Problem starting Microsoft Forefront Server Protection Eventing Service?

Hi Guys,
Our Exchange 2007 Microsoft Exchange Information Store and Microsoft Exchange Transport services wont start. All dependencies have started except Microsoft Forefront Server Protection Eventing Service. We tried starting it manually but we got this message
(see attached). Any idea how to fix this? Since we cant start Microsoft Exchange Information Store and Microsoft Exchange Transport services, OWA users cant access their emails. Please advise.
Thanks,
Arnel

Hi Arnel,
Based on your description, I understand that the Microsoft Forefront Server Protection Eventing Service can’t
be started.
Please run
services.msc, select the Microsoft Forefront Server Protection Eventing Service and double-click to open it. In the service properties show box, please select Dependencies tab to check which service that it depends on didn’t start.
Meanwhile, would you please let me know which version of the
Forefront for Exchange Server? Please check if you have installed the latest updates to Forefront for Exchange Server. (Such as:
Hotfix Rollup 3 for Microsoft Forefront Protection for Exchange and so on.)
By the way, this issue seems to be more related to Forefront for Exchange Server. Please post it in the Forefront
for Exchange Server forum. I believe we will get a better assistance there.
https://social.technet.microsoft.com/Forums/forefront/en-US/home?forum=FSENext
Hope this helps.
Best regards,
Justin Gu

Similar Messages

Microsoft Forefront Server Protection Eventing Service won't start?

Hi Guys,
When Forefront Protection for Exchange was integrated/enabled on our SBS 2008 server, Microsoft Forefront Server Protection Eventing Service won’t start. Even when we try to start it manually we are getting this message (see attached). During this attempt,
we got these events in the event viewer. In this case, in order to have our email working, we have to temporarily disable Forefront. Any suggestion how to fix this? Please advise.
Event 465
Source: ESENT
FSCEventing (9324) Corruption was detected during soft recovery in logfile C:\Program Files (x86)\Microsoft Forefront Protection for Exchange Server\Data\Incidents\inc.log. The failing checksum record is located at position END. Data not matching the log-file
fill pattern first appeared in sector 450 (0x000001C2). This logfile has been damaged and is unusable.
Event 301
Source: ESENT
FSCEventing (9324) The database engine has begun replaying logfile C:\Program Files (x86)\Microsoft Forefront Protection for Exchange Server\Data\Incidents\inc.log.
Event 454
Source: ESENT
FSCEventing (9324) Database recovery/restore failed with unexpected error - 501.
Event 1076
Source: FSCEventing
The Forefront Protection Eventing Service has stopped.
Thank you very much!
Arnel

Hi Arnel,
Based on error messages, it indicates a log file (inc.log) has become corrupted. Please restore the log file
from a backup copy, and then check if this issue can be solved. For more details, please refer to the following article.
Event Id 465
Hope this helps.
Best regards,
Justin Gu

Microsoft Forefront Server Protection for Exchange Registration Service does not start automatically

Hello,
I am having an issue when I start my TMG 2010 machine:
(*TMG 2010 + Forefront protection for Exchange + Exchange Edge server role, acting like a SMTP relay and Antispam filter)
The service "Microsoft Forefront Server Protection for Exchange Registration Service"
does not start, it is set to "Manual".
I tried to find some information about which services should be started and which should not, but I cannot find such information, not even in Technet (my fault probably).
Thanks in advance.
Luis Olías Técnico/Admon Sistemas . Sevilla (España - Spain)

Hi,
Have you received any errors in event logs when
you started the Microsoft Forefront Server Protection for Exchange Registration Service?
Based on my research,
Microsoft Forefront Server Protection Controller service is a dependency of the Microsoft Forefront Server Protection Registration service and the Microsoft Forefront
Server Protection Registration service is a dependency of the Microsoft Exchange Transport service.
The Microsoft Forefront Server Protection Registration service normally only runs for a brief time (less than a minute) when FPE initializes. It then shuts
down and does not need to be running for transport scanning to occur.
You can refer to the link below:
Services
Best regards,
Susie

Cannot connect to an Exchange account in Outlook 2013 using "Microsoft Exchange Server or Compatible Service"

Dear All,
I cannot connect to my Exchange account in Outlook 2013 using "Microsoft Exchange Server or Compatible Service".
First I would like to present my network environment, I have 4 physical servers;
The first one is holding the Domain Controller 1, IP@: 192.168.1.10
The second server is holding the additional Domain Controller which it is DC2, IP@: 192.168.1.11
The third server is holding the Exchange 2013 Mailbox, IP@: 192.168.1.15
And the last server is holding the Exchange 2013 CAS-HT, IP@: 192.168.1.16
I am doing the steps below:
1-Creating a new profile in outlook and start configuring the exchange account by entering the IP address of the Exchange-CAS Server, 192.168.1.16
2-entering the account name: [email protected]
3-Go to "More Settings" > "Connection" > "Connect to Microsoft Exchange using HTTP" > and entering the "Exchange Proxy Settings"
4-type the exchange CAS Server URL, https://192.168.1.16
5-Check the "Connect using SSL Only"
6-Authentication Settings: "NTLM Authentication", and pressing Apply
7-When I press the "Check Name" button, a message occurred> "The action cannot be completed. The connection to Microsoft Exchange is unavailable. Outlook must be online or connected to complete this action".
8-I go back to the "Exchange Proxy Settings" and I Uncheck the "Connect using SSL Only" and pressing Apply
9-i press the "Check Name" Button, a small window occurred to enter a Username and Password, so I enter the Administrator username and the administrator password and pressing "OK", but nothing is changed, I tried to enter my
username and password in the small window and I still got the same result.
I cannot verify the account name and I cannot complete the process.
I appreciate you kind assistance.

Hi,
To narrow down the cause, I’d like to recommend the following troubleshooting:
1. Try to login the test account through OWA.
2. Check the Autodiscover settings: get-clientaccessserver |fl autodiscoverserviceinternaluri
3. Check the result of directly accessing the following URL:
https://autodiscover.domain.com/autodiscover/autodiscover.xml
Thanks,
Angela
Angela Shi
TechNet Community Support

Microsoft Lync Server 2013, Backup Service user store backup module detected items having pool ownership conflict during import.

Dear Team,
I have two Enterprise lync 2013 pools, abcPool and abcpool1. abcPool1 has got two servers, Server1 and server2. and abcpool has one FE server named "Server 3". and they have pool pairing.
Replication was fine between them when i had only one FE server in each pool, one day FE service broke on one of the FE server on abcpool1 and failed to start so i had to do failover to another pool, at that time i introduced one more FE in abcPool1, that
why now 2 FEs in abcPool2. Server1 FE service was resolved by reinstalling the binaries. However after that im unable to get the backupservice state to normal, i tried the below articles with no luck,
http://social.technet.microsoft.com/Forums/lync/en-US/0403621e-26b6-4cd0-bbca-8534a20de665/backup-service-pool-ownership-conflict-during-import?forum=lyncdeploy
http://msucmenow.blogspot.in/2013/05/troubleshooting-lync-2013-pool-pairing.html
"Event on Server 1"
Log Name: Lync Server
Source: LS Backup Service
Date: 1/21/2014 8:02:33 AM
Event ID: 4073
Task Category: (4000)
Level: Warning
Keywords: Classic
User: N/A
Computer: ABC.net
Description:
Microsoft Lync Server 2013, Backup Service user store backup module detected items having pool ownership conflict during import.
Items having pool ownership conflict:
ItemId: 1b3be172-b121-43cf-bd4e-b3d368eae6a9, DocId: 7972, DocName: urn:hcd:[email protected]
ItemId: 1b3be172-b121-43cf-bd4e-b3d368eae6a9, DocId: 7973, DocName: urn:lcd:[email protected]
ItemId: 1b3be172-b121-43cf-bd4e-b3d368eae6a9, DocId: 7974, DocName: urn:upc:[email protected]
PS C:\Users\lyncadmin> Get-CsBackupServiceStatus -PoolFqdn pool1.net | fl
ActiveMachineFqdn : abc1.net
OverallExportStatus : SteadyState
OverallImportStatus : ErrorState
BackupModules : {UserServices.PresenceFocus:[SteadyState,ErrorState],
ConfServices.DataConf:[FinalState,NormalState],
CentralMgmt.CMSMaster:[FinalState,NotInitialized]}
Following error in "Lync Server" logs on server3 on abcPool.
Log Name: Lync Server
Source: LS Backup Service
Date: 1/21/2014 9:37:47 AM
Event ID: 4069
Task Category: (4000)
Level: Warning
Keywords: Classic
User: N/A
Computer: SQL1.net
Description:
Microsoft Lync Server 2013, Backup Service user store backup module encountered an exception that was handled gracefully when importing document batch.
Batch file: UserServices\PresenceFocus\1-UserServices-8\Data\488bc218-9954-4caf-a5da-89efdb7b85a7_0_1562.xml.
Exception: System.Data.SqlClient.SqlException (0x80131904): Snapshot isolation transaction aborted due to update conflict. You cannot use snapshot isolation to access table 'dbo.Batch' directly or indirectly in database 'rtcxds' to update, delete, or
insert the row that has been modified or deleted by another transaction. Retry the transaction or change the isolation level for the update/delete statement.
Log Name: Lync Server
Source: LS Backup Service
Date: 1/21/2014 9:52:45 AM
Event ID: 4064
Task Category: (4000)
Level: Warning
Keywords: Classic
User: N/A
Computer: SQL1.net
Description:
Microsoft Lync Server 2013, Backup Service user store backup module encountered an exception that was handled gracefully during export.
Additional Message:
Exception: System.IO.IOException: The process cannot access the file '\\SQl1.net\LyncShare\1-BackupService-10\BackupStore\UserServices\PresenceFocus\Cookie\Cookie.zip' because it is being used by another process.
at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy, Boolean useLongPath,
Boolean checkHost)
at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options, String msgPath, Boolean bFromProxy)
Praveen | MCSE Messaging 2003

When you add a new FE in pool acdpool1, please check you have run the following:
<system drive>\Program Files\Microsoft Lync Server 2013\Deployment\Bootstrapper.exe
For the details, check
http://technet.microsoft.com/en-us/library/jj204773.aspx
Lisa Zheng
TechNet Community Support

Is there a way to convert Crystal Reports to Microsoft SQL Server 2005 reporting services?

Post Author: Lourdes Hernandez
CA Forum: General
Our department has always worked with and we love Crystal Reports. Unfortunately, certain reports now need to be converted to Microsoft SQL Server 2005 reporting services which from what I read I think they are *.rdl reports. Does Crystal reports have any way around this? I would have to learn this other tool when I'm already so happy with Crystal. I was thinking If I could just code the report in crystal and export it in a specific format that would be compatible Microsoft, the problem would be solved.
Any ideas would be greatly appreciated.

Post Author: bettername
CA Forum: General
Ditto!
There are some software packages to convert from CR to RS, but none work 100% AFAIK, and will require manual tuning.
Seems like a big hassle and learning curve just to get reports published via another method - I know I'd put up huge resistance if they tried to take my CR away from me!

Share Data Source between multiple report projects in Microsoft SQL Server 2012 Reporting Services

I have a reports solution in 2012 which contains multiple report projects one each for target deployment folder and we use TFS 2012 for report deployment.
We have a template project which has a bunch of template reports and all the datasources used in different reports.
When I develop a report, I cannot "Preview" in TFS but, for deploy this used to work fine util the reports solution was in TFS 2010 & Visual Studio 2008 R2. Since we moved to TFS 2012 & SSRS 2012 not being able to deploy till I create all
the necessary datasources for each project and now all the developers complaining that they cannot develop reports in TFS itself as they cannot preview (this problem was existing previously) and now not being able to deploy as it errors for each report "Could
not find specified rds file". I tried messing around with the .rptproj file DataSources tag that did not help either by modifying it like below.
<DataSources>
<ProjectItem>
<Name>DB.rds</Name>
<FullPath>Template\Data Source\DB.rds</FullPath>
</ProjectItem>
</DataSources>
Is there a way I could share a Data Source between multiple projects in Microsoft SQL Server 2012 Reporting Services?
Thanks in advance.............
Ione

Hi ione721,
According to your description, you want to create a shared data source which works for multiple projects. Right?
In Reporting Services, A shared data source is a set of data source connection properties that can be referenced by multiple reports, models, and data-driven subscriptions that run on a Reporting Services report server. It must be within one project.
We can't specify one data source working for multple projects. In this scenario, we suggest you put those reports into one project. Otherwise you can only create one data source for each project.
If you have any question, please feel free to ask.
Best Regards,
Simon Hou

SAP NetWeaver BI with Microsoft SQL Server 2012 Reporting Services using XMLA

I am currently implementing SAP BW and am trying to connect the Microsoft SQL Server 2012 Reporting Services product. I am able to connect to SAP BW but there is one problem when i click on Query Designer after adding a DataSet the screen just displays the dialog prompt saying '' NO CUBES WERE FOUND. VERIFY THAT YOU HAVE SELECTED A VALID CATALOG''.
The advanced information depicts the following:

Hi Raunak T,
Just a very basic question from my end:
I believe that "Microsoft SQL server Report Builder" is the 3rd party which uses MDX as interface.
Have you set the property using OLE DB for OLAP in your queries?
BR
Prabhith

Problems starting the http server

I have problems starting 9ias http server. I issue:
/u09/ora9ias/infra/opmn/bin> opmnctl startall
opmnctl: starting opmn and all managed processes...
Request partial success -- 1 of 4 processes started.
and the HTTP server does not start.
If I go to the enterprise manager, the only service started is Single Sign On.
If I try to enter to the HTTP server it gives me the following error:
An error was encountered while loading page. Failed to initialize configuration management user session.. Repository access failed Root Cause: Password could not be retrieved. Password could not be retrieved
The iasdb is already started and working.
Any clues what can be going wrong??
help is greatly appreciated.

Jorge, I suspect you've already fixed this problem. But if not, I have a standard operating procedure for this. Here's the gist of it, let me know if you need more detail.
1. shutdown the opmn layer (opmnctl stopall)
2. determine if the httpd.pid file exists (it's in the Apache/logs directory on linux)
3. delete the .pid file if it's there
4. if not, or if there's still a problem, tail the error_log for info
5. try to start the httpd (dcmctl start -ct ohs)
6. still a problem? ps -auxw | grep httpd
7. kill off the process(es)
8. try again to start up with dcmctl command in step 5
I can usually get it going at this point. If not, I have to do a reboot, which has always worked. Don't forget to shutdown the emctl and webcachectl if you're rebooting.
Hopefully this helps. It took a lot of learn-as-you-go for us to get this procedure. I'm sure the pros will role their eyes! :-)

Unable to start Oracle BI server and Presentation Service

I am unable to start the Bi Server and presentation service . I start stop, options in service window is coming disabled. Please can any body help on this?

Hi,
Please check if you have started the Oracle BI Java host service.
Check if the OC4j is started.
Check the event viewer logs. Also check on what account the service is starting.
Hope this helps ...
Thanks,
Anita

Forefront Endpoint Protection Monitoring Service

Hello,
I just saw that the Forefront Endpoint Protection Monitoring Service is stoppable. I had a virus a few weeks ago on my machine at home that has security essential installed. The virus continually disabled the service. Does it make sense to control the service
via gpo to not make it stoppable even by the system and admin user?
Cheers
Sebastian
Sebastian Bammer

This is old discussion, but let me explain some improvements in Microsoft Anti-Malware Engine. When a program tried to disable any service, process or anything related to Windows Security or Microsoft Anti-Malware Engine , Firewall, etc. It will be detected
as a suspicious behavior and it will be blocked (no matter whether it is known malware or unknown program). In case of unknown program, you might be asked to send more details or submit it to Microsoft Malware Protection Center.
In addition, in Windows Vista and later version of Windows such as Windows 7, Windows 8.x when you have User Account Control (UAC), all programs run as an standard user unless you grand them permission as administrator. So by default, if a program tried
to disable any Security related service in Windows is unable to that because it won't run as administrator and is unable to perform something which runs as administer unless, if you are in administrator account and UAC is off or you grand administrator privilege
to the program (e.g. right click and run as administrator).
However, if you still face any programs which might try to disable services and it won't block by FEP , Microsoft Security Essentials or other Microsoft Anti-Malware products, you could submit it sample to Microsoft Malware Protection Center for more analysis.

Why WSUS cann't download Microsoft SQL Server 2008 R2 Service Pack 2?

Why WSUS cann't download Microsoft® SQL Server® 2008 R2 Service Pack 2?
Search here :catalog.update.microsoft.com/v7/site/Search.aspx?q=KB2630458,no this patch,please help me,thanks a lot!

SQL 2008R2 SP2, is not released to MUcatalog, nor to WSUS.
http://social.technet.microsoft.com/Forums/en-US/35d9653d-96c1-4598-98c7-73739a3e781f/wsus-service-pack-updates-for-sql-server-2008-r2?forum=winserverwsus
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

Microsoft Forefront Threat management Gateway services keeps stopping

Please assist urgently
Microsoft Forefront Threat management Gateway 2010 services keeps stopping. We are on the
Service Pack 2 Roll update 5
On the event viewer does not display reason why the services stopped.
Your assistance will be highly appreciated
Regards
Daniel Nkuna

Hi,
Here is a similar thread that TMG keeps stopping and no error displayed in event log. It is fixed by uninstalling Surf cop on the TMG servers. Do you have such application installed on TMG server?
TMG Firewall service stopping
Best Regards,
Joyce
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Problems starting WLS 7 server ... checkLicense NullPointerException

Hi there,
We have a clustered environment running WebLogic Server 7.0 Service Pack 4. In our cluster we're running two WLS instances essentially as webservers, to serve up static content.
Starting and stopping the WLS instances is done using scripts written by a group of now-departed developers (we are not using NodeManager).
The problem that we're having is that the "webserver" instances are very difficult to start up, and may require seven or eight attempts to start properly. Most of the time, we see the following NullPointerException in the server log:
====================================================
<9-Nov-04 12:36:30 EST PM> <Notice> <WebLogicServer> <000360> <Server started in RUNNING mode>
<9-Nov-04 12:36:30 EST PM> <Emergency> <WebLogicServer> <000209> <ListenThread.run() failed: java.lang.NullPointerException
java.lang.NullPointerException
at weblogic.t3.srvr.ListenThread.checkLicense(ListenThread.java:595)
at weblogic.t3.srvr.ListenThread.run(ListenThread.java:333)
>
<9-Nov-04 12:36:30 EST PM> <Emergency> <WebLogicServer> <000210> <The WebLogic Server is no longer listening for connections. You should probably restart it.>
====================================================
If WebLogic was having a hard time finding the license.bea file, I would expect that something more user-friendly than a NullPointerException would occur. Also, a simple problem with locating the license file doesn't really explain why the server eventually does come up properly, despite the fact that it can sometimes take many attempts.
Unfortunately, since these servers are running in production we don't have the luxury to start and stop them at will to perform testing.
Does anyone have any hints as to what might be causing this issue? Any advice would be much appreciated.
Regards,
jodym

I'm guess you changed owner of config/mydomain to weblogic? To
confirm - try touching/create a test file in config/mydomain,
i.e. touch mytest.perm;ls -l mytest.perm;rm mytest.perm
You could start weblogic with truss:
truss -t open -o /tmp/truss.out -f "your start command"
Then examine /tmp/truss.out
"Dariusz" <[email protected]> wrote in message news:<3d08b130$[email protected]>...
I have installed WLS in the sun solaris machine and have problems starting up a mydomain
test server. I am getting:
weblogic.management.configuration.ConfigurationException: - with nested exception:
[weblogic.security.internal.FileUtilsException: couldn't create temporary file for
SerializedSystemIni.dat, .new, /config/mydomain - with nested exception:
[java.io.IOException: No such file or directory]]
I am suspecting the problem might be that we have installed it as root and then change
the rights to weblogic. Any pointers are greatly appreciated.
Thanks.

Forefront Server Protection 2010 for Exchange: Notifications behaving differently on E2007/2010

Hi all and happy holidays:
I have this particular situation with two client FSPE implementations recently.
I got one one client with a single E2007 server with FSPE v.11.0.713.0 and another one with a single E2010 server with FSPE v.11.0.713.0. I configured 'Keyword Filter Match' email notifications to Administrators and, to Internal Senders notifying them
not to use certain keywords in the future. The configuration of the notifications is exaclty the same and is using the following fields in the body of the message:
%Product% has detected a blocked keyword match on a message you sent.
      Filter Name: "%Filter%"
      State: "%State%"
      Subject line: "%Message%"
      Sender: "%ISAddress%%ESAddress%"
      Recipients: "%IRAddresses%%ERAddresses%"
      Scan job: "%ScanJob%"
      Location: "%Company%/%Site%/%Server% (%Folder%)"
Certain kewords are not allowed through this mail system as they may be offensive to others. Please refrain from using this word(s) in the future. If you believe you received this in error, contact your system administrator.
Notifications are working great, detecting when a user is Internal Sender and delivering the message correctly but here's the issue:
1. On the E2007 system, when the user/administrator get the notification from FSPE, the %Filter% field it displays the actual keyword that that was used:
Microsoft Forefront Protection for Exchange Server has detected a keyword filter match.
Filter name: "English Profanity: <RealUglyWord>;English Profanity: <RealUglyWord>"
2. On the E2010 system however, when the user/administrator get the email notifications, the %Filter% field only displays the name of the keyword list:
Microsoft Forefront Protection for Exchange Server has detected a keyword filter match.
      Filter Name: "English Profanity"
No biggie you may think but, the issue is that the user has no way to know for sure which words should not use. Of course they can call the Administrator but this will cause uneeded calls to the helpdesk IMO. In the case of English profanity, it may
be obvious but, in the case of other keyword lists, it may not be so obvious. For example, I also have another keyword list blocking racist terms. To some people the word 'gringo' may be offensive, but not to others. IMO, it should not be used
at all, and I am hispanic. In any case, the user needs to know for sure which words are being blocked and not to use it IAW company policy and know that the message was not delivered. Similar keyword lists are in use on both clients for "Spam-like
language', 'Sexual harassment', etc, etc so, this is an important client requierement and part of their 'Suitable Working Envrionment' policy and enforcement.
Hope anybody has any ideas on how to fix it.
Regards,
Fred Larracuente

Remove filter name from the notification area

Problem starting Microsoft Forefront Server Protection Eventing Service?

Similar Messages

Maybe you are looking for