Re: new mail edb and stm

  • From: "Arwin Catalan" <arwc@xxxxxxxxxxx>
  • To: exchangelist@xxxxxxxxxxxxx
  • Date: Fri, 6 Dec 2002 01:39:23 -0700

TECHNET ARTICLE. Might help.

regards,
Arwin


PSS ID Number: Q316709

Article Last Modified on 04-9-2002


--------------------------------------------------------------------------------

The information in this article applies to: 

Microsoft Exchange 2000 Server

--------------------------------------------------------------------------------



Symptoms
If you try to mount the Mailbox Store or the Public Folder Store, you may
receive the following error message:

The store could not be mounted because the Active Directory information
was not replicated yet.
If you click either Retry or Cancel, you receive the following error
message:
The Microsoft Exchange Information Store service could not find the
specified object. ID no:c1041722
In the Application Event Log, you may find any or all of the following
errors:
Event Type: Error
Event Source: MSExchangeIS
Event Category: (6)
Event ID: 9519 
Description: Error 0x80004005 starting database "First Storage
Group\Mailbox Store(<Server>)" on the Microsoft Exchange Information Store. 
Failed
to configure MDB.
Event Type: Error
Event Source: MSExchangeFBPublish
Event Category: (1)
Event ID: 8197
Description: Error initializing session for virtual machine DCMAIL. The
error number is 0x8004011d. Make sure Microsoft Exchange Store is running.
Event Type: Error
Event Source: MSExchangeSA
Event Category: (14)
Event ID: 9175
Description: The MAPI call 'OpenMsgStore' failed with the following error:
The Microsoft Exchange Server computer is not available. Either there are
network problems or the Microsoft Exchange Server computer is down for
maintenance. The MAPI provider failed. Microsoft Exchange Server
Information Store ID no: 8004011d-0526-00000000
Event Type: Error 
Event Source: MSExchangeSA 
Event Category: (2) 
Event ID: 1005 
Description: Unexpected error <<0xc1050000 - The Microsoft Exchange Server 
computer is not available. Either there are network problems or the Microsoft 
Exchange Server computer is down for maintenance. The MAPI provider failed. 
Microsoft Exchange Server Information Store ID no: 8004011d-0526-00000000>>



Cause
This issue may occur if the Microsoft Windows 2000 Group Policy Object has
been deleted or modified. This modification or deletion results in a loss
of the "SeSecurityPrivilege" right.

To verify that this is the cause, run the Policytest utility that is found
on the Exchange 2000 Server CD-ROM in the Support\Utils\i386 folder.

When you run Policytest in a domain, the last line of the message you
receive should state either of the following:

Right Found: "SeSecurityPrivilege" 
-or- 
Right Not Found 
You may also receive a message that states that there is no Domain
Controller with the permission "Manage auditing and security logs".



Resolution
The "SeSecurityPrivilege" right is applied when you run Setup /domainprep.
If you have determined that the Manage Auditing and Security Logs
permission for the Exchange Enterprise Servers group is missing on any (or
all) of the domain controllers, follow these steps to troubleshoot this
issue:

Run the setup /domainprep command from the Setup\I386 folder on the
Exchange 2000 CD-ROM.

When you run this command, the appropriate permissions are added to one
domain controller immediately, and then the change is replicated to the
other domain controllers. For the best troubleshooting results, run setup
/domainprep, and then immediately rerun Policytest.exe and note which
domain controllers return the following message:
Right found: "SeSecurityPrivilege" 
Wait approximately five minutes, and then rerun Policytest.exe. 


Examine the output of Policytest.exe to determine if all of the domain
controllers now have the appropriate permissions, or if none of them do.
If all of the domain controllers return a "Right found:
SeSecurityPrivilege" message, try to mount the databases. If none of the
domain controllers have the appropriate permissions, go to the next step.


Check the Default Domain Controllers Policy. To do this, follow these
steps:


Start the Active Directory Users and Computers snap-in. 


Right-click the Domain Controllers container, and then click Properties. 


Click the Group Policy tab, and then verify that Default Domain
Controllers Policy is listed in the Group Policy Object Links box.

If the Group Policy Object Links box does not contain this setting, click
Add, locate and click Default Domain Controllers Policy, and then click
OK. After you complete this step, make sure that all of the domain
controllers are synchronized to make sure that this change has been
applied to all domain controllers.


NOTE: If you find that there are additional Group Policies listed in the
Group Policy Object Links box, examine the additional Group Policies to
verify that they are not interfering with the rights assigned by
Domainprep. To do this, follow these steps:


Click Start, point to Programs, point to Administrative Tools, and then
click Domain Controller Security Policy.


Expand Security Settings, expand Local Policies, and then click User
Rights Assignment.


Under Policies, double-click Manage auditing and security log, and add the
Exchange Enterprise Server group to the security window if it is not
already there. After you complete this step, make sure that all of the
domain controllers are synchronized to make sure that this change has been
applied to all domain controllers.


Wait approximately five minutes, and then rerun Policytest.exe. 


Repeat step 1. 


NOTE: After all of the Domain Controllers display the "Right found:
SeSecurityPrivilege" message, you may have to stop and start the Microsoft
Exchange Information Store service before the databases can be mounted.



Other related posts: