Exchange database recovery

An Exchange database in Dirty Shutdown needs its matching transaction-log generation preserved.

Exchange mailbox databases use ESE transaction logs and checkpoints to maintain consistency. A server failure, missing log, storage outage, or incomplete restore can leave an EDB unable to mount normally.

Understand the symptom

Dirty Shutdown means committed database state may still depend on transaction-log replay.

WHY

What is happening

A soft recovery can replay matching logs to bring a database into a clean state. If logs are missing, damaged, or from a different generation, ordinary replay may not complete. Hard repair can discard unrecoverable pages and should not replace restoration, recovery-database workflows, or source preservation when mailbox data matters.

What you may see

Symptoms that change the recovery path.

01

Database will not mount

Exchange reports a storage, log, header, or consistency error when activating the mailbox database.

02

Eseutil reports Dirty Shutdown

The database header indicates outstanding transaction recovery is required.

03

Required log is missing

Recovery stops at a log generation that is unavailable, corrupt, or mismatched.

04

Storage failed during backup or restore

EDB and log files may reflect different points in the transaction history.

Protect the source

Actions that can make the situation worse.

01

Deleting logs removes replay data

Logs that look old may be required to bring the EDB to a consistent point.

02

Hard repair can discard pages

A mountable database after repair may still have missing mailboxes, folders, messages, or indexes.

03

Mount attempts create new state

Repeated activation and log changes can complicate the original failure timeline.

Do this now

Safe steps before evaluation.

01

Stop automatic activation

Prevent repeated mount, failover, circular logging, or reseed operations from changing the recovery set.

02

Copy EDB, logs, and checkpoint

Preserve the complete log directory and database header state, not only the EDB file.

03

Record Exchange context

Save server version, database GUID, DAG state, backup history, errors, and commands already attempted.

04

Protect the underlying disks

Image unstable RAID, SAN, virtual, or local storage before database-level work.

NEPFOSYS process

How a data-first evaluation proceeds.

01

EDB and log-chain review

NEPFOSYS identifies database identity, shutdown state, log prefix, generations, and storage condition.

02

Isolated recovery workspace

Database and logs are evaluated on protected copies with separate healthy storage.

03

Mailbox data validation

Recoverable mailboxes, folders, messages, and attachments are checked against business priorities.

A clear next step

Preserve the original device before another repair or recovery attempt.

Start a case with the exact symptoms, incident timeline, prior attempts, encryption details, and the files that matter most. NEPFOSYS will route the case to the appropriate DFW intake or nationwide mail-in path.

Start with a case review

Questions, answered

What customers ask before starting.

What is a Dirty Shutdown state?

It means the database requires transaction recovery and has not reached the clean state expected for normal mounting or a recovery database.

Can I delete the Exchange log files to free space?

Not during a recovery incident. Required logs may be the only path to a consistent EDB.

Is Eseutil hard repair the first step?

No. Preserve the source and assess soft recovery, backups, replicas, and recovery-database options first because hard repair can discard data.

DFW local · Nationwide mail-in

Protect the device. Start with the facts.

Start my recovery case