unexpected shutdown Windows 2012 R2 exchange 2016 - event ID 1003, 6027, 1325, 4018

Pingatwork 41 Reputation points
2021-03-22T17:00:08.48+00:00

Hi experts,

an unexpected shutdown happened on my Windows 2012 R2 running exchange 2016 standard CU19 Version 15.1 ‎(Build 2176.2)‎
there are Application log Event ID : 1325, 9646, 4999, 4018, 3018, 3025, 6027, 1003, 1008 when i searched for the last 12 hours events.

event source: FIPFS
event ID: 6027
the description :
MS Filtering Engine Update process was unsuccessful to download the engine update for Microsoft from Primary Update Path.
Update Path:http://amupdatedl.microsoft.com/server/amupdate
UpdateVersion:0
Reason:"There was a catastrophic error while attempting to update the engine. Error: DownloadEngine failed and there are no further update paths available.Engine Id: 1 Engine Name: Microsoft"

event source: MSExchange Front End HTTP Proxy
event ID: 1003
the description :
[Ecp] An internal server error occurred. The unhandled exception was: System.ArgumentException: Invalid value

at Microsoft.Exchange.HttpProxy.ServerInfoAnchorMailbox..ctor(BackEndServer backendServer, IRequestContext requestContext)
at Microsoft.Exchange.HttpProxy.BEResourceRequestHandler.ResolveAnchorMailbox()
at Microsoft.Exchange.HttpProxy.ProxyRequestHandler.InternalBeginCalculateTargetBackEnd(AnchorMailbox& anchorMailbox)
at Microsoft.Exchange.HttpProxy.ProxyRequestHandler.<BeginCalculateTargetBackEnd>b__280_0()
at Microsoft.Exchange.Common.IL.ILUtil.DoTryFilterCatch(Action tryDelegate, Func2 filterDelegate, Action1 catchDelegate)

there're a few event ID in the system log, Event ID: 5011, 36874, 36888, 36887.

So many events need to troubleshoot, I am in need of lots of brilliant heads, trying to fix this asap.

Thanks for your time.
pingatwork

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,215 questions
Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,373 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Kael Yao-MSFT 37,496 Reputation points Microsoft Vendor
    2021-03-23T06:15:25.617+00:00

    Hi, pingatwork.

    Please note that not all these events are related to Exchange server health.

    For example, event 6027 indicates the server failed to update MS Filtering Engine, it may be caused by temporary network problems.
    While event 1003 indicates EAC/OWA cannot be accessed.

    Do you currently have any actual problems with the Exchange server?
    Is mail flow, client access and EAC/EMS working fine?

    If any actual problems, I suggest that we focus on them.

    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.