Was this page helpful?
Additional feedback?
1500 characters remaining
Export (0) Print
Expand All
Collapse the table of content
Expand the table of content
Expand Minimize

A service terminated unexpectedly in the last 24 hours

[This topic is intended to address a specific issue called out by the Exchange Server Analyzer Tool. You should apply it only to systems that have had the Exchange Server Analyzer Tool run against them and are experiencing that specific issue. The Exchange Server Analyzer Tool, available as a free download, remotely collects configuration data from each server in the topology and automatically analyzes the data. The resulting report details important configuration issues, potential problems, and nondefault product settings. By following these recommendations, you can achieve better performance, scalability, reliability, and uptime. For more information about the tool or to download the latest versions, see "Microsoft Exchange Analyzers" at http://go.microsoft.com/fwlink/?linkid=34707.]  

Topic Last Modified: 2007-02-14

The Microsoft Exchange Analyzer Tool queries the Win32_NTLogEvent Microsoft Windows Management Instrumentation (WMI) class to determine whether an Event 7031 warning has been logged for the Service Control Manager source within the last 24 hours.

An Event 7031 warning means the specified service could not continue. The service is configured to report the number of failures and, after a specific number of failures are reported, the Service Control Manager will perform the recovery action configured for the specified service.

If the Exchange Analyzer finds that one or more of these events has been logged within the last 24 hours, the Exchange Analyzer displays an informational message.

This issue can be caused by various problems including, but not limited to, the following which are the most common:

  • A corrupted message being processed.

  • Antivirus application configuration issues.

To address this issue:

  • Follow the guidance in Microsoft Knowledge Base article 286350, "How to use ADPlus to troubleshoot "hangs" and "crashes"" (http://go.microsoft.com/fwlink/?linkid=3052&kbid=286350) to isolate the cause of a process becoming unresponsive (hang) or stopping unexpectedly (crash).

  • Obtain the latest service pack for Microsoft Windows 2000.

  • Obtain the latest service pack for Microsoft Exchange Server.

  • Contact the antivirus application vendor to obtain the latest updates and configuration information.

For more information about Event 7031 warning details, see the "Events and Errors Message Center: Event Details" (http://go.microsoft.com/fwlink/?LinkId=83114)

For more information about how to obtain the latest service pack for Windows 2000 Server, see Microsoft Knowledge Base article 260910, "How to obtain the latest Windows 2000 service pack" (http://go.microsoft.com/fwlink/?linkid=3052&kbid=260910)

For more information about how to obtain the latest service pack for Exchange 2000 Server, see Microsoft Knowledge Base article 301378, "How to obtain the latest Exchange 2000 Server service pack" (http://go.microsoft.com/fwlink/?linkid=3052&kbid=301378).

For more information about how to obtain the latest service pack for Exchange Server 2003, see "Why Try Service Pack 2 for Exchange Server 2003?" (http://go.microsoft.com/fwlink/?LinkId=52073)

For more information about how to use antivirus software with Exchange Server, see the following Microsoft Knowledge Base articles:

For a list of third-party antivirus software that is available for Exchange Server, see the Exchange Server Partners: Antivirus Web site (http://go.microsoft.com/fwlink/?linkid=16226).

Was this page helpful?
(1500 characters remaining)
Thank you for your feedback

Community Additions

© 2015 Microsoft