none
Exchange2013 Microsoft Exchange RPC 客户端访问服务无法启动 RRS feed

  • 问题

  • 公司使用的Exchange2013突然无法正常登登录,包括OWA和outlook都无法登录,一直弹出输入用户名密码的窗口(采用的是基本身份认证)

    ,后来测试发现在OWA上使用域管理员账号可以正常登录,其他用户均无法登录。

    查看服务器发现事件查看器中一直出现报错:

    Microsoft Exchange RPC 客户端访问 服务意外地终止,这种情况已经出现了 1 次。以下的修正操作将在 5000 毫秒内运行: 重新启动服务。

    在服务窗口中查看该服务一直处于正在启动状态,无法正常启动,求助~~

    2020年8月17日 1:09

全部回复

  • #Software: Microsoft Exchange
    #Version: 15.00.1395.000
    #Log-type: RCA Protocol Logs
    #Date: 2020-08-14T08:00:30.241Z
    #Fields: date-time,session-id,seq-number,client-name,organization-info,client-software,client-software-version,client-mode,client-ip,client-connection-info,server-ip,protocol,application-id,request-ids,session-cookie,operation,rpc-status,processing-time,operation-specific,failures,performance-data,activity-context-data,user-email,passport-unique-id
    2020-08-14T08:00:30.241Z,422321,0,/o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa,,Microsoft.Exchange.RpcClientAccess.Monitoring.dll,15.0.0.0,Cached,fe80::85ef:56ec:9ea7:8e25%19,,fe80::85ef:56ec:9ea7:8e25%19,ncacn_http,,54015eb1-23d7-411c-87ba-cd5f9912ee4f|d7b87c6b-57a0-439f-bea0-1c2b7eb3721f,"""{A078FA43-0A77-4761-B1EA-C4DD341716F2} Client=ACTIVEMONITORING""",Connect,0,00:00:00.0160000,"SID=S-1-5-21-3256111343-953919050-1758267603-24006, Flags=None",,,,HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn,
    2020-08-14T08:00:30.273Z,422321,1,/o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa,,Microsoft.Exchange.RpcClientAccess.Monitoring.dll,15.0.0.0,Cached,,,,ncacn_http,Client=Microsoft.Exchange.RpcClientAccess.Monitoring,,,OwnerLogon,0,00:00:00.0160000,"Logon: Owner, /o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa in database  last mounted on exchange2013.domain.com.cn; LogonId: 1",,,,HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn,
    2020-08-14T08:00:30.288Z,422321,2,/o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa,,Microsoft.Exchange.RpcClientAccess.Monitoring.dll,15.0.0.0,Cached,,,,ncacn_http,Client=Microsoft.Exchange.RpcClientAccess.Monitoring,,,OwnerLogoff,0,00:00:00,LogonId: 1,,,,HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn,
    2020-08-14T08:00:30.288Z,422321,2,/o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa,,Microsoft.Exchange.RpcClientAccess.Monitoring.dll,15.0.0.0,Cached,,,,ncacn_http,Client=Microsoft.Exchange.RpcClientAccess.Monitoring,,,Disconnect,0,00:00:00.0630000,,,ClientRPCCount=0;AvgClientLatency=00:00:00;ServerRPCCount=2;AvgCasRPCProcessingTime=00:00:00.0160000;AvgMbxProcessingTime=00:00:00;MaxCasRPCProcessingTime=00:00:00.0160000;20%ClientPercentile=10;40%ClientPercentile=10;60%ClientPercentile=10;80%ClientPercentile=10;90%ClientPercentile=10;95%ClientPercentile=10;99%ClientPercentile=10;100%ClientPercentile=10;20%CasPercentile=10;40%CasPercentile=10;60%CasPercentile=20;80%CasPercentile=20;90%CasPercentile=20;95%CasPercentile=20;99%CasPercentile=20;100%CasPercentile=20;20%MbxPercentile=10;40%MbxPercentile=10;60%MbxPercentile=10;80%MbxPercentile=10;90%MbxPercentile=10;95%MbxPercentile=10;99%MbxPercentile=10;100%MbxPercentile=10;ClientRpcFailureData:,S:ActivityStandardMetadata.UserId=ADGuid:93aaef70-9438-4d4a-a3f5-afde54721e33;S:ActivityStandardMetadata.Puid=;S:ActivityStandardMetadata.UserEmail=HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn;S:WLM.Bal=149992.2;S:ActivityStandardMetadata.TenantId=domain.com.cn;S:ActivityStandardMetadata.Component=RCA/Mailbox;S:WLM.BT=Rca;S:ActivityStandardMetadata.Protocol=RPC/HTTP;S:ActivityStandardMetadata.ClientInfo=Microsoft.Exchange.RpcClientAccess.Monitoring.dll/15.0.0.0;I32:ADS.C[tjgc-portal]=3;F:ADS.AL[tjgc-portal]=6.0012;I32:ATE.C[tjgc-portal.domain.com.cn]=3;F:ATE.AL[tjgc-portal.domain.com.cn]=0;I32:MB.C[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=4;F:MB.AL[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=0.5;Dbl:ST.T[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=1;Dbl:BudgUse.T[]=15.6273002624512;Dbl:RPC.T[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=2;I32:RPC.C[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=4;I32:MAPI.C[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=27;I32:ROP.C[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=260739704;Dbl:MAPI.T[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=2,HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn,
    2020-08-14T08:01:30.289Z,422322,0,/o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa,,Microsoft.Exchange.RpcClientAccess.Monitoring.dll,15.0.0.0,Cached,fe80::85ef:56ec:9ea7:8e25%19,,fe80::85ef:56ec:9ea7:8e25%19,ncacn_http,,1ef980e0-1f2c-41e1-a970-e5f96dc4bc6c|06b37b56-cab3-44cc-97b8-be758a53544a,"""{EBD9EABA-A885-46B7-A22A-FCE203247BC2} Client=ACTIVEMONITORING""",Connect,0,00:00:00,"SID=S-1-5-21-3256111343-953919050-1758267603-24006, Flags=None",,,,HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn,
    2020-08-14T08:01:30.305Z,422322,1,/o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa,,Microsoft.Exchange.RpcClientAccess.Monitoring.dll,15.0.0.0,Cached,,,,ncacn_http,Client=Microsoft.Exchange.RpcClientAccess.Monitoring,,,OwnerLogon,0,00:00:00.0150000,"Logon: Owner, /o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa in database  last mounted on exchange2013.domain.com.cn; LogonId: 1",,,,HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn,
    2020-08-14T08:01:30.305Z,422322,2,/o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa,,Microsoft.Exchange.RpcClientAccess.Monitoring.dll,15.0.0.0,Cached,,,,ncacn_http,Client=Microsoft.Exchange.RpcClientAccess.Monitoring,,,OwnerLogoff,0,00:00:00,LogonId: 1,,,,HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn,
    2020-08-14T08:01:30.320Z,422322,2,/o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa,,Microsoft.Exchange.RpcClientAccess.Monitoring.dll,15.0.0.0,Cached,,,,ncacn_http,Client=Microsoft.Exchange.RpcClientAccess.Monitoring,,,Disconnect,0,00:00:00.0310000,,,ClientRPCCount=0;AvgClientLatency=00:00:00;ServerRPCCount=2;AvgCasRPCProcessingTime=00:00:00.0075000;AvgMbxProcessingTime=00:00:00;MaxCasRPCProcessingTime=00:00:00.0150000;20%ClientPercentile=10;40%ClientPercentile=10;60%ClientPercentile=10;80%ClientPercentile=10;90%ClientPercentile=10;95%ClientPercentile=10;99%ClientPercentile=10;100%ClientPercentile=10;20%CasPercentile=10;40%CasPercentile=10;60%CasPercentile=10;80%CasPercentile=10;90%CasPercentile=10;95%CasPercentile=10;99%CasPercentile=10;100%CasPercentile=20;20%MbxPercentile=10;40%MbxPercentile=10;60%MbxPercentile=10;80%MbxPercentile=10;90%MbxPercentile=10;95%MbxPercentile=10;99%MbxPercentile=10;100%MbxPercentile=10;ClientRpcFailureData:,S:ActivityStandardMetadata.UserId=ADGuid:93aaef70-9438-4d4a-a3f5-afde54721e33;S:ActivityStandardMetadata.Puid=;S:ActivityStandardMetadata.UserEmail=HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn;S:WLM.Bal=149992.2;S:ActivityStandardMetadata.TenantId=domain.com.cn;S:ActivityStandardMetadata.Component=RCA/Mailbox;S:WLM.BT=Rca;S:ActivityStandardMetadata.Protocol=RPC/HTTP;S:ActivityStandardMetadata.ClientInfo=Microsoft.Exchange.RpcClientAccess.Monitoring.dll/15.0.0.0;I32:ADS.C[tjgc-portal]=1;F:ADS.AL[tjgc-portal]=7.8218;I32:ATE.C[tjgc-portal.domain.com.cn]=1;F:ATE.AL[tjgc-portal.domain.com.cn]=0;I32:MB.C[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=4;F:MB.AL[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=0.5;Dbl:ST.T[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=2;Dbl:BudgUse.T[]=15.6280002593994;Dbl:RPC.T[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=2;I32:RPC.C[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=4;I32:MAPI.C[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=27;I32:ROP.C[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=260741416;Dbl:MAPI.T[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=2,HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn,
    2020-08-14T08:02:30.363Z,422323,0,/o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa,,Microsoft.Exchange.RpcClientAccess.Monitoring.dll,15.0.0.0,Cached,fe80::85ef:56ec:9ea7:8e25%19,,fe80::85ef:56ec:9ea7:8e25%19,ncacn_http,,2ddbca6f-a43e-4673-bdb9-71186095e0eb|f8feebaa-cfe1-42a3-9b31-9c39b19d38e5,"""{4CDA0D11-DF32-4DC2-BF5D-7D29BEABF27C} Client=ACTIVEMONITORING""",Connect,0,00:00:00.0160000,"SID=S-1-5-21-3256111343-953919050-1758267603-24006, Flags=None",,,,HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn,
    2020-08-14T08:02:30.410Z,422323,1,/o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa,,Microsoft.Exchange.RpcClientAccess.Monitoring.dll,15.0.0.0,Cached,,,,ncacn_http,Client=Microsoft.Exchange.RpcClientAccess.Monitoring,,,OwnerLogon,0,00:00:00.0470000,"Logon: Owner, /o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa in database  last mounted on exchange2013.domain.com.cn; LogonId: 1",,,,HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn,
    2020-08-14T08:02:30.425Z,422323,2,/o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa,,Microsoft.Exchange.RpcClientAccess.Monitoring.dll,15.0.0.0,Cached,,,,ncacn_http,Client=Microsoft.Exchange.RpcClientAccess.Monitoring,,,OwnerLogoff,0,00:00:00,LogonId: 1,,,,HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn,
    2020-08-14T08:02:30.425Z,422323,2,/o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa,,Microsoft.Exchange.RpcClientAccess.Monitoring.dll,15.0.0.0,Cached,,,,ncacn_http,Client=Microsoft.Exchange.RpcClientAccess.Monitoring,,,Disconnect,0,00:00:00.0790000,,,ClientRPCCount=0;AvgClientLatency=00:00:00;ServerRPCCount=2;AvgCasRPCProcessingTime=00:00:00.0315000;AvgMbxProcessingTime=00:00:00;MaxCasRPCProcessingTime=00:00:00.0470000;20%ClientPercentile=10;40%ClientPercentile=10;60%ClientPercentile=10;80%ClientPercentile=10;90%ClientPercentile=10;95%ClientPercentile=10;99%ClientPercentile=10;100%ClientPercentile=10;20%CasPercentile=10;40%CasPercentile=10;60%CasPercentile=20;80%CasPercentile=20;90%CasPercentile=20;95%CasPercentile=20;99%CasPercentile=20;100%CasPercentile=50;20%MbxPercentile=10;40%MbxPercentile=10;60%MbxPercentile=10;80%MbxPercentile=10;90%MbxPercentile=10;95%MbxPercentile=10;99%MbxPercentile=10;100%MbxPercentile=10;ClientRpcFailureData:,S:ActivityStandardMetadata.UserId=ADGuid:93aaef70-9438-4d4a-a3f5-afde54721e33;S:ActivityStandardMetadata.Puid=;S:ActivityStandardMetadata.UserEmail=HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn;S:WLM.Bal=149968.7;S:ActivityStandardMetadata.TenantId=domain.com.cn;S:ActivityStandardMetadata.Component=RCA/Mailbox;S:WLM.BT=Rca;S:ActivityStandardMetadata.Protocol=RPC/HTTP;S:ActivityStandardMetadata.ClientInfo=Microsoft.Exchange.RpcClientAccess.Monitoring.dll/15.0.0.0;I32:ADS.C[tjgc-portal]=9;F:ADS.AL[tjgc-portal]=4.261156;I32:ATE.C[tjgc-portal.domain.com.cn]=9;F:ATE.AL[tjgc-portal.domain.com.cn]=0;I32:MB.C[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=4;F:MB.AL[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=1.25;Dbl:ST.T[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=3;Dbl:BudgUse.T[]=46.9188003540039;Dbl:RPC.T[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=5;I32:RPC.C[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=4;I32:MAPI.C[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=27;I32:ROP.C[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=260743620;Dbl:MAPI.T[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=5,HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn,
    2020-08-14T08:03:30.444Z,422324,0,/o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa,,Microsoft.Exchange.RpcClientAccess.Monitoring.dll,15.0.0.0,Cached,fe80::85ef:56ec:9ea7:8e25%19,,fe80::85ef:56ec:9ea7:8e25%19,ncacn_http,,ab5fe3af-e842-4fc4-ba2e-17fd8cdb4d4c|903c411e-8fc8-45f9-8f68-0dbba753985d,"""{95E6F669-E9C5-4D81-959E-481B5FFCD9BA} Client=ACTIVEMONITORING""",Connect,0,00:00:00,"SID=S-1-5-21-3256111343-953919050-1758267603-24006, Flags=None",,,,HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn,
    2020-08-14T08:03:30.460Z,422324,1,/o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa,,Microsoft.Exchange.RpcClientAccess.Monitoring.dll,15.0.0.0,Cached,,,,ncacn_http,Client=Microsoft.Exchange.RpcClientAccess.Monitoring,,,OwnerLogon,0,00:00:00.0150000,"Logon: Owner, /o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa in database  last mounted on exchange2013.domain.com.cn; LogonId: 1",,,,HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn,
    2020-08-14T08:03:30.460Z,422324,2,/o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa,,Microsoft.Exchange.RpcClientAccess.Monitoring.dll,15.0.0.0,Cached,,,,ncacn_http,Client=Microsoft.Exchange.RpcClientAccess.Monitoring,,,OwnerLogoff,0,00:00:00,LogonId: 1,,,,HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn,
    2020-08-14T08:03:30.460Z,422324,2,/o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa,,Microsoft.Exchange.RpcClientAccess.Monitoring.dll,15.0.0.0,Cached,,,,ncacn_http,Client=Microsoft.Exchange.RpcClientAccess.Monitoring,,,Disconnect,0,00:00:00.0150000,,,ClientRPCCount=0;AvgClientLatency=00:00:00;ServerRPCCount=2;AvgCasRPCProcessingTime=00:00:00.0075000;AvgMbxProcessingTime=00:00:00;MaxCasRPCProcessingTime=00:00:00.0150000;20%ClientPercentile=10;40%ClientPercentile=10;60%ClientPercentile=10;80%ClientPercentile=10;90%ClientPercentile=10;95%ClientPercentile=10;99%ClientPercentile=10;100%ClientPercentile=10;20%CasPercentile=10;40%CasPercentile=10;60%CasPercentile=10;80%CasPercentile=10;90%CasPercentile=10;95%CasPercentile=10;99%CasPercentile=10;100%CasPercentile=20;20%MbxPercentile=10;40%MbxPercentile=10;60%MbxPercentile=10;80%MbxPercentile=10;90%MbxPercentile=10;95%MbxPercentile=10;99%MbxPercentile=10;100%MbxPercentile=10;ClientRpcFailureData:,S:ActivityStandardMetadata.UserId=ADGuid:93aaef70-9438-4d4a-a3f5-afde54721e33;S:ActivityStandardMetadata.Puid=;S:ActivityStandardMetadata.UserEmail=HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn;S:WLM.Bal=149988.3;S:ActivityStandardMetadata.TenantId=domain.com.cn;S:ActivityStandardMetadata.Component=RCA/Mailbox;S:WLM.BT=Rca;S:ActivityStandardMetadata.Protocol=RPC/HTTP;S:ActivityStandardMetadata.ClientInfo=Microsoft.Exchange.RpcClientAccess.Monitoring.dll/15.0.0.0;I32:ADS.C[tjgc-portal]=1;F:ADS.AL[tjgc-portal]=9.2859;I32:ATE.C[tjgc-portal.domain.com.cn]=1;F:ATE.AL[tjgc-portal.domain.com.cn]=0;I32:MB.C[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=4;F:MB.AL[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=0.5;Dbl:ST.T[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=1;Dbl:BudgUse.T[]=15.6260995864868;Dbl:RPC.T[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=2;I32:RPC.C[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=4;I32:MAPI.C[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=27;I32:ROP.C[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=260745076;Dbl:MAPI.T[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=2,HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn,
    2020-08-14T08:04:30.495Z,422325,0,/o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa,,Microsoft.Exchange.RpcClientAccess.Monitoring.dll,15.0.0.0,Cached,fe80::85ef:56ec:9ea7:8e25%19,,fe80::85ef:56ec:9ea7:8e25%19,ncacn_http,,4c702746-9d68-4c16-9c41-ac182fdcf38a|a7bb8ef2-17e8-4838-acbe-0f9261390575,"""{46A17DFE-BF64-491A-AD48-BE995CBD9B4E} Client=ACTIVEMONITORING""",Connect,0,00:00:00.0160000,"SID=S-1-5-21-3256111343-953919050-1758267603-24006, Flags=None",,,,HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn,
    2020-08-14T08:04:30.511Z,422325,1,/o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa,,Microsoft.Exchange.RpcClientAccess.Monitoring.dll,15.0.0.0,Cached,,,,ncacn_http,Client=Microsoft.Exchange.RpcClientAccess.Monitoring,,,OwnerLogon,0,00:00:00.0150000,"Logon: Owner, /o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa in database  last mounted on exchange2013.domain.com.cn; LogonId: 1",,,,HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn,
    2020-08-14T08:04:30.511Z,422325,2,/o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa,,Microsoft.Exchange.RpcClientAccess.Monitoring.dll,15.0.0.0,Cached,,,,ncacn_http,Client=Microsoft.Exchange.RpcClientAccess.Monitoring,,,OwnerLogoff,0,00:00:00,LogonId: 1,,,,HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn,
    2020-08-14T08:04:30.511Z,422325,2,/o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa,,Microsoft.Exchange.RpcClientAccess.Monitoring.dll,15.0.0.0,Cached,,,,ncacn_http,Client=Microsoft.Exchange.RpcClientAccess.Monitoring,,,Disconnect,0,00:00:00.0310000,,,ClientRPCCount=0;AvgClientLatency=00:00:00;ServerRPCCount=2;AvgCasRPCProcessingTime=00:00:00.0155000;AvgMbxProcessingTime=00:00:00;MaxCasRPCProcessingTime=00:00:00.0160000;20%ClientPercentile=10;40%ClientPercentile=10;60%ClientPercentile=10;80%ClientPercentile=10;90%ClientPercentile=10;95%ClientPercentile=10;99%ClientPercentile=10;100%ClientPercentile=10;20%CasPercentile=10;40%CasPercentile=10;60%CasPercentile=20;80%CasPercentile=20;90%CasPercentile=20;95%CasPercentile=20;99%CasPercentile=20;100%CasPercentile=20;20%MbxPercentile=10;40%MbxPercentile=10;60%MbxPercentile=10;80%MbxPercentile=10;90%MbxPercentile=10;95%MbxPercentile=10;99%MbxPercentile=10;100%MbxPercentile=10;ClientRpcFailureData:,S:ActivityStandardMetadata.UserId=ADGuid:93aaef70-9438-4d4a-a3f5-afde54721e33;S:ActivityStandardMetadata.Puid=;S:ActivityStandardMetadata.UserEmail=HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn;S:WLM.Bal=149988.3;S:ActivityStandardMetadata.TenantId=domain.com.cn;S:ActivityStandardMetadata.Component=RCA/Mailbox;S:WLM.BT=Rca;S:ActivityStandardMetadata.Protocol=RPC/HTTP;S:ActivityStandardMetadata.ClientInfo=Microsoft.Exchange.RpcClientAccess.Monitoring.dll/15.0.0.0;I32:ADS.C[tjgc-portal]=4;F:ADS.AL[tjgc-portal]=5.090775;I32:ATE.C[tjgc-portal.domain.com.cn]=4;F:ATE.AL[tjgc-portal.domain.com.cn]=4;I32:MB.C[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=4;F:MB.AL[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=0.5;Dbl:ST.T[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=1;Dbl:BudgUse.T[]=15.6260995864868;Dbl:RPC.T[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=2;I32:RPC.C[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=4;I32:MAPI.C[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=27;I32:ROP.C[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=260746816;Dbl:MAPI.T[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=2,HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn,
    2020-08-14T08:05:30.552Z,422326,0,/o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa,,Microsoft.Exchange.RpcClientAccess.Monitoring.dll,15.0.0.0,Cached,fe80::85ef:56ec:9ea7:8e25%19,,fe80::85ef:56ec:9ea7:8e25%19,ncacn_http,,b3b7310b-7820-4a71-b7fc-9f06f9d65ab8|87cd067b-5640-493a-9325-032c8897defe,"""{B9E06AC8-EC51-415C-8D8C-A72DEED02C7D} Client=ACTIVEMONITORING""",Connect,0,00:00:00,"SID=S-1-5-21-3256111343-953919050-1758267603-24006, Flags=None",,,,HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn,
    2020-08-14T08:05:30.567Z,422326,1,/o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa,,Microsoft.Exchange.RpcClientAccess.Monitoring.dll,15.0.0.0,Cached,,,,ncacn_http,Client=Microsoft.Exchange.RpcClientAccess.Monitoring,,,OwnerLogon,0,00:00:00.0150000,"Logon: Owner, /o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa in database  last mounted on exchange2013.domain.com.cn; LogonId: 1",,,,HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn,
    2020-08-14T08:05:30.567Z,422326,2,/o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa,,Microsoft.Exchange.RpcClientAccess.Monitoring.dll,15.0.0.0,Cached,,,,ncacn_http,Client=Microsoft.Exchange.RpcClientAccess.Monitoring,,,OwnerLogoff,0,00:00:00,LogonId: 1,,,,HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn,
    2020-08-14T08:05:30.583Z,422326,2,/o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa,,Microsoft.Exchange.RpcClientAccess.Monitoring.dll,15.0.0.0,Cached,,,,ncacn_http,Client=Microsoft.Exchange.RpcClientAccess.Monitoring,,,Disconnect,0,00:00:00.0310000,,,ClientRPCCount=0;AvgClientLatency=00:00:00;ServerRPCCount=2;AvgCasRPCProcessingTime=00:00:00.0075000;AvgMbxProcessingTime=00:00:00;MaxCasRPCProcessingTime=00:00:00.0150000;20%ClientPercentile=10;40%ClientPercentile=10;60%ClientPercentile=10;80%ClientPercentile=10;90%ClientPercentile=10;95%ClientPercentile=10;99%ClientPercentile=10;100%ClientPercentile=10;20%CasPercentile=10;40%CasPercentile=10;60%CasPercentile=10;80%CasPercentile=10;90%CasPercentile=10;95%CasPercentile=10;99%CasPercentile=10;100%CasPercentile=20;20%MbxPercentile=10;40%MbxPercentile=10;60%MbxPercentile=10;80%MbxPercentile=10;90%MbxPercentile=10;95%MbxPercentile=10;99%MbxPercentile=10;100%MbxPercentile=10;ClientRpcFailureData:,S:ActivityStandardMetadata.UserId=ADGuid:93aaef70-9438-4d4a-a3f5-afde54721e33;S:ActivityStandardMetadata.Puid=;S:ActivityStandardMetadata.UserEmail=HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn;S:WLM.Bal=149992.2;S:ActivityStandardMetadata.TenantId=domain.com.cn;S:ActivityStandardMetadata.Component=RCA/Mailbox;S:WLM.BT=Rca;S:ActivityStandardMetadata.Protocol=RPC/HTTP;S:ActivityStandardMetadata.ClientInfo=Microsoft.Exchange.RpcClientAccess.Monitoring.dll/15.0.0.0;I32:ADS.C[tjgc-portal]=1;F:ADS.AL[tjgc-portal]=7.0212;I32:ATE.C[tjgc-portal.domain.com.cn]=1;F:ATE.AL[tjgc-portal.domain.com.cn]=0;I32:MB.C[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=4;F:MB.AL[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=0.5;Dbl:ST.T[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=1;Dbl:BudgUse.T[]=15.6290998458862;Dbl:RPC.T[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=2;I32:RPC.C[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=4;I32:MAPI.C[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=27;I32:ROP.C[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=260749724;Dbl:MAPI.T[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=2,HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn,
    2020-08-14T08:06:30.685Z,422327,0,/o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa,,Microsoft.Exchange.RpcClientAccess.Monitoring.dll,15.0.0.0,Cached,fe80::85ef:56ec:9ea7:8e25%19,,fe80::85ef:56ec:9ea7:8e25%19,ncacn_http,,a7aab981-8d2e-45f2-bf57-fb5cebec4716|881e842c-d756-4c02-871b-195ab2d2f2ef,"""{455AABFD-1342-4816-816C-5C1E3C8CF756} Client=ACTIVEMONITORING""",Connect,0,00:00:00.0150000,"SID=S-1-5-21-3256111343-953919050-1758267603-24006, Flags=None",,,,HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn,
    2020-08-14T08:06:30.701Z,422327,1,/o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa,,Microsoft.Exchange.RpcClientAccess.Monitoring.dll,15.0.0.0,Cached,,,,ncacn_http,Client=Microsoft.Exchange.RpcClientAccess.Monitoring,,,OwnerLogon,0,00:00:00.0160000,"Logon: Owner, /o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa in database  last mounted on exchange2013.domain.com.cn; LogonId: 1",,,,HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn,
    2020-08-14T08:06:30.701Z,422327,2,/o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa,,Microsoft.Exchange.RpcClientAccess.Monitoring.dll,15.0.0.0,Cached,,,,ncacn_http,Client=Microsoft.Exchange.RpcClientAccess.Monitoring,,,OwnerLogoff,0,00:00:00,LogonId: 1,,,,HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn,
    2020-08-14T08:06:30.701Z,422327,2,/o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa,,Microsoft.Exchange.RpcClientAccess.Monitoring.dll,15.0.0.0,Cached,,,,ncacn_http,Client=Microsoft.Exchange.RpcClientAccess.Monitoring,,,Disconnect,0,00:00:00.0310000,,,ClientRPCCount=0;AvgClientLatency=00:00:00;ServerRPCCount=2;AvgCasRPCProcessingTime=00:00:00.0155000;AvgMbxProcessingTime=00:00:00;MaxCasRPCProcessingTime=00:00:00.0160000;20%ClientPercentile=10;40%ClientPercentile=10;60%ClientPercentile=10;80%ClientPercentile=10;90%ClientPercentile=10;95%ClientPercentile=10;99%ClientPercentile=10;100%ClientPercentile=10;20%CasPercentile=10;40%CasPercentile=10;60%CasPercentile=20;80%CasPercentile=20;90%CasPercentile=20;95%CasPercentile=20;99%CasPercentile=20;100%CasPercentile=20;20%MbxPercentile=10;40%MbxPercentile=10;60%MbxPercentile=10;80%MbxPercentile=10;90%MbxPercentile=10;95%MbxPercentile=10;99%MbxPercentile=10;100%MbxPercentile=10;ClientRpcFailureData:,S:ActivityStandardMetadata.UserId=ADGuid:93aaef70-9438-4d4a-a3f5-afde54721e33;S:ActivityStandardMetadata.Puid=;S:ActivityStandardMetadata.UserEmail=HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn;S:WLM.Bal=149988.3;S:ActivityStandardMetadata.TenantId=domain.com.cn;S:ActivityStandardMetadata.Component=RCA/Mailbox;S:WLM.BT=Rca;S:ActivityStandardMetadata.Protocol=RPC/HTTP;S:ActivityStandardMetadata.ClientInfo=Microsoft.Exchange.RpcClientAccess.Monitoring.dll/15.0.0.0;I32:ADS.C[tjgc-portal]=3;F:ADS.AL[tjgc-portal]=5.615;I32:ATE.C[tjgc-portal.domain.com.cn]=3;F:ATE.AL[tjgc-portal.domain.com.cn]=0;I32:MB.C[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=4;F:MB.AL[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=0.5;Dbl:ST.T[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=1;Dbl:BudgUse.T[]=15.6267004013062;Dbl:RPC.T[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=2;I32:RPC.C[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=4;I32:MAPI.C[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=27;I32:ROP.C[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=260751964;Dbl:MAPI.T[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=2,HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn,
    2020-08-14T08:07:30.818Z,422328,0,/o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa,,Microsoft.Exchange.RpcClientAccess.Monitoring.dll,15.0.0.0,Cached,fe80::85ef:56ec:9ea7:8e25%19,,fe80::85ef:56ec:9ea7:8e25%19,ncacn_http,,171b384d-ba2a-4e69-a1cd-3ecc2470e432|67f13f0e-f1da-4eaa-9794-49cc845d94fe,"""{602910CC-05B5-4E7D-ACF5-E4263FE778D8} Client=ACTIVEMONITORING""",Connect,0,00:00:00,"SID=S-1-5-21-3256111343-953919050-1758267603-24006, Flags=None",,,,HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn,
    2020-08-14T08:07:30.849Z,422328,1,/o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa,,Microsoft.Exchange.RpcClientAccess.Monitoring.dll,15.0.0.0,Cached,,,,ncacn_http,Client=Microsoft.Exchange.RpcClientAccess.Monitoring,,,OwnerLogon,0,00:00:00.0310000,"Logon: Owner, /o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa in database  last mounted on exchange2013.domain.com.cn; LogonId: 1",,,,HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn,
    2020-08-14T08:07:30.849Z,422328,2,/o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa,,Microsoft.Exchange.RpcClientAccess.Monitoring.dll,15.0.0.0,Cached,,,,ncacn_http,Client=Microsoft.Exchange.RpcClientAccess.Monitoring,,,OwnerLogoff,0,00:00:00,LogonId: 1,,,,HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn,
    2020-08-14T08:07:30.849Z,422328,2,/o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa,,Microsoft.Exchange.RpcClientAccess.Monitoring.dll,15.0.0.0,Cached,,,,ncacn_http,Client=Microsoft.Exchange.RpcClientAccess.Monitoring,,,Disconnect,0,00:00:00.0310000,,,ClientRPCCount=0;AvgClientLatency=00:00:00;ServerRPCCount=2;AvgCasRPCProcessingTime=00:00:00.0155000;AvgMbxProcessingTime=00:00:00;MaxCasRPCProcessingTime=00:00:00.0310000;20%ClientPercentile=10;40%ClientPercentile=10;60%ClientPercentile=10;80%ClientPercentile=10;90%ClientPercentile=10;95%ClientPercentile=10;99%ClientPercentile=10;100%ClientPercentile=10;20%CasPercentile=10;40%CasPercentile=10;60%CasPercentile=10;80%CasPercentile=10;90%CasPercentile=10;95%CasPercentile=10;99%CasPercentile=10;100%CasPercentile=40;20%MbxPercentile=10;40%MbxPercentile=10;60%MbxPercentile=10;80%MbxPercentile=10;90%MbxPercentile=10;95%MbxPercentile=10;99%MbxPercentile=10;100%MbxPercentile=10;ClientRpcFailureData:,S:ActivityStandardMetadata.UserId=ADGuid:93aaef70-9438-4d4a-a3f5-afde54721e33;S:ActivityStandardMetadata.Puid=;S:ActivityStandardMetadata.UserEmail=HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn;S:WLM.Bal=149976.6;S:ActivityStandardMetadata.TenantId=domain.com.cn;S:ActivityStandardMetadata.Component=RCA/Mailbox;S:WLM.BT=Rca;S:ActivityStandardMetadata.Protocol=RPC/HTTP;S:ActivityStandardMetadata.ClientInfo=Microsoft.Exchange.RpcClientAccess.Monitoring.dll/15.0.0.0;I32:ADS.C[tjgc-portal]=2;F:ADS.AL[tjgc-portal]=6.4295;I32:ATE.C[tjgc-portal.domain.com.cn]=2;F:ATE.AL[tjgc-portal.domain.com.cn]=0;I32:MB.C[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=4;F:MB.AL[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=1;Dbl:STCPU.T[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=15;Dbl:ST.T[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=3;Dbl:BudgUse.T[]=31.2124004364014;Dbl:RPC.T[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=4;I32:RPC.C[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=4;I32:MAPI.C[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=27;I32:ROP.C[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=260755196;Dbl:MAPI.T[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=4,HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn,
    2020-08-14T08:08:30.944Z,422329,0,/o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa,,Microsoft.Exchange.RpcClientAccess.Monitoring.dll,15.0.0.0,Cached,fe80::85ef:56ec:9ea7:8e25%19,,fe80::85ef:56ec:9ea7:8e25%19,ncacn_http,,fa12ed08-a467-4174-b339-9d7009046e33|f6e84fc6-ad58-4a22-883a-7d67a7d2002d,"""{C97FCC17-2A46-4E75-80D2-B753BD03074B} Client=ACTIVEMONITORING""",Connect,0,00:00:00.0150000,"SID=S-1-5-21-3256111343-953919050-1758267603-24006, Flags=None",,,,HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn,
    2020-08-14T08:08:30.959Z,422329,1,/o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa,,Microsoft.Exchange.RpcClientAccess.Monitoring.dll,15.0.0.0,Cached,,,,ncacn_http,Client=Microsoft.Exchange.RpcClientAccess.Monitoring,,,OwnerLogon,0,00:00:00.0160000,"Logon: Owner, /o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa in database  last mounted on exchange2013.domain.com.cn; LogonId: 1",,,,HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn,
    2020-08-14T08:08:30.959Z,422329,2,/o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa,,Microsoft.Exchange.RpcClientAccess.Monitoring.dll,15.0.0.0,Cached,,,,ncacn_http,Client=Microsoft.Exchange.RpcClientAccess.Monitoring,,,OwnerLogoff,0,00:00:00,LogonId: 1,,,,HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn,
    2020-08-14T08:08:30.959Z,422329,2,/o=domainOrg/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=76adf283359647c5ae3ccecf14a07822-HealthMailboxa,,Microsoft.Exchange.RpcClientAccess.Monitoring.dll,15.0.0.0,Cached,,,,ncacn_http,Client=Microsoft.Exchange.RpcClientAccess.Monitoring,,,Disconnect,0,00:00:00.0310000,,,ClientRPCCount=0;AvgClientLatency=00:00:00;ServerRPCCount=2;AvgCasRPCProcessingTime=00:00:00.0155000;AvgMbxProcessingTime=00:00:00;MaxCasRPCProcessingTime=00:00:00.0160000;20%ClientPercentile=10;40%ClientPercentile=10;60%ClientPercentile=10;80%ClientPercentile=10;90%ClientPercentile=10;95%ClientPercentile=10;99%ClientPercentile=10;100%ClientPercentile=10;20%CasPercentile=10;40%CasPercentile=10;60%CasPercentile=20;80%CasPercentile=20;90%CasPercentile=20;95%CasPercentile=20;99%CasPercentile=20;100%CasPercentile=20;20%MbxPercentile=10;40%MbxPercentile=10;60%MbxPercentile=10;80%MbxPercentile=10;90%MbxPercentile=10;95%MbxPercentile=10;99%MbxPercentile=10;100%MbxPercentile=10;ClientRpcFailureData:,S:ActivityStandardMetadata.UserId=ADGuid:93aaef70-9438-4d4a-a3f5-afde54721e33;S:ActivityStandardMetadata.Puid=;S:ActivityStandardMetadata.UserEmail=HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn;S:WLM.Bal=149988.3;S:ActivityStandardMetadata.TenantId=domain.com.cn;S:ActivityStandardMetadata.Component=RCA/Mailbox;S:WLM.BT=Rca;S:ActivityStandardMetadata.Protocol=RPC/HTTP;S:ActivityStandardMetadata.ClientInfo=Microsoft.Exchange.RpcClientAccess.Monitoring.dll/15.0.0.0;I32:ADS.C[tjgc-portal]=3;F:ADS.AL[tjgc-portal]=5.813833;I32:ATE.C[tjgc-portal.domain.com.cn]=3;F:ATE.AL[tjgc-portal.domain.com.cn]=5.333333;I32:MB.C[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=4;F:MB.AL[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=0.5;Dbl:ST.T[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=1;Dbl:BudgUse.T[]=15.6273002624512;Dbl:RPC.T[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=2;I32:RPC.C[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=4;I32:MAPI.C[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=27;I32:ROP.C[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=260757140;Dbl:MAPI.T[exchange2013.f19b8ca2-ec7e-42b0-99ea-fd3a4fbe8fba]=2,HealthMailboxabb4a9ae23514e2fa88c4cbee19feefe@domain.com.cn,
    2020年8月17日 1:59
  • 以上是./Logging\RPC Client Access下最新的log
    2020年8月17日 2:00
  • 您好,

    为了更好地进行排查,需要您回答以下问题:

    1:您的Exchange 2013是什么版本(CU)?当前的环境是包含其他版本Exchange服务器的共存环境,还是独立的环境?

    2:事件查看器中是否还有其他ID的报错?如ID 5011,7032。

    3:服务器是否在虚拟机上运行,当前的内存占用情况如何?

    4:在出现此问题前您有做过什么操作吗?比如服务器升级。

    您可以先尝试以下操作,查看是否能解决问题:

    1:升级Exchange 2013到最新版本

    2:停止Exchange Health Manager服务

    3:打开注册表,进入以下路径


    在Rpc中新建一个DWORD(32bit)的值,命名为MinimumConnectionTimeout,设置值为120

    此致,

    Kael Yao


    如果以上回复对您有所帮助,建议您将其“标记为答复”. 如果您对我们的论坛支持有任何的建议,可以通过此邮箱联系我们:tnsf@microsoft.com.

    2020年8月17日 8:42
  • 感谢您的回复,经过检查和测试,证实该错误是由于我公司网络管理员按国家规定封禁了445 135 137 138 139端口导致的,放行这些端口之后服务恢复正常,但是以上端口按照规定必须封禁,请问应该如何操作使Exchange在不使用以上端口的情况下正常运行?
    • 已建议为答案 Kael Yao 2020年8月20日 6:12
    2020年8月18日 1:11
  • 您好,

    根据我的了解,确实存在方法可以修改默认的端口。

    但微软官方并不支持进行修改,因为这会导致Exchange及Windows的服务不稳定,进而产生更多问题。

    此致,

    Kael Yao


    如果以上回复对您有所帮助,建议您将其“标记为答复”. 如果您对我们的论坛支持有任何的建议,可以通过此邮箱联系我们:tnsf@microsoft.com

    2020年8月18日 8:53
  • 但是这些端口是按照规定必须要封禁的,我想知道Microsoft Exchange RPC 客户端访问这个服务是具体由于哪个端口的封禁导致无法使用的?能否有办法绕过这个端口?
    2020年8月19日 6:03
  • 另外,在端口放行后RPC服务恢复了正常,但是导致了新的问题,

    重新颁发证书后,移动端使用IMAP连接邮箱时提示“由于证书无效或不可信,无法连接到服务器

    已经重新发起了一个问题,若您方便的话请解答一下。

    https://social.technet.microsoft.com/Forums/ie/zh-CN/59e397aa-9b68-4140-a95e-fb1362410185/imap26381211532432224120?forum=exchangeserverzhchs

    2020年8月19日 6:13
  • 您好,

    >>我想知道Microsoft Exchange RPC 客户端访问这个服务是具体由于哪个端口的封禁导致无法使用的?

    目前我没有找到相关的官方文档对于此内容有详细说明,根据推测,主要原因可能是135和445端口。

    >>能否有办法绕过这个端口?

    根据这篇官方文档,Exchange 中的客户端和邮件流的网络端口

    微软不支持限制或更改内部 Exchange 服务器之间或内部 Exchange 服务器与内部 Lync 或 Skype for Business 服务器之间或所有类型的拓扑中的内部 Exchange 服务器与内部 Active Directory 域控制器之间的网络通信。

    通过修改端口等方法绕过端口的话,很可能会导致Exchange服务不稳定。

    此致,

    Kael Yao


    如果以上回复对您有所帮助,建议您将其“标记为答复”. 如果您对我们的论坛支持有任何的建议,可以通过此邮箱联系我们:tnsf@microsoft.com.

    2020年8月19日 9:52
  • 您好,

    请问您的问题有最新进展吗?如果您对此问题有任何疑问或需要进一步的帮助,请随时回复。

    此致,

    Kael Yao


    如果以上回复对您有所帮助,建议您将其“标记为答复”. 如果您对我们的论坛支持有任何的建议,可以通过此邮箱联系我们:tnsf@microsoft.com.

    2020年8月21日 9:43