MSExchangeDiagnostics Event ID 1039

Since last Friday, when the Exchange servers were updated to the latest patches, I have been seeing Errors in the event logs from Source MSExchangeDiagnostics, Event ID 1039.

the information in the events is:

Log Name:      Application
Source:        MSExchangeDiagnostics
Date:          5/18/2015 11:04:45 AM
Event ID:      1039
Task Category: General
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      server.domain.com
Description:
Failed to detect the bitlocker state for EDS log drive 'E:\'.
Exception
System.Management.ManagementException: Invalid namespace 
   at System.Management.ManagementException.ThrowWithExtendedInfo(ManagementStatus errorCode)
   at System.Management.ManagementScope.InitializeGuts(Object o)
   at System.Management.ManagementScope.Initialize()
   at System.Management.ManagementObjectSearcher.Initialize()
   at System.Management.ManagementObjectSearcher.Get()
   at Microsoft.Exchange.Diagnostics.Service.DiagnosticsService.DriveLocked(String diagnosticsRootDrive)
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="MSExchangeDiagnostics" />
    <EventID Qualifiers="49156">1039</EventID>
    <Level>2</Level>
    <Task>1</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2015-05-18T16:04:45.000000000Z" />
    <EventRecordID>5189128</EventRecordID>
    <Channel>Application</Channel>
    <Computer>server.domain.com</Computer>
    <Security />
  </System>
  <EventData>
    <Data>E:\</Data>
    <Data>
Exception
System.Management.ManagementException: Invalid namespace 
   at System.Management.ManagementException.ThrowWithExtendedInfo(ManagementStatus errorCode)
   at System.Management.ManagementScope.InitializeGuts(Object o)
   at System.Management.ManagementScope.Initialize()
   at System.Management.ManagementObjectSearcher.Initialize()
   at System.Management.ManagementObjectSearcher.Get()
   at Microsoft.Exchange.Diagnostics.Service.DiagnosticsService.DriveLocked(String diagnosticsRootDrive)</Data>
  </EventData>
</Event>

I have researched this and found numerous reports of this following the upgrade to either CU6 or CU7, we have been running at CU7 since January and had not seen this until Friday. Only one of the 2 Exchange servers is showing this error and Exchange is running fine.

We have the 2 servers in an Active Active setup with the databases spread evenly between them, there have been no reports of issues from any users and no other errors seen in the event logs.

What is causing this and what can I do to stop it?


  • Edited by GADavies 15 hours 48 minutes ago .
May 20th, 2015 2:34pm

Hi GADavies,

Thank you for your question.

The error means Exchange failed to detect the bitlocker state for MS Exchange Diagnostic log.

Did you enable bitlocker in drive E on Exchange server? or did you enable it age?

If we have enabled it, we could disable it to check if the error persist.

If you didnt enable it all the time, we could safely ignore it.

If there are any questions regarding this issue, please be free to let me know.

Best Regard,

Jim

Free Windows Admin Tool Kit Click here and download it now
May 21st, 2015 2:00am

Bitlocker has not been enabled at any point on any server.

The issue, even though this canbe safely ignored, is we have 3rd party monitors which email all sys admins and management whenever this event is reported. This means I am being bombarded with angry questions about it. Simply saying we can ignore it does not work, they want it stopped.

Is there any way to stop the event?

May 21st, 2015 1:31pm

Hi GADavies,

We could backup Register then navigate to the following path:

Hkey local machine -> Software ->Microsoft ->Windows NT->CurrentVersion->Schedule->Taskcache->Tree->Microsoft->Windows->PLA

back up PLA and if present, delete the keys ExchangeDiagnosticsDailyPerformanceLog  and ExchangeDiagnosticsPerformanceLog, then restart the server to check if the issue persist.

If there are any questions regarding this issue, please be free to let me know.

Best Regard,

Jim

Free Windows Admin Tool Kit Click here and download it now
May 30th, 2015 2:25am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics