From: Harry on
Hi,
Please excuse the long post!

I installed this server last week and all was good on Friday. On Sunday I
started getting alerts about Exchange issues. I cannot start the
MSExchangeIS service and get the following errors in Event Viewer:

Log Name: Application
Source: MSExchange System Attendant Mailbox
Date: 5/24/2010 9:30:43 AM
Event ID: 4001
Task Category: General
Level: Error
Keywords: Classic
User: N/A
Computer: ODILSVR.odil.local
Description:
A transient failure has occurred. The problem may resolve itself in awhile.
The service will retry in 56 seconds. Diagnostic information:

Cannot open mailbox /o=First Organization/ou=Exchange Administrative Group
(FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=ODILSVR/cn=Microsoft System
Attendant.


Log Name: Application
Source: MSExchangeFBPublish
Date: 5/24/2010 7:41:05 PM
Event ID: 8213
Task Category: General
Level: Error
Keywords: Classic
User: N/A
Computer: ODILSVR.odil.local
Description:
The Microsoft Exchange System Attendant service failed to create session for
virtual machine ODILSVR. The error number is 0x80040115.



Log Name: Application
Source: Windows SharePoint Services 3 Search
Date: 5/24/2010 9:30:34 AM
Event ID: 2424
Task Category: Gatherer
Level: Error
Keywords: Classic
User: N/A
Computer: ODILSVR.odil.local
Description:
The update cannot be started because the content sources cannot be accessed.
Fix the errors and try the update again.

Context: Application 'Search', Catalog 'index file on the search server
Search'


Log Name: Application
Source: MSExchangeIS
Date: 5/24/2010 8:51:45 PM
Event ID: 9565
Task Category: Virus Scanning
Level: Error
Keywords: Classic
User: N/A
Computer: ODILSVR.odil.local
Description:
Invalid virus scanner configuration. Unable to start virus scanner.


Log Name: Application
Source: Microsoft-Windows-WMI
Date: 5/24/2010 8:51:38 PM
Event ID: 10
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: ODILSVR.odil.local
Description:
Event filter with query "select * from HP_IMLUpdatedEvent" could not be
reactivated in namespace "//./ROOT/WMI" because of error 0x80041010. Events
cannot be delivered through this filter until the problem is corrected.


Any ideas greatly appreciated!
--
Harry
From: Larry Struckmeyer[SBS-MVP] on
Hi Harry:

Have you looked up the errors on www.eventid.net?

Have you run the SBS BPA?

www.sbsbpa.com

In device manager, is all the hardware happy?

Migration or new clean install?

How much RAM and how much free drive space on the system partition?


-
Larry
Please post the resolution to your
issue so others may benefit
-
Get Your SBS Health Check at
www.sbsbpa.com


> Hi,
> Please excuse the long post!
> I installed this server last week and all was good on Friday. On
> Sunday I started getting alerts about Exchange issues. I cannot start
> the MSExchangeIS service and get the following errors in Event Viewer:
>
> Log Name: Application
> Source: MSExchange System Attendant Mailbox
> Date: 5/24/2010 9:30:43 AM
> Event ID: 4001
> Task Category: General
> Level: Error
> Keywords: Classic
> User: N/A
> Computer: ODILSVR.odil.local
> Description:
> A transient failure has occurred. The problem may resolve itself in
> awhile.
> The service will retry in 56 seconds. Diagnostic information:
> Cannot open mailbox /o=First Organization/ou=Exchange Administrative
> Group
> (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=ODILSVR/cn=Microsoft
> System Attendant.
>
> Log Name: Application
> Source: MSExchangeFBPublish
> Date: 5/24/2010 7:41:05 PM
> Event ID: 8213
> Task Category: General
> Level: Error
> Keywords: Classic
> User: N/A
> Computer: ODILSVR.odil.local
> Description:
> The Microsoft Exchange System Attendant service failed to create
> session for
> virtual machine ODILSVR. The error number is 0x80040115.
> Log Name: Application
> Source: Windows SharePoint Services 3 Search
> Date: 5/24/2010 9:30:34 AM
> Event ID: 2424
> Task Category: Gatherer
> Level: Error
> Keywords: Classic
> User: N/A
> Computer: ODILSVR.odil.local
> Description:
> The update cannot be started because the content sources cannot be
> accessed.
> Fix the errors and try the update again.
> Context: Application 'Search', Catalog 'index file on the search
> server Search'
>
> Log Name: Application
> Source: MSExchangeIS
> Date: 5/24/2010 8:51:45 PM
> Event ID: 9565
> Task Category: Virus Scanning
> Level: Error
> Keywords: Classic
> User: N/A
> Computer: ODILSVR.odil.local
> Description:
> Invalid virus scanner configuration. Unable to start virus scanner.
> Log Name: Application
> Source: Microsoft-Windows-WMI
> Date: 5/24/2010 8:51:38 PM
> Event ID: 10
> Task Category: None
> Level: Error
> Keywords: Classic
> User: N/A
> Computer: ODILSVR.odil.local
> Description:
> Event filter with query "select * from HP_IMLUpdatedEvent" could not
> be
> reactivated in namespace "//./ROOT/WMI" because of error 0x80041010.
> Events
> cannot be delivered through this filter until the problem is
> corrected.
> Any ideas greatly appreciated!
>


From: Cliff Galiher - MVP on
First guess? You ran out of space on your system partition.

-Cliff


"Harry" <Harry(a)discussions.microsoft.com> wrote in message
news:2CBE2853-4C83-4523-BA82-B632ED644AFF(a)microsoft.com...
> Hi,
> Please excuse the long post!
>
> I installed this server last week and all was good on Friday. On Sunday I
> started getting alerts about Exchange issues. I cannot start the
> MSExchangeIS service and get the following errors in Event Viewer:
>
> Log Name: Application
> Source: MSExchange System Attendant Mailbox
> Date: 5/24/2010 9:30:43 AM
> Event ID: 4001
> Task Category: General
> Level: Error
> Keywords: Classic
> User: N/A
> Computer: ODILSVR.odil.local
> Description:
> A transient failure has occurred. The problem may resolve itself in
> awhile.
> The service will retry in 56 seconds. Diagnostic information:
>
> Cannot open mailbox /o=First Organization/ou=Exchange Administrative Group
> (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=ODILSVR/cn=Microsoft
> System
> Attendant.
>
>
> Log Name: Application
> Source: MSExchangeFBPublish
> Date: 5/24/2010 7:41:05 PM
> Event ID: 8213
> Task Category: General
> Level: Error
> Keywords: Classic
> User: N/A
> Computer: ODILSVR.odil.local
> Description:
> The Microsoft Exchange System Attendant service failed to create session
> for
> virtual machine ODILSVR. The error number is 0x80040115.
>
>
>
> Log Name: Application
> Source: Windows SharePoint Services 3 Search
> Date: 5/24/2010 9:30:34 AM
> Event ID: 2424
> Task Category: Gatherer
> Level: Error
> Keywords: Classic
> User: N/A
> Computer: ODILSVR.odil.local
> Description:
> The update cannot be started because the content sources cannot be
> accessed.
> Fix the errors and try the update again.
>
> Context: Application 'Search', Catalog 'index file on the search server
> Search'
>
>
> Log Name: Application
> Source: MSExchangeIS
> Date: 5/24/2010 8:51:45 PM
> Event ID: 9565
> Task Category: Virus Scanning
> Level: Error
> Keywords: Classic
> User: N/A
> Computer: ODILSVR.odil.local
> Description:
> Invalid virus scanner configuration. Unable to start virus scanner.
>
>
> Log Name: Application
> Source: Microsoft-Windows-WMI
> Date: 5/24/2010 8:51:38 PM
> Event ID: 10
> Task Category: None
> Level: Error
> Keywords: Classic
> User: N/A
> Computer: ODILSVR.odil.local
> Description:
> Event filter with query "select * from HP_IMLUpdatedEvent" could not be
> reactivated in namespace "//./ROOT/WMI" because of error 0x80041010.
> Events
> cannot be delivered through this filter until the problem is corrected.
>
>
> Any ideas greatly appreciated!
> --
> Harry

From: "Robbin Meng [MSFT]" on

Hello Harry,

Thanks for your post and others' suggestions.

In addition to checking SBS BPA report and system disk space, did you notice that the Microsoft Exchange System Attendant is set to Automatic and started? Does the issue still
occurs if you manually restart the Exchange System Attendant service?

BTW, please check and make sure the latest Exchange server 2007 SP2 is applied. Also, please temporarily disable all 3rd party anti-virus/anti-spam software as incorrect
configuration of these software may cause Exchange engine to crash.

Overview of Exchange Server 2003 and antivirus software
http://support.microsoft.com/kb/823166/en-us


Hope this helps.



Best regards,
Robbin Meng(MSFT)
Microsoft Online Newsgroup Support

==================================================================
Please post your SBS 2008 related questions to the SBS newsgroup on Connect website:
https://connect.microsoft.com/sbs08/community/discussion/richui/default.aspx

Please post your EBS related questions to the EBS newsgroup on Connect website:
https://connect.microsoft.com/ebs08/community/discussion/richui/default.aspx

If you want to use a newsreader other than a web forum to access these newsgroups,
please refer to the following blog to apply NNTP password and configure a newsreader:
http://msmvps.com/blogs/bradley/archive/2008/11/02/signing-up-for-the-sbs-2008-newsgroups.aspx
==================================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
==================================================================



From: Ace Fekay [MVP - Directory Services, MCT] on
On Wed, 26 May 2010 07:40:41 GMT, v-robmen(a)online.microsoft.com
("Robbin Meng [MSFT]") wrote:

>
>Hello Harry,
>
>Thanks for your post and others' suggestions.
>
>In addition to checking SBS BPA report and system disk space, did you notice that the Microsoft Exchange System Attendant is set to Automatic and started? Does the issue still
>occurs if you manually restart the Exchange System Attendant service?
>
>BTW, please check and make sure the latest Exchange server 2007 SP2 is applied. Also, please temporarily disable all 3rd party anti-virus/anti-spam software as incorrect
>configuration of these software may cause Exchange engine to crash.
>
>Overview of Exchange Server 2003 and antivirus software
>http://support.microsoft.com/kb/823166/en-us
>
>
>Hope this helps.
>
>
>
>Best regards,
>Robbin Meng(MSFT)
>Microsoft Online Newsgroup Support
>
>==================================================================
>Please post your SBS 2008 related questions to the SBS newsgroup on Connect website:
>https://connect.microsoft.com/sbs08/community/discussion/richui/default.aspx
>
>Please post your EBS related questions to the EBS newsgroup on Connect website:
>https://connect.microsoft.com/ebs08/community/discussion/richui/default.aspx
>
>If you want to use a newsreader other than a web forum to access these newsgroups,
>please refer to the following blog to apply NNTP password and configure a newsreader:
>http://msmvps.com/blogs/bradley/archive/2008/11/02/signing-up-for-the-sbs-2008-newsgroups.aspx
>==================================================================
>When responding to posts, please "Reply to Group" via your newsreader so
>that others may learn and benefit from your issue.
>==================================================================
>This posting is provided "AS IS" with no warranties, and confers no rights.
>==================================================================
>
>

Robbin, you beat me to it. I was just going to mention to make sure
all Exchange installation folders are excluded in AV! This is
definitely a major cause for 'Exchange to suddenly stop working ..."




Ace

This posting is provided "AS-IS" with no warranties or guarantees and confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among responding engineers, and to help others benefit from your resolution.

Ace Fekay, MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services

If you feel this is an urgent issue and require immediate assistance, please contact Microsoft PSS directly. Please check http://support.microsoft.com for regional support phone numbers.