Hi Folks; I'm seeing a lot of Application log errors on Exchange startup and would really like to case/track these down and get rid of them. I'm new to both Server 2008 R2 and Exchange 2010 so I really don't know what most of these mean or how to address them. If anyone can help - I'd really appreciate it :-) Event ID 1028 Process MSExchangeFDS.exe (PID=1032). Errors occurred while synchronizing content from server MAIL for object MAIL, remote server is unavailable, giving up after 5 retries. Please check previous error events logged by MSExchangeFDS for more information. (this is the only Exchange server and it's name is mail. I don't know why it would be trying to connect to a remote server as opposed to this local one?) Event ID 1018 Process MSExchangeFDS.exe (PID=1032). Failed to connect to remote server MAIL. The remote server may be down, or its Server service may not be running. (appears to be the same issue?) Event ID 10 (I get 14 of these in a row on every startup) A performance counter was not loaded. Category Name: SMSvcHost 4.0.0.0 Counter Name: Protocol Failures over net.pipe Exception:System.InvalidOperationException: The requested Performance Counter is not a custom counter, it has to be initialized as ReadOnly. at System.Diagnostics.PerformanceCounter.InitializeImpl() at System.Diagnostics.PerformanceCounter.get_RawValue() at System.ServiceModel.Diagnostics.PerformanceCounters.GetPerformanceCounterInternal(String categoryName, String perfCounterName, String instanceName, PerformanceCounterInstanceLifetime instanceLifetime) Process Name: SMSvcHost Process ID: 1572 Event ID 14003 Unable to create Group Metrics distribution share. Share: GroupMetrics Directory: C:\Program Files\Microsoft\Exchange Server\V14\GroupMetrics Message: 00000842 Event ID 12025 (Warning) Transport service is disconnecting performance counters with process lifetime from their old process. Event ID 1007 The Mailbox Replication service was unable to determine the set of active mailbox databases on a mailbox server. Mailbox server: MAIL.domain.com Error: MapiExceptionNetworkError: Unable to make admin interface connection to server. (hr=0x80040115, ec=-2147221227) Diagnostic context: ...... Lid: 10648 dwParam: 0x6D9 Msg: EEInfo: Generating component: 2 Lid: 14744 dwParam: 0x6D9 Msg: EEInfo: Status: 1753 Lid: 9624 dwParam: 0x6D9 Msg: EEInfo: Detection location: 501 Lid: 13720 dwParam: 0x6D9 Msg: EEInfo: Flags: 0 Lid: 11672 dwParam: 0x6D9 Msg: EEInfo: NumberOfParameters: 4 Lid: 8856 dwParam: 0x6D9 Msg: EEInfo: prm[0]: Unicode string: ncacn_ip_tcp Lid: 8856 dwParam: 0x6D9 Msg: EEInfo: prm[1]: Unicode string: MAIL.domain.com Lid: 12952 dwParam: 0x6D9 Msg: EEInfo: prm[2]: Long val: -1988875570 Lid: 12952 dwParam: 0x6D9 Msg: EEInfo: prm[3]: Long val: 382312662 Lid: 24060 StoreEc: 0x80040115 Lid: 23746 Lid: 31938 StoreEc: 0x80040115 Lid: 19650 Lid: 27842 StoreEc: 0x80040115 Lid: 20866

To get you started try the below. 1. Event ID 1018 - http://blogs.msdn.com/b/dgoldman/archive/2007/06/14/fds-event-1018-caused-by-short-name-resolution-not-enabled.aspx 2 3 4 HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters Please change the vaule of TcpTimedWaitDelay to 30 in decimal. Sukh

Hi Sukh - I just checked and it's actually set at 60. I'm assuming that 60 (in this case) would be better then 30 ? Thank you for the help so far....!

30 would be better to test. Sukh

Hi Sukh; Either way - same result :-( I just tested it twice. You'd think Microsoft would test these products before shipping them!

For event 14003, please confirm whether the share has been created. If not, create it and give “Allow” permission to: · SYSTEM · Organization Management · Exchange Servers · Administrators (Local machine: MBX14) Please run ExBPA against the exchange server for health and permission check James Luo TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.com Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Good tip James - the share is there and the permissions on it are correct. I ran the BPA yesterday and it came up with almost no issues (I cleaned up one or two things that didn't seem to impact the startup errors). On the other hand, I only get one 14003 errors on startup but I get 14 of these ones; Event ID 10 (I get 14 of these in a row on every startup) A performance counter was not loaded. Category Name: SMSvcHost 4.0.0.0 Counter Name: Protocol Failures over net.pipe Exception:System.InvalidOperationException: The requested Performance Counter is not a custom counter, it has to be initialized as ReadOnly. at System.Diagnostics.PerformanceCounter.InitializeImpl() at System.Diagnostics.PerformanceCounter.get_RawValue() at System.ServiceModel.Diagnostics.PerformanceCounters.GetPerformanceCounterInternal(String categoryName, String perfCounterName, String instanceName, PerformanceCounterInstanceLifetime instanceLifetime) Process Name: SMSvcHost Process ID: 1572 Can anyone confirm for me that their Exchange 2010 machine doesn't generate all these errors during startup?

Hi Dave, The first 2 events appear to be related (1018 & 1028), both referencing the FDS... In my research, these events have been logged, or at least exposed when there was an issue with the offline address book. I noticed in your description for event 1028 it says "from server MAIL for object MAIL" - The second entry of "MAIL"... Is this what the actual event says or did you put this entry in? Regarding the Event ID 10 - Do you have any 3rd party software installed that does any kind of monitoring? Are you able to actually load the counters that are referenced using Performance Monitor? Kevin Ca - MSFT

Any update on the issue?Gulab | MCITP: Exchange 2010 | MCITP: Exchange 2007 | Skype: Gulab.Mallah | Blog: www.ExchangeRanger.blogspot.com

Hi Kevin - thanks for the reply :-) "I noticed in your description for event 1028 it says "from server MAIL for object MAIL" - The second entry of "MAIL"... Is this what the actual event says or did you put this entry in?" That's what the actual error says :-0 Is is possible I did not configure something correctly? With respect to event ID 10 (the 14 performance counter not loaded errors) I just checked the performance monitor in Exchange and it seems that all the counters are working. Because these errors only seem to appear during machine startup it causes me to wonder if ALL Exchange 2010 machines exhibit this behavior? Ie. Can anyone confirm for me that they get a clean application log during startup?

I don't get any of these on startup when i reboot any of my Exchange 2010 machines. Im not sure if you can try this... but if you set all of the Exchange services to disabled... reboot the machine, then start them all manually... do you see all of these events? Do the events get logged outside of a reboot/bootup?Kevin Ca - MSFT

Hi Kevin; Thanks for your continued help :-) I changed the Exchange services startup to all manual, shut down and re-started the machine and found that all the errors went away and we had a clean application and system log. That would seem to indicate to me that the issue lies with the Exchange 2010 software. At this point I think we're going to shelve Exchange 2010, at least, for the time being. I appreciate your help with these issues but I can't shake that old feeling that we're going to ultimately find out it's a problem on Microsoft's end (no offense) and that there won't be anything I can do about it :-0

I understand the concern, and potential frustration. 2 key elements to this are: 1. After the reboot, when you manually start the services, did the errors get logged? & 2. Outside of a reboot/bootup, do you ever see these errors? If you answered "No" to these, then my gut feeling is that the issue would not be with the Exchange software itself. Every since Exchange 2000, i've seen cases like this where Exchange was installed on a domain controller, or installed on a machine with delayed services starting up, or delayed network connectivity, etc. and we saw errors during bootup. Often times it is a matter of configuring the service startup delays, removing un-compatible software, updating NIC drivers or DNS records, etc. etc. If you reboot without the Exchange services set to automatic, then start them manually, and do not see errors, this indicates a timing issue on bootup. In which case, we would need a much more complete picture of the server (like complete app logs, complete sys logs, roles installed, software installed, length of bootup, DNS logs, etc.) Whichever direction you go, i wish you luck, but certainly hope you do not keep Exchange 2010 shelved for too long, it is a great Mail Server with alot of great features :) Kevin Ca - MSFT

Hi Kevin; Just wanted to let you know I decided to take it off the shelf and give it another go :-) I'm starting from scratch on a new VM in order to give it the best chance :-)