Microsoft KB Archive/192186

= XADM: Troubleshooting Dr. Watson in Store.exe Because of IMC =

Article ID: 192186

Article Last Modified on 10/28/2006

-

APPLIES TO


 * Microsoft Exchange Server 4.0 Standard Edition
 * Microsoft Exchange Server 5.0 Standard Edition
 * Microsoft Exchange Server 5.5 Standard Edition

-



This article was previously published under Q192186



SUMMARY
This article lists steps used to troubleshoot Dr. Watson errors in Store.exe, caused by the Microsoft Exchange Server Internet Mail Service. The problem is caused by a "bad" message coming into the MSExchangeIMC. The Exchange Server information store will return a Dr. Watson error while trying to convert the content of the "bad" message. The following events will usually be found in the application event log:   Event ID: 4116 Source: MSExchangeIMC Description: An error was returned from the messaging software the Internet Mail Service uses to process messages on the Microsoft Exchange Server. It is possible that the piece of mail being processed at the time will not be delivered. The message that was being processed has been moved to the "BAD" folder. Use the appropriate utilities found in  the SUPPORT directory of your Exchange CD to view and manipulate these messages.

Event ID: 4117 Source: MSExchangeIMC Description: An error was returned from the messaging software the Internet Mail Service uses to process messages on the Microsoft Exchange Server. As a result, the message in spool file XXXXXXXX failed to be  delivered. The message has been moved to the Imcdata\In\Archive directory.



MORE INFORMATION
If you cannot clear the MTS-IN queue and the MTS-OUT queue cannot by using the GWClient utility, the Information Store Viewer (Mdbvu32) utility, or the Mfcmapi utility, update the Store.exe file to the latest version, and then restart the computer. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

330045 XADM: Information store may stop responding under low memory conditions

The Microsoft Information Store service converts Internet mail to MDBEF format. This conversion is typically the problem. Event ID 4116 typically means that a message is malformed.

The following steps should be used to resolve the issue. If there is not a current fix for the problem, the steps included will help you gather the necessary data for a prompt resolution:

 Make sure the proper symbols are loaded on the Exchange Server computer. For information about the steps needed to load Exchange Server symbols for Dr. Watson, please see the following article in the Microsoft Knowledge Base:

150564 XADM: How to load Exchange Symbols for DR. Watson

 Set Diagnostics Logging of MSExchangeIMC\Message Archival to Maximum. This can be set from the Diagnostics Logging tab on the server's Properties page. Gather information leading up to the reproduction of the error. For example, starting the MSExchangeIMC service may result in the Dr. Watson error with Store.exe.

Note This may take time if a particular type of message causes the crash. After reproducing the Dr. Watson in Store.exe, open the Drwtsn32.log file using Notepad. Find the function name where the fault occurred. The easiest way to do this is by scrolling to the bottom of the Drwtsn32.log file and searching "up" for the word 'Fault.' This will place you in the dump of the last Dr. Watson error encountered. Make a note of the function name, and search the Knowledge Base for related Dr. Watson errors in that function.  Depending on the cause of the problem, the following events may or may not appear in the application event log:      Event ID: 4116 Source: MSExchangeIMC Description: An error was returned from the messaging software the Internet Mail Service uses to process messages on the Microsoft Exchange Server. It is possible that the piece of mail being processed at the time will not be delivered. The message that was being processed has been moved to the "BAD" folder. Use the appropriate utilities found in the SUPPORT directory of your Exchange CD to view and manipulate these messages.

Event ID: 4117 Source: MSExchangeIMC Description: An error was returned from the messaging software the Internet Mail Service uses to process messages on the Microsoft Exchange Server. As a result, the message in spool file XXXXXXXX failed to be delivered. The message has been moved to the Imcdata\In\Archive directory. If these events appear, search the \Exchsrvr\Imcdata\In\Archive folder for the spool file mentioned above (for example, XXXXXXXX). This is, most likely, the "bad" message that caused the information store to crash.  If a resolution still has not been reached, a case should be opened with the Exchange Server support group. The following information will need to be gathered. This information should be zipped up and sent to Microsoft using FTP, or any other form of file transfer: <ul> User.dmp</li> Drwtsn32.log</li> Application event log</li>  from \Exchsrvr\Imcdata\In\Archive folder</li></ul> </li></ol>

Additional query words: DrWatson Dr-Watson debug store.dbg

Keywords: kbinfo KB192186

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.