Hi all! The server is a Windows Server 2008 x64 with all updates and Exchange Server Std 2007 sp1 with latest rollup. A few weeks agoI had problems with Search index on my Exchange and I got help so I got rid of those error messages. However, now I have different error messages not pointing toward Search Indexing directly but the OWA search still does not work. The problems refer to Perflib dll's and EXODBPC and DAVEXPC. I am out of ideas here. These are the messages that appear if I restart the "Microsoft Search (Exchange)" and the "Microsoft Exchange Search Indexer" services. Code Snippet Log Name: Application Source: Microsoft-Windows-Perflib Date: 2008-12-04 10:32:50 Event ID: 1008 Task Category: None Level: Error Keywords: Classic User: N/A Computer: SERVERNAME.domain.corp Description: The Open Procedure for service "WmiApRpl" in DLL "C:\Windows\system32\wbem\wmiaprpl.dll" failed. Performance data for this service will not be available. The first four bytes (DWORD) of the Data section contains the error code. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-Perflib" Guid="{13B197BD-7CEE-4B4E-8DD0-59314CE374CE}" EventSourceName="Perflib" /> <EventID Qualifiers="49152">1008</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2008-12-04T09:32:50.000Z" /> <EventRecordID>1120511</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>Application</Channel> <Computer>SERVERNAME.domain.corp</Computer> <Security /> </System> <UserData> <EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="Perflib"> <param1>WmiApRpl</param1> <param2>C:\Windows\system32\wbem\wmiaprpl.dll</param2> <binaryDataSize>8</binaryDataSize> <binaryData>1500000000000000</binaryData> </EventXML> </UserData> </Event> Log Name: Application Source: Microsoft-Windows-Perflib Date: 2008-12-04 10:32:48 Event ID: 1008 Task Category: None Level: Error Keywords: Classic User: N/A Computer: SERVERNAME.domain.corp Description: The Open Procedure for service "Lsa" in DLL "C:\Windows\system32\Secur32.dll" failed. Performance data for this service will not be available. The first four bytes (DWORD) of the Data section contains the error code. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-Perflib" Guid="{13B197BD-7CEE-4B4E-8DD0-59314CE374CE}" EventSourceName="Perflib" /> <EventID Qualifiers="49152">1008</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2008-12-04T09:32:48.000Z" /> <EventRecordID>1120510</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>Application</Channel> <Computer>SERVERNAME.domain.corp</Computer> <Security /> </System> <UserData> <EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="Perflib"> <param1>Lsa</param1> <param2>C:\Windows\system32\Secur32.dll</param2> <binaryDataSize>8</binaryDataSize> <binaryData>0500000000000000</binaryData> </EventXML> </UserData> </Event> Log Name: Application Source: EXODBPC Date: 2008-12-04 10:32:48 Event ID: 903 Task Category: None Level: Error Keywords: Classic User: N/A Computer: SERVERNAME.domain.corp Description: The description for Event ID 903 from source EXODBPC cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: EXOLEDB The specified resource type cannot be found in the image file Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="EXODBPC" /> <EventID Qualifiers="49152">903</EventID> <Level>2</Level> <Task>0</Task> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2008-12-04T09:32:48.000Z" /> <EventRecordID>1120509</EventRecordID> <Channel>Application</Channel> <Computer>SERVERNAME.domain.corp</Computer> <Security /> </System> <EventData> <Data>EXOLEDB</Data> <Binary>05000000</Binary> </EventData> </Event> Log Name: Application Source: DAVEXPC Date: 2008-12-04 10:32:47 Event ID: 903 Task Category: None Level: Error Keywords: Classic User: N/A Computer: SERVERNAME.domain.corp Description: The description for Event ID 903 from source DAVEXPC cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: DAVEX Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="DAVEXPC" /> <EventID Qualifiers="49152">903</EventID> <Level>2</Level> <Task>0</Task> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2008-12-04T09:32:47.000Z" /> <EventRecordID>1120508</EventRecordID> <Channel>Application</Channel> <Computer>SERVERNAME.domain.corp</Computer> <Security /> </System> <EventData> <Data>DAVEX</Data> <Binary>05000000</Binary> </EventData> </Event>

More error messages: Code Snippet Log Name: Application Source: Microsoft-Windows-Perflib Date: 2008-12-04 10:32:47 Event ID: 1008 Task Category: None Level: Error Keywords: Classic User: N/A Computer: SERVERNAME.domain.corp Description: The Open Procedure for service "ContentIndex" in DLL "C:\Windows\system32\query.dll" failed. Performance data for this service will not be available. The first four bytes (DWORD) of the Data section contains the error code. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-Perflib" Guid="{13B197BD-7CEE-4B4E-8DD0-59314CE374CE}" EventSourceName="Perflib" /> <EventID Qualifiers="49152">1008</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2008-12-04T09:32:47.000Z" /> <EventRecordID>1120507</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>Application</Channel> <Computer>SERVERNAME.domain.corp</Computer> <Security /> </System> <UserData> <EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="Perflib"> <param1>ContentIndex</param1> <param2>C:\Windows\system32\query.dll</param2> <binaryDataSize>8</binaryDataSize> <binaryData>EB03000000000000</binaryData> </EventXML> </UserData> </Event> Log Name: Application Source: Microsoft-Windows-Perflib Date: 2008-12-04 10:32:47 Event ID: 1008 Task Category: None Level: Error Keywords: Classic User: N/A Computer: SERVERNAME.domain.corp Description: The Open Procedure for service "ContentFilter" in DLL "C:\Windows\System32\query.dll" failed. Performance data for this service will not be available. The first four bytes (DWORD) of the Data section contains the error code. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-Perflib" Guid="{13B197BD-7CEE-4B4E-8DD0-59314CE374CE}" EventSourceName="Perflib" /> <EventID Qualifiers="49152">1008</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2008-12-04T09:32:47.000Z" /> <EventRecordID>1120506</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>Application</Channel> <Computer>SERVERNAME.domain.corp</Computer> <Security /> </System> <UserData> <EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="Perflib"> <param1>ContentFilter</param1> <param2>C:\Windows\System32\query.dll</param2> <binaryDataSize>8</binaryDataSize> <binaryData>EB03000000000000</binaryData> </EventXML> </UserData> </Event> Log Name: Application Source: Microsoft-Windows-Perflib Date: 2008-12-04 10:32:47 Event ID: 1008 Task Category: None Level: Error Keywords: Classic User: N/A Computer: SERVERNAME.domain.corp Description: The Open Procedure for service "BITS" in DLL "C:\Windows\system32\bitsperf.dll" failed. Performance data for this service will not be available. The first four bytes (DWORD) of the Data section contains the error code. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-Perflib" Guid="{13B197BD-7CEE-4B4E-8DD0-59314CE374CE}" EventSourceName="Perflib" /> <EventID Qualifiers="49152">1008</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2008-12-04T09:32:47.000Z" /> <EventRecordID>1120505</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>Application</Channel> <Computer>SERVERNAME.domain.corp</Computer> <Security /> </System> <UserData> <EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="Perflib"> <param1>BITS</param1> <param2>C:\Windows\system32\bitsperf.dll</param2> <binaryDataSize>8</binaryDataSize> <binaryData>0500000000000000</binaryData> </EventXML> </UserData> </Event>

Dear customer: 1. Is the IndexEnabled parameter set to true for the mailbox database of the user? If Yes, go to Step 2. If No, run the following command in the Exchange Management Shell to verify that the IndexEnabled flag is set to true: Get-MailboxDatabase |ft Name,IndexEnabled 2. Has the Exchange database been crawled? If Yes, go to Step 4. If No, use Performance Monitor to check the Full Crawl Mode Status counter. This counter is stored in the MSExchange Search Indices performance object. Select the instance for the user's database. When the database is still being crawled, it has a value of 1. When the crawl is complete, the value is 0. 3. Run the Test-ExchangeSearch command for the user and post the result into the forum: Test-ExchangeSearch -Identity TedBremer@contoso.com 4. Download MPSRPT Exchange.exe and MPSRPT Exchange readme.txt from the following link and run it on your Exchange server, and then send the result to v-rocwan@microsoft.com for analyze. Note: when it prompt whether include msinfo32 report or not, select yes. http://www.microsoft.com/downloads/details.aspx?FamilyID=cebf3c7c-7ca5-408f-88b7-f9c79b7306c0&DisplayLang=en when you send e-mail to me, please let me know the subject of the post. Thanks for your cooperation. Rock Wang MSFT