none
Unsuspected outlook ost-file recreation

    Question

  • We have SCC with 3 active and 1 passive nodes for Exchange 2007 SP2 RU2 Mailbox role. Yesterday we saw a very big load on our active nodes. For instance RPC Latency was about 300. As we started ExMon, it showed us, that some users used about 90% of CPU Time.

    Our support service told us, many Outlook clients began to synchronize all mailbox contents (we use cached mode). Some mailboxes are very big (10 Gb and more), so till now we have heavy load on our network connection.

    We have no idea, what made Outlook to resynchronize mailbox contents. No updates were installed last days, no maintenance was done with client computers. Can anyone say why this could happen?

    Tuesday, July 05, 2011 5:48 AM

Answers

  • Hi Again,

    I performed a deep research and discussed this issue with my team, the index will reset if the new OST or PST file is created. So the event log provided is highly likely occur after the Outlook resync, and it is not the cause of Outlook resync. you may compare the time to verify it.

    It is very hard to find the root cause if the issue does not reoccur. You may submit a new thread in Outlook forum at http://social.technet.microsoft.com/Forums/en/outlook/threads for the general cause of OST corrupt since it is a pure client side issue. Your understanding would be appreciated.

    Besides, you may enable Windows auditting to audit the ost file and the related folder. If it is corrupted or recreated, you may have a event log and trace who is the last vistor. For details, see http://support.microsoft.com/kb/310399.

    Hope it is helpful.

    -Fiona

     

     

     

    Thursday, July 14, 2011 8:48 AM

All replies

  • Generally Outlook will not re-synchronize the mailbox from scratch unless the old/existing ost file are corrupted or the Outlook profile is renewed. An ost file may be corrupted by various factors: unexpected power shutdown, virus, some scan action, etc.

     

    You need to troubleshoot or verify from your end user since the ost file is located in client side. Ask the problematic  user if they have received some error message regarding the ost file, such as “the ost file could not open”; or if they have tried to share/open their mailbox folders for if they have renew their profiles before the issue occurs; and also verify the client computer’s system event log as well as the log of your anti-virus application to see if there is any record.

     

    Additionally, it is best if you force the mailbox archive or enable the retention policy. Considering the performance in the end-user side and the maintenance in the server side, it is not recommended that a user mailbox size is so big (like you say, 10 Gb and more). For more information, please refer to the following Microsoft articles:

     

    Recommended Mailbox Size Limits

    http://blogs.technet.com/b/exchange/archive/2005/03/14/395229.aspx

    You may experience performance problems when you are working with items in a large .pst file or in a large .ost file in Outlook 2007

    http://support.microsoft.com/kb/932086

     

     

    Best regards,

    Fiona Liao

    Email: v-fiolia@microsoft.com

    IBS TechNet Forum Exchange Support Team


    Email: v-yuliao@microsoft.com Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

    Wednesday, July 06, 2011 7:21 AM
  • Now it is not possible to force archiving or retention because of unsufficient disk space for it (we have about 5000 mailboxes) and company policy .

    As i know from support service, no user told about error messages regarding the ost file.

    Wednesday, July 06, 2011 5:55 PM
  • You may ask your end user download the email message to local PST file right now, and force the archive in the future if possible.

     

    Regarding the server performance, ask your user shown in ExMon change to Online mode to see if the CPU usage can be reduced. Or simply close Outlook connection.

     

    If it is confirmed that ost synchronize is the cause of performance issue, I would still suggest troubleshoot from the client side. Check how many ost files the problematic user has, and verify if there is any error record in the log.

     

    Hope it is helpful.

     

     

    Best regards,

    Fiona Liao

    Email: v-fiolia@microsoft.com

    IBS TechNet Forum Exchange Support Team

     


    Email: v-yuliao@microsoft.com Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

    Thursday, July 07, 2011 1:59 AM
  • Thats's what we see on the client side:

     

    Source: Outlook
    Date: 2011.07.05. 9:38:02
    Event ID: 29
    Task Category: None
    Level: Information
    Keywords: Classic
    User: N/A
    Computer: UN13581M
    Description:
    The store C:\Documents and Settings\alpritulenko.CENTRAL\Local Settings\Application Data\Microsoft\Outlook\outlook.ost is being re-pushed to the indexer for the following reason: Index reset, re-push entire store.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    <System>
    <Provider Name="Outlook" />
    <EventID Qualifiers="16384">29</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2011-07-05T07:38:02.000000000Z" />
    <EventRecordID>1891</EventRecordID>
    <Channel>E:\Cases\Ekaterina\»ÓĘź«ŽąşĘą.evt</Channel>
    <Computer>UN13581M</Computer>
    <Security />
    </System>
    <EventData>
    <Data>C:\Documents and Settings\alpritulenko.CENTRAL\Local Settings\Application Data\Microsoft\Outlook\outlook.ost</Data>
    <Data>Index reset, re-push entire store</Data>
    </EventData>
    </Event>
     

     

    What could make index to reset?

     


    Thursday, July 07, 2011 5:01 AM
  • Hi Again,

    I performed a deep research and discussed this issue with my team, the index will reset if the new OST or PST file is created. So the event log provided is highly likely occur after the Outlook resync, and it is not the cause of Outlook resync. you may compare the time to verify it.

    It is very hard to find the root cause if the issue does not reoccur. You may submit a new thread in Outlook forum at http://social.technet.microsoft.com/Forums/en/outlook/threads for the general cause of OST corrupt since it is a pure client side issue. Your understanding would be appreciated.

    Besides, you may enable Windows auditting to audit the ost file and the related folder. If it is corrupted or recreated, you may have a event log and trace who is the last vistor. For details, see http://support.microsoft.com/kb/310399.

    Hope it is helpful.

    -Fiona

     

     

     

    Thursday, July 14, 2011 8:48 AM
  • Recover OST outlook 2010 software is a OST to PST converter tool to recover corrupted and deleted OST data emails, contacts, tasks, notes, calendar, journal, appointment, and other important items and Recover OST File to PST files. http://www.ostemailrecovery.com
    Monday, July 25, 2011 8:49 AM