Since last Friday, when the Exchange servers were updated to the latest patches, I have been seeing Errors in the event logs from Source MSExchangeDiagnostics, Event ID 1039.

the information in the events is:

Log Name:      Application
Source:        MSExchangeDiagnostics
Date:          5/18/2015 11:04:45 AM
Event ID:      1039
Task Category: General
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      VPW1202EXCH01.bellevue.edu
Description:
Failed to detect the bitlocker state for EDS log drive 'E:\'.
Exception
System.Management.ManagementException: Invalid namespace 
   at System.Management.ManagementException.ThrowWithExtendedInfo(ManagementStatus errorCode)
   at System.Management.ManagementScope.InitializeGuts(Object o)
   at System.Management.ManagementScope.Initialize()
   at System.Management.ManagementObjectSearcher.Initialize()
   at System.Management.ManagementObjectSearcher.Get()
   at Microsoft.Exchange.Diagnostics.Service.DiagnosticsService.DriveLocked(String diagnosticsRootDrive)
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="MSExchangeDiagnostics" />
    <EventID Qualifiers="49156">1039</EventID>
    <Level>2</Level>
    <Task>1</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2015-05-18T16:04:45.000000000Z" />
    <EventRecordID>5189128</EventRecordID>
    <Channel>Application</Channel>
    <Computer>VPW1202EXCH01.bellevue.edu</Computer>
    <Security />
  </System>
  <EventData>
    <Data>E:\</Data>
    <Data>
Exception
System.Management.ManagementException: Invalid namespace 
   at System.Management.ManagementException.ThrowWithExtendedInfo(ManagementStatus errorCode)
   at System.Management.ManagementScope.InitializeGuts(Object o)
   at System.Management.ManagementScope.Initialize()
   at System.Management.ManagementObjectSearcher.Initialize()
   at System.Management.ManagementObjectSearcher.Get()
   at Microsoft.Exchange.Diagnostics.Service.DiagnosticsService.DriveLocked(String diagnosticsRootDrive)</Data>
  </EventData>
</Event>

I have researched this and found numerous reports of this following the upgrade to either CU6 or CU7, we have been running at CU7 since January and had not seen this until Friday. Only one of the 2 Exchange servers is showing this error and Exchange is running fine.

We have the 2 servers in an Active Active setup with the databases spread evenly between them, there have been no reports of issues from any users and no other errors seen in the event logs.

What is causing this and what can I do to stop it?

Hi GADavies,

Thank you for your question.

The error means Exchange failed to detect the bitlocker state for MS Exchange Diagnostic log.

Did you enable bitlocker in drive E on Exchange server? or did you enable it age?

If we have enabled it, we could disable it to check if the error persist.

If you didnt enable it all the time, we could safely ignore it.

If there are any questions regarding this issue, please be free to let me know.

Best Regard,

Jim

Bitlocker has not been enabled at any point on any server.

The issue, even though this canbe safely ignored, is we have 3rd party monitors which email all sys admins and management whenever this event is reported. This means I am being bombarded with angry questions about it. Simply saying we can ignore it does not work, they want it stopped.

Is there any way to stop the event?