Exchange 2013 CU8 on Server 2012R2.  Multiple users with iPhones/Android/BB and tablets using POP/IMAP to get email from the server.  I am getting 4-6 of these a day and there appears to be no good reason why.

I've tested the Exchange server health more times than I've had hot coffee with no result.  Everything comes back healthy.  There are no precursors to the message.

Windows Event ID: 4999
Message: Watson report about to be sent for process id: 5048, with parameters: E12IIS, c-RTL-AMD64, 15.00.1076.009, M.Exchange.Imap4, M.E.PopImap.Core, M.E.P.C.StringResponseItemProcessor.GetNextChunk, System.InvalidOperationException, daf0, 15.00.1076.000.
Detected on: 2015-07-15 07:51:06 EST

Is this an IIS issue?  PopImap issue?  Is there any resolve to this in CU9?

Hello

tip: https://support.microsoft.com/en-us/kb/2958036

The receive connectors don't stop/restart and we followed that issue before but thank you for the link.

Hi,

Please confirm whether your Exchange account can be connected with IMAP connection in Outlook. Is there any issue during the connection?

Also make sure the Microsoft Exchange IMAP service is started and running in server side. If there is an connection issue in IMAP connection, please run the following command to check your IMAP connection:

Get-ImapSettings | fl

If there is no issue during the connection but the event log 4999 still generated, please upgrade to Exchange 2013 cu9 to have a try:
https://support.microsoft.com/en-us/kb/3049849

Regards,

IMAP is running and accessible to all end users.  There are about 30 people who connect and pull email through IMAP.

Hi Greg,

Is your server a multi-role or single role.

Please go through all these tests to see if it helps, if you havn't gone through.

Microsoft Exchange Diagnostics service crashing with the event 4999:

http://blogs.technet.com/b/anya/archive/2014/11/25/microsoft-exchange-diagnostics-service-crashing-post-cu6-upgrade.aspx

Note : ExchangeDiagnosticsDailyPerformanceLog & ExchangeDiagnosticsPerformanceLog registry keys come back again automatically in 5 Min and a reboot after 5 Min will be of no use & ExchangeDiagnosticsDailyPerformanceLog & ExchangeDiagnosticsPerformanceLog will still be missing from task scheduler and perfmon. Tested on Exchange 2013 Cu7. After deleting the keys and immediate reboot is required.

Also these:

https://support.microsoft.com/en-us/kb/2447629#/en-us/kb/2447629

https://support.microsoft.com/en-us/kb/2665115#/en-us/kb/2665115

https://support.microsoft.com/en-us/kb/2619237#/en-us/kb/2619237

https://support.microsoft.com/en-us/kb/3003580#/en-us/kb/3003580