Since last Friday, when the Exchange servers were updated to the latest patches, I have been seeing Errors in the event logs from Source MSExchangeDiagnostics, Event ID 1039.

the information in the events is:

Log Name:      Application
Source:        MSExchangeDiagnostics
Date:          5/18/2015 11:04:45 AM
Event ID:      1039
Task Category: General
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      server.domain.com
Description:
Failed to detect the bitlocker state for EDS log drive 'E:\'.
Exception
System.Management.ManagementException: Invalid namespace 
   at System.Management.ManagementException.ThrowWithExtendedInfo(ManagementStatus errorCode)
   at System.Management.ManagementScope.InitializeGuts(Object o)
   at System.Management.ManagementScope.Initialize()
   at System.Management.ManagementObjectSearcher.Initialize()
   at System.Management.ManagementObjectSearcher.Get()
   at Microsoft.Exchange.Diagnostics.Service.DiagnosticsService.DriveLocked(String diagnosticsRootDrive)
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="MSExchangeDiagnostics" />
    <EventID Qualifiers="49156">1039</EventID>
    <Level>2</Level>
    <Task>1</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2015-05-18T16:04:45.000000000Z" />
    <EventRecordID>5189128</EventRecordID>
    <Channel>Application</Channel>
    <Computer>server.domain.com</Computer>
    <Security />
  </System>
  <EventData>
    <Data>E:\</Data>
    <Data>
Exception
System.Management.ManagementException: Invalid namespace 
   at System.Management.ManagementException.ThrowWithExtendedInfo(ManagementStatus errorCode)
   at System.Management.ManagementScope.InitializeGuts(Object o)
   at System.Management.ManagementScope.Initialize()
   at System.Management.ManagementObjectSearcher.Initialize()
   at System.Management.ManagementObjectSearcher.Get()
   at Microsoft.Exchange.Diagnostics.Service.DiagnosticsService.DriveLocked(String diagnosticsRootDrive)</Data>
  </EventData>
</Event>

I have researched this and found numerous reports of this following the upgrade to either CU6 or CU7, we have been running at CU7 since January and had not seen this until Friday. Only one of the 2 Exchange servers is showing this error and Exchange is running fine.

We have the 2 servers in an Active Active setup with the databases spread evenly between them, there have been no reports of issues from any users and no other errors seen in the event logs.

What is causing this and what can I do to stop it?

• Edited by GADavies 15 hours 31 minutes ago .

Hi GADavies,

We could backup Register then navigate to the following path:

Hkey local machine -> Software ->Microsoft ->Windows NT->CurrentVersion->Schedule->Taskcache->Tree->Microsoft->Windows->PLA

back up PLA and if present, delete the keys ExchangeDiagnosticsDailyPerformanceLog  and ExchangeDiagnosticsPerformanceLog, then restart the server to check if the issue persist.

If there are any questions regarding this issue, please be free to let me know.

Best Regard,

Jim