Hello,

I have a bit of an issue with the FEP monitor on an Exchange 2013 Mailbox server. I have had some assistance from the SCOM team, and have followed the advise given but this one server is still playing up.

After disabling the FEP check in the FEPActiveMonitoringContext, reboot, I get the following error appear in the event log every so often;

definitions were not created successfully:FEP.Maintenance.Workitem: An item with the same primary key 37 already exists in the table. Existing definition name: FEP.Maintenance.Workitem. New definition name: FEP.Maintenance.Workitem

Shortly after, this;

System.InvalidOperationException: Service MsMpSvc was not found on computer '.'. ---> System.ComponentModel.Win32Exception: The specified service does not exist as an installed service

SCOM then alerts as per the event log indicates. Does anybody know how to resolve this monitor issue with EXCH?

Hi,
 
According to your description, I notice that FEP monitor get an error "Service MsMpSvc was not found on computer".
If I misunderstand your concern, please do not hesitate to let me know.

The service MsMpSvc is looking for the Microsoft Antimalware service located in C:\Program Files\Microsoft Security Client\MsMpEng.exe and is available when you install a localized verion of FEP or one tied to SCCM.
I find an similar thread about this question, please refer to:
https://social.technet.microsoft.com/Forums/zh-CN/92e7d044-99c4-4b9e-8798-8d4964f4917b/healthset-antimalware-is-checking-fep-which-is-not-installed?forum=exchangesvradmin

Best Regards,
Allen Wang

Correct, and I have already disabled the HealthCheck for FEP in the XML as per that other article.

Additionally, we don't use FEP or SCCM.

Server has been rebooted numerous times for patching etc since.

Anybody else? Still stuck with this problem.