How can I mount the Exchange 2000/2003 database when the E00.log is missing and I receive events 9518 and 455?
You may receive the following error message when you try to mount a mailbox or public store:
An internal processing error has occurred. Try restarting the Exchange System Manager or the Microsoft Exchange Information Store service, or both. ID no: c1041724
In the Application event log, you may also receive following events.
Event Type: Error
Event Source: ESE98
Event Category: Logging/Recovery
Event ID: 455
Time: 5:14:22 PM
Description: Information Store (2376) Error -1811 (0xfffff8ed) occurred while opening log file D:\exchsrvr\MDBDATA\E000xxx.log.
Event Type: Error
Event Source: MSExchangeIS
Event Category: General
Event ID: 9518
Time: 5:14:22 PM
Description: Error Current log file missing starting Storage Group /DC=COM/DC=COMPANY/CN=CONFIGURATION/CN=SERVICES/CN=MICROSOFT EXCHANGE/CN=MICROSOFT/CN=ADMINISTRATIVE GROUPS/CN=FIRST ADMINISTRATIVE GROUP/CN=SERVERS/CN=SERVER1/CN=INFORMATIONSTORE/CN=FIRST STORAGE GROUP on the Microsoft Exchange Information Store.
There might be a few reasons for these errors:
- You might be running an Anti-Virus program on the Exchange server and that program might not be properly configured. Read article KB245822 for more info on how to properly configure your Anti-Virus software on a computer running Exchange server.
- If the Anti-Virus Quarantine option is enabled on the Exchange server and the anti-virus is not configured according to article KB245822.
- If your Anti-Virus software is configured to scan x:\Program Files\exchsrvr\MDBDATA it might think that the “E00.log “ contains a virus, or that the file itself is the virus, therefore it will automatically quarantine the E00.log and cause the Exchange services to crash.
In order to solve these errors you might want to consider the following options:
- Stop all exchange services.
- Configure your Anti-Virus program according to article KB245822.
- Save your current log files that are usually located on x:\Program Files\exchsrvr\MDBDATA\Exxxxxxx.Log to a temporary folder.
- Delete all *.log files in the x:\Program Files\exchsrvr\MDBDATA.
- Check that the folder “(x:\Program Files\exchsrvr\MDBDATA)” only contains the following files:
If not, move all extra files to a temporary folder.
- Start all Exchange Services and mount the Information Store service.
If the above procedure did not work, you might have a problem in the Exchange Database and you will need to try to resolve it by following option number two.
If the above procedure did not work, you might have a problem in the Exchange Database and you will need to refer to article KB313184.
You Cannot Mount the Database, and Receive Events 9518 and 455 – 294367
How to recover the information store on Exchange 2000 in a single site – 313184
Recommendations for troubleshooting an Exchange computer with antivirus software installed – 245822
How to Recover a Deleted Mailbox in Exchange 2000 – 274343
More in Exchange Server
Microsoft Recommends IT Admins to Patch Exchange Servers
Jan 27, 2023 | Rabia Noureen
Microsoft Releases Exchange Server Updates to Improve Security of PowerShell Payloads
Jan 11, 2023 | Rabia Noureen
Microsoft Warns About New Zero-Day Vulnerabilities in Exchange Server
Sep 30, 2022 | Rabia Noureen
Microsoft Exchange Servers Hit By Stealthy IIS Backdoors
Jul 27, 2022 | Rabia Noureen
Kaspersky Discloses New 'SessionManager' Backdoor Targetting Microsoft Exchange Servers
Jul 1, 2022 | Rabia Noureen
M365 Changelog: (Updated) Safe Links Global Settings Migrated to Custom Policies
Jun 28, 2022 | Petri Staff
Most popular on petri