Our Exchange server run as vm on Hyper-V server. Last night, it was slow respone cause user unable to access email. When i remote to exchange server, it failed unable to connect.So i decided to remote to Hyper-V server and access the Exchange VM. Once type in credentials to log on to Exchange mailbox, it just hangs at loading profiles. After 20 minutes passed, it is loading so that had to manually force shutdown. Today, my manager want to know what time it was hangs?it is possible for me to search at Event viewer. Please advice

Hi Well see if there are any failures on services etc in the event viewer Jonas Andersson MCTS: Microsoft Exchange Server 2007/2010 | MCITP: EMA 2007/2010 | MCSE/MCSA Blog: http://www.testlabs.se/blog

Hi Jonas, Could be more specific :)

Ohh sorry ! Check the application and system logs in event viewer after errors that could be related, like services etc.Jonas Andersson MCTS: Microsoft Exchange Server 2007/2010 | MCITP: EMA 2007/2010 | MCSE/MCSA Blog: http://www.testlabs.se/blog

Hi Suriya, How about your question? Any updates? Maybe you can post some error events here.Frank Wang

Hi Frank, It seem that there is no event which related to this problem generated. I'm only able to capture once system event that showing the Exchange server was shutdown unexpected. This is true due to i was force it to shutdown. This problem happened during 10.00am (20 Jun 2010) - 12.00am (20 Jun 2010) Log Name: System Source: Microsoft-Windows-WAS Date: 20/6/2010 2:34:53 AM Event ID: 5186 Task Category: None Level: Information Keywords: Classic User: N/A Computer: MICROSCOPIUM.contoso.com Description: A worker process with process id of '9016' serving application pool 'DefaultAppPool' was shutdown due to inactivity. Application Pool timeout configuration was set to 20 minutes. A new worker process will be started when needed. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-WAS" Guid="{524B5D04-133C-4A62-8362-64E8EDB9CE40}" EventSourceName="WAS" /> <EventID Qualifiers="16384">5186</EventID> <Version>0</Version> <Level>4</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2010-06-19T18:34:53.000Z" /> <EventRecordID>337597</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>System</Channel> <Computer>MICROSCOPIUM.contoso.com</Computer> <Security /> </System> <EventData> <Data Name="ProcessID">9016</Data> <Data Name="AppPoolID">DefaultAppPool</Data> <Data Name="Minutes">20</Data> </EventData> </Event> Log Name: System Source: EventLog Date: 20/6/2010 10:24:16 AM Event ID: 6008 Task Category: None Level: Error Keywords: Classic User: N/A Computer: MICROSCOPIUM.contoso.com Description: The previous system shutdown at 10:20:48 AM on 20/6/2010 was unexpected. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="EventLog" /> <EventID Qualifiers="32768">6008</EventID> <Level>2</Level> <Task>0</Task> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2010-06-20T02:24:16.000Z" /> <EventRecordID>337643</EventRecordID> <Channel>System</Channel> <Computer>MICROSCOPIUM.contoso.com</Computer> <Security /> </System> <EventData> <Data>10:20:48 AM</Data> <Data>20/6/2010</Data> <Data> </Data> <Data> </Data> <Data>765852</Data> <Data> </Data> <Data> </Data> <Binary>DA070600000014000A00140030005303DA0706000000140002001400300053033C0000003C000000000000000000000000000000000000000100000000000000</Binary> </EventData> </Event> Log Name: System Source: LeftHandMpio Date: 20/6/2010 10:23:34 AM Event ID: 8 Task Category: None Level: Information Keywords: Classic User: N/A Computer: MICROSCOPIUM.contoso.com Description: MPIO module 'LeftHand Multi-Path DSM' loaded. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="LeftHandMpio" /> <EventID Qualifiers="16384">8</EventID> <Level>4</Level> <Task>0</Task> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2010-06-20T02:23:34.234Z" /> <EventRecordID>337598</EventRecordID> <Channel>System</Channel> <Computer>MICROSCOPIUM.contoso.com</Computer> <Security /> </System> <EventData> <Data> </Data> <Data>LeftHand Multi-Path DSM</Data> <Binary>00000000020028000000000008000040000000000000000000000000000000000000000000000000</Binary> </EventData> </Event>

Hi Is this storage related? Check with your storage guy to verify that everything is OK with your lefthand solution And give us the detail how you configured the LUN, Hyper-V, VM etc.Jonas Andersson MCTS: Microsoft Exchange Server 2007/2010 | MCITP: EMA 2007/2010 | MCSE/MCSA Blog: http://www.testlabs.se/blog