Share via


Exchange 2013 Event ID 489 Source ESE

Question

Wednesday, April 9, 2014 6:46 PM

Hi, I am getting errors in event viewer of my Mailbox servers running in DAG, I have exchange 2013 CU2, with Windows 2008 R2 OS.

I Have already disabled antivirus on these servers, and already excluded all database and log drives in antivirus options, but twice a week, passive copy of some databases are failed and I got this error in event ID.

msexchangerepl (5128) An attempt to open the file "F:\Program Files\Microsoft\Exchange Server\V15\Mailbox\TMgmt-DB03\TMgmt-DB03.edb" for read only access failed with system error 32 (0x00000020): "The process cannot access the file because it is being used by another process. ".  The open file operation will fail with error -1032 (0xfffffbf8).

For more information, click http://www.microsoft.com/contentredirect.asp.

I got one more alert like this

An error was encountered when attempting to
logon to 'SystemMailbox' on one or more database(s) for last 00:16:00

After Restart of one mailbox server on which passive copy is placed, all went ok.

If anyone have any suggestion / solution, kindly reply at your earliest.

All replies (6)

Thursday, April 10, 2014 2:36 AM âś…Answered

Hi Nausherwan,

I collected some information from a generic troubleshooting article for your reference:

Cause:

1. The file is locked or is in use.

2. Another process is using the file.

3. Antivirus software may mistakenly quarantine a file.

4. A backup process may temporarily deny access.

5. A flat file backup system or antivirus software may be running against the database or check file directories.

6. This error can also occur if the permissions on the folder (such as MDBDATA) that contain the files for the information stores are not sufficient for the stores to function properly.

Solution:

1. Please change the permissions on the folders that contain the information store files to the default permissions.

2. Please configure the flat file backup and antivirus software to not scan the Exchange store subdirectories.

More details in the following article:

http://www.microsoft.com/technet/support/ee/transform.aspx?ProdName=Exchange&ProdVer=8.0&EvtID=489&EvtSrc=ESE

 

If it still not works well, I'll go on my research. Feel free to contact me if there is any problem.

Thanks

Mavis

If you have feedback for TechNet Subscriber Support, contact [email protected]

Mavis Huang
TechNet Community Support


Wednesday, April 9, 2014 9:25 PM

Hi 

Looks like Exx.log file is either in use or locked by another process.

Possible Cause should be  Some third party  software having a lock on log files or the tmp.edb file

Are you running any backup on those servers and can you check for any events related to backup before this events gets triggered

Remember to mark as helpful if you find my contribution useful or as an answer if it does answer your question.That will encourage me - and others - to take time out to help you


Friday, April 11, 2014 8:19 PM | 2 votes

This is perfectly normal and is noise. When the process for Event ID 489 is msexchangerepl you can ignore this. MsExchangeRepl is using an ESE api to check the database header after a failover, and there are times when the store gets a hold of the file first. So the ESE api logs the event, and MsExchangeRepl asks the store process for the data.


Saturday, April 12, 2014 12:06 PM

Thanks folks for your suggestions, I have to check it with my servers in production and than let you know.

Regards,

Nausherwan Moiz


Monday, April 14, 2014 1:55 AM

Hi Nausherwan,

Any update?

 

Thanks

Mavis

Mavis Huang
TechNet Community Support


Wednesday, July 27, 2016 12:05 PM

Even though that we tend to blame antivirus solutions for any file access issue, sometimes it's just not the case.

Thanks, Jared, for clarifying this.

Cheers,
Thomas

Thomas Stensitzki - MCSM, MCM, MCSE, MCSA, MCITP - Blog: http://www.sf-tools.net