Upgrade Default Address Lists from LDAP

February 27, 2014, 1:06 pm

≫ Next: Exchange 2010 sp1 Recovery Database - export mailbox to pst

≪ Previous: Long queue processing

$

0

0

Hello,

I migrated from MS Exchange 2003 to 2010 some time back. Currently trying to upgrade the address lists as per the guide here:

http://technet.microsoft.com/en-us/library/dd351283.aspx

When I  run

Set-GlobalAddressList "Default Global Address List" -RecipientFilter {(Alias -ne $null -and (ObjectClass -eq 'user' -or ObjectClass -eq 'contact' -or ObjectClass -eq 'msExchSystemMailbox' -or ObjectClass -eq 'msExchDynamicDistributionList' -or ObjectClass -eq 'group' -or ObjectClass -eq 'publicFolder'))}
I get the following error:
what should I do? 
Thanks.

---

Exchange 2010 sp1 Recovery Database - export mailbox to pst

December 5, 2011, 12:10 pm

≫ Next: Questions about ResetSearchIndex.ps1

≪ Previous: Upgrade Default Address Lists from LDAP

$

0

0

Hi,

I have four Exchange 2010 sp1 servers, 2 back end servers in a DAG on Windows Server 2008 R2. I have a copy of the live EDB and log files on an attached disk on the backend Exchange server.

What I’m trying to do is import the database into our Exchange 2010 (production server) as a recover database and then export a user’s mailbox to a pst.

Does anyone have the steps for what I am trying to do?

Below is what I tried so far…

The command I run from the EMS to create the database is below

New-MailboxDatabase -Recovery -Name RDB -Server birdhouse -EdbFilePath "O:\Exchange Restore usersmail.EDB" -LogFolderPath "O:\Exchange Restore\Logs"

Questions: Do I need to rename the EDB from users.EDB to something different, such as recover.EDB? Or can I keep the original name of the EDB will it mess up our production EDB with the same name?

Next do I need to mount the recovery EDB and then run the command below?

New-MailboxExportRequest -SourceDatabase RDB -Mailbox testuser1 -FilePath \\fileserver\Exchange Mail Exports\testuser1.pst

Then what are the steps for cleanup just unmount the EDB?
Thanks.

---

Wave~Chaser

Questions about ResetSearchIndex.ps1

February 27, 2014, 1:19 pm

≫ Next: Error 8528 User has exceeded mailbox for mailbox that doesn't exists

≪ Previous: Exchange 2010 sp1 Recovery Database - export mailbox to pst

$

0

0

If i rebuild indexes in a DAG, do i need to run this on each server or just the active copy?

Also, anyone know how long to rebuild a 500GB DB?

Error 8528 User has exceeded mailbox for mailbox that doesn't exists

February 25, 2014, 4:09 pm

≫ Next: Cas try to connect to wrong dag member

≪ Previous: Questions about ResetSearchIndex.ps1

$

0

0

Exchange 2010 SP2 on 2008R2. Error started today ~noon. Error 8528 The mailbox for user .... has exceeded maximum mailbox size...etc. Only problem is that user doesn't exists and hasn't for a while. I looked in AD backups and don't see the user. How do I remove a mailbox I can't see? The mailbox doesn't show up as disconnected. When I run Get-mailbox for the users identity I get back user not found.

Thanks in advance

---

eburch@lasertel.com

Cas try to connect to wrong dag member

February 28, 2014, 6:35 am

≫ Next: Changing server IPs of DR site

≪ Previous: Error 8528 User has exceeded mailbox for mailbox that doesn't exists

$

0

0

Hello.

I have a cas array with 2 members and a dag with two members. There is only one maibox store in the DAG, so it is active on a server and inactive in the other.

In the log of cas I find frequently this error:

The connection between the Client Access server and Mailbox server "<mailbox server inactive>" failed. If this event is logged infrequently or only during scheduled downtime for a Mailbox server, no user action is required. If this event occurs repeatedly, check network connectivity using PING or PingPath. Also, check connectivity using the Test-ActiveSyncConnectivity cmdlet

The problem is that this is the inactive server in the DAG. Is it normal that cas try to access an inactive node?

Thank you

Changing server IPs of DR site

February 28, 2014, 8:34 am

≫ Next: Send On Behalf Of when no actual rights to do so

≪ Previous: Cas try to connect to wrong dag member

$

0

0

Hi All,

Our current setup is Primary Site and DR site with a DAG.

Primary site is having 2 Mailbox servers, 2 hubcas servers with an NLB and one CAS server for OWA.

DR Site is having 1 mailbox server, one hubcas server and one CAS server. ( All these are VMs)

Now for a maintenance purpose we need to move these DR site servers to Primary site and due to this we need to change IPs. What things we have to consider when doing this change.

DAG is having 2 IPs, there are 2 file sharewitness servers, alternate FSW is in DR Site HUBCAS server and currently it is holding the quorum. There are MAPI and replication networks in the DAG.

Please give your ideas on most important things.

Thanks,

Kanishka.

Send On Behalf Of when no actual rights to do so

February 28, 2014, 9:02 am

≫ Next: How to combine access rights for Set-MailboxFolderPermission

≪ Previous: Changing server IPs of DR site

$

0

0

Exchange 2010 SP3 RU2

Very odd situation.

I have a PA who is able to send Meeting Requests on Behalf of 2 managers, however the only rights she actually has are Editor within their Calendars.

She doesn't have full mailbox access, isn't a delegate within the mailbox, isn't listed under publicDelegates attribute of the managers AD accounts, doesn't have SendAs rights. Isn't a member of a group with those rights either.

All she is doing is creating a new meeting request within managers calendar and hitting send. This then appears in her Sent Items as xxxxx on behalf of yyyy.

It isn't a massive issue per se since she is doing her job as expected but concerned that she shouldn't be able to do this in the first place.

What am I missing or where can I look.

Thanks

Neill

How to combine access rights for Set-MailboxFolderPermission

February 28, 2014, 9:09 am

≫ Next: Best Practice for Shared Contacts available as an Address Book in Outlook??

≪ Previous: Send On Behalf Of when no actual rights to do so

$

0

0

Hello,

Using Exchange 2010 SP3 RU3 im trying to setup a combination of access rights.  Specifically I need the following..

Read
Free/Busy time, subject, location

Write
Create Items
Edit Own

Delete Items
Own

Other
UN-CHECK of Folder visible

I have tried this Powershell command..

Set-MailboxFolderPermission -domaincontroller $myDC -Identity "${room}:\Calendar" -User Default -AccessRights LimitedDetails,CreateItems,EditOwnedItems,DeleteOwnedItems

im getting..

Invoke-Command : Cannot bind parameter 'AccessRights' to the target. Exception setting "AccessRights": "The access righ

ts of a mailbox folder can't contain both specific permissions and precanned roles."

---

Best Practice for Shared Contacts available as an Address Book in Outlook??

October 15, 2013, 9:40 am

≫ Next: OAB update failing with MSExchangeSA 9331 and 9335 errors

≪ Previous: How to combine access rights for Set-MailboxFolderPermission

$

0

0

Yep so crazy that Microsoft still refuses (by design) to enable address book option for Shared contacts!!!!!!!  So I am asking what do they suggest then for my clients to have a shared contact list that is available as an address book and available to sync to your phone?

Problem:

I have a client that the boss has a contact list in his outlook that he has synced to his phone that is shared so that everyone else on his team can see the contacts, since it is a shared contact list users are not able to add it to their address book (by design..nice design)

Solutions I know of:

1.Use public folder for contact list...= Nope public folder contact list will not sync with his iphone/ipad...(yes there are 3rd party tools but I would prefer to not go this route)

2.Sharepoint....I have heard this one but don't know much about it.   How does it sync to outlook and phones?  Is it seemless?  can user add contacts in outlook?

3. ??

Seems like this would be a huge issue that microsoft would have fixed by now.  Let me know if anyone has any ideas... 

---

Sbs 2003 I will miss you !!!!

OAB update failing with MSExchangeSA 9331 and 9335 errors

February 28, 2014, 7:14 am

≫ Next: Emails from web application server for some users go to junk folder

≪ Previous: Best Practice for Shared Contacts available as an Address Book in Outlook??

$

0

0

I'm having an issue with the OAB not updating. When I run a manual update of the OAB, I get the following errors in the event log:

Event ID: 9331

OABGen encountered error 80040115 (internal ID 50101f1) accessing the public folder database while generating the offline address list for address list '/'. - \Company Address List

Event ID: 9335

OABGen encountered error 80040115 while cleaning the offline address list public folders under /o=Company/cn=addrlists/cn=oabs/cn=Company Address List.  Please make sure the public folder database is mounted and replicas exist of the offline address list folders.  No offline address lists have been generated.  Please check the event log for more information.
- \Company Address List

Some more background:

We were doing an Emergency migration from 2003 to 2010. Everything was migrated, mailboxes, all public folders, etc. Everything is working as it should otherwise, and the Exchange 2003 box took a nose dive. It's dead, but everything was replicated over. If I take the clients out of cached mode, they get the properly updated GAL and it also appears in OWA.

Get-offlineaddressbook gives the following:

Company address List                        {Version4}                              {\Default Global Address List}

Any suggestions?

Emails from web application server for some users go to junk folder

February 25, 2014, 11:01 am

≫ Next: Exchange 2010 email address policy not running when new user is created or modified.

≪ Previous: OAB update failing with MSExchangeSA 9331 and 9335 errors

$

0

0

Hi,

  I have a application server which sends email to all users but recently I noticed that some of the users get this mail in junk folder.I cant tell each and every user to add it to safe sender list considering that whne you have a big organization.Is there any way I can do it on server side.

I have exchange 2010 sp1 running on 1 hub/cas and 2 mailbox servers.

Thanks in advance

---

EagleAsh

Exchange 2010 email address policy not running when new user is created or modified.

February 28, 2014, 9:00 am

≫ Next: Server Locator Service Failed to Start

≪ Previous: Emails from web application server for some users go to junk folder

$

0

0

Running Exchange 2010 SP3 UR4 on Windows Server 2012 Std, ADFS and ADFS Proxy servers, Dirsync server and Office365 in a hybrid environment

We have one Email Address Policy - the Default Policy - that applies to all users.  It works fine when I run it manually (just click Apply in the EMC.)  But, it will not run automatically when a new user gets created, or an existing user is modified. It seems like it used to work a month or two ago.  We've applied Windows Updates and also the Update Rollup 4, so I don't know if those would have affected it or not.

We just create user accounts in Active Directory, assign the targetAddress, Mail and Mailnickname attributes.  Then we run a Dirsync which syncs the information to Office 365 AD.  Is this enough to trigger the Email Address Policy to run, or is there something else we have to do?

Thanks

---

KW

Server Locator Service Failed to Start

February 25, 2014, 1:18 pm

≫ Next: Sending and receiving through a common address

≪ Previous: Exchange 2010 email address policy not running when new user is created or modified.

$

0

0

Received Event ID:4380 on single Exchange Server (once part of a DAG but no more - removed other servers and the DAG). Error reads: 'net.tcp://huntsvr.huntelectric.local:64337/Exchange.HighAvailability'. Error A TCP error (10013: An attempt was made to access a socket in a way forbidden by its access permissions) occurred while listening on IP Endpoing=0.0.0.0:64337.

The above error is paired with the following error as well:

Event ID: 2121. The Microsoft Exchange Replication service failed to start the TCP listener. Error: System.Net.Sockets.SocketException: An attempt was made to access a socket in a way forbidden by its access permissions ..."

The above two errors are joined by this error:

Event ID: 4383. Microsoft Exchange Server Locator Service communication channel faulted. State: Faulted

And the next error appears as well:

Event ID: 4379. Microsoft Exchange Server Locator Service stopped.

These 4 errors repeat every minute. Any suggestions of where to find a resolution?

Thanks,

Michael

Sending and receiving through a common address

February 28, 2014, 12:08 pm

≫ Next: PowerShell command to copy emails from one Public Folder to another?

≪ Previous: Server Locator Service Failed to Start

$

0

0

HI,

I am relatively new to hosted exchange.  I have a problem here at work.  I work for a Financial organization. According to compliance in my industry, ell email sent and received through my Exchange server has to go through a common email address. i have no idea how to do this.  Looking for any help or instructions I can get. thanks

PowerShell command to copy emails from one Public Folder to another?

February 28, 2014, 11:21 am

≫ Next: Exchange 2010 - Errors 4002 and Errors 4010

≪ Previous: Sending and receiving through a common address

$

0

0

Is there a command with PowerShell for Exchange 2010 that will allow me to copy or move emails from one mail enabled Public Folder to another?

---

Exchange 2010 - Errors 4002 and Errors 4010

February 28, 2014, 11:57 am

≫ Next: Problem using Outlook Anywhere out of the office

≪ Previous: PowerShell command to copy emails from one Public Folder to another?

$

0

0

I have two CAS and two Mailbox servers.  All are running Server 2008 R2 with Exchange 2010 SP3 RollUp 5.

On one of my mailbox servers i am getting the error every 5 minutes, MSExchange Availability 4002. 

Process 4904: ProxyWebRequest CrossSite from S-1-1-0 to https://server.domain.org:443/ews/exchange.asmx failed. Caller SIDs: NetworkCredentials. The exception returned is Microsoft.Exchange.InfoWorker.Common.Availability.ProxyWebRequestProcessingException: System.Web.Services.Protocols.SoapException: The authenticated user doesn't have sufficient privileges to issue this request.
   at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall)
   at System.Web.Services.Protocols.SoapHttpClientProtocol.EndInvoke(IAsyncResult asyncResult)
   at Microsoft.Exchange.InfoWorker.Common.Availability.Proxy.Service.EndGetUserAvailability(IAsyncResult asyncResult)
   at Microsoft.Exchange.InfoWorker.Common.Availability.FreeBusyApplication.EndProxyWebRequest(ProxyWebRequest proxyWebRequest, QueryList queryList, Service service, IAsyncResult asyncResult)
   at Microsoft.Exchange.InfoWorker.Common.Availability.ProxyWebRequest.EndInvoke(IAsyncResult asyncResult)
   at Microsoft.Exchange.InfoWorker.Common.Availability.AsyncWebRequest.EndInvokeWithErrorHandling(). The request information is ProxyWebRequest type = CrossSite, url = https://server.domain:443/ews/exchange.asmx
Mailbox list = <lastname, firstname>SMTP:user@Domain, Parameters: windowStart = 2/1/2014 12:00:00 AM, windowEnd = 4/1/2014 12:00:00 AM, MergedFBInterval = 30, RequestedView = FreeBusy
. ---> System.Web.Services.Protocols.SoapException: The authenticated user doesn't have sufficient privileges to issue this request.
   at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall)
   at System.Web.Services.Protocols.SoapHttpClientProtocol.EndInvoke(IAsyncResult asyncResult)
   at Microsoft.Exchange.InfoWorker.Common.Availability.Proxy.Service.EndGetUserAvailability(IAsyncResult asyncResult)
   at Microsoft.Exchange.InfoWorker.Common.Availability.FreeBusyApplication.EndProxyWebRequest(ProxyWebRequest proxyWebRequest, QueryList queryList, Service service, IAsyncResult asyncResult)
   at Microsoft.Exchange.InfoWorker.Common.Availability.ProxyWebRequest.EndInvoke(IAsyncResult asyncResult)
   at Microsoft.Exchange.InfoWorker.Common.Availability.AsyncWebRequest.EndInvokeWithErrorHandling()
   --- End of inner exception stack trace ---
. Name of the server where exception originated: Server. Make sure that the Active Directory site/forest that contain the user's mailbox has at least one local Exchange 2010 server running the Availability service. Turn up logging for the Availability service and test basic network connectivity.

Every 10 minutes on my CAS servers i am getting the error MSExchange Availability 4010. 

Process Microsoft.Exchange.InfoWorker.Common.Delayed`1[System.String]: Request from S-1-5-21-562707881-1060713641-168829947-11538 failed security checks.

I have adjusted the registry setting HKLM\System\CurrentControlSet\services\MSExchange Availability\Diagnostics from 0 to 5 on the CAS servers.  I don't have an Availability Service under Services.

The errors keep occurring.

Problem using Outlook Anywhere out of the office

March 1, 2014, 4:42 am

≫ Next: Cannot connect my exchange 2010 from outlook outside of my LAN

≪ Previous: Exchange 2010 - Errors 4002 and Errors 4010

$

0

0

Hello,

I have a problem getting my Microsoft Outlook (2007) to connect to my Exchange Server when i'm out of the office local network.

outlook Anywhere is enabled on the server, and everything is set correctly on the client.

I have ran outlook connectivity analyzer tool and this is what I got.



Testing RPC/HTTP connectivity.
 The RPC/HTTP test failed.
 
Additional Details
 Elapsed Time: 777 ms.
 
Test Steps
 
Attempting to resolve the host name mail.DOMAIN in DNS.
 The host name resolved successfully.
 
Additional Details
 
IP addresses returned: IPP ADDRESS
Elapsed Time: 14 ms.
Testing TCP port 443 on host mail.DOMAIN to ensure it's listening and open.
 The port was opened successfully.
 
Additional Details
 Elapsed Time: 253 ms.
Testing the SSL certificate to make sure it's valid.
 The SSL certificate failed one or more certificate validation checks.
 
Additional Details
 Elapsed Time: 508 ms.
 
Test Steps
 
The Microsoft Connectivity Analyzer is attempting to obtain the SSL certificate from remote server mail.DOMAIN on port 443.
 The Microsoft Connectivity Analyzer wasn't able to obtain the remote SSL certificate.
 
Additional Details
 
The certificate couldn't be validated because SSL negotiation wasn't successful. This could have occurred as a result of a network error or because of a problem with the certificate installation.
Elapsed Time: 472 ms.



I am sure we have a SSL certificate installed "one generated locally which means not one that's been bought", but it shows errors about being expired only when I'm at the office "local network", now that i'm out of the office i don't even get the error anymore nor the login popup window and connectivity status to exchange server is "Disconnect"

how can I fix this? where to obtain an SSL, assuming that's why I'm unable to connect to exchange server.

could it be my Microsoft exchange proxy settings? I'm using mail.domain and msstd:mail.domain and basic authentication "exactly like in the exchange server settings"

-I'm able to connect to exchange on my iPhone/Android successfully.

Thank you in advance

Nouf



*i have tried uploading an image but i get this message, though I haven't received any confirmation email.

Body text cannot contain images or links until we are able to verify your account.

Cannot connect my exchange 2010 from outlook outside of my LAN

March 1, 2014, 2:29 am

≫ Next: authoritative vs non-authoritative

≪ Previous: Problem using Outlook Anywhere out of the office

$

0

0

I have problem connecting to my exchange 2010 server from outside of my LAN.

I have configured Outlook Anywhere and its working.

After i enter all the details it is asking again for password and once i entered the password i receive the error "The action cannot be completed. The Connection to Microsoft Exchange is unavailable etc ... "

Kindly suggest

authoritative vs non-authoritative

February 28, 2014, 6:52 pm

≫ Next: Exchange 2010 with Outlook 2007 Shared Contacts with Attachments

≪ Previous: Cannot connect my exchange 2010 from outlook outside of my LAN

$

0

0

I'm working on a migration/merge. Basically, building out a new environment and merging two corps into that new environment.

I've got a new Exchange 2010 server up and running (in a transition environment with an Exchange 2003 server) for company A. Company B is currently using a hosted email provider. The companies have a two-way transitive forest trust and site-to-site VPN tunnels. I want to start testing new mailboxes from company B in the new Exchange server with Outlook Anywhere and just want to make sure I'm understanding 'non-authoritative' accepted domain.

If I setup company B in the accepted domains area and set it to non-authoritative does that mean that when email is sent from company A to company B the Exchange server will first look locally to see whether that email address exists and, if it finds it, deliver to that mailbox...BUT...if it doesn't find that email address it will then perform a regular DNS lookup to get the MX record for that email domain? (In my testing I can't interrupt emails between these companies)

TIA!

Exchange 2010 with Outlook 2007 Shared Contacts with Attachments

February 5, 2014, 12:38 pm

≫ Next: Complainance Archiving in Exchange 2010

≪ Previous: authoritative vs non-authoritative

$

0

0

We have an Exchange 2010 server. There is only one Exchange server so all roles are on this server.

Found out that sharing contacts between users misses something. 

If a user has Attachments or Notes in their contacts we can see via the Attachment column in Contacts that there are attachments.

But another user viewing the shared Contacts of the user above, cannot see if the Contacts have Attachments unless they open each one. The Attachment column states there are no Attachments. Is this how it is? Is it a syncing issue? 

The image I have attached is what the user sees accessing a shared contact address book. It shows Notes and the Attachments columns. The contacts with partial words visible in the Notes column should have a Paper Clip Icon as they also have attached items.