I cannot access the ecp, it gives me access denied.According to this Kb article  https://support.microsoft.com/en-us/kb/2898571

By default, the following groups are denied the ms-Exch-EPI-Token-Serialization user right:
Domain Admins
Schema Admins
Enterprise Admins
Organization Management

My exchange server is a part of schema admin and I need to remove it. I did checked the active directory but my computer  object doesnt shows but if I run the command 


Get-ADPermission -Identity JED-EX-02 | where {($_.ExtendedRights -like "ms-Exch-EPI-Token
lization") -and ($_.Deny -like "True")} | ft -autosize User,ExtendedRights

User                                         ExtendedRights
----                                         --------------
Fabrikam\Domain Admins                     {ms-Exch-EPI-Token-Serialization}
Fabrikam\Schema Admins                     {ms-Exch-EPI-Token-Serialization}
Fabrikam\Enterprise Admins                 {ms-Exch-EPI-Token-Serialization}
Fabrikam\Organization Management1          {ms-Exch-EPI-Token-Serialization}
S-1-5-21-944517801-3856501433-557766671-1239 {ms-Exch-EPI-Token-Serialization}
Fabrikam\Domain Admins                     {ms-Exch-EPI-Token-Serialization}
Fabrikam\Schema Admins                     {ms-Exch-EPI-Token-Serialization}
Fabrikam\Enterprise Admins                 {ms-Exch-EPI-Token-Serialization}
Fabrikam\Organization Management1          {ms-Exch-EPI-Token-Serialization}
S-1-5-21-944517801-3856501433-557766671-1239 {ms-Exch-EPI-Token-Serialization}
Fabrikam\Domain Admins                     {ms-Exch-EPI-Token-Serialization}
Fabrikam\Schema Admins                     {ms-Exch-EPI-Token-Serialization}
Fabrikam\Enterprise Admins                 {ms-Exch-EPI-Token-Serialization}
Fabrikam\Organization Management1          {ms-Exch-EPI-Token-Serialization}
S-1-5-21-944517801-3856501433-557766671-1239 {ms-Exch-EPI-Token-Serialization}
Fabrikam\Domain Admins                     {ms-Exch-EPI-Token-Serialization}
Fabrikam\Schema Admins                     {ms-Exch-EPI-Token-Serialization}
Fabrikam\Enterprise Admins                 {ms-Exch-EPI-Token-Serialization}
Fabrikam\Organization Management1          {ms-Exch-EPI-Token-Serialization}
S-1-5-21-944517801-3856501433-557766671-1239 {ms-Exch-EPI-Token-Serialization}
Fabrikam\Domain Admins                     {ms-Exch-EPI-Token-Serialization}
Fabrikam\Schema Admins                     {ms-Exch-EPI-Token-Serialization}
Fabrikam\Enterprise Admins                 {ms-Exch-EPI-Token-Serialization}
Fabrikam\Organization Management1          {ms-Exch-EPI-Token-Serialization}
S-1-5-21-944517801-3856501433-557766671-1239 {ms-Exch-EPI-Token-Serialization}
Fabrikam\Domain Admins                     {ms-Exch-EPI-Token-Serialization}
Fabrikam\Schema Admins                     {ms-Exch-EPI-Token-Serialization}
Fabrikam\Enterprise Admins                 {ms-Exch-EPI-Token-Serialization}
Fabrikam\Organization Management1          {ms-Exch-EPI-Token-Serialization}
S-1-5-21-944517801-3856501433-557766671-1239 {ms-Exch-EPI-Token-Serialization}

How to remove the schema admins from here ??

http://www.arabitpro.com

I have outlook e-mail and it is synced to a mobile phone that I do not want synced anymore. When I go into settings and remove the device from the list of synced devices it stays gone for about 1 minute and then pops back up again. The message in the settings say that I can block a mobile device, but no such option in any of my setting exists!

I don't want this device synced to my e-mail. Why is there no way of removing it permanently???

I am hoping someone has some advice on how to handle migrating some mailboxes cross-forest from 2010 to 2013 that has Litigation Hold enabled. From what I understand is it will migrate with Litigation Hold remaining enabled when migrating to Office 365 but how about an On-Premises 2013 installation?

The other issue I have is these mailboxes are large. 12gig, 17gig, 22Gig. I saw migration fail for mailboxes that were only several Gig due to network and/or server resources. I am thinking I would do an Export to archive all the recoverable items and maintain that and then migrate the mailbox and make sure it is on Litigation Hold in the new forest.

Anyone have any suggestions?

Thank you,

Jeff

exchange recovery

Hi All,

I facing issue on outlook 2010 prompt password when connect to exchange 2013 running on Windows 8.1.

But windows 7 user without issue on this.

My exchange version is exchange 2013 CU10.

Any one can advise what should I do? Thanks.

okay, so this is a bit of a story.  my backups are failing at the same point two days in a row, 300 GB, backing up DLLs, and when I list the VSS writers the only writer with an issue is the exchange writer, which is waiting for completion.

first time it happened, I restarted exchange that evening to fix the writer issue, but when I ran the backup again it did the same thing.

to complicate matters (a lot) , I am in the process of moving mailboxes.  let me give you the store on that one.

exchange 2013 on 2008r2 enterprise, physical server, 900 GB mailstore.  we wanted to setup a DAG between it, and another exchange server at a remote connection.  replication kept failing, I worked with firewall tech and exchange expert, they could not pinpoint a reason, other than thinking 900GB replication was too much for the 50 MB IPSEC tunnel.

so we backed out of the old DAG, and created a new DAG, seeding a new database.  plan was to move users 5-10 at a time to the new database, and then it would replicate across the IPSEC tunnel, once that was done we would decommission the old database.

next we ran into space issue due to all the logs being generated, so we switched to circular logging until this is done.  after that, symantec backup keeps saying it is missing log files, but exchange itself says the databases are all mounted and healthy. Backup exec support suggested I two additional backups, first non--grt and remove the checks for consistency and granular recovery, and then do a normal backup.  did that, errors still there, support then tells me to just not do a backup until circular logging is off, uhh, no.

next, I realized we were going to run out of space on the mailstore drives. we have  1.5 TB of space for the mailstores, so seeding the new 900 GB mailstore would mean you need 1.8 TB of space (unless you took the other one down for offline defrag). so the exchange tech had us create a new volume on the main server, place a third store there, and move mailboxes to it, then move mailboxes to the DAG.

I have been doing that for a week, have 3 large user mailboxes and the exchange discovery,approval assistant, system, migration, and federation mailboxes left to move.

and at that point, is when I start running into the exchange writer waiting for completion error, and that gets us up to today, whew.

so, I'm wondering if I should just bite the bullet, move the last mailboxes to the 3rd store, then to the DAG store, remove the old mailstores, and once we have everyone on the DAG and replicating, then fight the backup issues?

suggestions?

Hi,

I have 1 Exch2013 server that chugs away okay and have created 2 new Exch2013 servers.

Both new servers have CAS and MB roles for which I will DAG. To get full HA, I'm stumped on how to get users to connect as I would like to point to 1 NLB and that decides EXCH01 or EXCH02 although I can't use Windows NLB because I'm gong to DAG the mailboxes.

Is there any other workarounds someone could suggest without a hardware appliance NLB as I'd like to present 1 name to connect internally as well as externally across the organisation?

Hi all, I have an odd one here.

User A left the company, user As email address was then added as an alias to user B.

For some reason now when internal people are sending mail to user B they are seeing the email address of user A under the "send email" field.

I see the "send email" field when hovering over user B in the To field in outlook.

I have checked AD and cannot see any trace of user A as a user, a group, or even an alias of user B (the alias has been removed thinking this was the cause of the above behaviour)

I have also checked within office 365 as its synced with AD, there is no trace of user A there either.

Not sure where else to check to be honest.

Any suggestions?

Many thanks

Example. Add-Mailboxfolderpermission -Identity Alen:\Inbox -User Mike -Accessrights Readitems(Reviewer) 

after completing the power shell command how mike will able to access alen inbox in his outlook 2013

Customer would like to enable journaling for marketing users with below requirement.

• Enable journaling for all marketing staffs
• Front line staffs are allowed to search email in journaling mailbox except managers' mail
• Managers can search all email in journaling mailbox without any restriction

Customer would like to use AD RMS to do point 2 and 3. Is it possible?

Hi,

I have Exchange 2010 SP3 and Exchange 2013 SP1 CU11, If i create a new mailbox on Exchange 2013 and configure in outlook 2013 , it works fine , i can see GUID and all other settings but if i migrate a user from Exchange 2010 , Its outlook settings still point to old server name and other settings are also not updating , Please help me to resolve this issue.

Regards

Usman Ghani

Usman Ghani - MCITP Exchange 2010

Hi Master,

Is there any way to block anyone to do forward my email when they receive?

Exchange 2010 with outlook 2010.

thanks.

Hi! Im creating accounts in AD and after creation i want to add them as mail users in exchange with their external emailadress. The problem is they are already in the system as mail contacts. Whats the easiest way to convert them?. Deleting the contact and creating them as a mailuser or what?.

Please help . Thanks in advance!

/E

I am migrating mailboxes from 2007 to 2013 and I have a bunch of move requests that are stuck in various states. And the error I am seeing is:

Informational: The request has been temporarily postponed due to unfavorable server health or budget limitations. MRS will attempt to continue processing the request again after 24/02/2016 13:56:37.

I can't seem to resume these moves requests or remove them.

The CPU/RAM/Disk space on the destination server are all okay. I've tried restarting the MS Exchange Replication service on both servers. I've increased the below settings from their defaults:

MaxActiveMovesPerSourceMDB=”20″ MaxActiveMovesPerTargetMDB=”20″ MaxActiveMovesPerSourceServer=”100″ MaxActiveMovesPerTargetServer=”100″ MaxTotalRequestsPerMRS=”100″ ExportBufferSizeKB=”512″

When I try the resume the moves or remove them I am told that move request doesn't exist.

Anyone got any ideas?

www.techielass.com

Is there a specific place i can go to and get the exchange 2013 mailbox setup powershell commands so i can copy and paste?

Thanks

Gator78

Hi there.
We have Exchange2013 server and send connector with external Smart Host.
We are tracking a delayed message sending with PowerShell command: "Get-MessageTrackinglog -Recipientjohn.smith@hotmail.com -resultsize unlimited | fl >C:\john.txt ".

The results are Quite unusal because we see:  "No suitable shadow servers, HAREDIRECTFAIL, AGENTINFO".

Are this a problematic configurations on our Exchange server?

We also had a DAG which we had removed recently (1 month ago), due to some problems.

Here is the output of powershell command:

RunspaceId              : c949ef95-dee8-454f-b347-a3ddd08f9bb5
Timestamp               : 4.2.2016 14:06:46
ClientIp                :
ClientHostname          :
ServerIp                :
ServerHostname          : EXCHANGE2013
SourceContext           : No suitable shadow servers
ConnectorId             :
Source                  : SMTP
EventId                 : HAREDIRECTFAIL
InternalMessageId       : 14370960572964
MessageId               : <2.603b9b62f54704e3786e@ASSIST>
Recipients              :{john.smith@hotmail.com}
RecipientStatus         : {}
TotalBytes              : 8492
RecipientCount          : 1
RelatedRecipientAddress :
Reference               :
MessageSubject          : Message for John
Sender                  :Exchange.user@domain.com
ReturnPath              :Exchange.user@domain.com
Directionality          : Originating
TenantId                :
OriginalClientIp        :
MessageInfo             :
MessageLatency          :
MessageLatencyType      : None
EventData               : {[DeliveryPriority, Normal], [AccountForest, company.local]}

RunspaceId              : c949ef95-dee8-454f-b347-a3ddd08f9bb5
Timestamp               : 4.2.2016 14:06:47
ClientIp                : 192.168.1.2
ClientHostname          : EX2013.domain.local
ServerIp                : 192.168.1.2
ServerHostname          : EXCHANGE2013
SourceContext           : 08D32BAF7E7A2B56;2016-02-04T13:06:46.026Z;0
ConnectorId             : EXCHANGE2013\Client Proxy EXCHANGE2013
Source                  : SMTP
EventId                 : RECEIVE
InternalMessageId       : 14370960572964
MessageId               : <2.603b9b62f54704e3786e@ASSIST>
Recipients              :{john.smith@hotmail.com}
RecipientStatus         : {}
TotalBytes              : 8492
RecipientCount          : 1
RelatedRecipientAddress :
Reference               :
MessageSubject          : Message for John
Sender                  :Exchange.user@domain.com
ReturnPath              :Exchange.user@domain.com
Directionality          : Originating
TenantId                :
OriginalClientIp        : 192.168.1.13
MessageInfo             : 00I:
MessageLatency          :
MessageLatencyType      : None
EventData               : {[FirstForestHop, EX2013.domain.local], [ProxiedClientIPAddress, 192.168.1.13], [Proxi
                          edClientHostname, [192.168.1.13]], [DeliveryPriority, Normal], [AccountForest, company.local]
                          , [Mailbox, 2dd4b8eb-8823-49ef-9c5b-a5685e5f3fa2]}

RunspaceId              : c949ef95-dee8-454f-b347-a3ddd08f9bb5
Timestamp               : 4.2.2016 14:06:47
ClientIp                :
ClientHostname          : EXCHANGE2013
ServerIp                :
ServerHostname          :
SourceContext           :
ConnectorId             :
Source                  : AGENT
EventId                 : AGENTINFO
InternalMessageId       : 14370960572964
MessageId               : <2.603b9b62f54704e3786e@ASSIST>
Recipients              :{john.smith@hotmail.com}
RecipientStatus         : {}
TotalBytes              : 9406
RecipientCount          : 1
RelatedRecipientAddress :
Reference               :
MessageSubject          : Message for John
Sender                  :Exchange.user@domain.com
ReturnPath              :Exchange.user@domain.com
Directionality          : Originating
TenantId                :
OriginalClientIp        : 192.168.1.13
MessageInfo             :
MessageLatency          :
MessageLatencyType      : None
EventData               : {[AMA, SUM|v=0|action=|error=|atch=0], [AMA, EV|engine=M|v=0|sig=1.213.5444.0|name=|file=], [
                          CompCost, |AMA=0|ETR=0], [DeliveryPriority, Normal], [AccountForest, company.local]}

RunspaceId              : c949ef95-dee8-454f-b347-a3ddd08f9bb5
Timestamp               : 4.2.2016 14:06:48
ClientIp                : 192.168.1.2
ClientHostname          : EXCHANGE2013
ServerIp                : 172.16.2.181
ServerHostname          : 172.16.2.181
SourceContext           : ;250 Ok: queued as DD521A5401;ClientSubmitTime:
ConnectorId             : Send mail thru SmartHost
Source                  : SMTP
EventId                 : SEND
InternalMessageId       : 14370960572964
MessageId               : <2.603b9b62f54704e3786e@ASSIST>
Recipients              :{john.smith@hotmail.com}
RecipientStatus         : {250 Ok}
TotalBytes              : 9614
RecipientCount          : 1
RelatedRecipientAddress :
Reference               :
MessageSubject          : Message for John
Sender                  :Exchange.user@domain.com
ReturnPath              :Exchange.user@domain.com
Directionality          : Originating
TenantId                :
OriginalClientIp        :
MessageInfo             : 2016-02-04T13:06:46.885Z;SRV=EX2013.domain.local:TOTAL-HUB=1.546
MessageLatency          : 00:00:01.5470000
MessageLatencyType      : EndToEnd
EventData               : {[E2ELatency, 1.547], [ExternalSendLatency, 0.250], [Microsoft.Exchange.Transport.MailRecipie
                          nt.RequiredTlsAuthLevel, Opportunistic], [DeliveryPriority, Normal], [AccountForest, company.l
                          ocal]}

bostjanc

Hi,

I have posted this in scriptin gfirum and diverted here,

They have helped with maultiple scripts as well. In DC logs, it shows source IP as MAIL server IP

But the stopping is HLB device. All the scripts show HLB IP address as source computer where in we are unable to trace roor computer where is actually locking

How do we proceed in this scenario?

We also done disabling

1. Webamil and observed, it was locking

2. Disabled ActiveSync, still was locking

3.Used lockout.exe to trace logs in DC etc etc

Manju Gowda

Hi all,

I always got NDR:"NO RDNS entry for x.x.x.x"  from one specific recipient domain. I know the problem is related to DNS issue, but the IP in the NRD isn't the right one. weird....

1. Error message:host67.record.ch rejected your message to the following email addresses:
jennifer.lai@recorddoors.my (jennifer.lai@recorddoors.my)
A problem occurred while delivering this message to this email address. Try sending this message again. If the problem continues, please contact your helpdesk.
host67.record.ch gave this error:
No RDNS entry for x.x.x.227

2. We are using MS Forefront TMG as our firewall with multiple public IPs fromx.x.x.226 ----x.x.x.229.

3.On the DNS vendor's portal, thex.x.x.227 isn't our Exchange server but our terminal server. Our exchange server IP isx.x.x.226. 

4. RDNS is OK with our exchange IP

Any one has some good idea?

Thanks a advanced.

GYH

my company  using  tmg 2010 publish exchange 2010 .user access email using computer certificate and credential  authentication 。refer to url  ：https://www.microsoft.com/en-us/download/details.aspx?id=23708

in the beginning user can access email normally from Internet。but when too many user access email from internet the tmg

server crash and bluesreen frequently。i think the tmg server have  hardware problem and i deployment another server as tmg server publish exchange 。the tmg server still bluescreen when large user access email from Internet。

does anyone have the same problem？