Article ID: 2446908 - Last Review: July 28, 2011 - Revision: 3.0

ESE event descriptions are missing in Event Viewer when the Eseutil utility is called on an Exchange Server 2010 SP1 server

View products that this article applies to.

System TipThis article applies to a different operating system than the one you are using. Article content that may not be relevant to you is disabled.

Expand all | Collapse all

SYMPTOMS

Consider the following scenario:

You have a computer that is running Microsoft Exchange Server 2010 Service Pack 1 (SP1).
You run a program that calls the Eseutil utility (Eseutil.exe), or you run the Eseutil utility directly.
You view Extensible Storage Engine (ESE) events in Event Viewer on the server.

In this scenario, the descriptions of these ESE events are missing. Additionally the events are not formatted correctly.

Back to the top

CAUSE

This issue occurs because the following registry subkeys are overwritten incorrectly when the Eseutil utility initializes:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\services\eventlog\Application\ESE\CategoryMessageFile

HKEY_LOCAL_MACHINE\System\CurrentControlSet\services\eventlog\Application\ESE\EventMessageFile

The values of the registry subkeys are changed from ESE.dll to Eseutil.exe.

Back to the top

RESOLUTION

To resolve this issue, install the following update rollup:

2579150 (http://support.microsoft.com/kb/2579150/ ) Description of Update Rollup 4 for Exchange Server 2010 Service Pack 1

Back to the top

WORKAROUND

To work around this issue, perform one of the following operations:

Change the values of the registry subkeys to ESE.dll after the Eseutil utility is called.
Restart the Microsoft Exchange Information Store service on the computer.

Back to the top