServer 4536 Microsoft.Exchange.Imap4Service 16168 WmiPrvSE 10132 w3wp 27800 noderunner 25644 mmc 2452 ParserServer 640 lsass 1932 svchost 632 services 3216 ForefrontActiveDirectoryConnector 17436 svchost 4504 Microsoft.Exchange.Store.Service 4500 ParserServer 2772 WmiPrvSE 28200 dllhost 10528 VSSVC 10520 dllhost 7932 Microsoft.Exchange.Store.Worker 1032 rundll32 1920 sftracing 7492 Microsoft.Exchange.Store.Worker 14384 rdpclip 26016 conhost 24464 powershell 13332 MSExchangeHMHost 1008 svchost 10920 csrss 7040 MSExchangeThrottling 3160 MSExchangeTransport 1004 svchost 572 winlogon 7464 Microsoft.Exchange.Store.Worker 10880 WmiPrvSE 7892 Microsoft.Exchange.Store.Worker 12632 CcmExec 992 svchost 10904 WmiPrvSE 4868 Microsoft.Exchange.Imap4Service 6160 w3wp 14348 conhost 8312 dllhost 14776 w3wp 13480 dwm 5720 Microsoft.Exchange.Pop3 544 wininit 7008 Microsoft.Exchange.UM.CallRouter 4420 Microsoft.Exchange.Imap4 6140 Microsoft.Exchange.Pop3 5764 Microsoft.Exchange.Pop3Service 964 svchost 7428 Microsoft.Exchange.Store.Worker 13580 MonitoringHost 25096 noderunner 5700 scanningprocess 13456 conhost 24656 MSExchangeMailboxAssistants 5260 Microsoft.Exchange.RpcClientAccess.Service 6080 Microsoft.Exchange.Search.Service 11288 powershell 3960 MSExchangeDelivery 4440 MSExchangeFrontendTransport 6112 Microsoft.Exchange.Store.Worker 12712 ParserServer 5248 conhost 1368 HealthService 6536 MSExchangeSubmission 26076 conhost 3084 rundll32 6100 Microsoft.Exchange.Pop3Service 24200 conhost 536 csrss 7812 Microsoft.Exchange.Store.Worker 10396 svchost 10824 conhost 21596 MSExchangeHMWorker 7416 Microsoft.Exchange.Store.Worker 852 dwm 7368 Microsoft.Exchange.Store.Worker 468 csrss 17552 conhost 2260 SMSvcHost 12100 CmRcService 4772 Microsoft.Exchange.Imap4 10372 ParserServer 3044 EdgeTransport 4760 conhost 14672 svchost 15100 hostcontrollerservice 6048 msexchangerepl 5616 Microsoft.Exchange.Store.Worker 436 svchost 4 System 6408 Microsoft.Exchange.ServiceHost 0 Idle Performance Counters Layout information: A process is holding onto a transport performance counter. processId : 23084, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 23084 StartupTime: 130735656036583286, currentInstance : rpca-e14cmdletswrapper-defaultdomain(B61B0DD9) RefCount=0 SpinLock=0 Offset=40184, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 23084, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 23084 StartupTime: 130735656036583286, currentInstance : mb-e14cmdletswrapper-defaultdomain(290EF16) RefCount=0 SpinLock=0 Offset=39856, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 23084, counter : time in resource per second Value=102 SpinLock=0 Lifetime=Type: 1 ProcessId: 23084 StartupTime: 130735656036583286, currentInstance : ad-e14cmdletswrapper-defaultdomain(2CDA669C) RefCount=0 SpinLock=0 Offset=39528, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 11288, counter : time in resource per second Value=81 SpinLock=0 Lifetime=Type: 1 ProcessId: 11288 StartupTime: 130735664378248405, currentInstance : ad-powershell-defaultdomain(95CC324A) RefCount=1 SpinLock=0 Offset=39200, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 11288, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 11288 StartupTime: 130735664378248405, currentInstance : mb-powershell-defaultdomain(CC014C00) RefCount=1 SpinLock=0 Offset=38872, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 11288, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 11288 StartupTime: 130735664378248405, currentInstance : rpca-powershell-defaultdomain(4598AFAF) RefCount=1 SpinLock=0 Offset=38544, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 3044, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3044 StartupTime: 130732607834359955, currentInstance : rpca-edgetransport-edgetransport.exe(911B6EB3) RefCount=1 SpinLock=0 Offset=38216, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 3044, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3044 StartupTime: 130732607834359955, currentInstance : mb-edgetransport-edgetransport.exe(A5AF4BBC) RefCount=1 SpinLock=0 Offset=37888, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 3044, counter : time in resource per second Value=400734 SpinLock=0 Lifetime=Type: 1 ProcessId: 3044 StartupTime: 130732607834359955, currentInstance : ad-edgetransport-edgetransport.exe(E79D4A36) RefCount=1 SpinLock=0 Offset=37560, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 2200, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 2200 StartupTime: 130730082646643505, currentInstance : rpca-w3wp-msexchangeowaapppool(4AA799E7) RefCount=0 SpinLock=0 Offset=37232, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 2200, counter : time in resource per second Value=280053 SpinLock=0 Lifetime=Type: 1 ProcessId: 2200 StartupTime: 130730082646643505, currentInstance : mb-w3wp-msexchangeowaapppool(C3953468) RefCount=0 SpinLock=0 Offset=36904, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 2200, counter : time in resource per second Value=142126 SpinLock=0 Lifetime=Type: 1 ProcessId: 2200 StartupTime: 130730082646643505, currentInstance : ad-w3wp-msexchangeowaapppool(160BE662) RefCount=0 SpinLock=0 Offset=36576, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 14776, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 14776 StartupTime: 130730081973252112, currentInstance : rpca-w3wp-msexchangepowershellapppool(3CF18BF) RefCount=0 SpinLock=0 Offset=36248, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 14776, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 14776 StartupTime: 130730081973252112, currentInstance : mb-w3wp-msexchangepowershellapppool(A686C810) RefCount=0 SpinLock=0 Offset=35920, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 14776, counter : time in resource per second Value=2068875 SpinLock=0 Lifetime=Type: 1 ProcessId: 14776 StartupTime: 130730081973252112, currentInstance : ad-w3wp-msexchangepowershellapppool(9E48CD5A) RefCount=0 SpinLock=0 Offset=35592, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 15084, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 15084 StartupTime: 130730081886009912, currentInstance : rpca-w3wp-msexchangeoabapppool(8149E8D2) RefCount=0 SpinLock=0 Offset=35264, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 15084, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 15084 StartupTime: 130730081886009912, currentInstance : mb-w3wp-msexchangeoabapppool(58D0A79D) RefCount=0 SpinLock=0 Offset=34936, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 15084, counter : time in resource per second Value=55883 SpinLock=0 Lifetime=Type: 1 ProcessId: 15084 StartupTime: 130730081886009912, currentInstance : ad-w3wp-msexchangeoabapppool(CC31A917) RefCount=0 SpinLock=0 Offset=34608, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 14948, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 14948 StartupTime: 130730081557522734, currentInstance : rpca-w3wp-msexchangepowershellfrontendapppool(E1115251) RefCount=0 SpinLock=0 Offset=34280, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 14948, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 14948 StartupTime: 130730081557522734, currentInstance : mb-w3wp-msexchangepowershellfrontendapppool(34B9187E) RefCount=0 SpinLock=0 Offset=33952, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 14948, counter : time in resource per second Value=1576 SpinLock=0 Lifetime=Type: 1 ProcessId: 14948 StartupTime: 130730081557522734, currentInstance : ad-w3wp-msexchangepowershellfrontendapppool(FAEFA1B4) RefCount=0 SpinLock=0 Offset=33624, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 13332, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 13332 StartupTime: 130730081246077528, currentInstance : rpca-msexchangehmhost-msexchangehmhost.exe(87A5B053) RefCount=0 SpinLock=0 Offset=33296, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 13332, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 13332 StartupTime: 130730081246077528, currentInstance : mb-msexchangehmhost-msexchangehmhost.exe(FB9D599C) RefCount=0 SpinLock=0 Offset=32968, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 13332, counter : time in resource per second Value=20422 SpinLock=0 Lifetime=Type: 1 ProcessId: 13332 StartupTime: 130730081246077528, currentInstance : ad-msexchangehmhost-msexchangehmhost.exe(4E220B96) RefCount=0 SpinLock=0 Offset=32640, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 27800, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 27800 StartupTime: 130732559851229547, currentInstance : rpca-noderunner-contentenginenode1(316BF6E3) RefCount=1 SpinLock=0 Offset=32312, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 27800, counter : time in resource per second Value=250572035 SpinLock=0 Lifetime=Type: 1 ProcessId: 27800 StartupTime: 130732559851229547, currentInstance : mb-noderunner-contentenginenode1(2EE8286C) RefCount=1 SpinLock=0 Offset=31984, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 27800, counter : time in resource per second Value=309575 SpinLock=0 Lifetime=Type: 1 ProcessId: 27800 StartupTime: 130732559851229547, currentInstance : ad-noderunner-contentenginenode1(61591E6) RefCount=1 SpinLock=0 Offset=31656, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 21596, counter : time in resource per second Value=276568 SpinLock=0 Lifetime=Type: 1 ProcessId: 21596 StartupTime: 130732616321024370, currentInstance : ad-msexchangehmworker-msexchangehmworker.exe(712B0516) RefCount=1 SpinLock=0 Offset=31328, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 21596, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 21596 StartupTime: 130732616321024370, currentInstance : mb-msexchangehmworker-msexchangehmworker.exe(6177C09C) RefCount=1 SpinLock=0 Offset=31000, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 21596, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 21596 StartupTime: 130732616321024370, currentInstance : rpca-msexchangehmworker-msexchangehmworker.exe(39325ED3) RefCount=1 SpinLock=0 Offset=30672, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 8068, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 8068 StartupTime: 130730079342620471, currentInstance : rpca-umworkerprocess-umworkerprocess.exe(970CCE33) RefCount=0 SpinLock=0 Offset=30344, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 8068, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 8068 StartupTime: 130730079342620471, currentInstance : mb-umworkerprocess-umworkerprocess.exe(8A7F8A3C) RefCount=0 SpinLock=0 Offset=30016, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 8068, counter : time in resource per second Value=489 SpinLock=0 Lifetime=Type: 1 ProcessId: 8068 StartupTime: 130730079342620471, currentInstance : ad-umworkerprocess-umworkerprocess.exe(95818B6) RefCount=0 SpinLock=0 Offset=29688, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 16348, counter : time in resource per second Value=393256 SpinLock=0 Lifetime=Type: 1 ProcessId: 16348 StartupTime: 130730082964967615, currentInstance : ad-w3wp-msexchangeecpapppool(B648688D) RefCount=0 SpinLock=0 Offset=29360, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 16348, counter : time in resource per second Value=4885 SpinLock=0 Lifetime=Type: 1 ProcessId: 16348 StartupTime: 130730082964967615, currentInstance : mb-w3wp-msexchangeecpapppool(E27E6507) RefCount=0 SpinLock=0 Offset=29032, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 16348, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 16348 StartupTime: 130730082964967615, currentInstance : rpca-w3wp-msexchangeecpapppool(57806648) RefCount=0 SpinLock=0 Offset=28704, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 3160, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3160 StartupTime: 130732607510143268, currentInstance : rpca-msexchangetransport-msexchangetransport.exe(24F56C33) RefCount=1 SpinLock=0 Offset=28376, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 3160, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3160 StartupTime: 130732607510143268, currentInstance : mb-msexchangetransport-msexchangetransport.exe(92FB3D3C) RefCount=1 SpinLock=0 Offset=28048, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 3160, counter : time in resource per second Value=42 SpinLock=0 Lifetime=Type: 1 ProcessId: 3160 StartupTime: 130732607510143268, currentInstance : ad-msexchangetransport-msexchangetransport.exe(2447ECB6) RefCount=1 SpinLock=0 Offset=27720, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7008, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7008 StartupTime: 130730079088089233, currentInstance : rpca-microsoft.exchange.um.callrouter-microsoft.exchange.um.callrouter.exe(E8475353) RefCount=0 SpinLock=0 Offset=27392, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7008, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7008 StartupTime: 130730079088089233, currentInstance : mb-microsoft.exchange.um.callrouter-microsoft.exchange.um.callrouter.exe(8F65881C) RefCount=0 SpinLock=0 Offset=27064, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7008, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7008 StartupTime: 130730079088089233, currentInstance : ad-microsoft.exchange.um.callrouter-microsoft.exchange.um.callrouter.exe(78F52196) RefCount=0 SpinLock=0 Offset=26736, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 8116, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 8116 StartupTime: 130730078965276725, currentInstance : rpca-umservice-umservice.exe(E39A1133) RefCount=0 SpinLock=0 Offset=26408, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 8116, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 8116 StartupTime: 130730078965276725, currentInstance : mb-umservice-umservice.exe(FFBB273C) RefCount=0 SpinLock=0 Offset=26080, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 8116, counter : time in resource per second Value=555 SpinLock=0 Lifetime=Type: 1 ProcessId: 8116 StartupTime: 130730078965276725, currentInstance : ad-umservice-umservice.exe(9A8AC6B6) RefCount=0 SpinLock=0 Offset=25752, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7900, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7900 StartupTime: 130730078996839212, currentInstance : rpca-microsoft.exchange.store.worker-microsoft.exchange.store.worker.exe(ABB009B3) RefCount=0 SpinLock=0 Offset=25424, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7900, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7900 StartupTime: 130730078996839212, currentInstance : mb-microsoft.exchange.store.worker-microsoft.exchange.store.worker.exe(38BA31BC) RefCount=0 SpinLock=0 Offset=25096, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7900, counter : time in resource per second Value=218529 SpinLock=0 Lifetime=Type: 1 ProcessId: 7900 StartupTime: 130730078996839212, currentInstance : ad-microsoft.exchange.store.worker-microsoft.exchange.store.worker.exe(11106236) RefCount=0 SpinLock=0 Offset=24768, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7204, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7204 StartupTime: 130730078901370474, currentInstance : rpca-msexchangetransportlogsearch-msexchangetransportlogsearch.exe(EF66F2D3) RefCount=0 SpinLock=0 Offset=24440, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7204, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7204 StartupTime: 130730078901370474, currentInstance : mb-msexchangetransportlogsearch-msexchangetransportlogsearch.exe(B020391C) RefCount=0 SpinLock=0 Offset=24112, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7204, counter : time in resource per second Value=611 SpinLock=0 Lifetime=Type: 1 ProcessId: 7204 StartupTime: 130730078901370474, currentInstance : ad-msexchangetransportlogsearch-msexchangetransportlogsearch.exe(20578116) RefCount=0 SpinLock=0 Offset=23784, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 4868, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4868 StartupTime: 130730078594026714, currentInstance : rpca-microsoft.exchange.imap4service-microsoft.exchange.imap4service.exe(128A1B3) RefCount=0 SpinLock=0 Offset=23456, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 4868, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4868 StartupTime: 130730078594026714, currentInstance : mb-microsoft.exchange.imap4service-microsoft.exchange.imap4service.exe(B4CBDCBC) RefCount=0 SpinLock=0 Offset=23128, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 4868, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4868 StartupTime: 130730078594026714, currentInstance : ad-microsoft.exchange.imap4service-microsoft.exchange.imap4service.exe(F0E98836) RefCount=0 SpinLock=0 Offset=22800, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 5764, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5764 StartupTime: 130730078701682966, currentInstance : rpca-microsoft.exchange.pop3service-microsoft.exchange.pop3service.exe(8961F613) RefCount=0 SpinLock=0 Offset=22472, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 5764, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5764 StartupTime: 130730078701682966, currentInstance : mb-microsoft.exchange.pop3service-microsoft.exchange.pop3service.exe(3C128D5C) RefCount=0 SpinLock=0 Offset=22144, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 5764, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5764 StartupTime: 130730078701682966, currentInstance : ad-microsoft.exchange.pop3service-microsoft.exchange.pop3service.exe(96BB056) RefCount=0 SpinLock=0 Offset=21816, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7040, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7040 StartupTime: 130730078816526722, currentInstance : rpca-msexchangethrottling-msexchangethrottling.exe(8C1DA893) RefCount=0 SpinLock=0 Offset=21488, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7040, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7040 StartupTime: 130730078816526722, currentInstance : mb-msexchangethrottling-msexchangethrottling.exe(AB2BADDC) RefCount=0 SpinLock=0 Offset=21160, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 7040, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7040 StartupTime: 130730078816526722, currentInstance : ad-msexchangethrottling-msexchangethrottling.exe(8962F4D6) RefCount=0 SpinLock=0 Offset=20832, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6536, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6536 StartupTime: 130730078769807986, currentInstance : rpca-msexchangesubmission-msexchangesubmission.exe(60747EB3) RefCount=0 SpinLock=0 Offset=20504, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6536, counter : time in resource per second Value=159000 SpinLock=0 Lifetime=Type: 1 ProcessId: 6536 StartupTime: 130730078769807986, currentInstance : mb-msexchangesubmission-msexchangesubmission.exe(67B4173C) RefCount=0 SpinLock=0 Offset=20176, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6536, counter : time in resource per second Value=273020 SpinLock=0 Lifetime=Type: 1 ProcessId: 6536 StartupTime: 130730078769807986, currentInstance : ad-msexchangesubmission-msexchangesubmission.exe(85200236) RefCount=0 SpinLock=0 Offset=19848, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 4420, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4420 StartupTime: 130730078654651715, currentInstance : rpca-microsoft.exchange.imap4-microsoft.exchange.imap4.exe(EAAB5DD3) RefCount=0 SpinLock=0 Offset=19520, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 4420, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4420 StartupTime: 130730078654651715, currentInstance : mb-microsoft.exchange.imap4-microsoft.exchange.imap4.exe(1FC2541C) RefCount=0 SpinLock=0 Offset=19192, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 4420, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4420 StartupTime: 130730078654651715, currentInstance : ad-microsoft.exchange.imap4-microsoft.exchange.imap4.exe(17E0EA16) RefCount=0 SpinLock=0 Offset=18864, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6160, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6160 StartupTime: 130730078749026715, currentInstance : rpca-w3wp-msexchangeservicesapppool(E8BBF810) RefCount=0 SpinLock=0 Offset=18536, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6160, counter : time in resource per second Value=1867617 SpinLock=0 Lifetime=Type: 1 ProcessId: 6160 StartupTime: 130730078749026715, currentInstance : mb-w3wp-msexchangeservicesapppool(10FE94BF) RefCount=0 SpinLock=0 Offset=18208, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 6160, counter : time in resource per second Value=3331874 SpinLock=0 Lifetime=Type: 1 ProcessId: 6160 StartupTime: 130730078749026715, currentInstance : ad-w3wp-msexchangeservicesapppool(E0DE475) RefCount=0 SpinLock=0 Offset=17880, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 10132, counter : time in resource per second Value=84124 SpinLock=0 Lifetime=Type: 1 ProcessId: 10132 StartupTime: 130730079880745472, currentInstance : ad-w3wp-msexchangerpcproxyapppool(99BB8ED6) RefCount=0 SpinLock=0 Offset=17552, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 10132, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10132 StartupTime: 130730079880745472, currentInstance : mb-w3wp-msexchangerpcproxyapppool(B190F21C) RefCount=0 SpinLock=0 Offset=17224, categoryName: MSExchange Activity Context Resources A process is holding onto a transport performance counter. processId : 10132, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10132 StartupTime: 130730079880745472, currentInstance : rpca-w3wp-msexchangerpcproxyapppool(8B7590B3) RefCount=0 SpinLock=0 Offset=16896, cate...</Data>
</EventData>
</Event>
https://support.microsoft.com/en-us/kb/2870416/
I used method
1, but it did not help
me.
Method 2:
[PS] C:\Windows\system32>Add-Pssnapin Microsoft.Exchange.Management.PowerShell.Setup
[PS] C:\Windows\system32>New-PerfCounters -definitionfilename "C:\Program Files\Microsoft\Exchange Server\V15\Setup\Perf
\GlsPerformanceCounters.xml"
New-PerfCounters : The performance counter definition file C:\Program Files\Microsoft\Exchange Server\V15\Setup\Perf\GlsPerformanceCounters.xml could not be found.
Any idea ?
Если Вам помог чей-либо ответ, пожалуйста, не забывайте жать на кнопку "Предложить как ответ" или "Проголосовать за полезное сообщение" -
Exchange 2013 SP1 On-prem - Disable Outlook Anonymous NTLM?
I'm aware there is a Group Policy admin template available to force Outlook to request only NTLM or basic authentication, however, I'd like to disable Outlook Anonymous NTLM on the server side in our Exchange 2013 SP1 on-premises installation.
Is there a method to disable Anonymous NTLM for Outlook client connections for the cas or organization? I've tried the "Set-OutlookAnywhere" InternalClientAuthenticationMethod and ExternalClientAuthentcationMethod but Outlook is still
able to connect with Anonymous Authentication selected for the logon network security.
Thanks
John LoweryHi Jim,
No luck. I checked the CAS Default Web Site\Rpc Authentication and the MBX Exchange Back End\Rpc as well, and both have Anonymous Authentication disabled. However, Exchange still allows Outlook to establish Anonymous NTLM connections.
My understanding is that the Authentication controls for the web site do not control the Outlook RPC over HTTP connection.
I have been able to use an administrative template to force Outlook clients to avoid Anonymous NTLM, but I would prefer to enforce it on the CAS or MBX, because doing it on the client side causes Office 365 Exchange connection failures - there's no way to
specify connection restrictions only for on-premises servers. See
http://support.microsoft.com/kb/2975918.
Thanks,
John -
Exchange 2013 : OWA failing after login with error "HTTPS 400"
Greetings,
I am in phase of Upgrading my existing Exchange 2007 Infra to Exchange 2013.
The environment is as mentioned below:
4 Mailbox Server (DAG)
4 CAS Servers (NLB)
Everything has been configured and working properly, except Only one CAS server is able to pass the login request
https://servername/owa
Rest of all the CAS servers are failing with error "HTTPS 400" while accessing OWA
https://localhost/owa
Its happening only while accessing OWA, ECP works fine.
Please let me know the fix to counter this strange issue.
Thanks in advance.
RegardsHi,
Please check if IIS log is enabled on the CAS server, if not, please enable it.
Then check the detailed error code from IIS logs (Path: inetpub\logs\Logfiles\W3SVC1 ) , some code like 400.1, 400.2 ect.
Refer to this KB for more details
http://support.microsoft.com/kb/943891
After that, please post the OWA related login entry with error code shows 400.
Thanks for your time and patience.
Meanwhile, please check the OWA authentication method by command
Get-OWAVirtualDirectory –Server “Ex2013 CAS server” | fl *authentication*
We should set the authentication as the below:
Get-OWAvirtualdirectory -Server “Ex2013_CAS_server” | set-OWAvirtualdirectory -windowsAuthentication $False -BasicAuthentication $True -FormsAuthentication $True
Then perform iisreset and try to access OWA again.
Best Regards. -
Exchange 2013, Outlook 2007 clients Problems with Outlook Anywhere connection
Hi everyone,
I have a mail system Exchange 2013 SP1, on Windows Server 2012 R2.
I have only one mail server with the Client Access and Mailbox roles Server.
I have a Wildcard certificate type *. Mydomain.com.
All connections to the Outlook Anywhere Outlook 2010, Outook 2013 work correctly.
The ActiveSync connections are working properly, too.
But Outlook 2007 clients connecting with Outlook Anywhere asking for credentials continuously fail continuously.
How can I solve this?
thank you very much
Microsoft Certified IT Professional Server AdministratorHi,
Based on my experience, we need to set Outlook provider with the domain name if it's wildcard certificate:
Set-OutlookProvider -Identity EXPR -CertPrincipalName msstd:*.domain.com
http://technet.microsoft.com/en-us/library/cc535023(EXCHG.80).aspx
Thus, I recommend you try the above configuration and test the Outlook connection again.
Thanks,
Angela Shi
TechNet Community Support -
Exchange 2013 CAS functionality in coexistence with Exchange 2010 CAS
Hi,
I am planning to migrate Exchange 2010 to Exchange 2013 for 15000 users. We have a pool of 6 CAS 2010 servers added in a single CAS array. So my question is if we introduce a new CAS 2013 server in same site then will it affect CAS traffic anyway ? If we
point our HLB to all CAS servers including CAS 2010 and CAS 2013 so will the CAS 2010 servers wil take traffic or is it only CAS 2013 servers who will take traffic. We will be putting same URLs in CAS 2013 same as CAS 2010. I have read lot of MS articles and
all say that CAS 2013 should be enabled for CAS traffic and it will proxy request to CAS 2010. But I am not sure if we will face any CAS traffic issue whenever we will introduce CAS 2013 servers in same site and traffic will be pointed to CAS 2010 and CAS
2013 both. Is it possible to add CAS 2013 in Exchange 2010 CAS array ? Please guide. Thanks in advance.For mailbox that exist on Exchange 2010, EXCH2013 CAS will proxy the request to an Exchange 2010 Client Access servers that exists within the mailbox’s local site.
For mailboxes that exist on Exchange 2013, EXCH2013 CAS will proxy the request to the Exchange 2013 Mailbox server that is hosting the active copy of the user’s mailbox which will generate the Autodiscover response.
-->Is it possible to add CAS 2013 in Exchange 2010 CAS array ?
No. CAS Array is no longer exits in Exchange 2013. But concept of a single namespace for Outlook connectivity remains. Please check this and this. In
your case you dont need to worry as you have a HLB in place it will do the job
When a new exchange2013 is deployed Outlook Anywhere has been enabled on all Client Access servers within the infrastructure and the mail.contoso.com and autodiscover.contoso.com namespaces have been moved to resolve to Exchange 2013 Client Access server
infrastructure. In your case it is pointed to both as you have a load balancer in place but the same URL should be configured in exch2013
Make sure you have exchange2010-SP3 minimum as it is the prerequisite requirement for upgarding EXCh2010 to 2013.
Please check the exchange server deployment assistant
tool for moving mailboxes
After moving a mailbox check the URLs. Configure autodiscover,EWS,OAB URLs on exchange2013. Please check this as
well for checking URLs.
I hope you know MAPI/RPC (RPC over TCP) traffic is now replaced with RPC over HTTP/s instead in exch2013.
Thanks
MAS
Please don't forget to mark an answer if it answers your question or mark as helpful if it helps -
Exchange 2013 Critical Search event 2158 with event 1006
Hi,
I'm running Exchange 2013 CU1. I've noticed in the event logs two errors that continuously keep popping up relating to searching. Actual searching of mail seems fine and the mail databases are in a healthy state.
Event ID 2158 Unified logging service
Event 20 (Search) of severity 'Critical' occurred 11 more time(s) and was suppressed in the event log
and
Event ID 1006 General
The FastFeeder component received a connection exception from FAST. Error details: Microsoft.Exchange.Search.Fast.FastConnectionException: Connection to the Content Submission Service has failed. ---> Microsoft.Ceres.External.ContentApi.ConnectionException:
Recovery failed after 0 retries
at Microsoft.Ceres.External.ContentApi.DocumentFeeder.DocumentFeeder.CheckRecoveryFailed()
at Microsoft.Ceres.External.ContentApi.DocumentFeeder.DocumentFeeder.WaitForAvailable()
at Microsoft.Ceres.External.ContentApi.DocumentFeeder.DocumentFeeder.SubmitDocument(Document document, TimeSpan timeout)
at Microsoft.Ceres.External.ContentApi.DocumentFeeder.DocumentFeeder.SubmitDocument(Document document)
at Microsoft.Exchange.Search.Fast.FastFeeder.SubmitDocumentInternal(Object state)
--- End of inner exception stack trace ---Hi,
Please take your time to apply the latest CU and see whether the issue fixes.
Regards,
Simon Wu
TechNet Community Support -
I got a call to check an issue with a Exchange Server 2013 SP1 environment recently. All server was upgraded from Exchange server 2013 CU2 to Exchange Server 2013 SP1. It was done successfully but many users were being randomly prompted with a popup in their outlook
client with the following message:-
“The Microsoft Exchange Administrator has made a change that requires you quit and restart Outlook”
Although there wasn’t any changes of late in the environment there were random popups like these for multiple users. As the behaviour was not consistent and effecting the entire upgration population
Please suggest us how to resolve the issue.
Regards, Md Ehteshamuddin Khan All the opinions expressed here is mine. This posting is provided "AS IS" with no warranties or guarantees and confers no rights.Hi,
Does the issue happen to all Outlook 2013 users? Please create a new Outlook profile to have a try.
If it fails, please check the msExchHomePublicMDB value in ADSI Edit:
1. In Adsiedit, expand Configuration-->CN=Services -> CN=Microsoft Exchange -> CN=domain -> CN=Administrative Groups -> CN=Exchange Administrative Group -> CN=Databases.
2. Right-click the listed database > Properties.
3. Check whether the msExchHomePublicMDB value is set to an available value. Please change the value to <not set>.
4. Click OK.
Then check whether the issue persists.
Thanks,
Winnie Liang
TechNet Community Support -
Exchange 2013 - 451 DNS query failed with error ErrorTimeout
Hi all, I know that there are many similar topics in forum, but my problem is a bit different.
My environment : Exchange Server 2013 (Windows Server 2008 R2 Ent) , Domain Controller + DNS (Windows Server 2008 R2 Ent) . EX Server uses DC as preferred DNS Server .
Sometimes, I cannot send email to customers / people of some domains, I get error in my MS Outlook :
Delivery is delayed to these recipients or groups:
[email protected]
[email protected]
Subject: *****
This message hasn't been delivered yet. Delivery will continue to be attempted.
The server will keep trying to deliver this message for the next 1 days, 22 hours and 52 minutes. You'll be notified if the message can't be delivered by that time.
Diagnostic information for administrators:
Generating server: ex.mydomain.com
[email protected]
Remote Server returned '400 4.4.7 Message delayed'
[email protected]
Remote Server returned '400 4.4.7 Message delayed'
Original message headers:
Then I open Exchange Toolbox ==> Queue Viewer, what I see about messages which are sent to customerdomain.com :
From Exchange Server command promt, I can query dns
nslookup
Default Server: mydc.mydomain.com
Address: 192.168.10.2
> set type=mx
> customerdomain.com
Server: mydc.mydomain.com
Address: 192.168.10.2
Non-authoritative answer:
customerdomain.com MX preference = 0, mail exchanger = aspmx.l.google.com
customerdomain.com MX preference = 5, mail exchanger = alt1.aspmx.l.google.com
customerdomain.com MX preference = 5, mail exchanger = alt2.aspmx.l.google.com
customerdomain.com MX preference = 10, mail exchanger = aspmx2.googleemail.com
customerdomain.com MX preference = 10, mail exchanger = aspmx3.googleemail.com
aspmx.l.google.com internet address = 74.125.200.27
I can telnet to their mx server port 25 (of course they use gmail hosting) and send email to [email protected] normally.
It just happen sometimes, with some domain (I can send/receive email with customerdomain.com normally before).
How can I fix it ?Hi all,
I think the problem because "DNS Suffix" ? although I uncheck "Append parent suffix of the primary DNS suffix" under Advanced TCP/IP Setting of network interface. Please see this:
When I query by using dns client on DNS server:
C:\Users\Administrator>nslookup
Default Server: ad.mydomain.com
Address: 192.168.0.3
> gmail.com
Server: ad.mydomain.com
Address: 192.168.0.3
Non-authoritative answer:
Name: gmail.com
Addresses: 2404:6800:4005:802::1015
173.194.127.86
173.194.127.85
> set type=mx
> gmail.com
Server: ad.mydomain.com
Address: 192.168.0.3
Non-authoritative answer:
gmail.com MX preference = 10, mail exchanger = alt1.gmail-smtp-in.l.google
.com
gmail.com MX preference = 30, mail exchanger = alt3.gmail-smtp-in.l.google
.com
gmail.com MX preference = 20, mail exchanger = alt2.gmail-smtp-in.l.google
.com
gmail.com MX preference = 5, mail exchanger = gmail-smtp-in.l.google.com
gmail.com MX preference = 40, mail exchanger = alt4.gmail-smtp-in.l.google
.com
alt1.gmail-smtp-in.l.google.com internet address = 173.194.72.26
alt2.gmail-smtp-in.l.google.com internet address = 74.125.25.26
gmail-smtp-in.l.google.com internet address = 74.125.68.27
alt4.gmail-smtp-in.l.google.com AAAA IPv6 address = 2607:f8b0:4001:c07::1b
When I query by using command promt on DNS server, but point the dns server to 8.8.8.8:
C:\Users\Administrator>nslookup
Default Server: ad.mydomain.com
Address: 192.168.0.3
> server 8.8.8.8
Default Server: google-public-dns-a.google.com
Address: 8.8.8.8
> gmail.com
Server: google-public-dns-a.google.com
Address: 8.8.8.8
Non-authoritative answer:
Name: gmail.com.mydomain.com
Address: 187.26.231.129
> set type=mx
> gmail.com
Server: google-public-dns-a.google.com
Address: 8.8.8.8
itl.com
primary name server = ns1.netnames.net
responsible mail addr = hostmaster.netnames.net
serial = 2011071103
refresh = 10800 (3 hours)
retry = 1800 (30 mins)
expire = 3600000 (41 days 16 hours)
default TTL = 21600 (6 hours)
It append mydomain.com into query, I configured my dns server forward to 8.8.8.8 -
Exchange 2013 on-prem hybrid to O365
design:
Exchange 2013 deployment on-prem including UM being used for UM for users. Domain and Exchange are set to companyA.net
companyA.com is set up in O365 for email\calendars etc.
ADFS and DirSync already configured to O365.
Available UPN's in AD are already companyA.com and companyA.net.
Plan:
Setup hybrid so some users can have mailboxes on-prem and others on O365.
Have companyA.com be the primary smtp address
Questions:
1) which domain would be used as the autod when running
Set-HybridConfiguration –Domains "companyA.com, companyA.net", "autod:<>"
2) The speech attendant part of UM on prem is a non-negotiable requirement. could the mailboxes be on O365 and still work correctly?
Other considerations:
1) Lync 2013 on-prem is deployed for all features including Enterprise voice. Presence, calendars, and voicemail from exchange required.Sorry if I am asking a lot of questions.
I am trying to setup test accounts and make sure this is working like we want it to. The production system is 30,000 accounts and I do NOT want to affect any of them until we are ready.
I have the on-prem domain of companyA.net and have setup test.companyA.net as a UPN suffix in AD domains and trusts. ADFS has been setup as well as DirSync (limited to one test OU). I have set up both the companyA.net and test.companyA.net
as additional domains and both show active in Office365 of companyA.com.
I started the hybrid wizard on-prem and got as far as the Domain and token page. Only companyA.net is listed, not test.companyA.net. Again, I ONLY want for now to have test.companyA.net working. Should I be able to proceed or how do I get test.companyA.net
on that list?
Sorry to be skittish, but any really detailed articles (step-by-step is nice) or help on how to get this setup for testing?
I am open to questions and providing what info I can if given how to find it.
Maybe you are looking for
-
How can i use Unix database in java?
How can i use Unix database in Java? Message was edited by: JPro
-
Unable to print some illustrator-files
Hi, •The problem: I have some illustrator-files I can't print. I already tried a lot of different things to make it print (more info below). The files I have problems with all use patterns (non-standard pattern-swatches). 1 group of files use a jpg-p
-
Embedded video not playing in exported podcast of a recorded presentation
I have embedded video (.mov) in my Keynote '08 presentation which plays fine in the presentation and in Quicktime standalone too. But when I'm recording the presentation with the audio voice-over, the embedded video does not appear in the podcast. Wh
-
ITunes hosed my ipad during iOS upgrade
I just tried via my rather old winXP box to upgrade my ipad to the latest iOS, and it errored (first with 1602, then 1604 on subsequent attempts), requiring a restore. It turns out that if your machine has USB 1.1 ports and is not modern enough to ha
-
Conditions for service price determination incomplete
Hi All, While doing the VA11 through SD-BOS, I am getting the following. Conditions for service price determination incomplete Message no. SE477 Diagnosis Either the calculation schema for services does not exist or the condition types have not been