I came into work this morning to a downed Exchange storage group and mail store. In the event log just after the backup ran i saw these string of events in the event log on the Exchange server.<\/p>\n\n\n\n
<em>Event Type: Error<\/p>\n\n\n\n
Event Source: ESE<\/p>\n\n\n\n
Event Category: General<\/p>\n\n\n\n
Event ID: 482<\/p>\n\n\n\n
Date: 27\/10\/2010<\/p>\n\n\n\n
Time: 21:00:34<\/p>\n\n\n\n
User: N\/A<\/p>\n\n\n\n
Computer: SERVER<\/p>\n\n\n\n
<em>Description:<\/p>\n\n\n\n
Information Store (672) SG1: An attempt to write to the file “D:\\SG1\\E00.log” at offset 1253376 (0x0000000000132000) for 512 (0x00000200) bytes failed after 1 seconds with<\/p>\n\n\n\n
system error 1784 (0x000006f8): “The supplied user buffer is not valid for the requested operation. “. The write operation will fail with error -1011 (0xfffffc0d). If this error persists then the file may be damaged and may need to be restored from a previous backup.<\/p>\n\n\n\n
For more information, click http:\/\/www.microsoft.com\/contentredirect.asp.<\/p>\n\n\n\n
Event Type: Error<\/p>\n\n\n\n
Event Source: ESE<\/p>\n\n\n\n
Event Category: Logging\/Recovery<\/p>\n\n\n\n
Event ID: 414<\/p>\n\n\n\n
Date: 27\/10\/2010<\/p>\n\n\n\n
Time: 21:00:34<\/p>\n\n\n\n
User: N\/A<\/p>\n\n\n\n
Computer: SERVER<\/p>\n\n\n\n
<em>Description:<\/p>\n\n\n\n
Information Store (672) SG1: Unable to write to section 0 while flushing logfile D:\\SG1\\E00.log. Error -1011 (0xfffffc0d).<\/p>\n\n\n\n
For more information, click http:\/\/www.microsoft.com\/contentredirect.asp.<\/p>\n\n\n\n
Event Type: Error<\/p>\n\n\n\n
Event Source: ESE<\/p>\n\n\n\n
Event Category: Logging\/Recovery<\/p>\n\n\n\n
Event ID: 492<\/p>\n\n\n\n
Date: 27\/10\/2010<\/p>\n\n\n\n
Time: 21:00:34<\/p>\n\n\n\n
User: N\/A<\/p>\n\n\n\n
Computer: SERVER<\/p>\n\n\n\n
<em>Description:<\/p>\n\n\n\n
Information Store (672) SG1: The logfile sequence in “D:\\SG1\\” has been halted due to a fatal error. No further updates are possible for the databases that use this logfile<\/p>\n\n\n\n
sequence. Please correct the problem and restart or restore from backup.<\/p>\n\n\n\n
For more information, click http:\/\/www.microsoft.com\/contentredirect.asp.<\/p>\n\n\n\n
Event Type: Error<\/p>\n\n\n\n
Event Source: MSExchangeIS<\/p>\n\n\n\n
Event Category: General<\/p>\n\n\n\n
Event ID: 9558<\/p>\n\n\n\n
Date: 27\/10\/2010<\/p>\n\n\n\n
Time: 21:00:34<\/p>\n\n\n\n
User: N\/A<\/p>\n\n\n\n
Computer: SERVER<\/p>\n\n\n\n
<em>Description:<\/p>\n\n\n\n
An error occurred while writing to the database log file of storage group “SG1”. Attempting to unmount all databases in this storage group.<\/p>\n\n\n\n
For more information, click http:\/\/www.microsoft.com\/contentredirect.asp.<\/p>\n\n\n\n
Event Type: Error<\/p>\n\n\n\n
Event Source: ESE<\/p>\n\n\n\n
Event Category: Logging\/Recovery<\/p>\n\n\n\n
Event ID: 471<\/p>\n\n\n\n
Date: 27\/10\/2010<\/p>\n\n\n\n
Time: 21:00:34<\/p>\n\n\n\n
User: N\/A<\/p>\n\n\n\n
Computer: >SERVER<\/p>\n\n\n\n
<em>Description:<\/p>\n\n\n\n
Information Store (672) SG1: Unable to rollback operation #11716372 on database E:\\SG1\\PFS1\\pub1.edb. Error: -510. All future database updates will be rejected.<\/p>\n\n\n\n
For more information, click http:\/\/www.microsoft.com\/contentredirect.asp.<\/p>\n\n\n\n
Event Type: Error<\/p>\n\n\n\n
Event Source: MSExchangeIS<\/p>\n\n\n\n
Event Category: General<\/p>\n\n\n\n
Event ID: 1159<\/p>\n\n\n\n
Date: 27\/10\/2010<\/p>\n\n\n\n
Time: 21:00:34<\/p>\n\n\n\n
User: N\/A<\/p>\n\n\n\n
Computer: SERVER<\/p>\n\n\n\n
<em>Description:<\/p>\n\n\n\n
Database error 0xfffffbbe occurred in function JTAB_BASE::EcSetCurrentIndex while accessing the database “SG1\\MBS1”.<\/p>\n\n\n\n
For more information, click http:\/\/www.microsoft.com\/contentredirect.asp.<\/p>\n\n\n\n
Event Type: Warning<\/p>\n\n\n\n
Event Source: MSExchangeIS Mailbox Store<\/p>\n\n\n\n
Event Category: General<\/p>\n\n\n\n
Event ID: 1115<\/p>\n\n\n\n
Date: 27\/10\/2010<\/p>\n\n\n\n
Time: 21:00:41<\/p>\n\n\n\n
User: N\/A<\/p>\n\n\n\n
Computer: SERVER<\/p>\n\n\n\n
Description:<\/p>\n\n\n\n
Error 0xfffffbbe returned from closing database table, called from function JTAB_BASE::EcCloseTable on table Folders.<\/p>\n\n\n\n
For more information, click http:\/\/www.microsoft.com\/contentredirect.asp.<\/p>\n\n\n\n
It turned out that the backup job had started and then caused the problem. It freezes the DB to perform the backup but then it forgot to remove it this meant the exchange DB was left in this “i’m being backed up state”. The next thing because of this, this limit got hit: <\/a>http:\/\/support.microsoft.com\/kb\/905801<\/a><\/p>\n\n\n\n As the limit was hit the store went offline. To fix it I restarted IS, you could also bounce the server.<\/p>\n\n\n\n Hopefully it won’t happen again, i’ve just put it down to the backup job causing the problem.<\/p>\n\n\n\n It might be possible to monitor it, see this link: <\/a>http:\/\/jesperbernle.blogspot.com\/2008\/07\/event-id-1159.html<\/a><\/p>\n\n\n\n At least you’d get a warning, I didn’t though, I was on holiday when the limit got reached!<\/p>\n","protected":false},"excerpt":{"rendered":" I came into work this morning to a downed Exchange storage group and mail store. In the event log just after the backup ran i saw these string of events in the event log on the Exchange server. <em>Event Type: Error Event Source: ESE Event Category: General Event ID: 482 Date: 27\/10\/2010 Time: 21:00:34 User: … Read more<\/a><\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[32],"tags":[],"class_list":["post-613","post","type-post","status-publish","format-standard","hentry","category-microsoft-exchange"],"_links":{"self":[{"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/613","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=613"}],"version-history":[{"count":1,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/613\/revisions"}],"predecessor-version":[{"id":1568,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/613\/revisions\/1568"}],"wp:attachment":[{"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=613"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=613"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/geekmungus.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=613"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}