Dear all,I have a problem here and believe that someone could help me get the issues resolved. Here is my scenario, - I backed up "First Storage Group" that contains 'Mailbox Store' and 'Public Folder Store'. - The full backup and the incremental backups were successful. - I lost a specific mailbox. Hence I wanted to restore just that mailbox upto-date(as in the backup) and NOT ALL the mailboxes. - Hence, I planned to restore the 'Mailbox Store' to the 'Recovery Storage Group' along with the log files(because numerous transactions are in those log files). - When I restored the 'Mailbox Store' alone(as Public Folder Store cannot be restored to the 'Recovery Storage Group') along with the log files, I could see the following errors/failures. Problem 1: The restored database 'Mailbox Store' was in 'Dirty Shutdown' state. Problem 2: I am not able to replay the log files to the 'Recovery Storage Group' and when I manually try to do so, eseutil throws error and logs replay does not start. I can resolve the 'Problem 1' by bringing the 'Mailbox Store' (now present in the Recovery Storage Group) to 'Clean Shutdwown' state by repairing the database. But I do not know how to replay the log files to the Recovery Storage Group. Can someone please help me on this issue? Is it possible to replay the log files to a Recovery Storage Group when restoring a 'Mailbox Store' alone and not the Public Folder Store? I suspect that the log file replay failure is due to the Public Folder Store only, because the log files would have got the transactions of the Public Folders too. Any way to recover the data from the log files also (by replaying them to the Recovery Storage Group)? Exchange Version: Exchange Server 2003 OS version : Windows Server 2003 (32-bit) Many thanks in advance, Nesan Joseph R.

Nathan, When attempted to do restore then it might have asked you for the location of log files. you need to first run the below command on the recovery database eseutil mh <path of recovery store database> check for the log sequence then run the below command eseutil /cm <path of the <First storage grouplog folder> for e.g you might see it in c:\temp folder or depending on the location within that temp folder you might see another folder called <First storage group\restore.env> check if those log ranges matches with the command run by eseutil/mh command in case if it matches then follow the below command eseutil /cc <path of the First storage grouplog folder> This will replay the log files to database then try to mound the database let me know if you have any issues Vinod |CCNA|MCSE 2003 +Messaging|MCTS|ITIL V3|

Thank you very much Vinod. Adding to my previous post I just want to show you the results of some commands i ran to replay the log files. Any help is appreciated if there is a way to mount the database with all required logs replayed, without using '/p' switch(repair)! The following are the command results of the steps i tried to restore the database to a Recovery Storage Group. 1) I ran the eseutil /mh command after restoring the exchange data to the RSG. please find the output. ----------------------------------8<--------------------------------------- C:\Program Files\Exchsrvr\RSG>"C:\Program Files\Exchsrvr\bin\eseutil.exe" /mh "Mailbox Store (DUALSERVER).edb" Microsoft(R) Exchange Server Database Utilities Version 6.5 Copyright (C) Microsoft Corporation. All Rights Reserved. Initiating FILE DUMP mode... Database: Mailbox Store (DUALSERVER).edb File Type: Database Format ulMagic: 0x89abcdef Engine ulMagic: 0x89abcdef Format ulVersion: 0x620,9 Engine ulVersion: 0x620,9 Created ulVersion: 0x620,9 DB Signature: Create time:05/19/2009 13:32:22 Rand:1463303647 Computer: cbDbPage: 4096 dbtime: 657864 (0-657864) State: Dirty Shutdown Log Required: 462-463 Streaming File: Yes Shadowed: Yes Last Objid: 542 Scrub Dbtime: 0 (0-0) Scrub Date: 00/00/1900 00:00:00 Repair Count: 0 Repair Date: 00/00/1900 00:00:00 Last Consistent: (0x1CC,29,4E) 06/30/2009 11:36:48 Last Attach: (0x1CC,30,151) 06/30/2009 11:41:58 Last Detach: (0x0,0,0) 00/00/1900 00:00:00 Dbid: 1 Log Signature: Create time:05/19/2009 13:32:02 Rand:1463289603 Computer: OS Version: (5.2.3790 SP 2) Previous Full Backup: Log Gen: 460-460 (0x1cc-0x1cc) Mark: (0x1CC,86,40) Mark: 06/30/2009 12:36:14 Current Incremental Backup: Log Gen: 460-462 (0x1cc-0x1ce) Mark: (0x1CF,8,16) Mark: 06/30/2009 12:38:32 Current Full Backup: Log Gen: 462-466 (0x1ce-0x1d2) Mark: (0x1CF,9,60) Mark: 06/30/2009 12:39:53 Current snapshot backup: Log Gen: 0-0 (0x0-0x0) Mark: (0x0,0,0) Mark: 00/00/1900 00:00:00 cpgUpgrade55Format: 0 cpgUpgradeFreePages: 0 cpgUpgradeSpaceMapPages: 0 Operation completed successfully in 1.94 seconds. ---------------------------------->8--------------------------------------- 2) The shutdown state is 'Dirty'. I do not know why the shutdown state is always 'Dirty' whenever i try to restore a database to RSG!. Since I did not choose 'Last Restore Set' while restoring the data, I tried to replay the log files manually. Please find the output of eseutil /cm command. ----------------------------------8<--------------------------------------- D:\tempologs\RSG>"C:\Program Files\Exchsrvr\bin\eseutil.exe" /cm . Microsoft(R) Exchange Server Database Utilities Version 6.5 Copyright (C) Microsoft Corporation. All Rights Reserved. Restore log file: D:\tempologs\RSG Restore Path: D:\tempologs\RSG Annotation: Microsoft Information Store Server: DUALSERVER Backup Instance: RSG Target Instance: Restore Instance System Path: Restore Instance Log Path: Databases: 1 database(s) Database Name: Mailbox Store (DUALSERVER) GUID: 08B2D6FF-F0D1-4522-7BA8452278A949DC Source Files: D:\local_exchange_restore\C-Drive\Program Files\Vembu\StoreGrid\plugin-data\xchangeserver\FirstStorageGroup\DUALSERVER\RS G\Mailbox Store (DUALSERVER)\Mailbox Store (DUALSERVER).edb D Destination Files: C:\Program Files\Exchsrvr\RSG\Mailbox Sto re (DUALSERVER).edb C:\Program Files\Exchsrvr\RSG\Mailbox Store (DUALSERVER).stm Log files range: E00001CE.log - E00001D2.log Last Restore Time: Thu Jan 01 05:30:00 1970 Recover Status: recoverNotStarted Recover Error: 0x00000000 Recover Time: Tue Jun 30 13:03:05 2009 Operation completed successfully in 0.15 seconds. ---------------------------------->8--------------------------------------- 3) I ran eseutil /cc command now. here is the output. I am worried about the error "Operation terminated with error -939585531 (Error returned from a callback function call (0xFFFFFDE0)". ----------------------------------8<--------------------------------------- D:\tempologs\RSG>"C:\Program Files\Exchsrvr\bin\eseutil.exe" /cc Microsoft(R) Exchange Server Database Utilities Version 6.5 Copyright (C) Microsoft Corporation. All Rights Reserved. Using restore environment Restore log file: D:\tempologs\RSG Restore Path: D:\tempologs\RSG Annotation: Microsoft Information Store Server: DUALSERVER Backup Instance: RSG Target Instance: Restore Instance System Path: Restore Instance Log Path: Databases: 1 database(s) Database Name: Mailbox Store (DUALSERVER) GUID: 08B2D6FF-F0D1-4522-7BA8452278A949DC Source Files: D:\local_exchange_restore\C-Drive\Program Files\Vembu\StoreGrid\plugin-data\xchangeserver\FirstStorageGroup\DUALSERVER\RS G\Mailbox Store (DUALSERVER)\Mailbox Store (DUALSERVER).edb D Destination Files: C:\Program Files\Exchsrvr\RSG\Mailbox Sto re (DUALSERVER).edb C:\Program Files\Exchsrvr\RSG\Mailbox Store (DUALSERVER).stm Log files range: E00001CE.log - E00001D2.log Last Restore Time: Thu Jan 01 05:30:00 1970 Recover Status: recoverNotStarted Recover Error: 0x00000000 Recover Time: Tue Jun 30 13:03:05 2009 Restoring .... Restore to server: DUALSERVER Target Instance: RSG Operation terminated with error -939585531 (Error returned from a callback function call (0xFFFFFDE0). ) after 8.469 seconds. ---------------------------------->8--------------------------------------- I am not sure what is the issue. Please advise. Is there any other method should i follow to restore a mailbox store to a Recovery Storage Group? hard recovery, soft recovery etc...! What step am I missing? Many thanks, Nesan Joseph R.

What event(s) do you see in the Application log when you run eseutil /cc? Are the logs e00001ce-e00001d2 present?

Hi Nesanjoseph: Per your description, I have some suggests for you. 1. If you have made a full backup and the incremental backups successfully, you can enable the Last Restore Set (Log file replay will start after this restore complete.), and then you via mount the RSG, or use the Exmerg.exe to export the specified users mailbox. 2. About your puzzled point you referred first, you can restore a mailbox store to a Recovery Storage Group but not include the public folder. When you restore the backup, you should just choose the mailbox data and the log file; otherwise the operation will be failed. So the replay failure was not caused by that. 3. According to your published information, the course is correct, and I have made a successfully test. But, when you run the eseutil /cc to replay the logs, something error happened. I suggest you reboot your exchange server, and then do the operations. I have come across the same question before. Or you can publish more application log; we can get more information to do further research for regarding your issue. Some useful links for you: http://support.microsoft.com/kb/824126/ http://support.microsoft.com/kb/823176 http://support.microsoft.com/kb/248122 http://technet.microsoft.com/en-us/library/aa996189(EXCHG.65).aspx

Dear Jimthemcp & Gavin, I saw the event viewer and I could see a lot of errors in it. Most of the error messages related with 'ESE' were the following two errors. Error 1: ----------------------------------------------8<---------------------------------------------- eseutil (6996) Error -1811 (0xfffff8ed) occurred while opening logfile D:\tempologs\RSG\E00.log. For more information, click http://www.microsoft.com/contentredirect.asp. ---------------------------------------------->8---------------------------------------------- Error 2: ----------------------------------------------8<---------------------------------------------- Information Store (3836) RSG: Attempted to attach database 'C:\Program Files\Exchsrvr\RSG\Mailbox Store (DUALSERVER).edb' but it is a database restored from a backup set on which hard recovery was not started or did not complete successfully. For more information, click http://www.microsoft.com/contentredirect.asp. ---------------------------------------------->8---------------------------------------------- Have any guess what was causing the RSG restore failure...? Thanks and Regards, Nesan Joseph R.

HiAccording to the error 1, "error -1811" means that the logfile has been destroyed. Normally, it is impossible to replay the logfile successfully. Maybe something wrong when the backup task implemented.So, i suggests you do below steps.1.You can remove all the current RSG and the temp file,and then create a new RSG, do the recover course again, but remember enable the Last Restore Set (Log file replay will start after this restore complete.), If it is successful, you can mount the database and use the "Exmerg.exe" to export the specified user's mailbox.2. If the setp1 is unsuccessful, you can do the course on the a recovery server.3. If the step1 and step2is unsuccessful, you have to do hard recovery, beacause of the destoryed logfile, you have to use "eseutil /p" to repair your database. Maybe, by this method, you willlost some mails.

Thanks Gavin. I have the following doubts now! 1) The event error says "...occurred while opening logfile D:\tempologs\RSG\E00.log...". When we create a RSG and add the mailbox store, the store will be in dismount state by default. right?. Then i mounted the database and it created the default files like *.edb, *.stm, E00.log, *.chk etc. I moved ALL of these files to a folder and started the restore process. Should i leave any of these files intact in the same location before starting the restore process? I had no file like E00.log in the backed up files(only *.edb, *.GUID, *.stm and EXXXXXXX.log - EYYYYYYY.log files were present). 2) As you have mentioned in 'step3', I have tried hard recovery (eseutil /cc) with no luck. In the temporary folder for the log files, i had some log files (E0000XXX-E0000YYY) and restore.env file. I ran "eseutil /cc" from this location. The output of the command i ran has been displayed in my second post in this same thread. I do not have E00.log file in this temporary location also. Do i need to rename any of these log files to "E00.log"?. Please explain me my mistakes. Awaiting your reply, Many many thanks, Nesan Joseph R.

hiAccording to you referred above "1)", sure,after you add the mailbox srtore, the store would be dismount state by default, then you can via started the restore process. And you do not need move the *.edb, *.stm,E00.log,*.chk because there are not thsoe. And it is thepropositional method.If you mounted the database first, and you must dismount the database and enable the "The database can be overwrittenby a restore" when you start the restore process. You are right, it is no need to leave any of those files in the same location, you just recovery your backup logfile. My last relay, just want to say, if one of the backup logfile is destroyed it is difficult use "eseutil /cc" to replay the logfile.so, i suggest that you could use "eseutil /p"to repair the database without replay the log file. And then via mount it.Note:To perform a hard repair, open a command prompt, switch to the ExchSrvr\Bin folder, type the following line, and then press ENTER: eseutil /p YourDatabaseName.edb You can learn more refer to below link:http://support.microsoft.com/kb/824126/Hope useful for you.

Thank you very much for your kind help! Regards, Nesan Joseph R.