The Symantec Mail Security for Microsoft Exchange (SMSMSE) Service shuts down five (5) minutes after starting with Error Event ID 185 when Microsoft Exchange Information Store is not reading the VSAPI registry settings
|Article:TECH191029|||||Created: 2012-06-14|||||Updated: 2014-01-22|||||Article URL http://www.symantec.com/docs/TECH191029|
The SMSMSE service stops 5 minutes after starting and writes Event ID 185 and 186 errors to the Windows Application Event log.
- Microsoft Exchange Information Store is not polling VSAPI registry key.
Run Microsoft process monitor and look for the following information:
Process Name: store.exe
If these requests are not present then this condition is met.
The following events are written to the Windows Application Event log:
Event Type: Error
Event Source: Symantec Mail Security for Microsoft Exchange
Event Category: Service
Event ID: 185
Microsoft Exchange Information Store is not polling and re-loading the VSAPI settings.
When SMSMSE changes the VSAPI settings, SMSMSE changes the value of the registry key HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeIS\VirusScan\ReloadNow from a 0 (zero) to a 1 (one). The Microsoft Exchange Information Store (store.exe) polls the registry key every minute. If the value is 1 (one) store.exe reinitializes the VSAPI interface with SMSMSE. Then store.exe changes the value of the registry key to 0 (zero).
This error is reported when the value of the registry key is still 1 (one) after five minutes.
Ensure that the Microsoft Exchange Information Store service is running and is active (this is listed as store.exe in the Windows Task Manager).
Please contact Microsoft for assistance troubleshooting the root cause of this issue.
Article URL http://www.symantec.com/docs/TECH191029