XADM: Error 1025 Appears in Event Viewer Every 15 Seconds

• Microsoft Exchange Server, version 5.5

SYMPTOMS

While you are running Microsoft Exchange Server 5.5, Event Viewer may record the following event in the application log every 15 seconds or so:

Event ID: 1025
Source: MSExchangeIS Private
Type: Warning
Category: Transport
Description: An error occurred. Function name or description of problem: EcGetRestriction

CAUSE

This behavior can occur when the data integrity of the information store has become corrupted.

One possible cause of this is the number of times any particular search folder is added to and deleted from the ptagSearchBackLinks list, which is a list of information store folders in Exchange Server code being searched by the client. Search folders are at times added to the list more than once, but not all instances are deleted when the search is complete. This can occur when you perform a search on folders in the information store.

RESOLUTION

To resolve this issue, repair the damage by using the Isinteg utility with the -fix parameter on the information store.

To keep the problem from recurring, install the latest service pack for Exchange Server 5.5.

STATUS

Microsoft has confirmed this to be a problem in Microsoft Exchange Server 5.5.This problem was corrected in the latest U.S. Service Pack for Microsoft Exchange Server version 5.5.


For information on obtaining this service pack, query on the following word in the Microsoft Knowledge Base, without the spaces:

S E R V P A C K

MORE INFORMATION

There are two types of folders: search folders and normal folders. Search folders are the folders created by clients when they perform a search of a folder and its subfolders. The search folder contains information such as the folders that are being searched, the messages that meet the conditions, and so on.

On the normal folders, there is a property called ptagSearchBackLinks that lists all search folders that are referencing this normal folder. When items in the folder change (when messages are added, modified, or deleted), the folder must notify the search folder through the ptagSearchBackLinks list.

The problem is that when these search folders are created (when the client runs a 'Find' procedure), the search folder is added to the ptagSearchBackLinks list more than once. However, when the search folders are deleted (when the client closes the 'Find' dialog box), the folders are not necessarily removed from the ptagSearchBackLinks list the same number of times that they were added. Consequently, when the items in the normal folders change, they attempt to notify a search folder that does not exist, generating Event ID 1025.

Additional query words:

Keywords :
Version : winnt:5.5
Platform : winnt
Issue type : kbprb