Event Id 9411
You should have two string values in there, called MTA database path and MTA Run Directory, either of which should point you toward the disk in question. You can change the behavior by using the Redistribution Server option that is available underGeneral Options in the Forefront Server Security Administrator Console.You can connect directly to the passive node of a CCR cluster That should resolve the issue, again test this by rebuilding the OAB and checking the event viewer, but if itdoesn'twork, you should restart your Exchange server which normally resolves the issue. Friday, January 04, 2008 5:24 PM Reply | Quote 0 Sign in to vote Thanks for the response, Andrew. http://www.microsoft.com/technet/support/ee/transform.aspx?ProdName=Exchange&ProdVer=6.0&EvtID=9411&EvtSrc=MSExchangeMTA&LCID=1033
Details Event ID: Source: We're sorry There is no additional information about this issue in the Error and Event Log Messages or Knowledge Base databases at this time. If the product or version you are looking for is not listed, you can use this search box to search TechNet, the Microsoft Knowledge Base, and TechNet Blogs for more information. The event continues to fill up our Application log. Wednesday, April 30, 2008 5:32 PM Reply | Quote 0 Sign in to vote Your settings may not be getting replicated
Help Desk » Inventory » Monitor » Community » Event Id9411SourceMSExchangeMTADescriptionThe MTA is terminating because the disk where MTADATA is located has less than 10MB of space, or an error occurred Windows 2000 Error code returned: 0 (non-zero indicates an error while checking for free space) [BASE IL TIMER 3] (16) Data formatted as » None This error is self-explanatory. Join the community Back I agree Powerful tools you need, all for free. In a CCR cluster system, the only Forefront service that runs on the passive nodes is the FSECCRservice.
The replication of Forefront data between the nodes starts again after the FSCcontroller service stops."Mac Friday, March 20, 2009 6:43 AM Reply | Quote 0 Sign in to vote Guys any Related Sites Exchange Server CommunityFind answers in Microsoft newsgroups, locate non-Microsoft communities for Exchange Server, join in chats, share best practices and tips with your peers, and get RSS feeds. FSECCR should instantly replicate a copy. https://social.technet.microsoft.com/Forums/en-US/a44bf247-da38-405c-adc3-e9832f772b9d/forefront-on-a-ccr-clustered-mailbox-server-and-event-id-9411?forum=exchangesvrsecuremessaginglegacy While the CMS was running on the secondary node, the event popped up on the primary node.
NT Error code returned: 0 (non-zero indicates an error while checking for free space) 2 Comments for event id 9411 from source MSExchangeMTA Subscribe Subscribe to EventID.Net now!Already a subscriber? I also rebooted the passive node, but that didn't help, either. Any other ideas? Aaron Friday, January 04, 2008 6:37 PM Reply | Quote 0 Sign in to A Day in The Life of an Exchange Guy Tuesday, 19 March 2013 Offline address book error 0X8004010F I had a helpdesk call sent to me from a frustrated helpdesk analyst For troubleshooting purpose I suggested to temporarily stop and disable the antivirus and verify the FSECCR replication on the passive node.
Go back and rebuild the OAB and go back to event viewer and look for event id 9107, in my case I got 9411 which is also ok. this contact form tasklist /s servername /FI "imagename eq fssaclient.exe" once you identify its running use taskkill /s servername /F /IM fssaclient.exe Only ever open the FSSA on your active node on the cluster Open up regedit and navigate down to "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet \Services\MSExchangeSA\Parameters. I figured out that the local antivirus scanning the ForeFront data path lockes the files. (in our case that is Sophos) An exclusions of the data path will solve the problem.
Thank you for searching on this message; your search helps us identify those areas for which we need to provide more information. The above solution I proposed worked forour environment. Powered by Blogger. have a peek here The OS is 2008 Comment: Subscribe Subscribe to EventID.Net now!Already a subscriber?
Microsoft Customer Support Microsoft Community Forums Resources for IT Professionals Sign in United States (English) Brasil (Português)Česká republika (Čeština)Deutschland (Deutsch)España (Español)France (Français)Indonesia (Bahasa)Italia (Italiano)România (Română)Türkiye (Türkçe)Россия (Русский)ישראל (עברית)المملكة العربية السعودية (العربية)ไทย About Advertising Privacy Terms Help Sitemap × Join millions of IT pros like you Log in to Spiceworks Reset community password Agree to Terms of Service Connect with Or Sign up Now add a DWORD with the following value name "OAL Post Full If Diff fails" and the value data of 1.
On the passive CCR node, every 15 minutes or so, we get the following warning events for Template.fdb, ScanJobs.fdb, FileScanners.fdb, Notifications.fdb, and Filterlists.fdb: --------------- Event Type: WarningEvent Source: FSECCRServiceEvent Category: CCR Service Event
I had the same problem just now. Now for the fix. Otherwise, you might want to contact Microsoft support. Enjoy View my complete profile Picture Window template.
By default, Forefront Security engines that are running on the passive nodes of a CCR cluster system are updated by an active node. You can try that to see if this event still occurs on the other node. Event ID: 9411 Event Source: FSECCRService Event Type: Error Event Description: Log Name:Application Source:FSECCRService Date:8/21/2009 2:57:54 PM Event ID:9411 Task Category: (9) Level: Warning Keywords:Classic User:N/A Computer:GLS1PRXCH22 Description: Microsoft Forefront Server Check This Out When you connect directly to a passive node, you use the Forefront Server Security Administrator on the passive node to access the quarantine information.
I then did the tick untick method and it's now working. If you choose to participate, the online survey will be presented to you when you leave the Technet Web site.Would you like to participate? Anybody found solution ??Mac Monday, March 30, 2009 7:19 AM Reply | Quote 0 Sign in to vote Any update here? I am having the same issue. The initial installation turned Saturday, September 04, 2010 1:25 PM Reply | Quote 0 Sign in to vote I did the same thing gerrymcp and it worked Thursday, October 03, 2013 3:21 PM Reply |
The FSECCRservice is responsible for the replication of data between the active node and a passive node. From the Support Center, you can also search the Microsoft Product Support Knowledge Base and contact Microsoft Product Support Services. Exchange Server TechCenterConnect to Exchange Server-related technical articles and other For example: Vista Application Error 1001. TechNet Products IT Resources Downloads Training Support Products Windows Windows Server System Center Browser Office Office 365 Exchange Server SQL Server NT Error code returned: 0 (non-zero indicates an error while checking for free space) 2 Comments for event id 9411 from source MSExchangeMTA Subscribe Subscribe to EventID.Net now!Already a subscriber?
Also try restarting the FSECCR services. until now i've a clean eventlog i'll keep u posted on my findings. at the moment I'm troubleshooting this issue at a cliënt location. Login Join Community Windows Events Ask Question Answer Questions My Profile ShortcutsDiscussion GroupsFeature RequestsHelp and SupportHow-tosIT Service ProvidersMy QuestionsApp CenterRatings and ReviewsRecent ActivityRecent PostsScript CenterSpiceListsSpiceworks BlogVendor PagesWindows Events Event ID 9411
After you close the Forefront Server Security Administrator Console, the Forefront services on the passive node stop, and the replication between the nodes resumes again.Also, replication of Forefront data between two replace servername with your server name ! Antivirus should not be stopped/disabled on production servers. You can use the links in the Support area to determine whether any additional information might be available elsewhere.