| Event Id | 439 |
| Source | ESE |
| Description | <process name> (<process id>) <storage group name>Unable to write a shadowed header for file <file name>. Error <error code>. |
| Event Information | According to Microsoft: EXPLANATION: If the Exchange server database service is denied write access to its own database files (*.edb) or to the checkpoint file (*.chk), errors similar to the following may be seen: MSExchangeIS (xxxx) Unable to write a shadowed header for file [path\filename]. USER ACTION: 1. Check for alerts related to full disks and resolve as necessary. 2. To troubleshoot such errors, you must determine what has suddenly blocked the database service from access to its files. In many cases, restarting the affected server "breaks" the lock if you cannot find another way to do it. 3. Confirm that there is sufficient access to the disks. 4. If the database is still running, you may have to use Move Mailbox or ExMerge to move the mailboxes to another server. 5. If the database will not mount, you may need to restore from online backup. If there is no valid backup, as a last resort, you may need to repair the database with Eseutil /P, run isinteg -fix until all fixes are removed, and then mount the database and ExMerge to a new, blank database. |
| Reference Links | Exchange (ESE) |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.