Home
  •  

Failed to access the metabase. Please check all related events for more information.

Failed_to_access_the_metabase___Please_check_all_related_events_for_more_information (Rule)

Knowledge Base article:

Summary

The metabase update agent cannot access the IIS metabase.

Causes

One possible cause is that IISAdmin is not started or is disabled. There may also be some other problem with Internet Information Services (IIS), such as a corrupted metabase.bin file. Commonly, this event indicates that the metabase has become corrupt. Root causes for MSExchangeMU event 1009 are many and are associated with specific error codes. The most common error codes are listed below:

Cause 1 - Failed to access the metabase, error code is 80004002 (Not valid Signature.).

Cause 2 - Failed to access the metabase, error code is 80090006 (Not valid Signature.).

Cause 3 - Failed to access the metabase, error code is 80040154 (Class not registered.).

Cause 4 - Failed to access the metabase, error code is 8009000f (Object already exists.).

Cause 5 - Failed to access the metabase, error code is 80070422 (The service cannot be started, either because it is disabled or because it has no enabled devices associated

Resolutions

Verify that the IIS Admin service is running properly. Specific resolutions associated with the listed causes are as follows:

Reinstall the same operating system service pack and any operating system hotfixes. Reinstall Exchange Server over its existing installation. Do not remove Exchange Server, but reinstall. Reinstall any Exchange service packs and hotfixes. Another alternative is to restore the metabase.

Restart the computer. Install IIS (by using Add/Remove Programs in Control Panel). For further information, see Microsoft Knowledge Base article PRB: Error Message "0x8009000F = Object Already Exists" 271865.KB.

External

For more information about MSExchangeMU event 1009, see:

Element properties:

TargetMicrosoft.Exchange.ExchangeComponent.SystemAttendant
CategoryEventCollection
EnabledTrue
Event_ID1009
Event SourceMSExchangeMU
Alert GenerateTrue
Alert SeverityWarning
Alert PriorityNormal
RemotableTrue
Alert Message
Failed to access the metabase. Please check all related events for more information.
{0}
Event LogApplication

Member Modules:

ID Module Type TypeId RunAs 
EventDS DataSource Microsoft.Windows.EventProvider Default
GenerateAlert WriteAction System.Health.GenerateAlert Default

Source Code:

<Rule ID="Failed_to_access_the_metabase___Please_check_all_related_events_for_more_information" Enabled="onEssentialMonitoring" Target="Exch2003Core!Microsoft.Exchange.ExchangeComponent.SystemAttendant" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="EventDS" TypeID="Windows!Microsoft.Windows.EventProvider">

      <ComputerName>.</ComputerName>

      <LogName>Application</LogName>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>Channel</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>Application</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>MSExchangeMU</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>1009</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="GenerateAlert" TypeID="SystemHealth!System.Health.GenerateAlert">

      <Priority>1</Priority>

      <Severity>1</Severity>

      <AlertOwner>$Data/PublisherName$</AlertOwner>

      <AlertMessageId>$MPElement[Name="Failed_to_access_the_metabase___Please_check_all_related_events_for_more_information.AlertMessage"]$</AlertMessageId>

      <AlertParameters>

        <AlertParameter1>$Data/EventDescription$</AlertParameter1>

      </AlertParameters>

      <Suppression>

        <SuppressionValue/>

      </Suppression>

    </WriteAction>

  </WriteActions>

</Rule>