MSExchangeTransport 7004

上一次修改主题： 2011-07-11

本文对特定 Exchange 事件进行了说明并提供了可能的解决方案。如果您在此处未找到所需内容，请尝试在 Exchange 2010 帮助中进行搜索。

Details

Explanation

This event indicates that an issue may exist that prevents the Microsoft Exchange Transport service (MSExchangeTransport.exe) from starting in a timely manner. You may experience this issue in one of the following scenarios.

Note   These scenarios are not listed in their order of probability.

• The SenderReputation database takes a long time to replay log files for a large information store database. This may indicate that the SenderReputation database is corrupted. In this scenario, MSExchangeTransport Event ID 14001 may be logged every five minutes. Additionally, a SenderReputation database event for successfully replaying log files is never displayed.

• You apply an Exchange Update Rollup package to a computer on which the local computer account does not have Internet access. The binary files in the Update Rollup packages are digitally signed. This requires the computer to perform certificate validation checks to verify the packages. If the local computer account does not have direct access to the Internet, the certificate verification check must time-out. This issue may occur when the computer's default gateway does not allow for Internet access or when the computer uses an authenticating proxy server for Internet access.

• An e-mail client that does not recognize the global message size restrictions is used. This may include earlier versions of Microsoft Outlook such as Microsoft Outlook 2003 SP1 and earlier versions. In this scenario, an e-mail client that does not recognize the global message size restrictions could submit excessively large messages for processing.

• Exchange is installed on a domain controller.

• Exchange is installed on a computer that has a slow disk subsystem.

• An outdated version of an antivirus software is installed on the Exchange server.

The Microsoft Exchange Transport service controls the sending and receiving of messages in Microsoft Exchange Server 2010. When the service does not start in a timely manner, messages may become queued on the server. For more information, see Transport Architecture.

User Action

To resolve this problem, do one or more of the following:

• 有关相关事件，请查看 Exchange 2010 服务器上的应用程序日志和系统日志。例如，在此事件之前和之后发生的事件可能会提供有关导致出现此错误的根本原因的详细信息。

• Review the Operations Console in Operations Manager for detailed information about the cause of this problem. For more information, see the "Introduction" section in this article.

• Examine the System log to determine whether the server is out of hard disk space or whether a problem affects one or more hard disk drives.

• You may have to increase diagnostics logging to log the component startup sequence during the startup process of the Microsoft Exchange Transport service. To increase diagnostics logging for the Transport component, follow these steps:

  1. In Registry Editor, locate the following registry subkey:

     HKEY_LOCAL_MACHINE\SYSTEM\Current Control set\Services\MSExchangeTransport\diagnostics

  2. Set the following REG_DWORD values to 7:

     • Smtpreceive

     • Smtpsend

     • DSN

     • Components

     • Remote Delivery

     • Categorizer

• Temporarily disable any antivirus software to determine whether this improves the MSExchangeTransport startup time. If the startup time is improved, contact the antivirus vendor for an update of the program.

• Move the contents of the SenderReputation folder to a new location to determine whether the issue is resolved. To do this, follow these steps:

  1. Stop the Microsoft Exchange Transport service.

  2. Locate the SenderReputation folder. By default, this folder has the following path:

     %ProgramFiles%\Microsoft\Exchange Server\V14\TransportRoles\data\SenderReputation

  3. Move the contents of the folder to a new location, and then start the Microsoft Exchange Transport service.

• If Exchange is installed on a domain controller, review the information in Microsoft Knowledge Base article 940845, Services for Exchange Server 2007 or Exchange Server 2010 cannot start automatically after you install Exchange Server 2007 and Exchange Server 2010 on a global catalog server.

• Allow the local computer to have account access to the Internet. For more information, see Microsoft Knowledge Base article 941990, A digitally signed .NET Framework 2.0 Windows application may start very slowly, or a Windows service may time out during startup.

• If you cannot allow the computer account to have Internet access, try to increase the Windows services time-out value as a workaround. To do this, follow these steps:

  1. In Registry Editor, locate and then click the following registry subkey:

     HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control

  2. On the Edit menu, point to New, and then click DWORD (32-bit) Value.

  3. In the New Value #1 box, type ServicesPipeTimeout, and then press ENTER.

  4. Right-click ServicesPipeTimeout, and then click Modify.

  5. In the Value data box, enter the time-out value in milliseconds, and then click OK. For example, for a service time-out of 120 seconds, type 120000.

  6. Exit Registry Editor, and then restart the computer.

     Note   To enable Service Control Manager to use the modified time-out value, you must restart the computer.

• If you cannot allow the computer to have account Internet access, you can also try to modify the registry to reduce the certificate lookup time-out values as a workaround. To do this, specify the indicated DWORD values for the following registry subkeys:

  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType

  0\CertDllCreateCertificateChainEngine\Config

  Value name: ChainUrlRetrievalTimeoutMilliseconds

  Value type: REG_DWORD

  Value data: If this value is 0 (zero) or, if this value does not exist, a default value of 15000 milliseconds is used. To reduce the time-out, set this value to 5000.

  Value name: ChainRevAccumulativeUrlRetrievalTimeoutMilliseconds

  Value type: REG_DWORD

  Value data: If this value is 0 (zero) or, if this value does not exist, a default value of 20000 milliseconds is used. To reduce the time-out, set this value to 7500.

• To determine whether the issue is caused by the processing of excessively large e-mail messages, follow these steps:

  1. Locate the mailbox or mailboxes from which the messages originate. In this scenario, the messages are being submitted. To locate the mailbox or mailboxes, use the Process Tracking log tool (Processtrackinglog.vbs).

     For more information about how to obtain and run the Process Tracking log tool, see Exchange Server 2007 Process Tracking Log Tool and also see the Exchange Server Team Blog article, Process Tracking Log tool for Exchange Server 2007.

     每个博客的内容及其 URL 如有更改，恕不另行通知。每个博客中的内容均“原样”提供，既不承担任何担保，也未赋予任何权利。对包含的脚本示例或代码的使用受 Microsoft 使用条款中指定的条款的约束。

     Look for entries that resemble the following:

     User1@contoso.com <mailto:User1@contoso.com> submitted a message multiple times that resulted in NDR - Size is 1303445440 bytes and sender is <> (Postmaster for NDR)

  2. Disconnect the mailbox or mailboxes that are stuck in submission, and then determine whether the Microsoft Exchange Transport service starts successfully.

• 使用自助支持选项、协助支持选项及其他资源来解决您的问题。您可以从 Exchange Server 解决方案中心访问这些资源。在该页中，单击导航窗格中的“自助支持选项”可使用自助服务选项。自助服务选项包括搜索 Microsoft 知识库、在 Exchange Server 论坛上发布问题及其他方法。或者，您可以在导航窗格中单击“协助支持选项”来联系 Microsoft 支持专业人员。由于您的组织可能已有直接与 Microsoft 产品支持服务联系的特定流程，因此，请您务必先查看您组织的准则。

For More Information

如果您尚未执行此操作，请考虑运行 Exchange 工具，已创建这些工具以帮助您分析 Exchange 环境并对其进行疑难解答。这些工具可帮助确保您的配置与 Microsoft 最佳实践保持一致。它们还可以帮助您识别和解决性能问题，并改进邮件流。若要运行这些工具，请转到 Exchange 管理控制台的“工具箱”节点。若要了解有关这些工具的详细信息，请参阅管理工具箱中的工具。