Exchange 2007 SP1: MSExchangeIS service won't start anymore

[acuralex54-medi...@yahoo.com]

Help!

The server was running well until (I THINK, not 100% sure) we changed
the motherboard with network card on board (was asus now gigabytes).

Now, I got a real big problem: The information store service won't
start anymore when booting or even manually:
Err msg from shell:
The Microsoft Exchange Information Store service is starting....
The Microsoft Exchange Information Store service could not be started.
A service specific error occurred: 0.
More help is available by typing NET HELPMSG 3547.
In the event log of the win 2003 SP2 std server (no anti-virus); here
is the error messages.

In the application log:
Details
Product: Exchange
ID: 9564
Source: MSExchangeIS
Version: 6.5.6940.0
Component: Microsoft Exchange Information Store
Message: Error <error code> starting the Microsoft Exchange
Information Store.
<error message>.
Explanation
Error starting the Microsoft Exchange Information Store service.

In the system log:
Details
Product: Windows Operating System
ID: 7024
Source: Service Control Manager
Version: 5.0
Component: System Event Log
Symbolic Name: EVENT_SERVICE_EXIT_FAILED_SPECIFIC
Message: The %1 service terminated with service-specific error %2.
Explanation
The specified service stopped unexpectedly with the error indicated in
the message. Windows does not recognize the service's error code.
User Action
To display the service-specific error code in the Service_Exit_Code
field, at the command line, type
sc query service name
The information displayed might help you troubleshoot why the error
occurred.
Version: 5.2
Symbolic Name: EVENT_SERVICE_EXIT_FAILED_SPECIFIC
Message: The %1 service terminated with service-specific error %2.
Explanation
The specified service stopped unexpectedly with the error indicated in
the message. Windows does not recognize the service's error code.

This morning while more than 3 hours, I tried 5-6 solutions provided
by microsoft in technet and KBs without success. Most of the time my
settings was already ok.

Thank you in advance for any help,
Alex

[Michael Dragone]

Can you post the exact error message without masking the error code and
error message?

<acuralex54-medi...@yahoo.com> wrote in message
news:439bee1f-577a-4ca2...@m36g2000hse.googlegroups.com...

[oz.ozugurlu]

I aggree need more information to move forward

I am not sure if you have alreay tried turning the AV scanning off

http://support.microsoft.com/kb/319754
http://support.microsoft.com/kb/839115

--
Oz Ozugurlu
MVP (Exchange)
MCITP (EMA), MCITP (SA)
MCSE 2003, M+, S+, MCDST
Security+, Project +, Server +

o...@SMTp25.org
http://smtp25.blogspot.com (Blog)

[acuralex54-medi...@yahoo.com]

Hello,

Michael: I haven't mask any error code or error message. I made a
simple copy and past!!! You have ALL the information I got myself!

Oz: Could you read carefully and completely my message... On line
13: "(no anti-virus)" KB319754 and KB839115 does not apply in my
case...

Hearing from you soon!
Thank you,
Alex

[Michael Dragone]

You mean to say that the message text of Event ID 9694 was:

"Error <error code> starting the Microsoft Exchange Information Store.
<error message>."

<acuralex54-medi...@yahoo.com> wrote in message
news:db56427b-1188-4748...@i76g2000hsf.googlegroups.com...

[Michael Dragone]

Sorry, meant to say Event ID 9564.

<acuralex54-medi...@yahoo.com> wrote in message
news:db56427b-1188-4748...@i76g2000hsf.googlegroups.com...

[acuralex54-medi...@yahoo.com]

Ok... I made the copy and past from the http page when you send the
information to the microsoft site... not the same information
DOH!

Here is the copy and paste directly from my event log. There is also
new error messages now:

[acuralex54-medi...@yahoo.com]

Here is the situation now:

- I am not getting the event id error 9564 anymore in the application
event log since last friday afternoon:
Error 0x8004010f starting the Microsoft Exchange Information Store.
Failed to load Storage Group data.

- Now I am getting only the event id error 4001 in the application
event log:
A transient failure has occurred. The problem may resolve itself in
awhile. The service will retry in 56 seconds. Diagnostic information:

Cannot open mailbox /o=MY COMPANY/ou=Exchange Administrative Group
(FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=SERVER66/cn=Microsoft
System Attendant.
Microsoft.Exchange.Data.Storage.ConnectionFailedTransientException:
Cannot open mailbox /o=MY COMPANY/ou=Exchange Administrative Group
(FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=SERVER66/cn=Microsoft
System Attendant. ---> Microsoft.Mapi.MapiExceptionNetworkError:
MapiExceptionNetworkError: Unable to make connection to the server.
(hr=0x80040115, ec=-2147221227)
Diagnostic context:
......
Lid: 10648 dwParam: 0x6D9 Msg: EEInfo: Generating
component: 2
Lid: 14744 dwParam: 0x6D9 Msg: EEInfo: Status: 1753
Lid: 9624 dwParam: 0x6D9 Msg: EEInfo: Detection location:
501
Lid: 13720 dwParam: 0x6D9 Msg: EEInfo: Flags: 0
Lid: 11672 dwParam: 0x6D9 Msg: EEInfo: NumberOfParameters:
4
Lid: 8856 dwParam: 0x6D9 Msg: EEInfo: prm[0]: Unicode
string: ncacn_ip_tcp
Lid: 8856 dwParam: 0x6D9 Msg: EEInfo: prm[1]: Unicode
string: SERVER66.OURDOMAIN.local
Lid: 12952 dwParam: 0x6D9 Msg: EEInfo: prm[2]: Long val:
-1527653632
Lid: 15000 dwParam: 0x6D9 Msg: EEInfo: prm[3]: Pointer val:
0x00000000034AD1F0
Lid: 19778
Lid: 27970 StoreEc: 0x80040115
Lid: 17730
Lid: 25922 StoreEc: 0x80040115
at Microsoft.Mapi.MapiExceptionHelper.ThrowIfError(String message,
Int32 hresult, Int32 ec, DiagnosticContext diagCtx)
at Microsoft.Mapi.ExRpcConnection.Create(ConnectionCache
connectionCache, ExRpcConnectionCreateFlag createFlags, ConnectFlag
connectFlags, String serverDn, String userDn, String user, String
domain, String password, String httpProxyServerName, Int32 ulConMod,
Int32 lcidString, Int32 lcidSort, Int32 cpid, Int32
cReconnectIntervalInMins, Int32 cbRpcBufferSize, Int32
cbAuxBufferSize)
at Microsoft.Mapi.ConnectionCache.OpenMapiStore(String mailboxDn,
Guid mailboxGuid, Guid mdbGuid, ClientIdentityInfo clientIdentity,
String userDnAs, OpenStoreFlag openStoreFlags, CultureInfo
cultureInfo, String applicationId)
at Microsoft.Mapi.ConnectionCache.OpenMailbox(String mailboxDn,
Guid mailboxGuid, Guid mdbGuid, WindowsIdentity windowsIdentityAs,
String userDnAs, OpenStoreFlag openStoreFlags, CultureInfo
cultureInfo, String applicationId)
at
Microsoft.Exchange.Data.Storage.ConnectionCachePool.OpenMailbox(String
serverDn, String userDn, String mailboxDn, Guid mailboxGuid, Guid
mdbGuid, Object identity, ConnectFlag connectFlag, OpenStoreFlag
openStoreFlag, CultureInfo cultureInfo, String clientInfoString,
Boolean secondTry)
--- End of inner exception stack trace ---
at
Microsoft.Exchange.Data.Storage.ConnectionCachePool.OpenMailbox(String
serverDn, String userDn, String mailboxDn, Guid mailboxGuid, Guid
mdbGuid, Object identity, ConnectFlag connectFlag, OpenStoreFlag
openStoreFlag, CultureInfo cultureInfo, String clientInfoString,
Boolean secondTry)
at
Microsoft.Exchange.Data.Storage.ConnectionCachePool.OpenMailbox(String
serverDn, String userDn, String mailboxDn, Guid mailboxGuid, Guid
mdbGuid, Object identity, ConnectFlag connectFlag, OpenStoreFlag
openStoreFlag, CultureInfo cultureInfo, String clientInfoString,
Boolean secondTry)
at
Microsoft.Exchange.Data.Storage.ConnectionCachePool.OpenMailbox(String
serverDn, String userDn, String mailboxDn, Guid mailboxGuid, Guid
mdbGuid, Object identity, ConnectFlag connectFlag, OpenStoreFlag
openStoreFlag, CultureInfo cultureInfo, String clientInfoString)
at
Microsoft.Exchange.Data.Storage.MailboxSession.Initialize(LogonType
logonType, ExchangePrincipal owner, DelegateLogonUser delegateUser,
Object identity, OpenMailboxSessionFlags flags)
at
Microsoft.Exchange.Data.Storage.MailboxSession.CreateMailboxSession(LogonType
logonType, ExchangePrincipal owner, DelegateLogonUser delegateUser,
Object identity, OpenMailboxSessionFlags flags, CultureInfo
cultureInfo, String clientInfoString)
at
Microsoft.Exchange.Data.Storage.MailboxSession.OpenAsAdmin(ExchangePrincipal
mailboxOwner, CultureInfo cultureInfo, String clientInfoString,
Boolean useLocalRpc, Boolean ignoreHomeMdb)
at
Microsoft.Exchange.Data.Storage.MailboxSession.OpenAsAdmin(ExchangePrincipal
mailboxOwner, CultureInfo cultureInfo, String clientInfoString)
at
Microsoft.Exchange.Servicelets.SystemAttendantMailbox.Servicelet.Work()

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

- The system event log is now quiet since last friday.

So in conclusion, there is only one error message in the event log,
located under application: event id 4001.

[Michael Dragone]

And the only thing changed was the server's motherboard?

<acuralex54-medi...@yahoo.com> wrote in message
news:84b447e2-a94f-46f3...@y71g2000hsa.googlegroups.com...

[acuralex54-medi...@yahoo.com]

Michael!
Good news!
The problem is now resolved!
Thank you for your efforts to help me!

Solution:
The problem was not related with the hardware change.
When I uninstalled our old exchnage 2003, I deleted the default email
policy through adsiedit. I though it was only for exchange 2003...
my mistake this time!
Now I recreated it and now the information store is restarted
correctly and automatically.
I found this by trying a setup /prepareAD
the error message was talking about default email policy.

Thank you,
Alex