The performance counters for the Microsoft Exchange Mail Submission Service could not be loaded

 

Topic Last Modified: 2007-11-16

The Microsoft Exchange Server 2007 Management Pack for Operations Manager monitors the Windows Application log on computers that are running Exchange Server 2007 and generates this alert when the event or events specified in the following Details table are logged.

To learn more about this alert, if you are using Microsoft Operations Manager 2005, do one or more of the following:

  • From the Operator Console, select this alert, and then click the Properties tab. Review the description of the alert that includes the variables specific to your environment.

  • From the Operator Console, click the Events tab, and then double-click the event in the list for which you want to review the event description. Review the events that have been logged that meet the criteria of this Operations Manager alert.

To learn more about this alert, if you are using System Center Operations Manager 2007, do one or more of the following:

  • From the Operations Console, double-click this alert, and then click the General tab. Review the description of the alert that includes the variables specific to your environment.

  • From the Operations Console, double-click this alert, and then click the Alert Context tab. Review the events that have been logged that meet the criteria of this Operations Manager alert.

Details

Product Name

Exchange

Product Version

8.0 (Exchange Server 2007)

Event ID

1004

Event Source

MSExchangeMailSubmission

Alert Type

Critical Error

MOM Rule Path

Microsoft Exchange Server/Exchange 2007/Mailbox/Mail Submission

MOM Rule Name

The performance counters for the Microsoft Exchange Mail Submission Service could not be loaded. The associated performance object is named MSExchangeMailSubmission.

Explanation

This Error event indicates that the specified performance counters for the Microsoft Exchange Mail Submission service were unable to load.

This error may be caused by any of the following conditions:

  • One or more performance counters for the Microsoft Exchange Mail Submission service are enabled. However, the Microsoft Exchange Mail Submission service is stopped or in an unresponsive state.

  • The registry key that controls the specified performance counters is missing, corrupted, or has insufficient permissions assigned to it.

    The Microsoft Exchange Mail Submission service performance counters are located at: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSExchangeMailSubmission\Performance

    By default, the following permissions are assigned to this registry key:

    • Administrator: Full Control

    • Administrators: Full Control

    • Authenticated Users: Read

    • Creator Owner: Full Control

    • Domain Admins: Full Control

    • Enterprise Admins: Full Control

    • Exchange Organization Administrators: Full Control

    • System: Full Control

    • The server's Computer Account: Read

    • Exchange Servers: Read

    • Exchange View-Only Administrators: Read

    • Server Operators: Special permissions: All permissions except: Full Control, Create Link, Write DAC or Write Owner.

User Action

To resolve this error, do one or more of the following:

  • Restart the Microsoft Exchange Mail Submission service.

  • Unload and reload the Microsoft Exchange Mail Submission service performance counters. To do this, follow these steps:

    1. At a command prompt on the Hub Transport server, run the following command:

      Unlodctr MSExchangeMailSubmission

      The successful completion of this step should generate the following Application event log entry:

      Source: LoadPerf

      Event ID: 1001

      Description: Performance counters for the MSExchangeMailSubmission (Microsoft Exchange Mail Submission) service were removed successfully. The Record Data contains the new values assigned of the system Last Counter and Last Help registry entries.

    2. Run the following command:

      Lodctr "C:\Program Files\Microsoft\Exchange Server\Setup\Perf\MailSubmissionSvcPerfCounters.ini"

      The successful completion of this step should generate the following Application event log entry:

      Source: LoadPerf

      Event ID: 1000

      Description: Performance counters for the MSExchangeMailSubmission (Microsoft Exchange Mail Submission) service were loaded successfully. The Record Data contains the new index values assigned to this service.

    3. Restart the server for the changes to take effect.

  • Verify that the registry key for the Microsoft Exchange Mail Submission service performance counters exists and has the correct permissions assigned to it.

  • Remove the specified performance counter objects from the Microsoft Windows Server 2003 Performance console or the System Monitor snap-in.

For More Information

To search the Microsoft Knowledge Base articles based on criteria that generated this alert, visit the Search the Support Knowledge Base (KB) Web site.

To review Exchange 2007 event message articles that may not be represented by Exchange 2007 alerts, see the Events and Errors Message Center.

If you are not already doing so, consider running the tools that Microsoft Exchange offers to help administrators analyze and troubleshoot their Exchange environment. These tools can help you make sure that your configuration is in line with Microsoft best practices. They can also help you identify and resolve performance issues, improve mail flow, and better manage disaster recovery scenarios. Go to the Toolbox node of the Exchange Management Console to run these tools now. For more information about these tools, see Toolbox in the Exchange Server 2007 Help.