Windows 10: BSOD Exchange Server

Got a BSOD on an Exchange server today, Windows 2008 R2. I was just looking around the exchange management console and the machine disconnected me, I went into VMWare, opened the console and it had BSOD on me. I managed to run the minidump file in windbg and get the following. I have never really had to look through a DMP file before so I don't really understand what I am looking at here. Any advice?

Code: ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck FC, {fffff880009c5f38, 80000000022f2963, fffff88009738ea0, 2} Probably caused by : ntkrnlmp.exe ( nt! ?? ::FNODOBFM::`string'+3b8cc ) Followup: MachineOwner --------- 1: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* ATTEMPTED_EXECUTE_OF_NOEXECUTE_MEMORY (fc) An attempt was made to execute non-executable memory. The guilty driver is on the stack trace (and is typically the current instruction pointer). When possible, the guilty driver's name (Unicode string) is printed on the bugcheck screen and saved in KiBugCheckDriver. Arguments: Arg1: fffff880009c5f38, Virtual address for the attempted execute. Arg2: 80000000022f2963, PTE contents. Arg3: fffff88009738ea0, (reserved) Arg4: 0000000000000002, (reserved) Debugging Details: ------------------ DUMP_CLASS: 1 DUMP_QUALIFIER: 400 BUILD_VERSION_STRING: 7601.23677.amd64fre.win7sp1_ldr.170209-0600 SYSTEM_MANUFACTURER: VMware, Inc. VIRTUAL_MACHINE: VMware SYSTEM_PRODUCT_NAME: VMware Virtual Platform SYSTEM_VERSION: None BIOS_VENDOR: Phoenix Technologies LTD BIOS_VERSION: 6.00 BIOS_DATE: 07/30/2013 BASEBOARD_MANUFACTURER: Intel Corporation BASEBOARD_PRODUCT: 440BX Desktop Reference Platform BASEBOARD_VERSION: None DUMP_TYPE: 2 BUGCHECK_P1: fffff880009c5f38 BUGCHECK_P2: 80000000022f2963 BUGCHECK_P3: fffff88009738ea0 BUGCHECK_P4: 2 CPU_COUNT: 2 CPU_MHZ: a28 CPU_VENDOR: GenuineIntel CPU_FAMILY: 6 CPU_MODEL: 2d CPU_STEPPING: 2 CPU_MICROCODE: 6,2d,2,0 (F,M,S,R) SIG: 416'00000000 (cache) 416'00000000 (init) CUSTOMER_CRASH_COUNT: 1 DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT_SERVER BUGCHECK_STR: 0xFC PROCESS_NAME: mmc.exe CURRENT_IRQL: 0 ANALYSIS_SESSION_HOST: IPS-IT-LT-09 ANALYSIS_SESSION_TIME: 01-08-2018 14:13:40.0069 ANALYSIS_VERSION: 10.0.16299.91 x86fre TRAP_FRAME: fffff88009738ea0 -- (.trap 0xfffff88009738ea0) NOTE: The trap frame does not contain all registers. Some register values may be zeroed or incorrect. rax=fffff900c221d700 rbx=0000000000000000 rcx=0000000000000000 rdx=0000000000000001 rsi=0000000000000000 rdi=0000000000000000 rip=fffff800018b8400 rsp=fffff88009739030 rbp=fffff88009739d05 r8=fffff8000184b000 r9=0000000000000000 r10=fffffffffffffffd r11=fffff880009bf101 r12=0000000000000000 r13=0000000000000000 r14=0000000000000000 r15=0000000000000000 iopl=0 nv up di ng nz na pe nc nt!KiPageFault: fffff800`018b8400 55 push rbp Resetting default scope LAST_CONTROL_TRANSFER: from fffff80001938136 to fffff800018ba440 STACK_TEXT: fffff880`09738d38 fffff800`01938136 : 00000000`000000fc fffff880`009c5f38 80000000`022f2963 fffff880`09738ea0 : nt!KeBugCheckEx fffff880`09738d40 fffff800`018b856e : 00000000`00000008 fffff880`009c5f38 00000010`008c0a00 fffffa80`7e8a8d80 : nt! ?? ::FNODOBFM::`string'+0x3b8cc fffff880`09738ea0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault+0x16e fffff880`09739030 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`09739060 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`09739090 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`097390c0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`097390f0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`09739120 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`09739150 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`09739180 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`097391b0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`097391e0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`09739210 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`09739240 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`09739270 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`097392a0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`097392d0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`09739300 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`09739330 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`09739360 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`09739390 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`097393c0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`097393f0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`09739420 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`09739450 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`09739480 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`097394b0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`097394e0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`09739510 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`09739540 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`09739570 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`097395a0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`097395d0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`09739600 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`09739630 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`09739660 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`09739690 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`097396c0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`097396f0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`09739720 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`09739750 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`09739780 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`097397b0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`097397e0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`09739810 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`09739840 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`09739870 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`097398a0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`097398d0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`09739900 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`09739930 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`09739960 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`09739990 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`097399c0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`097399f0 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`09739a20 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`09739a50 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`09739a80 fffff800`018b8400 : 00000000`00000010 fffff800`018b8400 00000000`00000010 00000000`00010082 : nt!KiPageFault fffff880`09739ab0 fffff800`018b8400 : 00000000`00000010 fffff960`001c7ae0 00000000`00000010 00000000`00010282 : nt!KiPageFault fffff880`09739ae0 fffff960`001c7ae0 : 00000000`0000ff00 fffff960`000f7b51 00000000`0000000a 00000000`0000306c : nt!KiPageFault fffff880`09739b10 fffff960`001c7b78 : 00000000`00000000 ffffffff`9c080527 fffff900`c0be8c00 fffff960`002643c0 : win32k!GreAcquireSemaphore+0x1c fffff880`09739b40 fffff960`000e64f7 : fffff880`09739d08 fffff960`000e606d 00000000`00000000 fffffa80`00000000 : win32k!GreAcquireHmgrSemaphore+0x10 fffff880`09739b70 fffff960`000e7bc6 : fffff880`09739d18 fffff880`09739d10 fffff880`09739d40 fffff880`09739f08 : win32k!HmgInsertObject+0x4f fffff880`09739bc0 fffff960`000bc758 : fffff880`00000000 00000000`00000000 00000000`02220000 00000000`00000000 : win32k!SURFMEM::bCreateDIB+0x792 fffff880`09739cb0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : win32k!GreCreateDIBitmapReal+0x548 THREAD_SHA1_HASH_MOD_FUNC: ab2d763cc9803ad6f9698fa98400d4eaf56ce9af THREAD_SHA1_HASH_MOD_FUNC_OFFSET: e9c6e9f27e6f4bf6e1a6ddbfc531a53d7506563c THREAD_SHA1_HASH_MOD: aa80c53405f90a3f2d07160345d02132c204b91e FOLLOWUP_IP: nt! ?? ::FNODOBFM::`string'+3b8cc fffff800`01938136 cc int 3 FAULT_INSTR_CODE: 4901b2cc SYMBOL_STACK_INDEX: 1 SYMBOL_NAME: nt! ?? ::FNODOBFM::`string'+3b8cc FOLLOWUP_NAME: MachineOwner MODULE_NAME: nt IMAGE_NAME: ntkrnlmp.exe DEBUG_FLR_IMAGE_TIMESTAMP: 589c915d IMAGE_VERSION: 6.1.7601.23677 STACK_COMMAND: .thread ; .cxr ; kb FAILURE_BUCKET_ID: X64_0xFC_nt!_??_::FNODOBFM::_string_+3b8cc BUCKET_ID: X64_0xFC_nt!_??_::FNODOBFM::_string_+3b8cc PRIMARY_PROBLEM_CLASS: X64_0xFC_nt!_??_::FNODOBFM::_string_+3b8cc TARGET_TIME: 2018-01-08T13:31:15.000Z OSBUILD: 7601 OSSERVICEPACK: 1000 SERVICEPACK_NUMBER: 0 OS_REVISION: 0 SUITE_MASK: 272 PRODUCT_TYPE: 3 OSPLATFORM_TYPE: x64 OSNAME: Windows 7 OSEDITION: Windows 7 Server (Service Pack 1) TerminalServer SingleUserTS OS_LOCALE: USER_LCID: 0 OSBUILD_TIMESTAMP: 2017-02-09 15:57:17 BUILDDATESTAMP_STR: 170209-0600 BUILDLAB_STR: win7sp1_ldr BUILDOSVER_STR: 6.1.7601.23677.amd64fre.win7sp1_ldr.170209-0600 ANALYSIS_SESSION_ELAPSED_TIME: 6a0 ANALYSIS_SOURCE: KM FAILURE_ID_HASH_STRING: km:x64_0xfc_nt!_??_::fnodobfm::_string_+3b8cc FAILURE_ID_HASH: {df1919c4-4780-0541-a786-cbc2df619a49} Followup: MachineOwner --------- 1: kd> .trap 0xfffff88009738ea0 NOTE: The trap frame does not contain all registers. Some register values may be zeroed or incorrect. rax=fffff900c221d700 rbx=0000000000000000 rcx=0000000000000000 rdx=0000000000000001 rsi=0000000000000000 rdi=0000000000000000 rip=fffff800018b8400 rsp=fffff88009739030 rbp=fffff88009739d05 r8=fffff8000184b000 r9=0000000000000000 r10=fffffffffffffffd r11=fffff880009bf101 r12=0000000000000000 r13=0000000000000000 r14=0000000000000000 r15=0000000000000000 iopl=0 nv up di ng nz na pe nc nt!KiPageFault: fffff800`018b8400 55 push rbp[/quote]

:)

 

Activesync 0x80070018

Well, as I explained previously, I'm connecting to an exchange server not trying to retrieve my email from a pop3 or imap server.



With an exchange server, one uses the tools / addserver command in activesync, enter the server address; the username; password, and domain. I've done all that with the appropriate settings (which work with another device) with two different exchange servers.
My server is exchange.1and1.com; the domain is EXCHANGE and I'm omitting my username and password.

 

NO HTML emails with MfE on N97

it depends on your exchange server, if it's exchange 2003 it doesnt support HTML.

you need 2007 and 2010 exchange server.

 

Hello Jporter297,

Sorry for the delay in a response. This is probably because there is very little information to be extracted from the WinDBG analysis - no guilty driver was detected.

You will probably need to wait and see if it repeats and try and post a set of logfiles for us to explore.