A community member has associated this post with a similar question:
MSExchangeServiceHost keeps crashing and restarting

Only moderators can edit this content.

MSExchangeServiceHost keeps crashing and restarting

Joseph Larrew 0 Reputation points
2023-01-31T20:55:56.7533333+00:00

So I'm not entirely sure when this started, but it's been at least a couple of months. I have many servers in my environment that are logging Event 4999, with the message "Watson report about to be sent for process id: 25436, with parameters: E12IIS, c-RTL-AMD64, 15.02.0922.027, M.Exchange.ServiceHost, M.Exchange.Diagnostics, M.E.D.ChainedSerializationBinder.LoadType, M.E.Diagnostics.BlockedDeserializeTypeException, 545e-dumptidset, 15.02.0922.027. ErrorReportingEnabled: False "

After that, there's plenty of "Information" events saying the service is starting, the Exchange roles (Client Access, Mailbox, Transport) are installed, Loading servicelet module <insert several modules here>. One event prior to it doesn't appear to be relevant either, but I guess I can't rule it out. But yeah, this group of events took place many times (>10) today alone on one server alone that I was able to capture the event log for.

Event ID 9000

Source: MSExchange Mid-Tier Storage

Message: [Process:Microsoft.Exchange.ServiceHost PID: 25436 Thread:82] Successfully populated ServiceTopology. Reason to populate ServiceTopology = CacheNotPresent

I've seen this article as well: https://support.microsoft.com/en-us/topic/exchange-service-host-service-fails-after-installing-march-2022-security-update-kb5013118-1cf2ecaf-2e87-4c42-b541-6adc47e01a5d

And I don't know how to ascertain if what is outlined in the article is what's happening and this is happening with servers that are at 2019 CU10 level.

Is there a way to capture more information on why the MSExchangeServiceHost is crashing?

Edit: Adding a CSV file to show how random the service is starting and stopping at different servers. Probably best to save it as a CSV and then use the filter to see which servers are stopped. ServiceHostUpAndDownAcrossOrg.txt

Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,356 questions

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Jame Xu-MSFT 4,166 Reputation points
    2023-02-01T02:06:04.8533333+00:00

    Hi @Joseph Larrew ,

    Are you using Exchange 2019 CU10? Microsoft recommends that you always keep your CU and SU up to date and you could try updating, which may help you resolve the issue.

    Latest CU: Cumulative Update 12 for Exchange Server 2019 (KB5011156)

    Latest SU: Security Update For Exchange Server 2019 CU12 SU5 (KB5022193)

    If an Answer is helpful, please click "Accept Answer" and upvote it.

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

  2. Andy David - MVP 142.2K Reputation points MVP
    2023-02-01T12:52:39.6266667+00:00

    Hi Joseph, I would apply CU12 and the latest security updates as soon as possible first. There are critical updates within those CUs and security update and your server are vulnerable to compromise

    https://techcommunity.microsoft.com/t5/exchange-team-blog/protect-your-exchange-servers/ba-p/3726001