询问者
Exchange 2010 错误日志分析

问题
-
我们本周日遇到,单独用户访问,OWA失败,情况。
现象:
如下图,用户无法访问OWA,用户访问Outlook是长时间无响应,用户Outlook中,寄件夹邮件无法送出。
处理方法:
迁移用户邮箱到新的DB,用户收发邮件恢复正常,用户OWA恢复正常。
请教:
我们核查了用户异常时,发现服务器报警日志。
我们希望,多方协助核查此日志,看看是否可以找到Mailbox / DB异常原因,修复和避免、类似情况重复发生。
用户无法访问邮箱时,服务器警告日志:
日志名称: Application
来源: MSExchange Mailbox Replication
日期: 2016/8/20 17:29:30
事件 ID: 1006
任务类别: Service
级别: 警告
关键字: 经典
用户: 暂缺
计算机: ITC-EX2010-02.itc.inventec
描述:
Microsoft Exchange 邮箱复制服务无法处理邮箱数据库中的作业。
数据库: ITC-PRES-FG01
错误: MapiExceptionMaxThreadsPerMdbExceeded: Unable to open message store. (hr=0x80004005, ec=2700)
Diagnostic context:
......
Lid: 55847 EMSMDBPOOL.EcPoolSessionDoRpc called [length=232]
Lid: 43559 EMSMDBPOOL.EcPoolSessionDoRpc returned [ec=0xA8C][length=226][latency=0]
Lid: 32881 StoreEc: 0xA8C
Lid: 55847 EMSMDBPOOL.EcPoolSessionDoRpc called [length=232]
Lid: 43559 EMSMDBPOOL.EcPoolSessionDoRpc returned [ec=0xA8C][length=226][latency=0]
Lid: 32881 StoreEc: 0xA8C
Lid: 55847 EMSMDBPOOL.EcPoolSessionDoRpc called [length=232]
Lid: 43559 EMSMDBPOOL.EcPoolSessionDoRpc returned [ec=0xA8C][length=226][latency=0]
Lid: 32881 StoreEc: 0xA8C
Lid: 55847 EMSMDBPOOL.EcPoolSessionDoRpc called [length=232]
Lid: 43559 EMSMDBPOOL.EcPoolSessionDoRpc returned [ec=0xA8C][length=226][latency=0]
Lid: 32881 StoreEc: 0xA8C
Lid: 55847 EMSMDBPOOL.EcPoolSessionDoRpc called [length=232]
Lid: 43559 EMSMDBPOOL.EcPoolSessionDoRpc returned [ec=0xA8C][length=226][latency=0]
Lid: 32881 StoreEc: 0xA8C
Lid: 47388
Lid: 50035
Lid: 64625 StoreEc: 0xA8C
Lid: 50128
Lid: 1494 ---- Remote Context Beg ----
Lid: 26426 ROP: ropLogon [254]
Lid: 52223 dwParam: 0x33
Lid: 60415 dwParam: 0x32
Lid: 46079 StoreEc: 0xA8C
Lid: 40271
Lid: 12716 StoreEc: 0xA8C
Lid: 20794
Lid: 28474 StoreEc: 0xA8C
Lid: 22330 dwParam: 0x0 Msg: 14.03.0301.000:ITC-EX2010-01
Lid: 1750 ---- Remote Context End ----
Lid: 50288
Lid: 23354 StoreEc: 0xA8C
Lid: 25913
Lid: 21817 ROP Failure: 0xA8C
Lid: 26297
Lid: 16585 StoreEc: 0xA8C
Lid: 32441
Lid: 1706 StoreEc: 0xA8C
Lid: 24761
Lid: 20665 StoreEc: 0xA8C
Lid: 25785
Lid: 29881 StoreEc: 0xA8C
事件 Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="MSExchange Mailbox Replication" />
<EventID Qualifiers="32772">1006</EventID>
<Level>3</Level>
<Task>1</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2016-08-20T09:29:30.000000000Z" />
<EventRecordID>19271399</EventRecordID>
<Channel>Application</Channel>
<Computer>ITC-EX2010-02.itc.inventec</Computer>
<Security />
</System>
<EventData>
<Data>ITC-PRES-FG01</Data>
<Data>MapiExceptionMaxThreadsPerMdbExceeded: Unable to open message store. (hr=0x80004005, ec=2700)
Diagnostic context:
......
Lid: 55847 EMSMDBPOOL.EcPoolSessionDoRpc called [length=232]
Lid: 43559 EMSMDBPOOL.EcPoolSessionDoRpc returned [ec=0xA8C][length=226][latency=0]
Lid: 32881 StoreEc: 0xA8C
Lid: 55847 EMSMDBPOOL.EcPoolSessionDoRpc called [length=232]
Lid: 43559 EMSMDBPOOL.EcPoolSessionDoRpc returned [ec=0xA8C][length=226][latency=0]
Lid: 32881 StoreEc: 0xA8C
Lid: 55847 EMSMDBPOOL.EcPoolSessionDoRpc called [length=232]
Lid: 43559 EMSMDBPOOL.EcPoolSessionDoRpc returned [ec=0xA8C][length=226][latency=0]
Lid: 32881 StoreEc: 0xA8C
Lid: 55847 EMSMDBPOOL.EcPoolSessionDoRpc called [length=232]
Lid: 43559 EMSMDBPOOL.EcPoolSessionDoRpc returned [ec=0xA8C][length=226][latency=0]
Lid: 32881 StoreEc: 0xA8C
Lid: 55847 EMSMDBPOOL.EcPoolSessionDoRpc called [length=232]
Lid: 43559 EMSMDBPOOL.EcPoolSessionDoRpc returned [ec=0xA8C][length=226][latency=0]
Lid: 32881 StoreEc: 0xA8C
Lid: 47388
Lid: 50035
Lid: 64625 StoreEc: 0xA8C
Lid: 50128
Lid: 1494 ---- Remote Context Beg ----
Lid: 26426 ROP: ropLogon [254]
Lid: 52223 dwParam: 0x33
Lid: 60415 dwParam: 0x32
Lid: 46079 StoreEc: 0xA8C
Lid: 40271
Lid: 12716 StoreEc: 0xA8C
Lid: 20794
Lid: 28474 StoreEc: 0xA8C
Lid: 22330 dwParam: 0x0 Msg: 14.03.0301.000:ITC-EX2010-01
Lid: 1750 ---- Remote Context End ----
Lid: 50288
Lid: 23354 StoreEc: 0xA8C
Lid: 25913
Lid: 21817 ROP Failure: 0xA8C
Lid: 26297
Lid: 16585 StoreEc: 0xA8C
Lid: 32441
Lid: 1706 StoreEc: 0xA8C
Lid: 24761
Lid: 20665 StoreEc: 0xA8C
Lid: 25785
Lid: 29881 StoreEc: 0xA8C </Data>
</EventData>
</Event>
全部回复
-
你好,
根据我的查找,发现下面可能导致问题的原因:
1.杀毒软件。
2.环境中有安装FPE(Forefront Protection for Exchange),没有更新到最新版本。
3.Exchange 2010中每个服务允许的最大 Exchange 会话数默认为10,000,最大值65536. 可能一些操作导致会话数超过默认值,导致该报错产生。
对应的一些解决方案:
1. 做好Exchange 2010服务器上的扫描排除规则:Exchange 2010 上的文件级防病毒扫描
2. 升级FPE到最新版本。
3. 配置会话限制
以上信息供你参考,希望对你有所帮助。
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.
Niko Cheng
TechNet Community Support- 已建议为答案 Niko.ChengModerator 2016年8月29日 1:19
-
你好,
问题是否有任何进展?如果还有其他问题,请及时贴出来;如果问题已解决,请将其标记为答复,这样有助于其他论坛成员更方便的搜寻答案,感谢理解!
谢谢!
Niko Cheng
TechNet Community Support
Please remember to mark the replies as an answers if they help and unmark them if they provide no help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.