Single exchange server environment. - Windows 2008 Std. SP2 (virtual machine) - Exchange 2007 Std. SP3; Update Rollup 3-v2 - Hub Transport, Client Access, Mailbox, Unified Messaging roles installed When I try to run the Message Tracking tool on this Exchange 2007 server, I fill out the parameters, click 'Next', and it will error out with the following error: Exchange Troubleshooting Resolution Assistant has stopped working. (Below is the information from the 'details' section of this error dialogue box) Description: Stopped working Problem signature: Problem Event Name: APPCRASH Application Name: ExTRA.exe Application Version: 8.3.133.0 Application Timestamp: 4cc7daf0 Fault Module Name: mscorwks.dll Fault Module Version: 2.0.50727.4456 Fault Module Timestamp: 4c049ecd Exception Code: c0000005 Exception Offset: 00000000001fc672 OS Version: 6.0.6002.2.2.0.272.36 Locale ID: 1033 Read our privacy statement: http://go.microsoft.com/fwlink/?linkid=50163&clcid=0x0409 In addition to the above, 2 errors appear in the application event log: Log Name: Application Source: .NET Runtime Date: 7/8/2011 11:18:06 AM Event ID: 1023 Task Category: None Level: Error Keywords: Classic User: N/A Computer: ExchServer.corp.local Description: .NET Runtime version 2.0.50727.4456 - Fatal Execution Engine Error (000007FEF7DEAEEE) (80131506) Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name=".NET Runtime" /> <EventID Qualifiers="0">1023</EventID> <Level>2</Level> <Task>0</Task> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2011-07-08T16:18:06.000Z" /> <EventRecordID>273605</EventRecordID> <Channel>Application</Channel> <Computer>ExchServer.corp.local</Computer> <Security /> </System> <EventData> <Data>.NET Runtime version 2.0.50727.4456 - Fatal Execution Engine Error (000007FEF7DEAEEE) (80131506)</Data> </EventData> </Event> ----------------- And here is the 2nd error: Log Name: Application Source: Application Error Date: 7/8/2011 11:18:06 AM Event ID: 1000 Task Category: (100) Level: Error Keywords: Classic User: N/A Computer: ExchServer.corp.local Description: Faulting application ExTRA.exe, version 8.3.133.0, time stamp 0x4cc7daf0, faulting module mscorwks.dll, version 2.0.50727.4456, time stamp 0x4c049ecd, exception code 0xc0000005, fault offset 0x00000000001fc672, process id 0x%9, application start time 0x%10. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Application Error" /> <EventID Qualifiers="0">1000</EventID> <Level>2</Level> <Task>100</Task> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2011-07-08T16:18:06.000Z" /> <EventRecordID>273606</EventRecordID> <Channel>Application</Channel> <Computer>ExchServer.corp.local</Computer> <Security /> </System> <EventData> <Data>ExTRA.exe</Data> <Data>8.3.133.0</Data> <Data>4cc7daf0</Data> <Data>mscorwks.dll</Data> <Data>2.0.50727.4456</Data> <Data>4c049ecd</Data> <Data>c0000005</Data> <Data>00000000001fc672</Data> </EventData> </Event> Any help in resolving this issue would be greatly appreciated. Thanks!

Hi, 1. Try running Message tracking from Microsoft exchange Management shell. : get-messagetrackinglog -Recipients:recipient@DomainA.com -Sender "sender@DomainB.com" -Start "7/12/2011 12:45:00 PM" -End "7/12/2011 12:55:00 PM" |fl - make the required modification in the above command and try - Does this also fail? 2. What is the version of .net frame work installed on the server? .Net framework 4.0?

I am waiting for your response

Biff, Just wanted to check, if you need help on this or can we close it. thanks

My apologies Suraj. I've been completely swamped but should be able to get to this today. Many thanks for the response!

From the Programs and Features control panel, the following .NET Framework entries appear: Microsoft .NET Framework 3.5 SP1 Microsoft .NET Framework 4 Client Profile Microsoft .NET Framework 4 Extended When I run the requested Message Tracking command from Exchange Management Shell, I received the 'Windows PowerShell has stopped working' message containing the following details: Description: Stopped working Problem signature: Problem Event Name: APPCRASH Application Name: powershell.exe Application Version: 6.0.6002.18111 Application Timestamp: 4acfacc6 Fault Module Name: mscorwks.dll Fault Module Version: 2.0.50727.5662 Fault Module Timestamp: 4d8c11da Exception Code: c0000005 Exception Offset: 000000000016598a OS Version: 6.0.6002.2.2.0.272.36 Locale ID: 1033 Read our privacy statement: http://go.microsoft.com/fwlink/?linkid=50163&clcid=0x0409

Any errors or warnings in the event logs?Suraj Panicker | Microsoft Enterprise Messaging Team| Microsoft Corp.

this seems to be a BUG. and it is fixed in updae rollup 5 for SP1 A fix for this issue has been released via Update Rollup 5 for Exchange Server 2007 SP1 (KB953467). Download information http://www.microsoft.com/downloads/details.aspx?FamilyId=652ED33A-11A1-459C-8FFE-90B9CBFE7903&displaylang=en http://support.microsoft.com/?kbid=953467 You should uninstall the Interim Update and install the latest update rollup. http://blogs.technet.com/b/exchange/archive/2008/11/21/3406535.aspx Suraj Panicker | Microsoft Enterprise Messaging Team| Microsoft Corp.

this seems to be a BUG. and it is fixed in updae rollup 5 for SP1 A fix for this issue has been released via Update Rollup 5 for Exchange Server 2007 SP1 (KB953467). Download information http://www.microsoft.com/downloads/details.aspx?FamilyId=652ED33A-11A1-459C-8FFE-90B9CBFE7903&displaylang=en http://support.microsoft.com/?kbid=953467 You should uninstall the Interim Update and install the latest update rollup. http://blogs.technet.com/b/exchange/archive/2008/11/21/3406535.aspx Suraj Panicker | Microsoft Enterprise Messaging Team| Microsoft Corp.