• RSS
  • Twitter
  • FaceBook

Exchange Server Forums

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Disaster - has happened

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [Microsoft Exchange 2003] >> Installation >> Disaster - has happened Page: [1]
Login
Message << Older Topic   Newer Topic >>
Disaster - has happened - 24.Sep.2009 4:21:44 AM   
pesmith

 

Posts: 3
Joined: 24.Sep.2009
Status: offline
Hi,

We have been using Ntbackup and Shadow Copy to back up our Exchange system. When disaster struck the last backup was 19Gb in size. I tried to restore the backup by cataloging the file which showed the three folders 'Log Files', 'Mailbox Store (INTRANET)' and 'Public Folder Store (INTRANET)' - so far so good.

However when I click on the folders to restore they all say 'No Entries Found' - does that mean I have 19Gig of nothing?

We had a failure on the system that lost the Priv1.edb file however I still have the stm file which is 15.9Gb.

I reloaded Exchange 2003 with the /Disaster Recovery switch on and installed the SP1 with it as well. I think I had only installed SP1 so did not apply SP2. However with the stm file in place I cannot get the Exchange System Attendant to stay started with the following event logged:
Event Type: Error
Event Source: Microsoft Exchange Server
Event Category: None
Event ID: 1000
Date: 24/09/2009
Time: 09:14:01
User: N/A
Computer: INTRANET
Description:
The description for Event ID ( 1000 ) in Source ( Microsoft Exchange Server ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: mad.exe, 6.5.7226.0, 406d1e9b, unknown, 0.0.0.0, 00000000, 0, 61db9c33.

Does this mean I am dead with no data left?
Post #: 1
RE: Disaster - has happened - 24.Sep.2009 4:56:46 AM   
pesmith

 

Posts: 3
Joined: 24.Sep.2009
Status: offline
Full event steps:

Event Type: Information
Event Source: MSExchangeSA
Event Category: General
Event ID: 1000
Date: 24/09/2009
Time: 09:13:59
User: N/A
Computer: INTRANET
Description:
Microsoft Exchange System Attendant is starting. Microsoft Exchange Server System Attendant, service startup complete, version 6.5 (build 7226.0).

For more information, click http://www.microsoft.com/contentredirect.asp.
=============================

Event Type: Information
Event Source: MSExchangeSA
Event Category: General
Event ID: 9007
Date: 24/09/2009
Time: 09:14:00
User: N/A
Computer: INTRANET
Description:
Microsoft Exchange System Attendant is initializing 'DSACCESS.DLL'.

For more information, click http://www.microsoft.com/contentredirect.asp.
=============================

Event Type: Information
Event Source: MSExchangeDSAccess
Event Category: General
Event ID: 2068
Date: 24/09/2009
Time: 09:14:00
User: N/A
Computer: INTRANET
Description:
Process MAD.EXE (PID=3252). DSAccess initialized successfully.

For more information, click http://www.microsoft.com/contentredirect.asp.
=============================

Event Type: Information
Event Source: MSExchangeSA
Event Category: General
Event ID: 9006
Date: 24/09/2009
Time: 09:14:00
User: N/A
Computer: INTRANET
Description:
Microsoft Exchange System Attendant is loading 'DSPROXY.DLL'.

For more information, click http://www.microsoft.com/contentredirect.asp.
==============================

Event Type: Information
Event Source: MSExchangeSA
Event Category: General
Event ID: 9006
Date: 24/09/2009
Time: 09:14:00
User: N/A
Computer: INTRANET
Description:
Microsoft Exchange System Attendant is loading 'ABV_DG.DLL'.

For more information, click http://www.microsoft.com/contentredirect.asp.
=============================

Event Type: Information
Event Source: MSExchangeSA
Event Category: General
Event ID: 9006
Date: 24/09/2009
Time: 09:14:00
User: N/A
Computer: INTRANET
Description:
Microsoft Exchange System Attendant is loading 'DS2MB.DLL'.

For more information, click http://www.microsoft.com/contentredirect.asp.
=============================
Event Type: Information
Event Source: MSExchangeSA
Event Category: General
Event ID: 9007
Date: 24/09/2009
Time: 09:14:00
User: N/A
Computer: INTRANET
Description:
Microsoft Exchange System Attendant is initializing 'DS2MB.DLL'.

For more information, click http://www.microsoft.com/contentredirect.asp.
=============================


Event Type: Information
Event Source: MSExchangeSA
Event Category: General
Event ID: 9006
Date: 24/09/2009
Time: 09:14:00
User: N/A
Computer: INTRANET
Description:
Microsoft Exchange System Attendant is loading 'madfb.dll'.

For more information, click http://www.microsoft.com/contentredirect.asp.
=============================

Event Type: Information
Event Source: MSExchangeSA
Event Category: General
Event ID: 9007
Date: 24/09/2009
Time: 09:14:00
User: N/A
Computer: INTRANET
Description:
Microsoft Exchange System Attendant is initializing 'madfb.dll'.

For more information, click http://www.microsoft.com/contentredirect.asp.
============================

Event Type: Information
Event Source: MSExchangeSA
Event Category: General
Event ID: 9006
Date: 24/09/2009
Time: 09:14:00
User: N/A
Computer: INTRANET
Description:
Microsoft Exchange System Attendant is loading 'OABGEN.DLL'.

For more information, click http://www.microsoft.com/contentredirect.asp.
============================

Event Type: Information
Event Source: MSExchangeSA
Event Category: General
Event ID: 9008
Date: 24/09/2009
Time: 09:14:00
User: N/A
Computer: INTRANET
Description:
Microsoft Exchange System Attendant is starting 'OABGEN.DLL'.

For more information, click http://www.microsoft.com/contentredirect.asp.
===========================

Event Type: Information
Event Source: MSExchangeSA
Event Category: General
Event ID: 9013
Date: 24/09/2009
Time: 09:14:00
User: N/A
Computer: INTRANET
Description:
Microsoft Exchange System Attendant is being started for Exchange server 'INTRANET'.

For more information, click http://www.microsoft.com/contentredirect.asp.
==========================

Event Type: Information
Event Source: MSExchangeSA
Event Category: General
Event ID: 9012
Date: 24/09/2009
Time: 09:14:00
User: N/A
Computer: INTRANET
Description:
Microsoft Exchange System Attendant is binding to domain controller '{THIS IS CORRECT}'.

For more information, click http://www.microsoft.com/contentredirect.asp.
=========================

Event Type: Information
Event Source: MSExchangeSA
Event Category: General
Event ID: 9008
Date: 24/09/2009
Time: 09:14:00
User: N/A
Computer: INTRANET
Description:
Microsoft Exchange System Attendant is starting 'DS2MB.DLL'.

For more information, click http://www.microsoft.com/contentredirect.asp.
=========================

Event Type: Information
Event Source: MSExchangeSA
Event Category: General
Event ID: 9242
Date: 24/09/2009
Time: 09:14:00
User: N/A
Computer: INTRANET
Description:
Microsoft Exchange System Attendant is registering cluster virtual machine INTRANET with DsProxy.

For more information, click http://www.microsoft.com/contentredirect.asp.
========================

Event Type: Information
Event Source: MSExchangeSA
Event Category: General
Event ID: 9008
Date: 24/09/2009
Time: 09:14:00
User: N/A
Computer: INTRANET
Description:
Microsoft Exchange System Attendant is starting 'ABV_DG.DLL'.

For more information, click http://www.microsoft.com/contentredirect.asp.
======================

Event Type: Error
Event Source: MSExchangeSA
Event Category: General
Event ID: 9022
Date: 24/09/2009
Time: 09:14:00
User: N/A
Computer: INTRANET
Description:
Microsoft Exchange System Attendant encountered an error while processing the security data for Exchange server 'INTRANET'.

For more information, click http://www.microsoft.com/contentredirect.asp.
=========================

Event Type: Warning
Event Source: MSExchangeSA
Event Category: General
Event ID: 9021
Date: 24/09/2009
Time: 09:14:00
User: N/A
Computer: INTRANET
Description:
Microsoft Exchange System Attendant has generated new security keys for Exchange server 'INTRANET'. Any passwords required by this server must be re-entered using the Exchange System Management snapin.

For more information, click http://www.microsoft.com/contentredirect.asp.
==========================

Event Type: Information
Event Source: MSExchangeSA
Event Category: General
Event ID: 9009
Date: 24/09/2009
Time: 09:14:00
User: N/A
Computer: INTRANET
Description:
Microsoft Exchange System Attendant is stopping 'ABV_DG.DLL'.

For more information, click http://www.microsoft.com/contentredirect.asp.
=========================

Event Type: Error
Event Source: MSExchangeSA
Event Category: General
Event ID: 9149
Date: 24/09/2009
Time: 09:14:00
User: N/A
Computer: INTRANET
Description:
Microsoft Exchange System Attendant failed to start Exchange server 'INTRANET'. Error code '0x80070005'.

For more information, click http://www.microsoft.com/contentredirect.asp.
=========================

Event Type: Error
Event Source: MSExchangeSA
Event Category: General
Event ID: 1005
Date: 24/09/2009
Time: 09:14:00
User: N/A
Computer: INTRANET
Description:
Unexpected error Access denied. Facility: LDAP Provider ID no: 80070005 Microsoft Exchange System Attendant occurred.

For more information, click http://www.microsoft.com/contentredirect.asp.
========================

Event Type: Information
Event Source: MSExchangeSA
Event Category: General
Event ID: 1004
Date: 24/09/2009
Time: 09:14:00
User: N/A
Computer: INTRANET
Description:
Microsoft Exchange System Attendant failed to start.

For more information, click http://www.microsoft.com/contentredirect.asp.
=========================

Event Type: Information
Event Source: MSExchangeDSAccess
Event Category: General
Event ID: 2078
Date: 24/09/2009
Time: 09:14:00
User: N/A
Computer: INTRANET
Description:
Process MAD.EXE (PID=3252). DSAccess is shutting down.

For more information, click http://www.microsoft.com/contentredirect.asp.
========================

Event Type: Error
Event Source: Microsoft Exchange Server
Event Category: None
Event ID: 1000
Date: 24/09/2009
Time: 09:14:01
User: N/A
Computer: INTRANET
Description:
The description for Event ID ( 1000 ) in Source ( Microsoft Exchange Server ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: mad.exe, 6.5.7226.0, 406d1e9b, unknown, 0.0.0.0, 00000000, 0, 61db9c33.
Data:
0000: 41 00 70 00 70 00 6c 00 A.p.p.l.
0008: 69 00 63 00 61 00 74 00 i.c.a.t.
0010: 69 00 6f 00 6e 00 20 00 i.o.n. .
0018: 46 00 61 00 69 00 6c 00 F.a.i.l.
0020: 75 00 72 00 65 00 20 00 u.r.e. .
0028: 20 00 6d 00 61 00 64 00 .m.a.d.
0030: 2e 00 65 00 78 00 65 00 ..e.x.e.
0038: 20 00 36 00 2e 00 35 00 .6...5.
0040: 2e 00 37 00 32 00 32 00 ..7.2.2.
0048: 36 00 2e 00 30 00 20 00 6...0. .
0050: 34 00 30 00 36 00 64 00 4.0.6.d.
0058: 31 00 65 00 39 00 62 00 1.e.9.b.
0060: 20 00 69 00 6e 00 20 00 .i.n. .
0068: 75 00 6e 00 6b 00 6e 00 u.n.k.n.
0070: 6f 00 77 00 6e 00 20 00 o.w.n. .
0078: 30 00 2e 00 30 00 2e 00 0...0...
0080: 30 00 2e 00 30 00 20 00 0...0. .
0088: 30 00 30 00 30 00 30 00 0.0.0.0.
0090: 30 00 30 00 30 00 30 00 0.0.0.0.
0098: 20 00 66 00 44 00 65 00 .f.D.e.
00a0: 62 00 75 00 67 00 20 00 b.u.g. .
00a8: 30 00 20 00 61 00 74 00 0. .a.t.
00b0: 20 00 6f 00 66 00 66 00 .o.f.f.
00b8: 73 00 65 00 74 00 20 00 s.e.t. .
00c0: 36 00 31 00 64 00 62 00 6.1.d.b.
00c8: 39 00 63 00 33 00 33 00 9.c.3.3.
00d0: 0d 00 0a 00 ....
===============================================

Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 24/09/2009
Time: 09:14:08
User: N/A
Computer: INTRANET
Description:
Faulting application mad.exe, version 6.5.7226.0, faulting module unknown, version 0.0.0.0, fault address 0x61db9c33.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 6d 61 64 ure mad
0018: 2e 65 78 65 20 36 2e 35 .exe 6.5
0020: 2e 37 32 32 36 2e 30 20 .7226.0
0028: 69 6e 20 75 6e 6b 6e 6f in unkno
0030: 77 6e 20 30 2e 30 2e 30 wn 0.0.0
0038: 2e 30 20 61 74 20 6f 66 .0 at of
0040: 66 73 65 74 20 36 31 64 fset 61d
0048: 62 39 63 33 33 b9c33

(in reply to pesmith)
Post #: 2
RE: Disaster - has happened - 24.Sep.2009 8:19:30 AM   
pesmith

 

Posts: 3
Joined: 24.Sep.2009
Status: offline
OK.

I found a problem with the certificate on the server. I deleted it and now it will let me start the services. NTBackup will start to run and restore but gets to about 3Gb and fails.

(in reply to pesmith)
Post #: 3
RE: Disaster - has happened - 14.May2012 11:26:45 AM   
techinfo

 

Posts: 72
Joined: 24.Jan.2011
Status: offline
In situation of Exchange server disaster, this helpful operation guide may help you to fix the issue: http://technet.microsoft.com/en-us/library/bb125070%28v=exchg.65%29.aspx

< Message edited by zbnet -- 8.Aug.2013 3:11:32 AM >

(in reply to pesmith)
Post #: 4

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [Microsoft Exchange 2003] >> Installation >> Disaster - has happened Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts


Follow TechGenix on Twitter