Information Stores

  • From: Greg Hermida <ghermida@xxxxxxxxxxxxxxx>
  • To: "[ExchangeList] (E-mail)" <exchangelist@xxxxxxxxxxxxx>
  • Date: Mon, 3 May 2004 10:53:48 -0500

Howdy all,

Perhaps someone can help me with an issue I am having with my Exchange
server.  NT4 domain with win2k servers as well, Single Exchange site,
running Exchange 5.5. Enterprise w/SP4 on a Win2k server.  Since Wednesday,
the private and public information stores have been shutting down.
Restarting the service(s) do not work, I have to reboot the server in order
to get Email up and running.

1-In the event logs, the first indication of trouble is where I get many
Event Id errors 4117-Event Type:        Error
Event Source:   MSExchangeIMC
Event Category: Internal Processing 
Event ID:       4117
Date:           5/3/2004
Time:           9:15:40 AM
User:           N/A
Computer:       MAILSERV1
An error was returned from the messaging software the Internet Mail Service
uses to process messages on the Microsoft Exchange Server.  As a result, the
message in spool file K1T4D3QC failed to be delivered. The message has been
moved to the  IMCDATA\IN\ARCHIVE directory. 
0000: 73 05 01 00 05 40 00 80   s....@.?

2-Then, I start receiving notifications that my end users can no longer
"authenticate into their email account"- Event Type:    Failure Audit
Event Source:   MSExchangeIS Private
Event Category: Logons 
Event ID:       1023
Date:           5/3/2004
Time:           9:15:40 AM
User:           N/A
Computer:       MAILSERV1
MEDIVIEW\muser was validated as
/o=mediview/ou=MEDIVIEW/cn=Recipients/cn=muser but was unable to log on to

3-Lastly, I'll see a lot of Event ID 1101 errors- Event Type:   Error
Event Source:   MSExchangeIS Private
Event Category: Background Cleanup 
Event ID:       1101
Date:           5/3/2004
Time:           9:16:18 AM
User:           N/A
Computer:       MAILSERV1
Error 0xfffffbd3 occurred on message b-FE94FC during a background cleanup. 

After all this, the information stores simply shut down.  I have logging
turned on (minimal) for Message Transfer & SMTP Interface events.  If I need
to record more info to solve this issue, what other Diagnostic logging
should I have turned on and at what level?

CONFIDENTIALITY NOTICE: This e-mail message, including any attachments, is
for the sole use of the intended recipient(s)  
and may contain confidential information and privileged information.  Any
unauthorized retention, review, printing, copying, 
disclosure or distribution is prohibited.  If you are not one of the
intended recipients, please contact the sender by reply 
email or phone, destroy all copies of the original message and keep the
information contained here confidential.

Other related posts: