Events 1000, 4999, and 9775 are logged when Store.exe crashes on an Exchange Server 2010 SP3 Mailbox server

Applies to: Exchange Server 2010 Service Pack 3Exchange Server 2010 EnterpriseExchange Server 2010 Standard

Symptoms


The Microsoft Exchange Information Store service (Store.exe) crashes on a Microsoft Exchange Server 2010 Service Pack 3 (SP3) Mailbox server. Additionally, the following events are logged in the Application log:



Cause


This issue occurs because a LogFailedSDUpdateEvent function calls the ConvertSecurityDescriptorToStringSecurityDescriptor function in the advapi32.dll file. However, corruption occurs in the Security Descriptor. Then, the ConvertSecurityDescriptorToStringSecurityDescriptor function throws an access violation exception.

Resolution


To resolve this issue, install the following update rollup:
2891587 Description of Update Rollup 3 for Exchange Server 2010 Service Pack 3

Status


Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

More Information


For more information about the ConvertSecurityDescriptorToStringSecurityDescriptor function, go to the following Microsoft website: