Exchange Information Store Quits Once a Week 1

[DoubleS]

I am running Small Business Server 2000 and about once a week Exchange 2000 will quit unexpectedly.

The event log shows four consecutive Service Control Manager 7011 errors with the following message: "Timeout (30000 milliseconds) waiting for a transaction response from the MSExchangeIS service. "

The fifth message is a Service Control Manager 7031 error: "The Microsoft Exchange Information Store service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 0 milliseconds: No action. "

Windows 2000 Server and Exchange 2000 are both at SP2. This server runs only: Win2k Server, Exchange2k, a Persuasive database, Norton AV CE 7.6, and Veritas Backup Exec.

Any ideas? I can't seem to find anything to help me so far. Where should I start?

Thanks,
-SS

 

[tom11011]

try eventid.com

 

[Xybertron]

Did the store drwatson? It should have. If so remove AV. If it still happens call us and get a free update for store.

Service Pack 3 will be out very soon. It will have all the latest store fixes and could resolve this issue. Dan
Microsoft Exchange Support @ Microsoft

 

[DoubleS]

tom11011 - I looked at event ID, it turns out that 7031 is really a very general message that applies to a variety of things. All it really tells you is that the service stopped (duh!!)

Xybertron - The Dr. Watson log file does have store.exe in there. Are you suggesting that I take Norton CE off the server all together, or simply disable any protection that its providing to the server. I'd love to let the client computers continue to have AV protection.

-SS

 

[Xybertron]

I was talking about for NAV for Exchange.

Does the Exchange Server only have NAV CE? Have you excluded the exchsrvr folders and the M drive from scans? You will usually see an Event 6 saying it is trying to scan Exchange stuff and can't.

I can analyze the user.dmp for you. Was store.exe the most recent crash in the watson log? Dan
Microsoft Exchange Support @ Microsoft

 

[DoubleS]

The Exchange Server only has NAV CE. I had not excluded M and Exchsrvr folder from regular scans, but have now .

The most recent watson log:

Application exception occurred:
App: (pid=2676)
When: 6/30/2002 @ 00:35:46.656
Exception number: c0000005 (access violation)

*----> System Information <----*
Computer Name: XXXXXXX
User Name: SYSTEM
Number of Processors: 1
Processor Type: x86 Family 6 Model 8 Stepping 10
Windows 2000 Version: 5.0
Current Build: 2195
Service Pack: 2
Current Type: Uniprocessor Free
Registered Organization: XXXXXXXX
Registered Owner: administrator

*----> Task List <----*
0 Idle.exe
8 System.exe
192 SMSS.exe
216 CSRSS.exe
240 WINLOGON.exe
268 SERVICES.exe
280 LSASS.exe
396 termsrv.exe
524 svchost.exe
544 spoolsv.exe
812 msdtc.exe
924 ati2plxx.exe
936 pvlsvr.exe
952 benser.exe
976 nsvr.exe
1000 defwatch.exe
1028 dfssvc.exe
1048 tcpsvcs.exe
1080 svchost.exe
1104 pds.exe
1148 ismserv.exe
1160 lsirpc.exe
1196 rtvscan.exe
1268 NscTop.exe
1360 ntfrs.exe
1412 W3sqlmgr.exe
1448 Ntbtrv.exe
1472 regsvc.exe
1492 Ntdbsmgr.exe
1500 LOCATOR.exe
1512 mstask.exe
1580 SNMP.exe
1628 svchost.exe
1664 ups.exe
1696 WinMgmt.exe
1788 wins.exe
1800 svchost.exe
1820 alertserver.exe
1864 dns.exe
1916 inetinfo.exe
2048 HNDLRSVC.exe
1552 MSGSYS.exe
2116 IAO.exe
2136 XFR.exe
2160 EXMGMT.exe
2244 MAD.exe
2292 mssearch.exe
2332 beserver.exe
2676 STORE.exe
2992 EMSMTA.exe
3372 bengine.exe
3568 benetns.exe
1520 explorer.exe
2696 atiptaxx.exe
2816 vptray.exe
772 svchost.exe
3872 DLLHOST.exe
2432 DRWTSN32.exe
0 _Total.exe

(00400000 - 00862000) C:\WINNT\symbols\exe\store.pdb

and so forth. If there is some user.dmp information that would be helpful, I'd be happy to send it to you. The file is pretty large, so let me know at ssittig@ss-e.com.

Thanks!
-SS

 

[Xybertron]

That was on 6/30/2002. Is there one for the last time it happened? Is that time the same time as the user.dmp? Dan
Microsoft Exchange Support @ Microsoft

 

[DoubleS]

The most recent modify dates are 6-30, even though the last event was 7-3. Any ideas?

-SS

 

[Xybertron]

Hopefully stopping the AV from scanning will resolve the problem. You did exclude it also under realtime protection? Dan
Microsoft Exchange Support @ Microsoft

 

[tom11011]

Yes, never scan or defrag the M drive. Do you backup this server? There are some issues with veritas.

 

[DoubleS]

Xybertron: I have not excluded the exchsrvr folder or M drive from realtime protection yet. I'll do that as well.

tom11011: I do back up the server with Veritas now, including the exchange items (using the Veritas Exchange backup agent). What kind of issues are there?

-SS

 

[jaksen112]

I had a simillar issue with my exchange server when I first started using veritas BE, server would reboot unexpectedly, only my event log left no traces. I called veritas on this and spent several hours trying to get to the bottom of the problem but to make a long story short, I'm using NT backup now. 01110000

 

[DoubleS]

I haven't been that impressed with Veritas BE to be quite honest. I did some poking around on Technet and found an article on Exchange backup and restoration using MS Backup. I think I'm going to implement it.

http://www.microsoft.com/exchange/techinfo/deployment/2000/E2Krecovery.asp