I'm receiving the following error on one of my Exchange 2007 SP1 server. The server has Update Rollup 3 installed. I've not been able to get any information on the cause of this error or possible solutions. Does anyone have any insight? Source: MSExchangeIS Mailbox Store Category: General Event: 9794 As part of updating a message (MID=%1) in a folder (FID=%2) of database '%3', %4 search folder links were also updated (and completed with error=%5).Such an excessive number of links may lead to or be the cause of performance issues.These links should be investigated further to determine whether they are truly valid and expected.

Hi, Does this linkhelp you? It says, "This event is generally logged when users synchronize their mobile devices that use Exchange ActiveSync and search folders are left undeleted", do you have ActiveSync users in database?

Yes. I have users that use ActiveSync with their Windows Mobile phones and iPhones. The question is how delete the search folders that are left undeleted.

Does event id show mailbox name? if so then you can try with MFCMapi to oepn mailbox which shows raw level of mailbox contents and you can find search folders there.

I have the message ID and folder ID, but nothing that tells me the mailbox. Here's the actual error message. As part of updating a message (MID=1-22554E58) in a folder (FID=c-C6B1) of database 'First Storage Group\Mailbox Database', 127 search folder links were also updated (and completed with error=0).

You probably have a corrupted Exchange search database. You may delete the search database and one will automatically be recreated for you. There may be a noticable degredation of service while theexchange information isre-cataloged. Learn more about Exchange Search: http://technet.microsoft.com/en-us/library/aa998289(EXCHG.80).aspx Let us know if this information helps. Jeremy

I ran the following PowerShell command: ResetSearchIndex "Mailbox Database" I'm still receiving the same error as before.

Are you getting it frequently? If not then I think we can ignore this since it says and completed with error=0, if you are getting any error number then we can take action based on error code.

The interval varies, but anywhere between every 15-30 minutes it logs the event.

Clarify: Frequently receiving event 9794, not causing any performance issue so far, right? Explanation: Event 9794 is a harmless warning, or just an informational event. For example, if a new mail arrived, the search folder link will be updated to mark the read/unread status. Also as we can see in the event, the update was successfully, as it completed with error=0. Generally, if most of the updates are successful, there will no apparent performance issue and we can ignore this event. Only in some situations, the update operation repeatedly failed and would retry the operation frequently and, this would have performance impact Still, we can do some basic troubleshooting for it: 1. Is there any file-level Anti-Virus scanning that may have hold of that database? If so, please disable it temporarily on the Exchange and check the symptom 2. Ensure the database is healthy with regards to search folder links, you can run ISINTEG command to check the status of search folder links when you get maintenance time Notes: Make sure that you have the backups of database before do anything! Notes: This command runs at a speed of 8 to 10 Gb/hr a) Dismount Store b) From a command prompt change to the bin folder under Exchange 2007 installation path c) Isinteg -s <your server name> -fix -test alltests >c:\temp\ISInteg.txt d) Select the mailbox store that is offline respectively e) Once ISInteg completes, look at the summary in the ISInteg.txt file for the number of errors, warnings and fixes. Or you can post here f) Please repeat these commands against all public folder stores ================ Advanced troubleshooting: It may locate that affeced mailbox based on FID from ISInteg Dump. The process probably less than 10 minutes Notes: This action REQUIRE installing Exchange 2007 SP1 RU2, you have already installed it, right? Since you also updated to RU3 as seen from your post 1. Dismount Store 2. Run ISInteg -S <servername> -Dump -L C:\ISIntegDump.txt 3. Mount Store After located mailboxs owner, open that users mailbox from outlook, if you didnt see a larger account of search folders, you need to use MFCMAPI to find and remove those search folders. And if he (she) is an ActiveSync user, you also need to remove the partnership with his (her) device and recreate it References: Using the Exchange tools ISINTEG and ESEUTIL to Ensure the Health of your Information Store http://www.msexchange.org/tutorials/Exchange-ISINTEG-ESEUTIL.html Description of the Isinteg utility http://support.microsoft.com/kb/182081 MFCMAPI Download http://www.microsoft.com/downloads/details.aspx?FamilyID=55FDFFD7-1878-4637-9808-1E21ABB3AE37&displaylang=en

Hi, Kbeckman, does it help for you?

Hi, Kbechman, I assumethe issuehas been answered, and I'd like to change the status to "Marked as answer", please feel free to post here if you have any update