Hi there, got a frustrating issue here which I cannot pinpoint as to why it happens.A couple of times a day I've noticed that Outlook clients (2003 & 2007) will drop their connections to our Exchange 2007 server. Upon investigation it appears that the there is a red event ID in the System log stating that the Microsoft Exchange Information Store service terminated unexpectedly. It stays down for 60 seconds before being started again at which point clients connections get restored.The actual event ID as reported is below:The Microsoft Exchange Information Store service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.Event ID: 7031Source: Service Control Manager Eventlog ProviderThere is not a set time that this appears to happen, some days it is 11:06am, others its 15:44pm etc, sometimes it happens three times in a day, other times just once. I can't see anything happening on the server at any specific time that might cause this issue.The only things that seem to coincide in the Event Log each time this happens follow the pattern below: (But the WAS log happens lots at other points as well)--------The Microsoft Exchange Information Store service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.---------The WinHTTP Web Proxy Auto-Discovery Service service entered the stopped state.---------A worker process with process id of '12492' serving application pool 'DefaultAppPool' was shutdown due to inactivity. Application Pool timeout configuration was set to 20 minutes. A new worker process will be started when needed.---------I'd really appreciate some help from someone who knows about Exchange 2007 as I can't have the Information Store re-starting itself constantly, it is causing people a fair bit of grief each time it happens.Server is running Windows Server 2008 x64. Exchange and OS are both running latest service packs.Many thanks in advance to anyone that can offer help.

Dear customer: In order to better troubleshoot the issue, please help collect the following information: Did you install Exchange server 2007 SP1? Did you install the latest Update Rollup 4 for Exchange Server 2007 Service Pack 1? If not, please install it and check the effect. For more information about Update Rollup 4 for Exchange Server 2007 Service Pack 1, please refer to the following article: Description of Update Rollup 4 for Exchange Server 2007 Service Pack 1 http://support.microsoft.com/kb/952580/en-us Did you install antivirus software on Exchange server 2007, if so, please disable them and check the effect. On Exchange server 2007, open Event Viewer, navigate to Windows log----application, right click application and select save events as option, select save as type .evtx, send the file to v-rocwan@microsoft.com for analyze. Right click system and select save events as option, select save as type .evtx, send the file to me for analyze. Note: when you send e-mail to me, please let me know the subject of the post. Thanks for your cooperation. Rock Wang - MSFT

Hi Rock,Thanks for your reply, sorry for the delay in getting back to you regarding this.Answers to your questions:1) Did you install Exchange Server 2007 SP1?Yes, this has been installed for a while now. Also made sure we have kept uptodate with updates detailed in "Microsoft Update".2) Did you install the latest Update Rollup 4 for Exchange Server 2007 Service Pack 1?No, this wan't installed, I have since installed it today and waiting to see if the issue repeats.3) Did you install antivirus software on Exchange Server 2007?Yes, we had McAfee client and Groupshield installed. I have since totally uninstalled McAfee client AV, the problem persists. I couldn't uninstall Groupshield I'm afraid.4) & 5) - I've emailed you event logs as requested.Many thanks,Dale

Dear customer: Thnaks for your reply. Please run EXBPA tool and send the output file to me for analyze. 1. logon to Exchange server 2007 via domain admin, 2. Open EMC, navigate to toolbox and open it, 3. Double click Best Practices Analyzer, 4. Select options for a new scan, and click connect to the Active Directory server, enter the identifying lable for this scan, maintain the other setting unchanged, click start scaning, 5. After the scan is completed save the report as a .xml file, please send the file to me for analyze. Note: when you send e-mail to me, please let me know the subject of the post. Thanks for your cooperation. if anything is unclear, please feel free to let me know. Rock Wang - MSFT

Thanks Rock,I've emailed this across to you.

Dear customer: Since the issue is randomly occurs, it maybe hard for us to identify the root cause. To exclude the possibility of antivirus, please double the antivirus setting according to the following article, and check the effect. File-Level Antivirus Scanning on Exchange 2007 http://technet.microsoft.com/en-us/library/bb332342.aspx Hope it helps. Rock Wang - MSFT

Dear customer: Did you try the suggestion above, please let me know the result. Thanks for your cooperation. Rock Wang - MSFT

Hi all,Just wanted to let you all know the solution for this particular issue, which was caused by McAfee Groupshield.I had to install a patch (HotFix 404014) onto the Exchange 2007 server, which is specific with Exchange 2007 running Groupshield on a Windows 2008 platform. A reboot and a specific amount of time monitoring the situation proved that the Store.exe crash issue hasn't returned........(yet!) :-)Thanks again for the support offered.