I'm primed to move everybody over to Exchange 2013. I have two multi-role servers load balanced behind a Citrix Netscaler and all tests had gone off without a hitch. I successfully moved to two test mailboxes from 2010 to 2013 (love the new move process btw) and moved my own mailbox on Friday.

After the move completed, I was unable to connect to it via Outlook 2013 or Outlook 2010 (different PCs). I receive the following error:

Cannot start Microsoft Outlook. Cannot open the Outlook window. The set of folders cannot be opened. Microsoft Exchange is not available. Either there are network problems or the Exchange server is down for maintenance.

I already removed the mail profile and created a new one from scratch. I also completely blew away my user profile on another PC and still had no success. Outlook setup seems to run without any problems. But once it attempts to actually open my folders, I get the error. This is true on Outlook 2010 and 2013.

The strangest part is that I can access my mailbox from one of the other migrated mailboxes that has "full control" over my mailbox. This account is enabled for Lync 2013 (unlike the test accounts) and was sometimes given full control over other mailboxes but other than that, I can't think of any differences.

It was suggested that auto-mapping may be causing my problem so I used the following PS to discover what mailboxes I had full control over and then removed my access.  I ran this against both the 2010 and 2013 mailboxes.

Get-Mailbox -Server “Server” | Get-MailboxPermission | where { ($_.AccessRights -eq “FullAccess”) -and ($_.IsInherited -eq $false) -and -not ($_.User -like “NT AUTHORITY\SELF”) }

It is possible that this account had some sort of Exchange 2010 admin roles at some point but we removed those along time ago when we were tightening up responsibilities.

Any ideas?

Exchange server installation 2013 running since 2012. Recently replaced SSL Cert. Since then: URLhttps://FQDN/ecp opens blueish Outlook Web App (as before). Type in Domain/Username and Password results in a yellowish window stating "Unexpected Error. An error occured and your request couln't be completed. Please try again." Outlook can connect to server, just opening EAC does not work. Worked before the new SSL Cert. Any suggestions how to resolve this? Thank you.

I am getting the following SCOM alert every night, then it resolves itself in the morning. Our database are configured without limits and we do not retain items that are hard deleted. We don't have any quotas. I don't know what "Quota" the alert is referring to. Any assistance appreciated. 

Alert: {2}

Source: mailserver - Compliance

Path: mailserver.domain.com;mailserver.domain.com

Last modified by: System

Last modified time: 4/12/2015 11:16:23 PM Alert description: Probe: {Compliance/ELCComponent_DumpsterWarningQuota}

Mailbox guid: {8513a7a4-e42c-487b-bbb0-4631e4afb935}

In Org: {}

With stack trace: {Mailbox: 8513a7a4-e42c-487b-bbb0-4631e4afb935 is over dumpster warning quota.} If the mailbox is on hold, dumpster quota will need to be increased. If not on hold, get last ELC exception from Export-MailboxDiagnosticLogs -Component MRM then statistics with -ExtendedProperties and look at all ELC properties.

We are running two Exchange 2013 CU7 CAS/MBX servers. On both servers we see once a day a CPU spike caused by the MSExchangeMailboxAssistants:

We are seeing this spike on both servers (both servers have 2 active databases en 2 passive databases). The problem is that during this spike users are experiencing performance problems with their Outlook client.

As far as I understand the Mailbox Assistance is kind of black box process which can be configured and should only run when it doesn't affect the performance. However, for us this theory doesn't match real life.

When I look in the eventviewer I see the following related events (about 300 on each server):

Information

3/17/2015 18:31

MSExchangeMailboxAssistants

25001

-25

The people relevance feeder for mailbox /o=Organization/ou=Exchange Administrative Group (RXDIAEHF18SPDLT)/cn=Recipients/cn=J.Doe picked 3 sent items to process. Number of sent items successfully processed 3 and number of sent items failed to be processed 0. Total time taken to process this mailbox 408.9071.

Can someone explain what kind of maintenance is performed and how I should interpret the events? The time, is it 408 milliseconds or seconds? Is there a way I can limit or tune the MSExchangeMailboxAssistants process?

I am trying to separate the GAL by creating a customized GAL and address lists. I have created what i have needed and assigned the address book policy to a user for the new GAL. When I log into OWA I see the new GAL however i can only see my account. Is there some permissions that i am missing from somewhere?

Thanks

---

WWT IT

Setup: 3 clustered, database availability group Exchange 2013 servers running on Windows Server 2012 R2 (fully up to date)

Problem:

Our mail queue starts stacking up with error: 4.3.1 Insufficient system resources

I pulled out the transport log and found that once this error started happening a user was attempting to send a large file (400mb +) via Outlook 2013 as an attachment. Our send connector is configured to allow a generous 35mb maximum to message size. Why are my servers going into back pressure when technically the users message should be rejected immediately for breaking the send connector size rule? Or does Exchange have to process the file before rejecting it which is eating up my memory or disk space?

This has happened twice now due to users trying to send large files by Outlook 2013. Any suggestions?

Thanks!

Howdy,

We have some Equipment Mailboxes setup for things like Projectors, Wireless Presenters, and Hot Spots.  When someone sets up a meeting then can reserve a piece of equipment if they need one.  All the equipment is stored in the IT area so I'm wondering if there's a way that we can have an email get sent to a certain email address any time someone reserves equipment, or if there's some other way to get notified so we can have the equipment ready for them to stop by and pick it up.

Does that make sense?

Thanks!

Exchange 2010 cert expired today. Got the new one, going through the motions, everything going great. I follow GoDaddys instructions and get to step 32 of 33. I click assign on 32. and get a popup asking if I want to enforce ssl on root website. I apologize for my ignorance but I don't know. I am not sure how to answer that. This is my CAS server and obviously has IIS for owa, etc. I don't know how it was configured before and I don't know what the consequences are for each choice. Not sure what I should do, I have included a pic.

---

mcp

Hello; i have a problema with continuos restart of a Exchange Server 2013.

Analizing the dumb the bugcheck was: 0x000000ef (0xffffe001c4228080, 0x0000000000000000, 0x0000000000000000, 0x0000000000000000).

Investigating in this fórums and internet; i found that reboot cause from ActiveDirectoryConnectivityServerReboot responder. Whit this query:

(Get-WinEvent -LogName Microsoft-Exchange-ManagedAvailability/* | % {[XML]$_.toXml()}).event.userData.eventXml| ?{$_.ActionID -like "*ForceReboot*"} | ft RequesterName

ActiveDirectoryConnectivityServerReboot

This Exchange 2013 server is in CU7

Name      AdminDisplayVersion
----      -------------------
EXC01   Version 15.0 (Build 1044.25) 

And then i tried to add a global monitoring override to disable the ActiveDirectoryConnectivityServerReboot responder

Add-GlobalMonitoringOverride -Identity Exchange\ActiveDirectoryConnectivityServerReboot -ItemType Responder -PropertyName Enabled -PropertyValue 0 -ApplyVersion “15.0.1044.25”

The before command end without errors

But when a try to query the status of the responder propertie; show enable.

(Get-WinEvent -LogName Microsoft-Exchange-ActiveMonitoring/responderdefinition | % {[XML]$_.toXml()}).event.userData.eventXml | ?{$_.Name -like “ActiveDirectoryConnectivityServerReboot"} | ft name,enabled

Name                                                                       Enabled

---------                                                                   -------------------------- 

ActiveDirectoryConnectivityServerReboot                        1

Why i can't to disable that responder? what i am doing wrong?

please help me. Thank you very much.

---

Best regards, Javier Uribe

We are planning to replace our Core networking switch in our production environment. I am looking for a best practice option for Exchange to be placed into during this outage. This will be an approximate four hour outage.

Our current environment for Exchange is this:

Exchange 2010 SP3 rollup 8v2 two CAS servers and Three MBX/HT servers.

I read a few articles and they recommended different things, one was to just power down all of the exchange servers before the outage and then bring them back up after the outage. To me this just seems like a bad idea. The other was to put the MBX servers into maintenance mode prior to shutting them down. This seemed more practical.

Can anyone provide feedback, insight, and guidance in this case? Has anyone gone through this type of outage and if so how did you handle your exchange environment and what was your success or failures with the scenario you used?

Thank you

Exchange 2013 RTM, CU1 , CU2 and CU3 are no longer supported. 

Before posting a question, please ensure you are at the latest CU.

http://blogs.technet.com/b/rmilne/archive/2015/04/14/end-of-exchange-2013-rtm-support.aspx

---

Twitter!: Please Note: My Posts are provided “AS IS” without warranty of any kind, either expressed or implied.

We've created some linked mailboxes in another forest. Now we'd like to apply an EAP to users in that forest who have linked mailboxes. In Exchange 2013, I don't see a way to apply a policy to an OU in another AD Forest. We have a two-way trust but I don't see the other domain when browsing on Recipient Containers. Is there a trick to this?

---

Orange County District Attorney

I've got an SRV record so I can use their single name cert for autodiscover.

Internally, everything is working fine. Externally it's working fine except that users need to hit Yes on a Security Alert prompt that is complaining that 'the name on the security certificate is invalid or does not match the name of the site.'

Outlook anywhere is working fine and I already changed all the VD's to the name on the cert. Internal users do not see this prompt. Any ideas?

Hi All

I am seeing the below event appearing in the system log on all our Exchange 2013 servers regularly. I am not seeing any connectivity issues between any clients and the servers and no other issues have been reported at this stage.

Log Name:      System
Source:        Schannel
Date:          10/04/2015 9:21:17 AM
Event ID:      36871
Task Category: None
Level:         Error
Keywords:     
User:          SYSTEM
Computer:     
Description:
A fatal error occurred while creating an SSL client credential. The internal error state is 10013.

I am not sure if its related to the public certificate we are using or if its related to the one provided from the local CA.I have searched and found other links that suggest it could be related to SSL versions being disabled etc.

All servers are running Windows 2012 R2 Datacenter. The Exchange CAS servers do also sit behind a pair of F5 BIG IP Load Balancers 

Any suggestions on where to look?

Thanks

I'm trying to disable the monitor for a database in a DAG that we don't want to have copies for.

I tried the following, but a few hours later the monitoring alert appears again;

Set-MailboxDatabase –Identity "name” –AutoDagExcludeFromMonitoring $True
Add-GlobalMonitoringOverride -Identity DataProtection\EnableDatabaseMonitoringResponder -ItemType Responder -PropertyName “Enabled” -PropertyValue “0” -Duration 60.00:00:00

Does anybody know how to disable the database redundancy check for a specific database?

Hi I have run Set-Mailbox ian.shapton -AuditOwner Update, Move, MoveToDeletedItems, SoftDelete, HardDelete

I then created and deleted an email and ran Search-MailboxAuditLog -Identity "ian shapton" -LogonTypes Owner -StartDate "12/21/2014 12:00" -EndDate "12/21/2014 13:00" -ShowDetails

I see An error occurred while trying to access the audit log. For more details, see the inner exception.
    + CategoryInfo          : NotSpecified: (:) [Search-MailboxAuditLog], AuditLogException
    + FullyQualifiedErrorId : [Server=Mailbox01,RequestId=07f17915-f25d-4fd5-b23e-f07a2482f4a4,TimeStamp=21/12/2014 16:45:39] [FailureCategory=Cmdlet-AuditLogException] 255D6156,Microsoft.Exchange.Management.SystemConfigurationTasks.SearchMailboxAuditLog

MSExchange CmdletLogs shows Microsoft.Exchange.Data.ApplicationLogic.AuditLogServiceException: The Exchange Web Service returned an error while trying to access the audit log. Reason: 'Error','ErrorTimeoutExpired','The search operation could not be completed within the allotted time limit. Please try to narrow down your scope to reduce the result set.'.

I am a Recipient Admin and Org Admin and can search other mailboxes using -LogonTypes Delegate

Any idea what I am missing here?

---

shapi

I'm going through my Exchange Server's logs and checking out warnings and errors, and I haven't been able to find anything helpful on this one in the application log of the Windows Server 2012 R2 virtual machine running Exchange Server 2013 SP1 only:

Event ID 3154 error, source MSExchangeRepl:

Active Manager failed to mount database Mailbox Database 0738684499 on server <Server.Name.com>. Error: An Active Manager operation failed with a transient error. Please retry the operation. Error: Database action failed with transient error. Error: A transient error occurred during a database operation. Error: MapiExceptionNetworkError: Unable to make admin interface connection to server. (hr=0x80040115, ec=-2147221227)

Apparently the error really is "transient" and the server retries the operation successfully, because everything seems to be working OK, but I'd still like to know why this error appears every time the server starts up, and what I can do to prevent the error from occurring.  Thanks!

I'm going through my Exchange Server's logs and checking out warnings and errors, and I haven't been able to find anything helpful on this one in the application log of the Windows Server 2012 R2 virtual machine running Exchange Server 2013 SP1 only:

Event ID 1005 warning, source MSExchangeDiagnostics

The performance counter '\\<ServerName>\Processor(_Total)\% Processor Time' sustained a value of '85.73', for the '5' minute(s) interval starting at '4/3/2015 10:40:00 AM'. Additional information: 
Top 10 process time breakdown:
CPU % Process Name
 37.3 SvcHost#netsvcs
 26.8 TiWorker
 21.6 WmiPrvSE
 11.4 w3wp#MSExchangeMapiMailboxAppPool
 11.3 w3wp#MSExchangeECPAppPool
 10.5 SvcHost#LocalServiceNetworkRestricted
 10.2 w3wp#MSExchangeOWAAppPool
  7.6 NodeRunner#ContentEngineNode1
  7.3 w3wp#MSExchangePowerShellAppPool
  5.9 w3wp#MSExchangeSyncAppPool

I'd appreciate any insight into what this warning is telling me and what I need to do to resolve the causing issue.  Thanks!

As per my knowledge we don't have any free NSF to PST conversion tool out in market however i want to know any alternative solution to get the job done by means by scripts or some intelligent mechanism that we as an messaging admin can implement to save cost involved in migrations . Please suggest ?

---

Aditya Mediratta

After upgrading to CU6 for Exchange 2013, the Application event log is flooded with MSExhange Common error 106: Performance counter updating error. Counter name is Time in Resource per second, category name is MSExchange Activity Context Resources. Optional code: 2. Exception: The exception thrown is : System.InvalidOperationException: Instance 'ad-powershell-defaultdomain' already exists with a lifetime of Process.  It cannot be recreated or reused until it has been removed or until the process using it has exited.
   at System.Diagnostics.SharedPerformanceCounter.FindInstance(Int32 instanceNameHashCode, String instanceName, CategoryEntry* categoryPointer, InstanceEntry** returnInstancePointerReference, Boolean activateUnusedInstances, PerformanceCounterInstanceLifetime lifetime, Boolean& foundFreeInstance)
   at System.Diagnostics.SharedPerformanceCounter.GetCounter(String counterName, String instanceName, Boolean enableReuse, PerformanceCounterInstanceLifetime lifetime)
   at System.Diagnostics.SharedPerformanceCounter..ctor(String catName, String counterName, String instanceName, PerformanceCounterInstanceLifetime lifetime)
   at System.Diagnostics.PerformanceCounter.InitializeImpl()
   at System.Diagnostics.PerformanceCounter.get_RawValue()
   at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.get_RawValue()
Last worker process info : System.ArgumentException: Process with an Id of 4776 is not running.
   at System.Diagnostics.Process.GetProcessById(Int32 processId)
   at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.GetLastWorkerProcessInfo()
Processes running while Performance counter failed to update:
14256 winlogon
15748 powershell
6524 Microsoft.Exchange.UM.CallRouter
5904 w3wp
584 lsass
780 LogonUI
4324 MSExchangeFrontendTransport
6292 Microsoft.Exchange.Store.Worker
2744 WmiPrvSE
576 services
3136 MonitoringHost
12568 svchost
1360 hostcontrollerservice
8648 WmiPrvSE
1752 SMSvcHost
1160 spoolsv
1356 sftracing
9528 TiWorker
10444 explorer
2732 w3wp
14908 WmiPrvSE
3124 Microsoft.Exchange.Store.Worker
4696 Microsoft.Exchange.Store.Service
4892 MSExchangeMailboxAssistants
12208 w3wp
15740 powershell
2128 WMSvc
748 rundll32
8232 w3wp
8400 svchost
3700 MonitoringHost
15716 powershell
5864 MSExchangeThrottling
2908 w3wp
4088 Microsoft.Exchange.EdgeSyncSvc
5660 scanningprocess
2292 wuauclt
5656 umservice
6044 scanningprocess
4076 noderunner
1908 MSExchangeHMHost
2892 Microsoft.Exchange.AntispamUpdateSvc
3876 noderunner
3676 MSExchangeMailboxReplication
15732 powershell
2096 svchost
7096 UMWorkerProcess
516 winlogon
908 svchost
1296 HealthService
1492 svchost
2824 w3wp
12324 dwm
1560 ForefrontActiveDirectoryConnector
304 smss
10820 w3wp
8464 svchost
888 Microsoft.Exchange.ContentFilter.Wrapper
5024 msexchangerepl
488 wininit
8564 taskhostex
5272 Microsoft.Exchange.ServiceHost
3832 noderunner
10088 w3wp
480 csrss
7920 conhost
872 svchost
5992 scanningprocess
4808 msdtc
8352 dllhost
860 TrustedInstaller
4008 rundll32
4400 conhost
656 svchost
9828 w3wp
1832 noderunner
4392 MSExchangeHMWorker
1828 mqsvc
700 svchost
1628 Microsoft.Exchange.Diagnostics.Service
3596 w3wp
2220 Microsoft.Exchange.Directory.TopologyService
1820 MSExchangeDelivery
7532 MSExchangeTransport
13372 svchost
832 svchost
9696 conhost
8316 svchost
1580 dllhost
3980 Microsoft.Exchange.RpcClientAccess.Service
8788 VSSVC
5948 MSExchangeTransportLogSearch
2992 MSExchangeDagMgmt
10632 csrss
1216 fms
3776 rundll32
5356 MSExchangeSubmission
7908 EdgeTransport
11576 w3wp
1600 inetinfo
1008 svchost
416 csrss
808 svchost
7608 w3wp
1588 updateservice
4148 Microsoft.Exchange.Search.Service
640 w3wp
796 dwm
2568 SMSvcHost
1188 svchost
4 System
3484 rdpclip
0 Idle
Performance Counters Layout information: A process is holding onto a transport performance counter. processId : 15716, counter : time in resource per second Value=30 SpinLock=0 Lifetime=Type: 1 ProcessId: 15716 StartupTime: 130608376318179644, currentInstance : ad-powershell-defaultdomain(95CC324A) RefCount=1 SpinLock=0 Offset=38216, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 15716, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 15716 StartupTime: 130608376318179644, currentInstance : mb-powershell-defaultdomain(CC014C00) RefCount=1 SpinLock=0 Offset=37888, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 15716, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 15716 StartupTime: 130608376318179644, currentInstance : rpca-powershell-defaultdomain(4598AFAF) RefCount=1 SpinLock=0 Offset=37560, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3596, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3596 StartupTime: 130608368805385179, currentInstance : rpca-w3wp-msexchangemapimailboxapppool(E28F3117) RefCount=1 SpinLock=0 Offset=37232, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3596, counter : time in resource per second Value=86 SpinLock=0 Lifetime=Type: 1 ProcessId: 3596 StartupTime: 130608368805385179, currentInstance : mb-w3wp-msexchangemapimailboxapppool(F9439F58) RefCount=1 SpinLock=0 Offset=36904, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3596, counter : time in resource per second Value=301 SpinLock=0 Lifetime=Type: 1 ProcessId: 3596 StartupTime: 130608368805385179, currentInstance : ad-w3wp-msexchangemapimailboxapppool(35491652) RefCount=1 SpinLock=0 Offset=36576, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 10088, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10088 StartupTime: 130608368435182301, currentInstance : rpca-w3wp-msexchangemapifrontendapppool(2C7F2005) RefCount=1 SpinLock=0 Offset=36248, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 10088, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10088 StartupTime: 130608368435182301, currentInstance : mb-w3wp-msexchangemapifrontendapppool(BE5C2DAA) RefCount=1 SpinLock=0 Offset=35920, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 10088, counter : time in resource per second Value=50 SpinLock=0 Lifetime=Type: 1 ProcessId: 10088 StartupTime: 130608368435182301, currentInstance : ad-w3wp-msexchangemapifrontendapppool(C0FDFAE0) RefCount=1 SpinLock=0 Offset=35592, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 640, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 640 StartupTime: 130608368405334576, currentInstance : rpca-w3wp-msexchangeowacalendarapppool(8F10D1B5) RefCount=1 SpinLock=0 Offset=35264, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 640, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 640 StartupTime: 130608368405334576, currentInstance : mb-w3wp-msexchangeowacalendarapppool(2D8C9EBA) RefCount=1 SpinLock=0 Offset=34936, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 640, counter : time in resource per second Value=75 SpinLock=0 Lifetime=Type: 1 ProcessId: 640 StartupTime: 130608368405334576, currentInstance : ad-w3wp-msexchangeowacalendarapppool(D845E230) RefCount=1 SpinLock=0 Offset=34608, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 12208, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 12208 StartupTime: 130608368146087354, currentInstance : rpca-w3wp-msexchangeautodiscoverapppool(6DABF262) RefCount=1 SpinLock=0 Offset=34280, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 12208, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 12208 StartupTime: 130608368146087354, currentInstance : mb-w3wp-msexchangeautodiscoverapppool(D1C6EF4D) RefCount=1 SpinLock=0 Offset=33952, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 12208, counter : time in resource per second Value=1002 SpinLock=0 Lifetime=Type: 1 ProcessId: 12208 StartupTime: 130608368146087354, currentInstance : ad-w3wp-msexchangeautodiscoverapppool(FD072087) RefCount=1 SpinLock=0 Offset=33624, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 11576, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 11576 StartupTime: 130608368080143532, currentInstance : rpca-w3wp-msexchangeecpapppool(57806648) RefCount=1 SpinLock=0 Offset=33296, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 11576, counter : time in resource per second Value=204 SpinLock=0 Lifetime=Type: 1 ProcessId: 11576 StartupTime: 130608368080143532, currentInstance : mb-w3wp-msexchangeecpapppool(E27E6507) RefCount=1 SpinLock=0 Offset=32968, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 11576, counter : time in resource per second Value=1804 SpinLock=0 Lifetime=Type: 1 ProcessId: 11576 StartupTime: 130608368080143532, currentInstance : ad-w3wp-msexchangeecpapppool(B648688D) RefCount=1 SpinLock=0 Offset=32640, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 10820, counter : time in resource per second Value=64 SpinLock=0 Lifetime=Type: 1 ProcessId: 10820 StartupTime: 130608368364391554, currentInstance : ad-w3wp-msexchangeoabapppool(CC31A917) RefCount=1 SpinLock=0 Offset=32312, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 10820, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10820 StartupTime: 130608368364391554, currentInstance : mb-w3wp-msexchangeoabapppool(58D0A79D) RefCount=1 SpinLock=0 Offset=31984, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 10820, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10820 StartupTime: 130608368364391554, currentInstance : rpca-w3wp-msexchangeoabapppool(8149E8D2) RefCount=1 SpinLock=0 Offset=31656, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7608, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7608 StartupTime: 130608367931073979, currentInstance : rpca-w3wp-msexchangeowaapppool(4AA799E7) RefCount=1 SpinLock=0 Offset=31328, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7608, counter : time in resource per second Value=792 SpinLock=0 Lifetime=Type: 1 ProcessId: 7608 StartupTime: 130608367931073979, currentInstance : mb-w3wp-msexchangeowaapppool(C3953468) RefCount=1 SpinLock=0 Offset=31000, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7608, counter : time in resource per second Value=2537 SpinLock=0 Lifetime=Type: 1 ProcessId: 7608 StartupTime: 130608367931073979, currentInstance : ad-w3wp-msexchangeowaapppool(160BE662) RefCount=1 SpinLock=0 Offset=30672, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5904, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5904 StartupTime: 130608367955918049, currentInstance : rpca-w3wp-msexchangepowershellapppool(3CF18BF) RefCount=1 SpinLock=0 Offset=30344, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5904, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5904 StartupTime: 130608367955918049, currentInstance : mb-w3wp-msexchangepowershellapppool(A686C810) RefCount=1 SpinLock=0 Offset=30016, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5904, counter : time in resource per second Value=2178 SpinLock=0 Lifetime=Type: 1 ProcessId: 5904 StartupTime: 130608367955918049, currentInstance : ad-w3wp-msexchangepowershellapppool(9E48CD5A) RefCount=1 SpinLock=0 Offset=29688, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3832, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3832 StartupTime: 130608365723574632, currentInstance : rpca-noderunner-contentenginenode1(316BF6E3) RefCount=1 SpinLock=0 Offset=29360, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3832, counter : time in resource per second Value=1148 SpinLock=0 Lifetime=Type: 1 ProcessId: 3832 StartupTime: 130608365723574632, currentInstance : mb-noderunner-contentenginenode1(2EE8286C) RefCount=1 SpinLock=0 Offset=29032, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3832, counter : time in resource per second Value=322 SpinLock=0 Lifetime=Type: 1 ProcessId: 3832 StartupTime: 130608365723574632, currentInstance : ad-noderunner-contentenginenode1(61591E6) RefCount=1 SpinLock=0 Offset=28704, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 8232, counter : time in resource per second Value=73 SpinLock=0 Lifetime=Type: 1 ProcessId: 8232 StartupTime: 130608367954980517, currentInstance : ad-w3wp-msexchangepowershellfrontendapppool(FAEFA1B4) RefCount=1 SpinLock=0 Offset=28376, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 8232, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 8232 StartupTime: 130608367954980517, currentInstance : mb-w3wp-msexchangepowershellfrontendapppool(34B9187E) RefCount=1 SpinLock=0 Offset=28048, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 8232, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 8232 StartupTime: 130608367954980517, currentInstance : rpca-w3wp-msexchangepowershellfrontendapppool(E1115251) RefCount=1 SpinLock=0 Offset=27720, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 9828, counter : time in resource per second Value=909 SpinLock=0 Lifetime=Type: 1 ProcessId: 9828 StartupTime: 130608367291344391, currentInstance : ad-w3wp-msexchangerpcproxyapppool(99BB8ED6) RefCount=1 SpinLock=0 Offset=27392, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 9828, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 9828 StartupTime: 130608367291344391, currentInstance : mb-w3wp-msexchangerpcproxyapppool(B190F21C) RefCount=1 SpinLock=0 Offset=27064, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 9828, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 9828 StartupTime: 130608367291344391, currentInstance : rpca-w3wp-msexchangerpcproxyapppool(8B7590B3) RefCount=1 SpinLock=0 Offset=26736, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7908, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7908 StartupTime: 130608366316230865, currentInstance : rpca-edgetransport-edgetransport.exe(911B6EB3) RefCount=1 SpinLock=0 Offset=26408, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7908, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7908 StartupTime: 130608366316230865, currentInstance : mb-edgetransport-edgetransport.exe(A5AF4BBC) RefCount=1 SpinLock=0 Offset=26080, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7908, counter : time in resource per second Value=679 SpinLock=0 Lifetime=Type: 1 ProcessId: 7908 StartupTime: 130608366316230865, currentInstance : ad-edgetransport-edgetransport.exe(E79D4A36) RefCount=1 SpinLock=0 Offset=25752, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7096, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7096 StartupTime: 130608366107949622, currentInstance : rpca-umworkerprocess-umworkerprocess.exe(970CCE33) RefCount=1 SpinLock=0 Offset=25424, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7096, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7096 StartupTime: 130608366107949622, currentInstance : mb-umworkerprocess-umworkerprocess.exe(8A7F8A3C) RefCount=1 SpinLock=0 Offset=25096, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7096, counter : time in resource per second Value=89 SpinLock=0 Lifetime=Type: 1 ProcessId: 7096 StartupTime: 130608366107949622, currentInstance : ad-umworkerprocess-umworkerprocess.exe(95818B6) RefCount=1 SpinLock=0 Offset=24768, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7532, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7532 StartupTime: 130608366287637157, currentInstance : rpca-msexchangetransport-msexchangetransport.exe(24F56C33) RefCount=1 SpinLock=0 Offset=24440, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7532, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7532 StartupTime: 130608366287637157, currentInstance : mb-msexchangetransport-msexchangetransport.exe(92FB3D3C) RefCount=1 SpinLock=0 Offset=24112, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7532, counter : time in resource per second Value=12 SpinLock=0 Lifetime=Type: 1 ProcessId: 7532 StartupTime: 130608366287637157, currentInstance : ad-msexchangetransport-msexchangetransport.exe(2447ECB6) RefCount=1 SpinLock=0 Offset=23784, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 6292, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6292 StartupTime: 130608366134668487, currentInstance : rpca-microsoft.exchange.store.worker-microsoft.exchange.store.worker.exe(ABB009B3) RefCount=1 SpinLock=0 Offset=23456, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 6292, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6292 StartupTime: 130608366134668487, currentInstance : mb-microsoft.exchange.store.worker-microsoft.exchange.store.worker.exe(38BA31BC) RefCount=1 SpinLock=0 Offset=23128, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 6292, counter : time in resource per second Value=704 SpinLock=0 Lifetime=Type: 1 ProcessId: 6292 StartupTime: 130608366134668487, currentInstance : ad-microsoft.exchange.store.worker-microsoft.exchange.store.worker.exe(11106236) RefCount=1 SpinLock=0 Offset=22800, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 6524, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6524 StartupTime: 130608366054199628, currentInstance : rpca-microsoft.exchange.um.callrouter-microsoft.exchange.um.callrouter.exe(E8475353) RefCount=1 SpinLock=0 Offset=22472, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 6524, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6524 StartupTime: 130608366054199628, currentInstance : mb-microsoft.exchange.um.callrouter-microsoft.exchange.um.callrouter.exe(8F65881C) RefCount=1 SpinLock=0 Offset=22144, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 6524, counter : time in resource per second Value=40 SpinLock=0 Lifetime=Type: 1 ProcessId: 6524 StartupTime: 130608366054199628, currentInstance : ad-microsoft.exchange.um.callrouter-microsoft.exchange.um.callrouter.exe(78F52196) RefCount=1 SpinLock=0 Offset=21816, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5656, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5656 StartupTime: 130608365987637119, currentInstance : rpca-umservice-umservice.exe(E39A1133) RefCount=1 SpinLock=0 Offset=21488, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5656, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5656 StartupTime: 130608365987637119, currentInstance : mb-umservice-umservice.exe(FFBB273C) RefCount=1 SpinLock=0 Offset=21160, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5656, counter : time in resource per second Value=45 SpinLock=0 Lifetime=Type: 1 ProcessId: 5656 StartupTime: 130608365987637119, currentInstance : ad-umservice-umservice.exe(9A8AC6B6) RefCount=1 SpinLock=0 Offset=20832, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5948, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5948 StartupTime: 130608365970762140, currentInstance : rpca-msexchangetransportlogsearch-msexchangetransportlogsearch.exe(EF66F2D3) RefCount=1 SpinLock=0 Offset=20504, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5948, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5948 StartupTime: 130608365970762140, currentInstance : mb-msexchangetransportlogsearch-msexchangetransportlogsearch.exe(B020391C) RefCount=1 SpinLock=0 Offset=20176, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5948, counter : time in resource per second Value=28 SpinLock=0 Lifetime=Type: 1 ProcessId: 5948 StartupTime: 130608365970762140, currentInstance : ad-msexchangetransportlogsearch-msexchangetransportlogsearch.exe(20578116) RefCount=1 SpinLock=0 Offset=19848, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5864, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5864 StartupTime: 130608365966074661, currentInstance : rpca-msexchangethrottling-msexchangethrottling.exe(8C1DA893) RefCount=1 SpinLock=0 Offset=19520, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5864, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5864 StartupTime: 130608365966074661, currentInstance : mb-msexchangethrottling-msexchangethrottling.exe(AB2BADDC) RefCount=1 SpinLock=0 Offset=19192, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5864, counter : time in resource per second Value=8 SpinLock=0 Lifetime=Type: 1 ProcessId: 5864 StartupTime: 130608365966074661, currentInstance : ad-msexchangethrottling-msexchangethrottling.exe(8962F4D6) RefCount=1 SpinLock=0 Offset=18864, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5356, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5356 StartupTime: 130608365930918390, currentInstance : rpca-msexchangesubmission-msexchangesubmission.exe(60747EB3) RefCount=1 SpinLock=0 Offset=18536, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5356, counter : time in resource per second Value=400 SpinLock=0 Lifetime=Type: 1 ProcessId: 5356 StartupTime: 130608365930918390, currentInstance : mb-msexchangesubmission-msexchangesubmission.exe(67B4173C) RefCount=1 SpinLock=0 Offset=18208, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5356, counter : time in resource per second Value=390 SpinLock=0 Lifetime=Type: 1 ProcessId: 5356 StartupTime: 130608365930918390, currentInstance : ad-msexchangesubmission-msexchangesubmission.exe(85200236) RefCount=1 SpinLock=0 Offset=17880, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3980, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3980 StartupTime: 130608365902793374, currentInstance : rpca-microsoft.exchange.rpcclientaccess.service-microsoft.exchange.rpcclientaccess.service.exe(E4305E13) RefCount=1 SpinLock=0 Offset=17552, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3980, counter : time in resource per second Value=15105 SpinLock=0 Lifetime=Type: 1 ProcessId: 3980 StartupTime: 130608365902793374, currentInstance : mb-microsoft.exchange.rpcclientaccess.service-microsoft.exchange.rpcclientaccess.service.exe(BBA60BDC) RefCount=1 SpinLock=0 Offset=17224, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3980, counter : time in resource per second Value=1570 SpinLock=0 Lifetime=Type: 1 ProcessId: 3980 StartupTime: 130608365902793374, currentInstance : ad-microsoft.exchange.rpcclientaccess.service-microsoft.exchange.rpcclientaccess.service.exe(B6581E56) RefCount=1 SpinLock=0 Offset=16896, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3676, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3676 StartupTime: 130608365883887116, currentInstance : rpca-msexchangemailboxreplication-msexchangemailboxreplication.exe(276F4DB3) RefCount=1 SpinLock=0 Offset=16568, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3676, counter : time in resource per second Value=55 SpinLock=0 Lifetime=Type: 1 ProcessId: 3676 StartupTime: 130608365883887116, currentInstance : mb-msexchangemailboxreplication-msexchangemailboxreplication.exe(95E41BC) RefCount=1 SpinLock=0 Offset=16240, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3676, counter : time in resource per second Value=1045 SpinLock=0 Lifetime=Type: 1 ProcessId: 3676 StartupTime: 130608365883887116, currentInstance : ad-msexchangemailboxreplication-msexchangemailboxreplication.exe(394712B6) RefCount=1 SpinLock=0 Offset=15912, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5272, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5272 StartupTime: 130608365924980876, currentInstance : rpca-microsoft.exchange.servicehost-microsoft.exchange.servicehost.exe(39C8D53) RefCount=1 SpinLock=0 Offset=15584, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5272, counter : time in resource per second Value=13 SpinLock=0 Lifetime=Type: 1 ProcessId: 5272 StartupTime: 130608365924980876, currentInstance : mb-microsoft.exchange.servicehost-microsoft.exchange.servicehost.exe(E7963A1C) RefCount=1 SpinLock=0 Offset=15256, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5272, counter : time in resource per second Value=1004 SpinLock=0 Lifetime=Type: 1 ProcessId: 5272 StartupTime: 130608365924980876, currentInstance : ad-microsoft.exchange.servicehost-microsoft.exchange.servicehost.exe(10E8B196) RefCount=1 SpinLock=0 Offset=14928, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 4892, counter : time in resource per second Value=2260 SpinLock=0 Lifetime=Type: 1 ProcessId: 4892 StartupTime: 130608365821855891, currentInstance : rpca-msexchangemailboxassistants-msexchangemailboxassistants.exe(DEAC0933) RefCount=1 SpinLock=0 Offset=14600, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 4892, counter : time in resource per second Value=19900 SpinLock=0 Lifetime=Type: 1 ProcessId: 4892 StartupTime: 130608365821855891, currentInstance : mb-msexchangemailboxassistants-msexchangemailboxassistants.exe(A754293C) RefCount=1 SpinLock=0 Offset=14272, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 4892, counter : time in resource per second Value=3491 SpinLock=0 Lifetime=Type: 1 ProcessId: 4892 StartupTime: 130608365821855891, currentInstance : ad-msexchangemailboxassistants-msexchangemailboxassistants.exe(EE890EB6) RefCount=1 SpinLock=0 Offset=13944, categoryName...