Event 8206 indicates that the free/busy component in Exchange had a problem accessing calendaring or free/busy information. This event is seen typically when the Exchange IFS Drive (also called M drive) is scanned by a file-level scanner. This event has several variations, with the error code in the Description section differentiating each of the variants. The error codes usually are Collaboration Data Objects (CDO) codes referring to bad data, or authentication failures.
Use the ERROR.EXE tool on the Exchange compact disc (CD) to obtain further details on the error.
Sample Event:
Event Type: Error
Event Source: EXCDO
Event Category: General
Event ID: 8206
Description: Calendaring agent failed with error code 0x80040229 while saving appointment.
Event Type: Error
Event Source: EXCDO
Event Category: General
Event ID: 8206
Description: Calendaring agent failed with error code 0x80040215 while saving appointment.
Related Events:
You might also see Events 8213, 8230, 8219 and 8199 with the 8206 event.
This behavior can occur if a file-level virus scanner is scanning the installable file system (IFS) drive (M drive) of the Exchange server (if enabled).
This issue can occur if the MSExchangeFBPublish key or its sub keys are missing from HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services in the Windows registry.
Stop any virus scanner from scanning the M drive. To recover lost calendar entries, either restore calendar items from a backup that was made before the calendar items were lost, or manually recreate the calendar items.
Restore the correct registry settings on the computer. Query the Microsoft Knowledge Base for Event ID 8206 for further details.
Verify that the service account Local System for native topologies, or Exchange 5.5 service account for mixed topologies) has permissions to delete and retrieve messages in the System Attendant mailbox.
For more information about EXCDO event 8206, see:
Target | Microsoft.Exchange.ServerRole.2003 | ||
Category | EventCollection | ||
Enabled | True | ||
Event_ID | 8206 | ||
Event Source | EXCDO | ||
Alert Generate | True | ||
Alert Severity | Warning | ||
Alert Priority | Normal | ||
Remotable | True | ||
Alert Message |
| ||
Event Log | Application |
ID | Module Type | TypeId | RunAs |
---|---|---|---|
EventDS | DataSource | Microsoft.Windows.EventProvider | Default |
GenerateAlert | WriteAction | System.Health.GenerateAlert | Default |
<Rule ID="Calendaring_agent_failed_with_error_while_saving_appointment" Enabled="onEssentialMonitoring" Target="Exch2003Core!Microsoft.Exchange.ServerRole.2003" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="EventDS" TypeID="Windows!Microsoft.Windows.EventProvider">
<ComputerName>.</ComputerName>
<LogName>Application</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>Channel</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>Application</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>EXCDO</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>8206</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="GenerateAlert" TypeID="SystemHealth!System.Health.GenerateAlert">
<Priority>1</Priority>
<Severity>1</Severity>
<AlertOwner>$Data/PublisherName$</AlertOwner>
<AlertMessageId>$MPElement[Name="Calendaring_agent_failed_with_error_while_saving_appointment.AlertMessage"]$</AlertMessageId>
<AlertParameters>
<AlertParameter1>$Data/EventDescription$</AlertParameter1>
</AlertParameters>
<Suppression>
<SuppressionValue/>
</Suppression>
</WriteAction>
</WriteActions>
</Rule>