Browse Definitions :
Definition

poison mailbox

A poison mailbox is a corrupted mailbox on the Exchange Server that causes disruptions on the Exchange database store. A poison mailbox can cause the store to fail or prohibit access to all the mailboxes hosted by the Exchange Server. Exchange Server 2010 and later versions can identify and quarantine a poison mailbox before it disrupts the Exchange store and threatens the messaging platform.

Exchange Server quarantines a poison mailbox if a thread associated with that mailbox crashes, or more than five threads on a mailbox process have stalled. In either case, Exchange Server creates a registry key leading to the poison mailbox ID which includes the number of times the mailbox has crashed the store and the last time the mailbox crashed the store. If Exchange Server flags a mailbox as poisoned three times in two hours, then it will quarantine that mailbox for six hours before being released.

Exchange administrators can adjust the number of times a mailbox can be identified as poisoned before it is quarantined. They can also change the length of time a mailbox remains in quarantine before the Exchange Server releases it.

Exchange Server isolates a quarantined mailbox from users and other Exchange processes -- such as content indexing and mailbox tools -- until it lifts the quarantine. If an administrator troubleshoots and corrects the root cause of the poison mailbox event, they can manually release the quarantined mailbox by deleting the registry key for the crash event. If the administrator does not identify and correct the root cause, Exchange will release the poison mailbox automatically when the quarantine duration expires.

Administrators can check the system event log and search for event 10018 to identify quarantined mailboxes. Other log events may point to potential thread execution problems -- which may lead to poison mailbox quarantines -- such as a time-out on the Exchange Server (event 10025), a time-out on the database (event 10026), and a time-out on an individual mailbox (event 10027).

Administrators can see the MSExchangeIS Mailbox\Quarantined Mailbox Count counter in the Performance Monitor monitoring tool to track quarantined mailboxes. PowerShell allows administrators to gauge the quarantined state of a mailbox using the Get-MailboxStatistics cmdlet. Administrators can use the New-MailboxRepairRequest cmdlet in PowerShell to detect and repair mailbox or store corruptions in Exchange 2010 Service Pack 1 (SP1) and later.

This was last updated in October 2016

Continue Reading About poison mailbox

SearchCompliance

  • compliance risk

    Compliance risk is an organization's potential exposure to legal penalties, financial forfeiture and material loss, resulting ...

  • information governance

    Information governance is a holistic approach to managing corporate information by implementing processes, roles, controls and ...

  • enterprise document management (EDM)

    Enterprise document management (EDM) is a strategy for overseeing an organization's paper and electronic documents so they can be...

SearchSecurity

  • information security (infosec)

    Information security, often shortened to infosec, is the practice, policies and principles to protect data and other kinds of ...

  • denial-of-service attack

    A denial-of-service (DoS) attack is a security event that occurs when an attacker makes it impossible for legitimate users to ...

  • user authentication

    User authentication verifies the identity of a user attempting to gain access to a network or computing resource by authorizing a...

SearchHealthIT

SearchDisasterRecovery

  • risk mitigation

    Risk mitigation is a strategy to prepare for and lessen the effects of threats faced by a business.

  • call tree

    A call tree is a layered hierarchical communication model that is used to notify specific individuals of an event and coordinate ...

  • Disaster Recovery as a Service (DRaaS)

    Disaster recovery as a service (DRaaS) is the replication and hosting of physical or virtual servers by a third party to provide ...

SearchStorage

  • cloud storage

    Cloud storage is a service model in which data is transmitted and stored on remote storage systems, where it is maintained, ...

  • cloud testing

    Cloud testing is the process of using the cloud computing resources of a third-party service provider to test software ...

  • storage virtualization

    Storage virtualization is the pooling of physical storage from multiple storage devices into what appears to be a single storage ...

Close