Exch System Attendant keeps stopping

[reynolwi]

Ok exchange is still running i can get into email and everything but the ESA service wont stay running. its giving me these error messages.

Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 10/1/2008
Time: 3:29:37 PM
User: N/A
Computer: EXCH
Description:
Faulting application mad.exe, version 6.5.7638.1, faulting module mapi32.dll, version 6.5.7638.1, fault address 0x00020e86.

Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 6d 61 64 ure mad
0018: 2e 65 78 65 20 36 2e 35 .exe 6.5
0020: 2e 37 36 33 38 2e 31 20 .7638.1
0028: 69 6e 20 6d 61 70 69 33 in mapi3
0030: 32 2e 64 6c 6c 20 36 2e 2.dll 6.
0038: 35 2e 37 36 33 38 2e 31 5.7638.1
0040: 20 61 74 20 6f 66 66 73 at offs
0048: 65 74 20 30 30 30 32 30 et 00020
0050: 65 38 36 e86


Event Type: Error
Event Source: Microsoft Exchange Server
Event Category: None
Event ID: 1000
Date: 10/1/2008
Time: 3:29:31 PM
User: N/A
Computer: EXCH
Description:
Faulting application mad.exe, version 6.5.7638.1, stamp 430e737d, faulting module mapi32.dll, version 6.5.7638.1, stamp 430e7016, debug? 0, fault address 0x00020e86.

Data:
0000: 41 00 70 00 70 00 6c 00 A.p.p.l.
0008: 69 00 63 00 61 00 74 00 i.c.a.t.
0010: 69 00 6f 00 6e 00 20 00 i.o.n. .
0018: 46 00 61 00 69 00 6c 00 F.a.i.l.
0020: 75 00 72 00 65 00 20 00 u.r.e. .
0028: 20 00 6d 00 61 00 64 00 .m.a.d.
0030: 2e 00 65 00 78 00 65 00 ..e.x.e.
0038: 20 00 36 00 2e 00 35 00 .6...5.
0040: 2e 00 37 00 36 00 33 00 ..7.6.3.
0048: 38 00 2e 00 31 00 20 00 8...1. .
0050: 34 00 33 00 30 00 65 00 4.3.0.e.
0058: 37 00 33 00 37 00 64 00 7.3.7.d.
0060: 20 00 69 00 6e 00 20 00 .i.n. .
0068: 6d 00 61 00 70 00 69 00 m.a.p.i.
0070: 33 00 32 00 2e 00 64 00 3.2...d.
0078: 6c 00 6c 00 20 00 36 00 l.l. .6.
0080: 2e 00 35 00 2e 00 37 00 ..5...7.
0088: 36 00 33 00 38 00 2e 00 6.3.8...
0090: 31 00 20 00 34 00 33 00 1. .4.3.
0098: 30 00 65 00 37 00 30 00 0.e.7.0.
00a0: 31 00 36 00 20 00 66 00 1.6. .f.
00a8: 44 00 65 00 62 00 75 00 D.e.b.u.
00b0: 67 00 20 00 30 00 20 00 g. .0. .
00b8: 61 00 74 00 20 00 6f 00 a.t. .o.
00c0: 66 00 66 00 73 00 65 00 f.f.s.e.
00c8: 74 00 20 00 30 00 30 00 t. .0.0.
00d0: 30 00 32 00 30 00 65 00 0.2.0.e.
00d8: 38 00 36 00 0d 00 0a 00 8.6.....


I have tried to search for the problem and havent had much luck. The only thing i have done recently was i created a Blackberry enterprise service account and gave it permissions on exchange following the setup instructions and 2 updates were installed on the server. one update was KB890830 (windows malicious software removal tool) and the other was kb938464 (security update for windows 2003 server). i removed the security update and rebooted and that didnt help. I can go in and start the ESA service but then it shuts back down after like 2 or 3 mins and starts with those errors again.

Wm. Reynolds
Premise Communications
Texas Public Safety Solutions

http://www.rrwds.com

http://www.txpubsafety.com

- - - - - - - - - - - - -

Network Error:
Hit any user to continue

 

[58sniper]

You don't have Outlook installed on that server, do you?

Pat Richard MVP
Plan for performance, and capacity takes care of itself. Plan for capacity, and suffer poor performance.

http://www.ucblogs.net/blogs/exchange/

 

[reynolwi]

no i dont. i dont understand what happened either. I created the service account for BES. I gave it send as /recieve as permissions, and administer information store permissions. I gave it log on locally and as service and made it a member of the local admin group. Then i installed the updates.

Wm. Reynolds
Premise Communications
Texas Public Safety Solutions

http://www.rrwds.com

http://www.txpubsafety.com

- - - - - - - - - - - - -

Network Error:
Hit any user to continue

 

[reynolwi]

Its allowing everybody to access email either OWA or outlook and its delivering emails but its screwing BES up because it cant do any lookups.

The setting changes couldnt have done this right?

Wm. Reynolds
Premise Communications
Texas Public Safety Solutions

http://www.rrwds.com

http://www.txpubsafety.com

- - - - - - - - - - - - -

Network Error:
Hit any user to continue

 

[reynolwi]

I think i might have accidently deleted some unknown user account. Whe i was giving permissions in the exchange admin delegation wizard i think i might have accidently deleted an account that was listed but it was showing a SID instead of a username.

Wm. Reynolds
Premise Communications
Texas Public Safety Solutions

http://www.rrwds.com

http://www.txpubsafety.com

- - - - - - - - - - - - -

Network Error:
Hit any user to continue

 

[Zelandakh]

That could be it. Check whether SA is running on an account that doesn't exist.

 

[reynolwi]

this is extrememly weird but a microsoft update screwed me up somehow. i was searching thru stuff on google and i cant remember the article number but i found it on microsoft. I reapplied srvpack 2 to exchange server and it started up with no problems and MAD or the ESA service have not had any problems yet. It fixed whatever got screwed up.

Wm. Reynolds
Premise Communications
Texas Public Safety Solutions

http://www.rrwds.com

http://www.txpubsafety.com

- - - - - - - - - - - - -

Network Error:
Hit any user to continue

 

[Zelandakh]

Good to hear you got it working and now members can find the fix.