The DPMRA service terminated unexpectedly. It has done this 332 time(s)."

Hi,
We’ve been having problems with our DPM backups. We’re running DPM 2012 SP1 on Server 2008 R2 SP1.
In short the backup agent seems to crash causing all jobs to error/fail.
I slightly more detailed explanation of the issue is ….
The critical alert says
“The protection agent on MYSERVERNAME was temporarily unable to respond because it was in an unexpected state. (ID 60 Details: Internal error code: 0x809909B0)”
When we look at the System log we have an event id 7034 from the Service Control Manager source with something like
“The DPMRA service terminated unexpectedly. 
It has done this 332 time(s).”
In the Application log we have event id 1000 from the Application Error source
Faulting application name: DPMRA.exe, version: 4.1.3333.0, time stamp: 0x50f5e4f5
Faulting module name: FileWriterHelperPlugin.dll, version: 4.1.3313.0, time stamp: 0x50ad994d
Exception code: 0xc0000005
Fault offset: 0x0000000000062a09
Faulting process id: 0x1a94
Faulting application start time: 0x01ce5636b3b19038
Faulting application path: C:\Program Files\Microsoft DPM\DPM\bin\DPMRA.exe
Faulting module path: C:\Program Files\Microsoft DPM\DPM\bin\FileWriterHelperPlugin.dll
Report Id: e814c3af-c22a-11e2-a2b8-826b64169df1
After looking in the DPMRACurr.errlog I found a “CRITICAL Raising Watson for process” but can’t track down the issue ….
1A94      2320      
05/21     15:27:08.284      
31          
vsssnapshotrequestor.cpp(712)               
[0000000002EB93B0]      
NORMAL             
CVssSnapshotRequestor::StartDoSnapshot [0000000002EB93B0]
1A94      2320      
05/21     15:27:10.312      
31          
vssbaserequestor.cpp(944)        
[0000000002EB93B0]                      
NORMAL               
QueryStatus returned 0x4230a, Releasing VssAsync [0000000000BE7030]
1A94      2320      
05/21     15:27:10.312      
31          
vssbaserequestor.cpp(1068)     
[0000000002EB93B0]                      
NORMAL               
CVssBaseRequestor::StartGatherWriterStatus [0000000002EB93B0]
1A94      2320      
05/21     15:27:11.326      
31          
vssbaserequestor.cpp(944)        
[0000000002EB93B0]                      
NORMAL               
QueryStatus returned 0x4230a, Releasing VssAsync [0000000000BE7030]
1A94      2320      
05/21     15:27:11.326      
31          
vsssnapshotrequestor.cpp(747)               
[0000000002EB93B0]      
NORMAL             
CVssSnapshotRequestor::MapVolumesToSnapshotPaths [0000000002EB93B0]
1A94      2320      
05/21     15:27:11.342      
31          
vsssnapshotrequestor.cpp(767)               
[0000000002EB93B0]      
NORMAL             
CVssSnapshotRequestor:: ProviderId:[{B5946137-7B9F-4925-AF80-51ABD60B20D5}], h/w provider:[0], volume:[\\?\Volume{7d4bcb2f-275e-11e0-afde-c2fd68da2b37}\]
1A94      2320      
05/21     15:27:11.498      
31          
vssbaserequestor.cpp(1101)     
[0000000002EB93B0]                      
NORMAL               
CVssBaseRequestor::CheckWriterStatus [0000000002EB93B0]
1A94      2320      
05/21     15:27:11.498      
31          
vssbaserequestor.cpp(1132)     
[0000000002EB93B0]                      
NORMAL               
Checking Writer status for writerid: {0074A271-4F24-43E0-9EC7-28A44189CB80}                                      
writerName: DPM Writer
1A94      05F0      
05/21     15:27:11.701      
18          
incompatiblefiltersfinder.cpp(171)                        
150ACB1B-1308-494F-8145-D1BBC50308EA  NORMAL             
No Incompatible Service Groups. Hence no incompatible filters
1A94      05F0      
05/21     15:27:11.701      
31          
basewriterbackuphelper.cpp(178)         
[0000000002FF9150]      
150ACB1B-1308-494F-8145-D1BBC50308EA NORMAL             
SetSystemFlags(0)
1A94      05F0      
05/21     15:27:11.701      
18          
dsmsendersubtaskbase.cpp(47)              
[0000000002EE0FB0]      
150ACB1B-1308-494F-8145-D1BBC50308EA NORMAL             
CDsmSenderSubTaskBase: constructor [0000000002EE0FB0] openovl[0000000002EE1120] msgovl[0000000002EE1220] closeovl[0000000002EE1170]
1A94      05F0      
05/21     15:27:11.701      
31          
vsssnapshotrequestor.cpp(1276)                            
150ACB1B-1308-494F-8145-D1BBC50308EA  NORMAL             
ssLocalVolumeGuid = [\\?\Volume{7d4bcb2f-275e-11e0-afde-c2fd68da2b37}\], ssClusterVolGuid=[\\?\Volume{7d4bcb2f-275e-11e0-afde-c2fd68da2b37}\]
1A94      05F0      
05/21     15:27:11.701      
31          
basewriterbackuphelper.cpp(370)                         
150ACB1B-1308-494F-8145-D1BBC50308EA  WARNING          
Assertion Failure :: false
1A94      05F0      
05/21     15:27:11.701      
31          
basewriterbackuphelper.cpp(317)                         
150ACB1B-1308-494F-8145-D1BBC50308EA  WARNING          
Assertion Failure :: pConfigureInfo != NULL
1A94      05F0      
05/21     15:27:11.701      
22          
watsonintegration.cpp(73)                        
150ACB1B-1308-494F-8145-D1BBC50308EA  NORMAL             
Inside Watson Handler
1A94      05F0      
05/21     15:27:11.701      
22          
watsonintegration.cpp(116)                      
150ACB1B-1308-494F-8145-D1BBC50308EA  CRITICAL             
Raising Watson for process
299C      2860      
05/21     15:28:03.736      
03          
timer.cpp(490)                                 
ACTIVITY             
CTimerMgr::TimerThread
299C      2860      
05/21     15:28:03.736      
03          
timer.cpp(503)  [0000000000449D50]                      
ACTIVITY               
CTimerMgr::TimerThreadInternal
299C      2728      
05/21     15:28:03.741      
03          
runtime.cpp(782)           
[000000000044D3F0]                      
ACTIVITY               
InitializeSecurity found 3 authorized entities
299C      2728      
05/21     15:28:03.742      
03          
runtime.cpp(841)           
[000000000044D3F0]                      
ACTIVITY               
InitializeSecurity added COM perm for DPMRADCOMTrustedMachines
299C      2728      
05/21     15:28:03.742      
03          
runtime.cpp(841)           
[000000000044D3F0]                      
ACTIVITY               
InitializeSecurity added COM perm for DPMRATrustedDPMRAs
299C      2728      
05/21     15:28:03.743      
03          
runtime.cpp(848)           
[000000000044D3F0]                      
ACTIVITY               
InitializeSecurity added DM perm for DPMRADmTrustedMachines
299C      2728      
05/21     15:28:03.743      
03          
runtime.cpp(94)                                              
NORMAL             
Found 1 writer account(s) under VSS access control.
299C      2728      
05/21     15:28:03.743      
03          
runtime.cpp(162)                                           
NORMAL             
Added writer account [0] 'NT Authority\NetworkService' to the DACL.
299C      2728      
05/21     15:28:03.749      
22          
genericthreadpool.cpp(824)      
[000000000044D3F0]                      
NORMAL               
Hr: = [0x80070002] CGenericThreadPool::m_dwMaximumNumberOfThreads[20]
299C      2728      
05/21     15:28:03.758      
20          
commengine.cpp(345)  [00000000004C4650]                      
ACTIVITY             
Hr: = [0x00000000] ConnectionNoActivityTimeout: 7200
299C      2728      
05/21     15:28:03.759      
20          
commengine.cpp(359)  [00000000004C4650]                      
ACTIVITY             
Hr: = [0x00000000] m_dwConnectionNoActivityTimeoutForSlowReceiver: 7200
299C      2BE4     
05/21     15:28:03.764      
03          
timer.cpp(490)                                 
ACTIVITY             
CTimerMgr::TimerThread
299C      2BE4     
05/21     15:28:03.764      
03          
timer.cpp(503)  [000000000021FA58]                      
ACTIVITY               
CTimerMgr::TimerThreadInternal
299C      2728      
05/21     15:28:03.765      
29          
dpmra.cpp(160)               
[0000000000448CB0]                      
NORMAL               
CDPMRA::Initialize [0000000000448CB0]
299C      2728      
05/21     15:28:03.765      
31          
vaagent.cpp(227)                                            
NORMAL             
CVAAgent: Initialize globals
299C      2728      
05/21     15:28:03.777      
29          
mta.cpp(126)                                    
ACTIVITY               
CMTA::AddSchemasToSchemaCache => Initialize loaded schemas
299C      2728      
05/21     15:28:03.791      
29          
dpmra.cpp(178)               
[0000000000448CB0]                      
NORMAL               
CDPMRA::Initialize loaded schemas
299C      2728      
05/21     15:28:03.791      
22          
genericthreadpool.cpp(75)        
[000000000021FD90]                      
NORMAL               
CGenericThreadPool: constructor
299C      2728      
05/21     15:28:03.791      
22          
genericthreadpool.cpp(824)      
[000000000021FD90]                      
NORMAL               
Hr: = [0x80070002] CGenericThreadPool::m_dwMaximumNumberOfThreads[256]
299C      2728      
05/21     15:28:03.792      
29          
dpmra.cpp(265)               
[0000000000448CB0]                      
NORMAL               
CreateDefaultSubTask [0000000000448CB0]
299C      2728      
05/21     15:28:03.792      
29          
dpmra.cpp(188)               
[0000000000448CB0]                      
NORMAL               
Temporary storage path reg key found
299C      2728      
05/21     15:28:03.792      
29          
dpmra.cpp(204)               
[0000000000448CB0]                      
NORMAL             
MTA Temp location Path = [c:\Program Files\Microsoft DPM\DPM\temp\MTA\]
299C      2728      
05/21     15:28:03.792      
29          
mta.cpp(209)                                    
NORMAL             
Hr: = [0x80070005] CMTA::Initialize => Could not delete file = [c:\Program Files\Microsoft DPM\DPM\temp\MTA\PSInfo]
299C      2728      
05/21     15:28:03.793      
29          
mtamethrottlehelper.cpp(113) [00000000029987E0]                      
NORMAL               
Hr: = [0x80070002] Number of encryption threads = [2]
299C      2728      
05/21     15:28:03.793      
03          
datasourceresourcelimit.cpp(132)          
[000000000044D9F0]      
NORMAL             
Resource Limit Config File: c:\Program Files\Microsoft DPM\DPM\bin\DsResourceLimits.xml
299C      2728      
05/21     15:28:03.794      
03          
datasourceresourcelimit.cpp(138)          
[000000000044D9F0]      
NORMAL             
Loaded DS Resource Limits
299C      2728      
05/21     15:28:03.794      
03          
service.cpp(298)             
[00000000000FFD80]                      
ACTIVITY               
CService::AnnounceServiceStatus
299C      0758      
05/21     15:28:03.827      
03          
runtime.cpp(1376)         
[000000000044D3F0]      
150ACB1B-1308-494F-8145-D1BBC50308EA  FATAL  
Subtask failure, sending status response XML=[<?xml version="1.0"?>
We’ve since raised a ticket with Microsoft Support but I’m told the System Centre Developer support team are experiencing high call volumes so I’m hoping someone else might be able to point me in the right direction.
We do have a SCOM agent installed but have disabled it and still get the issue :o(
Any ideas of what else to look at?
Thanks,
John

Did you ever receive an answer back on this? I have almost the exact same issue. I have DPM 2012 Sp1 Update Roll up 5 on Server 2012. Backup jobs will work on a particular server for a couple after forcing synchronization but then all jobs begin to fail.
On the DPM Server I will get: The protection agent on server.domain.local was temporarily unable to respond because it was in an unexpected state. (ID: 60) On the Protected computer in the Event Viewer system log I get: Service Control Manager Event ID: 7034
Description: The DPMRA service terminated unexpectedly.  It has done this 688+ time(s).
On the Protected computer under C:\Program Files\Microsoft Data Protection Manager\DPM\Temp I have quite a few error crash logs. Here are some of them.
1318       0C14      03/17     15:47:04.123       03           runtime.cpp(1376)         
[008E7060]          60111D39-34B2-4135-BAC2-7AC4368141A3  FATAL   Subtask failure, sending status response XML=[<?xml version="1.0"?>
1318       0C14      03/17     15:47:04.123       03           runtime.cpp(1376)         
[008E7060]          60111D39-34B2-4135-BAC2-7AC4368141A3  FATAL   <Status xmlns="http://schemas.microsoft.com/2003/dls/StatusMessages.xsd" StatusCode="-2137454160" Reason="Error" CommandID="RACancelAllSubTasks"
CommandInstanceID="23976afc-34bc-4d3c-99ea-996bdb34ce99" GuidWorkItem="97a32e51-07f8-4bb2-a292-dcd433b2472b" TETaskInstanceID="60111d39-34b2-4135-bac2-7ac4368141a3"><ErrorInfo xmlns="http://schemas.microsoft.com/2003/dls/GenericAgentStatus.xsd" ErrorCode="536872913"
DetailedCode="-2137454160" DetailedSource="2"><Parameter Name="AgentTargetServer" Value="bspops001.BSPEnterprise.local"/></ErrorInfo></Status>
1318       0C14      03/17     15:47:04.123       03           runtime.cpp(1376)         
[008E7060]          60111D39-34B2-4135-BAC2-7AC4368141A3  FATAL   ]
1318       0C14      03/17     15:47:04.123       29           radefaultsubtask.cpp(360)          
[00EB4F10]          60111D39-34B2-4135-BAC2-7AC4368141A3      WARNING           Failed: Hr: = [0x809909b0] : CRADefaultSubTask: WorkitemID
does not exist, {97A32E51-07F8-4BB2-A292-DCD433B2472B}
1318       0C14      03/17     15:47:04.123       05           defaultsubtask.cpp(546)              
[00EB4F10]          60111D39-34B2-4135-BAC2-7AC4368141A3      WARNING           Failed: Hr: = [0x809909b0] : Encountered Failure: : lVal
: CommandReceivedSpecific(pCommand, pOvl)
1318       0C14      03/17     15:47:04.123       05           defaultsubtask.cpp(751)              
[00EB4F10]          60111D39-34B2-4135-BAC2-7AC4368141A3      WARNING           Failed: Hr: = [0x809909b0] : Encountered Failure: : lVal
: CommandReceived(pAgentOvl)
1318       0C14      03/17     15:47:04.217       29           radefaultsubtask.cpp(262)          
[00EB4F10]          60111D39-34B2-4135-BAC2-7AC4368141A3      WARNING           CRADefaultSubTask: WorkitemID to delete does not exist,
{97A32E51-07F8-4BB2-A292-DCD433B2472B}
1318       0C14      03/17     15:47:04.217       03           runtime.cpp(1376)         
[008E7060]          60111D39-34B2-4135-BAC2-7AC4368141A3  FATAL   Subtask failure, sending status response XML=[<?xml version="1.0"?>
1318       0C14      03/17     15:47:04.217       03           runtime.cpp(1376)         
[008E7060]          60111D39-34B2-4135-BAC2-7AC4368141A3  FATAL   <Status xmlns="http://schemas.microsoft.com/2003/dls/StatusMessages.xsd" StatusCode="-2137454160" Reason="Error" CommandID="RADeleteWorkItem"
CommandInstanceID="9d7f0075-90a5-4f79-912e-9625fb6ccd76" GuidWorkItem="97a32e51-07f8-4bb2-a292-dcd433b2472b" TETaskInstanceID="60111d39-34b2-4135-bac2-7ac4368141a3"><ErrorInfo xmlns="http://schemas.microsoft.com/2003/dls/GenericAgentStatus.xsd" ErrorCode="536872913"
DetailedCode="-2137454160" DetailedSource="2"><Parameter Name="AgentTargetServer" Value="bspops001.BSPEnterprise.local"/></ErrorInfo></Status>
1318       0C14      03/17     15:47:04.217       03           runtime.cpp(1376)         
[008E7060]          60111D39-34B2-4135-BAC2-7AC4368141A3  FATAL   ]
1318       0C14      03/17     15:47:04.217       29           radefaultsubtask.cpp(263)          
[00EB4F10]          60111D39-34B2-4135-BAC2-7AC4368141A3      WARNING           Failed: Hr: = [0x809909b0] : Encountered Failure: : lVal
: (HRESULT)0x809909B0
1318       0C14      03/17     15:47:04.217       05           defaultsubtask.cpp(546)              
[00EB4F10]          60111D39-34B2-4135-BAC2-7AC4368141A3      WARNING           Failed: Hr: = [0x809909b0] : Encountered Failure: : lVal
: CommandReceivedSpecific(pCommand, pOvl)
1318       0C14      03/17     15:47:04.217       05           defaultsubtask.cpp(751)              
[00EB4F10]          60111D39-34B2-4135-BAC2-7AC4368141A3      WARNING           Failed: Hr: = [0x809909b0] : Encountered Failure: : lVal
: CommandReceived(pAgentOvl)
1318       0C14      03/17     15:47:04.685       03           workitem.cpp(86)           
[00E9CED4]         F94114B7-BA2F-46A3-8133-D1B358E78670   ACTIVITY              Idle Timer created with timeout = 390000
1318       0C14      03/17     15:47:04.982       05           xmlprocessingutils.cpp(1469)                    
F94114B7-BA2F-46A3-8133-D1B358E78670   WARNING           Failed: Hr: = [0x80070057] : Encountered Failure: : lVal : E_INVALIDARG
1318       0C14      03/17     15:47:04.998       31           vadatasourcestate.cpp(747)                      
F94114B7-BA2F-46A3-8133-D1B358E78670   WARNING           Failed: Hr: = [0x8007007e] GetModuleHandle failed for Library [FileWriterHelperPlugin], will try LoadLibrary
0000       0C14      03/17     15:47:04.998       00           fsutils.cpp(4750)                              
F94114B7-BA2F-46A3-8133-D1B358E78670   NORMAL             CClientReadThrottler::InitializeWaitForClientRead Failed to read sleep time from registry [hr = 0xdf9690]. Setting default [50 ms].
1318       0C14      03/17     15:47:05.014       31           dllmain.cpp(36)                
F94114B7-BA2F-46A3-8133-D1B358E78670                NORMAL             FileWriterHelperPlugin: DLL_PROCESS_ATTACH
1318       17B8      03/17     15:47:05.014       31           basewriterbackuphelper.cpp(159)          
[00EC5A28]         F94114B7-BA2F-46A3-8133-D1B358E78670 NORMAL             SetOperationType(2)
1318       17B8      03/17     15:47:05.014       22           watsonintegration.cpp(73)                         
F94114B7-BA2F-46A3-8133-D1B358E78670   NORMAL             Inside Watson Handler
1318       17B8      03/17     15:47:05.014       22           watsonintegration.cpp(116)                       
F94114B7-BA2F-46A3-8133-D1B358E78670   CRITICAL              Raising Watson for process
0628       04D0      03/17     15:48:04.827       03          
timer.cpp(490)                                  ACTIVITY               
CTimerMgr::TimerThread

Similar Messages

  • How to resolve error 'The DPMRA service terminated with service-specific error Only one usage of each socket address (protocol/network address/port) is normally permitted'

    One of my exchange 2010 servers dpm agent is give the following error when the dpmra service attempts to start.
    The DPMRA service terminated with service-specific error Only one usage of each socket address (protocol/network address/port) is normally permitted..
    I have tried uninstalling/reinstalling the agent but this does not resolve the issue
    Any help would be greatly appreciated.
    Thanks
    William Hickson

    Hi
    Something has probably changed on the protected server side that affects the DPM agent. In some cases the DCOM configuration could change. Look at this blogpost and verify your DPMRA DCOM object.
    http://robertanddpm.blogspot.com/2010/08/dpm-ra-rights.html
    If this doesn't do the trick try reinstall the agent.
    Best Regards
    Robert Hedblom
    MVP DPM
    Check out my DPM blog @ http://robertanddpm.blogspot.com

  • Event 7024 The DPMRA service terminated with the following service-specific error:

    Hi
    I am getting a DPMRA error on an Exchange 2013 Server.
    Event 7024, Service Control Manager
    The DPMRA service terminated with the following service-specific error:
    An attempt was made to access a socket in a way forbidden by its access permissions.
    I think I have fixed the issue by uninstalling the DPM Agent and reinstalling it. It now  needs a restart (I will do this after hours)
    Is there a better way of fixing an issue like this?

    Hi
    Something has probably changed on the protected server side that affects the DPM agent. In some cases the DCOM configuration could change. Look at this blogpost and verify your DPMRA DCOM object.
    http://robertanddpm.blogspot.com/2010/08/dpm-ra-rights.html
    If this doesn't do the trick try reinstall the agent.
    Best Regards
    Robert Hedblom
    MVP DPM
    Check out my DPM blog @ http://robertanddpm.blogspot.com

  • The DPM service terminated unexpectedly during completion of the job. The termination may have been caused by a system reboot. (ID 910)

    The DPM service terminated unexpectedly during completion of the job. The termination may have been caused by a system reboot. (ID 910)
    No idea what happen and how to fix this?

    I still got this on full backup to tape, anyone experienced this issue?

  • TS1424 I am trying to download a song and it gets to about 3.5mb and stops, then starts all over again. It has done this several times. Could the file be corrupt?

    I am trying to download a song and it gets to about 3.5mb and stops, then starts all over again. It has done this several times. Could the file be corrupt?

    Turn off the Firewall in System Preferences > Security (or Securtiy & Privacy) > Firewall
    If you have anti virus software installed, you may need to disable that before downloading.
    Restart your Mac and try again.

  • DPM AccessManager Service terminated unexpectedly. It has done this x time(s). Event ID 7034

    I had this error happen with System Center DPM 2012 R2 and it happened while working with my Quantum Superloader 3 when I try to re-catalog a tape.  When I looked into the DPM logs at C:\Program Files\Microsoft System Center 2012 R2\DPM\DPM\Temp\DPMAccessManagerCurr.errlog,
    I see at the end of the log the line "WARNING
    Caught exception - System.IndexOutOfRangeException: Index was outside the bounds of the array."
    When I googled that exception with the acronym "DPM", I found that there is an error that can be fixed by running this query against your DPM database in SQL management studio (must include all lines in the query).
    delete from dbo.tbl_MM_MediaMap
    Where DatasetID in (select DatasetId from dbo.tbl_MM_PhysicalDataset 
    where ExternalDatasetInformationId IS NOT NULL)
    delete from dbo.tbl_MM_PhysicalDataset
    where ExternalDatasetInformationId IS NOT NULL
    Delete from dbo.tbl_MM_ExternalDatasetInformation
    where dependantdatasetid IS NULL
    I hope this saves someone time.  It took me 2 hours to track down the issue.
    Here's the link to the Technet article that I found for reference:
    http://social.technet.microsoft.com/Forums/en-US/e9f4801e-6a6f-440f-ad05-65758007db69/dpm-2012-r2-ru2-kb2958100-dpm-accessmanager-service-crash?forum=dataprotectionmanager&prof=required

    Some people also reported that everything worked fine after simply running DPM management shell and using the command "dpmsync -sync".  This did not work for me.

  • Firefox 17 keeps crashing on my brand new computer. It has done this 9 times in the past 10 days which I find unacceptable.

    I am hoping someone can help me solve this problem.

    '''Try the Firefox Safe Mode''' to see how it works there. The Safe Mode is a troubleshooting mode, which disables most add-ons.''
    ''(If you're not using it, switch to the Default theme.)''
    * You can open the Firefox 4.0+ Safe Mode by holding the '''Shift''' key when you use the Firefox desktop or Start menu shortcut.
    * Or use the Help menu item and click on the '''Restart with Add-ons Disabled...''' menu item while Firefox is running.
    ''Don't select anything right now, just use "'Start in Safe Mode"''
    ''To exit the Firefox Safe Mode, just close Firefox and wait a few seconds before using the Firefox shortcut (without the Shift key) to open it again.''
    '''''If it is good in the Firefox Safe Mode''''', your problem is probably caused by an extension, and you need to figure out which one.
    Please follow the [[Troubleshooting extensions and themes]] article for that.
    ''When you figure out what's causing your issues, please let us know. It might help other users who have the same problem.''

  • Event ID 7031 followed by 7032 The Microsoft Exchange Transport service terminated unexpectedly.

    Hello
    Have a strange problem that reoccurs every day. The following are recorded in the log.
    7031
    The Microsoft Exchange Transport service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 5000 milliseconds: Restart the service.7032The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Microsoft Exchange Transport service, but this action failed with the following error:
    An instance of the service is already running.Any suggestions are welcome./Deland
    /Andreas

    Here are the result from the level 5 logging. I Havent disabled the TransportAgent yet.
    Log Name:      Application
    Source:        MSExchangeTransport
    Date:          2013-07-19 10:13:25
    Event ID:      12025
    Task Category: TransportService
    Level:         Warning
    Keywords:      Classic
    User:          N/A
    Computer:      XXXX
    Description:
    Transport service is disconnecting performance counters with process lifetime from their old process.
    Followed by 32 events of 12028
    Log Name:      Application
    Source:        MSExchangeTransport
    Date:          2013-07-19 10:13:25
    Event ID:      12028
    Task Category: TransportService
    Level:         Warning
    Keywords:      Classic
    User:          N/A
    Computer:      XXXX
    Description:
    The process with process ID 1100 is holding the performance counter configuration cache total requests Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062 from instance transportrules(B1D082BB) RefCount=0 SpinLock=0 Offset=3936
    and category MSExchangeTransport Configuration Cache while running processes are: Processes running are:
    6300 UMWorkerProcess
    5312 Microsoft.Exchange.ServiceHost
    1568 Microsoft.Exchange.Diagnostics.Service
    2212 WMSvc
    776 svchost
    1760 MSExchangeHMHost
    9808 MSExchangeDelivery
    376 explorer
    2252 Microsoft.Exchange.Directory.TopologyService
    9436 rundll32
    1752 nscp
    2932 noderunner
    6076 MSExchangeSubmission
    7056 scanningprocess
    1736 PccNtMon
    1340 fms
    4688 MSExchangeTransport
    1732 Ntrtscan
    2716 MSExchangeMailboxAssistants
    548 winlogon
    9016 TmProxy
    348 svchost
    2904 SMSvcHost
    1524 inetinfo
    8376 TMBMSRV
    5264 MSExchangeThrottling
    12552 powershell
    4080 w3wp
    1124 svchost
    7688 svchost
    12744 w3wp
    332 smss
    1316 svchost
    13188 mmc
    5772 ForefrontActiveDirectoryConnector
    3080 HostedAgent
    11364 conhost
    3268 w3wp
    1060 svchost
    2924 noderunner
    904 dwm
    3856 w3wp
    504 wininit
    7200 Microsoft.Exchange.Store.Worker
    1668 SMSvcHost
    4832 MSExchangeFrontendTransport
    2072 sftracing
    4932 MSExchangeMailboxReplication
    7192 Microsoft.Exchange.Store.Worker
    6992 Microsoft.Exchange.UM.CallRouter
    9640 w3wp
    9204 svchost
    3244 svcGenericHost
    1200 Microsoft.Exchange.Store.Service
    876 svchost
    10724 rundll32
    3040 conhost
    2480 w3wp
    5992 MSExchangeTransportLogSearch
    596 services
    12508 w3wp
    2636 MSExchangeHMWorker
    11892 taskhostex
    4796 Microsoft.Exchange.Search.Service
    3568 WmiPrvSE
    12532 ServerManager
    9564 msdtc
    4352 Microsoft.Exchange.EdgeSyncSvc
    2032 mqsvc
    6560 scanningprocess
    3404 TmListen
    4384 updateservice
    3004 scanningprocess
    6744 umservice
    1424 hostcontrollerservice
    828 svchost
    432 csrss
    696 svchost
    1284 spoolsv
    8152 w3wp
    3576 w3wp
    1264 svchost
    496 csrss
    5928 Microsoft.Exchange.RpcClientAccess.Service
    2972 noderunner
    2380 conhost
    604 lsass
    6884 Microsoft.Exchange.Store.Worker
    10056 WmiPrvSE
    992 svchost
    2764 noderunner
    5324 msexchangerepl
    4 System
    3548 Microsoft.Exchange.AntispamUpdateSvc
    2168 svchost
    0 Idle
    And 28 events on 106
    Log Name:      Application
    Source:        MSExchange Common
    Date:          2013-07-19 10:13:29
    Event ID:      106
    Task Category: General
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      XXXX
    Description:
    Performance counter updating error. Counter name is DataRow seeks total, category name is MSExchangeTransport Database. Optional code: 2. Exception: The exception thrown is : System.InvalidOperationException: Instance '_total' already exists with a lifetime
    of Process.  It cannot be recreated or reused until it has been removed or until the process using it has exited.
       at System.Diagnostics.SharedPerformanceCounter.FindInstance(Int32 instanceNameHashCode, String instanceName, CategoryEntry* categoryPointer, InstanceEntry** returnInstancePointerReference, Boolean activateUnusedInstances, PerformanceCounterInstanceLifetime
    lifetime, Boolean& foundFreeInstance)
       at System.Diagnostics.SharedPerformanceCounter.GetCounter(String counterName, String instanceName, Boolean enableReuse, PerformanceCounterInstanceLifetime lifetime)
       at System.Diagnostics.SharedPerformanceCounter..ctor(String catName, String counterName, String instanceName, PerformanceCounterInstanceLifetime lifetime)
       at System.Diagnostics.PerformanceCounter.InitializeImpl()
       at System.Diagnostics.PerformanceCounter.get_RawValue()
       at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.get_RawValue()
    Last worker process info : System.ArgumentException: Process with an Id of 14868 is not running.
       at System.Diagnostics.Process.GetProcessById(Int32 processId)
       at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.GetLastWorkerProcessInfo()
    Processes running while Performance counter failed to update:
    6300 UMWorkerProcess
    5312 Microsoft.Exchange.ServiceHost
    1568 Microsoft.Exchange.Diagnostics.Service
    2212 WMSvc
    776 svchost
    1760 MSExchangeHMHost
    9808 MSExchangeDelivery
    376 explorer
    2252 Microsoft.Exchange.Directory.TopologyService
    9436 rundll32
    1752 nscp
    2932 noderunner
    10416 EdgeTransport
    6076 MSExchangeSubmission
    7056 scanningprocess
    1736 PccNtMon
    1340 fms
    4688 MSExchangeTransport
    1732 Ntrtscan
    2716 MSExchangeMailboxAssistants
    548 winlogon
    9016 TmProxy
    348 svchost
    2904 SMSvcHost
    1524 inetinfo
    15116 conhost
    8376 TMBMSRV
    5264 MSExchangeThrottling
    12552 powershell
    4080 w3wp
    1124 svchost
    7688 svchost
    12744 w3wp
    332 smss
    1316 svchost
    13188 mmc
    5772 ForefrontActiveDirectoryConnector
    3080 HostedAgent
    11364 conhost
    3268 w3wp
    1060 svchost
    2924 noderunner
    904 dwm
    3856 w3wp
    504 wininit
    7200 Microsoft.Exchange.Store.Worker
    1668 SMSvcHost
    4832 MSExchangeFrontendTransport
    2072 sftracing
    4932 MSExchangeMailboxReplication
    7192 Microsoft.Exchange.Store.Worker
    6992 Microsoft.Exchange.UM.CallRouter
    9640 w3wp
    9204 svchost
    3244 svcGenericHost
    1200 Microsoft.Exchange.Store.Service
    876 svchost
    10724 rundll32
    3040 conhost
    2480 w3wp
    5992 MSExchangeTransportLogSearch
    596 services
    12508 w3wp
    2636 MSExchangeHMWorker
    11892 taskhostex
    4796 Microsoft.Exchange.Search.Service
    3568 WmiPrvSE
    12532 ServerManager
    9564 msdtc
    4352 Microsoft.Exchange.EdgeSyncSvc
    2032 mqsvc
    6560 scanningprocess
    3404 TmListen
    4384 updateservice
    3004 scanningprocess
    6744 umservice
    1424 hostcontrollerservice
    828 svchost
    432 csrss
    696 svchost
    1284 spoolsv
    8152 w3wp
    3576 w3wp
    1264 svchost
    496 csrss
    5928 Microsoft.Exchange.RpcClientAccess.Service
    2972 noderunner
    2380 conhost
    604 lsass
    6884 Microsoft.Exchange.Store.Worker
    10056 WmiPrvSE
    992 svchost
    2764 noderunner
    5324 msexchangerepl
    4 System
    3548 Microsoft.Exchange.AntispamUpdateSvc
    2168 svchost
    0 Idle
    Performance Counters Layout information: A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=59 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : queue(B351294)
    RefCount=0 SpinLock=0 Offset=48552, categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : cat event 8(ED0419E7) RefCount=0 SpinLock=0 Offset=44384,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : cat event 6(ED0419E9) RefCount=0 SpinLock=0 Offset=40216,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=4 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : cat event 3(ED0419EC) RefCount=0 SpinLock=0 Offset=36048,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=3 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : cat event 1(ED0419EE) RefCount=0 SpinLock=0 Offset=31880,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=18 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : cat(B874BB3) RefCount=0 SpinLock=0 Offset=27712,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : inqueue(56145953) RefCount=0 SpinLock=0 Offset=23544,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=17 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : smtpin(81392C98) RefCount=0 SpinLock=0 Offset=19376,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : mail(7C6FB7CC) RefCount=0 SpinLock=0 Offset=15208,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=68 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : other(ADC98A1) RefCount=0 SpinLock=0 Offset=11040,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 4832, counter : datarow seeks total Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4832 StartupTime: 130183498009738545, currentInstance : _total(CFBEE918) RefCount=1 SpinLock=0 Offset=32,
    categoryName: MSExchangeTransport Database
    Log Name:      Application
    Source:        MSExchange Common
    Date:          2013-07-19 10:13:31
    Event ID:      106
    Task Category: General
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      XXXX
    Description:
    Performance counter updating error. Counter name is Transaction Durable Callback Count/sec, category name is MSExchangeTransport Database. Optional code: 1. Exception: The exception thrown is : System.InvalidOperationException: Instance '_total' already exists
    with a lifetime of Process.  It cannot be recreated or reused until it has been removed or until the process using it has exited.
       at System.Diagnostics.SharedPerformanceCounter.FindInstance(Int32 instanceNameHashCode, String instanceName, CategoryEntry* categoryPointer, InstanceEntry** returnInstancePointerReference, Boolean activateUnusedInstances, PerformanceCounterInstanceLifetime
    lifetime, Boolean& foundFreeInstance)
       at System.Diagnostics.SharedPerformanceCounter.GetCounter(String counterName, String instanceName, Boolean enableReuse, PerformanceCounterInstanceLifetime lifetime)
       at System.Diagnostics.SharedPerformanceCounter..ctor(String catName, String counterName, String instanceName, PerformanceCounterInstanceLifetime lifetime)
       at System.Diagnostics.PerformanceCounter.InitializeImpl()
       at System.Diagnostics.PerformanceCounter.IncrementBy(Int64 value)
       at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.IncrementBy(Int64 incrementValue)
    Last worker process info : System.ArgumentException: Process with an Id of 14868 is not running.
       at System.Diagnostics.Process.GetProcessById(Int32 processId)
       at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.GetLastWorkerProcessInfo()
    Processes running while Performance counter failed to update:
    6300 UMWorkerProcess
    5312 Microsoft.Exchange.ServiceHost
    1568 Microsoft.Exchange.Diagnostics.Service
    2212 WMSvc
    776 svchost
    1760 MSExchangeHMHost
    9808 MSExchangeDelivery
    376 explorer
    2252 Microsoft.Exchange.Directory.TopologyService
    9436 rundll32
    1752 nscp
    2932 noderunner
    10416 EdgeTransport
    6076 MSExchangeSubmission
    7056 scanningprocess
    1736 PccNtMon
    1340 fms
    4688 MSExchangeTransport
    1732 Ntrtscan
    2716 MSExchangeMailboxAssistants
    548 winlogon
    9016 TmProxy
    348 svchost
    2904 SMSvcHost
    1524 inetinfo
    15116 conhost
    8376 TMBMSRV
    5264 MSExchangeThrottling
    12552 powershell
    4080 w3wp
    1124 svchost
    7688 svchost
    12744 w3wp
    332 smss
    1316 svchost
    13188 mmc
    5772 ForefrontActiveDirectoryConnector
    3080 HostedAgent
    11364 conhost
    3268 w3wp
    1060 svchost
    2924 noderunner
    904 dwm
    3856 w3wp
    504 wininit
    7200 Microsoft.Exchange.Store.Worker
    1668 SMSvcHost
    4832 MSExchangeFrontendTransport
    2072 sftracing
    4932 MSExchangeMailboxReplication
    7192 Microsoft.Exchange.Store.Worker
    6992 Microsoft.Exchange.UM.CallRouter
    9640 w3wp
    9204 svchost
    3244 svcGenericHost
    1200 Microsoft.Exchange.Store.Service
    876 svchost
    10724 rundll32
    3040 conhost
    2480 w3wp
    5992 MSExchangeTransportLogSearch
    596 services
    12508 w3wp
    2636 MSExchangeHMWorker
    11892 taskhostex
    4796 Microsoft.Exchange.Search.Service
    3568 WmiPrvSE
    12532 ServerManager
    9564 msdtc
    4352 Microsoft.Exchange.EdgeSyncSvc
    2032 mqsvc
    6560 scanningprocess
    3404 TmListen
    4384 updateservice
    3004 scanningprocess
    6744 umservice
    1424 hostcontrollerservice
    828 svchost
    432 csrss
    696 svchost
    1284 spoolsv
    8152 w3wp
    3576 w3wp
    1264 svchost
    496 csrss
    5928 Microsoft.Exchange.RpcClientAccess.Service
    2972 noderunner
    2380 conhost
    604 lsass
    6884 Microsoft.Exchange.Store.Worker
    10056 WmiPrvSE
    992 svchost
    2764 noderunner
    5324 msexchangerepl
    4 System
    3548 Microsoft.Exchange.AntispamUpdateSvc
    2168 svchost
    0 Idle
    Performance Counters Layout information: A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=59 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : queue(B351294)
    RefCount=0 SpinLock=0 Offset=48552, categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : cat event 8(ED0419E7) RefCount=0 SpinLock=0 Offset=44384,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : cat event 6(ED0419E9) RefCount=0 SpinLock=0 Offset=40216,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=4 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : cat event 3(ED0419EC) RefCount=0 SpinLock=0 Offset=36048,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=3 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : cat event 1(ED0419EE) RefCount=0 SpinLock=0 Offset=31880,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=18 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : cat(B874BB3) RefCount=0 SpinLock=0 Offset=27712,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : inqueue(56145953) RefCount=0 SpinLock=0 Offset=23544,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 1100, counter : datarow seeks total Value=17 SpinLock=0 Lifetime=Type: 1 ProcessId: 1100 StartupTime: 130186827159405062, currentInstance : smtpin(81392C98) RefCount=0 SpinLock=0 Offset=19376,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 10416, counter : datarow seeks total Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10416 StartupTime: 130186952059962770, currentInstance : mail(7C6FB7CC) RefCount=1 SpinLock=0 Offset=15208,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 10416, counter : datarow seeks total Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10416 StartupTime: 130186952059962770, currentInstance : other(ADC98A1) RefCount=1 SpinLock=0 Offset=11040,
    categoryName: MSExchangeTransport Database
    A process is holding onto a transport performance counter. processId : 4832, counter : datarow seeks total Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 4832 StartupTime: 130183498009738545, currentInstance : _total(CFBEE918) RefCount=1 SpinLock=0 Offset=32,
    categoryName: MSExchangeTransport Database
    Then ESE  Recovery starts on the Transport database. 
    /Andreas

  • The Microsoft Exchange Mailbox Transport Submission service terminated unexpectedly

    Hi, I get following error on my new Exchange 2013 server:
     It has done this 1 time(s).  The following corrective action will be taken in 5000 milliseconds: Restart the service.
    Mailbox database is mounted and contains mailboxes (also system mailbox), ipv6 is enabled on the exchange server.
    Is there any logging I can find to see what's going on actually? The transport service won't start either.

    Hello,
    Could you please check the application log and let us know the related event ID and its details?
    Thanks,
    If you have feedback for TechNet Subscriber Support, contact
    [email protected]
    Simon Wu
    TechNet Community Support

  • Active Directory Web Services service terminated unexpectedly

    Hi everyone:
    I'm having a problem with the Active Directory Web Services service does not start. Attach the event ID:
    Log System:
    Log Name: System
    Source: Service Control Manager
    Date: 1/6/2015 6:55:19 PM
    Event ID: 7034
    Task Category: None
    Level: Error
    Keywords: Classic
    User: N/A
    Computer: xxx.dominio.com
    Description:
    The Active Directory Web Services service terminated unexpectedly. It has done this 35 time(s).
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    <System>
    <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
    <EventID Qualifiers="49152">7034</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2015-01-06T22:55:19.292471600Z" />
    <EventRecordID>32583</EventRecordID>
    <Correlation />
    <Execution ProcessID="556" ThreadID="1388" />
    <Channel>System</Channel>
    <Computer>xxx.dominio.com</Computer>
    <Security />
    </System>
    <EventData>
    <Data Name="param1">Active Directory Web Services</Data>
    <Data Name="param2">35</Data>
    <Binary>41004400570053000000</Binary>
    </EventData>
    </Event>
    Log Application:
    Log Name: Application
    Source: .NET Runtime
    Date: 1/6/2015 6:55:13 PM
    Event ID: 1026
    Task Category: None
    Level: Error
    Keywords: Classic
    User: N/A
    Computer: xxx.dominio.com
    Description:
    Application: Microsoft.ActiveDirectory.WebServices.exe
    Framework Version: v4.0.30319
    Description: The process was terminated due to an unhandled exception.
    Exception Info: System.ServiceModel.CommunicationObjectFaultedException
    Stack:
    at System.ServiceModel.Channels.CommunicationObject.Close(System.TimeSpan)
    at Microsoft.ActiveDirectory.WebServices.WindowsHostService.StartService(System.Object)
    at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
    at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
    at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
    at System.Threading.ThreadHelper.ThreadStart(System.Object)
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    <System>
    <Provider Name=".NET Runtime" />
    <EventID Qualifiers="0">1026</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2015-01-06T22:55:13.000000000Z" />
    <EventRecordID>1661713</EventRecordID>
    <Channel>Application</Channel>
    <Computer>xxx.dominio.com</Computer>
    <Security />
    </System>
    <EventData>
    <Data>Application: Microsoft.ActiveDirectory.WebServices.exe
    Framework Version: v4.0.30319
    Description: The process was terminated due to an unhandled exception.
    Exception Info: System.ServiceModel.CommunicationObjectFaultedException
    Stack:
    at System.ServiceModel.Channels.CommunicationObject.Close(System.TimeSpan)
    at Microsoft.ActiveDirectory.WebServices.WindowsHostService.StartService(System.Object)
    at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
    at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
    at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
    at System.Threading.ThreadHelper.ThreadStart(System.Object)
    </Data>
    </EventData>
    </Event>
    And
    Log Name: Application
    Source: Application Error
    Date: 1/6/2015 6:55:13 PM
    Event ID: 1000
    Task Category: (100)
    Level: Error
    Keywords: Classic
    User: N/A
    Computer: xxx.dominio.com
    Description:
    Faulting application name: Microsoft.ActiveDirectory.WebServices.exe, version: 6.2.9200.16579, time stamp: 0x516356a2
    Faulting module name: KERNELBASE.dll, version: 6.2.9200.16864, time stamp: 0x531d34d8
    Exception code: 0xe0434352
    Fault offset: 0x0000000000047b8c
    Faulting process id: 0x4ac
    Faulting application start time: 0x01d02a03d45e2d00
    Faulting application path: C:\Windows\ADWS\Microsoft.ActiveDirectory.WebServices.exe
    Faulting module path: C:\Windows\system32\KERNELBASE.dll
    Report Id: 1273a0f1-95f7-11e4-93f7-3440b59e2092
    Faulting package full name:
    Faulting package-relative application ID:
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Level>2</Level>
    <Task>100</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2015-01-06T22:55:13.000000000Z" />
    <EventRecordID>1661714</EventRecordID>
    <Channel>Application</Channel>
    <Computer>xxx.dominio.com</Computer>
    <Security />
    </System>
    <EventData>
    <Data>Microsoft.ActiveDirectory.WebServices.exe</Data>
    <Data>6.2.9200.16579</Data>
    <Data>516356a2</Data>
    <Data>KERNELBASE.dll</Data>
    <Data>6.2.9200.16864</Data>
    <Data>531d34d8</Data>
    <Data>e0434352</Data>
    <Data>0000000000047b8c</Data>
    <Data>4ac</Data>
    <Data>01d02a03d45e2d00</Data>
    <Data>C:\Windows\ADWS\Microsoft.ActiveDirectory.WebServices.exe</Data>
    <Data>C:\Windows\system32\KERNELBASE.dll</Data>
    <Data>1273a0f1-95f7-11e4-93f7-3440b59e2092</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    </EventData>
    </Event>
    I was working about this solution but nothing. "http://blogs.microsoft.co.il/yuval14/2012/06/08/how-to-resolve-error-message-the-active-directory-web-services-service-terminated-unexpectedly-event-id-4079-andor-7034/".
    I changed the Microsoft.ActiveDirectory.WebServices.exe.config file, add two line " <add key=”DebugLevel” value=”Info” />
    <add key=”DebugLogFile” value=”c:windowsdebugadws.log” />", Attach the log
    ADWS Log - AppDomain Microsoft.ActiveDirectory.WebServices.exe with ID 1 - 01/06/2015 17:51:37 ((UTC-04:00) Georgetown, La Paz, Manaus, San Juan)
    OS Version Microsoft Windows NT 6.2.9200.0 - CLR Version 4.0.30319.18449
    ADWS: [1/6/2015 5:51:37 PM] [1] Main: entered
    Utils: [1/6/2015 5:51:37 PM] [1] RemovePriviledgeFromProcess: trying to remove priviledge SeBackupPrivilege
    Utils: [1/6/2015 5:51:37 PM] [1] RemovePriviledgeFromProcess: unable to remove SeBackupPrivilege priviledge because it was absent
    Utils: [1/6/2015 5:51:37 PM] [1] RemovePriviledgeFromProcess: trying to remove priviledge SeRestorePrivilege
    Utils: [1/6/2015 5:51:37 PM] [1] RemovePriviledgeFromProcess: unable to remove SeRestorePrivilege priviledge because it was absent
    Utils: [1/6/2015 5:51:37 PM] [1] RemovePriviledgeFromProcess: trying to remove priviledge SeAssignPrimaryTokenPrivilege
    Utils: [1/6/2015 5:51:37 PM] [1] RemovePriviledgeFromProcess: unable to remove SeAssignPrimaryTokenPrivilege priviledge because it was absent
    Utils: [1/6/2015 5:51:37 PM] [1] RemovePriviledgeFromProcess: trying to remove priviledge SeIncreaseQuotaPrivilege
    Utils: [1/6/2015 5:51:37 PM] [1] RemovePriviledgeFromProcess: unable to remove SeIncreaseQuotaPrivilege priviledge because it was absent
    Utils: [1/6/2015 5:51:37 PM] [1] RemovePriviledgeFromProcess: trying to remove priviledge SeDebugPrivilege
    Utils: [1/6/2015 5:51:37 PM] [1] RemovePriviledgeFromProcess: unable to remove SeDebugPrivilege priviledge because it was absent
    Utils: [1/6/2015 5:51:37 PM] [1] RemovePriviledgeFromProcess: trying to remove priviledge SeTcbPrivilege
    Utils: [1/6/2015 5:51:37 PM] [1] RemovePriviledgeFromProcess: unable to remove SeTcbPrivilege priviledge because it was absent
    Utils: [1/6/2015 5:51:37 PM] [1] RemovePriviledgeFromProcess: trying to remove priviledge SeShutdownPrivilege
    Utils: [1/6/2015 5:51:37 PM] [1] RemovePriviledgeFromProcess: unable to remove SeShutdownPrivilege priviledge because it was absent
    Utils: [1/6/2015 5:51:37 PM] [1] RemoveUnnecessaryPriviledges: all present unnecessary priviledges removed successfully
    Program: [1/6/2015 5:51:37 PM] [1] Main: Starting Windows service host.
    WindowsHostService: [1/6/2015 5:51:37 PM] [1] WindowsHostService constructed
    WindowsHostService: [1/6/2015 5:51:37 PM] [4] OnStart: entering.
    WindowsHostService: [1/6/2015 5:51:37 PM] [4] OnStart: ServiceStart thread started.
    WindowsHostService: [1/6/2015 5:51:37 PM] [6] StartService: entering.
    PerfCounters: [1/6/2015 5:51:37 PM] [6] InstallCountersIfNeeded: entered
    PerfCounters: [1/6/2015 5:51:37 PM] [6] AreCountersInstalled: entered
    PerfCounters: [1/6/2015 5:51:37 PM] [6] AreCountersInstalled: System\CurrentControlSet\Services\ADWS key is present
    PerfCounters: [1/6/2015 5:51:37 PM] [6] AreCountersInstalled: System\CurrentControlSet\Services\ADWS\Performance key is present
    PerfCounters: [1/6/2015 5:51:37 PM] [6] AreCountersInstalled: First Counter value is present
    PerfCounters: [1/6/2015 5:51:37 PM] [6] AreCountersInstalled: perf counters are installed
    PerfCounters: [1/6/2015 5:51:37 PM] [6] AreCountersCurrent: installed perf counter version: 6
    PerfCounters: [1/6/2015 5:51:37 PM] [6] AreCountersCurrent: desired perf counter version: 6
    PerfCounters: [1/6/2015 5:51:37 PM] [6] AreCountersCurrent: perf counter category ADWS is current
    PerfCounters: [1/6/2015 5:51:37 PM] [6] InstallCountersIfNeeded: counters already installed and current, no work needed
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Create Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Delete Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Get Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Put Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Enumerate Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Pull Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Open Enumeration Contexts' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'GetADGroupMember Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'GetADPrincipalGroupMembership Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'SetPassword Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'ChangePassword Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'GetADPrincipalAuthorizationGroup Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'TranslateName Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'GetADDomainController Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'GetADDomain Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'MoveADOperationMasterRole Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'GetADForest Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'ChangeOptionalFeature Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'GetVersion Operations Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Number of Directory Instances' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Possible Connections' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Allocated Connections' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Reserved Connections' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Non-reserved Connections In Use' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Reserved Connections In Use' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Open Web Service Sessions' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Active Web Service Sessions' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Web Service Sessions Created Per Second' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Custom Action LDAP Cache Maximum Possible Size' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Custom Action LDAP Cache Connection Creation Rate' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Custom Action LDAP Cache Connection Reuse Rate' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Custom Action DS RPC Cache Maximum Possible Size' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Custom Action DS RPC Cache Connection Creation Rate' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Custom Action DS RPC Cache Connection Reuse Rate' performance counter
    AdwsPerfCounter: [1/6/2015 5:51:37 PM] [6] AdwsPerfCounter: constructed 'Custom Action Cache Size' performance counter
    PerfCounters: [1/6/2015 5:51:37 PM] [6] Initialize: initializing performance counters
    PerfCounters: [1/6/2015 5:51:37 PM] [6] Initialize: all performance counters initialized
    ADWSHost: [1/6/2015 5:51:37 PM] [6] ADWSHost constructed
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] ProvisionCertificate: using host name for certificate name
    Utils: [1/6/2015 5:51:37 PM] [6] GetComputerDnsName: computer name is xxx.dominio.com
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] ProvisionCertificate: using cert name xxx.dominio.com
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] ProvisionCertificate: loaded certificate
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] AddServiceThrottlingBehavior: MaxConcurrentCalls=32, MaxConcurrentSessions=500
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateServiceHost: including UserName endpoints
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateServiceHost: adding endpoints for Windows/
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportBinding: MaxReceivedMessageSize=1048576, ReceiveTimeout=00:10:00
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportBinding: MaxDepth=10, MaxArrayLength=16384, MaxStringContentLength=32768
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportBinding: MaxReceivedMessageSize=1048576, ReceiveTimeout=00:10:00
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportBinding: MaxDepth=10, MaxArrayLength=16384, MaxStringContentLength=32768
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportBinding: MaxReceivedMessageSize=1048576, ReceiveTimeout=00:10:00
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportBinding: MaxDepth=10, MaxArrayLength=16384, MaxStringContentLength=32768
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportBinding: MaxReceivedMessageSize=1048576, ReceiveTimeout=00:10:00
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportBinding: MaxDepth=10, MaxArrayLength=16384, MaxStringContentLength=32768
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportBinding: MaxReceivedMessageSize=1048576, ReceiveTimeout=00:10:00
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportBinding: MaxDepth=10, MaxArrayLength=16384, MaxStringContentLength=32768
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateServiceHost: adding endpoints for UserName/
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportWithMessageCredentialBinding: MaxReceivedMessageSize=1048576, ReceiveTimeout=00:10:00
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportWithMessageCredentialBinding: MaxDepth=10, MaxArrayLength=16384, MaxStringContentLength=32768
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportWithMessageCredentialBinding: MaxReceivedMessageSize=1048576, ReceiveTimeout=00:10:00
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportWithMessageCredentialBinding: MaxDepth=10, MaxArrayLength=16384, MaxStringContentLength=32768
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportWithMessageCredentialBinding: MaxReceivedMessageSize=1048576, ReceiveTimeout=00:10:00
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportWithMessageCredentialBinding: MaxDepth=10, MaxArrayLength=16384, MaxStringContentLength=32768
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportWithMessageCredentialBinding: MaxReceivedMessageSize=1048576, ReceiveTimeout=00:10:00
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportWithMessageCredentialBinding: MaxDepth=10, MaxArrayLength=16384, MaxStringContentLength=32768
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportWithMessageCredentialBinding: MaxReceivedMessageSize=1048576, ReceiveTimeout=00:10:00
    ADWSHostFactory: [1/6/2015 5:51:37 PM] [6] CreateAdwsTransportWithMessageCredentialBinding: MaxDepth=10, MaxArrayLength=16384, MaxStringContentLength=32768
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] StartConfigurationLoading: entered
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] StartConfigurationLoading: establishing watcher on C:\Windows\ADWS\Microsoft.ActiveDirectory.WebServices.exe.Config
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: entered
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: no value specified for InitialPoolConnections, using default value 5
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: using loaded value 10 for MaxPoolConnections
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: using loaded value 50 for MaxPercentageReservedConnections
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: no value specified for MaxReservedIdleTimeout, using default value 00:02:00
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: no value specified for MaxReservedTimeout, using default value 00:30:00
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: using loaded value 5 for MaxConnectionsPerUser
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: no value specified for MaxBindLifetime, using default value 00:15:00
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: no value specified for MaxServerDownRetry, using default value 10
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: no value specified for SyntaxCacheEntryLifetime, using default value 01:00:00
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: using loaded value 00:30:00 for MaxEnumContextExpiration
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: using loaded value 00:02:00 for OperationTimeout
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: using loaded value 00:02:00 for MaxPullTimeout
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: using loaded value 5 for MaxEnumCtxsPerSession
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: using loaded value 100 for MaxEnumCtxsTotal
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: no value specified for CertName, using default value NULL
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: no value specified for MaxGroupOrMemberEntries, using default value 5000
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: no value specified for CustomActionConnectionCount, using default value 10
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: no value specified for CustomActionIdleConnectionTimeout, using default value 00:02:00
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: no value specified for InstanceRediscoveryInterval, using default value 00:01:00
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: using loaded value 32 for MaxConcurrentCalls
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: using loaded value 500 for MaxConcurrentSessions
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: using loaded value Info for DebugLevel
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] LoadConfigSettingsFromFile: using loaded value C:\temp\windowsdebugadws.log for DebugLogFile
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] ValidateSettingLimits: entered
    ClassManager: [1/6/2015 5:51:37 PM] [6] Start: starting...
    LdapSessionPoolImplementation: [1/6/2015 5:51:37 PM] [3] ScavengerThread: thread starting
    LdapSessionPoolImplementation: [1/6/2015 5:51:37 PM] [3] Scavenger: waking up at 00:00:40 interval
    EnumerationContextCache: [1/6/2015 5:51:37 PM] [6] EnumerationContextCache: using timer inverval 00:00:30
    InstanceMap: [1/6/2015 5:51:37 PM] [6] InstanceMap: using timer inverval 00:01:00
    InstanceMap: [1/6/2015 5:51:37 PM] [6] CheckAndLoadAll: beginning
    InstanceMap: [1/6/2015 5:51:37 PM] [6] CheckAndLoadNTDSInstance: entered
    InstanceMap: [1/6/2015 5:51:37 PM] [6] CheckAndLoadNTDSInstance: found NTDS Parameters key
    InstanceMap: [1/6/2015 5:51:37 PM] [6] CheckAndLoadNTDSInstance: trying to change state to DC
    InstanceMap: [1/6/2015 5:51:37 PM] [6] AddRemoveSessionPoolAndDictionaryEntry: trying to change state for identifier ldap:389
    InstanceMap: [1/6/2015 5:51:37 PM] [6] AddSessionPool: adding a session pool for NTDS
    DirectoryDataAccessImplementation: [1/6/2015 5:51:37 PM] [6] InitializeInstance: entering, instance=NTDS, init=5, max=10
    LdapSessionPoolImplementation: [1/6/2015 5:51:37 PM] [6] InitializeInstance: entering, instance=NTDS, init=5, max=10
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] ConnectionPool: trying to add connection 0
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: entering, instance=NTDS
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] ConnectionPoolEntry: connection created
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: grew pool, instance=NTDS, new count=1, max=10
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] ConnectionPool: trying to add connection 1
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: entering, instance=NTDS
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] ConnectionPoolEntry: connection created
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: grew pool, instance=NTDS, new count=2, max=10
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] ConnectionPool: trying to add connection 2
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: entering, instance=NTDS
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] ConnectionPoolEntry: connection created
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: grew pool, instance=NTDS, new count=3, max=10
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] ConnectionPool: trying to add connection 3
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: entering, instance=NTDS
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] ConnectionPoolEntry: connection created
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: grew pool, instance=NTDS, new count=4, max=10
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] ConnectionPool: trying to add connection 4
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: entering, instance=NTDS
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] ConnectionPoolEntry: connection created
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: grew pool, instance=NTDS, new count=5, max=10
    InstanceMap: [1/6/2015 5:51:37 PM] [6] AddRemoveSessionPoolAndDictionaryEntry: state change successful (now hosts identifier ldap:389)
    InstanceMap: [1/6/2015 5:51:37 PM] [6] CheckAndLoadGCInstance: entered
    InstanceMap: [1/6/2015 5:51:37 PM] [6] CheckForGlobalCatalog: entered
    DirectoryUtilities: [1/6/2015 5:51:37 PM] [6] GetTimeRemaining: remaining time is 00:02:00
    InstanceMap: [1/6/2015 5:51:37 PM] [6] CheckForGlobalCatalog: isGlobalCatalogReady: TRUE
    InstanceMap: [1/6/2015 5:51:37 PM] [6] CheckForGlobalCatalog: NTDS Settings DN: CN=NTDS Settings,CN=XXX,CN=Servers,CN=Alpacoma,CN=Sites,CN=Configuration,DC=dominio,DC=com
    DirectoryUtilities: [1/6/2015 5:51:37 PM] [6] GetTimeRemaining: remaining time is 00:02:00
    InstanceMap: [1/6/2015 5:51:37 PM] [6] CheckForGlobalCatalog: options: 1
    InstanceMap: [1/6/2015 5:51:37 PM] [6] CheckAndLoadGCInstance: CheckForGlobalCatalog=True
    InstanceMap: [1/6/2015 5:51:37 PM] [6] CheckAndLoadGCInstance: trying to change state to Global Catalog
    InstanceMap: [1/6/2015 5:51:37 PM] [6] AddRemoveSessionPoolAndDictionaryEntry: trying to change state for identifier ldap:3268
    InstanceMap: [1/6/2015 5:51:37 PM] [6] AddSessionPool: adding a session pool for GC
    DirectoryDataAccessImplementation: [1/6/2015 5:51:37 PM] [6] InitializeInstance: entering, instance=GC, init=5, max=10
    LdapSessionPoolImplementation: [1/6/2015 5:51:37 PM] [6] InitializeInstance: entering, instance=GC, init=5, max=10
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] ConnectionPool: trying to add connection 0
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: entering, instance=GC
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] ConnectionPoolEntry: connection created
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: grew pool, instance=GC, new count=1, max=10
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] ConnectionPool: trying to add connection 1
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: entering, instance=GC
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] ConnectionPoolEntry: connection created
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: grew pool, instance=GC, new count=2, max=10
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] ConnectionPool: trying to add connection 2
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: entering, instance=GC
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] ConnectionPoolEntry: connection created
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: grew pool, instance=GC, new count=3, max=10
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] ConnectionPool: trying to add connection 3
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: entering, instance=GC
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] ConnectionPoolEntry: connection created
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: grew pool, instance=GC, new count=4, max=10
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] ConnectionPool: trying to add connection 4
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: entering, instance=GC
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] ConnectionPoolEntry: connection created
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] AddConnectionIfPossible: grew pool, instance=GC, new count=5, max=10
    InstanceMap: [1/6/2015 5:51:37 PM] [6] AddRemoveSessionPoolAndDictionaryEntry: state change successful (now hosts identifier ldap:3268)
    InstanceMap: [1/6/2015 5:51:37 PM] [6] CheckAndLoadADAMInstances: entered
    InstanceMap: [1/6/2015 5:51:37 PM] [6] CheckAndLoadAll: caught unexpected exception System.IO.IOException: No more data is available.
    at Microsoft.Win32.RegistryKey.Win32Error(Int32 errorCode, String str)
    at Microsoft.Win32.RegistryKey.InternalGetSubKeyNames()
    at Microsoft.ActiveDirectory.WebServices.InstanceMap.DiscoverInstancesFromRegistry(String regRootKey, String regKeyInstancePrefix, Boolean& instanceEncounteredErrorsOnThisRun, List`1 discoveredInstances, DirectoryType directoryType)
    at Microsoft.ActiveDirectory.WebServices.InstanceMap.CheckAndLoadADAMInstances()
    at Microsoft.ActiveDirectory.WebServices.InstanceMap.CheckAndLoadAll()
    ADWSHost: [1/6/2015 5:51:37 PM] [6] OnClosed: entered
    CustomActionCaches: [1/6/2015 5:51:37 PM] [6] StopCaches: disposing Custom Action connection caches
    ClassManager: [1/6/2015 5:51:37 PM] [6] Stop: closing down...
    EnumerationContextCache: [1/6/2015 5:51:37 PM] [6] Dispose: disposing...
    QuotaTracker: [1/6/2015 5:51:37 PM] [6] Clear: clearing all usage
    DirectoryActionImplementation: [1/6/2015 5:51:37 PM] [6] Dispose: disposing...
    DirectoryDataAccessImplementation: [1/6/2015 5:51:37 PM] [6] Dispose: disposing...
    LdapSessionPoolImplementation: [1/6/2015 5:51:37 PM] [6] Dispose: disposing...
    LdapSessionPoolImplementation: [1/6/2015 5:51:37 PM] [3] ScavengerThread: woke up
    LdapSessionPoolImplementation: [1/6/2015 5:51:37 PM] [3] ScavengerThread: received termination signal, exiting
    LdapSessionPoolImplementation: [1/6/2015 5:51:37 PM] [6] Dispose: disposing pool
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] Dispose: disposing (instance=NTDS)...
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] ProhibitConnectionAcquisition: entering, instance=NTDS
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] Dispose: disposing a ConnectionPoolEntry
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] Dispose: disposing...
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] Dispose: disposing a ConnectionPoolEntry
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] Dispose: disposing...
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] Dispose: disposing a ConnectionPoolEntry
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] Dispose: disposing...
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] Dispose: disposing a ConnectionPoolEntry
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] Dispose: disposing...
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] Dispose: disposing a ConnectionPoolEntry
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] Dispose: disposing...
    LdapSessionPoolImplementation: [1/6/2015 5:51:37 PM] [6] Dispose: disposing pool
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] Dispose: disposing (instance=GC)...
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] ProhibitConnectionAcquisition: entering, instance=GC
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] Dispose: disposing a ConnectionPoolEntry
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] Dispose: disposing...
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] Dispose: disposing a ConnectionPoolEntry
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] Dispose: disposing...
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] Dispose: disposing a ConnectionPoolEntry
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] Dispose: disposing...
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] Dispose: disposing a ConnectionPoolEntry
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] Dispose: disposing...
    ConnectionPool: [1/6/2015 5:51:37 PM] [6] Dispose: disposing a ConnectionPoolEntry
    ConnectionPoolEntry: [1/6/2015 5:51:37 PM] [6] Dispose: disposing...
    LdapSessionPoolImplementation: [1/6/2015 5:51:37 PM] [6] Dispose: disposing utility connection NTDS
    LdapSessionPoolImplementation: [1/6/2015 5:51:37 PM] [6] Dispose: disposing utility connection GC
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] StopConfigurationLoading: entered
    ConfigurationSettings: [1/6/2015 5:51:37 PM] [6] Dispose: disposing
    Some Idea, Tks for your help.
    migrations

    Here a dump file when I try to start the service, I hope can you help me.
    Version=1
    EventType=CLR20r3
    EventTime=130652059133527283
    ReportType=2
    Consent=1
    ReportIdentifier=4368792e-974e-11e4-93f7-3440b59e2092
    IntegratorReportIdentifier=4368792d-974e-11e4-93f7-3440b59e2092
    NsAppName=Microsoft.ActiveDirectory.WebServices.exe
    Response.type=4
    Sig[0].Name=Problem Signature 01
    Sig[0].Value=V0KXCIQIJBOA2NW5DIQBFTEBV5SCPPFH
    Sig[1].Name=Problem Signature 02
    Sig[1].Value=6.2.9200.16579
    Sig[2].Name=Problem Signature 03
    Sig[2].Value=516356a2
    Sig[3].Name=Problem Signature 04
    Sig[3].Value=System.ServiceModel
    Sig[4].Name=Problem Signature 05
    Sig[4].Value=4.0.30319.34230
    Sig[5].Name=Problem Signature 06
    Sig[5].Value=53be5c02
    Sig[6].Name=Problem Signature 07
    Sig[6].Value=ca
    Sig[7].Name=Problem Signature 08
    Sig[7].Value=c4
    Sig[8].Name=Problem Signature 09
    Sig[8].Value=I0SHPZEWVQV4P1UJY40X15MQTHF34RR5
    DynamicSig[1].Name=OS Version
    DynamicSig[1].Value=6.2.9200.2.0.0.272.7
    DynamicSig[2].Name=Locale ID
    DynamicSig[2].Value=1033
    DynamicSig[22].Name=Additional Information 1
    DynamicSig[22].Value=5220
    DynamicSig[23].Name=Additional Information 2
    DynamicSig[23].Value=52200675db6baa97bf416b02ff886e01
    DynamicSig[24].Name=Additional Information 3
    DynamicSig[24].Value=0b14
    DynamicSig[25].Name=Additional Information 4
    DynamicSig[25].Value=0b146b7eb5ed6bd9871c898c60ee5051
    UI[2]=C:\Windows\ADWS\Microsoft.ActiveDirectory.WebServices.exe
    UI[5]=Check online for a solution (recommended)
    UI[6]=Check for a solution later (recommended)
    UI[7]=Close
    UI[8]=Microsoft.ActiveDirectory.WebServices stopped working and was closed
    UI[9]=A problem caused the application to stop working correctly. Windows will notify you if a solution is available.
    UI[10]=&Close
    LoadedModule[0]=C:\Windows\ADWS\Microsoft.ActiveDirectory.WebServices.exe
    LoadedModule[1]=C:\Windows\SYSTEM32\ntdll.dll
    LoadedModule[2]=C:\Windows\SYSTEM32\MSCOREE.DLL
    LoadedModule[3]=C:\Windows\system32\KERNEL32.dll
    LoadedModule[4]=C:\Windows\system32\KERNELBASE.dll
    LoadedModule[5]=C:\Windows\SYSTEM32\dlphook.x64.dll
    LoadedModule[6]=C:\Windows\SYSTEM32\VERSION.dll
    LoadedModule[7]=C:\Windows\system32\PSAPI.DLL
    LoadedModule[8]=C:\Windows\system32\ADVAPI32.dll
    LoadedModule[9]=C:\Windows\system32\WS2_32.dll
    LoadedModule[10]=C:\Windows\system32\msvcrt.dll
    LoadedModule[11]=C:\Windows\SYSTEM32\sechost.dll
    LoadedModule[12]=C:\Windows\system32\RPCRT4.dll
    LoadedModule[13]=C:\Windows\system32\NSI.dll
    LoadedModule[14]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll
    LoadedModule[15]=C:\Windows\system32\SHLWAPI.dll
    LoadedModule[16]=C:\Windows\system32\USER32.dll
    LoadedModule[17]=C:\Windows\system32\GDI32.dll
    LoadedModule[18]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
    LoadedModule[19]=C:\Windows\SYSTEM32\MSVCR110_CLR0400.dll
    LoadedModule[20]=C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\51fbf5aac9c6f1aef14557276f98ad28\mscorlib.ni.dll
    LoadedModule[21]=C:\Windows\system32\ole32.dll
    LoadedModule[22]=C:\Windows\SYSTEM32\combase.dll
    LoadedModule[23]=C:\Windows\SYSTEM32\CRYPTBASE.dll
    LoadedModule[24]=C:\Windows\SYSTEM32\bcryptPrimitives.dll
    LoadedModule[25]=C:\Windows\SYSTEM32\CRYPTSP.dll
    LoadedModule[26]=C:\Windows\system32\rsaenh.dll
    LoadedModule[27]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clrjit.dll
    LoadedModule[28]=C:\Windows\system32\OLEAUT32.dll
    LoadedModule[29]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System\803e478b5cb2fe994c4f977853849956\System.ni.dll
    LoadedModule[30]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Serv759bfb78#\060758702287150a3b9ca51bfbd135e4\System.ServiceProcess.ni.dll
    LoadedModule[31]=C:\Windows\ADWS\Microsoft.ActiveDirectory.WebServices.Shared.dll
    LoadedModule[32]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Configuration\af08c33d3e853168e58f0bb32118170b\System.Configuration.ni.dll
    LoadedModule[33]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Core\5641065f716dfd6c76dd7bc6ab18c47a\System.Core.ni.dll
    LoadedModule[34]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Xml\b3344890d2d919e93f506faabd08186a\System.Xml.ni.dll
    LoadedModule[35]=C:\Windows\system32\urlmon.dll
    LoadedModule[36]=C:\Windows\system32\iertutil.dll
    LoadedModule[37]=C:\Windows\system32\WININET.dll
    LoadedModule[38]=C:\Windows\system32\USERENV.dll
    LoadedModule[39]=C:\Windows\system32\profapi.dll
    LoadedModule[40]=C:\Windows\SYSTEM32\Secur32.dll
    LoadedModule[41]=C:\Windows\SYSTEM32\SSPICLI.DLL
    LoadedModule[42]=C:\Windows\system32\SHELL32.dll
    LoadedModule[43]=C:\Windows\SYSTEM32\SHCORE.dll
    LoadedModule[44]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Dire5d62f0a2#\7ab37f1ca732666c1ab41d8e500942e0\System.DirectoryServices.Protocols.ni.dll
    LoadedModule[45]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.ServiceModel\4e643cb8b12402db89eb2d5839872b78\System.ServiceModel.ni.dll
    LoadedModule[46]=C:\Windows\assembly\NativeImages_v4.0.30319_64\SMDiagnostics\02b9ba874b1c07b6016aa9406745e96b\SMDiagnostics.ni.dll
    LoadedModule[47]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Web.Services\f936aad8a951da6674d460db1855a3db\System.Web.Services.ni.dll
    LoadedModule[48]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Servd1dec626#\8944debbd3293f930c7e37b64aed0d77\System.ServiceModel.Internals.ni.dll
    LoadedModule[49]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.IdentityModel\5844c97798b9e56b45cb0e5d3505ffd2\System.IdentityModel.ni.dll
    LoadedModule[50]=C:\Windows\system32\crypt32.dll
    LoadedModule[51]=C:\Windows\system32\MSASN1.dll
    LoadedModule[52]=C:\Windows\SYSTEM32\DPAPI.dll
    LoadedModule[53]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Runteb92aa12#\3838e7c87e962eaec01572bff0396922\System.Runtime.Serialization.ni.dll
    LoadedModule[54]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Servf73e6522#\38df17ed0feec9b27d7d33272eecc176\System.ServiceModel.Web.ni.dll
    LoadedModule[55]=C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Dired13b18a9#\4ecba93b4eae5bb0c97205c4e4196702\System.DirectoryServices.ni.dll
    LoadedModule[56]=C:\Windows\system32\wldap32.dll
    LoadedModule[57]=C:\Windows\system32\mswsock.dll
    LoadedModule[58]=C:\Windows\SYSTEM32\DNSAPI.dll
    LoadedModule[59]=C:\Windows\System32\rasadhlp.dll
    LoadedModule[60]=C:\Windows\System32\fwpuclnt.dll
    LoadedModule[61]=C:\Windows\SYSTEM32\IPHLPAPI.DLL
    LoadedModule[62]=C:\Windows\SYSTEM32\WINNSI.DLL
    LoadedModule[63]=C:\Windows\SYSTEM32\DSPARSE.dll
    LoadedModule[64]=C:\Windows\system32\kerberos.DLL
    LoadedModule[65]=C:\Windows\SYSTEM32\cryptdll.dll
    LoadedModule[66]=C:\Windows\SYSTEM32\bcrypt.dll
    LoadedModule[67]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\diasymreader.dll
    FriendlyEventName=Stopped working
    ConsentKey=CLR20r3
    AppName=Microsoft.ActiveDirectory.WebServices
    AppPath=C:\Windows\ADWS\Microsoft.ActiveDirectory.WebServices.exe
    NsPartner=windows
    NsGroup=windows8
    Tks for your help.
    migrations

  • Information Store service terminated unexpectedly, event id 7031

    We have Exchange 2010 (coexistence with 2003) running SP3 and a DAG with two members. It now happens occasionally that suddenly all mailstores are running on mailbox server. I had them balanced (manually) on one, so I examined the event viewer. There I saw
    The Microsoft Exchange Information Store service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 5000 milliseconds: Restart the service.
    EVENT ID 7031
    A few seconds later it is started again. But since several mailstores are running on it, it takes some time before all stores are mounted again and so users complain that Outlook disconnects. The time it is down, is too short for the DAG to switch over to
    the replica, so we have a real downtime here.
    Is this a known issue and what can we do for this? I really need to fix this ASAP as you can understand, since we have like 1500 users already now on this environment. I saw this fix:
    http://support.microsoft.com/default.aspx?kbid=2803727
    In there also two issues with information store being stopped are reported here. 
    Thanks for all your help!

    Thanks Gulab,
    No, no major change. We are only moving mailboxes now from the old 2003 to the new 2010 server. I have seen that this happened for a long time already, but probably never during working hours. There is no actual trend. Today it happened once. Yesterday it
    happened like 5 times. other days, just once a day, a few times never.
    We are running TM Scanmail.
    Here the full details
    System
    Provider
    [ Name]
    Service Control Manager
    [ Guid]
    {555908d1-a6d7-4695-8e1e-26931d2012f4}
    [ EventSourceName]
    Service Control Manager
    EventID
    7031
    [ Qualifiers]
    49152
    Version
    0
    Level
    2
    Task
    0
    Opcode
    0
    Keywords
    0x8080000000000000
    TimeCreated
    [ SystemTime]
    2014-01-14T09:16:32.732892000Z
    EventRecordID
    90280
    Correlation
    Execution
    [ ProcessID]
    672
    [ ThreadID]
    6532
    Channel
    System
    Computer
    xxx162.eu.ykgw.net
    Security
    EventData
    param1
    Microsoft Exchange Information Store
    param2
    1
    param3
    5000
    param4
    1
    param5
    Restart the service
    4D005300450078006300680061006E0067006500490053000000

  • Event ID 7031: DCOM Server Process Launcher service terminated unexpectedly - Causing a Reboot of Server

    Hello All,
    We recently had a situation where in our Windows Os 2003 SP2 server got rebooted. 
    Logged and found below event on server:
    Event Type:        Error
    Event Source:    Service Control Manager
    Event Category:                None
    Event ID:              7031
    Date:                     30/07/2014
    Time:                     20:16:28
    User:                     N/A
    Computer:          XXXXXXXXX
    Description:
    The DCOM Server Process Launcher service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Reboot the machine.
    I do not see any other event that could cause the DCOM to fail, not sure that could have been the reason for this.
    Any idea?

    Hi,
    Based on your description, I find following KB in
    List of updates in Windows Server 2003 Service Pack 2. It seems to be suitable for current
    scenario. Please refer to and check if can help you.
    DCOM programs do not work, and event ID 7031 is logged
    after you install Windows Server 2003 Service Pack 1 (SP1)
    If any update, please feel free to let me know.
    Hope this helps.
    Best regards,
    Justin Gu

  • SSRS Service Terminating Unexpectedly

    Hi All,
    Can anyone suggest root cause of this issue.
    (1B98:1604) 12/09/14 05:53:31, ACTION, SQLDUMPER_UNKNOWN_APP.EXE, MiniDump completed: C:\Program Files\Microsoft SQL Server\MSRS10.MSSQLSERVER\Reporting Services\Logfiles\SQLDmpr0005.mdmp
    (1B98:1604) 12/09/14 05:53:31, ACTION, SQLDUMPER_UNKNOWN_APP.EXE, Location of module 'dbghelp.dll' : 'C:\Program Files\Microsoft SQL Server\100\Shared\dbghelp.dll'
    (1B98:1604) 12/09/14 05:53:33, ACTION, SQLDUMPER_UNKNOWN_APP.EXE, File version of module 'C:\Program Files\Microsoft SQL Server\100\Shared\dbghelp.dll' : '6.8:4.0'
    (1B98:1604) 12/09/14 05:53:33, ACTION, SQLDUMPER_UNKNOWN_APP.EXE, Product version of module 'C:\Program Files\Microsoft SQL Server\100\Shared\dbghelp.dll' : '6.8:4.0'
    (1B98:1604) 12/09/14 05:53:33, ACTION, SQLDUMPER_UNKNOWN_APP.EXE, Location of module 'sqldumper.exe' : 'C:\Program Files\Microsoft SQL Server\100\Shared\SQLDUMPER.EXE'
    (1B98:1604) 12/09/14 05:53:33, ACTION, SQLDUMPER_UNKNOWN_APP.EXE, File version of module 'C:\Program Files\Microsoft SQL Server\100\Shared\SQLDUMPER.EXE' : '2007.100:1600.22'
    (1B98:1604) 12/09/14 05:53:33, ACTION, SQLDUMPER_UNKNOWN_APP.EXE, Product version of module 'C:\Program Files\Microsoft SQL Server\100\Shared\SQLDUMPER.EXE' : '10.0:1600.22'
    (1B98:1604) 12/09/14 05:53:33, ACTION, ReportingServicesService.exe, Watson Invoke: No
    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7031
    Date:  9/12/2014
    Time:  05:53:34 AM
    User:  N/A
    Computer:
    Description:
    The SQL Server Reporting Services (MSSQLSERVER) service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.
    ServerDetails:
       Microsoft SQL Server 2008 (SP3) - 10.0.5500.0 (Intel X86)
        Copyright (c) 1988-2008 Microsoft Corporation
        Standard Edition on Windows NT 5.2 <X86> (Build 3790: Service Pack 2) (VM)
       RAM:12GB

    Hi Sreenivas DBA,
    Per my understanding you got the reporting services terminated unexpectedly and got some error message, right
    According to the information you have provided that your SQL Server version is 2008(SP3), this is not the latest version, so I recommend you to install the latest SP4 to have an update first:
    http://support.microsoft.com/kb/968382
    if your problem still exists, could you please try to provide more details information below to help us more effective to analysis the root cause and provide solution:
    What is the action you are doing when caused the unexpected terminated? Can you restart the reporting services without error again?
    Could you please provide the error message in the log file(the date should be the same when this error happen)
    Path of the log file like this:
    C:\Program Files\Microsoft SQL Server\MSRS10.MSSQLSERVER\Reporting Services\LogFiles
    If you still have some question, please feel free to ask.
    Regards
    Vicky Liu

  • Microsoft Exchange Transport service terminated unexpectedly

    Hi All,
    We have configured exchange 2013 in windows server 2012. From last two days exchange transport service getting stopped.
    Microsoft Exchange Transport service terminated unexpectedly.
    Log Name:      System
    Source:        Service Control Manager
    Date:          11/13/2014 1:10:28 AM
    Event ID:      7031
    Task Category: None
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      BMBPRMBX01.BMB.LOCAL
    Description:
    The Microsoft Exchange Transport service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 5000 milliseconds: Restart the service.

    Hi,
    This issue may due to some of the corrupt message in the queue. Please try these steps to solve this issue.
    Pause the transport service and let all the messaged go out.
    When queue is empty, stop the transport service and go to the mail.que database in transport-->queue folder. Cut paste all the files from queue folder to some other folder as backup.
    Now start the transport service, it will create a fresh mail.que database and observe if the service us crashing again.
    In addition, please try to disable any AV software, sometimes it will cause Transport service corrupted.
    Best Regards.

  • Error [DTM_10004] The DTM process terminated unexpectedly.

    Good night friends,
    I am using "informaticacloud" service (informaticacloud.com) to sync with my local database (Sql Server Express version). In SQL Server 2012, the informaticacloud  agent works perfectly. Already in SQL Server Express 2008, tables are imported
    normally. But when begins data insertion, nothing happens. Below the error.
    [DTM_10004] The DTM process terminated unexpectedly. 
    Has anyone faced any similar problem?
    Almost now I have found in informaticacloud website and found people with same problem. Below the link.
    https://community.informatica.com/docs/DOC-1761
    Thanks in advance.

    Hi,
    Here is a link for Troubleshooting: Common Error Messages
    https://community.informatica.com/docs/DOC-1619
    “[DTM_10004] The DTM process terminated unexpectedly.
    This means that the engine could not accomplish the first step in your task. Generally, this indicates that your source file or database is unreadable by the engine (even though you could preview data).  Check your source columns for spaces, dashes, or
    special characters. It could also mean that a virus scanner, content filter, or proxy server is blocking agent access to the source.”
    Meanwhile, this issue is related to informatica cloud. Please understand that we has the very limited resources about the third party program. For quick and accurate answers to your questions, it is recommended that you initial a new thread in the informatica
    forum via the below link:
    https://community.informatica.com/community/products/informatica_cloud
    The reason why we recommend posting appropriately is you will get the most qualified pool of respondents, and other partners who read the forums regularly can either share their knowledge or learn from your interaction with us. Thank you for your understanding.
    Hope the issue will be resolved soon.
    Tracy Cai
    TechNet Community Support

Maybe you are looking for

  • Problems with delete overlapping requests from InfoCube in PC

    Hi guys, Iu2019m using delete overlapping requests from InfoCube in Process Chains, but Iu2019m not being able to adjust it to my specific requirement. For example: I execute DTP to load InfoCube XPTO with Fiscal Year 2008 and 2009. After this I have

  • Samsung Galaxy s4 only works with wifi connection. No mobile connection available?

    I can't connect to the internet unless it's thru a wifi connection.  Just started having this problem yesterday, 10/19/2014.

  • CPACache will not update

    One of our systems fails to update the CPACache when performing a full cache update. The confirmation XML that comes back in the history page begins thus:   <?xml version="1.0" encoding="UTF-8" ?> - <CacheRefreshError>   <EngineType>AE</EngineType>  

  • IE8 Applet Issue on ADF

    I am having issue with Applet on a .jspx page when using IE8 browser. I am running on: JDEVADF_11.1.1.7.0_GENERIC_121026.1729.6438 This blocking our progress at the moment, so any help please. I created a simple ADF Web Application with a single page

  • Why are some dots blue and some green?

    When viewing showtimes in the trailers app, some showtimes are marked with a blue dot and some are marked with a green dot?