Exchange issues when Symantec or any anti-virus program quarantine’s the Exchange log

Exchange issues when Symantec or any anti-virus program quarantine’s the Exchange log.

From time to time I run into a issue when a anti-virus programs (usually Symantec) real time protection will quarantine the log files for Exchange. This can happen when someone forgets to set the exception for the Exchange folders for the real time scanning, but I have seen it just happen for no good reason. Here is what I do to correct the issue.

Problem:

E00.log was quarantine

E00193B.log is required for the database to mount

Run Eseutil:

Make sure you are in the exchsrvr\bin folder Type:

eseutil /p "d:\Program files\exchsrvr\mdbdata\priv.edb" | more eseutil /p "d:\Program files\exchsrvr\mdbdata\pub.edb" | more

Perform offline defrag

110% free space is required

eseutil /d "d:\Program files\exchsrvr\mdbdata\priv.edb" /t"X:\tempdfg.edb"

eseutil /d "d:\Program files\exchsrvr\mdbdata\pub.edb" /t"X:\tempdfg.edb"

X: drive there is 110% free space.

Check:

eseutil /mh "d:\Program files\exchsrvr\mdbdata\pub.edb" -> clean shutdown or dirty shutdown eseutil /mh "d:\Program files\exchsrvr\mdbdata\priv.edb" -> clean shutdown or dirty shutdown

Copy the log files to another drive

Mount the database

Dismount the database

Run Isinteg:

isinteg -s sever2 -fix -test alltests

select 1 as an option for private information store isinteg -s server2 -fix -test alltests select 2 as an option for public store

Mount the information stores and test.

Here is a KB article for the process

http://support.microsoft.com/?id=328804

Travis Davies

Sr Network Architect

Visionpace IT

URL: www.visionpaceit.com

EMAIL: tdavies@visionpaceit.com