Information Store service terminated unexpectedly, event id 7031

We have Exchange 2010 (coexistence with 2003) running SP3 and a DAG with two members. It now happens occasionally that suddenly all mailstores are running on mailbox server. I had them balanced (manually) on one, so I examined the event viewer. There I saw
The Microsoft Exchange Information Store service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 5000 milliseconds: Restart the service.
EVENT ID 7031
A few seconds later it is started again. But since several mailstores are running on it, it takes some time before all stores are mounted again and so users complain that Outlook disconnects. The time it is down, is too short for the DAG to switch over to
the replica, so we have a real downtime here.
Is this a known issue and what can we do for this? I really need to fix this ASAP as you can understand, since we have like 1500 users already now on this environment. I saw this fix:
http://support.microsoft.com/default.aspx?kbid=2803727
In there also two issues with information store being stopped are reported here. 
Thanks for all your help!

Thanks Gulab,
No, no major change. We are only moving mailboxes now from the old 2003 to the new 2010 server. I have seen that this happened for a long time already, but probably never during working hours. There is no actual trend. Today it happened once. Yesterday it
happened like 5 times. other days, just once a day, a few times never.
We are running TM Scanmail.
Here the full details
System
Provider
[ Name]
Service Control Manager
[ Guid]
{555908d1-a6d7-4695-8e1e-26931d2012f4}
[ EventSourceName]
Service Control Manager
EventID
7031
[ Qualifiers]
49152
Version
0
Level
2
Task
0
Opcode
0
Keywords
0x8080000000000000
TimeCreated
[ SystemTime]
2014-01-14T09:16:32.732892000Z
EventRecordID
90280
Correlation
Execution
[ ProcessID]
672
[ ThreadID]
6532
Channel
System
Computer
xxx162.eu.ykgw.net
Security
EventData
param1
Microsoft Exchange Information Store
param2
1
param3
5000
param4
1
param5
Restart the service
4D005300450078006300680061006E0067006500490053000000

Similar Messages

  • Exchange Server 2013- Information Store Service not starting

    Hi Everyone,
    We are having an issue with one of our Exchange Servers that is running Exchange Mailbox server role.
    Server : Exchange 2013 CU3 , Windows Server 2012 R2
    We noticed on Friday that its "Information Store Service" has stopped working and we try to manually run it (Services->Microsoft
    Exchange Information Store Service -> Start) 
    Service didn't start and gave : Error 0x80004005 Unspecified Error
    Trying to start the service using the command line using:  net start MSexchangeIS gave us a different error:
    System Error 16389 has Occurred
    The system can not find message text for message number 0x4005 in the message file for BASE
    Event viewer has  (Event ID : 7031):
    The Microsoft Exchange Information Store service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 5000 milliseconds: Restart the service.
    Since we have got this error we have tried some fixes such as  Checking Time synchronisation  and IPv6 issues. But nothing
    seems to have caused this. We have rebuild the windows server from scratch and used the recover server switch to  rebuild the Exchange server. Still the same issue.
    Any help would be greatly appreciated.

    Hi Tiraj,
    Any update? Does the issue still occur after install Exchange server on Windows Server 2012?
    I wonder if the issue occurs suddenly or did you configured something on database.
    In addition, overload on server could also cause the issue.
    Regards,
    Rebecca Tu
    TechNet Community Support

  • Active Directory Web Services service terminated unexpectedly

    Hi everyone:
    I'm having a problem with the Active Directory Web Services service does not start. Attach the event ID:
    Log System:
    Log Name: System
    Source: Service Control Manager
    Date: 1/6/2015 6:55:19 PM
    Event ID: 7034
    Task Category: None
    Level: Error
    Keywords: Classic
    User: N/A
    Computer: xxx.dominio.com
    Description:
    The Active Directory Web Services service terminated unexpectedly. It has done this 35 time(s).
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7034</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2015-01-06T22:55:19.292471600Z" />
    <EventRecordID>32583</EventRecordID>
    <Correlation />
    <Execution ProcessID="556" ThreadID="1388" />
    <Channel>System</Channel>
    <Computer>xxx.dominio.com</Computer>
    <Security />
    </System>
    <EventData>
    <Data Name="param1">Active Directory Web Services</Data>
    <Data Name="param2">35</Data>
    <Binary>41004400570053000000</Binary>
    </EventData>
    </Event>
    Log Application:
    Log Name: Application
    Source: .NET Runtime
    Date: 1/6/2015 6:55:13 PM
    Event ID: 1026
    Task Category: None
    Level: Error
    Keywords: Classic
    User: N/A
    Computer: xxx.dominio.com
    Description:
    Application: Microsoft.ActiveDirectory.WebServices.exe
    Framework Version: v4.0.30319
    Description: The process was terminated due to an unhandled exception.
    Exception Info: System.ServiceModel.CommunicationObjectFaultedException
    Stack:
    at System.ServiceModel.Channels.CommunicationObject.Close(System.TimeSpan)
    at Microsoft.ActiveDirectory.WebServices.WindowsHostService.StartService(System.Object)
    at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
    at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
    at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
    at System.Threading.ThreadHelper.ThreadStart(System.Object)
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    <System>
    <Provider Name=".NET Runtime" />
    <EventID Qualifiers="0">1026</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2015-01-06T22:55:13.000000000Z" />
    <EventRecordID>1661713</EventRecordID>
    <Channel>Application</Channel>
    <Computer>xxx.dominio.com</Computer>
    <Security />
    </System>
    <EventData>
    <Data>Application: Microsoft.ActiveDirectory.WebServices.exe
    Framework Version: v4.0.30319
    Description: The process was terminated due to an unhandled exception.
    Exception Info: System.ServiceModel.CommunicationObjectFaultedException
    Stack:
    at System.ServiceModel.Channels.CommunicationObject.Close(System.TimeSpan)
    at Microsoft.ActiveDirectory.WebServices.WindowsHostService.StartService(System.Object)
    at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
    at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
    at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
    at System.Threading.ThreadHelper.ThreadStart(System.Object)
    </Data>
    </EventData>
    </Event>
    And
    Log Name: Application
    Source: Application Error
    Date: 1/6/2015 6:55:13 PM
    Event ID: 1000
    Task Category: (100)
    Level: Error
    Keywords: Classic
    User: N/A
    Computer: xxx.dominio.com
    Description:
    Faulting application name: Microsoft.ActiveDirectory.WebServices.exe, version: 6.2.9200.16579, time stamp: 0x516356a2
    Faulting module name: KERNELBASE.dll, version: 6.2.9200.16864, time stamp: 0x531d34d8
    Exception code: 0xe0434352
    Fault offset: 0x0000000000047b8c
    Faulting process id: 0x4ac
    Faulting application start time: 0x01d02a03d45e2d00
    Faulting application path: C:\Windows\ADWS\Microsoft.ActiveDirectory.WebServices.exe
    Faulting module path: C:\Windows\system32\KERNELBASE.dll
    Report Id: 1273a0f1-95f7-11e4-93f7-3440b59e2092
    Faulting package full name:
    Faulting package-relative application ID:
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Level>2</Level>
    <Task>100</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2015-01-06T22:55:13.000000000Z" />
    <EventRecordID>1661714</EventRecordID>
    <Channel>Application</Channel>
    <Computer>xxx.dominio.com</Computer>
    <Security />
    </System>
    <EventData>
    <Data>Microsoft.ActiveDirectory.WebServices.exe</Data>
    <Data>6.2.9200.16579</Data>
    <Data>516356a2</Data>
    <Data>KERNELBASE.dll</Data>
    <Data>6.2.9200.16864</Data>
    <Data>531d34d8</Data>
    <Data>e0434352</Data>
    <Data>0000000000047b8c</Data>
    <Data>4ac</Data>
    <Data>01d02a03d45e2d00</Data>
    <Data>C:\Windows\ADWS\Microsoft.ActiveDirectory.WebServices.exe</Data>
    <Data>C:\Windows\system32\KERNELBASE.dll</Data>
    <Data>1273a0f1-95f7-11e4-93f7-3440b59e2092</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    </EventData>
    </Event>
    I was working about this solution but nothing. "http://blogs.microsoft.co.il/yuval14/2012/06/08/how-to-resolve-error-message-the-active-directory-web-services-service-terminated-unexpectedly-event-id-4079-andor-7034/".
    I changed the Microsoft.ActiveDirectory.WebServices.exe.config file, add two line " <add key=”DebugLevel” value=”Info” />
    <add key=”DebugLogFile” value=”c:windowsdebugadws.log” />", Attach the log
    ADWS Log - AppDomain Microsoft.ActiveDirectory.WebServices.exe with ID 1 - 01/06/2015 17:51:37 ((UTC-04:00) Georgetown, La Paz, Manaus, San Juan)
    OS Version Microsoft Windows NT 6.2.9200.0 - CLR Version 4.0.30319.18449
    ADWS: [1/6/2015 5:51:37 PM] [1] Main: entered
    Utils: [1/6/2015 5:51:37 PM] [1] RemovePriviledgeFromProcess: trying to remove priviledge SeBackupPrivilege
    Utils: [1/6/2015 5:51:37 PM] [1] RemovePriviledgeFromProcess: unable to remove SeBackupPrivilege priviledge because it was absent
    Utils: [1/6/2015 5:51:37 PM] [1] RemovePriviledgeFromProcess: trying to remove priviledge SeRestorePrivilege
    Utils: [1/6/2015 5:51:37 PM] [1] RemovePriviledgeFromProcess: unable to remove SeRestorePrivilege priviledge because it was absent
    Utils: [1/6/2015 5:51:37 PM] [1] RemovePriviledgeFromProcess: trying to remove priviledge SeAssignPrimaryTokenPrivilege
    Utils: [1/6/2015 5:51:37 PM] [1] RemovePriviledgeFromProcess: unable to remove SeAssignPrimaryTokenPrivilege priviledge because it was absent
    Utils: [1/6/2015 5:51:37 PM] [1] RemovePriviledgeFromProcess: trying to remove priviledge SeIncreaseQuotaPrivilege
    Utils: [1/6/2015 5:51:37 PM] [1] RemovePriviledgeFromProcess: unable to remove SeIncreaseQuotaPrivilege priviledge because it was absent
    Utils: [1/6/2015 5:51:37 PM] [1] RemovePriviledgeFromProcess: trying to remove priviledge SeDebugPrivilege
    Utils: [1/6/2015 5:51:37 PM] [1] RemovePriviledgeFromProcess: unable to remove SeDebugPrivilege priviledge because it was absent
    Utils: [1/6/2015 5:51:37 PM] [1] RemovePriviledgeFromProcess: trying to remove priviledge SeTcbPrivilege
    Utils: [1/6/2015 5:51:37 PM] [1] RemovePriviledgeFromProcess: unable to remove SeTcbPrivilege priviledge because it was absent
    Utils: [1/6/2015 5:51:37 PM] [1] RemovePriviledgeFromProcess: trying to remove priviledge SeShutdownPrivilege
    Utils: [1/6/2015 5:51:37 PM] [1] RemovePriviledgeFromProcess: unable to remove SeShutdownPrivilege priviledge because it was absent
    Utils: [1/6/2015 5:51:37 PM] [1] RemoveUnnecessaryPriviledges: all present unnecessary priviledges removed successfully
    Program: [1/6/2015 5:51:37 PM] [1] Main: Starting Windows service host.
    WindowsHostService: [1/6/2015 5:51:37 PM] [1] WindowsHostService constructed
    WindowsHostService: [1/6/2015 5:51:37 PM] [4] OnStart: entering.
    WindowsHostService: [1/6/2015 5:51:37 PM] [4] OnStart: ServiceStart thread started.
    WindowsHostService: [1/6/2015 5:51:37 PM] [6] StartService: entering.
    PerfCounters: [1/6/2015 5:51:37 PM] [6] InstallCountersIfNeeded: entered
    PerfCounters: [1/6/2015 5:51:37 PM] [6] AreCountersInstalled: entered
    PerfCounters: [1/6/2015 5:51:37 PM] [6] AreCountersInstalled: System\CurrentControlSet\Services\ADWS key is present
    PerfCounters: [1/6/2015 5:51:37 PM] [6] AreCountersInstalled: System\CurrentControlSet\Services\ADWS\Performance key is present
    PerfCounters: [1/6/2015 5:51:37 PM] [6] AreCountersInstalled: First Counter value is present
    PerfCounters: [1/6/2015 5:51:37 PM] [6] AreCountersInstalled: perf counters are installed
    PerfCounters: [1/6/2015 5:51:37 PM] [6] AreCountersCurrent: installed perf counter version: 6
    PerfCounters: [1/6/2015 5:51:37 PM] [6] AreCountersCurrent: desired perf counter version: 6
    PerfCounters: [1/6/2015 5:51:37 PM] [6] AreCountersCurrent: perf counter category ADWS is current
    PerfCounters: [1/6/2015 5:51:37 PM] [6] InstallCountersIfNeeded: counters already installed and current, no work needed
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Create Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Delete Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Get Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Put Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Enumerate Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Pull Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Open Enumeration Contexts' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'GetADGroupMember Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'GetADPrincipalGroupMembership Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'SetPassword Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'ChangePassword Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'GetADPrincipalAuthorizationGroup Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'TranslateName Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'GetADDomainController Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'GetADDomain Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'MoveADOperationMasterRole Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'GetADForest Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'ChangeOptionalFeature Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'GetVersion Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Number of Directory Instances' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Possible Connections' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Allocated Connections' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Reserved Connections' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Non-reserved Connections In Use' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Reserved Connections In Use' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Open Web Service Sessions' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Active Web Service Sessions' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Web Service Sessions Created Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Custom Action LDAP Cache Maximum Possible Size' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Custom Action LDAP Cache Connection Creation Rate' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Custom Action LDAP Cache Connection Reuse Rate' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Custom Action DS RPC Cache Maximum Possible Size' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Custom Action DS RPC Cache Connection Creation Rate' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Custom Action DS RPC Cache Connection Reuse Rate' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Custom Action Cache Size' performance counter
    PerfCounters: [1/6/2015 5:51:37 PM] [6] Initialize: initializing performance counters
    PerfCounters: [1/6/2015 5:51:37 PM] [6] Initialize: all performance counters initialized
    ADWSHost: [1/6/2015 5:51:37 PM] [6] ADWSHost constructed
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] ProvisionCertificate: using host name for certificate name
    Utils: [1/6/2015 5:51:37 PM] [6] GetComputerDnsName: computer name is xxx.dominio.com
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] ProvisionCertificate: using cert name xxx.dominio.com
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] ProvisionCertificate: loaded certificate
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] AddServiceThrottlingBehavior: MaxConcurrentCalls=32, MaxConcurrentSessions=500
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateServiceHost: including UserName endpoints
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateServiceHost: adding endpoints for Windows/
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportBinding: MaxReceivedMessageSize=1048576, ReceiveTimeout=00:10:00
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportBinding: MaxDepth=10, MaxArrayLength=16384, MaxStringContentLength=32768
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportBinding: MaxReceivedMessageSize=1048576, ReceiveTimeout=00:10:00
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportBinding: MaxDepth=10, MaxArrayLength=16384, MaxStringContentLength=32768
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportBinding: MaxReceivedMessageSize=1048576, ReceiveTimeout=00:10:00
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportBinding: MaxDepth=10, MaxArrayLength=16384, MaxStringContentLength=32768
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportBinding: MaxReceivedMessageSize=1048576, ReceiveTimeout=00:10:00
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportBinding: MaxDepth=10, MaxArrayLength=16384, MaxStringContentLength=32768
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportBinding: MaxReceivedMessageSize=1048576, ReceiveTimeout=00:10:00
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportBinding: MaxDepth=10, MaxArrayLength=16384, MaxStringContentLength=32768
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateServiceHost: adding endpoints for UserName/
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportWithMessageCredentialBinding: MaxReceivedMessageSize=1048576, ReceiveTimeout=00:10:00
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportWithMessageCredentialBinding: MaxDepth=10, MaxArrayLength=16384, MaxStringContentLength=32768
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportWithMessageCredentialBinding: MaxReceivedMessageSize=1048576, ReceiveTimeout=00:10:00
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportWithMessageCredentialBinding: MaxDepth=10, MaxArrayLength=16384, MaxStringContentLength=32768
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportWithMessageCredentialBinding: MaxReceivedMessageSize=1048576, ReceiveTimeout=00:10:00
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportWithMessageCredentialBinding: MaxDepth=10, MaxArrayLength=16384, MaxStringContentLength=32768
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportWithMessageCredentialBinding: MaxReceivedMessageSize=1048576, ReceiveTimeout=00:10:00
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportWithMessageCredentialBinding: MaxDepth=10, MaxArrayLength=16384, MaxStringContentLength=32768
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportWithMessageCredentialBinding: MaxReceivedMessageSize=1048576, ReceiveTimeout=00:10:00
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportWithMessageCredentialBinding: MaxDepth=10, MaxArrayLength=16384, MaxStringContentLength=32768
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] StartConfigurationLoading: entered
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] StartConfigurationLoading: establishing watcher on C:\Windows\ADWS\Microsoft.ActiveDirectory.WebServices.exe.Config
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: entered
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: no value specified for InitialPoolConnections, using default value 5
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: using loaded value 10 for MaxPoolConnections
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: using loaded value 50 for MaxPercentageReservedConnections
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: no value specified for MaxReservedIdleTimeout, using default value 00:02:00
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: no value specified for MaxReservedTimeout, using default value 00:30:00
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: using loaded value 5 for MaxConnectionsPerUser
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: no value specified for MaxBindLifetime, using default value 00:15:00
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: no value specified for MaxServerDownRetry, using default value 10
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: no value specified for SyntaxCacheEntryLifetime, using default value 01:00:00
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: using loaded value 00:30:00 for MaxEnumContextExpiration
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: using loaded value 00:02:00 for OperationTimeout
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: using loaded value 00:02:00 for MaxPullTimeout
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: using loaded value 5 for MaxEnumCtxsPerSession
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: using loaded value 100 for MaxEnumCtxsTotal
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: no value specified for CertName, using default value NULL
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: no value specified for MaxGroupOrMemberEntries, using default value 5000
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: no value specified for CustomActionConnectionCount, using default value 10
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: no value specified for CustomActionIdleConnectionTimeout, using default value 00:02:00
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: no value specified for InstanceRediscoveryInterval, using default value 00:01:00
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: using loaded value 32 for MaxConcurrentCalls
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: using loaded value 500 for MaxConcurrentSessions
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: using loaded value Info for DebugLevel
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: using loaded value C:\temp\windowsdebugadws.log for DebugLogFile
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] ValidateSettingLimits: entered
    ClassManager: [1/6/2015 5:51:37 PM] [6] Start: starting...
    LdapSessionPoolImplementation: [1/6/2015 5:51:37 PM] [3] ScavengerThread: thread starting
    LdapSessionPoolImplementation: [1/6/2015 5:51:37 PM] [3] Scavenger: waking up at 00:00:40 interval
    EnumerationContextCache: [1/6/2015 5:51:37 PM] [6] EnumerationContextCache: using timer inverval 00:00:30
    InstanceMap: [1/6/2015 5:51:37 PM] [6] InstanceMap: using timer inverval 00:01:00
    InstanceMap: [1/6/2015 5:51:37 PM] [6] CheckAndLoadAll: beginning
    InstanceMap: [1/6/2015 5:51:37 PM] [6] CheckAndLoadNTDSInstance: entered
    InstanceMap: [1/6/2015 5:51:37 PM] [6] CheckAndLoadNTDSInstance: found NTDS Parameters key
    InstanceMap: [1/6/2015 5:51:37 PM] [6] CheckAndLoadNTDSInstance: trying to change state to DC
    InstanceMap: [1/6/2015 5:51:37 PM] [6] AddRemoveSessionPoolAndDictionaryEntry: trying to change state for identifier ldap:389
    InstanceMap: [1/6/2015 5:51:37 PM] [6] AddSessionPool: adding a session pool for NTDS
    DirectoryDataAccessImplementation: [1/6/2015 5:51:37 PM] [6] InitializeInstance: entering, instance=NTDS, init=5, max=10
    LdapSessionPoolImplementation: [1/6/2015 5:51:37 PM] [6] InitializeInstance: entering, instance=NTDS, init=5, max=10
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] ConnectionPool: trying to add connection 0
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: entering, instance=NTDS
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] ConnectionPoolEntry: connection created
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: grew pool, instance=NTDS, new count=1, max=10
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] ConnectionPool: trying to add connection 1
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: entering, instance=NTDS
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] ConnectionPoolEntry: connection created
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: grew pool, instance=NTDS, new count=2, max=10
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] ConnectionPool: trying to add connection 2
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: entering, instance=NTDS
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] ConnectionPoolEntry: connection created
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: grew pool, instance=NTDS, new count=3, max=10
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] ConnectionPool: trying to add connection 3
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: entering, instance=NTDS
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] ConnectionPoolEntry: connection created
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: grew pool, instance=NTDS, new count=4, max=10
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] ConnectionPool: trying to add connection 4
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: entering, instance=NTDS
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] ConnectionPoolEntry: connection created
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: grew pool, instance=NTDS, new count=5, max=10
    InstanceMap: [1/6/2015 5:51:37 PM] [6] AddRemoveSessionPoolAndDictionaryEntry: state change successful (now hosts identifier ldap:389)
    InstanceMap: [1/6/2015 5:51:37 PM] [6] CheckAndLoadGCInstance: entered
    InstanceMap: [1/6/2015 5:51:37 PM] [6] CheckForGlobalCatalog: entered
    DirectoryUtilities: [1/6/2015 5:51:37 PM] [6] GetTimeRemaining: remaining time is 00:02:00
    InstanceMap: [1/6/2015 5:51:37 PM] [6] CheckForGlobalCatalog: isGlobalCatalogReady: TRUE
    InstanceMap: [1/6/2015 5:51:37 PM] [6] CheckForGlobalCatalog: NTDS Settings DN: CN=NTDS Settings,CN=XXX,CN=Servers,CN=Alpacoma,CN=Sites,CN=Configuration,DC=dominio,DC=com
    DirectoryUtilities: [1/6/2015 5:51:37 PM] [6] GetTimeRemaining: remaining time is 00:02:00
    InstanceMap: [1/6/2015 5:51:37 PM] [6] CheckForGlobalCatalog: options: 1
    InstanceMap: [1/6/2015 5:51:37 PM] [6] CheckAndLoadGCInstance: CheckForGlobalCatalog=True
    InstanceMap: [1/6/2015 5:51:37 PM] [6] CheckAndLoadGCInstance: trying to change state to Global Catalog
    InstanceMap: [1/6/2015 5:51:37 PM] [6] AddRemoveSessionPoolAndDictionaryEntry: trying to change state for identifier ldap:3268
    InstanceMap: [1/6/2015 5:51:37 PM] [6] AddSessionPool: adding a session pool for GC
    DirectoryDataAccessImplementation: [1/6/2015 5:51:37 PM] [6] InitializeInstance: entering, instance=GC, init=5, max=10
    LdapSessionPoolImplementation: [1/6/2015 5:51:37 PM] [6] InitializeInstance: entering, instance=GC, init=5, max=10
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] ConnectionPool: trying to add connection 0
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: entering, instance=GC
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] ConnectionPoolEntry: connection created
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: grew pool, instance=GC, new count=1, max=10
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] ConnectionPool: trying to add connection 1
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: entering, instance=GC
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] ConnectionPoolEntry: connection created
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: grew pool, instance=GC, new count=2, max=10
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] ConnectionPool: trying to add connection 2
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: entering, instance=GC
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] ConnectionPoolEntry: connection created
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: grew pool, instance=GC, new count=3, max=10
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] ConnectionPool: trying to add connection 3
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: entering, instance=GC
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] ConnectionPoolEntry: connection created
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: grew pool, instance=GC, new count=4, max=10
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] ConnectionPool: trying to add connection 4
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: entering, instance=GC
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] ConnectionPoolEntry: connection created
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: grew pool, instance=GC, new count=5, max=10
    InstanceMap: [1/6/2015 5:51:37 PM] [6] AddRemoveSessionPoolAndDictionaryEntry: state change successful (now hosts identifier ldap:3268)
    InstanceMap: [1/6/2015 5:51:37 PM] [6] CheckAndLoadADAMInstances: entered
    InstanceMap: [1/6/2015 5:51:37 PM] [6] CheckAndLoadAll: caught unexpected exception System.IO.IOException: No more data is available.
    at Microsoft.Win32.RegistryKey.Win32Error(Int32 errorCode, String str)
    at Microsoft.Win32.RegistryKey.InternalGetSubKeyNames()
    at Microsoft.ActiveDirectory.WebServices.InstanceMap.DiscoverInstancesFromRegistry(String regRootKey, String regKeyInstancePrefix, Boolean& instanceEncounteredErrorsOnThisRun, List`1 discoveredInstances, DirectoryType directoryType)
    at Microsoft.ActiveDirectory.WebServices.InstanceMap.CheckAndLoadADAMInstances()
    at Microsoft.ActiveDirectory.WebServices.InstanceMap.CheckAndLoadAll()
    ADWSHost: [1/6/2015 5:51:37 PM] [6] OnClosed: entered
    CustomActionCaches: [1/6/2015 5:51:37 PM] [6] StopCaches: disposing Custom Action connection caches
    ClassManager: [1/6/2015 5:51:37 PM] [6] Stop: closing down...
    EnumerationContextCache: [1/6/2015 5:51:37 PM] [6] Dispose: disposing...
    QuotaTracker: [1/6/2015 5:51:37 PM] [6] Clear: clearing all usage
    DirectoryActionImplementation: [1/6/2015 5:51:37 PM] [6] Dispose: disposing...
    DirectoryDataAccessImplementation: [1/6/2015 5:51:37 PM] [6] Dispose: disposing...
    LdapSessionPoolImplementation: [1/6/2015 5:51:37 PM] [6] Dispose: disposing...
    LdapSessionPoolImplementation: [1/6/2015 5:51:37 PM] [3] ScavengerThread: woke up
    LdapSessionPoolImplementation: [1/6/2015 5:51:37 PM] [3] ScavengerThread: received termination signal, exiting
    LdapSessionPoolImplementation: [1/6/2015 5:51:37 PM] [6] Dispose: disposing pool
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] Dispose: disposing (instance=NTDS)...
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] ProhibitConnectionAcquisition: entering, instance=NTDS
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] Dispose: disposing a ConnectionPoolEntry
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] Dispose: disposing...
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] Dispose: disposing a ConnectionPoolEntry
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] Dispose: disposing...
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] Dispose: disposing a ConnectionPoolEntry
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] Dispose: disposing...
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] Dispose: disposing a ConnectionPoolEntry
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] Dispose: disposing...
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] Dispose: disposing a ConnectionPoolEntry
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] Dispose: disposing...
    LdapSessionPoolImplementation: [1/6/2015 5:51:37 PM] [6] Dispose: disposing pool
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] Dispose: disposing (instance=GC)...
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] ProhibitConnectionAcquisition: entering, instance=GC
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] Dispose: disposing a ConnectionPoolEntry
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] Dispose: disposing...
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] Dispose: disposing a ConnectionPoolEntry
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] Dispose: disposing...
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] Dispose: disposing a ConnectionPoolEntry
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] Dispose: disposing...
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] Dispose: disposing a ConnectionPoolEntry
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] Dispose: disposing...
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] Dispose: disposing a ConnectionPoolEntry
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] Dispose: disposing...
    LdapSessionPoolImplementation: [1/6/2015 5:51:37 PM] [6] Dispose: disposing utility connection NTDS
    LdapSessionPoolImplementation: [1/6/2015 5:51:37 PM] [6] Dispose: disposing utility connection GC
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] StopConfigurationLoading: entered
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] Dispose: disposing
    Some Idea, Tks for your help.
    migrations

    Here a dump file when I try to start the service, I hope can you help me.
    Version=1
    EventType=CLR20r3
    EventTime=130652059133527283
    ReportType=2
    Consent=1
    ReportIdentifier=4368792e-974e-11e4-93f7-3440b59e2092
    IntegratorReportIdentifier=4368792d-974e-11e4-93f7-3440b59e2092
    NsAppName=Microsoft.ActiveDirectory.WebServices.exe
    Response.type=4
    Sig[0].Name=Problem Signature 01
    Sig[0].Value=V0KXCIQIJBOA2NW5DIQBFTEBV5SCPPFH
    Sig[1].Name=Problem Signature 02
    Sig[1].Value=6.2.9200.16579
    Sig[2].Name=Problem Signature 03
    Sig[2].Value=516356a2
    Sig[3].Name=Problem Signature 04
    Sig[3].Value=System.ServiceModel
    Sig[4].Name=Problem Signature 05
    Sig[4].Value=4.0.30319.34230
    Sig[5].Name=Problem Signature 06
    Sig[5].Value=53be5c02
    Sig[6].Name=Problem Signature 07
    Sig[6].Value=ca
    Sig[7].Name=Problem Signature 08
    Sig[7].Value=c4
    Sig[8].Name=Problem Signature 09
    Sig[8].Value=I0SHPZEWVQV4P1UJY40X15MQTHF34RR5
    DynamicSig[1].Name=OS Version
    DynamicSig[1].Value=6.2.9200.2.0.0.272.7
    DynamicSig[2].Name=Locale ID
    DynamicSig[2].Value=1033
    DynamicSig[22].Name=Additional Information 1
    DynamicSig[22].Value=5220
    DynamicSig[23].Name=Additional Information 2
    DynamicSig[23].Value=52200675db6baa97bf416b02ff886e01
    DynamicSig[24].Name=Additional Information 3
    DynamicSig[24].Value=0b14
    DynamicSig[25].Name=Additional Information 4
    DynamicSig[25].Value=0b146b7eb5ed6bd9871c898c60ee5051
    UI[2]=C:\Windows\ADWS\Microsoft.ActiveDirectory.WebServices.exe
    UI[5]=Check online for a solution (recommended)
    UI[6]=Check for a solution later (recommended)
    UI[7]=Close
    UI[8]=Microsoft.ActiveDirectory.WebServices stopped working and was closed
    UI[9]=A problem caused the application to stop working correctly. Windows will notify you if a solution is available.
    UI[10]=&Close
    LoadedModule[0]=C:\Windows\ADWS\Microsoft.ActiveDirectory.WebServices.exe
    LoadedModule[1]=C:\Windows\SYSTEM32\ntdll.dll
    LoadedModule[2]=C:\Windows\SYSTEM32\MSCOREE.DLL
    LoadedModule[3]=C:\Windows\system32\KERNEL32.dll
    LoadedModule[4]=C:\Windows\system32\KERNELBASE.dll
    LoadedModule[5]=C:\Windows\SYSTEM32\dlphook.x64.dll
    LoadedModule[6]=C:\Windows\SYSTEM32\VERSION.dll
    LoadedModule[7]=C:\Windows\system32\PSAPI.DLL
    LoadedModule[8]=C:\Windows\system32\ADVAPI32.dll
    LoadedModule[9]=C:\Windows\system32\WS2_32.dll
    LoadedModule[10]=C:\Windows\system32\msvcrt.dll
    LoadedModule[11]=C:\Windows\SYSTEM32\sechost.dll
    LoadedModule[12]=C:\Windows\system32\RPCRT4.dll
    LoadedModule[13]=C:\Windows\system32\NSI.dll
    LoadedModule[14]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll
    LoadedModule[15]=C:\Windows\system32\SHLWAPI.dll
    LoadedModule[16]=C:\Windows\system32\USER32.dll
    LoadedModule[17]=C:\Windows\system32\GDI32.dll
    LoadedModule[18]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
    LoadedModule[19]=C:\Windows\SYSTEM32\MSVCR110_CLR0400.dll
    LoadedModule[20]=C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\51fbf5aac9c6f1aef14557276f98ad28\mscorlib.ni.dll
    LoadedModule[21]=C:\Windows\system32\ole32.dll
    LoadedModule[22]=C:\Windows\SYSTEM32\combase.dll
    LoadedModule[23]=C:\Windows\SYSTEM32\CRYPTBASE.dll
    LoadedModule[24]=C:\Windows\SYSTEM32\bcryptPrimitives.dll
    LoadedModule[25]=C:\Windows\SYSTEM32\CRYPTSP.dll
    LoadedModule[26]=C:\Windows\system32\rsaenh.dll
    LoadedModule[27]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clrjit.dll
    LoadedModule[28]=C:\Windows\system32\OLEAUT32.dll
    LoadedModule[29]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System\803e478b5cb2fe994c4f977853849956\System.ni.dll
    LoadedModule[30]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Serv759bfb78#\060758702287150a3b9ca51bfbd135e4\System.ServiceProcess.ni.dll
    LoadedModule[31]=C:\Windows\ADWS\Microsoft.ActiveDirectory.WebServices.Shared.dll
    LoadedModule[32]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Configuration\af08c33d3e853168e58f0bb32118170b\System.Configuration.ni.dll
    LoadedModule[33]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Core\5641065f716dfd6c76dd7bc6ab18c47a\System.Core.ni.dll
    LoadedModule[34]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Xml\b3344890d2d919e93f506faabd08186a\System.Xml.ni.dll
    LoadedModule[35]=C:\Windows\system32\urlmon.dll
    LoadedModule[36]=C:\Windows\system32\iertutil.dll
    LoadedModule[37]=C:\Windows\system32\WININET.dll
    LoadedModule[38]=C:\Windows\system32\USERENV.dll
    LoadedModule[39]=C:\Windows\system32\profapi.dll
    LoadedModule[40]=C:\Windows\SYSTEM32\Secur32.dll
    LoadedModule[41]=C:\Windows\SYSTEM32\SSPICLI.DLL
    LoadedModule[42]=C:\Windows\system32\SHELL32.dll
    LoadedModule[43]=C:\Windows\SYSTEM32\SHCORE.dll
    LoadedModule[44]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Dire5d62f0a2#\7ab37f1ca732666c1ab41d8e500942e0\System.DirectoryServices.Protocols.ni.dll
    LoadedModule[45]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel\4e643cb8b12402db89eb2d5839872b78\System.ServiceModel.ni.dll
    LoadedModule[46]=C:\Windows\assembly\NativeImages_v4.0.30319_64\SMDiagnostics\02b9ba874b1c07b6016aa9406745e96b\SMDiagnostics.ni.dll
    LoadedModule[47]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Web.Services\f936aad8a951da6674d460db1855a3db\System.Web.Services.ni.dll
    LoadedModule[48]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Servd1dec626#\8944debbd3293f930c7e37b64aed0d77\System.ServiceModel.Internals.ni.dll
    LoadedModule[49]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.IdentityModel\5844c97798b9e56b45cb0e5d3505ffd2\System.IdentityModel.ni.dll
    LoadedModule[50]=C:\Windows\system32\crypt32.dll
    LoadedModule[51]=C:\Windows\system32\MSASN1.dll
    LoadedModule[52]=C:\Windows\SYSTEM32\DPAPI.dll
    LoadedModule[53]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Runteb92aa12#\3838e7c87e962eaec01572bff0396922\System.Runtime.Serialization.ni.dll
    LoadedModule[54]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Servf73e6522#\38df17ed0feec9b27d7d33272eecc176\System.ServiceModel.Web.ni.dll
    LoadedModule[55]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Dired13b18a9#\4ecba93b4eae5bb0c97205c4e4196702\System.DirectoryServices.ni.dll
    LoadedModule[56]=C:\Windows\system32\wldap32.dll
    LoadedModule[57]=C:\Windows\system32\mswsock.dll
    LoadedModule[58]=C:\Windows\SYSTEM32\DNSAPI.dll
    LoadedModule[59]=C:\Windows\System32\rasadhlp.dll
    LoadedModule[60]=C:\Windows\System32\fwpuclnt.dll
    LoadedModule[61]=C:\Windows\SYSTEM32\IPHLPAPI.DLL
    LoadedModule[62]=C:\Windows\SYSTEM32\WINNSI.DLL
    LoadedModule[63]=C:\Windows\SYSTEM32\DSPARSE.dll
    LoadedModule[64]=C:\Windows\system32\kerberos.DLL
    LoadedModule[65]=C:\Windows\SYSTEM32\cryptdll.dll
    LoadedModule[66]=C:\Windows\SYSTEM32\bcrypt.dll
    LoadedModule[67]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\diasymreader.dll
    FriendlyEventName=Stopped working
    ConsentKey=CLR20r3
    AppName=Microsoft.ActiveDirectory.WebServices
    AppPath=C:\Windows\ADWS\Microsoft.ActiveDirectory.WebServices.exe
    NsPartner=windows
    NsGroup=windows8
    Tks for your help.
    migrations

  • Exchange 2010 Information Store Service not Starting ERROR 1003

    Error message when I try to manually start the service myself :
    Windows could not start the Microsoft Exchange Information Store on Local Computer. For more information, review the System Event Log. If this is a non-Microsoft service, contact the service vendor, and refer to service specific error code -1003.
    Please help me resolve this issue, I have been working on it for two solid days with no progress. 
    The Event Log Report : The Microsoft Exchange Information Store service terminated with service-specific error %%-1003.
    System
    Provider
    [ Name]
    Service Control Manager
    [ Guid]
    {555908d1-a6d7-4695-8e1e-26931d2012f4}
    [ EventSourceName]
    Service Control Manager
    EventID
    7024
    [ Qualifiers]
    49152
    Version
    0
    Level
    2
    Task
    0
    Opcode
    0
    Keywords
    0x8080000000000000
    TimeCreated
    [ SystemTime]
    2013-12-10T09:43:09.741080700Z
    EventRecordID
    680929
    Correlation
    Execution
    [ ProcessID]
    548
    [ ThreadID]
    10672
    Channel
    System
    Computer
    SBS2011.******.local
    Security
    EventData
    param1
    Microsoft Exchange Information Store
    param2
    %%-1003
    Error 0xfffffc15 starting the Microsoft Exchange Information Store. 
    Failed to set Default Jet params.

    The server seemed to have restarted on the weekend and the monday I was alerted of the problem. 
    Yes I did have a anti-virus program running on the server and I have removed the AV Kaspersky Endpoint 8 and the Security Centre but I cannot remove the Mail Server but I think I have turned it off. 
    EDIT: 
    Sorry and yes all the other services seem to start fine.
    Originally discovered the issue when users could not open Outlook then I discovered the Database was un-mounted and the service was not starting. 
    only other event I can find :
    The Microsoft Exchange Information Store service terminated with service-specific error %%-1003.
    System
    Provider
    [ Name]
    Service Control Manager
    [ Guid]
    {555908d1-a6d7-4695-8e1e-26931d2012f4}
    [ EventSourceName]
    Service Control Manager
    EventID
    7024
    [ Qualifiers]
    49152
    Version
    0
    Level
    2
    Task
    0
    Opcode
    0
    Keywords
    0x8080000000000000
    TimeCreated
    [ SystemTime]
    2013-12-10T10:45:38.168386900Z
    EventRecordID
    682044
    Correlation
    Execution
    [ ProcessID]
    548
    [ ThreadID]
    12532
    Channel
    System
    Computer
    SBS2011.xxxxx.local
    Security
    EventData
    param1
    Microsoft Exchange Information Store
    param2
    %%-1003

  • Event ID 7031 followed by 7032 The Microsoft Exchange Transport service terminated unexpectedly.

    Hello
    Have a strange problem that reoccurs every day. The following are recorded in the log.
    7031
    The Microsoft Exchange Transport service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 5000 milliseconds: Restart the service.7032The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Microsoft Exchange Transport service, but this action failed with the following error:
    An instance of the service is already running.Any suggestions are welcome./Deland
    /Andreas

    Here are the result from the level 5 logging. I Havent disabled the TransportAgent yet.
    Log Name:      Application
    Source:        MSExchangeTransport
    Date:          2013-07-19 10:13:25
    Event ID:      12025
    Task Category: TransportService
    Level:         Warning
    Keywords:      Classic
    User:          N/A
    Computer:      XXXX
    Description:
    Transport service is disconnecting performance counters with process lifetime from their old process.
    Followed by 32 events of 12028
    Log Name:      Application
    Source:        MSExchangeTransport
    Date:          2013-07-19 10:13:25
    Event ID:      12028
    Task Category: TransportService
    Level:         Warning
    Keywords:      Classic
    User:          N/A
    Computer:      XXXX
    Description:
    The process with process ID 1100 is holding the performance counter configuration cache total requests Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062 from instance transportrules(B1D082BB) RefCount=0 SpinLock=0 Offset=3936
    and category MSExchangeTransport Configuration Cache while running processes are: Processes running are:
    6300 UMWorkerProcess
    5312 Microsoft.Exchange.ServiceHost
    1568 Microsoft.Exchange.Diagnostics.Service
    2212 WMSvc
    776 svchost
    1760 MSExchangeHMHost
    9808 MSExchangeDelivery
    376 explorer
    2252 Microsoft.Exchange.Directory.TopologyService
    9436 rundll32
    1752 nscp
    2932 noderunner
    6076 MSExchangeSubmission
    7056 scanningprocess
    1736 PccNtMon
    1340 fms
    4688 MSExchangeTransport
    1732 Ntrtscan
    2716 MSExchangeMailboxAssistants
    548 winlogon
    9016 TmProxy
    348 svchost
    2904 SMSvcHost
    1524 inetinfo
    8376 TMBMSRV
    5264 MSExchangeThrottling
    12552 powershell
    4080 w3wp
    1124 svchost
    7688 svchost
    12744 w3wp
    332 smss
    1316 svchost
    13188 mmc
    5772 ForefrontActiveDirectoryConnector
    3080 HostedAgent
    11364 conhost
    3268 w3wp
    1060 svchost
    2924 noderunner
    904 dwm
    3856 w3wp
    504 wininit
    7200 Microsoft.Exchange.Store.Worker
    1668 SMSvcHost
    4832 MSExchangeFrontendTransport
    2072 sftracing
    4932 MSExchangeMailboxReplication
    7192 Microsoft.Exchange.Store.Worker
    6992 Microsoft.Exchange.UM.CallRouter
    9640 w3wp
    9204 svchost
    3244 svcGenericHost
    1200 Microsoft.Exchange.Store.Service
    876 svchost
    10724 rundll32
    3040 conhost
    2480 w3wp
    5992 MSExchangeTransportLogSearch
    596 services
    12508 w3wp
    2636 MSExchangeHMWorker
    11892 taskhostex
    4796 Microsoft.Exchange.Search.Service
    3568 WmiPrvSE
    12532 ServerManager
    9564 msdtc
    4352 Microsoft.Exchange.EdgeSyncSvc
    2032 mqsvc
    6560 scanningprocess
    3404 TmListen
    4384 updateservice
    3004 scanningprocess
    6744 umservice
    1424 hostcontrollerservice
    828 svchost
    432 csrss
    696 svchost
    1284 spoolsv
    8152 w3wp
    3576 w3wp
    1264 svchost
    496 csrss
    5928 Microsoft.Exchange.RpcClientAccess.Service
    2972 noderunner
    2380 conhost
    604 lsass
    6884 Microsoft.Exchange.Store.Worker
    10056 WmiPrvSE
    992 svchost
    2764 noderunner
    5324 msexchangerepl
    4 System
    3548 Microsoft.Exchange.AntispamUpdateSvc
    2168 svchost
    0 Idle
    And 28 events on 106
    Log Name:      Application
    Source:        MSExchange Common
    Date:          2013-07-19 10:13:29
    Event ID:      106
    Task Category: General
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      XXXX
    Description:
    Performance counter updating error. Counter name is DataRow seeks total, category name is MSExchangeTransport Database. Optional code: 2. Exception: The exception thrown is : System.InvalidOperationException: Instance '_total' already exists with a lifetime
    of Process.  It cannot be recreated or reused until it has been removed or until the process using it has exited.
       at System.Diagnostics.SharedPerformanceCounter.FindInstance(Int32 instanceNameHashCode, String instanceName, CategoryEntry* categoryPointer, InstanceEntry** returnInstancePointerReference, Boolean activateUnusedInstances, PerformanceCounterInstanceLifetime
    lifetime, Boolean& foundFreeInstance)
       at System.Diagnostics.SharedPerformanceCounter.GetCounter(String counterName, String instanceName, Boolean enableReuse, PerformanceCounterInstanceLifetime lifetime)
       at System.Diagnostics.SharedPerformanceCounter..ctor(String catName, String counterName, String instanceName, PerformanceCounterInstanceLifetime lifetime)
       at System.Diagnostics.PerformanceCounter.InitializeImpl()
       at System.Diagnostics.PerformanceCounter.get_RawValue()
       at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.get_RawValue()
    Last worker process info : System.ArgumentException: Process with an Id of 14868 is not running.
       at System.Diagnostics.Process.GetProcessById(Int32 processId)
       at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.GetLastWorkerProcessInfo()
    Processes running while Performance counter failed to update:
    6300 UMWorkerProcess
    5312 Microsoft.Exchange.ServiceHost
    1568 Microsoft.Exchange.Diagnostics.Service
    2212 WMSvc
    776 svchost
    1760 MSExchangeHMHost
    9808 MSExchangeDelivery
    376 explorer
    2252 Microsoft.Exchange.Directory.TopologyService
    9436 rundll32
    1752 nscp
    2932 noderunner
    10416 EdgeTransport
    6076 MSExchangeSubmission
    7056 scanningprocess
    1736 PccNtMon
    1340 fms
    4688 MSExchangeTransport
    1732 Ntrtscan
    2716 MSExchangeMailboxAssistants
    548 winlogon
    9016 TmProxy
    348 svchost
    2904 SMSvcHost
    1524 inetinfo
    15116 conhost
    8376 TMBMSRV
    5264 MSExchangeThrottling
    12552 powershell
    4080 w3wp
    1124 svchost
    7688 svchost
    12744 w3wp
    332 smss
    1316 svchost
    13188 mmc
    5772 ForefrontActiveDirectoryConnector
    3080 HostedAgent
    11364 conhost
    3268 w3wp
    1060 svchost
    2924 noderunner
    904 dwm
    3856 w3wp
    504 wininit
    7200 Microsoft.Exchange.Store.Worker
    1668 SMSvcHost
    4832 MSExchangeFrontendTransport
    2072 sftracing
    4932 MSExchangeMailboxReplication
    7192 Microsoft.Exchange.Store.Worker
    6992 Microsoft.Exchange.UM.CallRouter
    9640 w3wp
    9204 svchost
    3244 svcGenericHost
    1200 Microsoft.Exchange.Store.Service
    876 svchost
    10724 rundll32
    3040 conhost
    2480 w3wp
    5992 MSExchangeTransportLogSearch
    596 services
    12508 w3wp
    2636 MSExchangeHMWorker
    11892 taskhostex
    4796 Microsoft.Exchange.Search.Service
    3568 WmiPrvSE
    12532 ServerManager
    9564 msdtc
    4352 Microsoft.Exchange.EdgeSyncSvc
    2032 mqsvc
    6560 scanningprocess
    3404 TmListen
    4384 updateservice
    3004 scanningprocess
    6744 umservice
    1424 hostcontrollerservice
    828 svchost
    432 csrss
    696 svchost
    1284 spoolsv
    8152 w3wp
    3576 w3wp
    1264 svchost
    496 csrss
    5928 Microsoft.Exchange.RpcClientAccess.Service
    2972 noderunner
    2380 conhost
    604 lsass
    6884 Microsoft.Exchange.Store.Worker
    10056 WmiPrvSE
    992 svchost
    2764 noderunner
    5324 msexchangerepl
    4 System
    3548 Microsoft.Exchange.AntispamUpdateSvc
    2168 svchost
    0 Idle
    Performance Counters Layout information: A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=59 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : queue(B351294)
    RefCount=0 SpinLock=0 Offset=48552, categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : cat event 8(ED0419E7) RefCount=0 SpinLock=0 Offset=44384,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : cat event 6(ED0419E9) RefCount=0 SpinLock=0 Offset=40216,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=4 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : cat event 3(ED0419EC) RefCount=0 SpinLock=0 Offset=36048,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=3 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : cat event 1(ED0419EE) RefCount=0 SpinLock=0 Offset=31880,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=18 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : cat(B874BB3) RefCount=0 SpinLock=0 Offset=27712,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : inqueue(56145953) RefCount=0 SpinLock=0 Offset=23544,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=17 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : smtpin(81392C98) RefCount=0 SpinLock=0 Offset=19376,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : mail(7C6FB7CC) RefCount=0 SpinLock=0 Offset=15208,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=68 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : other(ADC98A1) RefCount=0 SpinLock=0 Offset=11040,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 4832, counter : datarow seeks total Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4832 StartupTime: 130183498009738545, currentInstance : _total(CFBEE918) RefCount=1 SpinLock=0 Offset=32,
    categoryName: MSExchangeTransport Database
    Log Name:      Application
    Source:        MSExchange Common
    Date:          2013-07-19 10:13:31
    Event ID:      106
    Task Category: General
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      XXXX
    Description:
    Performance counter updating error. Counter name is Transaction Durable Callback Count/sec, category name is MSExchangeTransport Database. Optional code: 1. Exception: The exception thrown is : System.InvalidOperationException: Instance '_total' already exists
    with a lifetime of Process.  It cannot be recreated or reused until it has been removed or until the process using it has exited.
       at System.Diagnostics.SharedPerformanceCounter.FindInstance(Int32 instanceNameHashCode, String instanceName, CategoryEntry* categoryPointer, InstanceEntry** returnInstancePointerReference, Boolean activateUnusedInstances, PerformanceCounterInstanceLifetime
    lifetime, Boolean& foundFreeInstance)
       at System.Diagnostics.SharedPerformanceCounter.GetCounter(String counterName, String instanceName, Boolean enableReuse, PerformanceCounterInstanceLifetime lifetime)
       at System.Diagnostics.SharedPerformanceCounter..ctor(String catName, String counterName, String instanceName, PerformanceCounterInstanceLifetime lifetime)
       at System.Diagnostics.PerformanceCounter.InitializeImpl()
       at System.Diagnostics.PerformanceCounter.IncrementBy(Int64 value)
       at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.IncrementBy(Int64 incrementValue)
    Last worker process info : System.ArgumentException: Process with an Id of 14868 is not running.
       at System.Diagnostics.Process.GetProcessById(Int32 processId)
       at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.GetLastWorkerProcessInfo()
    Processes running while Performance counter failed to update:
    6300 UMWorkerProcess
    5312 Microsoft.Exchange.ServiceHost
    1568 Microsoft.Exchange.Diagnostics.Service
    2212 WMSvc
    776 svchost
    1760 MSExchangeHMHost
    9808 MSExchangeDelivery
    376 explorer
    2252 Microsoft.Exchange.Directory.TopologyService
    9436 rundll32
    1752 nscp
    2932 noderunner
    10416 EdgeTransport
    6076 MSExchangeSubmission
    7056 scanningprocess
    1736 PccNtMon
    1340 fms
    4688 MSExchangeTransport
    1732 Ntrtscan
    2716 MSExchangeMailboxAssistants
    548 winlogon
    9016 TmProxy
    348 svchost
    2904 SMSvcHost
    1524 inetinfo
    15116 conhost
    8376 TMBMSRV
    5264 MSExchangeThrottling
    12552 powershell
    4080 w3wp
    1124 svchost
    7688 svchost
    12744 w3wp
    332 smss
    1316 svchost
    13188 mmc
    5772 ForefrontActiveDirectoryConnector
    3080 HostedAgent
    11364 conhost
    3268 w3wp
    1060 svchost
    2924 noderunner
    904 dwm
    3856 w3wp
    504 wininit
    7200 Microsoft.Exchange.Store.Worker
    1668 SMSvcHost
    4832 MSExchangeFrontendTransport
    2072 sftracing
    4932 MSExchangeMailboxReplication
    7192 Microsoft.Exchange.Store.Worker
    6992 Microsoft.Exchange.UM.CallRouter
    9640 w3wp
    9204 svchost
    3244 svcGenericHost
    1200 Microsoft.Exchange.Store.Service
    876 svchost
    10724 rundll32
    3040 conhost
    2480 w3wp
    5992 MSExchangeTransportLogSearch
    596 services
    12508 w3wp
    2636 MSExchangeHMWorker
    11892 taskhostex
    4796 Microsoft.Exchange.Search.Service
    3568 WmiPrvSE
    12532 ServerManager
    9564 msdtc
    4352 Microsoft.Exchange.EdgeSyncSvc
    2032 mqsvc
    6560 scanningprocess
    3404 TmListen
    4384 updateservice
    3004 scanningprocess
    6744 umservice
    1424 hostcontrollerservice
    828 svchost
    432 csrss
    696 svchost
    1284 spoolsv
    8152 w3wp
    3576 w3wp
    1264 svchost
    496 csrss
    5928 Microsoft.Exchange.RpcClientAccess.Service
    2972 noderunner
    2380 conhost
    604 lsass
    6884 Microsoft.Exchange.Store.Worker
    10056 WmiPrvSE
    992 svchost
    2764 noderunner
    5324 msexchangerepl
    4 System
    3548 Microsoft.Exchange.AntispamUpdateSvc
    2168 svchost
    0 Idle
    Performance Counters Layout information: A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=59 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : queue(B351294)
    RefCount=0 SpinLock=0 Offset=48552, categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : cat event 8(ED0419E7) RefCount=0 SpinLock=0 Offset=44384,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : cat event 6(ED0419E9) RefCount=0 SpinLock=0 Offset=40216,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=4 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : cat event 3(ED0419EC) RefCount=0 SpinLock=0 Offset=36048,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=3 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : cat event 1(ED0419EE) RefCount=0 SpinLock=0 Offset=31880,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=18 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : cat(B874BB3) RefCount=0 SpinLock=0 Offset=27712,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : inqueue(56145953) RefCount=0 SpinLock=0 Offset=23544,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=17 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : smtpin(81392C98) RefCount=0 SpinLock=0 Offset=19376,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 10416, counter : datarow seeks total Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10416 StartupTime: 130186952059962770, currentInstance : mail(7C6FB7CC) RefCount=1 SpinLock=0 Offset=15208,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 10416, counter : datarow seeks total Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10416 StartupTime: 130186952059962770, currentInstance : other(ADC98A1) RefCount=1 SpinLock=0 Offset=11040,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 4832, counter : datarow seeks total Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4832 StartupTime: 130183498009738545, currentInstance : _total(CFBEE918) RefCount=1 SpinLock=0 Offset=32,
    categoryName: MSExchangeTransport Database
    Then ESE  Recovery starts on the Transport database. 
    /Andreas

  • Event ID 7031: DCOM Server Process Launcher service terminated unexpectedly - Causing a Reboot of Server

    Hello All,
    We recently had a situation where in our Windows Os 2003 SP2 server got rebooted. 
    Logged and found below event on server:
    Event Type:        Error
    Event Source:    Service Control Manager
    Event Category:                None
    Event ID:              7031
    Date:                     30/07/2014
    Time:                     20:16:28
    User:                     N/A
    Computer:          XXXXXXXXX
    Description:
    The DCOM Server Process Launcher service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Reboot the machine.
    I do not see any other event that could cause the DCOM to fail, not sure that could have been the reason for this.
    Any idea?

    Hi,
    Based on your description, I find following KB in
    List of updates in Windows Server 2003 Service Pack 2. It seems to be suitable for current
    scenario. Please refer to and check if can help you.
    DCOM programs do not work, and event ID 7031 is logged
    after you install Windows Server 2003 Service Pack 1 (SP1)
    If any update, please feel free to let me know.
    Hope this helps.
    Best regards,
    Justin Gu

  • Had to restart information store service. Caused by throttling?? Event ID 1010 from ManagedAvailability, any where else to look for error logs?

    For some reason we had to restart the information store service. So far I came up with these logs from the
    ManagedAvailability event logs. If there some where else to check for additional information?  It looks like the throttling allowed a failover?!
    DatabaseFailover-00cb58bd-0115-4478-b4aa-fe60dce2757a-DatabasePercentRPCRequestsDatabaseFailover: Throttling allowed the operation to execute
    Starting recovery action (Action=DatabaseFailover, Resource=00cb58bd-0115-4478-b4aa-fe60dce2757a, Requester=DatabasePercentRPCRequestsDatabaseFailover, ThrottlingMode=None)
    Recovery action failed. (Action=DatabaseFailover, Resource=00cb58bd-0115-4478-b4aa-fe60dce2757a, Requester=DatabasePercentRPCRequestsDatabaseFailover, Error=Microsoft.Exchange.Cluster.Replay.AmDbMoveOperationNotSupportedStandaloneException: An Active Manager
    operation failed. Error: The database action failed. Error: This operation is not supported on standalone mailbox servers.
       at Microsoft.Exchange.Cluster.ActiveManagerServer.AmDbOperation.Wait(TimeSpan timeout)
       at Microsoft.Exchange.Cluster.ActiveManagerServer.ActiveManagerCore.MoveDatabase(Guid mdbGuid, MountFlags mountFlags, UnmountFlags dismountFlags, DatabaseMountDialOverride mountDialOverride, AmServerName fromServer, AmServerName targetServer,
    Boolean tryOtherHealthyServers, AmBcsSkipFlags skipValidationChecks, AmDbActionCode actionCode, String moveComment, AmDatabaseMoveResult& databaseMoveResult)
       at Microsoft.Exchange.Cluster.ActiveManagerServer.AmRpcServer.<>c__DisplayClassc.<MoveDatabaseEx>b__b()
       at Microsoft.Exchange.Data.Storage.Cluster.HaRpcExceptionWrapperBase`2.RunRpcServerOperation(String databaseName, RpcServerOperation rpcOperation)
       --- End of stack trace on server (XMNWDEX001.Xamin.com) ---
       at Microsoft.Exchange.Data.Storage.Cluster.HaRpcExceptionWrapperBase`2.ClientRethrowIfFailed(String databaseName, String serverName, RpcErrorExceptionInfo errorInfo)
       at Microsoft.Exchange.Data.Storage.ActiveManager.AmRpcClientHelper.RunDatabaseRpcWithReferral(AmRpcOperationHint rpcOperationHint, IADDatabase database, String targetServer, InternalRpcOperation rpcOperation)
       at Microsoft.Exchange.Data.Storage.ActiveManager.AmRpcClientHelper.MoveDatabaseEx(IADDatabase database, Int32 flags, Int32 dismountFlags, Int32 mountDialOverride, String fromServer, String targetServer, Boolean tryOtherHealthyServers, Int32
    skipValidationChecks, AmDbActionCode actionCode, String moveComment, String& lastServerContacted, AmDatabaseMoveResult& moveResult)
       at Microsoft.Exchange.HA.ManagedAvailability.ManagedAvailabilityHelper.PerformDatabaseFailover(String componentName, String comment, Database database)
       at Microsoft.Exchange.Monitoring.ActiveMonitoring.Responders.DatabaseFailoverResponder.InitiateDatabaseFailover(String databaseGuidString)
       at Microsoft.Exchange.Monitoring.ActiveMonitoring.Common.ThrottledRecoveryAction.Execute(Boolean throwOnException, TimeSpan timeout, Action`1 action)
       at Microsoft.Office.Datacenter.ActiveMonitoring.ResponderWorkItem.InvokeResponder(CancellationToken cancellationToken)
       at Microsoft.Office.Datacenter.ActiveMonitoring.ResponderWorkItem.CheckCorrelationAndInvokeResponder(MonitorResult lastMonitorResult, CancellationToken cancellationToken)
       at Microsoft.Office.Datacenter.ActiveMonitoring.ResponderWorkItem.<>c__DisplayClassb.<>c__DisplayClassf.<DoManagedAvailabilityWork>b__9(ResponderResult lastResponderResult)

    Hi,
    Based on this event log, I find the error “Error=Microsoft.Exchange.Cluster.Replay.AmDbMoveOperationNotSupportedStandaloneException” and error “Error: This operation is not supported on standalone mailbox servers.”
    This error seems that there is unsupported configuration in your Exchange deployment.
    I will be very glad to help if you explain your Exchange server deployment for more details.
    Thanks.

  • SSRS Service Terminating Unexpectedly

    Hi All,
    Can anyone suggest root cause of this issue.
    (1B98:1604) 12/09/14 05:53:31, ACTION, SQLDUMPER_UNKNOWN_APP.EXE, MiniDump completed: C:\Program Files\Microsoft SQL Server\MSRS10.MSSQLSERVER\Reporting Services\Logfiles\SQLDmpr0005.mdmp
    (1B98:1604) 12/09/14 05:53:31, ACTION, SQLDUMPER_UNKNOWN_APP.EXE, Location of module 'dbghelp.dll' : 'C:\Program Files\Microsoft SQL Server\100\Shared\dbghelp.dll'
    (1B98:1604) 12/09/14 05:53:33, ACTION, SQLDUMPER_UNKNOWN_APP.EXE, File version of module 'C:\Program Files\Microsoft SQL Server\100\Shared\dbghelp.dll' : '6.8:4.0'
    (1B98:1604) 12/09/14 05:53:33, ACTION, SQLDUMPER_UNKNOWN_APP.EXE, Product version of module 'C:\Program Files\Microsoft SQL Server\100\Shared\dbghelp.dll' : '6.8:4.0'
    (1B98:1604) 12/09/14 05:53:33, ACTION, SQLDUMPER_UNKNOWN_APP.EXE, Location of module 'sqldumper.exe' : 'C:\Program Files\Microsoft SQL Server\100\Shared\SQLDUMPER.EXE'
    (1B98:1604) 12/09/14 05:53:33, ACTION, SQLDUMPER_UNKNOWN_APP.EXE, File version of module 'C:\Program Files\Microsoft SQL Server\100\Shared\SQLDUMPER.EXE' : '2007.100:1600.22'
    (1B98:1604) 12/09/14 05:53:33, ACTION, SQLDUMPER_UNKNOWN_APP.EXE, Product version of module 'C:\Program Files\Microsoft SQL Server\100\Shared\SQLDUMPER.EXE' : '10.0:1600.22'
    (1B98:1604) 12/09/14 05:53:33, ACTION, ReportingServicesService.exe, Watson Invoke: No
    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7031
    Date:  9/12/2014
    Time:  05:53:34 AM
    User:  N/A
    Computer:
    Description:
    The SQL Server Reporting Services (MSSQLSERVER) service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.
    ServerDetails:
       Microsoft SQL Server 2008 (SP3) - 10.0.5500.0 (Intel X86)
        Copyright (c) 1988-2008 Microsoft Corporation
        Standard Edition on Windows NT 5.2 <X86> (Build 3790: Service Pack 2) (VM)
       RAM:12GB

    Hi Sreenivas DBA,
    Per my understanding you got the reporting services terminated unexpectedly and got some error message, right
    According to the information you have provided that your SQL Server version is 2008(SP3), this is not the latest version, so I recommend you to install the latest SP4 to have an update first:
    http://support.microsoft.com/kb/968382
    if your problem still exists, could you please try to provide more details information below to help us more effective to analysis the root cause and provide solution:
    What is the action you are doing when caused the unexpected terminated? Can you restart the reporting services without error again?
    Could you please provide the error message in the log file(the date should be the same when this error happen)
    Path of the log file like this:
    C:\Program Files\Microsoft SQL Server\MSRS10.MSSQLSERVER\Reporting Services\LogFiles
    If you still have some question, please feel free to ask.
    Regards
    Vicky Liu

  • Error while installing exchange2007 : Unable to initialize the Microsoft Exchange Information Store service. Failed to find the

    Hi,
    I am trying fresh install of exchange2007, everything gone well but, finally it thrown a error saying :
    Unable to initialize the Microsoft Exchange Information Store service. Failed to find the working directory parameter from the registry - Error 0x80004005.
    the installation log says
    6/5/2007 3:14:05 PM] [1] Processing component 'Mailbox Service Control (Last)' (Starting mailbox services).
    [6/5/2007 3:14:05 PM] [1] Executing 'start-SetupService -ServiceName MSExchangeIS -MaximumWaitTime "unlimited"', handleError = False
    [6/5/2007 3:14:05 PM] [2] Launching sub-task '$error.Clear(); start-SetupService -ServiceName MSExchangeIS -MaximumWaitTime "unlimited"'.
    [6/5/2007 3:14:05 PM] [2] Beginning processing.
    [6/5/2007 3:14:05 PM] [2] The maximum wait for the operation is set to 'unlimited'.
    [6/5/2007 3:14:05 PM] [2] Service checkpoint has progressed. Previous checkpoint='0' - Current checkpoint='1'.
    [6/5/2007 3:14:05 PM] [2] Will wait '10000' milliseconds for the service 'MSExchangeIS' to reach status 'Running'.
    [6/5/2007 3:14:15 PM] [2] Service 'MSExchangeIS' failed to reach status 'Running' on this server after waiting for '10000' milliseconds.
    [6/5/2007 3:14:15 PM] [2] Service 'MSExchangeIS' failed to start. Check the event log for possible reasons for the service start failure.
    [6/5/2007 3:14:15 PM] [2] [ERROR] Unexpected Error
    [6/5/2007 3:14:15 PM] [2] [ERROR] Service 'MSExchangeIS' failed to start. Check the event log for possible reasons for the service start failure.
    [6/5/2007 3:14:15 PM] [2] Ending processing.
    [6/5/2007 3:14:15 PM] [1] The following 1 error(s) occurred during task execution:
    [6/5/2007 3:14:15 PM] [1] 0.  ErrorRecord: Service 'MSExchangeIS' failed to start. Check the event log for possible reasons for the service start failure.
    [6/5/2007 3:14:15 PM] [1] 0.  ErrorRecord: Microsoft.Exchange.Configuration.Tasks.ServiceFailedToStartException: Service 'MSExchangeIS' failed to start. Check the event log for possible reasons for the service start failure.
    [6/5/2007 3:14:15 PM] [1] [ERROR] Service 'MSExchangeIS' failed to start. Check the event log for possible reasons for the service start failure.
    [6/5/2007 3:14:15 PM] [1] Setup is halting task execution because of one or more errors in a critical task.
    [6/5/2007 3:14:15 PM] [1] Finished executing component tasks.
    [6/5/2007 3:14:15 PM] [1] Ending processing.
    [6/5/2007 3:14:18 PM] [0] End of Setup
    [6/5/2007 3:14:18 PM] [0] **********************************************
    this I am trying on my test system please help me out in resolving the issue
    thanks in advance,

    Gary,
    Open Registry Editor.
    In Registry Editor, navigate to the following registry key:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSExchangeIS\ParametersSystem
    Create the following value (REG_SZ): Working Directory and give it a value that points to the new database folder.
    Make sure you back up the registry before you do any changes on it.
    Raj

  • Unable to initialize the Microsoft Exchange Information Store service because the clocks on the client and on the server machine are skewed

    Each time I restart this exchange server, the Information Store and System Attendant don't start. If It try to manually start the services, I get the follow errors:
    Event ID 5003:
    Unable to initialize the Microsoft Exchange Information Store service because the clocks on the client and on the server machine are skewed. This may be caused by a time change either in the client or the server machine, and may require a reboot of that machine. Other than that, verify that your domain is properly configured and is currently online.
    Event ID 1005:
    Unexpected error The clocks on the client and server machines are skewed. ID no: 80090324 Microsoft Exchange System Attendant  occurred.
    The clocks on the domain controllers and the exchange server are set to the same time zones. As well, all three clocks are in sync down to the second. Any ideas on what's causing this and how to fix it?

    Run this Command from the Exchange Server
    Net time \\ADServerName /Set
    and confirm the action,
    and then you need to restart the service
    Microsoft Exchange Active Directory Topology Service
    and confirm you are not getting the Error 4001 in the event Viewer.
    Thank you, it resolved my issue after being sweating looking for solution.
    How can I prevent this from happening? I cannot restart services on each server reboot nor lose 5 years of my life!!!
    Sokratis Laskaridis MCP, MCTS, MCITP, Small Business Specialist Netapp ASAP, Symantec STS

  • Oracle service terminated unexpectedly -

    Good Morning everyone,
    I came in this morning and encountered our production database has crashed. We are running Oracle 10G 10.2.0.1 on Windows 2003 R2 Server.
    The OS system log just reports the service terminated unexpectedly. With no other information in the lower data box.
    Looking in the alert log points to this trace file 3 times and ends.
    Tue Feb 03 07:15:53 2009
    Errors in file c:\oracle\admin\ptmn\udump\ptmn_ora_2980.trc:
    ORA-00600: internal error code, arguments: [kssadpm: null parent], [], [], [], [], [], [], []
    ORA-07445: exception encountered: core dump [ACCESS_VIOLATION] [unable_to_trans_pc] [PC:0x7FF773113D4] [ADDR:0x0] [UNABLE_TO_WRITE] []
    This is what I have in each trace file.
    Dump file c:\oracle\admin\ptmn\udump\ptmn_ora_2980.trc
    Tue Feb 03 07:15:52 2009
    ORACLE V10.2.0.1.0 - 64bit Production vsnsta=0
    vsnsql=14 vsnxtr=3
    Oracle Database 10g Enterprise Edition Release 10.2.0.1.0 - 64bit Production
    With the Partitioning, OLAP and Data Mining options
    Windows Server 2003 Version V5.2 Service Pack 2
    CPU : 8 - type 8664, 2 Physical Cores
    Process Affinity : 0x0000000000000000
    Memory (Avail/Total): Ph:20525M/32767M, Ph+PgF:20903M/33873M
    Instance name: ptmn
    Redo thread mounted by this instance: 1
    Oracle process number: 230
    Windows thread id: 2980, image: ORACLE.EXE (SHAD)
    *** SERVICE NAME:(ptmn.world) 2009-02-03 07:15:52.923
    *** SESSION ID:(1329.1631) 2009-02-03 07:15:52.923
    *** 2009-02-03 07:15:52.923
    ksedmp: internal or fatal error
    ORA-07445: exception encountered: core dump [ACCESS_VIOLATION] [unable_to_trans_pc] [PC:0x7FF773113D4] [ADDR:0x0] [UNABLE_TO_WRITE] []
    Current SQL statement for this session:
    ALTER SESSION SET CURRENT_SCHEMA = PROD
    ----- Call Stack Trace -----
    After calling around a bit I discovered that a developer in an outter office ran a massive select query against the database.
    He said it he ran it once it failed, twice it failed, and a 3rd time it failed. According the the alert log, after this 3rd time the
    database crashed.
    All I'm wanting to know is why did it crash, did the developer use all the os/oracle resources doing this? Any insight would be much appreciated.
    To prevent this from happening again he's been restricted to TEST database resources only :)
    Thank you all for your time and service :)
    Edited by: Steve Baker on Feb 3, 2009 6:37 AM
    Edited by: Steve Baker on Feb 3, 2009 6:38 AM

    Satish, Thank you for the fast response!
    Looking over the solutuions on this document
    Ensure that the existing memory is functioning properly. - It's fine, ran a memory sys test on it
    If there is no hardware issue, then you have simply run out of available memory and you need to purchase more. This server has 32GB and this oracle DB is allocated 7GB
    Check your OS log for hardware errors. none in the event viewer logs
    I'm thinking he just ran the instance out of memory some how. I also should mention the is another database instance running on
    this server, and it has remained fine during all these issues this morning. So it's gotta be something to do with that instance.
    I'll increase the memory for the PTMN (crashed) instance.
    Possible look into setting some resource limits for the developers on this database.
    Thank you again for the information. I do appreciate it.

  • Microsoft Exchange Transport service terminated unexpectedly

    Hi All,
    We have configured exchange 2013 in windows server 2012. From last two days exchange transport service getting stopped.
    Microsoft Exchange Transport service terminated unexpectedly.
    Log Name:      System
    Source:        Service Control Manager
    Date:          11/13/2014 1:10:28 AM
    Event ID:      7031
    Task Category: None
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      BMBPRMBX01.BMB.LOCAL
    Description:
    The Microsoft Exchange Transport service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 5000 milliseconds: Restart the service.

    Hi,
    This issue may due to some of the corrupt message in the queue. Please try these steps to solve this issue.
    Pause the transport service and let all the messaged go out.
    When queue is empty, stop the transport service and go to the mail.que database in transport-->queue folder. Cut paste all the files from queue folder to some other folder as backup.
    Now start the transport service, it will create a fresh mail.que database and observe if the service us crashing again.
    In addition, please try to disable any AV software, sometimes it will cause Transport service corrupted.
    Best Regards.

  • #550 5.2.0 STOREDRV.Deliver: The Microsoft Exchange Information Store service reported an error.

    Hi, 
    I created a mailbox few days before, everythign was working fine and suddenly when some one tried to send email on that mailbox it bounced back with following error:
    There's a problem with the recipient's mailbox. Microsoft Exchange will not try to redeliver this message for you. Please try resending this message, or provide the following diagnostic text to your system administrator.
    Sent by Microsoft Exchange Server 2007 
    Diagnostic information for administrators:
    Generating server: Mail01.abc.com
    [email protected]
    #550 5.2.0 STOREDRV.Deliver: The Microsoft Exchange Information Store service reported an error. The following information should help identify the cause of this error: "MapiExceptionNotFound:16.18969:9A000000, 17.27161:00000000CC000000000000000600000000000000,
    255.23226:00000000, 255.27962:FE000000, 255.17082:0F010480, 0.26937:94000000, 4.21921:0F010480, 255.27962:FA000000, 255.1494:00000000, 255.26426:FE000000, 4.7588:0F010480, 4.6564:0F010480, 2.17597:00000000, 2.25805:00000000, 4.8936:0F010480, 4.14312:0F010480,
    4.2199:0F010480, 2.25805:00000000, 4.8936:0F010480, 2.22957:00000000, 2.19693:00000000, 2.17917:00000000, 2.27341:00000000, 4.8936:0F010480, 4.17097:0F010480, 4.8620:0F010480, 255.1750:0F010480, 0.26849:0F010480, 255.21817:0F010480, 0.26297:0F010480, 4.16585:0F010480,
    0.32441:0F010480, 4.1706:0F010480, 0.24761:0F010480, 4.20665:0F010480, 0.25785:EC030000, 4.29881:0F010480". ##
    Original message headers:
    Received: from Mailbox.abc.com ([fe80::892d:93d6:b1ac:b70a]) by mail01
     ([10.72.0.95]) with mapi; Fri, 11 Jan 2013 14:04:55 +0500
    Content-Type: application/ms-tnef; name="winmail.dat"
    Content-Transfer-Encoding: binary
    From: Anwar Amjad <[email protected]>
    To: All-HEC <[email protected]>
    Date: Fri, 11 Jan 2013 14:04:53 +0500
    Subject: FW: Suggestions & New Arrival in HEC Library
    Thread-Topic: Suggestions & New Arrival in HEC Library
    Thread-Index: Ac3vHgwR50OLs2BnQuOzo9jWg4e1gQAvJtUw
    Message-ID: <[email protected]>
    References: <[email protected]>
    In-Reply-To: <[email protected]>
    Accept-Language: en-US
    Content-Language: en-US
    X-MS-Has-Attach: yes
    X-MS-TNEF-Correlator: <[email protected]>
    MIME-Version: 1.0
    X-Auto-Response-Suppress: DR, OOF, AutoReply
    After this error, i treid to send email again and there is no error and email was delivered. What was the cause of this error?
    Hasan

    Hi,
    I tried to start seeding again but it is at same status. I will try again and hopefully it will get resolved.
    But, yesterday i ran in to the most complex issue i have ever seen with Exchange.
    There was a unexpected power cut at our datacentre due to which both the nodes went down.
    After that both the nodes came up. But the all 3 databases were dismounted.
    Therefore, i ran Eseutil /mh resulting dirty shutdown.
    I was able to repair 2 databases.
    But the 3rd one was not mounting with below error.
    Microsoft Exchange Error
    Failed to mount database 'Mailbox Database'.
    Mailbox Database
    Failed
    Error:
    Exchange is unable to mount the database that you specified. Specified database: XXXXX\First Storage Group\Mailbox Database; Error code: MapiExceptionJetErrorAttachedDatabaseMismatch: Unable to mount database. (hr=0x80004005, ec=-1216).
    I was able to mount database somehow. There are 7 User mailboxes (Tier 1) on this database.
    All emails sent to the users in this database are bouncing back with the below error.
    This storage groups holds the mailboxes of my Senior Managements. And their mailboxes are down for almost 20 Hrs. I am spinning my head since yesterday but not able to find any fix. Can you please guide me in this concern.
    Best Regards
    K2
    Kapil Kashyap

  • Unable to initialize the Microsoft Exchange Information Store service. - Error 0x96f.

    PLease help, I've rstored from backup three times with no success I'm getting the following error
    "Unable to initialize the Microsoft Exchange Information Store service.   - Error 0x96f. "
    It's LDap related but i have no idea why :-(
    Best Regards Bernhard

    IPv6 had been disabled for months on my SBS 2008 Server running Exchange 2007 SP1.  I ran 40 or so Windows Updates; subsequently, the next morning Exchange was no longer running; topology issues, event ID 2604, 2114 and 2601 were all over my Application
    Log.  After 12 hours of research I found this post; figured it was worth a shot and instantly all my services for Exchange fired up.  Thanks for the tip; I have no idea which update changed what in regards to needing IPv6 enabled, but that silly
    little check mark fixed it.  
    Thank you for sharing your solution! 
    Dan

  • The DPMRA service terminated unexpectedly. It has done this 332 time(s)."

    Hi,
    We’ve been having problems with our DPM backups. We’re running DPM 2012 SP1 on Server 2008 R2 SP1.
    In short the backup agent seems to crash causing all jobs to error/fail.
    I slightly more detailed explanation of the issue is ….
    The critical alert says
    “The protection agent on MYSERVERNAME was temporarily unable to respond because it was in an unexpected state. (ID 60 Details: Internal error code: 0x809909B0)”
    When we look at the System log we have an event id 7034 from the Service Control Manager source with something like
    “The DPMRA service terminated unexpectedly. 
    It has done this 332 time(s).”
    In the Application log we have event id 1000 from the Application Error source
    Faulting application name: DPMRA.exe, version: 4.1.3333.0, time stamp: 0x50f5e4f5
    Faulting module name: FileWriterHelperPlugin.dll, version: 4.1.3313.0, time stamp: 0x50ad994d
    Exception code: 0xc0000005
    Fault offset: 0x0000000000062a09
    Faulting process id: 0x1a94
    Faulting application start time: 0x01ce5636b3b19038
    Faulting application path: C:\Program Files\Microsoft DPM\DPM\bin\DPMRA.exe
    Faulting module path: C:\Program Files\Microsoft DPM\DPM\bin\FileWriterHelperPlugin.dll
    Report Id: e814c3af-c22a-11e2-a2b8-826b64169df1
    After looking in the DPMRACurr.errlog I found a “CRITICAL Raising Watson for process” but can’t track down the issue ….
    1A94      2320      
    05/21     15:27:08.284      
    31          
    vsssnapshotrequestor.cpp(712)               
    [0000000002EB93B0]      
    NORMAL             
    CVssSnapshotRequestor::StartDoSnapshot [0000000002EB93B0]
    1A94      2320      
    05/21     15:27:10.312      
    31          
    vssbaserequestor.cpp(944)        
    [0000000002EB93B0]                      
    NORMAL               
    QueryStatus returned 0x4230a, Releasing VssAsync [0000000000BE7030]
    1A94      2320      
    05/21     15:27:10.312      
    31          
    vssbaserequestor.cpp(1068)     
    [0000000002EB93B0]                      
    NORMAL               
    CVssBaseRequestor::StartGatherWriterStatus [0000000002EB93B0]
    1A94      2320      
    05/21     15:27:11.326      
    31          
    vssbaserequestor.cpp(944)        
    [0000000002EB93B0]                      
    NORMAL               
    QueryStatus returned 0x4230a, Releasing VssAsync [0000000000BE7030]
    1A94      2320      
    05/21     15:27:11.326      
    31          
    vsssnapshotrequestor.cpp(747)               
    [0000000002EB93B0]      
    NORMAL             
    CVssSnapshotRequestor::MapVolumesToSnapshotPaths [0000000002EB93B0]
    1A94      2320      
    05/21     15:27:11.342      
    31          
    vsssnapshotrequestor.cpp(767)               
    [0000000002EB93B0]      
    NORMAL             
    CVssSnapshotRequestor:: ProviderId:[{B5946137-7B9F-4925-AF80-51ABD60B20D5}], h/w provider:[0], volume:[\\?\Volume{7d4bcb2f-275e-11e0-afde-c2fd68da2b37}\]
    1A94      2320      
    05/21     15:27:11.498      
    31          
    vssbaserequestor.cpp(1101)     
    [0000000002EB93B0]                      
    NORMAL               
    CVssBaseRequestor::CheckWriterStatus [0000000002EB93B0]
    1A94      2320      
    05/21     15:27:11.498      
    31          
    vssbaserequestor.cpp(1132)     
    [0000000002EB93B0]                      
    NORMAL               
    Checking Writer status for writerid: {0074A271-4F24-43E0-9EC7-28A44189CB80}                                      
    writerName: DPM Writer
    1A94      05F0      
    05/21     15:27:11.701      
    18          
    incompatiblefiltersfinder.cpp(171)                        
    150ACB1B-1308-494F-8145-D1BBC50308EA  NORMAL             
    No Incompatible Service Groups. Hence no incompatible filters
    1A94      05F0      
    05/21     15:27:11.701      
    31          
    basewriterbackuphelper.cpp(178)         
    [0000000002FF9150]      
    150ACB1B-1308-494F-8145-D1BBC50308EA NORMAL             
    SetSystemFlags(0)
    1A94      05F0      
    05/21     15:27:11.701      
    18          
    dsmsendersubtaskbase.cpp(47)              
    [0000000002EE0FB0]      
    150ACB1B-1308-494F-8145-D1BBC50308EA NORMAL             
    CDsmSenderSubTaskBase: constructor [0000000002EE0FB0] openovl[0000000002EE1120] msgovl[0000000002EE1220] closeovl[0000000002EE1170]
    1A94      05F0      
    05/21     15:27:11.701      
    31          
    vsssnapshotrequestor.cpp(1276)                            
    150ACB1B-1308-494F-8145-D1BBC50308EA  NORMAL             
    ssLocalVolumeGuid = [\\?\Volume{7d4bcb2f-275e-11e0-afde-c2fd68da2b37}\], ssClusterVolGuid=[\\?\Volume{7d4bcb2f-275e-11e0-afde-c2fd68da2b37}\]
    1A94      05F0      
    05/21     15:27:11.701      
    31          
    basewriterbackuphelper.cpp(370)                         
    150ACB1B-1308-494F-8145-D1BBC50308EA  WARNING          
    Assertion Failure :: false
    1A94      05F0      
    05/21     15:27:11.701      
    31          
    basewriterbackuphelper.cpp(317)                         
    150ACB1B-1308-494F-8145-D1BBC50308EA  WARNING          
    Assertion Failure :: pConfigureInfo != NULL
    1A94      05F0      
    05/21     15:27:11.701      
    22          
    watsonintegration.cpp(73)                        
    150ACB1B-1308-494F-8145-D1BBC50308EA  NORMAL             
    Inside Watson Handler
    1A94      05F0      
    05/21     15:27:11.701      
    22          
    watsonintegration.cpp(116)                      
    150ACB1B-1308-494F-8145-D1BBC50308EA  CRITICAL             
    Raising Watson for process
    299C      2860      
    05/21     15:28:03.736      
    03          
    timer.cpp(490)                                 
    ACTIVITY             
    CTimerMgr::TimerThread
    299C      2860      
    05/21     15:28:03.736      
    03          
    timer.cpp(503)  [0000000000449D50]                      
    ACTIVITY               
    CTimerMgr::TimerThreadInternal
    299C      2728      
    05/21     15:28:03.741      
    03          
    runtime.cpp(782)           
    [000000000044D3F0]                      
    ACTIVITY               
    InitializeSecurity found 3 authorized entities
    299C      2728      
    05/21     15:28:03.742      
    03          
    runtime.cpp(841)           
    [000000000044D3F0]                      
    ACTIVITY               
    InitializeSecurity added COM perm for DPMRADCOMTrustedMachines
    299C      2728      
    05/21     15:28:03.742      
    03          
    runtime.cpp(841)           
    [000000000044D3F0]                      
    ACTIVITY               
    InitializeSecurity added COM perm for DPMRATrustedDPMRAs
    299C      2728      
    05/21     15:28:03.743      
    03          
    runtime.cpp(848)           
    [000000000044D3F0]                      
    ACTIVITY               
    InitializeSecurity added DM perm for DPMRADmTrustedMachines
    299C      2728      
    05/21     15:28:03.743      
    03          
    runtime.cpp(94)                                              
    NORMAL             
    Found 1 writer account(s) under VSS access control.
    299C      2728      
    05/21     15:28:03.743      
    03          
    runtime.cpp(162)                                           
    NORMAL             
    Added writer account [0] 'NT Authority\NetworkService' to the DACL.
    299C      2728      
    05/21     15:28:03.749      
    22          
    genericthreadpool.cpp(824)      
    [000000000044D3F0]                      
    NORMAL               
    Hr: = [0x80070002] CGenericThreadPool::m_dwMaximumNumberOfThreads[20]
    299C      2728      
    05/21     15:28:03.758      
    20          
    commengine.cpp(345)  [00000000004C4650]                      
    ACTIVITY             
    Hr: = [0x00000000] ConnectionNoActivityTimeout: 7200
    299C      2728      
    05/21     15:28:03.759      
    20          
    commengine.cpp(359)  [00000000004C4650]                      
    ACTIVITY             
    Hr: = [0x00000000] m_dwConnectionNoActivityTimeoutForSlowReceiver: 7200
    299C      2BE4     
    05/21     15:28:03.764      
    03          
    timer.cpp(490)                                 
    ACTIVITY             
    CTimerMgr::TimerThread
    299C      2BE4     
    05/21     15:28:03.764      
    03          
    timer.cpp(503)  [000000000021FA58]                      
    ACTIVITY               
    CTimerMgr::TimerThreadInternal
    299C      2728      
    05/21     15:28:03.765      
    29          
    dpmra.cpp(160)               
    [0000000000448CB0]                      
    NORMAL               
    CDPMRA::Initialize [0000000000448CB0]
    299C      2728      
    05/21     15:28:03.765      
    31          
    vaagent.cpp(227)                                            
    NORMAL             
    CVAAgent: Initialize globals
    299C      2728      
    05/21     15:28:03.777      
    29          
    mta.cpp(126)                                    
    ACTIVITY               
    CMTA::AddSchemasToSchemaCache => Initialize loaded schemas
    299C      2728      
    05/21     15:28:03.791      
    29          
    dpmra.cpp(178)               
    [0000000000448CB0]                      
    NORMAL               
    CDPMRA::Initialize loaded schemas
    299C      2728      
    05/21     15:28:03.791      
    22          
    genericthreadpool.cpp(75)        
    [000000000021FD90]                      
    NORMAL               
    CGenericThreadPool: constructor
    299C      2728      
    05/21     15:28:03.791      
    22          
    genericthreadpool.cpp(824)      
    [000000000021FD90]                      
    NORMAL               
    Hr: = [0x80070002] CGenericThreadPool::m_dwMaximumNumberOfThreads[256]
    299C      2728      
    05/21     15:28:03.792      
    29          
    dpmra.cpp(265)               
    [0000000000448CB0]                      
    NORMAL               
    CreateDefaultSubTask [0000000000448CB0]
    299C      2728      
    05/21     15:28:03.792      
    29          
    dpmra.cpp(188)               
    [0000000000448CB0]                      
    NORMAL               
    Temporary storage path reg key found
    299C      2728      
    05/21     15:28:03.792      
    29          
    dpmra.cpp(204)               
    [0000000000448CB0]                      
    NORMAL             
    MTA Temp location Path = [c:\Program Files\Microsoft DPM\DPM\temp\MTA\]
    299C      2728      
    05/21     15:28:03.792      
    29          
    mta.cpp(209)                                    
    NORMAL             
    Hr: = [0x80070005] CMTA::Initialize => Could not delete file = [c:\Program Files\Microsoft DPM\DPM\temp\MTA\PSInfo]
    299C      2728      
    05/21     15:28:03.793      
    29          
    mtamethrottlehelper.cpp(113) [00000000029987E0]                      
    NORMAL               
    Hr: = [0x80070002] Number of encryption threads = [2]
    299C      2728      
    05/21     15:28:03.793      
    03          
    datasourceresourcelimit.cpp(132)          
    [000000000044D9F0]      
    NORMAL             
    Resource Limit Config File: c:\Program Files\Microsoft DPM\DPM\bin\DsResourceLimits.xml
    299C      2728      
    05/21     15:28:03.794      
    03          
    datasourceresourcelimit.cpp(138)          
    [000000000044D9F0]      
    NORMAL             
    Loaded DS Resource Limits
    299C      2728      
    05/21     15:28:03.794      
    03          
    service.cpp(298)             
    [00000000000FFD80]                      
    ACTIVITY               
    CService::AnnounceServiceStatus
    299C      0758      
    05/21     15:28:03.827      
    03          
    runtime.cpp(1376)         
    [000000000044D3F0]      
    150ACB1B-1308-494F-8145-D1BBC50308EA  FATAL  
    Subtask failure, sending status response XML=[<?xml version="1.0"?>
    We’ve since raised a ticket with Microsoft Support but I’m told the System Centre Developer support team are experiencing high call volumes so I’m hoping someone else might be able to point me in the right direction.
    We do have a SCOM agent installed but have disabled it and still get the issue :o(
    Any ideas of what else to look at?
    Thanks,
    John

    Did you ever receive an answer back on this? I have almost the exact same issue. I have DPM 2012 Sp1 Update Roll up 5 on Server 2012. Backup jobs will work on a particular server for a couple after forcing synchronization but then all jobs begin to fail.
    On the DPM Server I will get: The protection agent on server.domain.local was temporarily unable to respond because it was in an unexpected state. (ID: 60) On the Protected computer in the Event Viewer system log I get: Service Control Manager Event ID: 7034
    Description: The DPMRA service terminated unexpectedly.  It has done this 688+ time(s).
    On the Protected computer under C:\Program Files\Microsoft Data Protection Manager\DPM\Temp I have quite a few error crash logs. Here are some of them.
    1318       0C14      03/17     15:47:04.123       03           runtime.cpp(1376)         
    [008E7060]          60111D39-34B2-4135-BAC2-7AC4368141A3  FATAL   Subtask failure, sending status response XML=[<?xml version="1.0"?>
    1318       0C14      03/17     15:47:04.123       03           runtime.cpp(1376)         
    [008E7060]          60111D39-34B2-4135-BAC2-7AC4368141A3  FATAL   <Status xmlns="http://schemas.microsoft.com/2003/dls/StatusMessages.xsd" StatusCode="-2137454160" Reason="Error" CommandID="RACancelAllSubTasks"
    CommandInstanceID="23976afc-34bc-4d3c-99ea-996bdb34ce99" GuidWorkItem="97a32e51-07f8-4bb2-a292-dcd433b2472b" TETaskInstanceID="60111d39-34b2-4135-bac2-7ac4368141a3"><ErrorInfo xmlns="http://schemas.microsoft.com/2003/dls/GenericAgentStatus.xsd" ErrorCode="536872913"
    DetailedCode="-2137454160" DetailedSource="2"><Parameter Name="AgentTargetServer" Value="bspops001.BSPEnterprise.local"/></ErrorInfo></Status>
    1318       0C14      03/17     15:47:04.123       03           runtime.cpp(1376)         
    [008E7060]          60111D39-34B2-4135-BAC2-7AC4368141A3  FATAL   ]
    1318       0C14      03/17     15:47:04.123       29           radefaultsubtask.cpp(360)          
    [00EB4F10]          60111D39-34B2-4135-BAC2-7AC4368141A3      WARNING           Failed: Hr: = [0x809909b0] : CRADefaultSubTask: WorkitemID
    does not exist, {97A32E51-07F8-4BB2-A292-DCD433B2472B}
    1318       0C14      03/17     15:47:04.123       05           defaultsubtask.cpp(546)              
    [00EB4F10]          60111D39-34B2-4135-BAC2-7AC4368141A3      WARNING           Failed: Hr: = [0x809909b0] : Encountered Failure: : lVal
    : CommandReceivedSpecific(pCommand, pOvl)
    1318       0C14      03/17     15:47:04.123       05           defaultsubtask.cpp(751)              
    [00EB4F10]          60111D39-34B2-4135-BAC2-7AC4368141A3      WARNING           Failed: Hr: = [0x809909b0] : Encountered Failure: : lVal
    : CommandReceived(pAgentOvl)
    1318       0C14      03/17     15:47:04.217       29           radefaultsubtask.cpp(262)          
    [00EB4F10]          60111D39-34B2-4135-BAC2-7AC4368141A3      WARNING           CRADefaultSubTask: WorkitemID to delete does not exist,
    {97A32E51-07F8-4BB2-A292-DCD433B2472B}
    1318       0C14      03/17     15:47:04.217       03           runtime.cpp(1376)         
    [008E7060]          60111D39-34B2-4135-BAC2-7AC4368141A3  FATAL   Subtask failure, sending status response XML=[<?xml version="1.0"?>
    1318       0C14      03/17     15:47:04.217       03           runtime.cpp(1376)         
    [008E7060]          60111D39-34B2-4135-BAC2-7AC4368141A3  FATAL   <Status xmlns="http://schemas.microsoft.com/2003/dls/StatusMessages.xsd" StatusCode="-2137454160" Reason="Error" CommandID="RADeleteWorkItem"
    CommandInstanceID="9d7f0075-90a5-4f79-912e-9625fb6ccd76" GuidWorkItem="97a32e51-07f8-4bb2-a292-dcd433b2472b" TETaskInstanceID="60111d39-34b2-4135-bac2-7ac4368141a3"><ErrorInfo xmlns="http://schemas.microsoft.com/2003/dls/GenericAgentStatus.xsd" ErrorCode="536872913"
    DetailedCode="-2137454160" DetailedSource="2"><Parameter Name="AgentTargetServer" Value="bspops001.BSPEnterprise.local"/></ErrorInfo></Status>
    1318       0C14      03/17     15:47:04.217       03           runtime.cpp(1376)         
    [008E7060]          60111D39-34B2-4135-BAC2-7AC4368141A3  FATAL   ]
    1318       0C14      03/17     15:47:04.217       29           radefaultsubtask.cpp(263)          
    [00EB4F10]          60111D39-34B2-4135-BAC2-7AC4368141A3      WARNING           Failed: Hr: = [0x809909b0] : Encountered Failure: : lVal
    : (HRESULT)0x809909B0
    1318       0C14      03/17     15:47:04.217       05           defaultsubtask.cpp(546)              
    [00EB4F10]          60111D39-34B2-4135-BAC2-7AC4368141A3      WARNING           Failed: Hr: = [0x809909b0] : Encountered Failure: : lVal
    : CommandReceivedSpecific(pCommand, pOvl)
    1318       0C14      03/17     15:47:04.217       05           defaultsubtask.cpp(751)              
    [00EB4F10]          60111D39-34B2-4135-BAC2-7AC4368141A3      WARNING           Failed: Hr: = [0x809909b0] : Encountered Failure: : lVal
    : CommandReceived(pAgentOvl)
    1318       0C14      03/17     15:47:04.685       03           workitem.cpp(86)           
    [00E9CED4]         F94114B7-BA2F-46A3-8133-D1B358E78670   ACTIVITY              Idle Timer created with timeout = 390000
    1318       0C14      03/17     15:47:04.982       05           xmlprocessingutils.cpp(1469)                    
    F94114B7-BA2F-46A3-8133-D1B358E78670   WARNING           Failed: Hr: = [0x80070057] : Encountered Failure: : lVal : E_INVALIDARG
    1318       0C14      03/17     15:47:04.998       31           vadatasourcestate.cpp(747)                      
    F94114B7-BA2F-46A3-8133-D1B358E78670   WARNING           Failed: Hr: = [0x8007007e] GetModuleHandle failed for Library [FileWriterHelperPlugin], will try LoadLibrary
    0000       0C14      03/17     15:47:04.998       00           fsutils.cpp(4750)                              
    F94114B7-BA2F-46A3-8133-D1B358E78670   NORMAL             CClientReadThrottler::InitializeWaitForClientRead Failed to read sleep time from registry [hr = 0xdf9690]. Setting default [50 ms].
    1318       0C14      03/17     15:47:05.014       31           dllmain.cpp(36)                
    F94114B7-BA2F-46A3-8133-D1B358E78670                NORMAL             FileWriterHelperPlugin: DLL_PROCESS_ATTACH
    1318       17B8      03/17     15:47:05.014       31           basewriterbackuphelper.cpp(159)          
    [00EC5A28]         F94114B7-BA2F-46A3-8133-D1B358E78670 NORMAL             SetOperationType(2)
    1318       17B8      03/17     15:47:05.014       22           watsonintegration.cpp(73)                         
    F94114B7-BA2F-46A3-8133-D1B358E78670   NORMAL             Inside Watson Handler
    1318       17B8      03/17     15:47:05.014       22           watsonintegration.cpp(116)                       
    F94114B7-BA2F-46A3-8133-D1B358E78670   CRITICAL              Raising Watson for process
    0628       04D0      03/17     15:48:04.827       03          
    timer.cpp(490)                                  ACTIVITY               
    CTimerMgr::TimerThread

Maybe you are looking for