Topic Last Modified: 2006-02-27
The Microsoft® Exchange Server Analyzer Tool includes a performance data collection engine that is used to query performance counter objects on computers that are running Exchange 2000 Server or Exchange Server 2003. The performance data collection engine collects data from the Virus Scan Queue Length performance counter of the MSExchangeIS performance object to analyze performance data.
If the Exchange Server Analyzer determines that the 90th percentile value for the Virus Scan Queue Length counter is greater than 10 during the sample time slice, the Exchange Server Analyzer displays an error.
The Virus Scan Queue Length performance counter indicates the current number of outstanding requests that are queued for virus scanning.
This error can indicate performance issues related to the following:
- Decreased server performance, usually caused by a CPU
bottleneck.
- Larger than usual server load.
- An out-of-date virus scanning engine.
- An incorrectly configured virus scanning engine.
To resolve this error, take the following steps:
- Look for updates for your virus engine.
- Consider re-installing the virus scanning software.
- Examine the configuration of your virus scanning engine for the
correct thread configuration, file level exclusions, etc. See
Microsoft Knowledge Base article 823166, "Overview of Exchange
Server 2003 and antivirus software" (http://go.microsoft.com/fwlink/?linkid=3052&k b
id=823166).
- Use the Performance Monitor (Perfmon.msc) tool to determine
whether the bottleneck is caused by an increased load on the server
or whether the server is undersized. If the server load has
increased, identify the source of the load and reduce it. If the
server has insufficient resources, increase the necessary resources
or, move users off the server.
Removing Processor Bottlenecks
There are many ways to remove processor bottlenecks from your Exchange server.
- First, review the applications or tasks that are causing load
on the server. Determine whether the application should be using
the processor time that it is or whether there might be an issue
with the process.
- If a non-Exchange application is not important to that server,
run that application on another server. If you can run that
application on another server, move server roles to other computers
also. For example, if the Inetinfo process is using lots of CPU
utilization, consider adding front-end servers to assume
responsibility for the protocol work that Inetinfo performs. You
can also move public folder access to a dedicated public folder
server. Finally, if a server performs lots of distribution list
expansions, you can reduce CPU utilization by moving distribution
list expansion to a dedicated distribution-list expansion
server.
- Add more or faster processors to the server if you can. Also,
enable hyper-threading if it is supported by the processors. You
can enable hyper-threading by configuring the system BIOS. For more
information, see the computer manufacturer's Help
documentation.
- If increasing the processing power is not a workable option,
you must reduce the load on the processors. To reduce the overall
effect on the server, make sure that I/O-intensive, CPU-intensive,
or memory-using tasks occur outside ordinary operation hours.
- Make sure that CPU-intensive tasks, such as backup and
maintenance, occur during off-peak hours. Also, make sure and that
these tasks are performed in a staged manner. Staging a task means
setting different start times and, preferably, end times for each
task. Staging the maintenance and backup of databases or storage
groups also lessens the effect of these resource-intensive
tasks.
For More Information
- For an overview of Exchange Server and virus scanning, see
Microsoft Knowledge Base article 823166, "Overview of Exchange
Server 2003 and antivirus software" (http://go.microsoft.com/fwlink/?linkid=3052&kbid=823166).
- For more information about virus scanning and Exchange Server,
see Microsoft Knowledge Base article 285667, "XADM: Understanding
Virus Scanning API 2.0 in Exchange 2000 Server SP1" (http://go.microsoft.com/fwlink/?linkid=3052&kbid=285667).
- For more information about processor bottlenecks, see Processor
Bottleneck.
- For more information about Exchange Server performance, see the
Performance and Scalability Guide for Exchange Server 2003
(http://go.microsoft.com/fwlink/?LinkId=47576).
- For more information about troubleshooting Exchange Server
performance issues, see Troubleshooting Microsoft Exchange
Server Performance (http://go.microsoft.com/fwlink/?LinkId=47588).
- For more information about how to move user mailboxes to reduce
server load, see Move User Mailboxes to
Another Server.