The exchange server has a NAS direct connected on a second NIC that I need to be able to send email reports from. The primary NIC and the second NIC are on different subnets. I have setup a new receive connector with local IP of the second NIC and remote IP of the NAS, all boxes under Authentication unchecked and all boxes under the permission groups checked. Email fails to send.
Any help would be greatly appreciated. Thanks.
Hi, I am re-posting the issue below. The error still exist and can not manage users. I am wondering if hooking up a 3rd exchange server will help, like moving roles or something, but I am not too sure. There is no DAG configured. Any more ideas?
=========\/ \/=========
Hi Techs,
I am running 2 exchange 2010 servers ver 14.03.0123.003 on the same subnet. Today I experienced this error on both of the servers when trying to access the Exchange Management Console, even on a new snap in
"Initialization failed. The following error occurred while attempting to connect to the specified exchange server. The attempt to connect to http://server.here.com/powershell using 'Kerberos' authentication failed. Connecting to remote server failed with the following error message: WinRM cannot complete the operation. Verify that the computer name is valid, that the computer is accessible over the network, and that a firewall exception for WinRM service is enabled and allows access from this computer. By default, the WinRM firewall exception for public profiles limit access to remote computers within the same local subnet. For more information, see the about_remote_troubleshooting help topic"
Any help please.
Hello, I'm working on completing a 2003 to 2010 migration and am having difficulties getting the Public Folder replicas to move to the Exchange 2010 database. I suspect that this is an issue with the routing group connector. The SMTP send connector
on the 2003 server is NOT configured to use a smarthost. The 2010 server's is, but I've tried removing that and using DNS before restarting the Transport service and got the same result.
I created a routing group connector which I have since removed and recreated. It is bidirectional and allows public folder referrals. Previously, we did have two way mail flow between the 2003 and 2010 servers but not we do not. If I try to send from a mailbox on the 2003 server to a mailbox on the 2010 server, I get an NDR generated:
A configuration error in the e-mail system caused the message to bounce between two servers or to be forwarded between two recipients. Contact your administrator.
<Email.subdomain.domain.edu #5.3.5>
email.subdomain.domain.edu had a DNS A record entry which pointed to the 2003 server, which I've since changed to the 2010 server.
I've checked the IP address of the Default SMTP properties on the 2003 server and it is set to the correct IP and not "All Unassigned."
If I restart the SMTP service on the 2003 server, I see this event
Message delivery to the remote domain '_736acabfcbad314e9861a7d2242548aa_D' failed for the following reason: Unable to deliver the message because the destination address was misconfigured as a mail loop.
Each time I restart the SMTP service on the 2003 server, I see this event in the system log:
A Kerberos Error Message was received:
on logon session subdomain.domain.EDU\2003servername$
Client Time:
Server Time: 20:28:55.0000 11/30/2015 Z
Error Code: 0x34 KRB_ERR_RESPONSE_TOO_BIG
Extended Error:
Client Realm:
Client Name:
Server Realm: subdomain.domain.EDU
Server Name: krbtgt/subdomain.domain.EDU
Target Name: krbtgt/subdomain.domain.EDU@subdomain.domain.EDU
Error Text:
File: e
Line: 6c8
Error Data is in record data.
I had previously used setspn to get the connector working but I'm wondering if this problem is still related. Here is what I have when I do setspn -l for the 2003 server:
SMTPSVC/subdomain.domain.edu
SMTPSVC/Email.subdomain.domain.edu
MSSQLSvc/2003server.subdomain.domain.edu:1433
exchangeRFR/2003server.subdomain.domain.edu
exchangeRFR/2003server
exchangeMDB/2003server.subdomain.domain.edu
exchangeMDB/2003server
SMTPSVC/2003server.subdomain.domain.edu
SMTPSVC/2003server
HOST/2003server
HOST/2003server.subdomain.domain.edu
I've done a bit of googling binging but I haven't found an answer. I'm not sure how this is a mail loop.
i would like to know through which service one of my user sent email to someone .
did he use OWA or outlook anywhere , is there any way which shows which service did he use .
I was checking delivery reports not showing exactly , could someone suggest exactly .
IT
Hi All,
We have a .NET Web Application which subscribes to Exchange 2010 (SP3) Web Services for Syncing Calendar Items. Now if any user books appointments using Outlook Web Access then those appointments/all day events/busy times etc. can be pushed via the subscription to my application by Exchange Server. However if a user uses a desktop client such as Outlook 2007/2010 then only appointments with attendees are synced via the EWA to my application but other events such as All Day event/Busy/Free Time/Private are not synced at all.
Now my primary concern was that may be the availability service is not functioning properly but if it was true then Outlook Web Access would have the Outlook 2007 appointments at all. It seems Outlook 2007 appointments goes to exchange by they are not pushed through the subscription to our Application.
Can someone please shed some light on this as I cannot find any issue regarding any permission or anything on the Exchange Server which would cause this.
Thanks.
The following question is not related to a live exchange but rather a test system we use for developing Outlook add-ins in our company.
My MSX 2010 runs on SBS 2011 (2008 R2).
I was able to create new mailboxes but I suddenly lost this capability and I do not see it Exchange management console.
I made sure that the user I'm logged into the MSX 2010 machine, is a member of Administrators, Domain Admins, Enterprise Admins, Group Policy Creator Owners, Organization Management, Schema Admins, and Server Management.
I also do not see any ability to create a new distribution group in Exchange management console.
I'm able to do that in SBS server manager console but the group is not synced into Exchange management console.
We are looking to implement moderator distribution lists but have found an issue where the approve/reject option is presented if the moderator is using Office for Mac 2011. In doing web searches I found this: http://answers.microsoft.com/en-us/mac/forum/macoffice2011-macoutlook/no-approval-option-for-moderator-of-distribution/9f0ac1d9-b1cb-4306-abfe-c9bece1123f3?db=5&auth=1
This article is more than a couple years old so I'm hoping there is a workaround or update for this issue.
Any assistance.
Hi, so a while ago, I had to delete some user accounts/disconnect e-mails in order to make space on our system for new users/e-mails. When I did it I told the system to save the mailboxes in case we needed data from them in the future. Now I need to connect one of those mailboxes to another existing e-mail address but I can't find it under disconnected mailboxes in the Exchange Management Console.
How would I then go around locating the saved mailbox and to attach it to the new user?
Our organisation currently has OWA enabled and wants to enable outlook anywhere as well.
Can the same certificate that is used for OWA be used for Outlook anywhere?
Should i assume that since OWA is working that all necessary ports for Outlook anywhere should also be open as they both use 443?
Hi all, I'm running an exchange 2010 enviornment, but having problems with the room / resource working hours appearing on outlook calendars.
I can create a brand new room mailbox, and it appears on outlook's calendar views as completely white (no shading) to indicate no working hours have been set.
World plus dog then explains to set the hours you need to use the following cmdlet (for example):
Set-MailboxCalendarConfiguration -Identity MyRoom -WorkingHoursStartTime 08:00:00 -WorkingHoursEndTime 19:00:00Which i'm more than happy to do, except the moment I do that, the room immediately locks down to show no working hours at all! (all shaded in).
Which i'm sure you can appreciate is really rather annoying. I did wonder briefly if it was a timezone problem (I work in GMT, but the server works in a different timezone) so i set the timezone on the room mailbox and calendar config to GMT (which didn't make a difference), and for good measure also set the language.
I've tried to do the same thing using OWA instead of exchange, and exactly the same thing happens.
This problem isn't affecting user accounts - they work fine to my knowledge. Most frustratingly of all, we recently created a batch of 8 rooms for the company, and one of the rooms works perfectly (is correctly shaded). Only one though, and we're pretty sure we used the same process to create all the rooms.
Any suggestions? I'm really pulling my hair out on this one.
I hope I'm putting this in the right spot. What I'm trying to accomplish is using Universal Security Groups in ADUC to control access to sending to Distribution lists in EMC. I want to make sure I have this right. I'm picking Universal Security Groups because, currently, they're the easiest for me to understand and we only have one domain in the forest, if that makes a difference.
Let's say I'm creating DL's for city, state/province and country. 10 cities, 5 state/provinces and 2 countries. Each DL will have a corresponding USG restricting who can send to the DL. In EMC, in the properties for the DL, I'll restrict message delivery to only accept messages from senders in the corresponding USG.
City1's USG will be called SG-City1, City2 will have SG-City2 and so on. Same for State1, State2, Country1, Country2.
I'd like to make the City USG's members of the State USG and the state USG a member of the country USG. Correspondingly, each city DL will be a member of its state/province DL and then each state/province DL will be a member of the country DL. Individual recipients will be members of the city DL's.
Now, let's say I make a user a member of the Country USG. When that member sends an email to the country DL, will it propagate properly down to state/province and city? And will they be able to send to an individual state/province or even city DL, since those USG's are members of the country USG? Narrowing it down, will a member of a state/province USG be able to send to state/province as well as city? But they won't be able to send to the country DL, correct?
I hope I've explained it well enough.
I am trying to grant some users FullAccess to another mailbox account, but i am having issues with actually selecting users from the GUI. It just searches after available users in the domain forever..
Doing the operation with EMS works fine, but i want to manage it by using the GUI not the Shell.
As a test i installed EMC on another server, but the same problem occur there, so it's not a problem with the Console itself.
Exchange is 2010 SP3 and all the newest Rollups are installed.
Any help would be greatly appreciated.
Hi,
First I want to apologize for opening a millionth topic on SPAM, but I don't understand how to successfully block it.
We have 3 Exchange servers, on of them is ET which is sitting outside of our domain. There is a FF Endpoint Protection 2010 running on the server but still users get SPAM mails. I spent lots of my time trying to understand how to configure the spam protection but for some reason I simply do not get it. Some SPAM mails land in Junk folder, but some land in user's inbox.
Please advise,
Thanks,
I built a new exch 2010 server with latest patches as a VM. I created a DAG and when I try to add the exchange server on the DAG it gives me IP conflict error.
event 1049 FailoverClustering
"Cluster IP address resource 'Cluster IP Address' cannot be brought online because a duplicate IP address '172.20.X.XX' was detected on the network. Please ensure all IP addresses are unique."
I'm not sure where its picking up this address. I have 2 NICs MAPI & replication. Both have different IP's. When I do nslookup on '172.20.X.XX' it exchange server but DNS entry on DNS server. I'm confused.
Please help
Thanks
Numan
numan
Hello,
Exchange 2010 sp3. Single server solution which has been having some hardware problems. I've spun up a VM, installed Exchange and created a new database on it, then moved some mailboxes from the DB on the old to the new DB on the server.
These databases have different rpcclientaccessserver attributes. I expected Outlook to pop up with
after the mailbox has been moved but this does not happen. It does happen if I do a repair on the Outlook profile, it then updates the server name in the outlook profile as well.
Was I wrong to expect Outlook to pop up with that message? My understanding was if you moved a mailbox to a new DB that has a different rpcclientaccessserver attribute that would trigger that message on the Outlook clients.
Thanks
Hi,
We have been running in a mixed mode 2007/2010 Exchange environment and recently started the process of decommissioning the 2007 portion.
One part of the process was that we had public folder replication running from the original 2007 public folder store to a 2010 server. We tried everything to remove the 2007 instance gracefully (all databases were pointing to 2010 for referral, all folders only listed the 2010 instance as replica), we ran through the Technet article for moving/removing the database but the removal kept failing stating that replicas still existed. there was even suggestion of deleting all folders on the 2007 server but all this did was actually replicate and wipe our entire public folder hierarchy on both servers, we then had to restore from backup. there seemed to be many people on here with the same issues and ADSI removal of the database was the only way.
After ADSI deletion of the 2007 database all seemed fine until I ran "Test-MAPIconnectivity" to the 2010 server hosting the PF data base and received the below error, seemingly failing to find the "System Attendant" mailbox to run the connectivity test to.
I checked in ADSI and ensured the Homemdb setting on the 2010 server housing the PF database had the system attendant attribute set, and it was set to the system attendant location on the 2010 DAG which is where I would expect. all other databases on this 2010 server pass the "test-mapiconnectivity", but the PF database fails.
The extremely odd thing is that the SA mailbox that the error references is actually on a totally different2007 mailbox server that has also been decommissioned!
where/why would our 2010 PF database be trying to find a 2007 SA mailbox to run the connectivity test against? I cannot find this defined anywhere even in ADSI
[Microsoft.Exchange.Data.Storage.MailboxUnavailableException]: Cannot open mailbox /o=ORGNAME/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=OLD2007Server/cn=Microsoft System Attendant. Inner error [Microsoft.Mapi.MapiExceptionUnknownUser]: MapiExceptionUnknownUser: Unable to make connection to the server. (hr=0x80004005, ec=1003)
Thank you
Hello,
Exchange 2010 with DAGs. SP3 rolloup 9
I would like to remove FullAccess permissions for all Exchange mailboxes. Right now if a mailbox is added Full access permissions is added to the mailbox automatically. I want to remove that and Full Mailbox access for a user that has FullAccess to all Exchange Mailboxes.
Will this command accomplish this?
"Get-Mailbox | Remove-MailboxPermission -User domain\user -AccessRights FullAccess -InheritanceType All"
Thanks,
Hello All,
Good day!
I have faced an issue today with the Max inbound connection on exchange (HT) , the issue is that we have an a multithreaded application that create more than 20 concurrent connections basically about 200 mail are created by that application , so I have searched on the internet and I have found a solution is to increase the MaxInboundConnectionPerSource"
My question here:
If I increase the MaxInboundConnectionPerSource to200,should I need to increase also MaxInboundConnectionPercentagePerSource from2% to 100 % or not
and for example let`s say the application create 200 concurrent connection at time and how many mail it will be accepted by the receive connector if my configuration are configured like that:
MaxInboundConnection : 5000
MaxInboundConnectionPerSource: 200
MaxInboundConnectionPercentagePerSource : 2%
I would really appreciate anyone to support me with the right configuration as its very urgent .
Thanks,