Switching out of forest mode

April 5, 2014, 3:08 pm

≪ Previous: Exchange Server 2003 issues AFTER moving DC 2003 to New DC 2012

Hi all,

it seems that one of my mailboxes got corrupt after recovering it from deletion. When I open the mailbox in the online Exchange interface I get this error:

The items you're trying to open couldn't be found.

And when I try to change the e-mailadres (it's now set to the wrong one: the same address as another mailbox, really weird) via PowerShell, I get this error: http://social.technet.microsoft.com/Forums/getfile/440631 (my account is not yet verified so I can't attach the image in this post)

Any ideas?

↧

exsetupui.exe stopped working.

April 5, 2014, 9:52 pm

≫ Next: Exchange 2013 Certificates for Hybrid Deployment Clarification

≪ Previous: Switching out of forest mode

Hi Everyone,

I was upgrading exchange server 2010 sp2 to sp3. everything was fine until it reach hub transport role and exsetupui.exe stopped working. Please help me. I need to get this resolve as soon as possible as exchange is broken right now. Thanks in advance.

Problem signature:
Problem Event Name: BEX64
Application Name: ExSetupUI.exe
Application Version: 14.3.123.3
Application Timestamp: 5110a52e
Fault Module Name: MSVCR80.dll
Fault Module Version: 8.0.50727.6195
Fault Module Timestamp: 4dcdd833
Exception Offset: 000000000001da44
Exception Code: c000000d
Exception Data: 0000000000000000
OS Version: 6.1.7601.2.1.0.305.9
Locale ID: 18441
Additional Information 1: 9e86
Additional Information 2: 9e864bd861d0520192774779d75b894a
Additional Information 3: c5d6
Additional Information 4: c5d61b6bd15d93a11872b3ec74c0d222

Read our privacy statement online:
http://go.microsoft.com/fwlink/?linkid=104288&clcid=0x0409

If the online privacy statement is not available, please read our privacy statement offline:
C:\Windows\system32\en-US\erofflps.txt

↧

Exchange 2013 Certificates for Hybrid Deployment Clarification

March 31, 2014, 5:04 am

≫ Next: Outlook clients on Windows XP not connecting to Exchange 2013

≪ Previous: exsetupui.exe stopped working.

I have an Exchange 2013 servers (CAS and Mailbox on separate server) which I wanted to setup for Hybrid deployment. I already have a certificate acquired from 3rd party with 3 names (mail, autodiscover and owa). the certificate was installed in the CAS server. As per the hybrid deployment documentation I need also to install a certificate in the mailbox server, questions:

1. Can I use the same certificate for installation in the mailbox server?

2. Can I also use the same certificate in the Hybrid Configuration wizard for the "certificate to use with securing the hybrid mail transport"?

3. Do I need to include the primary smtp domain (xxxxx.com) in the certificate since current configuration points to the mail.xxx.com as the certificate common name?

↧

Outlook clients on Windows XP not connecting to Exchange 2013

April 6, 2014, 8:57 am

≫ Next: installing exchange 2010/2013 in a test environment @ home

≪ Previous: Exchange 2013 Certificates for Hybrid Deployment Clarification

Previously outlook on XP machines were working fine with a SAN certificate having the mail.company.com as common name. Since we're moving to Exchange Hybrid we reissued the certificate and made company.com as the common name after that change all Outlook on XP machines are not able to connect to the Exchange 2013. It is always asking for password. Outlook clients on windows 7 and 8 have no problem.

I wanted to run the below commands but I'm worried that it may break the connections of the Windows 7 and 8 machines:

Set-OutlookProvider EXCH -CertPrincipalName msstd:mail.XXX.com
Set-OutlookProvider EXPR -CertPrincipalName msstd:mail.XXX.com

Is it safe to run the commands or I should just reissue again the certificate and make the mail.company.com as the common name? Will there be any issues with Exchange 2013 hybrid if I do this?

↧

installing exchange 2010/2013 in a test environment @ home

March 31, 2014, 12:08 am

≫ Next: Enable Exchange 2013 server users authenticate by certificate.

≪ Previous: Outlook clients on Windows XP not connecting to Exchange 2013

guys,

need some help setting up the exchange environment.

I would like to install exhcnage in my test environment at home. This means i dont have a static ip. Also, it might be that my isp is blocking some ports.

Is it possible to find out(by a tool?) if ports are blocked by my isp

second, how should i setup my receive and send connector in my test environment for exchnage 2010/2013 ? The problem is that i dont have a static ip.

many thanks for the help.

↧

Enable Exchange 2013 server users authenticate by certificate.

April 6, 2014, 3:20 am

≫ Next: Exchange OWA still authenticate with revoked certificate.

≪ Previous: installing exchange 2010/2013 in a test environment @ home

Hello guys!

I need to implement secure Exchange authentication through OWA and Outlook (optional). I have PKI in my environment, so I want my users to authenticate in OWA using smart card certificate (or other user certificate) if they outside my organization. Is it possible? If so, I can setup auto enrollment policy in my domain and make my users authenticate automatically using their personal certificates. Microsoft Lync uses similar authentication mechanism. May be I can setup it in Exchange 2013? General aim of all this it is to avoid brute force or other potential authentication attacks to my Exchange outside the organization. Of course I can use VPN and not public my Exchange outside at all, but it is not as sophisticated 8-) Please, help, if you have any ideas.

↧

Exchange OWA still authenticate with revoked certificate.

April 6, 2014, 11:33 am

≫ Next: Blocking email

≪ Previous: Enable Exchange 2013 server users authenticate by certificate.

Hi guys! I've set up OWA Exchange 2013 certificate authentication using this article http://blogs.technet.com/b/exchange/archive/2008/11/12/3406481.aspx Everything works good, but a still can log in with revoked certificate outside my organization. I have CDP and AIA published through http and ldap. My outside machine can determinate that certificate is revoked certutil -f –urlfetch -verify mycert.crt shows that it is revoked. Internet Explorer hides it and doesn't allow me to choose it. But Google Chrome allows to choose this certificate and after it my Exchange server also successfully authenticates me. I think it is something with my Exchange settings. Why it authenticates me with revoked certificate? I've described my Exchange server settings here http://social.technet.microsoft.com/Forums/en-US/597558fd-2e3f-4b5b-9cae-77e6d4abb096/enable-exchange-2013-server-users-authenticate-by-certificate?forum=exchangesvrgeneral<o:p></o:p>

Thank you for help.<o:p></o:p>

↧

Blocking email

March 28, 2014, 10:39 am

≫ Next: GAL not updating

≪ Previous: Exchange OWA still authenticate with revoked certificate.

I am running MES2007 on a network with Outlook loaded on the PCs. One person who regularly wants to send email to the group from a home pc is finding that their emails never arrive - the Outlook spam filters are not picking them up, and the sender does not receive an error message. Is it possible that MES is somehow blocking the email? The senders address is from an orangehome account.

Michael 2000

↧

GAL not updating

March 31, 2014, 12:53 pm

≫ Next: Exchange 2010 shared mailbox not accessible from mailbox still on 2003

≪ Previous: Blocking email

I've researched this and I've yet to find a resolution. Can anyone help me get this fixed. No Outlook clients are updating, OWA sees everything correctly. Non cached mode sees GAL fine. Cached mode does not.

Outlook 2010 clients with Exchange 2010 Server. I've checked the objects and made sure there were no spaces.

[PS] C:\Windows\system32>Get-GlobalAddressList | Update-GlobalAddressList
WARNING: The recipient "mydomain.Local/Microsoft Exchange System Objects/OAB Version 2" is invalid and couldn't be
updated.
WARNING: The recipient "mydomain.Local/Microsoft Exchange System Objects/OAB Version 3a" is invalid and couldn't be
updated.
WARNING: The recipient "mydomain.Local/Microsoft Exchange System Objects/Offline Address Book - First Administrative
Group" is invalid and couldn't be updated.
WARNING: The recipient "mydomain.Local/Microsoft Exchange System Objects/Schedule+ Free Busy Information - First
Administrative Group" is invalid and couldn't be updated.
WARNING: The recipient "mydomain.Local/External/C Jones (External)" is invalid and couldn't be updated.

↧

Exchange 2010 shared mailbox not accessible from mailbox still on 2003

April 6, 2014, 5:37 pm

≫ Next: bricklevel/granular backup

≪ Previous: GAL not updating

In an existing Exch 2003 environment we have setup an Exch 2010 server to be our hybrid for our move to Office 365.

Before moving mailboxes on to 365 I move them to Exch 2010. However if I do this with a 2003 mailbox which was shared, I can only access this mailbox with staff accounts who are already on 2010. I thought that as long as the permissions are there i.e. full access, such a mailbox could be accessed by staff both on Exch 2003 and 2010. Or am I wrong on this?

Thanks.

↧

bricklevel/granular backup

April 6, 2014, 6:10 am

≫ Next: Permissions issue

≪ Previous: Exchange 2010 shared mailbox not accessible from mailbox still on 2003

Guys,

Can someone explain me the difference between those backup types? I googled but i cannot find a clear answer,

many thanks.

↧

Permissions issue

April 7, 2014, 2:07 am

≫ Next: Can not telnet for one of hub servers using 587

≪ Previous: bricklevel/granular backup

I have this error:

Active Directory operation failed on server.domain.local. This error is not retriable. Additional information: Insufficient access rights to perform the operation. Active directory response: 00002098: SecErr: DSID-03150BB9, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

1. I have ran the command: setup /preparead

2. I have selected the 'inheritable permission...'

these did not help.

I have noticed that I am missing some of the Exchange security group(s) such as Exchange Administrators group

Any help?

↧

Can not telnet for one of hub servers using 587

April 7, 2014, 5:17 am

≫ Next: Integrated Security and FBA Dual setup

≪ Previous: Permissions issue

Hello All,

We have four exchange servers details as following

two DAG server and two hub and CAS server with NLB

and everything is working fine but i can telnet to host (mail.test.com) using 587 and i can also telnet for hub&cas 1 but hub&cas 2 i can not telnet even the firewall is disabled

so pls advise

Edward

↧

Integrated Security and FBA Dual setup

April 7, 2014, 8:41 am

≫ Next: Exchange 2013 CU2 - Can't access ECP - Unexpected Error 500

≪ Previous: Can not telnet for one of hub servers using 587

Hi all

Just a quick question - has anyone had any success in using both Forms Based Authentication and Windows Authentication for OWA?

I've set up a new site, created owa, ecp and ews virtual directories (using new-owavirtualdirectory, etc). Following reseting the main site OWA directory to ensure that it used FBA, nothing seems to work with the Integrated authentication site.

Currently I get "The user name or password you entered isn't correct. Try entering it again." when trying to log in using pass through authentication.

Has anyone got any suggestions?

Cheers

Andy

↧

Exchange 2013 CU2 - Can't access ECP - Unexpected Error 500

November 10, 2013, 1:14 pm

≫ Next: emails not displaying properly in outlook

≪ Previous: Integrated Security and FBA Dual setup

I am running 7x Exchange 2013 CU2 servers (3x CAS in NLB, 4x Mailbox in DAGs) on Server 2008 R2 Enterprise, along with a 2010 environment. Recently, I have started getting '500 - Unexpected Errors' when accessing ECP for Exchange 2013. ECP works fine for Exchange 2010, and OWA works fine too.

The Application Event Log on my Exchange 2013 CU2 mailbox servers shows the following from the 'MSExchange Control Panel' source, with Event ID 4:

Current user: 'domain.internal/Microsoft Exchange System Objects/Monitoring Mailboxes/HealthMailbox673bae33faa54610a05da90c95912482'
Request for URL 'https://domain-ex13mb01.domain.internal:444/ecp/default.aspx(https://scn-ex13ca03/ecp/)' failed with the following error:
System.NullReferenceException: Object reference not set to an instance of an object.
   at Microsoft.Exchange.Clients.Common.Canary15.Init(Byte[] userContextIdBinary, Byte[] timeStampBinary, String logonUniqueKey, Byte[] hashBinary, String logData)
   at Microsoft.Exchange.Clients.Common.Canary15..ctor(String logonUniqueKey)
   at Microsoft.Exchange.Clients.Common.Canary15Cookie.TryCreateFromHttpCookie(HttpCookie cookie, String logonUniqueKey, Canary15Profile profile)
   at Microsoft.Exchange.Clients.Common.Canary15Cookie.TryCreateFromHttpContext(HttpContext httpContext, String logOnUniqueKey, Canary15Profile profile)
   at Microsoft.Exchange.Management.ControlPanel.CanaryExtensions.CheckCanary15(HttpContext context, Boolean shouldRenew, String canaryName)
   at Microsoft.Exchange.Management.ControlPanel.CanaryExtensions.CheckCanary(HttpContext context)
   at Microsoft.Exchange.Management.ControlPanel.RbacModule.Application_PostAuthenticateRequest(Object sender, EventArgs e)
   at System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
   at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
   at Microsoft.Exchange.Clients.Common.Canary15.Init(Byte[] userContextIdBinary, Byte[] timeStampBinary, String logonUniqueKey, Byte[] hashBinary, String logData)
   at Microsoft.Exchange.Clients.Common.Canary15..ctor(String logonUniqueKey)
   at Microsoft.Exchange.Clients.Common.Canary15Cookie.TryCreateFromHttpCookie(HttpCookie cookie, String logonUniqueKey, Canary15Profile profile)
   at Microsoft.Exchange.Clients.Common.Canary15Cookie.TryCreateFromHttpContext(HttpContext httpContext, String logOnUniqueKey, Canary15Profile profile)
   at Microsoft.Exchange.Management.ControlPanel.CanaryExtensions.CheckCanary15(HttpContext context, Boolean shouldRenew, String canaryName)
   at Microsoft.Exchange.Management.ControlPanel.CanaryExtensions.CheckCanary(HttpContext context)
   at Microsoft.Exchange.Management.ControlPanel.RbacModule.Application_PostAuthenticateRequest(Object sender, EventArgs e)
   at System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
   at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)

Any ideas?

I have already tried restarting all of the servers in the environment, performing 'lodctr /r', etc.

↧

emails not displaying properly in outlook

April 7, 2014, 8:13 am

≫ Next: Unable to receive emails

≪ Previous: Exchange 2013 CU2 - Can't access ECP - Unexpected Error 500

We have multiple end users that when they are in outlook they have some messages that show in white and then when they close the application or click open another message the white lines that are blank then show up with information. We have determined it is not an outlook client issue as we have reinstalled outlook 2007, recreated user mailbox profile in control panel and we have wiped two workstations and gave someone a new PC. We know it is something related to exchange mailbox itself but we are in a pickle as we have no idea what is causing this. We need assistance and I have attached a copy of a picture so you understand what it is doing to see what can be done to fix it.

The highlighted area with a red rectangle box you can see that there hsould be a person name and subject line and date time listed but it is just a white line. If we click on another message then close that message, the white lines then show up normally where it shows the recipient of who sent the email with subject line and date/time.

↧

Unable to receive emails

April 7, 2014, 12:07 pm

≫ Next: Exchange 2010 Query Based Distribution Group using LDAP Query

≪ Previous: emails not displaying properly in outlook

Since 4/2/14, I have been unable to receive emails externally for one of my two accounts on Exchange. My other address is receiving email fine.

I'm running Outlook/Office 365. It has been problem-free for many months.

I'm not receiving emails either on computer or directly on my Microsoft web access account.

I can send emails. I can send them to myself and receive them. But I can't receive any emails from outside servers.

I noticed there was an Office 365 Incident reported (EX5595) on 4/2/14 in which users were unable to receive emails for several hours. This matches when my email went out. But it never came back.

Any ideas? Thanks.

↧

Exchange 2010 Query Based Distribution Group using LDAP Query

April 7, 2014, 1:04 pm

≫ Next: Exchange 2007 to Exchange 2010 Transition

≪ Previous: Unable to receive emails

Hey guys,

I seem to be at a stand still with my issue. I have been requested to create a Dynamic Distribution List within our Exchange Deployment to obtain a list of all staff, faculty, student workers etc. for a specific department.

I have created the list succesfully, and went through ADSI Edit and cleared out the RecipientFilter that Exchange uses by Default, and have set the LDAPRecipientFilter (msExchDynamicDLFilter) to use the custom LDAP query as specified.

The query works flawlessly through ADUC, and pulls 781 users. I also verified that a RecipientContainer has been specified for it to query against. I even tried setting it a level up further to our root level and get the same results.

Here's where it begins to get strange...

When I run the following commands to verify a list of membership:

$List = Get-DynamicDistributionGroup <group alias>

$members = get-recipient -OrganizationalUnit $List.RecipientContainer -RecipientPreviewFilter $List.RecipientFilter -result unlimited | select alias

I get only 395 members when i perform $members.count.

I have attempted to send test messages to this list, and then go through the Exchange tracking logs, and when i see it expanding, it shows that it has 0 recipients. Thoughts?

↧

Exchange 2007 to Exchange 2010 Transition

April 7, 2014, 4:33 pm

≫ Next: Unable to export PST from eDiscovery

≪ Previous: Exchange 2010 Query Based Distribution Group using LDAP Query

I am in the process of transitioning a client from Exchange 2007 to 2010(clients are XP/Win 7 with Outlook 2007/Outlook 2010). I know if have to extend the schema for Exchange 2010 and there will be co-existence throughout the process. At this point, Outlook profile on users are point to either IP or netbios name of the server and their credentials. When I move their mailbox(in Exchange 2010 migration wizard), do I have to go to each Outlook and repoint their profile to the new netbios name of the Exchange 2010?

↧

Unable to export PST from eDiscovery

April 4, 2014, 3:02 am

≫ Next: Weird Calendar Behavior Exchange 2013

≪ Previous: Exchange 2007 to Exchange 2010 Transition

I'm trying to export a PST from an eDiscovery result in Exchange 2013.

When using the eDiscovery PST Export Tool I receive the following error:

"Export failed with error type: "FailedToRetrieveSearchConfiguration".
Details: The request failed with HTTP status 404: Not Found."

We have admin functionality disabled on our main url and use a second virtual folder/address for administration, so I wonder if this may be impacting on it.

Has anyone got any suggestions on how to diagnose and resolve the issue?

Thanks

Andy

↧