Topic Last Modified: 2010-09-08

The Microsoft Exchange Server 2010 Management Pack for System Center Operations Manager monitors the Windows Application log on computers running Exchange 2010 and generates this alert when the events specified in the following Details table are logged.

To learn more about this alert, in Operations Manager, do one or more of the following:

From the Operations Console, double-click this alert, and then click the General tab. Review the description of the alert that includes the variables specific to your environment.
From the Operations Console, double-click this alert, and then click the Alert Context tab. Review the logged events that meet the criteria of this Operations Manager alert.

Details

Product Name	Exchange
Product Version	14.0 (Exchange 2010)
Event ID	1004
Event Source	MSExchange Store Driver
Alert Type	Warning
Rule Path	Microsoft Exchange Server/Exchange 2010/Hub Transport/Store Driver
Rule Name	Unable to load the performance counters for the MSExchange Store Driver Performance object.

Explanation

This Error event indicates that the specified performance counters for the Microsoft Exchange Store Driver were unable to load.

This error may occur if the registry key that controls the specified performance counters is missing, is corrupted, or has insufficient permissions assigned to it.

The Microsoft Exchange Mail Submission service performance counters are located at:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSExchange Store Driver\Performance

By default, the following permissions are assigned to this registry key:

Administrator: Full Control
Administrators: Full Control
Authenticated Users: Read
Creator Owner: Full Control
Domain Admins: Full Control
Enterprise Admins: Full Control
Exchange Organization Administrators: Full Control
System: Full Control
The server's Computer Account: Read
Exchange Servers: Read
Exchange View-Only Administrators: Read
Server Operators: Special permissions: All permissions except: Full Control, Create Link, Write DAC or Write Owner.

User Action

To resolve this error, do one or more of the following:

Restart the Microsoft Exchange Transport Service.
Unload and reload the Microsoft Exchange Store Driver performance counters. To do this, follow these steps:
1. At a command prompt on the Hub Transport server, run the following command:
  
  Unlodctr "MSExchange Store Driver"
  
  The successful completion of this step should generate the following Application event log entry:
  
  Source: LoadPerf
  
  Event ID: 1001
  
  Description: Performance counters for the MSExchange Store Driver (MSExchange Store Driver) service were removed successfully. The Record Data contains the new values assigned of the system Last Counter and Last Help registry entries.
2. Run the following command:
  
  Lodctr "C:\Program Files\Microsoft\Exchange Server\Setup\Perf\StoreDriverPerfCounters.ini"
  
  The successful completion of this step should generate the following Application event log entry:
  
  Source: LoadPerf
  
  Event ID: 1000
  
  Description: Performance counters for the MSExchange Store Driver (MSExchange Store Driver) service were loaded successfully. The Record Data contains the new index values assigned to this service.
3. Restart the server for the changes to take effect.
Verify that the registry key for the MSExchange Store Driver performance counters exists and has the correct permissions assigned to it.

For More Information

If you are not already doing so, consider running the Exchange tools created to help you analyze and troubleshoot your Exchange environment. These tools can help make sure that your configuration aligns with Microsoft best practices. They can also help you identify and resolve performance issues, improve mail flow, and better manage disaster recovery scenarios. To run these tools, go to the Toolbox node of the Exchange Management Console. To learn more about these tools, see Managing Tools in the Toolbox.