Event ID - 126

Event Id126
SourceESE97
DescriptionMicrosoft Exchange Directory Service (256) Unable to write section while flushing the log. Error -1032
Event Information
CAUSE: This issue may occur when files that Microsoft Exchange Directory service needs must have are set to read-only. The Symantec Corporations Norton AntiVirus software may set this attribute on the Microsoft Exchange Server files while the antivirus program completes its antiviral scan.
RESOLUTION: To resolve this issue, you must reset the read-only attribute that the Microsoft Exchange Ddirectory service requires on the Microsoft Exchange Server files. You must also reconfigure Norton AntiVirus to prevent it from scanning these files in the future.

To do so, follow these steps:
In Windows Explorer, locate the following file:
drive:\Exchsrvr\Dsadata\Dir.edb,
where drive is the drive on which Microsoft Exchange Server is installed.
Right-click Dir.edb, and then click Properties.
Click to clear the Read-only check box, and then click OK. Locate the following file: drive:\Exchsrvr\Dsadata\Edb.log, where drive is the drive on which Microsoft Exchange Server is installed.

Right-click Edb.log, and then click Properties.
Click to clear the Read-only check box, and then click OK.
Locate the following file: drive:\Exchsrvr\Mdbdata\Edb.log, where drive is the drive on which Microsoft Exchange Server is installed.

Right-click Edb.log, and then click Properties.
Click to clear the Read-only check box, and then click OK.
Quit Windows Explorer.
Start the Microsoft Exchange directory service.
Reconfigure Norton AntiVirus so that it does not scan any of the following folders:

Dsadata
Mdbdata
Mtadata
Reference LinksExchange Directory Service Does Not Start

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.