Up until yesterday my emails server was working fine Exchange 2013.

I then stopped getting emails from any domain that is not accepted.

Now accepted domains means that the email must be addressed to an accepted domain, but I can only get mail from a accepted domain. Why?

I can send am email from outlook.com using an email address that belongs to an accepted domain, but I cant send one from outlook.com that does not have an address that is in the accepted domains.

I don't think I have changed anything so I am confused. thanks

---

Alan Mosley - ThatsIT Solutions

Hello.

I need powershell command which gives me mailboxes which is full (space).

Thanks.

Got three mailbox servers in a DAG. Currently all the actives are running on two of them with one server having just passive copies. We've also been migrating from 2007.

This particular MBX server has been at 100% CPU for days. A lot of it seemed due to a large backlog in replayqueuelength due to migrations. Also, a lot of the DBs seemed to be content index seeding too. This finished but its still at 100% mainly caused by noderunner.exe.

At the moment, nothing is content index seeding and all the replayqueues are zero. BUT, the replayqueus are jumping back up. Its as if the server can't cope with being passive on so many DBs.

Is this possible? I assumed it would be quieter with no active DBs? Trouble is I can't switch any of these DBs back to active on this server because it will have a detrimental affect on users with CPU being at 100%.

Any suggestions? BTW - At CU11.

I'm attempting to delete a mailbox database "DB-Mailbox1" in Exch2013, but first I need to clear 2 pending MailboxImportRequests. I used the following command: 

Get-MailboxImportRequest | ?{ $_.RequestQueue -eq "DB-Mailbox1" } | Remove-MailboxImportRequest

However this fails with:

” Cannot process argument transformation on parameter 'Identity'. Cannot convert value "00000000-0000-0000-0000-000000000000" to type "Microsoft.Exchange.MailboxReplicationService.MailboxImportRequestIdParameter". Error: "This IdParameter cannot find an object of the specified type.
                                                                                    
On closer inspection, the 2 requests have no value (NULL?) in the Identity field; likewise for the Name value. See the image below. [Using the RequestGuid in lieu of Identity also fails]

Any thoughts? I've seen one example of this before but there was no resolution.

hi,

the senario is that  i have 2 mail servers hosted  out of my company so  is it possible to make 2 relay from my exchange server  to let internal users that have @x.com  relay to  external mail server @x.com and internal users @y.com  relay to external mail server @y.com  and thanks  .

Hello,

Every other day at 6 am (GMT +1) our exchange server generates an error in the global monitoring event log. I have tried overriding the probe using both add-serveroverride and add-globaloverride to disable this probe/monitor, but it keeps returning.

I have checked maxsize on all connectors and they all match.

Regards,

Event Detail:

Log Name:      Microsoft-Exchange-ManagedAvailability/Monitoring
Source:        Microsoft-Exchange-ManagedAvailability
Date:          4/03/2014 6:00:28
Event ID:      4
Task Category: Monitoring
Level:         Error
Keywords:     
User:          SYSTEM
Computer:      EXCSrvr.org.local
Description:
The Ehlo options for the client proxy target x.x.x.x did not match while setting up proxy for user  on inbound session 08D0EC1CD7785679. The critical non-matching options were <maxSize>. The non-critical non-matching options were <NONE>. Client proxying will continue.
Probe Exception: ''
Failure Context: ''
Execution Context: ''
Probe Result Name: 'Transport/SmtpProxyEhloOptionsDoNotMatchContinueProxying'
Probe Result Type: 'Failed'
Monitor Total Value: '0'
Monitor Total Sample Count: '1'
Monitor Total Failed Count: '1'
Monitor Poisoned Count: '0'
Monitor First Alert Observed Time: '8/02/2014 5:00:29'

Event Xml:
<Event>
  <System>
    <Provider Name="Microsoft-Exchange-ManagedAvailability" Guid="{C424A887-A89F-455F-8319-960917152221}" />
    <EventID>4</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>2</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-04T05:00:28.605087400Z" />
    <EventRecordID>9926</EventRecordID>
    <Correlation ActivityID="{F0F8C47D-9BFA-4B4B-93B6-A6B067D35315}" />
    <Execution ProcessID="17916" ThreadID="14576" />
    <Channel>Microsoft-Exchange-ManagedAvailability/Monitoring</Channel>
    <Computer>EXCSrvr.org.local</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <UserData>
    <EventXML>
      <HealthSet>HubTransport</HealthSet>
      <Subject>Critical EHLO options do not match - SMTP client proxying will continue.</Subject>
      <Message>The Ehlo options for the client proxy target x.x.x.x did not match while setting up proxy for user  on inbound session 08D0EC1CD7785679. The critical non-matching options were &lt;maxSize&gt;. The non-critical non-matching options were &lt;NONE&gt;. Client proxying will continue.
Probe Exception: ''
Failure Context: ''
Execution Context: ''
Probe Result Name: 'Transport/SmtpProxyEhloOptionsDoNotMatchContinueProxying'
Probe Result Type: 'Failed'
Monitor Total Value: '0'
Monitor Total Sample Count: '1'
Monitor Total Failed Count: '1'
Monitor Poisoned Count: '0'
Monitor First Alert Observed Time: '8/02/2014 5:00:29'
</Message>
      <Monitor>SmtpProxyEhloOptionsDoNotMatchContinueProxyingMonitor/HubTransport</Monitor>
    </EventXML>
  </UserData>
</Event>

Hi all,

I've been thru issues trying to upgrade an Exchange 2010 standalone server into SP3 in preparation to Office 365 migration.

The error I'm having is when the wizard tries to remove Exchange files:

The wizard starts asking for Exchangeserver.msi file which is sitting in the extracted installation files but it refuses to use it.

I have downloaded and extracted it twice and got the same error.

Looking at the ExchangeSetup.msilog file I can see that the missing file is c:\windows\installer\69427d3.msi

I have tried to follow KB2784788 but I'm unsure on which file should I copy & rename in my case.  Would it be exchangeserver.msi into c:\windows\installer\69427d3.msi

Below are the Exchangesetup.msilogs:

MSI (s) (C8:20) [10:11:41:940]: Machine policy value 'DisableUserInstalls' is 0
MSI (s) (C8:20) [10:11:41:956]: Warning: Local cached package 'C:\Windows\Installer\69427d3.msi' is missing.
MSI (s) (C8:20) [10:11:41:971]: User policy value 'SearchOrder' is 'nmu'
MSI (s) (C8:20) [10:11:41:971]: User policy value 'DisableMedia' is 0
MSI (s) (C8:20) [10:11:41:971]: Machine policy value 'AllowLockdownMedia' is 0
MSI (s) (C8:20) [10:11:41:971]: SOURCEMGMT: Media enabled only if package is safe.
MSI (s) (C8:20) [10:11:41:971]: SOURCEMGMT: Looking for sourcelist for product {4934D1EA-BE46-48B1-8847-F1AF20E892C1}
MSI (s) (C8:20) [10:11:41:971]: SOURCEMGMT: Adding {4934D1EA-BE46-48B1-8847-F1AF20E892C1}; to potential sourcelist list (pcode;disk;relpath).
MSI (s) (C8:20) [10:11:41:971]: SOURCEMGMT: Now checking product {4934D1EA-BE46-48B1-8847-F1AF20E892C1}
MSI (s) (C8:20) [10:11:41:971]: SOURCEMGMT: Media is enabled for product.
MSI (s) (C8:20) [10:11:41:971]: SOURCEMGMT: Attempting to use LastUsedSource from source list.
MSI (s) (C8:20) [10:11:41:971]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer 3: 2 
MSI (s) (C8:20) [10:11:43:033]: Note: 1: 2203 2:  3: -2147287037 
MSI (s) (C8:20) [10:11:43:033]: SOURCEMGMT: Source is invalid due to missing/inaccessible package.
MSI (s) (C8:20) [10:11:43:033]: Note: 1: 1706 2: -2147483647 3: EXCHANGESERVER.MSI 
MSI (s) (C8:20) [10:11:43:033]: SOURCEMGMT: Processing net source list.
MSI (s) (C8:20) [10:11:43:033]: Note: 1: 1402 2: UNKNOWN\Net 3: 2 
MSI (s) (C8:20) [10:11:43:033]: Note: 1: 1706 2: -2147483647 3: EXCHANGESERVER.MSI 
MSI (s) (C8:20) [10:11:43:033]: SOURCEMGMT: Processing media source list.
MSI (s) (C8:20) [10:11:43:033]: Note: 1: 1706 2: -2147483647 3: EXCHANGESERVER.MSI 
MSI (s) (C8:20) [10:11:43:033]: SOURCEMGMT: Processing URL source list.
MSI (s) (C8:20) [10:11:43:033]: Note: 1: 1402 2: UNKNOWN\URL 3: 2 
MSI (s) (C8:20) [10:11:43:033]: Note: 1: 1706 2: -2147483647 3: EXCHANGESERVER.MSI 
MSI (s) (C8:20) [10:11:43:033]: Note: 1: 1706 2:  3: EXCHANGESERVER.MSI 
MSI (c) (F8:C0) [10:11:43:033]: User policy value 'SearchOrder' is 'nmu'
MSI (c) (F8:C0) [10:11:43:033]: User policy value 'DisableMedia' is 0
MSI (c) (F8:C0) [10:11:43:033]: Machine policy value 'AllowLockdownMedia' is 0
MSI (c) (F8:C0) [10:11:43:033]: SOURCEMGMT: Media enabled only if package is safe.
MSI (c) (F8:C0) [10:11:43:033]: SOURCEMGMT: Prompting user for a valid source.
MSI (c) (F8:C0) [10:11:43:033]: Machine policy value 'DisableBrowse' is 0
MSI (c) (F8:C0) [10:11:43:033]: Machine policy value 'AllowLockdownBrowse' is 0
MSI (c) (F8:C0) [10:11:43:033]: SOURCEMGMT: Browsing is enabled.
MSI (c) (F8:C0) [10:11:43:064]: Font created.  Charset: Req=0, Ret=0, Font: Req=MS Shell Dlg, Ret=MS Shell Dlg

MSI (c) (F8:C0) [10:11:43:064]: Machine policy value 'DisableUserInstalls' is 0
MSI (c) (F8:C0) [10:11:43:064]: SOURCEMGMT: Now checking product {4934D1EA-BE46-48B1-8847-F1AF20E892C1}
MSI (c) (F8:C0) [10:11:43:064]: SOURCEMGMT: Media is enabled for product.
MSI (c) (F8:C0) [10:11:43:064]: SOURCEMGMT: Attempting to use LastUsedSource from source list.
MSI (c) (F8:C0) [10:11:43:064]: SOURCEMGMT: Trying media source E2K10SP1;1.
MSI (c) (F8:C0) [10:11:43:064]: Note: 1: 1706 2:  3: EXCHANGESERVER.MSI 
MSI (c) (F8:C0) [10:11:43:064]: SOURCEMGMT: Processing net source list.
MSI (c) (F8:C0) [10:11:43:064]: Note: 1: 1402 2: UNKNOWN\Net 3: 2 
MSI (c) (F8:C0) [10:11:43:064]: Note: 1: 1706 2: -2147483647 3: EXCHANGESERVER.MSI 
MSI (c) (F8:C0) [10:11:43:064]: SOURCEMGMT: Processing media source list.
MSI (c) (F8:C0) [10:11:43:064]: Note: 1: 1706 2: -2147483647 3: EXCHANGESERVER.MSI 
MSI (c) (F8:C0) [10:11:43:064]: SOURCEMGMT: Processing URL source list.
MSI (c) (F8:C0) [10:11:43:064]: Note: 1: 1402 2: UNKNOWN\URL 3: 2 
MSI (c) (F8:C0) [10:11:43:064]: Note: 1: 1706 2: -2147483647 3: EXCHANGESERVER.MSI 
MSI (c) (F8:C0) [10:11:43:064]: Note: 1: 1706 2:  3: EXCHANGESERVER.MSI 
MSI (c) (F8:34) [10:13:15:368]: SOURCEMGMT: Trying source C:\sp3\exchangeserver.msi.
MSI (c) (F8:34) [10:13:15:368]: Note: 1: 140MSI (s) (C8:D0) [10:14:21:499]: I/O on thread 4044 could not be cancelled. Error: 1168
MSI (s) (C8:D0) [10:14:21:499]: I/O on thread 4064 could not be cancelled. Error: 1168
MSI (s) (C8:D0) [10:14:21:499]: I/O on thread 3472 could not be cancelled. Error: 1168
MSI (s) (C8:D0) [10:14:21:499]: I/O on thread 4080 could not be cancelled. Error: 1168
MSI (s) (C8:D0) [10:14:21:499]: I/O on thread 3104 could not be cancelled. Error: 1168
MSI (s) (C8:20) [10:14:21:499]: SOURCEMGMT: Failed to resolve source
MSI (s) (C8:20) [10:14:21:499]: MainEngineThread is returning 1612
2 2: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer 3: 2 
MSI (c) (F8:34) [10:13:15:602]: SOURCEMGMT: Source is invalid due to client source out of sync (product code is the same).
MSI (c) (F8:34) [10:13:15:602]: Note: 1: 1731 2: -2147483645 3: EXCHANGESERVER.MSI 
MSI (c) (F8:34) [10:13:15:602]: Font created.  Charset: Req=0, Ret=0, Font: Req=MS Shell Dlg, Ret=MS Shell Dlg

MSI (s) (C8:D0) [10:14:21:530]: User policy value 'DisableRollback' is 0
MSI (s) (C8:D0) [10:14:21:530]: Machine policy value 'DisableRollback' is 0
MSI (s) (C8:D0) [10:14:21:530]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (C8:D0) [10:14:21:546]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 
MSI (s) (C8:D0) [10:14:21:546]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2 
MSI (s) (C8:D0) [10:14:21:546]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\InProgress 3: 2 
MSI (s) (C8:D0) [10:14:21:546]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\InProgress 3: 2 
MSI (s) (C8:D0) [10:14:21:546]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1
MSI (s) (C8:D0) [10:14:21:546]: Restoring environment variables
MSI (c) (F8:C4) [10:14:21:546]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1
MSI (c) (F8:C4) [10:14:21:546]: MainEngineThread is returning 1612

Thanks for your help.

How do I get a list of mailboxes that have been created, deleted or had their prohibit send/received altered in the last 30 days (or better still, between two dates)?

I'm sure it should be able to be done with PowerShell, but I can't get my head around the way I'd need to query it.

Hi- I know this is more of a DNS topic but since it's directly related to mail flow for my Exchange deployment I decided to bring it up here:

I have a CAS/MBX server with public IP xxx.xxx.xx.001

I have an Edge server with public IP xxx.xxx.xx.002

I have two domain names, mydomain.com and mynewdomain.com

My top priority MX record for mydomain.com (mail.mydomain.com) points to xxx.xxx.xx.002, the Edge server

My top priority MX record for mynewdomain.com (mail.mynewdomain.com) points to xxx.xxx.xx.001, the CAS/MBX server.

When I send an email to myusername@mydomain.com the message gets routed to the Edge server

When I send an email to myusername@mynewdomain.com the message ALSO gets routed to the Edge server

WHY?

NOTE: I've double checked the routing on my firewall and it's definitely set up to NAT the public IPs to the correct servers.

Thanx

---

You should never, never doubt what nobody is sure about. -Willy Wonka

I seem to be getting date format errors when I run queries in powershell. Below is an example, but it seems to be any query where I add dates, its like PS wants format DD/MM/YYYY and AD wants MM/DD/YYYY

Get-MailboxDatabase | Sort Name | Get-MailboxStatistics | ? { $_.DisconnectReason -eq "Disabled
" -and $_.DisconnectDate -gt ((Get-Date).AddDays(-30).ToString()) }
? : Could not compare "02/29/2016 16:40:47" to "20/02/2016 12:31:08". Error: "Cannot convert value "20/02/2016
12:31:08" to type "System.DateTime". Error: "String was not recognized as a valid DateTime.""
At line:1 char:59
+ Get-MailboxDatabase | Sort Name | Get-MailboxStatistics | ? { $_.DisconnectReaso ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : InvalidOperation: (:) [Where-Object], RuntimeException
    + FullyQualifiedErrorId : ComparisonFailure,Microsoft.PowerShell.Commands.WhereObjectCommand

I have a mailbox that has the field "Last logged on by" with a different username than the real user. 

I have checked, that other user has no access rights to that mailbox, and never had. Also, i know he saw the content of this mailbox because he provided information that could only be containt from this mailbox. 

There are no sharing rights on the mailbox, a folder and / or the agenda. 

What would it take, or is needed, for him to gain access rights to this other mailbox anyway? e.g. certain groupmemberships or something else?

Help would be most appreciated since this is a violation against privacy, and thus a security threat to the integrety of the organisation.

Thanks!

Hi all,

I am running:

Get-TransportServer | Get-Messagetrackinglog -ResultSize Unlimited -Recipients: me@email.com -Start "02/01/2016" -End "03/03/2016" | Select-Object eventid,sender,timestamp,@{Name="Recipients";Expression={$_.recipients}},@{Name="RecipientStatus";Expression={$_.recipientstatus}},messagesubject | Export-CSV C:\temp\me.csv

when I look at the output file I can't see any emails I've sent... (I have sent some!)

curiously yours...

SIAH



  Hi , 

After updating Exchange 2013 CU 5 to CU11 could not open queue viewer in Exchange toolbox,getting following error. In my environment have 2 mailbox and CAS server. In that 1 recently updated to CU11. 

       Please help me out to resolve this issue.

 " deserialization fails due to one serialization exception  "

After upgrading to CU6 for Exchange 2013, the Application event log is flooded with MSExhange Common error 106: Performance counter updating error. Counter name is Time in Resource per second, category name is MSExchange Activity Context Resources. Optional code: 2. Exception: The exception thrown is : System.InvalidOperationException: Instance 'ad-powershell-defaultdomain' already exists with a lifetime of Process.  It cannot be recreated or reused until it has been removed or until the process using it has exited.
   at System.Diagnostics.SharedPerformanceCounter.FindInstance(Int32 instanceNameHashCode, String instanceName, CategoryEntry* categoryPointer, InstanceEntry** returnInstancePointerReference, Boolean activateUnusedInstances, PerformanceCounterInstanceLifetime lifetime, Boolean& foundFreeInstance)
   at System.Diagnostics.SharedPerformanceCounter.GetCounter(String counterName, String instanceName, Boolean enableReuse, PerformanceCounterInstanceLifetime lifetime)
   at System.Diagnostics.SharedPerformanceCounter..ctor(String catName, String counterName, String instanceName, PerformanceCounterInstanceLifetime lifetime)
   at System.Diagnostics.PerformanceCounter.InitializeImpl()
   at System.Diagnostics.PerformanceCounter.get_RawValue()
   at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.get_RawValue()
Last worker process info : System.ArgumentException: Process with an Id of 4776 is not running.
   at System.Diagnostics.Process.GetProcessById(Int32 processId)
   at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.GetLastWorkerProcessInfo()
Processes running while Performance counter failed to update:
14256 winlogon
15748 powershell
6524 Microsoft.Exchange.UM.CallRouter
5904 w3wp
584 lsass
780 LogonUI
4324 MSExchangeFrontendTransport
6292 Microsoft.Exchange.Store.Worker
2744 WmiPrvSE
576 services
3136 MonitoringHost
12568 svchost
1360 hostcontrollerservice
8648 WmiPrvSE
1752 SMSvcHost
1160 spoolsv
1356 sftracing
9528 TiWorker
10444 explorer
2732 w3wp
14908 WmiPrvSE
3124 Microsoft.Exchange.Store.Worker
4696 Microsoft.Exchange.Store.Service
4892 MSExchangeMailboxAssistants
12208 w3wp
15740 powershell
2128 WMSvc
748 rundll32
8232 w3wp
8400 svchost
3700 MonitoringHost
15716 powershell
5864 MSExchangeThrottling
2908 w3wp
4088 Microsoft.Exchange.EdgeSyncSvc
5660 scanningprocess
2292 wuauclt
5656 umservice
6044 scanningprocess
4076 noderunner
1908 MSExchangeHMHost
2892 Microsoft.Exchange.AntispamUpdateSvc
3876 noderunner
3676 MSExchangeMailboxReplication
15732 powershell
2096 svchost
7096 UMWorkerProcess
516 winlogon
908 svchost
1296 HealthService
1492 svchost
2824 w3wp
12324 dwm
1560 ForefrontActiveDirectoryConnector
304 smss
10820 w3wp
8464 svchost
888 Microsoft.Exchange.ContentFilter.Wrapper
5024 msexchangerepl
488 wininit
8564 taskhostex
5272 Microsoft.Exchange.ServiceHost
3832 noderunner
10088 w3wp
480 csrss
7920 conhost
872 svchost
5992 scanningprocess
4808 msdtc
8352 dllhost
860 TrustedInstaller
4008 rundll32
4400 conhost
656 svchost
9828 w3wp
1832 noderunner
4392 MSExchangeHMWorker
1828 mqsvc
700 svchost
1628 Microsoft.Exchange.Diagnostics.Service
3596 w3wp
2220 Microsoft.Exchange.Directory.TopologyService
1820 MSExchangeDelivery
7532 MSExchangeTransport
13372 svchost
832 svchost
9696 conhost
8316 svchost
1580 dllhost
3980 Microsoft.Exchange.RpcClientAccess.Service
8788 VSSVC
5948 MSExchangeTransportLogSearch
2992 MSExchangeDagMgmt
10632 csrss
1216 fms
3776 rundll32
5356 MSExchangeSubmission
7908 EdgeTransport
11576 w3wp
1600 inetinfo
1008 svchost
416 csrss
808 svchost
7608 w3wp
1588 updateservice
4148 Microsoft.Exchange.Search.Service
640 w3wp
796 dwm
2568 SMSvcHost
1188 svchost
4 System
3484 rdpclip
0 Idle
Performance Counters Layout information: A process is holding onto a transport performance counter. processId : 15716, counter : time in resource per second Value=30 SpinLock=0 Lifetime=Type: 1 ProcessId: 15716 StartupTime: 130608376318179644, currentInstance : ad-powershell-defaultdomain(95CC324A) RefCount=1 SpinLock=0 Offset=38216, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 15716, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 15716 StartupTime: 130608376318179644, currentInstance : mb-powershell-defaultdomain(CC014C00) RefCount=1 SpinLock=0 Offset=37888, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 15716, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 15716 StartupTime: 130608376318179644, currentInstance : rpca-powershell-defaultdomain(4598AFAF) RefCount=1 SpinLock=0 Offset=37560, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3596, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3596 StartupTime: 130608368805385179, currentInstance : rpca-w3wp-msexchangemapimailboxapppool(E28F3117) RefCount=1 SpinLock=0 Offset=37232, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3596, counter : time in resource per second Value=86 SpinLock=0 Lifetime=Type: 1 ProcessId: 3596 StartupTime: 130608368805385179, currentInstance : mb-w3wp-msexchangemapimailboxapppool(F9439F58) RefCount=1 SpinLock=0 Offset=36904, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3596, counter : time in resource per second Value=301 SpinLock=0 Lifetime=Type: 1 ProcessId: 3596 StartupTime: 130608368805385179, currentInstance : ad-w3wp-msexchangemapimailboxapppool(35491652) RefCount=1 SpinLock=0 Offset=36576, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 10088, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10088 StartupTime: 130608368435182301, currentInstance : rpca-w3wp-msexchangemapifrontendapppool(2C7F2005) RefCount=1 SpinLock=0 Offset=36248, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 10088, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10088 StartupTime: 130608368435182301, currentInstance : mb-w3wp-msexchangemapifrontendapppool(BE5C2DAA) RefCount=1 SpinLock=0 Offset=35920, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 10088, counter : time in resource per second Value=50 SpinLock=0 Lifetime=Type: 1 ProcessId: 10088 StartupTime: 130608368435182301, currentInstance : ad-w3wp-msexchangemapifrontendapppool(C0FDFAE0) RefCount=1 SpinLock=0 Offset=35592, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 640, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 640 StartupTime: 130608368405334576, currentInstance : rpca-w3wp-msexchangeowacalendarapppool(8F10D1B5) RefCount=1 SpinLock=0 Offset=35264, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 640, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 640 StartupTime: 130608368405334576, currentInstance : mb-w3wp-msexchangeowacalendarapppool(2D8C9EBA) RefCount=1 SpinLock=0 Offset=34936, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 640, counter : time in resource per second Value=75 SpinLock=0 Lifetime=Type: 1 ProcessId: 640 StartupTime: 130608368405334576, currentInstance : ad-w3wp-msexchangeowacalendarapppool(D845E230) RefCount=1 SpinLock=0 Offset=34608, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 12208, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 12208 StartupTime: 130608368146087354, currentInstance : rpca-w3wp-msexchangeautodiscoverapppool(6DABF262) RefCount=1 SpinLock=0 Offset=34280, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 12208, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 12208 StartupTime: 130608368146087354, currentInstance : mb-w3wp-msexchangeautodiscoverapppool(D1C6EF4D) RefCount=1 SpinLock=0 Offset=33952, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 12208, counter : time in resource per second Value=1002 SpinLock=0 Lifetime=Type: 1 ProcessId: 12208 StartupTime: 130608368146087354, currentInstance : ad-w3wp-msexchangeautodiscoverapppool(FD072087) RefCount=1 SpinLock=0 Offset=33624, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 11576, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 11576 StartupTime: 130608368080143532, currentInstance : rpca-w3wp-msexchangeecpapppool(57806648) RefCount=1 SpinLock=0 Offset=33296, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 11576, counter : time in resource per second Value=204 SpinLock=0 Lifetime=Type: 1 ProcessId: 11576 StartupTime: 130608368080143532, currentInstance : mb-w3wp-msexchangeecpapppool(E27E6507) RefCount=1 SpinLock=0 Offset=32968, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 11576, counter : time in resource per second Value=1804 SpinLock=0 Lifetime=Type: 1 ProcessId: 11576 StartupTime: 130608368080143532, currentInstance : ad-w3wp-msexchangeecpapppool(B648688D) RefCount=1 SpinLock=0 Offset=32640, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 10820, counter : time in resource per second Value=64 SpinLock=0 Lifetime=Type: 1 ProcessId: 10820 StartupTime: 130608368364391554, currentInstance : ad-w3wp-msexchangeoabapppool(CC31A917) RefCount=1 SpinLock=0 Offset=32312, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 10820, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10820 StartupTime: 130608368364391554, currentInstance : mb-w3wp-msexchangeoabapppool(58D0A79D) RefCount=1 SpinLock=0 Offset=31984, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 10820, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 10820 StartupTime: 130608368364391554, currentInstance : rpca-w3wp-msexchangeoabapppool(8149E8D2) RefCount=1 SpinLock=0 Offset=31656, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7608, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7608 StartupTime: 130608367931073979, currentInstance : rpca-w3wp-msexchangeowaapppool(4AA799E7) RefCount=1 SpinLock=0 Offset=31328, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7608, counter : time in resource per second Value=792 SpinLock=0 Lifetime=Type: 1 ProcessId: 7608 StartupTime: 130608367931073979, currentInstance : mb-w3wp-msexchangeowaapppool(C3953468) RefCount=1 SpinLock=0 Offset=31000, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7608, counter : time in resource per second Value=2537 SpinLock=0 Lifetime=Type: 1 ProcessId: 7608 StartupTime: 130608367931073979, currentInstance : ad-w3wp-msexchangeowaapppool(160BE662) RefCount=1 SpinLock=0 Offset=30672, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5904, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5904 StartupTime: 130608367955918049, currentInstance : rpca-w3wp-msexchangepowershellapppool(3CF18BF) RefCount=1 SpinLock=0 Offset=30344, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5904, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5904 StartupTime: 130608367955918049, currentInstance : mb-w3wp-msexchangepowershellapppool(A686C810) RefCount=1 SpinLock=0 Offset=30016, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5904, counter : time in resource per second Value=2178 SpinLock=0 Lifetime=Type: 1 ProcessId: 5904 StartupTime: 130608367955918049, currentInstance : ad-w3wp-msexchangepowershellapppool(9E48CD5A) RefCount=1 SpinLock=0 Offset=29688, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3832, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3832 StartupTime: 130608365723574632, currentInstance : rpca-noderunner-contentenginenode1(316BF6E3) RefCount=1 SpinLock=0 Offset=29360, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3832, counter : time in resource per second Value=1148 SpinLock=0 Lifetime=Type: 1 ProcessId: 3832 StartupTime: 130608365723574632, currentInstance : mb-noderunner-contentenginenode1(2EE8286C) RefCount=1 SpinLock=0 Offset=29032, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3832, counter : time in resource per second Value=322 SpinLock=0 Lifetime=Type: 1 ProcessId: 3832 StartupTime: 130608365723574632, currentInstance : ad-noderunner-contentenginenode1(61591E6) RefCount=1 SpinLock=0 Offset=28704, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 8232, counter : time in resource per second Value=73 SpinLock=0 Lifetime=Type: 1 ProcessId: 8232 StartupTime: 130608367954980517, currentInstance : ad-w3wp-msexchangepowershellfrontendapppool(FAEFA1B4) RefCount=1 SpinLock=0 Offset=28376, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 8232, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 8232 StartupTime: 130608367954980517, currentInstance : mb-w3wp-msexchangepowershellfrontendapppool(34B9187E) RefCount=1 SpinLock=0 Offset=28048, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 8232, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 8232 StartupTime: 130608367954980517, currentInstance : rpca-w3wp-msexchangepowershellfrontendapppool(E1115251) RefCount=1 SpinLock=0 Offset=27720, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 9828, counter : time in resource per second Value=909 SpinLock=0 Lifetime=Type: 1 ProcessId: 9828 StartupTime: 130608367291344391, currentInstance : ad-w3wp-msexchangerpcproxyapppool(99BB8ED6) RefCount=1 SpinLock=0 Offset=27392, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 9828, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 9828 StartupTime: 130608367291344391, currentInstance : mb-w3wp-msexchangerpcproxyapppool(B190F21C) RefCount=1 SpinLock=0 Offset=27064, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 9828, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 9828 StartupTime: 130608367291344391, currentInstance : rpca-w3wp-msexchangerpcproxyapppool(8B7590B3) RefCount=1 SpinLock=0 Offset=26736, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7908, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7908 StartupTime: 130608366316230865, currentInstance : rpca-edgetransport-edgetransport.exe(911B6EB3) RefCount=1 SpinLock=0 Offset=26408, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7908, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7908 StartupTime: 130608366316230865, currentInstance : mb-edgetransport-edgetransport.exe(A5AF4BBC) RefCount=1 SpinLock=0 Offset=26080, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7908, counter : time in resource per second Value=679 SpinLock=0 Lifetime=Type: 1 ProcessId: 7908 StartupTime: 130608366316230865, currentInstance : ad-edgetransport-edgetransport.exe(E79D4A36) RefCount=1 SpinLock=0 Offset=25752, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7096, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7096 StartupTime: 130608366107949622, currentInstance : rpca-umworkerprocess-umworkerprocess.exe(970CCE33) RefCount=1 SpinLock=0 Offset=25424, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7096, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7096 StartupTime: 130608366107949622, currentInstance : mb-umworkerprocess-umworkerprocess.exe(8A7F8A3C) RefCount=1 SpinLock=0 Offset=25096, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7096, counter : time in resource per second Value=89 SpinLock=0 Lifetime=Type: 1 ProcessId: 7096 StartupTime: 130608366107949622, currentInstance : ad-umworkerprocess-umworkerprocess.exe(95818B6) RefCount=1 SpinLock=0 Offset=24768, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7532, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7532 StartupTime: 130608366287637157, currentInstance : rpca-msexchangetransport-msexchangetransport.exe(24F56C33) RefCount=1 SpinLock=0 Offset=24440, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7532, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 7532 StartupTime: 130608366287637157, currentInstance : mb-msexchangetransport-msexchangetransport.exe(92FB3D3C) RefCount=1 SpinLock=0 Offset=24112, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 7532, counter : time in resource per second Value=12 SpinLock=0 Lifetime=Type: 1 ProcessId: 7532 StartupTime: 130608366287637157, currentInstance : ad-msexchangetransport-msexchangetransport.exe(2447ECB6) RefCount=1 SpinLock=0 Offset=23784, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 6292, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6292 StartupTime: 130608366134668487, currentInstance : rpca-microsoft.exchange.store.worker-microsoft.exchange.store.worker.exe(ABB009B3) RefCount=1 SpinLock=0 Offset=23456, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 6292, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6292 StartupTime: 130608366134668487, currentInstance : mb-microsoft.exchange.store.worker-microsoft.exchange.store.worker.exe(38BA31BC) RefCount=1 SpinLock=0 Offset=23128, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 6292, counter : time in resource per second Value=704 SpinLock=0 Lifetime=Type: 1 ProcessId: 6292 StartupTime: 130608366134668487, currentInstance : ad-microsoft.exchange.store.worker-microsoft.exchange.store.worker.exe(11106236) RefCount=1 SpinLock=0 Offset=22800, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 6524, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6524 StartupTime: 130608366054199628, currentInstance : rpca-microsoft.exchange.um.callrouter-microsoft.exchange.um.callrouter.exe(E8475353) RefCount=1 SpinLock=0 Offset=22472, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 6524, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 6524 StartupTime: 130608366054199628, currentInstance : mb-microsoft.exchange.um.callrouter-microsoft.exchange.um.callrouter.exe(8F65881C) RefCount=1 SpinLock=0 Offset=22144, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 6524, counter : time in resource per second Value=40 SpinLock=0 Lifetime=Type: 1 ProcessId: 6524 StartupTime: 130608366054199628, currentInstance : ad-microsoft.exchange.um.callrouter-microsoft.exchange.um.callrouter.exe(78F52196) RefCount=1 SpinLock=0 Offset=21816, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5656, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5656 StartupTime: 130608365987637119, currentInstance : rpca-umservice-umservice.exe(E39A1133) RefCount=1 SpinLock=0 Offset=21488, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5656, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5656 StartupTime: 130608365987637119, currentInstance : mb-umservice-umservice.exe(FFBB273C) RefCount=1 SpinLock=0 Offset=21160, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5656, counter : time in resource per second Value=45 SpinLock=0 Lifetime=Type: 1 ProcessId: 5656 StartupTime: 130608365987637119, currentInstance : ad-umservice-umservice.exe(9A8AC6B6) RefCount=1 SpinLock=0 Offset=20832, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5948, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5948 StartupTime: 130608365970762140, currentInstance : rpca-msexchangetransportlogsearch-msexchangetransportlogsearch.exe(EF66F2D3) RefCount=1 SpinLock=0 Offset=20504, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5948, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5948 StartupTime: 130608365970762140, currentInstance : mb-msexchangetransportlogsearch-msexchangetransportlogsearch.exe(B020391C) RefCount=1 SpinLock=0 Offset=20176, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5948, counter : time in resource per second Value=28 SpinLock=0 Lifetime=Type: 1 ProcessId: 5948 StartupTime: 130608365970762140, currentInstance : ad-msexchangetransportlogsearch-msexchangetransportlogsearch.exe(20578116) RefCount=1 SpinLock=0 Offset=19848, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5864, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5864 StartupTime: 130608365966074661, currentInstance : rpca-msexchangethrottling-msexchangethrottling.exe(8C1DA893) RefCount=1 SpinLock=0 Offset=19520, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5864, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5864 StartupTime: 130608365966074661, currentInstance : mb-msexchangethrottling-msexchangethrottling.exe(AB2BADDC) RefCount=1 SpinLock=0 Offset=19192, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5864, counter : time in resource per second Value=8 SpinLock=0 Lifetime=Type: 1 ProcessId: 5864 StartupTime: 130608365966074661, currentInstance : ad-msexchangethrottling-msexchangethrottling.exe(8962F4D6) RefCount=1 SpinLock=0 Offset=18864, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5356, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5356 StartupTime: 130608365930918390, currentInstance : rpca-msexchangesubmission-msexchangesubmission.exe(60747EB3) RefCount=1 SpinLock=0 Offset=18536, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5356, counter : time in resource per second Value=400 SpinLock=0 Lifetime=Type: 1 ProcessId: 5356 StartupTime: 130608365930918390, currentInstance : mb-msexchangesubmission-msexchangesubmission.exe(67B4173C) RefCount=1 SpinLock=0 Offset=18208, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5356, counter : time in resource per second Value=390 SpinLock=0 Lifetime=Type: 1 ProcessId: 5356 StartupTime: 130608365930918390, currentInstance : ad-msexchangesubmission-msexchangesubmission.exe(85200236) RefCount=1 SpinLock=0 Offset=17880, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3980, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3980 StartupTime: 130608365902793374, currentInstance : rpca-microsoft.exchange.rpcclientaccess.service-microsoft.exchange.rpcclientaccess.service.exe(E4305E13) RefCount=1 SpinLock=0 Offset=17552, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3980, counter : time in resource per second Value=15105 SpinLock=0 Lifetime=Type: 1 ProcessId: 3980 StartupTime: 130608365902793374, currentInstance : mb-microsoft.exchange.rpcclientaccess.service-microsoft.exchange.rpcclientaccess.service.exe(BBA60BDC) RefCount=1 SpinLock=0 Offset=17224, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3980, counter : time in resource per second Value=1570 SpinLock=0 Lifetime=Type: 1 ProcessId: 3980 StartupTime: 130608365902793374, currentInstance : ad-microsoft.exchange.rpcclientaccess.service-microsoft.exchange.rpcclientaccess.service.exe(B6581E56) RefCount=1 SpinLock=0 Offset=16896, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3676, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 3676 StartupTime: 130608365883887116, currentInstance : rpca-msexchangemailboxreplication-msexchangemailboxreplication.exe(276F4DB3) RefCount=1 SpinLock=0 Offset=16568, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3676, counter : time in resource per second Value=55 SpinLock=0 Lifetime=Type: 1 ProcessId: 3676 StartupTime: 130608365883887116, currentInstance : mb-msexchangemailboxreplication-msexchangemailboxreplication.exe(95E41BC) RefCount=1 SpinLock=0 Offset=16240, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 3676, counter : time in resource per second Value=1045 SpinLock=0 Lifetime=Type: 1 ProcessId: 3676 StartupTime: 130608365883887116, currentInstance : ad-msexchangemailboxreplication-msexchangemailboxreplication.exe(394712B6) RefCount=1 SpinLock=0 Offset=15912, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5272, counter : time in resource per second Value=0 SpinLock=0 Lifetime=Type: 1 ProcessId: 5272 StartupTime: 130608365924980876, currentInstance : rpca-microsoft.exchange.servicehost-microsoft.exchange.servicehost.exe(39C8D53) RefCount=1 SpinLock=0 Offset=15584, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5272, counter : time in resource per second Value=13 SpinLock=0 Lifetime=Type: 1 ProcessId: 5272 StartupTime: 130608365924980876, currentInstance : mb-microsoft.exchange.servicehost-microsoft.exchange.servicehost.exe(E7963A1C) RefCount=1 SpinLock=0 Offset=15256, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 5272, counter : time in resource per second Value=1004 SpinLock=0 Lifetime=Type: 1 ProcessId: 5272 StartupTime: 130608365924980876, currentInstance : ad-microsoft.exchange.servicehost-microsoft.exchange.servicehost.exe(10E8B196) RefCount=1 SpinLock=0 Offset=14928, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 4892, counter : time in resource per second Value=2260 SpinLock=0 Lifetime=Type: 1 ProcessId: 4892 StartupTime: 130608365821855891, currentInstance : rpca-msexchangemailboxassistants-msexchangemailboxassistants.exe(DEAC0933) RefCount=1 SpinLock=0 Offset=14600, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 4892, counter : time in resource per second Value=19900 SpinLock=0 Lifetime=Type: 1 ProcessId: 4892 StartupTime: 130608365821855891, currentInstance : mb-msexchangemailboxassistants-msexchangemailboxassistants.exe(A754293C) RefCount=1 SpinLock=0 Offset=14272, categoryName: MSExchange Activity Context Resources
A process is holding onto a transport performance counter. processId : 4892, counter : time in resource per second Value=3491 SpinLock=0 Lifetime=Type: 1 ProcessId: 4892 StartupTime: 130608365821855891, currentInstance : ad-msexchangemailboxassistants-msexchangemailboxassistants.exe(EE890EB6) RefCount=1 SpinLock=0 Offset=13944, categoryName...

hi,

i will use exchange 2010 facing issue in imap configuration

my imap seating avilable but user not able to connect imap through. telnet services all working rights please check screen shot

m waiting any good solutions to resolve this issue please help

why in owa imap seeting show not avilable

I have a requirement to implement a reporting feature that lists all emails going through Exchange Server 2013 and/or 2016 with an attachment. I should report basic information per email, subject, sender, receivers, attachment names, etc.

I have not found any interface that would allow me to implement such a feature.

For example, Message tracking (https://technet.microsoft.com/en-us/library/bb124375(v=exchg.150).aspx) does not seem to provide the attachment information.

Question: are there any interface that I am able to use for this purpose?

If yes, what would it be?

If no, any workarounds available?

Thank you,

Ari

I'm having a hard time finding a way to make this monitor show as healthy.  I don't think I'm having a certificate issue.

CurrentHealthSetState   : Online
Name                    : Transport.ServerCertMismatch.Monitor
TargetResource          : HubTransport
HealthSetName           : HubTransport
HealthGroupName         : ServiceComponents
AlertValue              : Unhealthy
FirstAlertObservedTime  : 2/12/2016 1:43:30 PM
Description             :
IsHaImpacting           : False
RecurranceInterval      : 0
DefinitionCreatedTime   : 2/12/2016 1:17:33 PM
HealthSetDescription    :
ServerComponentName     : HubTransport
LastTransitionTime      : 2/12/2016 1:43:30 PM
LastExecutionTime       : 2/16/2016 1:10:45 PM
LastExecutionResult     : Succeeded
ResultId                : 5529034
WorkItemId              : 66
IsStale                 : False
Error                   :
Exception               :
IsNotified              : False
LastFailedProbeId       : -2065310054
LastFailedProbeResultId : 2970374
ServicePriority         : 2
Identity                : HubTransport\Transport.ServerCertMismatch.Monitor\HubTransport
IsValid                 : True
ObjectState             : New

Notice the last execution time is February.  How do I clear the issue or which probe do I run?

---

David Jenkins

In our environment we create a folder called "STORED MAIL" where users create subfolders and store email in their Outlook.
My question is- Is there a method I can use to apply protection to the top level folder "STORED MAIL" so it, in effect, acts like a core folder (Inbox, Sent Items, etc..) in that users can't delete it accidentally?
That is my goal- to prevent accidental deletion of the top level folder, while still allowing the creation of subfolders.

We are using Exchange 2013 & Outlook 2010.
Thanks very much.
Jack

In performing maintenance in AD via Exchange or GPO, etc, you come across Orphaned SID's. Is there an LDAP query, or PS script that i can plug in the Orphaned SID and it will show me all the OU's or location where that SID is located so I can remove it?

(I cant be the only Admin dealing with this problem)

Any Help would be appreciated.

Hey there,

there must be some tuning out there...

We have 2 Exchange Servers DAG with 20 Mailboxes. Holding 750+ Users.

Today the search indexer thought it would be nice to index all the mailboxes. One Noderunner.exe holds 20GB RAM and uses 40-60% (sometimes 100%) CPU.

Any possible solution how to solve this? If i stop the service and restart it - it will continue to crawl. 

Isn't there a switch like in Sharepoint to set the search to Reduced? Or if there are "bad" indexes to built them in the maintenance time in the evening?

Best regards

Stephan

---

Regards Stephan

OneDrive / Sharepoint Blog