The Microsoft Exchange Server 2010 Management Pack for System Center Operations Manager includes a performance data collection engine that is used to query performance counter objects on computers running Exchange 2010. For this Operations Manager rule, data is collected by using the performance counter specified in the Details table.

To review the value of the performance counter that generated this alert, in Operations Manager, double-click this alert, and then click the General tab. Review the description of the alert that includes the variables specific to your environment.

This message indicates that a mailbox in the database has been quarantined. By default, if a mailbox is identified as causing a crash or a deadlock three times within two hours, the Exchange store tags it as quarantined in the registry.

After the cause of the poison mailbox is determined and corrected, the registry key for the quarantined mailbox should be reset manually by deleting it. However, if this manual step is forgotten, the Exchange store automatically resets any quarantined mailboxes six hours after the quarantined flag is set. If the issue has not been debugged and fixed within that time period, this may lead to another set of crashes before the mailbox is quarantined again.

Note:
The database hosting the mailbox must be remounted or the Exchange store must be restarted for the quarantined mailbox to be reset.

If you are not already doing so, consider running the Exchange tools created to help you analyze and troubleshoot your Exchange environment. These tools can help make sure that your configuration aligns with Microsoft best practices. They can also help you identify and resolve performance issues, improve mail flow, and better manage disaster recovery scenarios. To run these tools, go to the Toolbox node of the Exchange Management Console. To learn more about these tools, see Managing Tools in the Toolbox.