Hi All,
Does anyone know why store.exe accesses c:\windows\temp 18 times a second?
I'm seeing this on my test server, an Exchange 2003 Enterprise on Windows
Server 2003 standard, runnning also AD.
The server has 40 mail enabled users, but no traffic and no mail stored. All
databases, transactionlogs and system path are on separate arrays, C:\ is
for system only.
This is what Filemon sees: (always 18x a second)
21 21:17:19 store.exe:2664 OPEN C:\WINDOWS\TEMP\
SUCCESS Options: Open Directory Access: All
22 21:17:19 store.exe:2664 DIRECTORY C:\WINDOWS\TEMP\
NO SUCH FILE FileBothDirectoryInformation:
{6BC5B7BD-AC2A-4EE5-9D80-AE3534FB8C0D}WIN32READ.dat
23 21:17:19 store.exe:2664 CLOSE C:\WINDOWS\TEMP\
SUCCESS
24 21:17:19 store.exe:2664 OPEN C:\WINDOWS\TEMP\
SUCCESS Options: Open Directory Access: All
25 21:17:19 store.exe:2664 DIRECTORY C:\WINDOWS\TEMP\
NO SUCH FILE FileBothDirectoryInformation:
{6BC5B7BD-AC2A-4EE5-9D80-AE3534FB8C0D}WIN32WRITE.dat
26 21:17:19 store.exe:2664 CLOSE C:\WINDOWS\TEMP\
SUCCESS
27 21:17:19 store.exe:2664 OPEN C:\WINDOWS\TEMP\
SUCCESS Options: Open Directory Access: All
28 21:17:19 store.exe:2664 DIRECTORY C:\WINDOWS\TEMP\
NO SUCH FILE FileBothDirectoryInformation:
{6BC5B7BD-AC2A-4EE5-9D80-AE3534FB8C0D}WIN32READPENDING.dat
29 21:17:19 store.exe:2664 CLOSE C:\WINDOWS\TEMP\
SUCCESS
30 21:17:19 store.exe:2664 OPEN C:\WINDOWS\TEMP\
SUCCESS Options: Open Directory Access: All
31 21:17:19 store.exe:2664 DIRECTORY C:\WINDOWS\TEMP\
NO SUCH FILE FileBothDirectoryInformation:
{671BDCB6-E84D-40CE-90A7-7469EA833707}WIN32READ.dat
32 21:17:19 store.exe:2664 CLOSE C:\WINDOWS\TEMP\
SUCCESS
33 21:17:19 store.exe:2664 OPEN C:\WINDOWS\TEMP\
SUCCESS Options: Open Directory Access: All
34 21:17:19 store.exe:2664 DIRECTORY C:\WINDOWS\TEMP\
NO SUCH FILE FileBothDirectoryInformation:
{671BDCB6-E84D-40CE-90A7-7469EA833707}WIN32WRITE.dat
35 21:17:19 store.exe:2664 CLOSE C:\WINDOWS\TEMP\
SUCCESS
36 21:17:19 store.exe:2664 OPEN C:\WINDOWS\TEMP\
SUCCESS Options: Open Directory Access: All
37 21:17:19 store.exe:2664 DIRECTORY C:\WINDOWS\TEMP\
NO SUCH FILE FileBothDirectoryInformation:
{671BDCB6-E84D-40CE-90A7-7469EA833707}WIN32READPENDING.dat
38 21:17:19 store.exe:2664 CLOSE C:\WINDOWS\TEMP\
SUCCESS
What is it doing?
Thanks,
Jeroen Peters
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016
Please include the email address which you have been contacted with.
