ESE error -1032 on failover (EventID 489)

Hello all,

everytime i do a server switchover (to perform a maintenance operation) or a automatic failover happened (sporadic timeouts while veeam backups are running), i notice the following error in application event log:

msexchangerepl (3912) An attempt to open the file "D:\MSX_DATA\EDB2.edb" for read only access failed with system error 32 (0x00000020): "The process cannot access the file because it is being used by another process. ".  The open file operation will fail with error -1032 (0xfffffbf8).

It's a three node Exchange 2013 CU8 DAG on Windows Server 2012 R2. All servers are on the same subnet. I already increased SameSubnetDelay in cluster config to 2000, but we still notice failovers and the error above about once a month during veeam backup is running. Sometimes i have to reboot the server to resolve the lock but sometimes even a reseed of DatabaseCopy is necessary to be able to mount the database copy again.

I checked permissions and anti virus exclusions but all seems to be fine. I even uninstalled antivirus temporarily in our lab, but the error is still reproducible with no veaam backups and no antivirus active after a manual switchover.

I also ran Test-ReplicationHealth cmdlet, but all tests passed.

Any help would be appreciated!

Thanks,
Markus

April 7th, 2015 1:12pm

Hello

check again ntfs security.
start procmon and search access denied when db switchover

Free Windows Admin Tool Kit Click here and download it now
April 7th, 2015 2:59pm

Hi Sneff,

thanks for your reply. Here's what i found:

22:01:22,6975709	edgetransport.exe	8500	CreateFile	C:\Program Files\Microsoft\Exchange Server\V15\Bin\Search\Ceres\Diagnostics\ETLTraces\DocumentProcessingTrace_272.etl	ACCESS DENIED	Desired Access: Read Attributes, Delete, Dis, Options: Non-Directory File, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a

22:01:22,6982112	edgetransport.exe	8500	CreateFile	C:\Program Files\Microsoft\Exchange Server\V15\Bin\Search\Ceres\Diagnostics\ETLTraces\DocumentProcessingTrace_272.etl	ACCESS DENIED	Desired Access: Delete, Dis, Options: Non-Directory File, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a

I will try to move these self-monitoring logfiles as described here



April 7th, 2015 4:24pm

After changing ETLTraces folder and deleting them there is no more ACCESS DENIED in procmon, but the error in the eventlog still persists.
Free Windows Admin Tool Kit Click here and download it now
April 7th, 2015 5:44pm

Hi Sneff,

thanks for your reply. Here's what i found:

22:01:22,6975709	edgetransport.exe	8500	CreateFile	C:\Program Files\Microsoft\Exchange Server\V15\Bin\Search\Ceres\Diagnostics\ETLTraces\DocumentProcessingTrace_272.etl	ACCESS DENIED	Desired Access: Read Attributes, Delete, Dis, Options: Non-Directory File, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a

22:01:22,6982112	edgetransport.exe	8500	CreateFile	C:\Program Files\Microsoft\Exchange Server\V15\Bin\Search\Ceres\Diagnostics\ETLTraces\DocumentProcessingTrace_272.etl	ACCESS DENIED	Desired Access: Delete, Dis, Options: Non-Directory File, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a

I will try to move these self-monitoring logfiles as described here



April 7th, 2015 8:22pm

Hi Sneff,

thanks for your reply. Here's what i found:

22:01:22,6975709	edgetransport.exe	8500	CreateFile	C:\Program Files\Microsoft\Exchange Server\V15\Bin\Search\Ceres\Diagnostics\ETLTraces\DocumentProcessingTrace_272.etl	ACCESS DENIED	Desired Access: Read Attributes, Delete, Dis, Options: Non-Directory File, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a

22:01:22,6982112	edgetransport.exe	8500	CreateFile	C:\Program Files\Microsoft\Exchange Server\V15\Bin\Search\Ceres\Diagnostics\ETLTraces\DocumentProcessingTrace_272.etl	ACCESS DENIED	Desired Access: Delete, Dis, Options: Non-Directory File, Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a

I will try to move these self-monitoring logfiles as described here



Free Windows Admin Tool Kit Click here and download it now
April 7th, 2015 8:22pm

Hello

Ceheck security: https://gerhardwessels.wordpress.com/tag/the-open-file-operation-will-fail-with-error-1032-0xfffffbf8/

April 8th, 2015 2:06am

Hello

Ceheck security: https://gerhardwessels.wordpress.com/tag/the-open-file-operation-will-fail-with-error-1032-0xfffffbf8/

Free Windows Admin Tool Kit Click here and download it now
April 8th, 2015 5:08am

Hi Markus,

From your description, in order to determine whether the issue is related to the Veeam backups, I recommend you stop the veeam backup temporarily and do the switchover to check the result.

Hope this can be helpful to you.

Best regards,

April 9th, 2015 5:07am

Hi Amy,

the error persists with no veeam backup job active or even scheduled for those machines. So i dont think the issue is veeam related.

I also tried Move-ActiveMailboxDatabase cmdlet with different params but without success.

Can you confirm that the read only ntfs permissions for "Exchange Servers" group on active mailbox database copy is correct?

Thanks and kind regards

Free Windows Admin Tool Kit Click here and download it now
April 9th, 2015 2:59pm

Hello

so add everyone full access to folder and inherited all subfolder/files, if db mounted only have security error. if not help need check all all services wich is use edb file.

April 9th, 2015 3:04pm

Hello all,

everytime i do a server switchover (to perform a maintenance operation) or a automatic failover happened (sporadic timeouts while veeam backups are running), i notice the following error in application event log:

msexchangerepl (3912) An attempt to open the file "D:\MSX_DATA\EDB2.edb" for read only access failed with system error 32 (0x00000020): "The process cannot access the file because it is being used by another process. ".  The open file operation will fail with error -1032 (0xfffffbf8).

It's a three node Exchange 2013 CU8 DAG on Windows Server 2012 R2. All servers are on the same subnet. I already increased SameSubnetDelay in cluster config to 2000, but we still notice failovers and the error above about once a month during veeam backup is running. Sometimes i have to reboot the server to resolve the lock but sometimes even a reseed of DatabaseCopy is necessary to be able to mount the database copy again.

I checked permissions and anti virus exclusions but all seems to be fine. I even uninstalled antivirus temporarily in our lab, but the error is still reproducible with no veaam backups and no antivirus active after a manual switchover.

I also ran Test-ReplicationHealth cmdlet, but all tests passed.

Any help would be appreciated!

Thanks,
Markus

I see these all the time and have never had an issue with mounting a database on switchover. I would suggest opening a case with Microsoft if its affected your ability to activate databases
Free Windows Admin Tool Kit Click here and download it now
April 9th, 2015 3:32pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics