Microsoft Exchange Transport service terminated unexpectedly

Hi All,
We have configured exchange 2013 in windows server 2012. From last two days exchange transport service getting stopped.
Microsoft Exchange Transport service terminated unexpectedly.
Log Name:      System
Source:        Service Control Manager
Date:          11/13/2014 1:10:28 AM
Event ID:      7031
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      BMBPRMBX01.BMB.LOCAL
Description:
The Microsoft Exchange Transport service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 5000 milliseconds: Restart the service.

Hi,
This issue may due to some of the corrupt message in the queue. Please try these steps to solve this issue.
Pause the transport service and let all the messaged go out.
When queue is empty, stop the transport service and go to the mail.que database in transport-->queue folder. Cut paste all the files from queue folder to some other folder as backup.
Now start the transport service, it will create a fresh mail.que database and observe if the service us crashing again.
In addition, please try to disable any AV software, sometimes it will cause Transport service corrupted.
Best Regards.

Similar Messages

  • Event ID 7031 followed by 7032 The Microsoft Exchange Transport service terminated unexpectedly.

    Hello
    Have a strange problem that reoccurs every day. The following are recorded in the log.
    7031
    The Microsoft Exchange Transport service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 5000 milliseconds: Restart the service.7032The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Microsoft Exchange Transport service, but this action failed with the following error:
    An instance of the service is already running.Any suggestions are welcome./Deland
    /Andreas

    Here are the result from the level 5 logging. I Havent disabled the TransportAgent yet.
    Log Name:      Application
    Source:        MSExchangeTransport
    Date:          2013-07-19 10:13:25
    Event ID:      12025
    Task Category: TransportService
    Level:         Warning
    Keywords:      Classic
    User:          N/A
    Computer:      XXXX
    Description:
    Transport service is disconnecting performance counters with process lifetime from their old process.
    Followed by 32 events of 12028
    Log Name:      Application
    Source:        MSExchangeTransport
    Date:          2013-07-19 10:13:25
    Event ID:      12028
    Task Category: TransportService
    Level:         Warning
    Keywords:      Classic
    User:          N/A
    Computer:      XXXX
    Description:
    The process with process ID 1100 is holding the performance counter configuration cache total requests Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062 from instance transportrules(B1D082BB) RefCount=0 SpinLock=0 Offset=3936
    and category MSExchangeTransport Configuration Cache while running processes are: Processes running are:
    6300 UMWorkerProcess
    5312 Microsoft.Exchange.ServiceHost
    1568 Microsoft.Exchange.Diagnostics.Service
    2212 WMSvc
    776 svchost
    1760 MSExchangeHMHost
    9808 MSExchangeDelivery
    376 explorer
    2252 Microsoft.Exchange.Directory.TopologyService
    9436 rundll32
    1752 nscp
    2932 noderunner
    6076 MSExchangeSubmission
    7056 scanningprocess
    1736 PccNtMon
    1340 fms
    4688 MSExchangeTransport
    1732 Ntrtscan
    2716 MSExchangeMailboxAssistants
    548 winlogon
    9016 TmProxy
    348 svchost
    2904 SMSvcHost
    1524 inetinfo
    8376 TMBMSRV
    5264 MSExchangeThrottling
    12552 powershell
    4080 w3wp
    1124 svchost
    7688 svchost
    12744 w3wp
    332 smss
    1316 svchost
    13188 mmc
    5772 ForefrontActiveDirectoryConnector
    3080 HostedAgent
    11364 conhost
    3268 w3wp
    1060 svchost
    2924 noderunner
    904 dwm
    3856 w3wp
    504 wininit
    7200 Microsoft.Exchange.Store.Worker
    1668 SMSvcHost
    4832 MSExchangeFrontendTransport
    2072 sftracing
    4932 MSExchangeMailboxReplication
    7192 Microsoft.Exchange.Store.Worker
    6992 Microsoft.Exchange.UM.CallRouter
    9640 w3wp
    9204 svchost
    3244 svcGenericHost
    1200 Microsoft.Exchange.Store.Service
    876 svchost
    10724 rundll32
    3040 conhost
    2480 w3wp
    5992 MSExchangeTransportLogSearch
    596 services
    12508 w3wp
    2636 MSExchangeHMWorker
    11892 taskhostex
    4796 Microsoft.Exchange.Search.Service
    3568 WmiPrvSE
    12532 ServerManager
    9564 msdtc
    4352 Microsoft.Exchange.EdgeSyncSvc
    2032 mqsvc
    6560 scanningprocess
    3404 TmListen
    4384 updateservice
    3004 scanningprocess
    6744 umservice
    1424 hostcontrollerservice
    828 svchost
    432 csrss
    696 svchost
    1284 spoolsv
    8152 w3wp
    3576 w3wp
    1264 svchost
    496 csrss
    5928 Microsoft.Exchange.RpcClientAccess.Service
    2972 noderunner
    2380 conhost
    604 lsass
    6884 Microsoft.Exchange.Store.Worker
    10056 WmiPrvSE
    992 svchost
    2764 noderunner
    5324 msexchangerepl
    4 System
    3548 Microsoft.Exchange.AntispamUpdateSvc
    2168 svchost
    0 Idle
    And 28 events on 106
    Log Name:      Application
    Source:        MSExchange Common
    Date:          2013-07-19 10:13:29
    Event ID:      106
    Task Category: General
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      XXXX
    Description:
    Performance counter updating error. Counter name is DataRow seeks total, category name is MSExchangeTransport Database. Optional code: 2. Exception: The exception thrown is : System.InvalidOperationException: Instance '_total' already exists with a lifetime
    of Process.  It cannot be recreated or reused until it has been removed or until the process using it has exited.
       at System.Diagnostics.SharedPerformanceCounter.FindInstance(Int32 instanceNameHashCode, String instanceName, CategoryEntry* categoryPointer, InstanceEntry** returnInstancePointerReference, Boolean activateUnusedInstances, PerformanceCounterInstanceLifetime
    lifetime, Boolean& foundFreeInstance)
       at System.Diagnostics.SharedPerformanceCounter.GetCounter(String counterName, String instanceName, Boolean enableReuse, PerformanceCounterInstanceLifetime lifetime)
       at System.Diagnostics.SharedPerformanceCounter..ctor(String catName, String counterName, String instanceName, PerformanceCounterInstanceLifetime lifetime)
       at System.Diagnostics.PerformanceCounter.InitializeImpl()
       at System.Diagnostics.PerformanceCounter.get_RawValue()
       at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.get_RawValue()
    Last worker process info : System.ArgumentException: Process with an Id of 14868 is not running.
       at System.Diagnostics.Process.GetProcessById(Int32 processId)
       at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.GetLastWorkerProcessInfo()
    Processes running while Performance counter failed to update:
    6300 UMWorkerProcess
    5312 Microsoft.Exchange.ServiceHost
    1568 Microsoft.Exchange.Diagnostics.Service
    2212 WMSvc
    776 svchost
    1760 MSExchangeHMHost
    9808 MSExchangeDelivery
    376 explorer
    2252 Microsoft.Exchange.Directory.TopologyService
    9436 rundll32
    1752 nscp
    2932 noderunner
    10416 EdgeTransport
    6076 MSExchangeSubmission
    7056 scanningprocess
    1736 PccNtMon
    1340 fms
    4688 MSExchangeTransport
    1732 Ntrtscan
    2716 MSExchangeMailboxAssistants
    548 winlogon
    9016 TmProxy
    348 svchost
    2904 SMSvcHost
    1524 inetinfo
    15116 conhost
    8376 TMBMSRV
    5264 MSExchangeThrottling
    12552 powershell
    4080 w3wp
    1124 svchost
    7688 svchost
    12744 w3wp
    332 smss
    1316 svchost
    13188 mmc
    5772 ForefrontActiveDirectoryConnector
    3080 HostedAgent
    11364 conhost
    3268 w3wp
    1060 svchost
    2924 noderunner
    904 dwm
    3856 w3wp
    504 wininit
    7200 Microsoft.Exchange.Store.Worker
    1668 SMSvcHost
    4832 MSExchangeFrontendTransport
    2072 sftracing
    4932 MSExchangeMailboxReplication
    7192 Microsoft.Exchange.Store.Worker
    6992 Microsoft.Exchange.UM.CallRouter
    9640 w3wp
    9204 svchost
    3244 svcGenericHost
    1200 Microsoft.Exchange.Store.Service
    876 svchost
    10724 rundll32
    3040 conhost
    2480 w3wp
    5992 MSExchangeTransportLogSearch
    596 services
    12508 w3wp
    2636 MSExchangeHMWorker
    11892 taskhostex
    4796 Microsoft.Exchange.Search.Service
    3568 WmiPrvSE
    12532 ServerManager
    9564 msdtc
    4352 Microsoft.Exchange.EdgeSyncSvc
    2032 mqsvc
    6560 scanningprocess
    3404 TmListen
    4384 updateservice
    3004 scanningprocess
    6744 umservice
    1424 hostcontrollerservice
    828 svchost
    432 csrss
    696 svchost
    1284 spoolsv
    8152 w3wp
    3576 w3wp
    1264 svchost
    496 csrss
    5928 Microsoft.Exchange.RpcClientAccess.Service
    2972 noderunner
    2380 conhost
    604 lsass
    6884 Microsoft.Exchange.Store.Worker
    10056 WmiPrvSE
    992 svchost
    2764 noderunner
    5324 msexchangerepl
    4 System
    3548 Microsoft.Exchange.AntispamUpdateSvc
    2168 svchost
    0 Idle
    Performance Counters Layout information: A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=59 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : queue(B351294)
    RefCount=0 SpinLock=0 Offset=48552, categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : cat event 8(ED0419E7) RefCount=0 SpinLock=0 Offset=44384,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : cat event 6(ED0419E9) RefCount=0 SpinLock=0 Offset=40216,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=4 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : cat event 3(ED0419EC) RefCount=0 SpinLock=0 Offset=36048,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=3 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : cat event 1(ED0419EE) RefCount=0 SpinLock=0 Offset=31880,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=18 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : cat(B874BB3) RefCount=0 SpinLock=0 Offset=27712,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : inqueue(56145953) RefCount=0 SpinLock=0 Offset=23544,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=17 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : smtpin(81392C98) RefCount=0 SpinLock=0 Offset=19376,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : mail(7C6FB7CC) RefCount=0 SpinLock=0 Offset=15208,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=68 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : other(ADC98A1) RefCount=0 SpinLock=0 Offset=11040,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 4832, counter : datarow seeks total Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4832 StartupTime: 130183498009738545, currentInstance : _total(CFBEE918) RefCount=1 SpinLock=0 Offset=32,
    categoryName: MSExchangeTransport Database
    Log Name:      Application
    Source:        MSExchange Common
    Date:          2013-07-19 10:13:31
    Event ID:      106
    Task Category: General
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      XXXX
    Description:
    Performance counter updating error. Counter name is Transaction Durable Callback Count/sec, category name is MSExchangeTransport Database. Optional code: 1. Exception: The exception thrown is : System.InvalidOperationException: Instance '_total' already exists
    with a lifetime of Process.  It cannot be recreated or reused until it has been removed or until the process using it has exited.
       at System.Diagnostics.SharedPerformanceCounter.FindInstance(Int32 instanceNameHashCode, String instanceName, CategoryEntry* categoryPointer, InstanceEntry** returnInstancePointerReference, Boolean activateUnusedInstances, PerformanceCounterInstanceLifetime
    lifetime, Boolean& foundFreeInstance)
       at System.Diagnostics.SharedPerformanceCounter.GetCounter(String counterName, String instanceName, Boolean enableReuse, PerformanceCounterInstanceLifetime lifetime)
       at System.Diagnostics.SharedPerformanceCounter..ctor(String catName, String counterName, String instanceName, PerformanceCounterInstanceLifetime lifetime)
       at System.Diagnostics.PerformanceCounter.InitializeImpl()
       at System.Diagnostics.PerformanceCounter.IncrementBy(Int64 value)
       at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.IncrementBy(Int64 incrementValue)
    Last worker process info : System.ArgumentException: Process with an Id of 14868 is not running.
       at System.Diagnostics.Process.GetProcessById(Int32 processId)
       at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.GetLastWorkerProcessInfo()
    Processes running while Performance counter failed to update:
    6300 UMWorkerProcess
    5312 Microsoft.Exchange.ServiceHost
    1568 Microsoft.Exchange.Diagnostics.Service
    2212 WMSvc
    776 svchost
    1760 MSExchangeHMHost
    9808 MSExchangeDelivery
    376 explorer
    2252 Microsoft.Exchange.Directory.TopologyService
    9436 rundll32
    1752 nscp
    2932 noderunner
    10416 EdgeTransport
    6076 MSExchangeSubmission
    7056 scanningprocess
    1736 PccNtMon
    1340 fms
    4688 MSExchangeTransport
    1732 Ntrtscan
    2716 MSExchangeMailboxAssistants
    548 winlogon
    9016 TmProxy
    348 svchost
    2904 SMSvcHost
    1524 inetinfo
    15116 conhost
    8376 TMBMSRV
    5264 MSExchangeThrottling
    12552 powershell
    4080 w3wp
    1124 svchost
    7688 svchost
    12744 w3wp
    332 smss
    1316 svchost
    13188 mmc
    5772 ForefrontActiveDirectoryConnector
    3080 HostedAgent
    11364 conhost
    3268 w3wp
    1060 svchost
    2924 noderunner
    904 dwm
    3856 w3wp
    504 wininit
    7200 Microsoft.Exchange.Store.Worker
    1668 SMSvcHost
    4832 MSExchangeFrontendTransport
    2072 sftracing
    4932 MSExchangeMailboxReplication
    7192 Microsoft.Exchange.Store.Worker
    6992 Microsoft.Exchange.UM.CallRouter
    9640 w3wp
    9204 svchost
    3244 svcGenericHost
    1200 Microsoft.Exchange.Store.Service
    876 svchost
    10724 rundll32
    3040 conhost
    2480 w3wp
    5992 MSExchangeTransportLogSearch
    596 services
    12508 w3wp
    2636 MSExchangeHMWorker
    11892 taskhostex
    4796 Microsoft.Exchange.Search.Service
    3568 WmiPrvSE
    12532 ServerManager
    9564 msdtc
    4352 Microsoft.Exchange.EdgeSyncSvc
    2032 mqsvc
    6560 scanningprocess
    3404 TmListen
    4384 updateservice
    3004 scanningprocess
    6744 umservice
    1424 hostcontrollerservice
    828 svchost
    432 csrss
    696 svchost
    1284 spoolsv
    8152 w3wp
    3576 w3wp
    1264 svchost
    496 csrss
    5928 Microsoft.Exchange.RpcClientAccess.Service
    2972 noderunner
    2380 conhost
    604 lsass
    6884 Microsoft.Exchange.Store.Worker
    10056 WmiPrvSE
    992 svchost
    2764 noderunner
    5324 msexchangerepl
    4 System
    3548 Microsoft.Exchange.AntispamUpdateSvc
    2168 svchost
    0 Idle
    Performance Counters Layout information: A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=59 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : queue(B351294)
    RefCount=0 SpinLock=0 Offset=48552, categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : cat event 8(ED0419E7) RefCount=0 SpinLock=0 Offset=44384,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : cat event 6(ED0419E9) RefCount=0 SpinLock=0 Offset=40216,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=4 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : cat event 3(ED0419EC) RefCount=0 SpinLock=0 Offset=36048,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=3 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : cat event 1(ED0419EE) RefCount=0 SpinLock=0 Offset=31880,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=18 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : cat(B874BB3) RefCount=0 SpinLock=0 Offset=27712,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : inqueue(56145953) RefCount=0 SpinLock=0 Offset=23544,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=17 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : smtpin(81392C98) RefCount=0 SpinLock=0 Offset=19376,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 10416, counter : datarow seeks total Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10416 StartupTime: 130186952059962770, currentInstance : mail(7C6FB7CC) RefCount=1 SpinLock=0 Offset=15208,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 10416, counter : datarow seeks total Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10416 StartupTime: 130186952059962770, currentInstance : other(ADC98A1) RefCount=1 SpinLock=0 Offset=11040,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 4832, counter : datarow seeks total Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4832 StartupTime: 130183498009738545, currentInstance : _total(CFBEE918) RefCount=1 SpinLock=0 Offset=32,
    categoryName: MSExchangeTransport Database
    Then ESE  Recovery starts on the Transport database. 
    /Andreas

  • "The Microsoft Exchange Diagnostics service terminated unexpectedly"

    Hi all, this happens about twice per hour and started some days ago, no reconfigs etc that should make it do that as far as I can find. Have been running CU6 for some months without this happening until recently.
    Also getting AppEventID 1007:
    Failed to create or start performance logs with error: System.ArgumentException: Value does not fall within the expected range.
       at PlaLibrary.DataCollectorSetClass.start(Boolean Synchronous)
       at Microsoft.Exchange.Diagnostics.PerformanceLogger.PerformanceLogSet.StartLog(Boolean synchronous)
       at Microsoft.Exchange.Diagnostics.PerformanceLogger.PerformanceLogMonitor.CheckPerflogStatus(). Performance log: ExchangeDiagnosticsPerformanceLog.
    Found this article
    http://blogs.technet.com/b/anya/archive/2014/11/25/microsoft-exchange-diagnostics-service-crashing-post-cu6-upgrade.aspx, but I do not actually understand what the "fix" really is here, many steps are made for Diagnostics buth which
    of those are necessary to take? And I'm not so into exporting/importing those XMLs.. I have only one E2013-server also.
    Hope someone can clarify this. I was thinking of installing CU7 if that might fix it, but I'm not sure if I dare in danger of running into trouble with things not working as they should.
    Thanks,
    -Ray.

    Hi,
    Based on the description of that article, the root issue was due to upgrade. While upgrading to Exchange 2013 CU6, the upgrade did some modifications in the registry hives the ExchangeDiagnosticsDailyPerformanceLog got missing from Task Scheduler, performance
    monitor and was also missing from the location C:\Windows\System32\Tasks\Microsoft\Windows\PLA
    Afterwards he did many troubleshooting steps to this issue.
    Actually we don’t need to export/import templates key to XML file. We can just delete both ExchangeDiagnosticsDailyPerformanceLog and ExchangeDiagnosticsPerformanceLog entries from the above registry location and then reboot server. After rebooting server,
    the new default ExchangeDiagnosticsDailyPerformanceLog will be recreated automatically in the task scheduler and performance monitor.
    Here are my suggested steps for ference:
    Ensure that the templates key are present under
    HKLM\Software\Microsoft\PLA\Templates
    Locate to
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\PLA\ExchangeDiagnosticsDailyPerformanceLog and delete ExchangeDiagnosticsDailyPerformanceLog and ExchangeDiagnosticsPerformanceLog entries.
    Reboot server and go to registry to check if that two entries have been recreated.
    Check if default ExchangeDiagnosticsDailyPerformanceLog was recreated in task scheduler and performance monitor.
    If this issue persists, please let me know.
    Best Regards.

  • Exchange 2013 - The Microsoft Exchange Transport service is rejecting message submissions because the service continues to consume more memory than the configured threshold

    Noticed at about noon that no emails had been received all day. Began to investigate and found that the MS Exchange Transport service had been set to deny email submission because it was using too much memory on the server (91%). 
    The error message makes me think that we may have been getting used by malware or something similar.“The Microsoft Exchange Transport service is rejecting message submissions because the service continues to consume more memory than the
    configured threshold.” 
    There are also several warning messages that list particular IP addresses and say that a connection from that IP was denied because there were already the maximum number of connections (20). 
    From what I can tell, all of the IP addresses are from Taiwan. 
    The time period for which some emails may be missing is from close of business yesterday ( 4/3/2014) through about 12:45 today (4/4/2014). 
    From the time I spent reading and trying to figure out the error, I think we may need to readjust our throttling policies to prevent this from happening. 
    The exchange server is currently running at 90%+ CPU and 50%+ memory usage the majority of the time, and I’m not sure how to fix it.
    Also, I cannot get into EMS I get a access denied message from the destination computer. (Exchange server) I want to get into there to change the throttling policy back to default, since we disabled it.
    The Error reads:
    The WinRM client cannot process the request. The WinRM client tried to use Kerberos authentication mechanism, but the destination computer <Exchange> returned an 'access denied' error. Change the configuration to allow Kerberos authentication
    mechanism to be used or specify one of the authentication mechanism supported by the server. (How do I do this?) To use Kerberos, specify the local computer name as the remote destination. (I'm trying to use EMS while logged into the local Exchange server)
    Also verify that the client computer and the destination computer are joined to a domain. (Exchange is on our domain, and the computer trying to connect is the same computer) To use basic, specify the local computer name as the remote destination, specify
    Basic authentication and provide user mane and password. Possible authentication mechanisms reported by server.
    At line:1 char:1
    + New-PSSession -ConnectionURI "$connectionUri" -ConfigurationName Microsoft.Excha ...
    + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : OpenError: (System.Manageme....RemoteRunspace:RemoteRunspace) [New-PSSession], PSRemotingTransportException + FullyQualifiedErrorId : AccessDenied,PSSessionOpenFailed
    I assumed control of this exchange system already in place and I do not have much experience with exchange 2013 or server 2012. I do know 2008, but that doesn't help very much in this situation.
    Recent changes to the system:
    About three days ago we switch our sessions policy to allow many more connections, and I believe this caused the issue. This is what I changed it to:
    Made the registry DWORD (32-bit) "Maximum Allowed Sessions Per User" and modified the value to 1000. Location of registry change @ HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSExchangeIS\ParametersSystem
    I just changed it to 10 from the 1000. I'm hoping this solves this. So far no.
    Also, I am not the best in the shell or command line interfaces. Any help would be wonderful!

    Hi,
    Yes, could be hardware performance issue. Try recycle the Transport process and see if the issue persists.
    Thanks,
    Simon Wu
    TechNet Community Support

  • Microsoft Exchange Transport Service has been stopped.

    I changed out failing drives on a customers SBS 2011 which uses Intel Rapid Storage Technology. I saw that it had an option to email a failing condition to up to three addresses. I configured it but got the Could Not Connect error from the RST software.
    I Googled the condition and determined that I needed to install another Receive Connector on a different port, which is what I tried.
    I opened all of the receive connectors in the MS Exchange Console - Server Configuration - Hub Transport section. As far as I know I did not change anything there, I just looked and cancelled. None of the new receive connectors I configured worked., Everytime
    one configuration made no difference I deleted the connector, re added a connector using different options and tried the RST email test again.
    Getting nowhere, I deleted the last new connector I configured, Closed the Exchange management console figuring I had a job for some time in the future when things were slow.
    This morning I get the call No e-mail, and found the Exchange Transport Service stopped. I restarted it, made sure it was set to automatic, and it ran for about 3 minutes and then stopped. Right now I am keeping my customer working by starting the service
    every 5 to 10 minutes.
    Since I am not going to stay here indefinitely restarting the service, I need help!
    J R Weymouth

    Thanks for the links, I'll check them out. I finally got an error from the logs, in fact there are so many errors in the log I don't even know which one to follow. It gets a cluster of errors every 5 minutes (6 errors one critical) but that is when the transport
    is shut down. I am relaying the first message that comes up after I restart the transport.
    Log Name:      Application
    Source:       
    MSExchangeTransport
    Date:         
    9/16/2014 9:11:48 AM
    Event ID:      17003
    Task Category: Storage
    Level:        
    Error
    Keywords:      Classic
    User:         
    N/A
    Computer:      SBSSRVR2011.MyDomain.local
    Description:
    Sender Reputation Database: An operation has encountered a fatal error. The database may be corrupted. The Microsoft Exchange Transport service is shutting down. Manual database recovery or repair may be required. Exception details: Microsoft.Exchange.Isam.IsamDbTimeCorruptedException:
    Dbtime on current page is greater than global database dbtime (-344)
       at Microsoft.Exchange.Isam.JetInterop.MJetDelete(MJET_TABLEID tableid)
       at Microsoft.Exchange.Isam.Interop.MJetDelete(MJET_TABLEID tableid)
       at Microsoft.Exchange.Transport.Storage.DataTableCursor.DeleteCurrentRow()
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="MSExchangeTransport" />
        <EventID Qualifiers="49156">17003</EventID>
        <Level>2</Level>
        <Task>17</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2014-09-16T16:11:48.000000000Z" />
        <EventRecordID>1141638</EventRecordID>
        <Channel>Application</Channel>
        <Computer>SBSSRVR2011.BainInsuranceAgency.local</Computer>
        <Security />
      </System>
      <EventData>
        <Data>Sender Reputation Database</Data>
        <Data>Microsoft.Exchange.Isam.IsamDbTimeCorruptedException: Dbtime on current page is greater than global database dbtime (-344)
       at Microsoft.Exchange.Isam.JetInterop.MJetDelete(MJET_TABLEID tableid)
       at Microsoft.Exchange.Isam.Interop.MJetDelete(MJET_TABLEID tableid)
       at Microsoft.Exchange.Transport.Storage.DataTableCursor.DeleteCurrentRow()</Data>
      </EventData>
    </Event>
    J R Weymouth

  • Microsoft Exchange Transport Service....Starting (Does not reach a running state, stops and tries starting again)

    Hi All,
    After installing the lovely update (https://technet.microsoft.com/library/security/ms14-068) that Microsoft released last week. I restarted my exchange 2013 server and now the Microsoft Exchange Transport Service will not start. It is pretty much constantly
    in a starting state. Tried all the standard stuff, restarting the server etc.
    Running on Server 2012 R2
    Hopefully someone can shed some light.
    Pete

    Hi,
    A few questions here :
    - Have you installed all roles on the same server ? ( MultiRole server )
    - If yes, do use the preconfigured receive connectors from Exchange or did you add custom connectors ?
    - Do you have any anti-spam service installed on the server that could be listening on port 25 ?

  • SBS2011 - microsoft exchange transport service not installed

    i have been having issues with SMTP and now with some changes advised I have lost the MS exchange Transport service all together - it is not listed under services!
    how to I re-install just the transport service - and more - where did it go???
    KArl

    Hi:
    Can't really tell from here what happened, but please review this article and let us know if it helps:
    http://technet.microsoft.com/en-us/library/gg680345.aspx
    Larry Struckmeyer[MVP] If your question is answered please mark the response as the answer so that others can benefit.

  • Microsoft Exchange Replication Service keep stopping

    Not sure what is going on here. The replication service keep stopping on one of my servers within the DAG. I cant think of anything different about this server compared to others (anything known at least). This server sits at our DR facility and is the host
    of the 3rd copy to a few of our databases, which primary and secondary ones live at our HQ. The application log reports this every 5-10 seconds
    Watson report about to be sent for process id: 31860, with parameters: E12IIS, c-RTL-AMD64, 15.00.0995.029, msexchangerepl, M.Exchange.Common, M.E.C.H.DatabaseFailureItem.Parse, System.ArgumentOutOfRangeException, fe19, 15.00.0995.012.
    ErrorReportingEnabled: False 
    The system log reports this every 5-10 seconds also:
    The Microsoft Exchange Replication service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 5000 milliseconds: Restart the service.
    I have ran windows update, and it seems that every time I reboot the machine, the shutdown tracker comes up. I think it has something to do with hardware, but no idea where to look next. 

    Hi,
    This issue occurred because Microsoft Exchange Replication Services Was Unable to Write In "Microsoft-Exchange-MailboxDatabaseFailureItems/Operational"
    The fix for the issue will be available in next cumulative update. Meanwhile, please follow the steps below for a workaround to resolve the issue. This workaround is to clear the entries log storing mailbox database failure items.
    On problem server, open command prompt in administrator privileges.
    Run following command to clear the even entries from the log
    Wevtutil.exe cl "Microsoft-Exchange-MailboxDatabaseFailureItems/Operational"
    Best Regards.

  • Exchange Transport Service not starting

    Hello All:
    I have installed exchange server 2007 in my Windows Server 2008 domain.I have noticed that when I open up the services tab on my server and check the services which are running that the Information Store and Transport services are set to start automatically. However, they are not running. When I tell it to start the Information Store that service will start. When I tell it to start the Microsoft Exchange Transport  service, I get the following message:
    The Microsoft Exchange Transport Service on Local Computer started and then stopped. Some services stop automatically if they are not in use by other services or programs. I know that this service must be running in order for me to send and receive mail. Can someone tell me how to troubleshoot and correct this problem. Thanks in advance for any and all responses to this question.
    When I look in the event logs I see the following:Log Name:      Application
    Source:        MSExchange TransportService
    Date:          1/31/2009 10:43:05 AM
    Event ID:      1016
    Task Category: ProcessManager
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      AESTONE.stone-and-stone.com
    Description:
    The worker process crashes continuously on startup: C:\Program Files\Microsoft\Exchange Server\Bin\edgetransport.exe. The service will be stopped.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="MSExchange TransportService" />
        <EventID Qualifiers="49156">1016</EventID>
        <Level>2</Level>
        <Task>1</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2009-01-31T15:43:05.000Z" />
        <EventRecordID>478666</EventRecordID>
        <Channel>Application</Channel>
        <Computer>AESTONE.stone-and-stone.com</Computer>
        <Security />
      </System>
      <EventData>
        <Data>C:\Program Files\Microsoft\Exchange Server\Bin\edgetransport.exe</Data>
      </EventData>
    </Event>
    Any suggestions anyone?

     
    Dear customer:
    Did you upgrade a computer that is running Windows Server 2003 to Windows Server 2008?
    If so, please refer to the following article to fix the issue:
    Multiple Exchange Server 2007 services do not start when you upgrade a computer that is also running Windows Server 2003 to Windows Server 2008
    http://support.microsoft.com/default.aspx?scid=kb;EN-US;951402
    Also, check Exchange2007 Setup log file, if the error resemble the following words:
    2/3/2007 1:07:16 AM] [2] [ERROR] Service 'MSExchangeTransport' failed to start.
    Check the event log for possible reasons for the service start failure.
    [2/3/2007 1:07:16 AM] [2] Ending processing.
    [2/3/2007 1:07:16 AM] [1] The following 1 error(s) occurred during task
    execution:
    [2/3/2007 1:07:16 AM] [1] 0. ErrorRecord: Service 'MSExchangeTransport' failed to
    start. Check the event log for possible reasons for the service start failure.
    [2/3/2007 1:07:16 AM] [1] 0. ErrorRecord:
    Microsoft.Exchange.Configuration.Tasks.ServiceFailedToStartException: Service
    'MSExchangeTransport' failed to start. Check the event log for possible reasons for
    the service start failure.
    [2/3/2007 1:07:16 AM] [1] [ERROR] Service 'MSExchangeTransport' failed to start.
    Check the event log for possible reasons for the service start failure.
    [2/3/2007 1:07:16 AM] [1] Setup is halting task execution because of one or more
    errors in a critical task.
    [2/3/2007 1:07:16 AM] [1] Finished executing component tasks.
    [2/3/2007 1:07:16 AM] [1] Ending processing.
    Perform the following steps to fix the issue:
    1.         Open Registry on Exchange 2007 box.
    2.         Navigate to the following registry key:
    HKLM\SYSTEM\ControlSet001\Services\Tcpip\Parameters
    3.         Right click Parameters,choose permissions,add explicitly the machine account Domainname\Exchange$ (Where Exchange is hostname for Exchange 2007 box) to the
    Access control list by giving read access to it.(Exchange must be able to read this key to find the FQDN of the server so that the SPN can be registered).
    4.         Check the effect.
    Rock Wang - MSFT

  • Information Store service terminated unexpectedly, event id 7031

    We have Exchange 2010 (coexistence with 2003) running SP3 and a DAG with two members. It now happens occasionally that suddenly all mailstores are running on mailbox server. I had them balanced (manually) on one, so I examined the event viewer. There I saw
    The Microsoft Exchange Information Store service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 5000 milliseconds: Restart the service.
    EVENT ID 7031
    A few seconds later it is started again. But since several mailstores are running on it, it takes some time before all stores are mounted again and so users complain that Outlook disconnects. The time it is down, is too short for the DAG to switch over to
    the replica, so we have a real downtime here.
    Is this a known issue and what can we do for this? I really need to fix this ASAP as you can understand, since we have like 1500 users already now on this environment. I saw this fix:
    http://support.microsoft.com/default.aspx?kbid=2803727
    In there also two issues with information store being stopped are reported here. 
    Thanks for all your help!

    Thanks Gulab,
    No, no major change. We are only moving mailboxes now from the old 2003 to the new 2010 server. I have seen that this happened for a long time already, but probably never during working hours. There is no actual trend. Today it happened once. Yesterday it
    happened like 5 times. other days, just once a day, a few times never.
    We are running TM Scanmail.
    Here the full details
    System
    Provider
    [ Name]
    Service Control Manager
    [ Guid]
    {555908d1-a6d7-4695-8e1e-26931d2012f4}
    [ EventSourceName]
    Service Control Manager
    EventID
    7031
    [ Qualifiers]
    49152
    Version
    0
    Level
    2
    Task
    0
    Opcode
    0
    Keywords
    0x8080000000000000
    TimeCreated
    [ SystemTime]
    2014-01-14T09:16:32.732892000Z
    EventRecordID
    90280
    Correlation
    Execution
    [ ProcessID]
    672
    [ ThreadID]
    6532
    Channel
    System
    Computer
    xxx162.eu.ykgw.net
    Security
    EventData
    param1
    Microsoft Exchange Information Store
    param2
    1
    param3
    5000
    param4
    1
    param5
    Restart the service
    4D005300450078006300680061006E0067006500490053000000

  • Active Directory Web Services service terminated unexpectedly

    Hi everyone:
    I'm having a problem with the Active Directory Web Services service does not start. Attach the event ID:
    Log System:
    Log Name: System
    Source: Service Control Manager
    Date: 1/6/2015 6:55:19 PM
    Event ID: 7034
    Task Category: None
    Level: Error
    Keywords: Classic
    User: N/A
    Computer: xxx.dominio.com
    Description:
    The Active Directory Web Services service terminated unexpectedly. It has done this 35 time(s).
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7034</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2015-01-06T22:55:19.292471600Z" />
    <EventRecordID>32583</EventRecordID>
    <Correlation />
    <Execution ProcessID="556" ThreadID="1388" />
    <Channel>System</Channel>
    <Computer>xxx.dominio.com</Computer>
    <Security />
    </System>
    <EventData>
    <Data Name="param1">Active Directory Web Services</Data>
    <Data Name="param2">35</Data>
    <Binary>41004400570053000000</Binary>
    </EventData>
    </Event>
    Log Application:
    Log Name: Application
    Source: .NET Runtime
    Date: 1/6/2015 6:55:13 PM
    Event ID: 1026
    Task Category: None
    Level: Error
    Keywords: Classic
    User: N/A
    Computer: xxx.dominio.com
    Description:
    Application: Microsoft.ActiveDirectory.WebServices.exe
    Framework Version: v4.0.30319
    Description: The process was terminated due to an unhandled exception.
    Exception Info: System.ServiceModel.CommunicationObjectFaultedException
    Stack:
    at System.ServiceModel.Channels.CommunicationObject.Close(System.TimeSpan)
    at Microsoft.ActiveDirectory.WebServices.WindowsHostService.StartService(System.Object)
    at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
    at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
    at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
    at System.Threading.ThreadHelper.ThreadStart(System.Object)
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    <System>
    <Provider Name=".NET Runtime" />
    <EventID Qualifiers="0">1026</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2015-01-06T22:55:13.000000000Z" />
    <EventRecordID>1661713</EventRecordID>
    <Channel>Application</Channel>
    <Computer>xxx.dominio.com</Computer>
    <Security />
    </System>
    <EventData>
    <Data>Application: Microsoft.ActiveDirectory.WebServices.exe
    Framework Version: v4.0.30319
    Description: The process was terminated due to an unhandled exception.
    Exception Info: System.ServiceModel.CommunicationObjectFaultedException
    Stack:
    at System.ServiceModel.Channels.CommunicationObject.Close(System.TimeSpan)
    at Microsoft.ActiveDirectory.WebServices.WindowsHostService.StartService(System.Object)
    at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
    at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
    at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
    at System.Threading.ThreadHelper.ThreadStart(System.Object)
    </Data>
    </EventData>
    </Event>
    And
    Log Name: Application
    Source: Application Error
    Date: 1/6/2015 6:55:13 PM
    Event ID: 1000
    Task Category: (100)
    Level: Error
    Keywords: Classic
    User: N/A
    Computer: xxx.dominio.com
    Description:
    Faulting application name: Microsoft.ActiveDirectory.WebServices.exe, version: 6.2.9200.16579, time stamp: 0x516356a2
    Faulting module name: KERNELBASE.dll, version: 6.2.9200.16864, time stamp: 0x531d34d8
    Exception code: 0xe0434352
    Fault offset: 0x0000000000047b8c
    Faulting process id: 0x4ac
    Faulting application start time: 0x01d02a03d45e2d00
    Faulting application path: C:\Windows\ADWS\Microsoft.ActiveDirectory.WebServices.exe
    Faulting module path: C:\Windows\system32\KERNELBASE.dll
    Report Id: 1273a0f1-95f7-11e4-93f7-3440b59e2092
    Faulting package full name:
    Faulting package-relative application ID:
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Level>2</Level>
    <Task>100</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2015-01-06T22:55:13.000000000Z" />
    <EventRecordID>1661714</EventRecordID>
    <Channel>Application</Channel>
    <Computer>xxx.dominio.com</Computer>
    <Security />
    </System>
    <EventData>
    <Data>Microsoft.ActiveDirectory.WebServices.exe</Data>
    <Data>6.2.9200.16579</Data>
    <Data>516356a2</Data>
    <Data>KERNELBASE.dll</Data>
    <Data>6.2.9200.16864</Data>
    <Data>531d34d8</Data>
    <Data>e0434352</Data>
    <Data>0000000000047b8c</Data>
    <Data>4ac</Data>
    <Data>01d02a03d45e2d00</Data>
    <Data>C:\Windows\ADWS\Microsoft.ActiveDirectory.WebServices.exe</Data>
    <Data>C:\Windows\system32\KERNELBASE.dll</Data>
    <Data>1273a0f1-95f7-11e4-93f7-3440b59e2092</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    </EventData>
    </Event>
    I was working about this solution but nothing. "http://blogs.microsoft.co.il/yuval14/2012/06/08/how-to-resolve-error-message-the-active-directory-web-services-service-terminated-unexpectedly-event-id-4079-andor-7034/".
    I changed the Microsoft.ActiveDirectory.WebServices.exe.config file, add two line " <add key=”DebugLevel” value=”Info” />
    <add key=”DebugLogFile” value=”c:windowsdebugadws.log” />", Attach the log
    ADWS Log - AppDomain Microsoft.ActiveDirectory.WebServices.exe with ID 1 - 01/06/2015 17:51:37 ((UTC-04:00) Georgetown, La Paz, Manaus, San Juan)
    OS Version Microsoft Windows NT 6.2.9200.0 - CLR Version 4.0.30319.18449
    ADWS: [1/6/2015 5:51:37 PM] [1] Main: entered
    Utils: [1/6/2015 5:51:37 PM] [1] RemovePriviledgeFromProcess: trying to remove priviledge SeBackupPrivilege
    Utils: [1/6/2015 5:51:37 PM] [1] RemovePriviledgeFromProcess: unable to remove SeBackupPrivilege priviledge because it was absent
    Utils: [1/6/2015 5:51:37 PM] [1] RemovePriviledgeFromProcess: trying to remove priviledge SeRestorePrivilege
    Utils: [1/6/2015 5:51:37 PM] [1] RemovePriviledgeFromProcess: unable to remove SeRestorePrivilege priviledge because it was absent
    Utils: [1/6/2015 5:51:37 PM] [1] RemovePriviledgeFromProcess: trying to remove priviledge SeAssignPrimaryTokenPrivilege
    Utils: [1/6/2015 5:51:37 PM] [1] RemovePriviledgeFromProcess: unable to remove SeAssignPrimaryTokenPrivilege priviledge because it was absent
    Utils: [1/6/2015 5:51:37 PM] [1] RemovePriviledgeFromProcess: trying to remove priviledge SeIncreaseQuotaPrivilege
    Utils: [1/6/2015 5:51:37 PM] [1] RemovePriviledgeFromProcess: unable to remove SeIncreaseQuotaPrivilege priviledge because it was absent
    Utils: [1/6/2015 5:51:37 PM] [1] RemovePriviledgeFromProcess: trying to remove priviledge SeDebugPrivilege
    Utils: [1/6/2015 5:51:37 PM] [1] RemovePriviledgeFromProcess: unable to remove SeDebugPrivilege priviledge because it was absent
    Utils: [1/6/2015 5:51:37 PM] [1] RemovePriviledgeFromProcess: trying to remove priviledge SeTcbPrivilege
    Utils: [1/6/2015 5:51:37 PM] [1] RemovePriviledgeFromProcess: unable to remove SeTcbPrivilege priviledge because it was absent
    Utils: [1/6/2015 5:51:37 PM] [1] RemovePriviledgeFromProcess: trying to remove priviledge SeShutdownPrivilege
    Utils: [1/6/2015 5:51:37 PM] [1] RemovePriviledgeFromProcess: unable to remove SeShutdownPrivilege priviledge because it was absent
    Utils: [1/6/2015 5:51:37 PM] [1] RemoveUnnecessaryPriviledges: all present unnecessary priviledges removed successfully
    Program: [1/6/2015 5:51:37 PM] [1] Main: Starting Windows service host.
    WindowsHostService: [1/6/2015 5:51:37 PM] [1] WindowsHostService constructed
    WindowsHostService: [1/6/2015 5:51:37 PM] [4] OnStart: entering.
    WindowsHostService: [1/6/2015 5:51:37 PM] [4] OnStart: ServiceStart thread started.
    WindowsHostService: [1/6/2015 5:51:37 PM] [6] StartService: entering.
    PerfCounters: [1/6/2015 5:51:37 PM] [6] InstallCountersIfNeeded: entered
    PerfCounters: [1/6/2015 5:51:37 PM] [6] AreCountersInstalled: entered
    PerfCounters: [1/6/2015 5:51:37 PM] [6] AreCountersInstalled: System\CurrentControlSet\Services\ADWS key is present
    PerfCounters: [1/6/2015 5:51:37 PM] [6] AreCountersInstalled: System\CurrentControlSet\Services\ADWS\Performance key is present
    PerfCounters: [1/6/2015 5:51:37 PM] [6] AreCountersInstalled: First Counter value is present
    PerfCounters: [1/6/2015 5:51:37 PM] [6] AreCountersInstalled: perf counters are installed
    PerfCounters: [1/6/2015 5:51:37 PM] [6] AreCountersCurrent: installed perf counter version: 6
    PerfCounters: [1/6/2015 5:51:37 PM] [6] AreCountersCurrent: desired perf counter version: 6
    PerfCounters: [1/6/2015 5:51:37 PM] [6] AreCountersCurrent: perf counter category ADWS is current
    PerfCounters: [1/6/2015 5:51:37 PM] [6] InstallCountersIfNeeded: counters already installed and current, no work needed
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Create Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Delete Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Get Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Put Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Enumerate Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Pull Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Open Enumeration Contexts' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'GetADGroupMember Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'GetADPrincipalGroupMembership Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'SetPassword Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'ChangePassword Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'GetADPrincipalAuthorizationGroup Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'TranslateName Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'GetADDomainController Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'GetADDomain Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'MoveADOperationMasterRole Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'GetADForest Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'ChangeOptionalFeature Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'GetVersion Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Number of Directory Instances' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Possible Connections' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Allocated Connections' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Reserved Connections' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Non-reserved Connections In Use' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Reserved Connections In Use' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Open Web Service Sessions' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Active Web Service Sessions' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Web Service Sessions Created Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Custom Action LDAP Cache Maximum Possible Size' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Custom Action LDAP Cache Connection Creation Rate' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Custom Action LDAP Cache Connection Reuse Rate' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Custom Action DS RPC Cache Maximum Possible Size' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Custom Action DS RPC Cache Connection Creation Rate' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Custom Action DS RPC Cache Connection Reuse Rate' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Custom Action Cache Size' performance counter
    PerfCounters: [1/6/2015 5:51:37 PM] [6] Initialize: initializing performance counters
    PerfCounters: [1/6/2015 5:51:37 PM] [6] Initialize: all performance counters initialized
    ADWSHost: [1/6/2015 5:51:37 PM] [6] ADWSHost constructed
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] ProvisionCertificate: using host name for certificate name
    Utils: [1/6/2015 5:51:37 PM] [6] GetComputerDnsName: computer name is xxx.dominio.com
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] ProvisionCertificate: using cert name xxx.dominio.com
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] ProvisionCertificate: loaded certificate
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] AddServiceThrottlingBehavior: MaxConcurrentCalls=32, MaxConcurrentSessions=500
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateServiceHost: including UserName endpoints
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateServiceHost: adding endpoints for Windows/
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportBinding: MaxReceivedMessageSize=1048576, ReceiveTimeout=00:10:00
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportBinding: MaxDepth=10, MaxArrayLength=16384, MaxStringContentLength=32768
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportBinding: MaxReceivedMessageSize=1048576, ReceiveTimeout=00:10:00
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportBinding: MaxDepth=10, MaxArrayLength=16384, MaxStringContentLength=32768
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportBinding: MaxReceivedMessageSize=1048576, ReceiveTimeout=00:10:00
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportBinding: MaxDepth=10, MaxArrayLength=16384, MaxStringContentLength=32768
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportBinding: MaxReceivedMessageSize=1048576, ReceiveTimeout=00:10:00
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportBinding: MaxDepth=10, MaxArrayLength=16384, MaxStringContentLength=32768
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportBinding: MaxReceivedMessageSize=1048576, ReceiveTimeout=00:10:00
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportBinding: MaxDepth=10, MaxArrayLength=16384, MaxStringContentLength=32768
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateServiceHost: adding endpoints for UserName/
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportWithMessageCredentialBinding: MaxReceivedMessageSize=1048576, ReceiveTimeout=00:10:00
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportWithMessageCredentialBinding: MaxDepth=10, MaxArrayLength=16384, MaxStringContentLength=32768
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportWithMessageCredentialBinding: MaxReceivedMessageSize=1048576, ReceiveTimeout=00:10:00
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportWithMessageCredentialBinding: MaxDepth=10, MaxArrayLength=16384, MaxStringContentLength=32768
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportWithMessageCredentialBinding: MaxReceivedMessageSize=1048576, ReceiveTimeout=00:10:00
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportWithMessageCredentialBinding: MaxDepth=10, MaxArrayLength=16384, MaxStringContentLength=32768
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportWithMessageCredentialBinding: MaxReceivedMessageSize=1048576, ReceiveTimeout=00:10:00
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportWithMessageCredentialBinding: MaxDepth=10, MaxArrayLength=16384, MaxStringContentLength=32768
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportWithMessageCredentialBinding: MaxReceivedMessageSize=1048576, ReceiveTimeout=00:10:00
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportWithMessageCredentialBinding: MaxDepth=10, MaxArrayLength=16384, MaxStringContentLength=32768
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] StartConfigurationLoading: entered
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] StartConfigurationLoading: establishing watcher on C:\Windows\ADWS\Microsoft.ActiveDirectory.WebServices.exe.Config
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: entered
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: no value specified for InitialPoolConnections, using default value 5
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: using loaded value 10 for MaxPoolConnections
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: using loaded value 50 for MaxPercentageReservedConnections
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: no value specified for MaxReservedIdleTimeout, using default value 00:02:00
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: no value specified for MaxReservedTimeout, using default value 00:30:00
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: using loaded value 5 for MaxConnectionsPerUser
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: no value specified for MaxBindLifetime, using default value 00:15:00
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: no value specified for MaxServerDownRetry, using default value 10
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: no value specified for SyntaxCacheEntryLifetime, using default value 01:00:00
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: using loaded value 00:30:00 for MaxEnumContextExpiration
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: using loaded value 00:02:00 for OperationTimeout
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: using loaded value 00:02:00 for MaxPullTimeout
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: using loaded value 5 for MaxEnumCtxsPerSession
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: using loaded value 100 for MaxEnumCtxsTotal
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: no value specified for CertName, using default value NULL
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: no value specified for MaxGroupOrMemberEntries, using default value 5000
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: no value specified for CustomActionConnectionCount, using default value 10
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: no value specified for CustomActionIdleConnectionTimeout, using default value 00:02:00
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: no value specified for InstanceRediscoveryInterval, using default value 00:01:00
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: using loaded value 32 for MaxConcurrentCalls
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: using loaded value 500 for MaxConcurrentSessions
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: using loaded value Info for DebugLevel
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: using loaded value C:\temp\windowsdebugadws.log for DebugLogFile
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] ValidateSettingLimits: entered
    ClassManager: [1/6/2015 5:51:37 PM] [6] Start: starting...
    LdapSessionPoolImplementation: [1/6/2015 5:51:37 PM] [3] ScavengerThread: thread starting
    LdapSessionPoolImplementation: [1/6/2015 5:51:37 PM] [3] Scavenger: waking up at 00:00:40 interval
    EnumerationContextCache: [1/6/2015 5:51:37 PM] [6] EnumerationContextCache: using timer inverval 00:00:30
    InstanceMap: [1/6/2015 5:51:37 PM] [6] InstanceMap: using timer inverval 00:01:00
    InstanceMap: [1/6/2015 5:51:37 PM] [6] CheckAndLoadAll: beginning
    InstanceMap: [1/6/2015 5:51:37 PM] [6] CheckAndLoadNTDSInstance: entered
    InstanceMap: [1/6/2015 5:51:37 PM] [6] CheckAndLoadNTDSInstance: found NTDS Parameters key
    InstanceMap: [1/6/2015 5:51:37 PM] [6] CheckAndLoadNTDSInstance: trying to change state to DC
    InstanceMap: [1/6/2015 5:51:37 PM] [6] AddRemoveSessionPoolAndDictionaryEntry: trying to change state for identifier ldap:389
    InstanceMap: [1/6/2015 5:51:37 PM] [6] AddSessionPool: adding a session pool for NTDS
    DirectoryDataAccessImplementation: [1/6/2015 5:51:37 PM] [6] InitializeInstance: entering, instance=NTDS, init=5, max=10
    LdapSessionPoolImplementation: [1/6/2015 5:51:37 PM] [6] InitializeInstance: entering, instance=NTDS, init=5, max=10
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] ConnectionPool: trying to add connection 0
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: entering, instance=NTDS
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] ConnectionPoolEntry: connection created
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: grew pool, instance=NTDS, new count=1, max=10
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] ConnectionPool: trying to add connection 1
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: entering, instance=NTDS
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] ConnectionPoolEntry: connection created
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: grew pool, instance=NTDS, new count=2, max=10
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] ConnectionPool: trying to add connection 2
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: entering, instance=NTDS
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] ConnectionPoolEntry: connection created
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: grew pool, instance=NTDS, new count=3, max=10
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] ConnectionPool: trying to add connection 3
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: entering, instance=NTDS
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] ConnectionPoolEntry: connection created
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: grew pool, instance=NTDS, new count=4, max=10
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] ConnectionPool: trying to add connection 4
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: entering, instance=NTDS
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] ConnectionPoolEntry: connection created
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: grew pool, instance=NTDS, new count=5, max=10
    InstanceMap: [1/6/2015 5:51:37 PM] [6] AddRemoveSessionPoolAndDictionaryEntry: state change successful (now hosts identifier ldap:389)
    InstanceMap: [1/6/2015 5:51:37 PM] [6] CheckAndLoadGCInstance: entered
    InstanceMap: [1/6/2015 5:51:37 PM] [6] CheckForGlobalCatalog: entered
    DirectoryUtilities: [1/6/2015 5:51:37 PM] [6] GetTimeRemaining: remaining time is 00:02:00
    InstanceMap: [1/6/2015 5:51:37 PM] [6] CheckForGlobalCatalog: isGlobalCatalogReady: TRUE
    InstanceMap: [1/6/2015 5:51:37 PM] [6] CheckForGlobalCatalog: NTDS Settings DN: CN=NTDS Settings,CN=XXX,CN=Servers,CN=Alpacoma,CN=Sites,CN=Configuration,DC=dominio,DC=com
    DirectoryUtilities: [1/6/2015 5:51:37 PM] [6] GetTimeRemaining: remaining time is 00:02:00
    InstanceMap: [1/6/2015 5:51:37 PM] [6] CheckForGlobalCatalog: options: 1
    InstanceMap: [1/6/2015 5:51:37 PM] [6] CheckAndLoadGCInstance: CheckForGlobalCatalog=True
    InstanceMap: [1/6/2015 5:51:37 PM] [6] CheckAndLoadGCInstance: trying to change state to Global Catalog
    InstanceMap: [1/6/2015 5:51:37 PM] [6] AddRemoveSessionPoolAndDictionaryEntry: trying to change state for identifier ldap:3268
    InstanceMap: [1/6/2015 5:51:37 PM] [6] AddSessionPool: adding a session pool for GC
    DirectoryDataAccessImplementation: [1/6/2015 5:51:37 PM] [6] InitializeInstance: entering, instance=GC, init=5, max=10
    LdapSessionPoolImplementation: [1/6/2015 5:51:37 PM] [6] InitializeInstance: entering, instance=GC, init=5, max=10
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] ConnectionPool: trying to add connection 0
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: entering, instance=GC
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] ConnectionPoolEntry: connection created
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: grew pool, instance=GC, new count=1, max=10
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] ConnectionPool: trying to add connection 1
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: entering, instance=GC
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] ConnectionPoolEntry: connection created
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: grew pool, instance=GC, new count=2, max=10
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] ConnectionPool: trying to add connection 2
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: entering, instance=GC
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] ConnectionPoolEntry: connection created
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: grew pool, instance=GC, new count=3, max=10
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] ConnectionPool: trying to add connection 3
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: entering, instance=GC
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] ConnectionPoolEntry: connection created
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: grew pool, instance=GC, new count=4, max=10
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] ConnectionPool: trying to add connection 4
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: entering, instance=GC
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] ConnectionPoolEntry: connection created
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: grew pool, instance=GC, new count=5, max=10
    InstanceMap: [1/6/2015 5:51:37 PM] [6] AddRemoveSessionPoolAndDictionaryEntry: state change successful (now hosts identifier ldap:3268)
    InstanceMap: [1/6/2015 5:51:37 PM] [6] CheckAndLoadADAMInstances: entered
    InstanceMap: [1/6/2015 5:51:37 PM] [6] CheckAndLoadAll: caught unexpected exception System.IO.IOException: No more data is available.
    at Microsoft.Win32.RegistryKey.Win32Error(Int32 errorCode, String str)
    at Microsoft.Win32.RegistryKey.InternalGetSubKeyNames()
    at Microsoft.ActiveDirectory.WebServices.InstanceMap.DiscoverInstancesFromRegistry(String regRootKey, String regKeyInstancePrefix, Boolean& instanceEncounteredErrorsOnThisRun, List`1 discoveredInstances, DirectoryType directoryType)
    at Microsoft.ActiveDirectory.WebServices.InstanceMap.CheckAndLoadADAMInstances()
    at Microsoft.ActiveDirectory.WebServices.InstanceMap.CheckAndLoadAll()
    ADWSHost: [1/6/2015 5:51:37 PM] [6] OnClosed: entered
    CustomActionCaches: [1/6/2015 5:51:37 PM] [6] StopCaches: disposing Custom Action connection caches
    ClassManager: [1/6/2015 5:51:37 PM] [6] Stop: closing down...
    EnumerationContextCache: [1/6/2015 5:51:37 PM] [6] Dispose: disposing...
    QuotaTracker: [1/6/2015 5:51:37 PM] [6] Clear: clearing all usage
    DirectoryActionImplementation: [1/6/2015 5:51:37 PM] [6] Dispose: disposing...
    DirectoryDataAccessImplementation: [1/6/2015 5:51:37 PM] [6] Dispose: disposing...
    LdapSessionPoolImplementation: [1/6/2015 5:51:37 PM] [6] Dispose: disposing...
    LdapSessionPoolImplementation: [1/6/2015 5:51:37 PM] [3] ScavengerThread: woke up
    LdapSessionPoolImplementation: [1/6/2015 5:51:37 PM] [3] ScavengerThread: received termination signal, exiting
    LdapSessionPoolImplementation: [1/6/2015 5:51:37 PM] [6] Dispose: disposing pool
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] Dispose: disposing (instance=NTDS)...
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] ProhibitConnectionAcquisition: entering, instance=NTDS
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] Dispose: disposing a ConnectionPoolEntry
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] Dispose: disposing...
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] Dispose: disposing a ConnectionPoolEntry
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] Dispose: disposing...
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] Dispose: disposing a ConnectionPoolEntry
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] Dispose: disposing...
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] Dispose: disposing a ConnectionPoolEntry
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] Dispose: disposing...
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] Dispose: disposing a ConnectionPoolEntry
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] Dispose: disposing...
    LdapSessionPoolImplementation: [1/6/2015 5:51:37 PM] [6] Dispose: disposing pool
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] Dispose: disposing (instance=GC)...
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] ProhibitConnectionAcquisition: entering, instance=GC
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] Dispose: disposing a ConnectionPoolEntry
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] Dispose: disposing...
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] Dispose: disposing a ConnectionPoolEntry
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] Dispose: disposing...
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] Dispose: disposing a ConnectionPoolEntry
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] Dispose: disposing...
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] Dispose: disposing a ConnectionPoolEntry
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] Dispose: disposing...
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] Dispose: disposing a ConnectionPoolEntry
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] Dispose: disposing...
    LdapSessionPoolImplementation: [1/6/2015 5:51:37 PM] [6] Dispose: disposing utility connection NTDS
    LdapSessionPoolImplementation: [1/6/2015 5:51:37 PM] [6] Dispose: disposing utility connection GC
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] StopConfigurationLoading: entered
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] Dispose: disposing
    Some Idea, Tks for your help.
    migrations

    Here a dump file when I try to start the service, I hope can you help me.
    Version=1
    EventType=CLR20r3
    EventTime=130652059133527283
    ReportType=2
    Consent=1
    ReportIdentifier=4368792e-974e-11e4-93f7-3440b59e2092
    IntegratorReportIdentifier=4368792d-974e-11e4-93f7-3440b59e2092
    NsAppName=Microsoft.ActiveDirectory.WebServices.exe
    Response.type=4
    Sig[0].Name=Problem Signature 01
    Sig[0].Value=V0KXCIQIJBOA2NW5DIQBFTEBV5SCPPFH
    Sig[1].Name=Problem Signature 02
    Sig[1].Value=6.2.9200.16579
    Sig[2].Name=Problem Signature 03
    Sig[2].Value=516356a2
    Sig[3].Name=Problem Signature 04
    Sig[3].Value=System.ServiceModel
    Sig[4].Name=Problem Signature 05
    Sig[4].Value=4.0.30319.34230
    Sig[5].Name=Problem Signature 06
    Sig[5].Value=53be5c02
    Sig[6].Name=Problem Signature 07
    Sig[6].Value=ca
    Sig[7].Name=Problem Signature 08
    Sig[7].Value=c4
    Sig[8].Name=Problem Signature 09
    Sig[8].Value=I0SHPZEWVQV4P1UJY40X15MQTHF34RR5
    DynamicSig[1].Name=OS Version
    DynamicSig[1].Value=6.2.9200.2.0.0.272.7
    DynamicSig[2].Name=Locale ID
    DynamicSig[2].Value=1033
    DynamicSig[22].Name=Additional Information 1
    DynamicSig[22].Value=5220
    DynamicSig[23].Name=Additional Information 2
    DynamicSig[23].Value=52200675db6baa97bf416b02ff886e01
    DynamicSig[24].Name=Additional Information 3
    DynamicSig[24].Value=0b14
    DynamicSig[25].Name=Additional Information 4
    DynamicSig[25].Value=0b146b7eb5ed6bd9871c898c60ee5051
    UI[2]=C:\Windows\ADWS\Microsoft.ActiveDirectory.WebServices.exe
    UI[5]=Check online for a solution (recommended)
    UI[6]=Check for a solution later (recommended)
    UI[7]=Close
    UI[8]=Microsoft.ActiveDirectory.WebServices stopped working and was closed
    UI[9]=A problem caused the application to stop working correctly. Windows will notify you if a solution is available.
    UI[10]=&Close
    LoadedModule[0]=C:\Windows\ADWS\Microsoft.ActiveDirectory.WebServices.exe
    LoadedModule[1]=C:\Windows\SYSTEM32\ntdll.dll
    LoadedModule[2]=C:\Windows\SYSTEM32\MSCOREE.DLL
    LoadedModule[3]=C:\Windows\system32\KERNEL32.dll
    LoadedModule[4]=C:\Windows\system32\KERNELBASE.dll
    LoadedModule[5]=C:\Windows\SYSTEM32\dlphook.x64.dll
    LoadedModule[6]=C:\Windows\SYSTEM32\VERSION.dll
    LoadedModule[7]=C:\Windows\system32\PSAPI.DLL
    LoadedModule[8]=C:\Windows\system32\ADVAPI32.dll
    LoadedModule[9]=C:\Windows\system32\WS2_32.dll
    LoadedModule[10]=C:\Windows\system32\msvcrt.dll
    LoadedModule[11]=C:\Windows\SYSTEM32\sechost.dll
    LoadedModule[12]=C:\Windows\system32\RPCRT4.dll
    LoadedModule[13]=C:\Windows\system32\NSI.dll
    LoadedModule[14]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll
    LoadedModule[15]=C:\Windows\system32\SHLWAPI.dll
    LoadedModule[16]=C:\Windows\system32\USER32.dll
    LoadedModule[17]=C:\Windows\system32\GDI32.dll
    LoadedModule[18]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
    LoadedModule[19]=C:\Windows\SYSTEM32\MSVCR110_CLR0400.dll
    LoadedModule[20]=C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\51fbf5aac9c6f1aef14557276f98ad28\mscorlib.ni.dll
    LoadedModule[21]=C:\Windows\system32\ole32.dll
    LoadedModule[22]=C:\Windows\SYSTEM32\combase.dll
    LoadedModule[23]=C:\Windows\SYSTEM32\CRYPTBASE.dll
    LoadedModule[24]=C:\Windows\SYSTEM32\bcryptPrimitives.dll
    LoadedModule[25]=C:\Windows\SYSTEM32\CRYPTSP.dll
    LoadedModule[26]=C:\Windows\system32\rsaenh.dll
    LoadedModule[27]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clrjit.dll
    LoadedModule[28]=C:\Windows\system32\OLEAUT32.dll
    LoadedModule[29]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System\803e478b5cb2fe994c4f977853849956\System.ni.dll
    LoadedModule[30]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Serv759bfb78#\060758702287150a3b9ca51bfbd135e4\System.ServiceProcess.ni.dll
    LoadedModule[31]=C:\Windows\ADWS\Microsoft.ActiveDirectory.WebServices.Shared.dll
    LoadedModule[32]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Configuration\af08c33d3e853168e58f0bb32118170b\System.Configuration.ni.dll
    LoadedModule[33]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Core\5641065f716dfd6c76dd7bc6ab18c47a\System.Core.ni.dll
    LoadedModule[34]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Xml\b3344890d2d919e93f506faabd08186a\System.Xml.ni.dll
    LoadedModule[35]=C:\Windows\system32\urlmon.dll
    LoadedModule[36]=C:\Windows\system32\iertutil.dll
    LoadedModule[37]=C:\Windows\system32\WININET.dll
    LoadedModule[38]=C:\Windows\system32\USERENV.dll
    LoadedModule[39]=C:\Windows\system32\profapi.dll
    LoadedModule[40]=C:\Windows\SYSTEM32\Secur32.dll
    LoadedModule[41]=C:\Windows\SYSTEM32\SSPICLI.DLL
    LoadedModule[42]=C:\Windows\system32\SHELL32.dll
    LoadedModule[43]=C:\Windows\SYSTEM32\SHCORE.dll
    LoadedModule[44]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Dire5d62f0a2#\7ab37f1ca732666c1ab41d8e500942e0\System.DirectoryServices.Protocols.ni.dll
    LoadedModule[45]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel\4e643cb8b12402db89eb2d5839872b78\System.ServiceModel.ni.dll
    LoadedModule[46]=C:\Windows\assembly\NativeImages_v4.0.30319_64\SMDiagnostics\02b9ba874b1c07b6016aa9406745e96b\SMDiagnostics.ni.dll
    LoadedModule[47]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Web.Services\f936aad8a951da6674d460db1855a3db\System.Web.Services.ni.dll
    LoadedModule[48]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Servd1dec626#\8944debbd3293f930c7e37b64aed0d77\System.ServiceModel.Internals.ni.dll
    LoadedModule[49]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.IdentityModel\5844c97798b9e56b45cb0e5d3505ffd2\System.IdentityModel.ni.dll
    LoadedModule[50]=C:\Windows\system32\crypt32.dll
    LoadedModule[51]=C:\Windows\system32\MSASN1.dll
    LoadedModule[52]=C:\Windows\SYSTEM32\DPAPI.dll
    LoadedModule[53]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Runteb92aa12#\3838e7c87e962eaec01572bff0396922\System.Runtime.Serialization.ni.dll
    LoadedModule[54]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Servf73e6522#\38df17ed0feec9b27d7d33272eecc176\System.ServiceModel.Web.ni.dll
    LoadedModule[55]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Dired13b18a9#\4ecba93b4eae5bb0c97205c4e4196702\System.DirectoryServices.ni.dll
    LoadedModule[56]=C:\Windows\system32\wldap32.dll
    LoadedModule[57]=C:\Windows\system32\mswsock.dll
    LoadedModule[58]=C:\Windows\SYSTEM32\DNSAPI.dll
    LoadedModule[59]=C:\Windows\System32\rasadhlp.dll
    LoadedModule[60]=C:\Windows\System32\fwpuclnt.dll
    LoadedModule[61]=C:\Windows\SYSTEM32\IPHLPAPI.DLL
    LoadedModule[62]=C:\Windows\SYSTEM32\WINNSI.DLL
    LoadedModule[63]=C:\Windows\SYSTEM32\DSPARSE.dll
    LoadedModule[64]=C:\Windows\system32\kerberos.DLL
    LoadedModule[65]=C:\Windows\SYSTEM32\cryptdll.dll
    LoadedModule[66]=C:\Windows\SYSTEM32\bcrypt.dll
    LoadedModule[67]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\diasymreader.dll
    FriendlyEventName=Stopped working
    ConsentKey=CLR20r3
    AppName=Microsoft.ActiveDirectory.WebServices
    AppPath=C:\Windows\ADWS\Microsoft.ActiveDirectory.WebServices.exe
    NsPartner=windows
    NsGroup=windows8
    Tks for your help.
    migrations

  • The DPMRA service terminated unexpectedly. It has done this 332 time(s)."

    Hi,
    We’ve been having problems with our DPM backups. We’re running DPM 2012 SP1 on Server 2008 R2 SP1.
    In short the backup agent seems to crash causing all jobs to error/fail.
    I slightly more detailed explanation of the issue is ….
    The critical alert says
    “The protection agent on MYSERVERNAME was temporarily unable to respond because it was in an unexpected state. (ID 60 Details: Internal error code: 0x809909B0)”
    When we look at the System log we have an event id 7034 from the Service Control Manager source with something like
    “The DPMRA service terminated unexpectedly. 
    It has done this 332 time(s).”
    In the Application log we have event id 1000 from the Application Error source
    Faulting application name: DPMRA.exe, version: 4.1.3333.0, time stamp: 0x50f5e4f5
    Faulting module name: FileWriterHelperPlugin.dll, version: 4.1.3313.0, time stamp: 0x50ad994d
    Exception code: 0xc0000005
    Fault offset: 0x0000000000062a09
    Faulting process id: 0x1a94
    Faulting application start time: 0x01ce5636b3b19038
    Faulting application path: C:\Program Files\Microsoft DPM\DPM\bin\DPMRA.exe
    Faulting module path: C:\Program Files\Microsoft DPM\DPM\bin\FileWriterHelperPlugin.dll
    Report Id: e814c3af-c22a-11e2-a2b8-826b64169df1
    After looking in the DPMRACurr.errlog I found a “CRITICAL Raising Watson for process” but can’t track down the issue ….
    1A94      2320      
    05/21     15:27:08.284      
    31          
    vsssnapshotrequestor.cpp(712)               
    [0000000002EB93B0]      
    NORMAL             
    CVssSnapshotRequestor::StartDoSnapshot [0000000002EB93B0]
    1A94      2320      
    05/21     15:27:10.312      
    31          
    vssbaserequestor.cpp(944)        
    [0000000002EB93B0]                      
    NORMAL               
    QueryStatus returned 0x4230a, Releasing VssAsync [0000000000BE7030]
    1A94      2320      
    05/21     15:27:10.312      
    31          
    vssbaserequestor.cpp(1068)     
    [0000000002EB93B0]                      
    NORMAL               
    CVssBaseRequestor::StartGatherWriterStatus [0000000002EB93B0]
    1A94      2320      
    05/21     15:27:11.326      
    31          
    vssbaserequestor.cpp(944)        
    [0000000002EB93B0]                      
    NORMAL               
    QueryStatus returned 0x4230a, Releasing VssAsync [0000000000BE7030]
    1A94      2320      
    05/21     15:27:11.326      
    31          
    vsssnapshotrequestor.cpp(747)               
    [0000000002EB93B0]      
    NORMAL             
    CVssSnapshotRequestor::MapVolumesToSnapshotPaths [0000000002EB93B0]
    1A94      2320      
    05/21     15:27:11.342      
    31          
    vsssnapshotrequestor.cpp(767)               
    [0000000002EB93B0]      
    NORMAL             
    CVssSnapshotRequestor:: ProviderId:[{B5946137-7B9F-4925-AF80-51ABD60B20D5}], h/w provider:[0], volume:[\\?\Volume{7d4bcb2f-275e-11e0-afde-c2fd68da2b37}\]
    1A94      2320      
    05/21     15:27:11.498      
    31          
    vssbaserequestor.cpp(1101)     
    [0000000002EB93B0]                      
    NORMAL               
    CVssBaseRequestor::CheckWriterStatus [0000000002EB93B0]
    1A94      2320      
    05/21     15:27:11.498      
    31          
    vssbaserequestor.cpp(1132)     
    [0000000002EB93B0]                      
    NORMAL               
    Checking Writer status for writerid: {0074A271-4F24-43E0-9EC7-28A44189CB80}                                      
    writerName: DPM Writer
    1A94      05F0      
    05/21     15:27:11.701      
    18          
    incompatiblefiltersfinder.cpp(171)                        
    150ACB1B-1308-494F-8145-D1BBC50308EA  NORMAL             
    No Incompatible Service Groups. Hence no incompatible filters
    1A94      05F0      
    05/21     15:27:11.701      
    31          
    basewriterbackuphelper.cpp(178)         
    [0000000002FF9150]      
    150ACB1B-1308-494F-8145-D1BBC50308EA NORMAL             
    SetSystemFlags(0)
    1A94      05F0      
    05/21     15:27:11.701      
    18          
    dsmsendersubtaskbase.cpp(47)              
    [0000000002EE0FB0]      
    150ACB1B-1308-494F-8145-D1BBC50308EA NORMAL             
    CDsmSenderSubTaskBase: constructor [0000000002EE0FB0] openovl[0000000002EE1120] msgovl[0000000002EE1220] closeovl[0000000002EE1170]
    1A94      05F0      
    05/21     15:27:11.701      
    31          
    vsssnapshotrequestor.cpp(1276)                            
    150ACB1B-1308-494F-8145-D1BBC50308EA  NORMAL             
    ssLocalVolumeGuid = [\\?\Volume{7d4bcb2f-275e-11e0-afde-c2fd68da2b37}\], ssClusterVolGuid=[\\?\Volume{7d4bcb2f-275e-11e0-afde-c2fd68da2b37}\]
    1A94      05F0      
    05/21     15:27:11.701      
    31          
    basewriterbackuphelper.cpp(370)                         
    150ACB1B-1308-494F-8145-D1BBC50308EA  WARNING          
    Assertion Failure :: false
    1A94      05F0      
    05/21     15:27:11.701      
    31          
    basewriterbackuphelper.cpp(317)                         
    150ACB1B-1308-494F-8145-D1BBC50308EA  WARNING          
    Assertion Failure :: pConfigureInfo != NULL
    1A94      05F0      
    05/21     15:27:11.701      
    22          
    watsonintegration.cpp(73)                        
    150ACB1B-1308-494F-8145-D1BBC50308EA  NORMAL             
    Inside Watson Handler
    1A94      05F0      
    05/21     15:27:11.701      
    22          
    watsonintegration.cpp(116)                      
    150ACB1B-1308-494F-8145-D1BBC50308EA  CRITICAL             
    Raising Watson for process
    299C      2860      
    05/21     15:28:03.736      
    03          
    timer.cpp(490)                                 
    ACTIVITY             
    CTimerMgr::TimerThread
    299C      2860      
    05/21     15:28:03.736      
    03          
    timer.cpp(503)  [0000000000449D50]                      
    ACTIVITY               
    CTimerMgr::TimerThreadInternal
    299C      2728      
    05/21     15:28:03.741      
    03          
    runtime.cpp(782)           
    [000000000044D3F0]                      
    ACTIVITY               
    InitializeSecurity found 3 authorized entities
    299C      2728      
    05/21     15:28:03.742      
    03          
    runtime.cpp(841)           
    [000000000044D3F0]                      
    ACTIVITY               
    InitializeSecurity added COM perm for DPMRADCOMTrustedMachines
    299C      2728      
    05/21     15:28:03.742      
    03          
    runtime.cpp(841)           
    [000000000044D3F0]                      
    ACTIVITY               
    InitializeSecurity added COM perm for DPMRATrustedDPMRAs
    299C      2728      
    05/21     15:28:03.743      
    03          
    runtime.cpp(848)           
    [000000000044D3F0]                      
    ACTIVITY               
    InitializeSecurity added DM perm for DPMRADmTrustedMachines
    299C      2728      
    05/21     15:28:03.743      
    03          
    runtime.cpp(94)                                              
    NORMAL             
    Found 1 writer account(s) under VSS access control.
    299C      2728      
    05/21     15:28:03.743      
    03          
    runtime.cpp(162)                                           
    NORMAL             
    Added writer account [0] 'NT Authority\NetworkService' to the DACL.
    299C      2728      
    05/21     15:28:03.749      
    22          
    genericthreadpool.cpp(824)      
    [000000000044D3F0]                      
    NORMAL               
    Hr: = [0x80070002] CGenericThreadPool::m_dwMaximumNumberOfThreads[20]
    299C      2728      
    05/21     15:28:03.758      
    20          
    commengine.cpp(345)  [00000000004C4650]                      
    ACTIVITY             
    Hr: = [0x00000000] ConnectionNoActivityTimeout: 7200
    299C      2728      
    05/21     15:28:03.759      
    20          
    commengine.cpp(359)  [00000000004C4650]                      
    ACTIVITY             
    Hr: = [0x00000000] m_dwConnectionNoActivityTimeoutForSlowReceiver: 7200
    299C      2BE4     
    05/21     15:28:03.764      
    03          
    timer.cpp(490)                                 
    ACTIVITY             
    CTimerMgr::TimerThread
    299C      2BE4     
    05/21     15:28:03.764      
    03          
    timer.cpp(503)  [000000000021FA58]                      
    ACTIVITY               
    CTimerMgr::TimerThreadInternal
    299C      2728      
    05/21     15:28:03.765      
    29          
    dpmra.cpp(160)               
    [0000000000448CB0]                      
    NORMAL               
    CDPMRA::Initialize [0000000000448CB0]
    299C      2728      
    05/21     15:28:03.765      
    31          
    vaagent.cpp(227)                                            
    NORMAL             
    CVAAgent: Initialize globals
    299C      2728      
    05/21     15:28:03.777      
    29          
    mta.cpp(126)                                    
    ACTIVITY               
    CMTA::AddSchemasToSchemaCache => Initialize loaded schemas
    299C      2728      
    05/21     15:28:03.791      
    29          
    dpmra.cpp(178)               
    [0000000000448CB0]                      
    NORMAL               
    CDPMRA::Initialize loaded schemas
    299C      2728      
    05/21     15:28:03.791      
    22          
    genericthreadpool.cpp(75)        
    [000000000021FD90]                      
    NORMAL               
    CGenericThreadPool: constructor
    299C      2728      
    05/21     15:28:03.791      
    22          
    genericthreadpool.cpp(824)      
    [000000000021FD90]                      
    NORMAL               
    Hr: = [0x80070002] CGenericThreadPool::m_dwMaximumNumberOfThreads[256]
    299C      2728      
    05/21     15:28:03.792      
    29          
    dpmra.cpp(265)               
    [0000000000448CB0]                      
    NORMAL               
    CreateDefaultSubTask [0000000000448CB0]
    299C      2728      
    05/21     15:28:03.792      
    29          
    dpmra.cpp(188)               
    [0000000000448CB0]                      
    NORMAL               
    Temporary storage path reg key found
    299C      2728      
    05/21     15:28:03.792      
    29          
    dpmra.cpp(204)               
    [0000000000448CB0]                      
    NORMAL             
    MTA Temp location Path = [c:\Program Files\Microsoft DPM\DPM\temp\MTA\]
    299C      2728      
    05/21     15:28:03.792      
    29          
    mta.cpp(209)                                    
    NORMAL             
    Hr: = [0x80070005] CMTA::Initialize => Could not delete file = [c:\Program Files\Microsoft DPM\DPM\temp\MTA\PSInfo]
    299C      2728      
    05/21     15:28:03.793      
    29          
    mtamethrottlehelper.cpp(113) [00000000029987E0]                      
    NORMAL               
    Hr: = [0x80070002] Number of encryption threads = [2]
    299C      2728      
    05/21     15:28:03.793      
    03          
    datasourceresourcelimit.cpp(132)          
    [000000000044D9F0]      
    NORMAL             
    Resource Limit Config File: c:\Program Files\Microsoft DPM\DPM\bin\DsResourceLimits.xml
    299C      2728      
    05/21     15:28:03.794      
    03          
    datasourceresourcelimit.cpp(138)          
    [000000000044D9F0]      
    NORMAL             
    Loaded DS Resource Limits
    299C      2728      
    05/21     15:28:03.794      
    03          
    service.cpp(298)             
    [00000000000FFD80]                      
    ACTIVITY               
    CService::AnnounceServiceStatus
    299C      0758      
    05/21     15:28:03.827      
    03          
    runtime.cpp(1376)         
    [000000000044D3F0]      
    150ACB1B-1308-494F-8145-D1BBC50308EA  FATAL  
    Subtask failure, sending status response XML=[<?xml version="1.0"?>
    We’ve since raised a ticket with Microsoft Support but I’m told the System Centre Developer support team are experiencing high call volumes so I’m hoping someone else might be able to point me in the right direction.
    We do have a SCOM agent installed but have disabled it and still get the issue :o(
    Any ideas of what else to look at?
    Thanks,
    John

    Did you ever receive an answer back on this? I have almost the exact same issue. I have DPM 2012 Sp1 Update Roll up 5 on Server 2012. Backup jobs will work on a particular server for a couple after forcing synchronization but then all jobs begin to fail.
    On the DPM Server I will get: The protection agent on server.domain.local was temporarily unable to respond because it was in an unexpected state. (ID: 60) On the Protected computer in the Event Viewer system log I get: Service Control Manager Event ID: 7034
    Description: The DPMRA service terminated unexpectedly.  It has done this 688+ time(s).
    On the Protected computer under C:\Program Files\Microsoft Data Protection Manager\DPM\Temp I have quite a few error crash logs. Here are some of them.
    1318       0C14      03/17     15:47:04.123       03           runtime.cpp(1376)         
    [008E7060]          60111D39-34B2-4135-BAC2-7AC4368141A3  FATAL   Subtask failure, sending status response XML=[<?xml version="1.0"?>
    1318       0C14      03/17     15:47:04.123       03           runtime.cpp(1376)         
    [008E7060]          60111D39-34B2-4135-BAC2-7AC4368141A3  FATAL   <Status xmlns="http://schemas.microsoft.com/2003/dls/StatusMessages.xsd" StatusCode="-2137454160" Reason="Error" CommandID="RACancelAllSubTasks"
    CommandInstanceID="23976afc-34bc-4d3c-99ea-996bdb34ce99" GuidWorkItem="97a32e51-07f8-4bb2-a292-dcd433b2472b" TETaskInstanceID="60111d39-34b2-4135-bac2-7ac4368141a3"><ErrorInfo xmlns="http://schemas.microsoft.com/2003/dls/GenericAgentStatus.xsd" ErrorCode="536872913"
    DetailedCode="-2137454160" DetailedSource="2"><Parameter Name="AgentTargetServer" Value="bspops001.BSPEnterprise.local"/></ErrorInfo></Status>
    1318       0C14      03/17     15:47:04.123       03           runtime.cpp(1376)         
    [008E7060]          60111D39-34B2-4135-BAC2-7AC4368141A3  FATAL   ]
    1318       0C14      03/17     15:47:04.123       29           radefaultsubtask.cpp(360)          
    [00EB4F10]          60111D39-34B2-4135-BAC2-7AC4368141A3      WARNING           Failed: Hr: = [0x809909b0] : CRADefaultSubTask: WorkitemID
    does not exist, {97A32E51-07F8-4BB2-A292-DCD433B2472B}
    1318       0C14      03/17     15:47:04.123       05           defaultsubtask.cpp(546)              
    [00EB4F10]          60111D39-34B2-4135-BAC2-7AC4368141A3      WARNING           Failed: Hr: = [0x809909b0] : Encountered Failure: : lVal
    : CommandReceivedSpecific(pCommand, pOvl)
    1318       0C14      03/17     15:47:04.123       05           defaultsubtask.cpp(751)              
    [00EB4F10]          60111D39-34B2-4135-BAC2-7AC4368141A3      WARNING           Failed: Hr: = [0x809909b0] : Encountered Failure: : lVal
    : CommandReceived(pAgentOvl)
    1318       0C14      03/17     15:47:04.217       29           radefaultsubtask.cpp(262)          
    [00EB4F10]          60111D39-34B2-4135-BAC2-7AC4368141A3      WARNING           CRADefaultSubTask: WorkitemID to delete does not exist,
    {97A32E51-07F8-4BB2-A292-DCD433B2472B}
    1318       0C14      03/17     15:47:04.217       03           runtime.cpp(1376)         
    [008E7060]          60111D39-34B2-4135-BAC2-7AC4368141A3  FATAL   Subtask failure, sending status response XML=[<?xml version="1.0"?>
    1318       0C14      03/17     15:47:04.217       03           runtime.cpp(1376)         
    [008E7060]          60111D39-34B2-4135-BAC2-7AC4368141A3  FATAL   <Status xmlns="http://schemas.microsoft.com/2003/dls/StatusMessages.xsd" StatusCode="-2137454160" Reason="Error" CommandID="RADeleteWorkItem"
    CommandInstanceID="9d7f0075-90a5-4f79-912e-9625fb6ccd76" GuidWorkItem="97a32e51-07f8-4bb2-a292-dcd433b2472b" TETaskInstanceID="60111d39-34b2-4135-bac2-7ac4368141a3"><ErrorInfo xmlns="http://schemas.microsoft.com/2003/dls/GenericAgentStatus.xsd" ErrorCode="536872913"
    DetailedCode="-2137454160" DetailedSource="2"><Parameter Name="AgentTargetServer" Value="bspops001.BSPEnterprise.local"/></ErrorInfo></Status>
    1318       0C14      03/17     15:47:04.217       03           runtime.cpp(1376)         
    [008E7060]          60111D39-34B2-4135-BAC2-7AC4368141A3  FATAL   ]
    1318       0C14      03/17     15:47:04.217       29           radefaultsubtask.cpp(263)          
    [00EB4F10]          60111D39-34B2-4135-BAC2-7AC4368141A3      WARNING           Failed: Hr: = [0x809909b0] : Encountered Failure: : lVal
    : (HRESULT)0x809909B0
    1318       0C14      03/17     15:47:04.217       05           defaultsubtask.cpp(546)              
    [00EB4F10]          60111D39-34B2-4135-BAC2-7AC4368141A3      WARNING           Failed: Hr: = [0x809909b0] : Encountered Failure: : lVal
    : CommandReceivedSpecific(pCommand, pOvl)
    1318       0C14      03/17     15:47:04.217       05           defaultsubtask.cpp(751)              
    [00EB4F10]          60111D39-34B2-4135-BAC2-7AC4368141A3      WARNING           Failed: Hr: = [0x809909b0] : Encountered Failure: : lVal
    : CommandReceived(pAgentOvl)
    1318       0C14      03/17     15:47:04.685       03           workitem.cpp(86)           
    [00E9CED4]         F94114B7-BA2F-46A3-8133-D1B358E78670   ACTIVITY              Idle Timer created with timeout = 390000
    1318       0C14      03/17     15:47:04.982       05           xmlprocessingutils.cpp(1469)                    
    F94114B7-BA2F-46A3-8133-D1B358E78670   WARNING           Failed: Hr: = [0x80070057] : Encountered Failure: : lVal : E_INVALIDARG
    1318       0C14      03/17     15:47:04.998       31           vadatasourcestate.cpp(747)                      
    F94114B7-BA2F-46A3-8133-D1B358E78670   WARNING           Failed: Hr: = [0x8007007e] GetModuleHandle failed for Library [FileWriterHelperPlugin], will try LoadLibrary
    0000       0C14      03/17     15:47:04.998       00           fsutils.cpp(4750)                              
    F94114B7-BA2F-46A3-8133-D1B358E78670   NORMAL             CClientReadThrottler::InitializeWaitForClientRead Failed to read sleep time from registry [hr = 0xdf9690]. Setting default [50 ms].
    1318       0C14      03/17     15:47:05.014       31           dllmain.cpp(36)                
    F94114B7-BA2F-46A3-8133-D1B358E78670                NORMAL             FileWriterHelperPlugin: DLL_PROCESS_ATTACH
    1318       17B8      03/17     15:47:05.014       31           basewriterbackuphelper.cpp(159)          
    [00EC5A28]         F94114B7-BA2F-46A3-8133-D1B358E78670 NORMAL             SetOperationType(2)
    1318       17B8      03/17     15:47:05.014       22           watsonintegration.cpp(73)                         
    F94114B7-BA2F-46A3-8133-D1B358E78670   NORMAL             Inside Watson Handler
    1318       17B8      03/17     15:47:05.014       22           watsonintegration.cpp(116)                       
    F94114B7-BA2F-46A3-8133-D1B358E78670   CRITICAL              Raising Watson for process
    0628       04D0      03/17     15:48:04.827       03          
    timer.cpp(490)                                  ACTIVITY               
    CTimerMgr::TimerThread

  • Exchange Transport Service is not starting

    Hi,
    We stopped our exchange server machines. When we started it again Exchange Transport service is not starting. Can anyone help us in this regard?

    Hi AneesurRehman,
    Thank you for your question.
    We could restart the service of “Microsoft Exchange AD topology ”,then manually start the Exchange Transport Service, if not, check if there are other Exchange services which were not started, we could start other Exchange service before we start Exchange
    Transport Service.
    If we didn’t start any Exchange service, we could check if there are any Event IDs in Application Log. I suggest we post Event Id to
    [email protected] for our troubleshooting. 
    Best Regard,
    Jim
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
    Jim Xu
    TechNet Community Support

  • SSRS Service Terminating Unexpectedly

    Hi All,
    Can anyone suggest root cause of this issue.
    (1B98:1604) 12/09/14 05:53:31, ACTION, SQLDUMPER_UNKNOWN_APP.EXE, MiniDump completed: C:\Program Files\Microsoft SQL Server\MSRS10.MSSQLSERVER\Reporting Services\Logfiles\SQLDmpr0005.mdmp
    (1B98:1604) 12/09/14 05:53:31, ACTION, SQLDUMPER_UNKNOWN_APP.EXE, Location of module 'dbghelp.dll' : 'C:\Program Files\Microsoft SQL Server\100\Shared\dbghelp.dll'
    (1B98:1604) 12/09/14 05:53:33, ACTION, SQLDUMPER_UNKNOWN_APP.EXE, File version of module 'C:\Program Files\Microsoft SQL Server\100\Shared\dbghelp.dll' : '6.8:4.0'
    (1B98:1604) 12/09/14 05:53:33, ACTION, SQLDUMPER_UNKNOWN_APP.EXE, Product version of module 'C:\Program Files\Microsoft SQL Server\100\Shared\dbghelp.dll' : '6.8:4.0'
    (1B98:1604) 12/09/14 05:53:33, ACTION, SQLDUMPER_UNKNOWN_APP.EXE, Location of module 'sqldumper.exe' : 'C:\Program Files\Microsoft SQL Server\100\Shared\SQLDUMPER.EXE'
    (1B98:1604) 12/09/14 05:53:33, ACTION, SQLDUMPER_UNKNOWN_APP.EXE, File version of module 'C:\Program Files\Microsoft SQL Server\100\Shared\SQLDUMPER.EXE' : '2007.100:1600.22'
    (1B98:1604) 12/09/14 05:53:33, ACTION, SQLDUMPER_UNKNOWN_APP.EXE, Product version of module 'C:\Program Files\Microsoft SQL Server\100\Shared\SQLDUMPER.EXE' : '10.0:1600.22'
    (1B98:1604) 12/09/14 05:53:33, ACTION, ReportingServicesService.exe, Watson Invoke: No
    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7031
    Date:  9/12/2014
    Time:  05:53:34 AM
    User:  N/A
    Computer:
    Description:
    The SQL Server Reporting Services (MSSQLSERVER) service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.
    ServerDetails:
       Microsoft SQL Server 2008 (SP3) - 10.0.5500.0 (Intel X86)
        Copyright (c) 1988-2008 Microsoft Corporation
        Standard Edition on Windows NT 5.2 <X86> (Build 3790: Service Pack 2) (VM)
       RAM:12GB

    Hi Sreenivas DBA,
    Per my understanding you got the reporting services terminated unexpectedly and got some error message, right
    According to the information you have provided that your SQL Server version is 2008(SP3), this is not the latest version, so I recommend you to install the latest SP4 to have an update first:
    http://support.microsoft.com/kb/968382
    if your problem still exists, could you please try to provide more details information below to help us more effective to analysis the root cause and provide solution:
    What is the action you are doing when caused the unexpected terminated? Can you restart the reporting services without error again?
    Could you please provide the error message in the log file(the date should be the same when this error happen)
    Path of the log file like this:
    C:\Program Files\Microsoft SQL Server\MSRS10.MSSQLSERVER\Reporting Services\LogFiles
    If you still have some question, please feel free to ask.
    Regards
    Vicky Liu

  • DAG - Backup failing on 1 DB only with error - The Microsoft Exchange Replication service VSS Writer instance ID failed with error code 80070020 when preparing for a backup of database 'DB012'

    Hi Board,
    i´ve search across the board, technet and symantec sites but did not found a hint about my problem.
    we drive a 2 node DAG (Location1-Ex1-mb1 
    Location2-exc1-mb1), on SP2 RU4 patchlevel with 40 Databases.
    Since some time the backup of one - and only one DB - is failing with these events, logged on the Mailboxserver on which the passive DB is hosted.
    Log Name:      Application
    Source:        MSExchangeRepl
    Date:          28.09.2012 00:37:17
    Event ID:      2112
    Task Category: Exchange VSS Writer
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      Location1-Exc1-MB1
    Description: The Microsoft Exchange Replication service VSS Writer instance 1ab7d204-609a-4aea-b0a7-70afb0db38de failed with error code 80070020 when preparing for a backup of database 'DB012'.
    Followed by
    Log Name:      Application
    Source:        MSExchangeRepl
    Date:         
    01.10.2012 03:33:06
    Event ID:      2024
    Task Category: Exchange VSS Writer
    Level:         Error
    Keywords:      Classic
    User:         
    N/A
    Computer:      Location1-Exc1-MB1
    Description:
    The Microsoft Exchange Replication service VSS Writer (Instance 42916d80-36c1-4f73-86d0-596d30226349) failed with error 80070020 when preparing for a backup.
    The backup Application - Symantec Backup Exec 2010 R3 – states, this error
    Snapshot provider error (0xE000FED1): A failure occurred querying the Writer status.
    Check the Windows Event Viewer for details.
    Writer Name: Exchange Server, Writer ID: {76FE1AC4-15F7-4BCD-987E-8E1ACB462FB7}, Last error: The VSS Writer failed, but the operation can be retried (0x800423f3), State: Stable (1).
    Symatec suggests within http://www.symantec.com/business/support/index?page=content&id=TECH184095
    to restart the MS Exchange Replication Service – BUT the mentioned eventID
    8229 isn´t present on any of the both Mailboxservers.
    The affected Database is active on Location2-Exc1-Mb1 Server and in an overall healthy state. I found during my research, that below Location2-Exc1-Mb1 Server, there are not removed shadow copies present!
    This confuses me, since all Backups are normally taken from the passive copy of a Database.
    So my questions to the board are:
    * Does anyone is facing similar issues?
    * Can someone explain why snapshots are present on the Mailboxserver hosting the Active Database, whilst the errors are logged on the passive one?
    -          * Does someone know the conditions, why shadows copies remain and
    aren´t removed in a proper manner?
    What can cause the circumstance, that only 1 DB is facing such issues?
    Any suggestion is welcome!
    BR
    Markus

    Hi Lenora,
    I´ve encreases VSS / Exchange Backup Log levels to expert, before starting
    those things i´ve all tried now:
    - Backup from passive DB (forced within Symantec Backup Exec)
    - Backup from active DB (forced within Symantec Backup Exec)
    - Backup from passive DB without GRT enabled (forced within Symantec Backup Exec)
    - Backup from active DB without GRT enabled(forced within Symantec Backup Exec)
    All those attempts failed.
    But brought some more details - the backup against the active DB states, that there is still a backup in progress and therefore this backup is cancelled by VSS.
    The Solution was, that i´ve needed to restart the Exchange Replication Service on the Mailbox Server hosting the passive DB.
    Backups are working again on all DBs!
    THX for your replys.
    Best regards
    Markus

Maybe you are looking for

  • Wacom Intuous Pro Stylus right-click working inconsistently in Lightroom 5.5

    I have an Wacom Intuous Pro tablet and stylus, and have the front button configured to be a right-click.  I'm having a problem in LR 5.5 (64-bit) where the right-click function doesn't work sometimes, but it will work in Photoshop CC (14.2.1, 64-bit)

  • Outlook connector problem

    I am using outlook connector of version Patch-ID# 125361-03 NOTE: READ THE TERMS OF THE AGREEMENT ("AGREEMENT") IN THE LEGAL_LICENSE.TXT FILE CAREFULLY BEFORE USING THIS SOFTWARE. BY USING THE SOFTWARE, YOU AGREE TO THE TERMS OF THIS AGREEMENT. IF YO

  • On Pressing Button,System Exit

    Hi Freinds, I have Created One button in My Oracle forms 6i ,and Used 3-line Code Which is :cursor_check := to_number(:system.cursor_record); go_block('cardex_block'); show_window('window_cardex');Now When The User is Pressing this Button at the Run

  • SJVC installation problem

    I have installed Sun Java Studio Creator on my Windows Platform... however, i am using Chinese(PRC) for running any non-Unicode program in my Regional and language settings. So, when i run JVC, it will use chinese as the medium, but i am more familia

  • Error while test applet with jcwde simulator using netbeans

    i make applet using netbeans 6.5.. i have compile class and i get no error and results *.class but while I use netbeans service on Javacard simulator.. while I try to connect with entry aid applet i have an error. this is error log ++++++++++++++++++