This error message usually indicates a corruption of the metabase.
Sample Event:
Event Type: Error
Event Source: MSExchangeMU
Event Category: General
Event ID: 1004
Description: Metabase update agent exiting abnormally. Error code is 80070102 (The wait operation timed out.).
Related Events:
1025
Antivirus software scanning the %systemroot%\system32\inetsrv\metabase.bin file.
Iisadmin.exe process stopped or was ended unexpectedly.
Unsupported editing of the metabase.
Disk corruption or other hardware failure.
If the metabase has been corrupted, it can be restored using the Microsoft Management Console (MMC) or a backup copy of the Metabase.bin file. See the following Microsoft Knowledge Base article for further details:
234429 How to Manually Restore the Metabase When No Proper Backup Exists
For more information about MSExchangeMU event 1004, see:
Target | Microsoft.Exchange.ExchangeComponent.SystemAttendant | ||
Category | EventCollection | ||
Enabled | True | ||
Event_ID | 1004 | ||
Event Source | MSExchangeMU | ||
Alert Generate | True | ||
Alert Severity | Warning | ||
Alert Priority | Normal | ||
Remotable | True | ||
Alert Message |
| ||
Event Log | Application |
ID | Module Type | TypeId | RunAs |
---|---|---|---|
EventDS | DataSource | Microsoft.Windows.EventProvider | Default |
GenerateAlert | WriteAction | System.Health.GenerateAlert | Default |
<Rule ID="Metabase_Update_agent_exiting_abnormally__Error_code_is_80070102__The_wait_operation_timed_out_" Enabled="onEssentialMonitoring" Target="Exch2003Core!Microsoft.Exchange.ExchangeComponent.SystemAttendant" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="EventDS" TypeID="Windows!Microsoft.Windows.EventProvider">
<ComputerName>.</ComputerName>
<LogName>Application</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>Channel</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>Application</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>MSExchangeMU</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>1004</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="GenerateAlert" TypeID="SystemHealth!System.Health.GenerateAlert">
<Priority>1</Priority>
<Severity>1</Severity>
<AlertOwner>$Data/PublisherName$</AlertOwner>
<AlertMessageId>$MPElement[Name="Metabase_Update_agent_exiting_abnormally__Error_code_is_80070102__The_wait_operation_timed_out_.AlertMessage"]$</AlertMessageId>
<AlertParameters>
<AlertParameter1>$Data/EventDescription$</AlertParameter1>
</AlertParameters>
<Suppression>
<SuppressionValue/>
</Suppression>
</WriteAction>
</WriteActions>
</Rule>