Exchange was working fine until the server was rebooted. Running SBS 2008. When manually trying to start the information store service receive message " Windows could not start the Microsoft exchange information store service on local computer." Error 1067 the process terminated unexpectedly I have also run the database recovery tools. Some logs are shown below. Microsoft Exchange Warning -------------------------------------------------------- The following warning(s) were reported while loading topology information: get-MailboxDatabase Completed Warning: ERROR: Could not connect to the Microsoft Exchange Information Store service on server SBSERVER.domain.local. One of the following problems may be occurring: 1- The Microsoft Exchange Information Store service is not running. 2- There is no network connectivity to server SBSERVER.domain.local. 3- You do not have sufficient permissions to perform this command. The following permissions are required to perform this command: Exchange View-Only Administrator and local administrators group for the target server. 4- Credentials have been cached for an unpriviledged user. Try removing the entry for this server from Stored User Names and Passwords. Warning: ERROR: Could not connect to the Microsoft Exchange Information Store service on server SBSERVER.domain.local. One of the following problems may be occurring: 1- The Microsoft Exchange Information Store service is not running. 2- There is no network connectivity to server SBSERVER.domain.local. 3- You do not have sufficient permissions to perform this command. The following permissions are required to perform this command: Exchange View-Only Administrator and local administrators group for the target server. 4- Credentials have been cached for an unpriviledged user. Try removing the entry for this server from Stored User Names and Passwords. Warning: ERROR: Could not connect to the Microsoft Exchange Information Store service on server SBSERVER.domain.local. One of the following problems may be occurring: 1- The Microsoft Exchange Information Store service is not running. 2- There is no network connectivity to server SBSERVER.domain.local. 3- You do not have sufficient permissions to perform this command. The following permissions are required to perform this command: Exchange View-Only Administrator and local administrators group for the target server. 4- Credentials have been cached for an unpriviledged user. Try removing the entry for this server from Stored User Names and Passwords. get-PublicFolderDatabase Completed Warning: ERROR: Could not connect to the Microsoft Exchange Information Store service on server SBSERVER.domain.local. One of the following problems may be occurring: 1- The Microsoft Exchange Information Store service is not running. 2- There is no network connectivity to server SBSERVER.domain.local. 3- You do not have sufficient permissions to perform this command. The following permissions are required to perform this command: Exchange View-Only Administrator and local administrators group for the target server. 4- Credentials have been cached for an unpriviledged user. Try removing the entry for this server from Stored User Names and Passwords.

Were any updates applied / changes made? Why was the server rebooted?

HI,Is there newly installed antivirus software ? If yes try to start services after desabling AV.regardsChinthaka

That second one ( the cumulative IE update) looks like it never actually installed. Live Care hasnt given you any problems before?

No none. I am going to try a system state restore from a good backup I think and go from there. I think it has to be worth a try as nothing else seems to be working.

Hows the issue now? Please restart the IS service and check if theres any error event in the application log, if yes, please post them at here for analyzing Please run ExBPA on the SBS server for a health check Notes: For the exchange issue on the SBS server, please use the SBS 2008 Newsgroup which would be the best place

Issue is still the same. I did not restore yet I am leaving that as the very last option to try. these are the errors I get. Faulting application store.exe, version 8.1.240.5, time stamp 0x474279c0, faulting module ntdll.dll, version 6.0.6001.18000, time stamp 0x4791adec, exception code 0xc0000374, fault offset 0x00000000000a6e97, process id 0x262c, application start time 0x01ca140851c0c4ba. store.exe 8.1.240.5 474279c0 ntdll.dll 6.0.6001.18000 4791adec c0000374 00000000000a6e97 262c 01ca140851c0c4ba Log Name: Application Source: MSExchange System Attendant Mailbox Date: 03/08/2009 08:02:19 Event ID: 4001 Task Category: General Level: Error Keywords: Classic User: N/A Computer: SBSERVER.amhashton.local Description: A transient failure has occurred. The problem may resolve itself in awhile. The service will retry in 56 seconds. Diagnostic information: Cannot open mailbox /o=First Organization/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=SBSERVER/cn=Microsoft System Attendant. Microsoft.Exchange.Data.Storage.ConnectionFailedTransientException: Cannot open mailbox /o=First Organization/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=SBSERVER/cn=Microsoft System Attendant. ---> Microsoft.Mapi.MapiExceptionNetworkError: MapiExceptionNetworkError: Unable to make connection to the server. (hr=0x80040115, ec=-2147221227) Diagnostic context: ...... Lid: 10648 dwParam: 0x6D9 Msg: EEInfo: Generating component: 2 Lid: 14744 dwParam: 0x6D9 Msg: EEInfo: Status: 1753 Lid: 9624 dwParam: 0x6D9 Msg: EEInfo: Detection location: 501 Lid: 13720 dwParam: 0x6D9 Msg: EEInfo: Flags: 0 Lid: 11672 dwParam: 0x6D9 Msg: EEInfo: NumberOfParameters: 4 Lid: 8856 dwParam: 0x6D9 Msg: EEInfo: prm[0]: Unicode string: ncacn_ip_tcp Lid: 8856 dwParam: 0x6D9 Msg: EEInfo: prm[1]: Unicode string: SBSERVER.domain.local Lid: 12952 dwParam: 0x6D9 Msg: EEInfo: prm[2]: Long val: -1527653632 Lid: 12952 dwParam: 0x6D9 Msg: EEInfo: prm[3]: Long val: 382312662 Lid: 19778 Lid: 27970 StoreEc: 0x80040115 Lid: 17730 Lid: 25922 StoreEc: 0x80040115 at Microsoft.Mapi.MapiExceptionHelper.ThrowIfError(String message, Int32 hresult, Int32 ec, DiagnosticContext diagCtx) at Microsoft.Mapi.ExRpcConnection.Create(ConnectionCache connectionCache, ExRpcConnectionCreateFlag createFlags, ConnectFlag connectFlags, String serverDn, String userDn, String user, String domain, String password, String httpProxyServerName, Int32 ulConMod, Int32 lcidString, Int32 lcidSort, Int32 cpid, Int32 cReconnectIntervalInMins, Int32 cbRpcBufferSize, Int32 cbAuxBufferSize) at Microsoft.Mapi.ConnectionCache.OpenMapiStore(String mailboxDn, Guid mailboxGuid, Guid mdbGuid, ClientIdentityInfo clientIdentity, String userDnAs, OpenStoreFlag openStoreFlags, CultureInfo cultureInfo, String applicationId) at Microsoft.Mapi.ConnectionCache.OpenMailbox(String mailboxDn, Guid mailboxGuid, Guid mdbGuid, WindowsIdentity windowsIdentityAs, String userDnAs, OpenStoreFlag openStoreFlags, CultureInfo cultureInfo, String applicationId) at Microsoft.Exchange.Data.Storage.ConnectionCachePool.OpenMailbox(String serverDn, String userDn, String mailboxDn, Guid mailboxGuid, Guid mdbGuid, Object identity, ConnectFlag connectFlag, OpenStoreFlag openStoreFlag, CultureInfo cultureInfo, String clientInfoString, Boolean secondTry) --- End of inner exception stack trace --- at Microsoft.Exchange.Data.Storage.ConnectionCachePool.OpenMailbox(String serverDn, String userDn, String mailboxDn, Guid mailboxGuid, Guid mdbGuid, Object identity, ConnectFlag connectFlag, OpenStoreFlag openStoreFlag, CultureInfo cultureInfo, String clientInfoString, Boolean secondTry) at Microsoft.Exchange.Data.Storage.ConnectionCachePool.OpenMailbox(String serverDn, String userDn, String mailboxDn, Guid mailboxGuid, Guid mdbGuid, Object identity, ConnectFlag connectFlag, OpenStoreFlag openStoreFlag, CultureInfo cultureInfo, String clientInfoString, Boolean secondTry) at Microsoft.Exchange.Data.Storage.ConnectionCachePool.OpenMailbox(String serverDn, String userDn, String mailboxDn, Guid mailboxGuid, Guid mdbGuid, Object identity, ConnectFlag connectFlag, OpenStoreFlag openStoreFlag, CultureInfo cultureInfo, String clientInfoString) at Microsoft.Exchange.Data.Storage.MailboxSession.Initialize(LogonType logonType, ExchangePrincipal owner, DelegateLogonUser delegateUser, Object identity, OpenMailboxSessionFlags flags) at Microsoft.Exchange.Data.Storage.MailboxSession.CreateMailboxSession(LogonType logonType, ExchangePrincipal owner, DelegateLogonUser delegateUser, Object identity, OpenMailboxSessionFlags flags, CultureInfo cultureInfo, String clientInfoString) at Microsoft.Exchange.Data.Storage.MailboxSession.OpenAsAdmin(ExchangePrincipal mailboxOwner, CultureInfo cultureInfo, String clientInfoString, Boolean useLocalRpc, Boolean ignoreHomeMdb) at Microsoft.Exchange.Data.Storage.MailboxSession.OpenAsAdmin(ExchangePrincipal mailboxOwner, CultureInfo cultureInfo, String clientInfoString) at Microsoft.Exchange.Servicelets.SystemAttendantMailbox.Servicelet.Work() Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="MSExchange System Attendant Mailbox" /> <EventID Qualifiers="49152">4001</EventID> <Level>2</Level> <Task>1</Task> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2009-08-03T07:02:19.000Z" /> <EventRecordID>66028</EventRecordID> <Channel>Application</Channel> <Computer>SBSERVER.domain.local</Computer> <Security /> </System> <EventData> <Data>56</Data> <Data>Cannot open mailbox /o=First Organization/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=SBSERVER/cn=Microsoft System Attendant.</Data> <Data>Microsoft.Exchange.Data.Storage.ConnectionFailedTransientException: Cannot open mailbox /o=First Organization/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=SBSERVER/cn=Microsoft System Attendant. ---&gt; Microsoft.Mapi.MapiExceptionNetworkError: MapiExceptionNetworkError: Unable to make connection to the server. (hr=0x80040115, ec=-2147221227) Diagnostic context: ...... Lid: 10648 dwParam: 0x6D9 Msg: EEInfo: Generating component: 2 Lid: 14744 dwParam: 0x6D9 Msg: EEInfo: Status: 1753 Lid: 9624 dwParam: 0x6D9 Msg: EEInfo: Detection location: 501 Lid: 13720 dwParam: 0x6D9 Msg: EEInfo: Flags: 0 Lid: 11672 dwParam: 0x6D9 Msg: EEInfo: NumberOfParameters: 4 Lid: 8856 dwParam: 0x6D9 Msg: EEInfo: prm[0]: Unicode string: ncacn_ip_tcp Lid: 8856 dwParam: 0x6D9 Msg: EEInfo: prm[1]: Unicode string: SBSERVER.domain.local Lid: 12952 dwParam: 0x6D9 Msg: EEInfo: prm[2]: Long val: -1527653632 Lid: 12952 dwParam: 0x6D9 Msg: EEInfo: prm[3]: Long val: 382312662 Lid: 19778 Lid: 27970 StoreEc: 0x80040115 Lid: 17730 Lid: 25922 StoreEc: 0x80040115 at Microsoft.Mapi.MapiExceptionHelper.ThrowIfError(String message, Int32 hresult, Int32 ec, DiagnosticContext diagCtx) at Microsoft.Mapi.ExRpcConnection.Create(ConnectionCache connectionCache, ExRpcConnectionCreateFlag createFlags, ConnectFlag connectFlags, String serverDn, String userDn, String user, String domain, String password, String httpProxyServerName, Int32 ulConMod, Int32 lcidString, Int32 lcidSort, Int32 cpid, Int32 cReconnectIntervalInMins, Int32 cbRpcBufferSize, Int32 cbAuxBufferSize) at Microsoft.Mapi.ConnectionCache.OpenMapiStore(String mailboxDn, Guid mailboxGuid, Guid mdbGuid, ClientIdentityInfo clientIdentity, String userDnAs, OpenStoreFlag openStoreFlags, CultureInfo cultureInfo, String applicationId) at Microsoft.Mapi.ConnectionCache.OpenMailbox(String mailboxDn, Guid mailboxGuid, Guid mdbGuid, WindowsIdentity windowsIdentityAs, String userDnAs, OpenStoreFlag openStoreFlags, CultureInfo cultureInfo, String applicationId) at Microsoft.Exchange.Data.Storage.ConnectionCachePool.OpenMailbox(String serverDn, String userDn, String mailboxDn, Guid mailboxGuid, Guid mdbGuid, Object identity, ConnectFlag connectFlag, OpenStoreFlag openStoreFlag, CultureInfo cultureInfo, String clientInfoString, Boolean secondTry) --- End of inner exception stack trace --- at Microsoft.Exchange.Data.Storage.ConnectionCachePool.OpenMailbox(String serverDn, String userDn, String mailboxDn, Guid mailboxGuid, Guid mdbGuid, Object identity, ConnectFlag connectFlag, OpenStoreFlag openStoreFlag, CultureInfo cultureInfo, String clientInfoString, Boolean secondTry) at Microsoft.Exchange.Data.Storage.ConnectionCachePool.OpenMailbox(String serverDn, String userDn, String mailboxDn, Guid mailboxGuid, Guid mdbGuid, Object identity, ConnectFlag connectFlag, OpenStoreFlag openStoreFlag, CultureInfo cultureInfo, String clientInfoString, Boolean secondTry) at Microsoft.Exchange.Data.Storage.ConnectionCachePool.OpenMailbox(String serverDn, String userDn, String mailboxDn, Guid mailboxGuid, Guid mdbGuid, Object identity, ConnectFlag connectFlag, OpenStoreFlag openStoreFlag, CultureInfo cultureInfo, String clientInfoString) at Microsoft.Exchange.Data.Storage.MailboxSession.Initialize(LogonType logonType, ExchangePrincipal owner, DelegateLogonUser delegateUser, Object identity, OpenMailboxSessionFlags flags) at Microsoft.Exchange.Data.Storage.MailboxSession.CreateMailboxSession(LogonType logonType, ExchangePrincipal owner, DelegateLogonUser delegateUser, Object identity, OpenMailboxSessionFlags flags, CultureInfo cultureInfo, String clientInfoString) at Microsoft.Exchange.Data.Storage.MailboxSession.OpenAsAdmin(ExchangePrincipal mailboxOwner, CultureInfo cultureInfo, String clientInfoString, Boolean useLocalRpc, Boolean ignoreHomeMdb) at Microsoft.Exchange.Data.Storage.MailboxSession.OpenAsAdmin(ExchangePrincipal mailboxOwner, CultureInfo cultureInfo, String clientInfoString) at Microsoft.Exchange.Servicelets.SystemAttendantMailbox.Servicelet.Work()</Data> </EventData> </Event> I can send an xml report from exbpa if you like Thanks

Is IPv6 being used in your environment? If not, then disable IPv6 on the Exchange/SBS server by following below KB from registry (don't just disable in Local Area Connection and follow below KB)... http://support.microsoft.com/kb/952842Amit Tank | MVP Exchange Server | MCITP: EMA | MCSA: M | http://ExchangeShare.WordPress.com

Does Microsoft Exchange System Object group and Microsoft Exchange Security Object group exists in the ADUC? a. Launch the ADUC b. Go to View menu, select Advanced Features c. Check if two groups exist Please try to use the workarounds in the KB 940845 Please check the results in the ExBPA, and post the error info

I have now disabled IPV6 as it is not used in the environment. The two groups do exist and I have changed some service startup settings. I still cannot start the IS service though. I will post ExBPA results later

I have the same problem , u have any updare but I find the Pop up message when moving the Cluster Mailbox Server (SCC) to another node, all the stores mount successfully but you get the following warning in the Exchange Management console: ERROR : could not connect to MS Exchange Information store service on the server Cluster-Mailbox.FQDN one of the following problem may be occurring 1- the MS exchange information store services is not running 2- there is no network connectivity to server Cluster-Mailbox.FQDN 3- you don’t have sufficient permissions to perform command the following permissions are required to perform in command exchange view-only Administer and local administers group for target server 4- credentials have been cached for an unprivileged user. Try to removing the entry for this server from Stored User Name and Password

I resolved this issue by installing "Update Rollup 3-v2 for Exchange Server 2007 Service Pack 3 (KB2530488)" You can download it here: http://www.microsoft.com/downloads/en/details.aspx?FamilyID=17615f50-8a56-428c-bc1a-629795692da1&displaylang=en In order to install, I had to run the executable from a Command Prompt with Administrative Privilages. Prior to installing make sure you have SP3 for Exchange 2007 installed.

Do not disable IPv6 on SBS 2008. It will cause errors like this when you reboot. If you think that this was done then re-enable IPv6. If you cannot boot up then restart in the SAFE MODE and re-enable IPv6. Steve LaPha Dytech Group