Friday, February 21, 2014

Mail not Synching on ActiveSync but Folders does



Issue

Recently faced the issue with one the user’s mailbox, unable to download mail items via ActiveSync on any device. The odd thing was that the folder structure would come down but no mail items would be synched. User said it was working fine until about a week previously.

Troubleshooting
As usual first checked Event Viewer in the Application logs and below event lead me from “MSExchangeIS Mailbox Store”:

Event ID: 10030
 A mismatch was detected between a view of a folder and the actual contents of the folder. The mismatched item was ignored.
Attempts may be made to rebuild the view, but if this message continues to persist for this mailbox, moving the mailbox to a different database may resolve the issue.
Database: DB1
Folder: [MBX1:Dinesh Singh][AllItems]
MsgHeader ID: 1110-1E6B08
Folder ID: 1110-3DA14B
View ID: 1110-3DA582
View Name: 1110-3DA14B +A-D-T301c
Document ID: 294529
Function: EcPopulateInitialMsgViewTable(Search)

Event ID: 10031
A folder view which previously experienced consistency issues has been deleted and will be rebuilt the next time it is needed.
Database: DB1
Folder: [MBX1:Dinesh Singh][AllItems]
MsgHeader ID: 1110-1E6B08
Folder ID: 1110-3DA14B
View ID: 1110-3DA582
View Name: 1110-3DA14B +A-D-T301c
Function: EcAgeOutOneView

After research these events get the conclusion that there could be logical corruption in this user’s Mailbox preventing ActiveSync from pulling the mail items down. So I immediately went to the handy replacement for ISINTEG, “New-MailboxRepairRequest”. (for Help MailboxRepair Request, New-MailboxRepairRequest)

I ran the following command:

New-MailboxRepairRequest -Mailbox Dinesh.Singh -CorruptionType FolderView,ProvisionedFolder,AggregateCounts,SearchFolder

The command lets you know the request was created but not much more than that. To view the logs on Mailbox Repair Requests you need to head back to the Application Log in Event Viewer (View Mailbox Repair Request Entries in Event Viewer)



We can see the below entries in the log:

Event ID: 10047
Mailbox level online integrity check for request ec853fb3-1999-4911-9782-5170a31a37cb started:
Database=DB1
Mailbox=4F1B824D-5C81-477E-B40B-418C888109F3
Flags=Detect, Fix
Tasks=SearchFolder, View, AggregateCount, ProvisionedFid

Event ID: 10062
Corruptions detected during online integrity check for request ec853fb3-1999-4911-9782-5170a31a37cb
Mailbox:4F1B824D-5C81-477E-B40B-418C888109F3 (Dinesh Singh)
Database:DB1
Corruption          Is Fixed FID         Property              Resolution
“Folder View”, Yes, “1110-1E6B0C (Inbox)”, 0×00000001, “Delete the corrupted view”
“Folder View”, Yes, “1110-1E6B0C (Inbox)”, 0×00000001, “Delete the corrupted view”
“Folder View”, Yes, “1110-1E6B0E (Sent Items)”, 0×00000001, “Delete the corrupted view”
“Folder View”, Yes, “1110-1E6B0E (Sent Items)”, 0×00000001, “Delete the corrupted view”
“Folder View”, Yes, “1110-1E6B0E (Sent Items)”, 0×00000001, “Delete the corrupted view”
“Folder View”, Yes, “1110-1E6B0E (Sent Items)”, 0×00000001, “Delete the corrupted view”
“Folder View”, Yes, “1110-1E6B0E (Sent Items)”, 0×00000001, “Delete the corrupted view”
“Folder View”, Yes, “1110-1E6B0F (Deleted Items)”, 0×00000001, “Delete the corrupted view”
“Folder View”, Yes, “1110-1E6B0F (Deleted Items)”, 0×00000001, “Delete the corrupted view”
“Folder View”, Yes, “1110-1E6B0F (Deleted Items)”, 0×00000001, “Delete the corrupted view”
“Folder View”, Yes, “1110-1E6B17 (Drafts)”, 0×00000001, “Delete the corrupted view”
“Folder View”, Yes, “1110-1E6B1A (Tasks)”, 0×00000001, “Delete the corrupted view”
“Folder View”, Yes, “1110-1E6D67 (Junk E-Mail)”, 0×00000001, “Delete the corrupted view”
“Folder View”, Yes, “1110-3DA14B (AllItems)”, 0×00000001, “Delete the corrupted view”
“Folder View”, Yes, “1110-3DA14B (AllItems)”, 0×00000001, “Delete the corrupted view”
“Folder View”, Yes, “1110-3DA14B (AllItems)”, 0×00000001, “Delete the corrupted view”
“Folder View”, Yes, “1110-3DA14B (AllItems)”, 0×00000001, “Delete the corrupted view”

Event ID: 10048

Online integrity check for request ec853fb3-1999-4911-9782-5170a31a37cb completed successfully.

After that I had the user try the sync again and it worked, user able to download email items but when he tried to reply to email getting error. Again I got stuck, at this point used best friend  ADSIEDIT to manually deleting the device from the user object in AD.

1.       Start-Run-Adsiedit.msc.
2.       Navigate the Domain Partition.
3.       Drill down the user object
4.       You will find a container called CN=ExchangeActiveSyncDevices and find many devices  
        associated with that user.
5.       Deleted all the devices.
 
I deleted the profile of the user and created new profile again created new but received same error when replying email, again big frustration. 

After lot of brainstorm again I have gone through all event ID again and finally I observed I missed which is clearly indicated on Event ID:10030

Attempts may be made to rebuild the view, but if this message continues to persist for this mailbox, moving the mailbox to a different database may resolve the issue.

After seeing that I though move user’s mailbox to another database so I started move mailbox from current database to another database and set the Bad item limit to 80. After running PowerShell command “ Get-MoveRequest | Get-MoveRequestStatistics –IncludeReport | fl” which has given me complete report, where I could see 21 items skipped because of corruption of mailbox.
Other issues also resolved after mailbox move to different database because move is essentially Exchange copying all the mailbox data into an entirely new mailbox.

Finnaly check with user and everything is working as expected.

No comments:

Post a Comment