I am running Exchange 2003 SP2 Enterprise on Windows 2003 SP2 server. Recently both my public and private stores dismount at the same time. I see an event 488 (unalbe to create e00tmp.log "The file exists followed by event 413 cannot create log file then events 492 and 471 I then get a 9558 An error occurred while writing to the database log file of storage group "First Storage Group". Attempting to unmount all databases in this storage group. I then get a bunch of event 1115 and the datastores are dismounted. Any ideas what could be causing this ?? Exchange is backed up every night and maintenance is run every night.

Hi , Have you tried this ? http://support.microsoft.com/default.aspx?scid=kb;en-us;313184&Product=exch2k Regards. Shafaquat Ali.M.C.I.T.P Exchange 2007/2010, M.C.I.T.P Windows Server 2008, M.C.T.S OCS Server 2007 R2, Phone: +923008210320

1: Disable AV on server 2: Stop all exchange services on server 3: cut and paste all *.Log file to toher location except .chk and .res file 4: Start all services and then try to mount the database lso have a look of below article. The Exchange database store may not mount in Exchange Server, and event IDs 9175, 486, 455, 413, and 5 may be logged:: http://support.microsoft.com/kb/896143 Anil

I'm not sure if you understand the problem exactly. Its not a problem recovering data. The problem that Exchange is up and running and then the public and private stores dismount unexpectedly at random times. The stores are remounted and everything is then fine again

I'm not sure if you understand the problem exactly. Its not a problem recovering data. The problem that Exchange is up and running and then the public and private stores dismount unexpectedly at random times. The stores are remounted and everything is then fine again Thanks

Please check Whether the server is out of disk space and the hard disc is of good health or not? This event message 9558 indicates that a disk error has occurred when writing a storage group log file. A disk-full condition on the disk containing the log files probably caused this error. The event message 413 indicates unable to create a new logfile because the database cannot write to the log drive. The drive may be read-only, out of disk space, misconfigured, or corrupted. You need check the System Log for I/O or drive errors near the time of the 490 Event. This issue may occur because the path for the check file (such as E00.chk) is not correct, which may be caused by a drive failure. Please run "chkdsk /f /r" (without the quotation marks). If chkdsk does not resolve the issue, examine the permissions on the Exchsrvr folder structure. Make sure that SYSTEM has full control of Exchsrvr and all subfolders on each partition that contains Exchange data. If you still cannot mount the databases, troubleshoot any Windows NT file-level antivirus software running on the Exchange server. Detail Error information: http://www.microsoft.com/technet/support/ee/transform.aspx?ProdName=Exchange&ProdVer=6.5.0000.0&EvtID=490&EvtSrc=ESE&LCID=1033Your expertise never fails to impress!