Share via

Exchange 2016 Troubleshooting: Event ID 3028 Warning logged

  • Article

In your Exchange 2016 environment, you might be running CU8 or CU9 but keep noticing the following warning below log about every 6 hours in the application log:

Log Name: Application

Source: MSExchangeApplicationLogic

Date: 7/17/2018 6:10:23 PM

Event ID: 3028

Task Category: Extension

Level: Warning

Keywords: Classic

User: N/A

Computer: Server01.lab.com

Description:

Scenario: ProcessKillBit. Failed to read killbit list file because of exception System.IO.IOException: The process cannot access the file

'C:\Program Files\Microsoft\Exchange Server\V15\ClientAccess\owa\prem\15.1.1466.8\ext\killbit\killbit.xml' because it is being used by another process.

at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)

at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy, Boolean useLongPath, Boolean checkHost)

at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share)

at Microsoft.Exchange.Data.ApplicationLogic.Extension.KillBitHelper.TryReadKillBitFile(Int32& refreshRate, DateTime& lastModifiedTime)

Troubleshooting

Trying to figure out what is causing it to no avail, it is probably a bug in the CU or its looking for something which is not set.

We have not noticed any issues with Exchange at present, so hopefully it is safe to say we can ignore this for now.

From what is understood from the Team is that there is no fix at present, hopefully it will be addressed in a future CU release.