[SDP 3][d04d6306-88c6-440a-abba-ec841fc3ea49] Microsoft Exchange Server Diagnostic

This article describes information that the Microsoft Exchange Server Diagnostic may collect from your computer. This article also describes the names of the output files.  

Note The information that is collected depends on the installed roles, features, and configuration.

Information that is collected

Exchange Server and organization baseline

Exchange Server IIS information

Exchange Mailbox Server role

Failover cluster information

General performance information

Event log information

General registry data collection

File version information (Chksym)

In addition to collecting the information that is described earlier, this diagnostic package can detect one or more of the following symptoms:

• Check whether cluster groups are in Offline or Failed state
• Check whether the state of one or more cluster nodes is down or paused
• Check whether Cluster service is not running or offline
• Check for Advanced Format Drives
• Check for Native 4K drives on the system
• Check whether KB 982018 is not installed or the files are outdated
• Check for Active Directory Domain Services (AD DS) replication failures
• Check AD DS for lingering objects
• Check for AD DS replication errors
• Check for potentially risky audit failure settings (CrashOnAuditFail)
• Check for a possible Stop error caused by audit failure
• Check for High CPU usage by Local Security Authority Subsystem Service (LSASS)
• Check whether the SYSVOL and NETLOGON shares are missing on domain controller
• Check for domain controller that is missing Rid Set reference attributes in AD DS
• Check whether the domain controller points to itself for Domain Name System (DNS) exclusively
• Check for USN Rollback
• Check state of Intersite Messaging service.
• Check whether the DFSR UpdateWorkerThreadCount setting is lower than 64
• Check whether the IPv6 protocol was disabled on a domain controller
• Check for Win32time configuration for time skew
• Check for MaxConcurrentApi NTLM bottlenecks or delays
• Check for Certificates that have Weak RSA Keys
• Check whether the Cluster Name Object (CNO) exists and it is enabled in AD DS
• Cluster Shared Volumes issues
• Check for third-party virtualization solution from Xsigo
• Check for LmCompatibilityLevel setting
• Check firewall rules on cluster nodes that have IPv6 enabled
• Check whether the FailoverCluster Crypto resource exists
• Check for FailoverCluster missing dependent resources
• Check whether PMTU was disabled on computer
• Check for unexpected TCP/IP registry settings (KB 967224)
• Check whether Opportunistic Locking is disabled
• Check for too many 6to4 adapters, which may result in decreased startup and logon performance
• Check whether the Tunnel.sys driver is missing a Windows Server 2008 R2 Server Core installation option
• Check whether the InfoCacheLevel setting is configured to enable caching for all files and folders
• Check for processes that use many handles
• Check for possible Kernel Memory performance-related problem
• Check for low System PTEs
• Check for low Virtual Memory
• Check whether Appsense EM 8.1 is installed on the computer.
• Check for large number of Inactive Terminal Services ports
• Check whether the Registry Size Limit setting is present on the system
• Check the PoolUsageMaximum Setting
• Check for shared PST files
• Check for McAfee Endpoint Encryption version, which may cause slow startup issues
• Check for terminal services licensing binary versions for Windows Server 2003
• Check for a specific version of SEP that may cause handle leak
• Check RPC settings that allow for unauthenticated sessions
• Check for Performance counters to determine whether there is an issue with NTFS metafile cache memory consumption
• Check for the ProcessorAffinityMask setting for multiprocessor Windows Server 2003 computers
• Check the ClearPageFileAtShutdown setting, which may cause slow shutdown
• Check for the NMICrashDump setting on HP ProLiant DL385 G5
• Check the state of the Search Service when Lenovo Rapid Boot Software is installed
• Check pool memory that is allocated for "D2d" tag
• Check pool memory that is allocated for "RxM4" and "SeTI" tag
• Check pool memory that is allocated for "SslC" tag
• Check pool memory that is allocated for "Toke" tag on terminal services
• Check for older versions of MPIO.SYS
• Check for Broadcom Advanced Server Program driver information
• Check for Aladdin Knowledge Systems Device Drivers
• Check the state of the Application Compatibility Engine
• Check pool memory usage from Citrix XTE process
• Check whether the Users group has permissions under HKCR\CLSID
• Check HeapDecommitFreeBlockThreshold registry value
• Check whether the Wsftpsi.dll file causes Windows Explorer crashes
• Check the Netapi32.dll file version
• Check for Symantec Endpoint Protection MR1/MR2
• Check for Symantec Intrusion Protection System (IPS) driver
• Check whether the EMC Replistor Software is installed on the computer and whether the hotfix that is described in article KB 975759 is not installed
• Check for unsupported versions of Windows Vista or Windows Server 2008
• Check whether DEP and PAE are enabled on a 32-bit system
• Check whether Ultimaco Safeware disk encryption is installed and the current version
• Check whether the Telnet service is running under System account
• Check for known issue with BIOS version of PowerEdge R910, R810, and M910
• Check the value of "SystemPages" in Memory Management registry key

References

For more information about the Microsoft Automated Troubleshooting Services and about the Support Diagnostics Platform, please go to the following Microsoft Knowledge Base article:

2598970 Information about Microsoft Automated Troubleshooting Services and Support Diagnostic Platform