Event IDs 1022/2080: Transport Stuck Starting - Fix Guide 2025

Log Name:      Application
Source:        MSExchangeTransport
Event ID:      1022
Level:         Error
Description:   Microsoft Exchange couldn't start transport agents.
               Error: The process cannot access the file because
               it is being used by another process.

Log Name:      Application
Source:        MSExchangeTransport
Event ID:      2080
Level:         Error
Description:   Microsoft Exchange Transport service initialization
               failed because the queue database could not be
               loaded. Error: JET_errFileAccessDenied

# Stop Transport service
Stop-Service MSExchangeTransport -Force

# Ensure dependencies are running
Start-Service MSExchangeADTopology
Start-Sleep -Seconds 10

# Start Transport service
Start-Service MSExchangeTransport

# Check status
Get-Service MSExchangeTransport | Select-Object Name, Status

# Stop all Exchange Transport processes
Stop-Service MSExchangeTransport -Force
Stop-Service MSExchangeFrontEndTransport -Force
Stop-Process -Name EdgeTransport -Force -ErrorAction SilentlyContinue

# Wait for processes to fully terminate
Start-Sleep -Seconds 15

# If antivirus is locking files, exclude the queue folder
# Add exclusion for: C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\data\Queue

# Start Transport
Start-Service MSExchangeTransport

# Stop Transport service
Stop-Service MSExchangeTransport -Force

# Navigate to queue folder
cd "C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\data\Queue"

# Check database state
eseutil /mh mail.que

# If Dirty Shutdown, run soft recovery
eseutil /r trn /l . /d .

# Check state again
eseutil /mh mail.que

# If still corrupted, try repair (DESTRUCTIVE - loses messages)
# eseutil /p mail.que

# Start Transport
Start-Service MSExchangeTransport

# CAUTION: This deletes ALL queued messages!

# Stop Transport
Stop-Service MSExchangeTransport -Force
Stop-Service MSExchangeFrontEndTransport -Force

# Backup old queue folder
$queuePath = "C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\data\Queue"
$backupPath = "C:\ExchangeBackup\Queue_$(Get-Date -Format 'yyyyMMdd_HHmmss')"-Format 'yyyyMMdd_HHmmss')"
Move-Item $queuePath $backupPath

# Create new empty folder
New-Item -ItemType Directory -Path $queuePath -Force

# Start Transport (creates new database)
Start-Service MSExchangeTransport
Start-Service MSExchangeFrontEndTransport

# Verify service running
Get-Service MSExchangeTransport | Select-Object Status

# List all agents with status
Get-TransportAgent | Format-Table Identity, Enabled, Priority

# Disable a specific agent (common culprits: antivirus, DLP)
Disable-TransportAgent "Malware Agent"
Disable-TransportAgent "Transport Rule Agent"

# Try starting Transport
Restart-Service MSExchangeTransport

# If successful, re-enable agents one by one to find the problematic one
Enable-TransportAgent "Transport Rule Agent"
Restart-Service MSExchangeTransport

# If a specific agent causes issues, check its configuration or update it

# Check current permissions
$queuePath = "C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles"
icacls $queuePath

# Reset permissions to default Exchange settings
$exchangeInstallPath = $env:ExchangeInstallPath
& "$exchangeInstallPath\bin\ResetSecurity.ps1" -Server $env:COMPUTERNAME

# Or manually grant permissions
$acl = Get-Acl $queuePath
$rule = New-Object System.Security.AccessControl.FileSystemAccessRule(
    "NT AUTHORITY\NETWORK SERVICE", "FullControl", "ContainerInherit,ObjectInherit", "None", "Allow"
)
$acl.SetAccessRule($rule)
Set-Acl $queuePath $acl

# Restart Transport
Restart-Service MSExchangeTransport

# Check AD Topology service
Get-Service MSExchangeADTopology | Select-Object Name, Status

# Restart AD Topology service
Restart-Service MSExchangeADTopology
Start-Sleep -Seconds 30

# Verify AD connectivity
$dc = (Get-ADDomainController -Discover).HostName
Test-NetConnection -ComputerName $dc -Port 389

# Clear AD Topology cache
Stop-Service MSExchangeADTopology
Remove-Item "C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\data\ADDriverCache.dat" -Force -ErrorAction SilentlyContinue
Start-Service MSExchangeADTopology
Start-Sleep -Seconds 30

# Now start Transport
Start-Service MSExchangeTransport

# Check certificates assigned to SMTP
Get-ExchangeCertificate | Where-Object {$_.Services -like "*SMTP*"} |
  Select-Object Thumbprint, Subject, NotAfter, Services

# If no certificate assigned or expired:
# Generate new self-signed certificate
$cert = New-ExchangeCertificate -GenerateRequest:$false -SubjectName "cn=mail.company.com" -PrivateKeyExportable $true -Services "SMTP"

# Or assign existing certificate to SMTP
Enable-ExchangeCertificate -Thumbprint "CERT_THUMBPRINT" -Services SMTP

# Restart Transport
Restart-Service MSExchangeTransport

# 1. Verify Transport service is running
Get-Service MSExchangeTransport | Select-Object Name, Status

# 2. Check Transport service health
Test-ServiceHealth | Where-Object {$_.Role -eq "Mailbox"} |
  Select-Object Role, RequiredServicesRunning, ServicesNotRunning

# 3. Verify queues are functional
Get-Queue | Select-Object Identity, Status, MessageCount | Format-Table

# 4. Send test email
Send-MailMessage -From "admin@company.com" -To "test@company.com" `
  -Subject "Transport Test $(Get-Date)" -Body "Testing after 1022/2080 fix"2080 fix" `
  -SmtpServer localhost

# 5. Check message tracking
Start-Sleep -Seconds 30
Get-MessageTrackingLog -Start (Get-Date).AddMinutes(-5) -MessageSubject "Transport Test*" |
  Select-Object Timestamp, EventId, Source, Recipients

# 6. Verify no new error events
Get-EventLog -LogName Application -Source MSExchangeTransport -Newest 10 |
  Select-Object TimeGenerated, EventID, EntryType

# Folders to exclude from antivirus scanning:
# - C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\
# - C:\Program Files\Microsoft\Exchange Server\V15\Bin\
# - C:\Windows\Temp\OICE_*

# Processes to exclude:
# - EdgeTransport.exe
# - MSExchangeTransport.exe
# - Microsoft.Exchange.*.exe

# Schedule this to run every 5 minutes
$svc = Get-Service MSExchangeTransport

if ($svc.Status -ne "Running") {
    # Attempt automatic restart
    Start-Service MSExchangeTransport -ErrorAction SilentlyContinue
    Start-Sleep -Seconds 60

    $svc = Get-Service MSExchangeTransport
    if ($svc.Status -ne "Running") {
        # Alert admin
        Send-MailMessage -To "admin@company.com" -From "alerts@company.com" `
          -Subject "CRITICAL: Exchange Transport Service Down on $env:COMPUTERNAME" `
          -Body "Transport service failed to start. Manual intervention required." `
          -SmtpServer "backup-smtp.company.com"
    }
}