Microsoft KB Archive/221122

= XGEN: Exchange Server Event ID Descriptions Are Missing =

Article ID: 221122

Article Last Modified on 10/28/2006

-

APPLIES TO


 * Microsoft Exchange Server 4.0 Standard Edition
 * Microsoft Exchange Server 5.0 Standard Edition
 * Microsoft Exchange Server 5.5 Standard Edition

-



This article was previously published under Q221122



IMPORTANT: This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows Registry



SYMPTOMS
After you uninstall a third-party application that may have relied on shared .dlls and registry keys from an Exchange Server computer, all Exchange Server-related Event IDs in the Event Viewer's application log are missing their descriptions. All Exchange Server-related descriptions show up as:

The description for Event ID in Source  could not be found.

You may be missing the following files from Exchsrvr\Res folder:


 * Eventmsg.dll: Used for the Windows NT Event Viewer Service.
 * Ccmsg.dll: Used to display Exchange Server chat events.
 * Dsmsg.dll: Used to display Exchange Server directory events.
 * Imap4evt.dll: Used to display Exchange Server IMAP4 events.
 * Imcsmg.dll: Used to display Exchange Server Internet Mail Connector or Internet Mail Service events.
 * Mdbmsg.dll: Used to display Exchange Server information store events.
 * Mtamsg.dll: Used to display Exchange Server message transfer agent (MTA) events.
 * Nntpevt.dll: Used to display Exchange Server Network News Transport Protocol (NNTP) events.
 * Pop3evt.dll: Used to display Exchange Server Post Office Protocol (POP3) events.

You may also possibly be missing any or all Exchange Server-related keys under the following registry key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Application\



CAUSE
After you uninstall an application that may have depended on or used any of these files or registry keys, the files or keys may be removed along with the application.



WORKAROUND
 Reinstall Exchange Server. -or-

 Manually replace missing files and recreate the registry keys:  Copy all files from Server\Setup\I386\Res folder on the Exchange Server 5.5 CD into the Exchsrvr\Res folder on your Exchange Server computer, choosing to overwrite the existing files. Make a backup of your registry. Export the following registry keys from a working Exchange Server 5.5 computer: (NOTE: There may be additional keys missing depending on the server's configuration. Adding these keys should bring back most Exchange Server-related Event ID descriptions but may not bring back all.)

 MSExchange NNTP Interface</li> MSExchange POP3 Interface</li> MSExchangeAdmin</li> MSExchangeCCMC</li> MSExchangeDS</li> MSExchangeDSExp</li> MSExchangeDSImp</li> MSExchangeDX</li> MSExchangeFB</li> MSExchangeIMC</li> MSExchangeIS</li> MSExchangeIS Private</li> MSExchangeIS Public</li> MSExchangeMig</li> MSExchangeMigDS</li> MSExchangeMTA</li> <li>MSExchangeNTExt</li> <li>MSExchangeNWExt</li> <li>MSExchangeSA</li> <li>MXExchangeSetup</li> <li>MSExchangeWEB</li> <li>MSProxy</li> <li>NTBackup</li> <li>MSExchangeATMTA</li> <li>MSExchangeMSMI</li> <li>PCMTA</li> <li>ESE97</li> <li>MSExchange IMAP4 Interface</li> <li>MSExchangeES</li></ul> </li></ol>

</li> <li>Copy the resulting exported registry keys (*.reg files) from the working Exchange Server computer into the problem Exchange Server computer's registry.</li> <li>After the importation is finished, double-click on each registry key file to re-register the key into the registry.</li></ul>

Exchange Server-related Event ID descriptions should now be viewable, including events already written to the event log.

Keywords: kbprb KB221122

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.