Microsoft KB Archive/926204

Knowledge Base

The Microsoft Exchange Information Store service does not start, and Event IDs 7009 and 7000 are logged after you apply security update 894689 in Exchange 2000 Server

Article ID: 926204

Article Last Modified on 11/22/2006

---

APPLIES TO

• Microsoft Exchange 2000 Server Standard Edition
• Microsoft Exchange 2000 Enterprise Server

---

SYMPTOMS

You install security update 894689 on a computer that is running Microsoft Exchange 2000 Server.

Note Security update 894689 is mentioned in security bulletin MS06-003.

After you do this, you experience the following symptoms:

• The Microsoft Exchange Information Store service does not start.

• The following events are logged in the System log:

  Event ID: 7009
  Event Category: None
  Event Source: Service Control Manager
  Type: Error
  Computer: ServerName
  Description: Timeout (30000 milliseconds) waiting for the Microsoft Exchange Information Store service to connect.

  Event ID: 7000
  Event Category: None
  Event Source: Service Control Manager
  Type: Error
  Computer: ServerName
  Description: The Microsoft Exchange Information Store service failed to start due to the following error: %Microsoft Exchange Information Store053

If you remove security update 894689, the Microsoft Exchange Information Store service starts successfully.
For more information about security update 894689, click the following article number to view the article in the Microsoft Knowledge Base:

894689 Vulnerability in TNEF decoding in Microsoft Exchange could allow remote code execution

CAUSE

This issue occurs if one or more Exchange 2000 Server post-Service Pack 3 files are missing from the computer. You may experience this issue if the following conditions are true:

• You install the August 2004 Exchange 2000 Server post-Service Pack 3 update rollup package (update rollup 870540) on a computer that is running Microsoft Exchange 2000 Server Service Pack 3 (SP3). This package is described in the following Microsoft Knowledge Base article:

  870540 Availability of the August 2004 Exchange 2000 Server post-Service Pack 3 update rollup

  Note Update rollup 870540 updates Exchange Server files together with the Microsoft Windows registry.
• You reinstall Exchange 2000 Server.

Note When you perform one of these actions, Exchange Server files are restored. However, the Windows registry keys that update rollup 870540 creates are not removed.

• You do not reinstall update rollup 870540.
• You install security update 894689.

When you install the security update, the Setup program verifies the presence of the registry entries that are associated with update rollup 870540. If these registry entries exist, the Setup program determines that update rollup 870540 is applied successfully. Therefore, the Setup program updates the following files:

• Store.exe
• Mdbmsg32.dll
• Mapi32.dll
• Cdo.dll

When the updated Microsoft Information Store service (Store.exe) next tries to start, it is unsuccessful. This is because the Ese.dll file that the updated Store.exe file requires is an incorrect version. The Ese.dll file is from Exchange 2000 Server SP3 and not from update rollup 870540.

To determine whether an incorrect version of Ese.dll is installed, follow these steps:

1. Click Start, point to Search, and then click For Files or Folders.
2. In the Search for files or folders named box, type ese.dll, and then click Search Now.
   
   By default, this file is located in the following folder:

   %ProgramFiles%\Exchsrvr\BIN

3. In the Search Results pane, right-click Ese.dll, and then click Properties.
4. In the Ese.dll Properties dialog box, click the Version tab.
5. Examine the value that appears next to File version.

If this file has a version number that is less than 6.0.6603.0, an outdated version of Ese.dll is installed. For example, if the version of Ese.dll is 6.0.6249.0, Ese.dll is outdated.

RESOLUTION

To resolve this issue, follow these steps:

1. Stop all Exchange Server-related services.
2. Use the Add or Remove Programs feature in Control Panel to remove update rollup 870540, if you can do this.
3. Reinstall all the Exchange 2000 Server post-SP3 hotfixes. Include update rollup 870540.
   

Important Click No if you are prompted to start the Exchange Server-related services when you install any hotfix package.

1. Reinstall security update 894689.
2. Restart the computer.

Additional query words: XADM

Keywords: kbtshoot kberrmsg kbprb KB926204

---

Send feedback to Microsoft

© Microsoft Corporation. All rights reserved.