Exchange 2003 Crisis

2011-06-12 Thread Jim Dandy
Thursday morning I came to work and my exchange server was not receiving
mail. The antivirus engine had stopped and after that the event log
registered thousands of entries that the Ninja VSAPI had refused
Microsoft Exchange InfoStore request to scan a message because the Ninja
Store Scanner is down. (I'm using Vipre E-mail Security for
antivirus/antispam). No other unusual entries were found in the event
log.  I rebooted the server and it took a really long time to shut down.
When it came back up the Ninja Store scanner service was not started but
I was able to start it manually. Without going into a lot more detail
I'll just say the info store wasn't working right. Subsequent attempts
to stop the IS service failed. I disabled Vipre, rebooted again and
everything resumed normal function (except no antivirus/antispam). I
updated Vipre and reenabled its services. The following morning the
server had crashed in the same way.  When it crashes messages are not
delivered to inboxes and the sender does not get an NDR.

 

Since then I've had a user claim that he tried to move some messages
from one folder to another and they disappeared. Later he told me that
he had an important message in his inbox and when he tried to open it,
it disappeared.

 

So, the questions I have are

 

1) Could a corrupt info store cause the av scanner to fail like this? If
so, how can I check for/repair the store?

2) Does this guy's claims seem possible that messages are just
disappearing?

 

Details

Exchange Server 2003 with both front and backend servers.

Vipre E-mail security latest version.

 

Thanks for your help.


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

Assigning Retention Policy by default?

2011-06-12 Thread Paul Hutchings
On Exchange 2003 I have a mailbox management policy that deletes items from the 
Deleted Items folder that are older than 30 days.

On 2010 it looks like I have to create a Recipient Policy Tag, assign that to a 
Rceipient Policy, and assign that policy to mailboxes or a database.

The only issue is that this appears to only affect mailboxes at the time of 
running the command, so if I apply it to all users on DB1 today, it won't be 
applied to a user created tomorrow on DB1.

How do you best deal with this please?

The only way I can think of is a scheduled task, but surely there has to be a 
simpler way as this seems a pretty obvious and fundamental thing to want to do?

Thanks,
Paul

--
MIRA Ltd

Watling Street, Nuneaton, Warwickshire, CV10 0TU, England
Registered in England and Wales No. 402570
VAT Registration  GB 100 1464 84

The contents of this e-mail are confidential and are solely for the use of the 
intended recipient.  If you receive this e-mail in error, please delete it and 
notify us either by e-mail, telephone or fax.  You should not copy, forward or 
otherwise disclose the content of the e-mail as this is prohibited.

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

Re: Exchange 2003 Crisis

2011-06-12 Thread Todd Lemmiksoo
before trying to do anything ...is the store still mounded, look in event
log for Information store messages. Then post back

On Sun, Jun 12, 2011 at 1:13 AM, Jim Dandy jda...@asmail.ucdavis.eduwrote:

 Thursday morning I came to work and my exchange server was not receiving
 mail. The antivirus engine had stopped and after that the event log
 registered thousands of entries that the Ninja VSAPI had refused Microsoft
 Exchange InfoStore request to scan a message because the Ninja Store Scanner
 is down. (I’m using Vipre E-mail Security for antivirus/antispam). No other
 unusual entries were found in the event log.  I rebooted the server and it
 took a really long time to shut down. When it came back up the Ninja Store
 scanner service was not started but I was able to start it manually. Without
 going into a lot more detail I’ll just say the info store wasn’t working
 right. Subsequent attempts to stop the IS service failed. I disabled Vipre,
 rebooted again and everything resumed normal function (except no
 antivirus/antispam). I updated Vipre and reenabled its services. The
 following morning the server had crashed in the same way.  When it crashes
 messages are not delivered to inboxes and the sender does not get an NDR.



 Since then I’ve had a user claim that he tried to move some messages from
 one folder to another and they disappeared. Later he told me that he had an
 important message in his inbox and when he tried to open it, it disappeared.



 So, the questions I have are



 1) Could a corrupt info store cause the av scanner to fail like this? If
 so, how can I check for/repair the store?

 2) Does this guy’s claims seem possible that messages are just
 disappearing?



 Details

 Exchange Server 2003 with both front and backend servers.

 Vipre E-mail security latest version.



 Thanks for your help.

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist




-- 
T. Todd Lemmiksoo

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: Exchange 2003 Crisis

2011-06-12 Thread farooq . ahmed
Looks like your AV is the reason

From: Todd Lemmiksoo [mailto:tlemmik...@gmail.com]
Sent: Sunday, June 12, 2011 8:15 PM
To: MS-Exchange Admin Issues
Subject: Re: Exchange 2003 Crisis

before trying to do anything ...is the store still mounded, look in event log 
for Information store messages. Then post back
On Sun, Jun 12, 2011 at 1:13 AM, Jim Dandy 
jda...@asmail.ucdavis.edumailto:jda...@asmail.ucdavis.edu wrote:
Thursday morning I came to work and my exchange server was not receiving mail. 
The antivirus engine had stopped and after that the event log registered 
thousands of entries that the Ninja VSAPI had refused Microsoft Exchange 
InfoStore request to scan a message because the Ninja Store Scanner is down. 
(I'm using Vipre E-mail Security for antivirus/antispam). No other unusual 
entries were found in the event log.  I rebooted the server and it took a 
really long time to shut down. When it came back up the Ninja Store scanner 
service was not started but I was able to start it manually. Without going into 
a lot more detail I'll just say the info store wasn't working right. Subsequent 
attempts to stop the IS service failed. I disabled Vipre, rebooted again and 
everything resumed normal function (except no antivirus/antispam). I updated 
Vipre and reenabled its services. The following morning the server had crashed 
in the same way.  When it crashes messages are not delivered to inboxes and the 
sender does not get an NDR.

Since then I've had a user claim that he tried to move some messages from one 
folder to another and they disappeared. Later he told me that he had an 
important message in his inbox and when he tried to open it, it disappeared.

So, the questions I have are

1) Could a corrupt info store cause the av scanner to fail like this? If so, 
how can I check for/repair the store?
2) Does this guy's claims seem possible that messages are just disappearing?

Details
Exchange Server 2003 with both front and backend servers.
Vipre E-mail security latest version.

Thanks for your help.

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist



--
T. Todd Lemmiksoo

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist



This e-mail may contain information that is privileged or confidential. If you 
are not the intended recipient, please delete the e-mail and any attachments 
and notify us immediately.

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: Exchange 2003 Crisis

2011-06-12 Thread gsweers
Are you unbinding the sink?
If you unbind do your problems go away? Don't forget to unbind the smtp and AV 
scanner.
Do you have any IS store errors?
Do you have Deleted Item Retention turned on?  Go to his folder that the files 
were missing and see if you can do a Deleted Item Recovery on it.



Greg Sweers
CEO
ACTS360.comhttp://www.acts360.com/
P.O. Box 1193
Brandon, FL  33509
813-657-0849 Office
813-758-6850 Cell
813-341-1270 Fax

From: Jim Dandy [mailto:jda...@asmail.ucdavis.edu]
Sent: Sunday, June 12, 2011 2:14 AM
To: MS-Exchange Admin Issues
Subject: Exchange 2003 Crisis

Thursday morning I came to work and my exchange server was not receiving mail. 
The antivirus engine had stopped and after that the event log registered 
thousands of entries that the Ninja VSAPI had refused Microsoft Exchange 
InfoStore request to scan a message because the Ninja Store Scanner is down. 
(I'm using Vipre E-mail Security for antivirus/antispam). No other unusual 
entries were found in the event log.  I rebooted the server and it took a 
really long time to shut down. When it came back up the Ninja Store scanner 
service was not started but I was able to start it manually. Without going into 
a lot more detail I'll just say the info store wasn't working right. Subsequent 
attempts to stop the IS service failed. I disabled Vipre, rebooted again and 
everything resumed normal function (except no antivirus/antispam). I updated 
Vipre and reenabled its services. The following morning the server had crashed 
in the same way.  When it crashes messages are not delivered to inboxes and the 
sender does not get an NDR.

Since then I've had a user claim that he tried to move some messages from one 
folder to another and they disappeared. Later he told me that he had an 
important message in his inbox and when he tried to open it, it disappeared.

So, the questions I have are

1) Could a corrupt info store cause the av scanner to fail like this? If so, 
how can I check for/repair the store?
2) Does this guy's claims seem possible that messages are just disappearing?

Details
Exchange Server 2003 with both front and backend servers.
Vipre E-mail security latest version.

Thanks for your help.

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist