Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

[SDP 2][B3A45D3F-FD14-49E8-B262-9387A7E78CA9] Exchange Server 2007 and Exchange Server 2010 Troubleshooter for Windows 2003 and Windows 2008


View products that this article applies to.

Summary

The Exchange Server 2007 and Exchange Server 2010 Troubleshooter for Windows 2003 and Windows 2008 was designed to collect a comprehensive set of information for troubleshooting Exchange Server 2007 and Exchange Server 2010 issues.

↑ Back to the top


More information

The Exchange Server 2007 and Exchange Server 2010 Troubleshooter was designed to run under Windows XP / Windows Server 2003 or Windows Vista / Windows Server 2008. A different Exchange troubleshooter is available and must be used for instances involving Windows 7 / Windows Server 2008 R2.

This article describes information that may be collected from a machine when running Exchange Server 2007 and Exchange Server 2010 Troubleshooter for Windows 2003 and Windows 2008. Output file names are generally prefixed {prefix} with the name(s) of the item for which output was generated (<computer name> <cluster name> <storage group name> <database name>, for example).

Information Collected

Exchange Server and Organization Baseline
DescriptionFile Name
Get-ExchangeServer cmdlet output: AdminDisplayVersion and Roles of all Exchange servers + exsetup.exe FileVersionInfo.ProductVersion from local system{prefix}_AllExchangeServers*.txt
Get-ExchangeCertificate cmdlet output{prefix}_ExchangeCertificate_FL.txt
Get-AcceptedDomain cmdlet output{prefix}_AcceptedDomain*.txt
Get-RemoteDomain cmdlet output{prefix}_RemoteDomain*.txt
Get-OrganizationConfig cmdlet output{prefix}_OrganizationConfig*.txt
Get-EmailAddressPolicy cmdlet output{prefix}_EmailAddressPolicy*.txt
Get-AvailabilityAddressSpace cmdlet output{prefix}_AvailabilityAddressSpace*.txt
Get-UserPrincipalNamesSuffix cmdlet output{prefix}_UserPrincipalNamesSuffix*.txt
Get-ThrottlingPolicy cmdlet output{prefix}_ThrottlingPolicy*.txt
Reg.exe query output for HKLM:SYSTEM\CurrentControlSet\Services registry keys and values where key name contains *Exchange*{prefix}_REG_SERVICES_EXCHANGE.TXT
Reg.exe query output for HKLM:SOFTWARE\Microsoft registry keys and values where key name contains *Exchange*{prefix}_REG_SOFTWARE_EXCHANGE.TXT
Reg.exe query output for HKLM:Software\Microsoft\MosTrace registry key and values if present.{prefix}_REG_MOSTRACE.TXT

Exchange Server Toolbox
DescriptionFile Name
Generate and collect output from Exchange Best Practices Analyzer health-check{prefix}_ExBPA.xml
Log from Exchange Best Practices Analyzer health-check{prefix}_ExBPA.xml.log
Collect Exchange Troubleshooting Assistant Trace Control output if present and newer than 14 daysExTRATrace.cab
Collect Exchange Performance Troubleshooting Assistant output if present and newer than 14 daysExPTAData.cab

Exchange Server Setup Information
DescriptionFile Name
Copy of all files from %systemdrive%\ExchangeSetupLogs\* and subdirectories.ExchangeSetupLogs.zip
Copy of *.config files in the Exchange setup folder and subfolders. Filenames within .cab are prefixed with subfolder name(s) where applicable.ExchangeConfigFiles.cab
Reg.exe query output for Windows Installer registry key and children for the installed version of Exchange Server.{prefix}_REG_INSTALLER_EXCHANGE.TXT

Exchange Server IIS Information
DescriptionFile Name
Reg.exe query output for HKLM:\SYSTEM\CCS\Services\ IISAdmin, Inetinfo, W3SVC, msdtc, HKLM:SOFTWARE\Microsoft\Transaction Server, InetStp, InetMGR, Keyring{prefix} _REG_IIS.TXT
Copy of metabase.xml{prefix}_metabase.xml
Copy of the two most recent IIS W3SVC logs for each website.{prefix}_W3SVC{websiteindex}LogFiles.cab

Exchange Client Access Server Role
DescriptionFile Name
Get-ClientAccessServer cmdlet output{prefix}_ClientAccessServer.txt
Get-PopSettings cmdlet output{prefix}_PopSettings.txt
Get-ImapSettings cmdlet output{prefix}_ImapSettings.txt
Get-ActiveSyncVirtualDirectory cmdlet output{prefix}_ActiveSyncVirtualDirectory.txt
Get-ActiveSyncMailboxPolicy cmdlet output{prefix}_ActiveSyncMailboxPolicy.txt
Get-OutlookAnywhere cmdlet output{prefix}_OutlookAnywhere.txt
Get-AutodiscoverVirtualDirectory cmdlet output{prefix}_AutodiscoverVirtualDirectory.txt
Get-OabVirtualDirectory cmdlet output{prefix}_OabVirtualDirectory.txt
Get-OwaVirtualDirectory cmdlet output{prefix}_OwaVirtualDirectory.txt
Get-WebServicesVirtualDirectory cmdlet output{prefix}_WebServicesVirtualDirectory.txt
Get-RPCClientAccess cmdlet output{prefix}_RPCClientAccess.txt
Get-Childitem output for HKLM:SOFTWARE\Microsoft\Rpc\RpcProxy{prefix}_REG_RPCPROXY.TXT
Copy of the two most recent logs from Logging\RPC Client Access{prefix}_RPCClientAccessLogs.zip

All Exchange Transport Server Roles
DescriptionFile Name
Get-TransportConfig cmdlet output{prefix}_TransportConfig.txt
Get-TransportServer cmdlet output{prefix}_TransportServer.txt
Get-ReceiveConnector cmdlet output{prefix}_ReceiveConnector.txt
Get-SendConnector cmdlet output{prefix}_SendConnector.txt
Get-TransportAgent cmdlet output{prefix}_TransportAgent.txt
Get-TransportPipeline cmdlet output{prefix}_TransportPipeline.txt
Get-EdgeSubscription cmdlet output{prefix}_EdgeSubscription.txt
Get-Queue cmdlet output{prefix}_Queue.txt
Get-EdgeSyncServiceConfig cmdlet output{prefix}_EdgeSyncServiceConfig.txt
Export-TransportRuleCollection cmdlet output{prefix}_ExportedTransportRules.xml
Export-TransportRuleCollection �ExportLegacyRules cmdlet{prefix}_ExportedLegacyTransportRules.xml
Copy of four newest routing*.xml logsExchangeRoutingLogs.cab
Get-ContentFilterConfig cmdlet output{prefix}_ ContentFilterConfig.txt
Get-ContentFilterPhrase cmdlet output{prefix}_ ContentFilterPhrase.txt
Get-IPBlockListConfig cmdlet output{prefix}_ IPBlockListConfig.txt
Get-IPBlockListEntry cmdlet output{prefix}_ IPBlockListEntry.txt
Get-IPBlockListProvidersConfig cmdlet output{prefix}_ IPBlockListProvidersConfig.txt
Get-IPBlockListProvider cmdlet output{prefix}_ IPBlockListProvider.txt
Get-IPAllowListConfig cmdlet output{prefix}_ IPAllowListConfig.txt
Get-IPAllowListEntry cmdlet output{prefix}_ IPAllowListEntry.txt
Get-IPAllowListProvidersConfig cmdlet output{prefix}_ IPAllowListProvidersConfig.txt
Get-IPAllowListProvider cmdlet output{prefix}_ IPAllowListProvider.txt
Get-SenderIdConfig cmdlet output{prefix}_ SenderIdConfig.txt
Get-SenderReputationConfig cmdlet output{prefix}_ SenderReputationConfig.txt
Get-SenderFilterConfig cmdlet output{prefix}_ SenderFilterConfig.txt
Get-RecipientFilterConfig cmdlet output{prefix}_ RecipientFilterConfig.txt
Get-AntispamUpdates cmdlet output{prefix}_ AntispamUpdates.txt

Exchange Hub Transport Server Role
DescriptionFile Name
Get-ForeignConnector cmdlet output{prefix}_ForeignConnector.txt
Get-RoutingGroupConnector cmdlet output{prefix}_RoutingGroupConnector.txt
Get-JournalRule cmdlet output{prefix}_JournalRule.txt
Get-IRMConfiguration cmdlet output{prefix}_IRMConfiguration.txt

Exchange Edge Server Role
DescriptionFile Name
Get-AddressRewriteEntry cmdlet output{prefix}_AddressRewriteEntry.txt
Get-AttachmentFilterListConfig cmdlet output{prefix}_AttachmentFilterListConfig.txt
Get-AttachmentFilterEntry cmdlet output{prefix}_AttachmentFilterEntry.txt

Exchange Mailbox Server Role
DescriptionFile Name
Get-MailboxServer cmdlet output{prefix}_MailboxServer*.txt
Get-ClusteredMailboxServerStatus cmdlet output{prefix}_ClusteredMailboxServerStatus*.txt
Get-MailboxDatabaseCopyStatus cmdlet output{prefix}_MailboxDatabaseCopyStatus*.txt
Get-StoreUsageStatistics cmdlet output{prefix}_StoreUsageStatistics*.txt
Get-DatabaseAvailabilityGroup cmdlet output{prefix}_DAG_{databaseavailabitlitygroupname}*.txt
Get-DatabaseAvailabilityGroupNetwork cmdlet output{prefix}_DAGNetworks*.txt
Get-StorageGroup cmdlet output{prefix}{SG}{storagegroupname}_*.txt
Inventory of files in LogFolderPath for each Storage Group{prefix}{SG}{storagegroupname} _LogFolderPath*.txt
Inventory of files in SystemFolderPath for each Storage Group{prefix}{SG}{storagegroupname} _SystemFolderPath*.txt
Get-MailboxDatabase cmdlet output{prefix}{SG}{storagegroupname}{DBMb}{mailboxdatabasename}_*.txt
Inventory of files in EDBFilePath for each Mailbox Database{prefix}{SG}{storagegroupname}{DBMb} {mailboxdatabasename} _EDBFilePath*.txt
Inventory of files in LogFolderPath for each Mailbox Database{prefix}{DBMb}{mailboxdatabasename} _LogFolderPath*.txt
Get-PublicFolderDatabase cmdlet output{prefix}{SG}{storagegroupname}{DBPf} {publicfolderdatabasename}_*.txt
Inventory of files in EDBFilePath for each Public Folder database{prefix}{SG}{storagegroupname}{DBPf} {publicfolderdatabasename}_ EDBFilePath*.txt
Inventory of files in LogFolderPath for each Public Folder Database{prefix}{DBPf}{publicfolderdatabasename} _LogFolderPath*.txt
Inventory of Public Folders under \NON_IPM_SUBTREE path (system folders) for each Public Folder Database{prefix}{SG}{storagegroupname}{DBPf} {publicfolderdatabasename}_NON_IPM_SUBTREE*.txt
Inventory of files in LogFolderPath for each Public Folder Database{prefix}{DBMb}{publicfolderdatabasename} _LogFolderPath*.txt
Properties of the server InformationStore object from Active Directory{prefix}_InformationStore_ADSIProperties*.txt
Inventory of files, if any, in MSExchangeIS Working Directory{prefix}_MSExchangeIS_WorkingDirectory*.txt
Copy of function call log(s) from Exchange Logging directoryExchangeStoreFCL.cab

Exchange Unified Messaging Server Role
DescriptionFile Name
Get-UMServer cmdlet output{prefix}_UMServer.txt
Get-UMDialPlan cmdlet output{prefix}_UMDialPlan.txt
Get-UMIPGateway cmdlet output{prefix}_UMIPGateway.txt
Get-UMHuntGroup cmdlet output{prefix}_UMHuntGroup.txt
Get-UMMailboxPolicy cmdlet output{prefix}_UMMailboxPolicy.txt
Get-UMVirtualDirectory cmdlet output{prefix}_UMVirtualDirectory.txt
Get-UMAutoAttendant cmdlet output{prefix}_UMAutoAttendant.txt
Get-UMDialPlan, for each Diailplan, ConfiguredInCountryOrRegionGroups{prefix}_UMDialPlan_{DialPlanName} _CountryOrRegionGroups.txt
Get-UMDialPlan, for each Diailplan, DialPlanInternationalGroups{prefix}_UMDialPlan_{DialPlanName} _DialPlanInternationalGroups.txt
Get-UMAutoAttendant, for each UMAutoAttendant, BusinessHoursKeyMapping{prefix}_UMAutoAttendant_{UMAutoAttendantName} _BusinessHoursKeyMapping.txt
Get-UMAutoAttendant, for each UMAutoAttendant, AfterHoursKeyMapping{prefix}_UMAutoAttendant_{UMAutoAttendantName} _AfterHoursKeyMapping.txt
Get-UMServer cmdlet output{prefix}_UMServer.txt

Exchange Transporter Suite
DescriptionFile Name
Get-DominoFreeBusyConnector cmdlet output{prefix}_DominoFreeBusyConnector.txt
Get-DominoDirectoryConnector cmdlet output{prefix}_DominoDirectoryConnector.txt
Copy of notes.ini file{prefix}_Notes.ini
Output if notes.ini file should exist but not present{prefix}_Missing_Notes.ini

Event Logs
DescriptionFile Name
Event Log � Application � text, csv and evt/evtx formats{prefix}_evt_Application.*
Event Log � System � text, csv, and evt/evtx formats{prefix}_evt_System.*
Event Logs � PowerShell � text, csv and evt/evtx formats{prefix}_evt_*PowerShell*.*
Event Logs � Exchange* � text, csv and evt/evtx formats{prefix}_evt_*Exchange*.*

File Version Information
DescriptionFile Name
File version information from Exchange\*.exe, *.dll{prefix}_sym_Exchange_EXE_DLL.*
File version information from %windir%\cluster\*.*{prefix}_sym_Cluster.*
File version information from %windir%\system32\inetsrv\*.exe, *.dll{prefix}_sym_InetSrv_EXE_DLL.*
File version information from %windir%\system32\drivers\*.*{prefix}_sym_Drivers.*
File version information from {Program Files}\Microsoft iSNS Server\*.* and %windir%\system32\iscsi*.*{prefix}_sym_MS_Iscsi.*
File version information from all drivers currently running on machine{prefix}_sym_RunningDrivers.*
File version information from all processes currently running on machine{prefix}_sym_Process.*

Registry Keys and Values
DescriptionFile Name
HKLM\Software\Microsoft\Windows NT\CurrentVersion
HKLM\Software\Microsoft\Windows\CurrentVersion
{prefix}_reg_CurrentVersion.TXT
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall{prefix}_reg_Uninstall.TXT
HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions{prefix}_reg_ProductOptions.TXT
HKLM\System\MountedDevices{prefix}_reg_MountedDevices.*
HKLM\System\CurrentControlSet\Control\CrashControl
HKLM\System\CurrentControlSet\Control\Session Manager
HKLM\System\CurrentControlSet\Control\Session Manager\Memory Management
HKLM\Software\Microsoft\Windows NT\CurrentVersion\AeDebug
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKLM\Software\Microsoft\Windows\Windows Error Reporting
HKLM\Software\Policies\Microsoft\Windows\Windows Error Reporting
{prefix}_reg_Recovery.TXT
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
HKCU\Software\Microsoft\Windows\CurrentVersion\Runonce
HKCU\Software\Microsoft\Windows\CurrentVersion\RunonceEx
HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices
HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
HKLM\ Software\Microsoft\Windows\CurrentVersion\Run
HKLM\Software\Microsoft\Windows\CurrentVersion\Runonce
HKLM\Software\Microsoft\Windows\CurrentVersion\RunonceEx
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
HKLM\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Load
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows\Run
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\UserInit
{prefix}_reg_Startup.TXT
HKLM\SYSTEM\CurrentControlSet\Control\Print{prefix}_reg_Print.hiv
HKCU\Software\Policies
HKLM\Software\Policies
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies
{prefix}_reg_Policies.txt
HKLM\SYSTEM\CurrentControlSet\Control\TimeZoneInformation
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones
{prefix}_reg_TimeZone.txt
HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server Web Access
HKLM\SYSTEM\CurrentControlSet\Services\TermService
HKLM\SYSTEM\CurrentControlSet\Services\TermDD
{prefix}_reg_TermServices.txt
HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer
HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation
HKLM\SYSTEM\CurrentControlSet\Services\MRxSmb
HKLM\SYSTEM\CurrentControlSet\Services\SMB
HKLM\SYSTEM\CurrentControlSet\Services\MRxSmb10
HKLM\SYSTEM\CurrentControlSet\Services\MRxSmb20
{prefix}_reg_SMB.txt
HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters{prefix}_reg_TCPIPParameters
HKLM\SYSTEM\CurrentControlSet\Services\VSS{prefix}_reg_VSS.TXT
HKLM\SYSTEM\CurrentControlSet\Services\iScsiPrt
HKLM\SOFTWARE\Microsoft\iSCSI Target
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\iSCSI
{prefix}_reg_iSCSI.TXT
HKLM\System\CurrentControlSet\Control\MPDev
HKLM\System\CurrentControlSet\Control\iSCSIPrt
HKLM\System\CurrentControlSet\Services\MSiSCSI
HKLM\System\CurrentControlSet\Services\MSDsm
HKLM\System\CurrentControlSet\Services\MPIO
HKLM\System\CurrentControlSet\Control\Class\{4d36e97b-e325-11ce-bfc1-08002be10318}
HKLM\System\CurrentControlSet\Services\Tcpip
{prefix}_reg_Storage.TXT
HKLM\SYSTEM\CurrentControlSet\Enum{prefix}_reg_Enum.TXT

Networking Information
DescriptionFile Name
Output from the netdiag.exe utility{prefix}_netdiag.txt
DNS client information from ipconfig displaydns{prefix}_DnsClient-DnsCache.TXT
DNS server information from dnscmd /info{prefix}_DnsServer-DnsCmd.TXT
Firewall information from netsh firewall(prefix}_Firewall-Netsh-Fw.TXT
Ipsec information from netsh ipsec{prefix}_Ipsec-Netsh.TXT
Network configuration information from netsh dump{prefix}_Netsh-Dump.TXT
Basic IP networking configuration information, such as Tcp/ip registry key, ipconfig, netstat, nbtstat and netsh output{prefix}_TcpIp-Info.txt
TCPIP offload and configuration information, such as Tcp/ip parameters registry key, netstat, and netsh output{prefix}_TCPIP-Info-OFFLOAD.TXT
Netsh information for IPv4{prefix}_TCPIP-Netsh-IPv4.TXT
Netsh information for IPv6{prefix}_TCPIP-Netsh-IPv6.TXT
Netsh information for TCP global and chimney{prefix}_TCPIP-Netsh-TCP.TXT

Active Directory and Policy Information
DescriptionFile Name
Resultant Set of Policy (RSoP) information via gpresult.exe{prefix}_GPResult.*
Security templates currently cached on the system{prefix}_AppliedSecTempl.txt
Report of user rights and privileges on the local machine{prefix}_USERRIGHTS.TXT
FSMO role owner information via netdom{prefix}_netdomfsmo.txt
Output from DCDiag.exe diagnostic utility{prefix}_dcdiag.txt
Output from RepAdmin.exe diagnostic utility{prefix}_repadmin.txt
Output from Group Policy Consistency Checker (GPOTool.exe) {prefix}_gpotool.txt

Cluster Information
DescriptionFile Name
Cluster Configuration information{prefix}_CLUSTER_MPS_INFORMATION.TXT
File version information from %windir%\cluster\*.*{prefix}_sym_Cluster.* or {prefix}_CLUSTER_DIR.TXT
Cluster resource properties{prefix}_CLUSTER_RES_PROPERTIES_ALL.TXT
List of cluster resources{prefix}_CLUSTER_RESOURCES.TXT
Files from %windir%\cluster\*chkdsk*{prefix}_*chkdsk*
Copy of cluster configuration log file ClCfgSrv.log{prefix}_ClCfgSrv.log
Copy of cluster.log file{prefix}_Cluster.log
The cluster log in xml format{prefix}_clusterlog.xml
Copy of the files in %windir%\cluster\reports{prefix}_ClusterReports_*.*
Copy of the file %windir%\cluster\ClusPrepCfg.xml used to customize Validation{prefix}_ClusPrepCfg.xml
HKLM\System\CurrentControlSet\Services\clusdisk{prefix}_Clusdisk.txt
HKLM\System\CurrentControlSet\Services\clussvc{prefix}_ClussvcRegistry.txt
HKEY_LOCAL_MACHINE\Cluster in .txt and .hiv formats{prefix}_ClusterRegistry.*

Hotfixes and Updates
DescriptionFile Name
Installed updates and hotfixes{prefix}_Hotfixes.*
WindowsUpdate.log file located in windows folder{prefix}_WindowsUpdate.log

Storage / Disk Information
DescriptionFile Name
iSCSI related information generated by iscsicli.exe utility{prefix}_ISCSI*.txt
Fibre Channel Information via FCInfo.exe utility{prefix}_FCInfo.txt
Volume Shadow Copy Service (VSS) information{prefix}_VSSAdmin.txt

Other
DescriptionFile Name
System information output via msinfo32.exe{prefix}_msinfo.*
System information (MSInfo32 equivalent) collected via WMIDiagnostic_Results.html
Copy of ServerManager.log from Windows\Logs folder{prefix}_ServerManager.log
Process and threads information via pstat.exe{prefix}_PSTAT.txt
Operating system Boot options file (Boot.ini){prefix}_BOOT.INI
Output from Driver Verifier Manager (verifier.exe) utility{prefix}_Verifier.txt
Report of all tasks scheduled on the local computer{prefix}_schtasks.*

Additional Information

In additional to the files collected and listed above, this troubleshooter can detect one or more of the following situations:
  • Machine is running under a hardware virtualization environment
  • Presence of machine memory dumps in the past 30 days
  • Presence of user mode memory dumps in the past 30 days
  • Configuration or services that could prevent a memory dump from being generated
  • Unexpected Shutdown Event Logs in the System Log from past 30 days
  • Machine Memory Dump related event logs in the System log from past 30 days
  • Processes with a high number of handles
  • A low number of System Page Table entries (PTEs)
  • Low available memory condition
  • Any Kernel pool memory tag using more than 60% of all allocated memory
  • Non-Supported version of a Service Pack
  • Non-Supported operating system version

References

KB 926079 - Frequently asked questions about the Microsoft Support Diagnostic Tool (MSDT)
http://support.microsoft.com/kb/926079

↑ Back to the top


Keywords: KB2172960, kbsurveynew

↑ Back to the top

Article Info
Article ID : 2172960
Revision : 6
Created on : 9/12/2013
Published on : 9/12/2013
Exists online : False
Views : 736