Exchange Application Log Errors on Startup
Hi Folks; I'm seeing a lot of Application log errors on Exchange startup and would really like to case/track these down and get rid of them. I'm new to both Server 2008 R2 and Exchange 2010 so I really don't know what most of these mean or how to address them. If anyone can help - I'd really appreciate it :-) Event ID 1028 Process MSExchangeFDS.exe (PID=1032). Errors occurred while synchronizing content from server MAIL for object MAIL, remote server is unavailable, giving up after 5 retries. Please check previous error events logged by MSExchangeFDS for more information. (this is the only Exchange server and it's name is mail. I don't know why it would be trying to connect to a remote server as opposed to this local one?) Event ID 1018 Process MSExchangeFDS.exe (PID=1032). Failed to connect to remote server MAIL. The remote server may be down, or its Server service may not be running. (appears to be the same issue?) Event ID 10 (I get 14 of these in a row on every startup) A performance counter was not loaded. Category Name: SMSvcHost 4.0.0.0 Counter Name: Protocol Failures over net.pipe Exception:System.InvalidOperationException: The requested Performance Counter is not a custom counter, it has to be initialized as ReadOnly. at System.Diagnostics.PerformanceCounter.InitializeImpl() at System.Diagnostics.PerformanceCounter.get_RawValue() at System.ServiceModel.Diagnostics.PerformanceCounters.GetPerformanceCounterInternal(String categoryName, String perfCounterName, String instanceName, PerformanceCounterInstanceLifetime instanceLifetime) Process Name: SMSvcHost Process ID: 1572 Event ID 14003 Unable to create Group Metrics distribution share. Share: GroupMetrics Directory: C:\Program Files\Microsoft\Exchange Server\V14\GroupMetrics Message: 00000842 Event ID 12025 (Warning) Transport service is disconnecting performance counters with process lifetime from their old process. Event ID 1007 The Mailbox Replication service was unable to determine the set of active mailbox databases on a mailbox server. Mailbox server: MAIL.domain.com Error: MapiExceptionNetworkError: Unable to make admin interface connection to server. (hr=0x80040115, ec=-2147221227) Diagnostic context: ...... Lid: 10648 dwParam: 0x6D9 Msg: EEInfo: Generating component: 2 Lid: 14744 dwParam: 0x6D9 Msg: EEInfo: Status: 1753 Lid: 9624 dwParam: 0x6D9 Msg: EEInfo: Detection location: 501 Lid: 13720 dwParam: 0x6D9 Msg: EEInfo: Flags: 0 Lid: 11672 dwParam: 0x6D9 Msg: EEInfo: NumberOfParameters: 4 Lid: 8856 dwParam: 0x6D9 Msg: EEInfo: prm[0]: Unicode string: ncacn_ip_tcp Lid: 8856 dwParam: 0x6D9 Msg: EEInfo: prm[1]: Unicode string: MAIL.domain.com Lid: 12952 dwParam: 0x6D9 Msg: EEInfo: prm[2]: Long val: -1988875570 Lid: 12952 dwParam: 0x6D9 Msg: EEInfo: prm[3]: Long val: 382312662 Lid: 24060 StoreEc: 0x80040115 Lid: 23746 Lid: 31938 StoreEc: 0x80040115 Lid: 19650 Lid: 27842 StoreEc: 0x80040115 Lid: 20866
May 24th, 2011 10:11pm

To get you started try the below. 1. Event ID 1018 - http://blogs.msdn.com/b/dgoldman/archive/2007/06/14/fds-event-1018-caused-by-short-name-resolution-not-enabled.aspx 2 3 4 HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters Please change the vaule of TcpTimedWaitDelay to 30 in decimal. Sukh
Free Windows Admin Tool Kit Click here and download it now
May 25th, 2011 12:01am

Hi Sukh - I just checked and it's actually set at 60. I'm assuming that 60 (in this case) would be better then 30 ? Thank you for the help so far....!
May 25th, 2011 12:07am

30 would be better to test. Sukh
Free Windows Admin Tool Kit Click here and download it now
May 25th, 2011 12:38am

Hi Sukh; Either way - same result :-( I just tested it twice. You'd think Microsoft would test these products before shipping them!
May 25th, 2011 1:45am

For event 14003, please confirm whether the share has been created. If not, create it and give “Allow” permission to: · SYSTEM · Organization Management · Exchange Servers · Administrators (Local machine: MBX14) Please run ExBPA against the exchange server for health and permission check James Luo TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.com Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
May 25th, 2011 10:24am

Good tip James - the share is there and the permissions on it are correct. I ran the BPA yesterday and it came up with almost no issues (I cleaned up one or two things that didn't seem to impact the startup errors). On the other hand, I only get one 14003 errors on startup but I get 14 of these ones; Event ID 10 (I get 14 of these in a row on every startup) A performance counter was not loaded. Category Name: SMSvcHost 4.0.0.0 Counter Name: Protocol Failures over net.pipe Exception:System.InvalidOperationException: The requested Performance Counter is not a custom counter, it has to be initialized as ReadOnly. at System.Diagnostics.PerformanceCounter.InitializeImpl() at System.Diagnostics.PerformanceCounter.get_RawValue() at System.ServiceModel.Diagnostics.PerformanceCounters.GetPerformanceCounterInternal(String categoryName, String perfCounterName, String instanceName, PerformanceCounterInstanceLifetime instanceLifetime) Process Name: SMSvcHost Process ID: 1572 Can anyone confirm for me that their Exchange 2010 machine doesn't generate all these errors during startup?
May 25th, 2011 9:15pm

Hi Dave, The first 2 events appear to be related (1018 & 1028), both referencing the FDS... In my research, these events have been logged, or at least exposed when there was an issue with the offline address book. I noticed in your description for event 1028 it says "from server MAIL for object MAIL" - The second entry of "MAIL"... Is this what the actual event says or did you put this entry in? Regarding the Event ID 10 - Do you have any 3rd party software installed that does any kind of monitoring? Are you able to actually load the counters that are referenced using Performance Monitor? Kevin Ca - MSFT
Free Windows Admin Tool Kit Click here and download it now
May 30th, 2011 4:14am

Any update on the issue?Gulab | MCITP: Exchange 2010 | MCITP: Exchange 2007 | Skype: Gulab.Mallah | Blog: www.ExchangeRanger.blogspot.com
May 30th, 2011 9:40am

Hi Kevin - thanks for the reply :-) "I noticed in your description for event 1028 it says "from server MAIL for object MAIL" - The second entry of "MAIL"... Is this what the actual event says or did you put this entry in?" That's what the actual error says :-0 Is is possible I did not configure something correctly? With respect to event ID 10 (the 14 performance counter not loaded errors) I just checked the performance monitor in Exchange and it seems that all the counters are working. Because these errors only seem to appear during machine startup it causes me to wonder if ALL Exchange 2010 machines exhibit this behavior? Ie. Can anyone confirm for me that they get a clean application log during startup?
Free Windows Admin Tool Kit Click here and download it now
May 31st, 2011 4:46am

I don't get any of these on startup when i reboot any of my Exchange 2010 machines. Im not sure if you can try this... but if you set all of the Exchange services to disabled... reboot the machine, then start them all manually... do you see all of these events? Do the events get logged outside of a reboot/bootup?Kevin Ca - MSFT
June 2nd, 2011 1:40am

Hi Kevin; Thanks for your continued help :-) I changed the Exchange services startup to all manual, shut down and re-started the machine and found that all the errors went away and we had a clean application and system log. That would seem to indicate to me that the issue lies with the Exchange 2010 software. At this point I think we're going to shelve Exchange 2010, at least, for the time being. I appreciate your help with these issues but I can't shake that old feeling that we're going to ultimately find out it's a problem on Microsoft's end (no offense) and that there won't be anything I can do about it :-0
Free Windows Admin Tool Kit Click here and download it now
June 5th, 2011 7:40am

I understand the concern, and potential frustration. 2 key elements to this are: 1. After the reboot, when you manually start the services, did the errors get logged? & 2. Outside of a reboot/bootup, do you ever see these errors? If you answered "No" to these, then my gut feeling is that the issue would not be with the Exchange software itself. Every since Exchange 2000, i've seen cases like this where Exchange was installed on a domain controller, or installed on a machine with delayed services starting up, or delayed network connectivity, etc. and we saw errors during bootup. Often times it is a matter of configuring the service startup delays, removing un-compatible software, updating NIC drivers or DNS records, etc. etc. If you reboot without the Exchange services set to automatic, then start them manually, and do not see errors, this indicates a timing issue on bootup. In which case, we would need a much more complete picture of the server (like complete app logs, complete sys logs, roles installed, software installed, length of bootup, DNS logs, etc.) Whichever direction you go, i wish you luck, but certainly hope you do not keep Exchange 2010 shelved for too long, it is a great Mail Server with alot of great features :) Kevin Ca - MSFT
June 5th, 2011 10:09pm

Hi Kevin; Just wanted to let you know I decided to take it off the shelf and give it another go :-) I'm starting from scratch on a new VM in order to give it the best chance :-)
Free Windows Admin Tool Kit Click here and download it now
June 15th, 2011 12:38am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics