RE: Installing Exchange 2010 RU updates
Not sure if this is absolutely necessary, but it might prevent a problem or two. Run the update from an admin (elevated rights) command prompt. Doing it via RDP is fine. If your boxes run Forefront for Exchange, you might find this blog post of mine useful, though it might not be needed for the latest RU updates: http://www.rebee.clara.net/blog/archives/2012/05/entry_199.html It won't hurt to do that anyhow. And it's probably time to start thinking about applying SP3 for Exchange 2010. Cheers, Phil -- Phil Randal Infrastructure Engineer Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT Tel: 01432 260415 | Email: phil.ran...@hoopleltd.co.ukmailto:phil.ran...@hoopleltd.co.uk From: Todd Lemmiksoo [mailto:tlemmik...@gmail.com] Sent: 03 April 2013 13:52 To: MS-Exchange Admin Issues Subject: Installing Exchange 2010 RU updates As I have not had the pleasure of doing an Exchange 2010 RU install. Do you have to do the install from a console session or can it be done through an RDP session. Currently scheduled to install RU8 on our SP1 servers, HUB/CAS DAG MB. -- T. Todd Lemmiksoo --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist Hoople Ltd, Registered in England and Wales No. 7556595 Registered office: Plough Lane, Hereford, HR4 OLE Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Hoople Ltd. You should be aware that Hoople Ltd. monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: Description of Update Rollup 5 version 2 for Exchange Server 2010 Service Pack 2
No, only any special post-RU hotfixes you may have obtained from Microsoft. Cheers, Phil -- Phil Randal Infrastructure Engineer Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT Tel: 01432 260415 | Email: phil.ran...@hoopleltd.co.ukmailto:phil.ran...@hoopleltd.co.uk From: Al Rose [mailto:arose...@gmail.com] Sent: 13 December 2012 10:47 To: MS-Exchange Admin Issues Subject: Re: Description of Update Rollup 5 version 2 for Exchange Server 2010 Service Pack 2 Note Remove all interim updates for Exchange Server 2010 SP2 before you apply this update rollup. Do we really have to uninstall all rollups before installing this one? SP2 R1, R2, R3 R4, R4v2 in my case... On Tue, Dec 11, 2012 at 7:32 PM, Michael B. Smith mich...@smithcons.commailto:mich...@smithcons.com wrote: Description of Update Rollup 5 version 2 for Exchange Server 2010 Service Pack 2 http://support.microsoft.com/?kbid=2785908 --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Hoople Ltd. You should be aware that Hoople Ltd. monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: SP2 RU3
There's also my vCheck for Exchange plugins based on Alan Renouf's vCheck, my own scripts, Steve's script and others. http://www.virtu-al.net/2012/03/22/vcheck-exchange-updated/ I'd advise people to use version 2.1beta4 (not yet uploaded to Alan's site): http://www.rebee.clara.net/ExchangePlugins-2.1Beta4.zip To make it easy to select plugins, use my Select-Plugins script for vCheck: http://www.rebee.clara.net/blog/archives/2012/03/entry_197.html Cheers, Phil -- Phil Randal Infrastructure Engineer Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT Tel: 01432 260415 | Email: phil.ran...@hoopleltd.co.uk From: Steve Goodman [mailto:st...@stevieg.org] Sent: 22 June 2012 12:20 To: MS-Exchange Admin Issues Subject: Re: SP2 RU3 If your looking for something a bit prettier you could check out my Exchange Environment Report which will provide this and some additional info: http://www.stevieg.org/2011/06/exchange-environment-report/ Sent from my iPhone On 21 Jun 2012, at 14:38, Michael B. Smith mich...@smithcons.commailto:mich...@smithcons.com wrote: I didn't write this original script, I just modified it to handle some obvious errors, but unfortunately I didn't keep the original author's byline handy. The UR information is hidden pretty deeply. This script will get it out. Get-ExchangeServer |% { [bool]$known = $false $name= $_.ToString() $version = $_.AdminDisplayVersion.Major if ($version -eq 14) { $key = SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Products\\AE1D439464EB1B8488741FFA028E291C\\Patches $setup = SOFTWARE\\Microsoft\\ExchangeServer\\v14\\Setup $known = $true } elseif ($version -eq 8) { $key = SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Installer\\UserData\\S-1-5-18\\Products\\461C2B4266EDEF444B864AD6D9E5B613\\Patches $setup = SOFTWARE\\Microsoft\\Exchange\\Setup $known = $true } if( $known ) { $VALUE1 = DisplayName $VALUE2 = Installed $VALUE3 = MsiInstallPath $reg = [Microsoft.Win32.RegistryKey]::OpenRemoteBaseKey( 'LocalMachine', $name ) $regKey= $reg.OpenSubKey( $setup ) $installPath = ( $regkey.getvalue( $VALUE3 ) | foreach { $_ -replace (:, `$) } ) $binFile = Bin\ExSetup.exe $exSetupVer = ( ( Get-Command \\$name\$installPath$binFilefile:///\\$name\$installPath$binFile ).FileVersionInfo | ForEach { $_.FileVersion } ) $regKey= $reg.OpenSubKey( $key ).GetSubKeyNames() | ForEach { $key\\$_ } $dispName = [array] ( $regkey | % { $reg.OpenSubKey( $_ ).getvalue( $VALUE1 ) } ) $instDate = [array] ( $regkey | % { $reg.OpenSubKey( $_ ).getvalue( $VALUE2 ) } ) $countmembers = 0 if ($regkey -ne $null) { while ($countmembers -lt $dispName.Count) { $name + , + $dispName[ $countmembers ] + , + $instDate[ $countmembers ].substring( 0, 4 ) + / + $instDate[ $countmembers ].substring( 4, 2 ) + / + $instDate[ $countmembers ].substring( 6, 2 ) + , + $exsetupver $countmembers++ } } else { $name + ,No Rollup Updates are installed,, + $exsetupver } } else { $name + ,Unknown version,, } } From: Jason Benway [mailto:benw...@jsjcorp.com] Sent: Thursday, June 21, 2012 8:49 AM To: MS-Exchange Admin Issues Subject: SP2 RU3 I install SP2 RU3 for exchange 2010 this weekend it seemed to finish successfully, but the version still shows 14.2 (build 247.5) Looks like I should see a build number of 14.2.309.2 for RU3 So what happened to the RU, did it not install correctly? jb --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here:
RE: Exchange 2010 sp2
It might have been worth waiting. The bugs fixed in SP2 RU1 aren't minor. We're happily running SP2 RU2 here. Cheers, Phil -- Phil Randal Infrastructure Engineer Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT Tel: 01432 260415 | Email: phil.ran...@hoopleltd.co.uk From: steve ens [mailto:stevey...@gmail.com] Sent: 23 May 2012 19:40 To: MS-Exchange Admin Issues Subject: Re: Exchange 2010 sp2 LOL - the RSS feed perhaps just got updated? Sent from my BlackBird. From: Heaton, Joseph@DFG jhea...@dfg.ca.govmailto:jhea...@dfg.ca.gov Date: Wed, 23 May 2012 18:02:58 + To: MS-Exchange Admin Issuesexchangelist@lyris.sunbelt-software.commailto:exchangelist@lyris.sunbelt-software.com ReplyTo: MS-Exchange Admin Issues exchangelist@lyris.sunbelt-software.commailto:exchangelist@lyris.sunbelt-software.com Subject: RE: Exchange 2010 sp2 Aww, Steve got a late Christmas present. Congrats! From: Jim Kennedy [kennedy...@elyriaschools.org] Sent: Wednesday, May 23, 2012 10:36 AM To: Heaton, Joseph@DFG; MS-Exchange Admin Issues Subject: RE: Exchange 2010 sp2 New to you. :) It came out in December. From: Steve Ens [mailto:stevey...@gmail.com] Sent: Wednesday, May 23, 2012 1:33 PM To: MS-Exchange Admin Issues Subject: Exchange 2010 sp2 is out...that's new isnt it? --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Hoople Ltd. You should be aware that Hoople Ltd. monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: Change Control methods?
One of the most important things to remember is that changes in the outside world can have an impact on you, and the authors of those pesky viruses, worms, and assorted exploits don't have to fill in any change request forms. Cheers, Phil -- Phil Randal Infrastructure Engineer Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT Tel: 01432 260415 | Email: phil.ran...@hoopleltd.co.uk From: Dave Wade [mailto:dave.w...@stockport.gov.uk] Sent: 05 March 2012 16:44 To: MS-Exchange Admin Issues Subject: RE: Change Control methods? For an Organization it is no longer useful to manage these things in isolation any more. ITIL and ISO27000 really require a holistic approach so that the impact of changes on Availability and Continuity, Capacity and Costs are considered which means you need a Holistic Approach to change. That covers all these things... There again for small sites a sheet of paper may be OK Dave Wade 0161 474 5456 From: David Thor Johnson [mailto:idama...@comcast.net]mailto:[mailto:idama...@comcast.net] Sent: 01 March 2012 02:08 To: MS-Exchange Admin Issues Subject: Change Control methods? Hi all, What are you all doing in regards to change control in your networks and servers. We used to keep a paper log in the server room for whenever a server was patched or rebooted. Is there a software method that you wopuld recommend? Thanks in advance for all input is appreciated. Cheers, David Thor Johnson --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist ** The Council has launched its Streets Ahead initiative to show how we can keep Stockport moving during the winter months. For all the latest news visit the new web pages at www.stockport.gov.uk/streetsaheadhttp://www.stockport.gov.uk/streetsahead This email, and any files transmitted with it, is confidential and intended solely for the use of the individual or entity to whom they are addressed. As a public body, the Council may be required to disclose this email, or any response to it, under the Freedom of Information Act 2000, unless the information in it is covered by one of the exemptions in the Act. If you receive this email in error please notify Stockport ICT, Corporate Support Services via email.qu...@stockport.gov.ukmailto:email.qu...@stockport.gov.uk and then permanently remove it from your system. Thank you. http://www.stockport.gov.uk ** --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Hoople Ltd. You should be aware that Hoople Ltd. monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: internal spam
You need to restrict which boxes are allowed to talk SMTP to your SMTP relays. Should only be your exchange servers and a few other boxes, as needed. It’s worth packet-sniffing the SNMP traffic to these boxes (which will identify the spambots if they’re talking SMTP). You need to find at least one infected box and see exactly what it is doing. Cheers, Phil -- Phil Randal Infrastructure Engineer Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT Tel: 01432 260415 | Email: phil.ran...@hoopleltd.co.uk From: Sharp, Kevin [mailto:kevin.sh...@usask.ca] Sent: 24 February 2012 23:38 To: MS-Exchange Admin Issues Subject: RE: internal spam The accounts have been compromised…usually via a phishing attempt. So the entire process of the internal attack is with a valid authenticated acct. We have our SMTP services set to be authenticated…the problem is looking for a process that we can use to identify potential accounts that are sending volumes of email and hopefully stop it before the pile of email gets too large. Usually the attack sends thousands of email to valid and nonvalid email addresses…which of course we don’t notice until the pile of invalid email starts to pile up. I know..it is comical ☺. User education has helped, but like any good phishing attack, it only takes one bite to cause this problem. Thanks Kevin From: Mike Tavares [mailto:miketava...@comcast.net]mailto:[mailto:miketava...@comcast.net] Sent: Friday, February 24, 2012 4:26 PM To: MS-Exchange Admin Issues Subject: Re: internal spam 1 question just to clear up some confusion on my part. Are the actual accounts in question compromised? (as in someone has direct access to the mailboxes on your server?) or just compromised in the since that some spammer/hacker on the outside is spoofing an email address from your company that is a legit address? From: Sharp, Kevinmailto:kevin.sh...@usask.ca Sent: Friday, February 24, 2012 12:19 PM To: MS-Exchange Admin Issuesmailto:exchangelist@lyris.sunbelt-software.com Subject: internal spam I’m wondering how people are dealing with compromised accounts in Exchange sending large volumes of email…essentially an internal spam attack. Occasionally a phishing attempt will make it past our spam software, and of course the odd unsuspecting user ends up with a compromised account which makes a connection to the mail system via either a compromised PC or external connection. We notice this when the email starts piling up, and action can be taken then..but I’m wondering if there is some software or method that might have some more smarts. We’ve had numerous incidents but so far….not an easy way to distinguish a potential spam attack until after it happens, and the email starts piling up in the retry queue. I’ve looked at throttling policies and some of the transport filtering, not sure if that will help us much. What are others doing? Thanks Kevin Sharp --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist “Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Hoople Ltd. You should be aware that Hoople Ltd. monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: internal spam
SMTP, not SNMP.. It’s one of those days… Phil -- Phil Randal Infrastructure Engineer Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT Tel: 01432 260415 | Email: phil.ran...@hoopleltd.co.uk From: Randal, Phil [mailto:phil.ran...@hoopleltd.co.uk] Sent: 27 February 2012 12:20 To: MS-Exchange Admin Issues Subject: RE: internal spam You need to restrict which boxes are allowed to talk SMTP to your SMTP relays. Should only be your exchange servers and a few other boxes, as needed. It’s worth packet-sniffing the SNMP traffic to these boxes (which will identify the spambots if they’re talking SMTP). You need to find at least one infected box and see exactly what it is doing. Cheers, Phil -- Phil Randal Infrastructure Engineer Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT Tel: 01432 260415 | Email: phil.ran...@hoopleltd.co.ukmailto:phil.ran...@hoopleltd.co.uk From: Sharp, Kevin [mailto:kevin.sh...@usask.ca]mailto:[mailto:kevin.sh...@usask.ca] Sent: 24 February 2012 23:38 To: MS-Exchange Admin Issues Subject: RE: internal spam The accounts have been compromised…usually via a phishing attempt. So the entire process of the internal attack is with a valid authenticated acct. We have our SMTP services set to be authenticated…the problem is looking for a process that we can use to identify potential accounts that are sending volumes of email and hopefully stop it before the pile of email gets too large. Usually the attack sends thousands of email to valid and nonvalid email addresses…which of course we don’t notice until the pile of invalid email starts to pile up. I know..it is comical ☺. User education has helped, but like any good phishing attack, it only takes one bite to cause this problem. Thanks Kevin From: Mike Tavares [mailto:miketava...@comcast.net]mailto:[mailto:miketava...@comcast.net] Sent: Friday, February 24, 2012 4:26 PM To: MS-Exchange Admin Issues Subject: Re: internal spam 1 question just to clear up some confusion on my part. Are the actual accounts in question compromised? (as in someone has direct access to the mailboxes on your server?) or just compromised in the since that some spammer/hacker on the outside is spoofing an email address from your company that is a legit address? From: Sharp, Kevinmailto:kevin.sh...@usask.ca Sent: Friday, February 24, 2012 12:19 PM To: MS-Exchange Admin Issuesmailto:exchangelist@lyris.sunbelt-software.com Subject: internal spam I’m wondering how people are dealing with compromised accounts in Exchange sending large volumes of email…essentially an internal spam attack. Occasionally a phishing attempt will make it past our spam software, and of course the odd unsuspecting user ends up with a compromised account which makes a connection to the mail system via either a compromised PC or external connection. We notice this when the email starts piling up, and action can be taken then..but I’m wondering if there is some software or method that might have some more smarts. We’ve had numerous incidents but so far….not an easy way to distinguish a potential spam attack until after it happens, and the email starts piling up in the retry queue. I’ve looked at throttling policies and some of the transport filtering, not sure if that will help us much. What are others doing? Thanks Kevin Sharp --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist “Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Hoople Ltd. You should be aware that Hoople Ltd. monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage
RE: internal spam
The devil's in the detail? How are the infected boxes sending the emails? Via SMTP? If so, firewall it and configure Exchange SMTP connectors so that only authorised hosts can connect to your email hubs, SMTP relays, and SMTP servers in the outside world.. Cheers, Phil -- Phil Randal Infrastructure Engineer Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT Tel: 01432 260415 | Email: phil.ran...@hoopleltd.co.uk From: Sharp, Kevin [mailto:kevin.sh...@usask.ca] Sent: 24 February 2012 17:20 To: MS-Exchange Admin Issues Subject: internal spam I'm wondering how people are dealing with compromised accounts in Exchange sending large volumes of email...essentially an internal spam attack. Occasionally a phishing attempt will make it past our spam software, and of course the odd unsuspecting user ends up with a compromised account which makes a connection to the mail system via either a compromised PC or external connection. We notice this when the email starts piling up, and action can be taken then..but I'm wondering if there is some software or method that might have some more smarts. We've had numerous incidents but so farnot an easy way to distinguish a potential spam attack until after it happens, and the email starts piling up in the retry queue. I've looked at throttling policies and some of the transport filtering, not sure if that will help us much. What are others doing? Thanks Kevin Sharp --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Hoople Ltd. You should be aware that Hoople Ltd. monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: Exchange 2010 database
+1 -- Phil Randal Infrastructure Engineer Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT Tel: 01432 260415 | Email: phil.ran...@hoopleltd.co.uk From: Dave Wade [mailto:dave.w...@stockport.gov.uk] Sent: 15 February 2012 10:41 To: MS-Exchange Admin Issues Subject: RE: Exchange 2010 database Perhaps we might want to argue the case a little? You need a different mindset with Exchange 2010 and DAGs. You can no longer just take a database off-line and run ESEUTIL/D on the database as this creates a new database any copies in the Dag will need to be re-seeded. So I suggest that in many environments Exchange Mailboxes and the databases they reside in is something you may need to actively manage to get the best use out of your hardware. Schemes where you allocate users to databases on some kind of fixed basis are most likely doomed to failure. Not only do you need random allocations, but if a database grows too big you may need to create two new ones, re-balance the users across the new ones and then delete the old. Dave Wade 0161 474 5456 From: Sobey, Richard A [mailto:r.so...@imperial.ac.uk]mailto:[mailto:r.so...@imperial.ac.uk] Sent: 15 February 2012 09:17 To: MS-Exchange Admin Issues Subject: RE: Exchange 2010 database Randomly. From: bounce-9487411-8066...@lyris.sunbelt-software.commailto:bounce-9487411-8066...@lyris.sunbelt-software.com [mailto:bounce-9487411-8066...@lyris.sunbelt-software.com]mailto:[mailto:bounce-9487411-8066...@lyris.sunbelt-software.com] On Behalf Of Shih, Henry Sent: 14 February 2012 17:30 To: MS-Exchange Admin Issues Subject: Exchange 2010 database What is the best practice or guideline when you create/organize databases in your organization? How do you add/organize users into different databases? By location? By their size of current mailbox? By department? By users' job title? ... Thanks. Henry Shih System Administrator --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist ** The Council has launched its Streets Ahead initiative to show how we can keep Stockport moving during the winter months. For all the latest news visit the new web pages at www.stockport.gov.uk/streetsaheadhttp://www.stockport.gov.uk/streetsahead This email, and any files transmitted with it, is confidential and intended solely for the use of the individual or entity to whom they are addressed. As a public body, the Council may be required to disclose this email, or any response to it, under the Freedom of Information Act 2000, unless the information in it is covered by one of the exemptions in the Act. If you receive this email in error please notify Stockport ICT, Corporate Support Services via email.qu...@stockport.gov.ukmailto:email.qu...@stockport.gov.uk and then permanently remove it from your system. Thank you. http://www.stockport.gov.uk ** --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Hoople Ltd. You should be aware that Hoople Ltd. monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: Exchange 2010 database
But as SIS no longer applies in Exchange 2010, then bunching people together to save space isn't going to work anymore. If that was a major strategy in determining mailbox placement, it shouldn't be carried forward to an Exchange 2010 environment. Break up those stone tablets and carve some new ones :) Cheers, Phil -- Phil Randal Infrastructure Engineer Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT Tel: 01432 260415 | Email: phil.ran...@hoopleltd.co.uk From: Peter Johnson [mailto:peter.john...@peterstow.com] Sent: 15 February 2012 12:59 To: MS-Exchange Admin Issues Subject: RE: Exchange 2010 database It's a lovely circular argument which has changed over the years as the underlying storage and management technologies behind Exchange changed. My rule of thumb back in the Exchange 2003 days was do it by department rather than management level. I would rather have an entire department and 1 or 2 senior execs on my case because they were offline that have the entire raft of senior execs after me because their db was offline. Also I've read and found that most e-mail between users is to members of their team and therefore it made sense to keep them on the same database particularly with respect to SIS. Regards [Description: C:\Users\ptjohnson\AppData\Roaming\Microsoft\Signatures\peterstow logo2.jpg] Peter Johnson I.T Architect United Kingdom: +44 1285 658542 South Africa: +27 11 252 1100 Swaziland: +268 2442 7000 Fax:+27 11 974 7130 Mobile: +2783 306 0019 peter.john...@peterstow.commailto:peter.john...@peterstow.com www.peterstow.comhttp://www.peterstow.com This email message (including attachments) contains information which may be confidential and/or legally privileged. Unless you are the intended recipient, you may not use, copy or disclose to anyone the message or any information contained in the message or from any attachments that were sent with this email, and If you have received this email message in error, please advise the sender by email, and delete the message. Unauthorised disclosure and/or use of information contained in this email may result in civil and criminal liability. Everything in this e-mail and attachments relating to the official business of Peterstow Aquapower is proprietary to the company. Caution should be observed in placing any reliance upon any information contained in this e-mail, which is not intended to be a representation or inducement to make any decision in relation to Peterstow Aquapower. Any decision taken based on the information provided in this e-mail, should only be made after consultation with appropriate legal, regulatory, tax, technical, business, investment, financial, and accounting advisors. Neither the sender of the e-mail, nor Peterstow Aquapower shall be liable to any party for any direct, indirect or consequential damages, including, without limitation, loss of profit, interruption of business or loss of information, data or software or otherwise. The e-mail address of the sender may not be used, copied, sold, disclosed or incorporated into any database or mailing list for spamming and/or other marketing purposes without the prior consent of Peterstow Aquapower. No warranties are created or implied that an employee of Peterstow Aquapower and/or a contractor of Peterstow Aquapower is authorised to create and send this e-mail. [Description: C:\Users\ptjohnson\AppData\Roaming\Microsoft\Signatures\environment2.jpg] From: Ellis, John P. [mailto:johnel...@wirral.gov.uk]mailto:[mailto:johnel...@wirral.gov.uk] Sent: 15 February 2012 02:14 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2010 database In Exchange 2003, we did it along the lines of Store for surnames starting A-H. So we may have surnames A-H on server 1. This is for standard size mailboxes (upto 200mb) then we have on each server a store for large mailbox users i.e over 200mb, for users with surnames A-H Server 2 will be I-N etc We took the view if store A-H fell over it will be less to restore, less users effected, most managers have over 200mb mailboxes It's what ever fits the needs of the business. John From: Sobey, Richard A [mailto:r.so...@imperial.ac.uk]mailto:[mailto:r.so...@imperial.ac.uk] Sent: 15 February 2012 12:04 To: MS-Exchange Admin Issues Subject: RE: Exchange 2010 database Like another poster said, it's entirely down to the organisation. We do ours randomly because we have lots of different types of users. Having all our execs or a certain department all go offline at the same time would be pretty unacceptable - and I imagine we wouldn't be alone. DAGs haven't influenced my decision either way. Who is regularly defragmenting their EDB files anyway?! We also don't have time or resources to move mailboxes around based on the department a user is in, or a quota applied to that mailbox, or what building they're in, etc. I'm not saying that's the final word - this is a healthy
RE: Exchange 2010 database
By doing it by department you're ensuring that a whole department's email is out of action should their database fail. Better to scatter people randomly. Or is it? Cheers, Phil From: Tobie Fysh [mailto:tobie.f...@freebridge.org.uk] Sent: 14 February 2012 19:03 To: MS-Exchange Admin Issues Subject: RE: Exchange 2010 database No idea about best practice but we do it by department so in the event of a DR we can restore the databases of the most important teams first. Sent from my Windows Phone -Original Message- From: Shih, Henry Sent: 14/02/2012 17:38 To: MS-Exchange Admin Issues Subject: Exchange 2010 database [Freebridge Community Housing Logo]http://www.freebridge.org.uk [twitter.com/Freebridge]http://twitter.com/Freebridge [Freebridge on Facebook]http://www.facebook.com/pages/Kings-Lynn-United-Kingdom/Freebridge-Community-Housing/192690183387?v=box_3 This e-mail (including any attachments), is confidential and intended only for the use of the addressee(s). It may contain information covered by legal, professional or other privilege. If you are not an addressee, please inform the sender immediately and destroy this e-mail. Do not copy, use or disclose this e-mail. E-mail transmission cannot be guaranteed to be secure or error free. The sender does not accept liability for any errors or omissions in the contents of this message which arise as a result of e-mail transmission. If verification is required please request a hard copy version. Freebridge Community Housing Ltd is a Charitable Industrial and Provident Society - Reg No IP29744R Registered with the Housing Corporation - No L4463. VAT Registration Number 860762121 Freebridge Community Housing, Juniper House, Austin Street, Kings Lynn, Norfolk PE30 1DZ This email message has been scanned for viruses by Mimecast. Mimecast delivers a complete managed email solution from a single web based platform. For more information please visit http://www.mimecast.com --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Hoople Ltd. You should be aware that Hoople Ltd. monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelistinline: image001.gifinline: image002.gifinline: image003.gif
RE: 2010 SP1 RU5 - possible issues with 2003 client?
It's been suggested in the Exchange Team blog's comments about RU6 that the OL 2003 issue won't be fixed until SP2 RU1 . Cheers, Phil From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: 11 November 2011 22:32 To: MS-Exchange Admin Issues Subject: RE: 2010 SP1 RU5 - possible issues with 2003 client? Yes. This isn't really fixed until sp2. I hope I can say that. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Stringham, Steven [mailto:sstri...@lrlaw.com] Sent: Friday, November 11, 2011 5:28 PM To: MS-Exchange Admin Issues Subject: RE: 2010 SP1 RU5 - possible issues with 2003 client? Perfect. So, not a big deal on the back out. Thank you again. Has anybody seen these kinds of problems with RU5? From: Michael B. Smith [mailto:mich...@smithcons.com]mailto:[mailto:mich...@smithcons.com] Sent: Friday, November 11, 2011 3:13 PM To: MS-Exchange Admin Issues Subject: RE: 2010 SP1 RU5 - possible issues with 2003 client? Just remove ru5 from Programs/Features. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Stringham, Steven [mailto:sstri...@lrlaw.com]mailto:[mailto:sstri...@lrlaw.com] Sent: Friday, November 11, 2011 5:09 PM To: MS-Exchange Admin Issues Subject: 2010 SP1 RU5 - possible issues with 2003 client? Background: We have recently moved most of our users from 2003 to 2010 Exchange on SP1 RU3. The clients are still running Outlook 2003 on XP. 2 CAS servers, 2 MBX servers in a DAG. All servers are virtualized. The other day (Oct 29th) we upgraded the firmware from 7.x to 8.x on our NetApp SAN. As a precaution we shut down all the servers ahead of time - including our EX2010 servers. When I shutdown our 2008r2 Ex2010 servers, it applied updates, including the R5 update. Since then there have been several instances of problems displaying folder contents. We select a folder, and it says error communicating with server. If I change to a few other folders, it might come back. It also has had trouble connecting to other shared mailboxes - similar error. One person said they looked in their draft folder, there was only one there, they changed folders, came back, and now there were three. Has anybody else seen anything like this? Barring that, how can we back out RU5 and go back to RU3? Thanks Steven Stringham For more information about Lewis and Roca LLP, please go to www.lewisandroca.comhttp://www.lewisandroca.com/. Phoenix (602)262-5311 Minden (775)586-9500 Tucson (520)622-2090 Albuquerque (505)764-5400 Las Vegas (702)949-8200 Silicon Valley (650)391-1380 Reno (775)823-2900 This message is intended only for the use of the individual or entity to which it is addressed. If the reader of this message is not the intended recipient, or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this message is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the sender of this E-Mail by return E-Mail or by telephone. In accordance with Internal Revenue Service Circular 230, we advise you that if this email contains any tax advice, such tax advice was not intended or written to be used, and it cannot be used, by any taxpayer for the purpose of avoiding penalties that may be imposed on the taxpayer. --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Herefordshire Council, Herefordshire Primary Care Trust or 2gether NHS Foundation Trust. You should be aware that Herefordshire Council, Herefordshire Primary Care Trust 2gether NHS Foundation Trust monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from
RE: Installing RU5 on new Exch 2010 environment
You might wish to save yourself a bit of wasted effort and install RU6 instead :) Phil -- Phil Randal Infrastructure Engineer Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT Tel: 01432 260415 | Email: pran...@herefordshire.gov.uk From: Brian McGloin [mailto:sms...@gmail.com] Sent: 01 November 2011 13:55 To: MS-Exchange Admin Issues Subject: Installing RU5 on new Exch 2010 environment We're installing this roll up in a new environment tonight. It's our firsttime patching the environment. I think we're pretty clear what we need to do with the mailbox servers. Is there anything special we need to do with the 2 CAS servers? We use Windows NLB (for now) and I don't want to do anything that would affect all users. Thx in advance --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Herefordshire Council. You should be aware that Herefordshire Council monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: Installing RU5 on new Exch 2010 environment
One thing which can catch the unwary. The proper way to apply the Exchange 2010 SP1 rollups is to open a command prompt with elevated Administrator rights and run the rollup update from there. Cheers, Phil -- Phil Randal Infrastructure Engineer Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT Tel: 01432 260415 | Email: pran...@herefordshire.gov.uk From: Brian McGloin [mailto:sms...@gmail.com] Sent: 01 November 2011 13:55 To: MS-Exchange Admin Issues Subject: Installing RU5 on new Exch 2010 environment We're installing this roll up in a new environment tonight. It's our firsttime patching the environment. I think we're pretty clear what we need to do with the mailbox servers. Is there anything special we need to do with the 2 CAS servers? We use Windows NLB (for now) and I don't want to do anything that would affect all users. Thx in advance --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Herefordshire Council. You should be aware that Herefordshire Council monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: Exchange 2010 sp1 rollup 3 status
Yes, works a treat. It wasn't terribly clear whether the registry key setting described in http://support.microsoft.com/?kbid=2009942 applied just to CAS servers or mailbox servers too, so I set it on all. Cheers, Phil From: Stringham, Steven [mailto:sstri...@lrlaw.com] Sent: 09 March 2011 20:21 To: MS-Exchange Admin Issues Subject: RE: Exchange 2010 sp1 rollup 3 status It looks like it is now available!!! Anybody else install this yet? From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Wednesday, March 02, 2011 12:09 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2010 sp1 rollup 3 status With 5 seconds, you get used to waiting. With 1 second, I feel like I'm caught in stop-motion photography. :) Yes, the documentation says 5 seconds. Testing indicates it can go down to 1 second. Granted, at some associated server overhead. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Stringham, Steven [mailto:sstri...@lrlaw.com] Sent: Wednesday, March 02, 2011 2:05 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2010 sp1 rollup 3 status How is the 1 second delay more annoying than the 5 second delay? And, I thought that I could not get it under 5 seconds? I am using this KB as my guide here (http://support.microsoft.com/kb/2009942) (although, I am having trouble with MSs KB database today - is anybody else?) From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Wednesday, March 02, 2011 11:58 AM To: MS-Exchange Admin Issues Subject: RE: Exchange 2010 sp1 rollup 3 status Yes, what you describe is the specific behavior of the UDP issue. Is cached mode not an option for you? It is also possible to reduce the refresh delay to 1 second; but I simply find that even more annoying. Because of this behavior, I've stopped several of my clients (who cannot upgrade from Outlook 2003, for whatever reason) from doing their Exchange upgrade. Once this UR is released, I'll encourage them to move forward. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Stringham, Steven [mailto:sstri...@lrlaw.com] Sent: Wednesday, March 02, 2011 1:54 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2010 sp1 rollup 3 status One of the items - as mentioned in this article - that we are looking forward to is the renewed UDP functions for outlook 2003. We are getting 5 second delays in refreshes of the OL client. This includes moving messages to folders, they still show in the inbox for the 5 seconds, or messages don't get removed from the inbox when you delete them. When this happens and you click on the message, it gives you an error message. If I use my activesync android to update messages, when I maximize up outlook again (not having logged out overnight) the list still shows a lot of messages that I had deleted. Changing to another folder and back refreshes the list and all is well again. But, we are hesitating to roll out Ex2010 because of this. We are not able to roll out the client at the same time because of other issues. Do you experiance this as well? From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Wednesday, March 02, 2011 11:14 AM To: MS-Exchange Admin Issues Subject: RE: Exchange 2010 sp1 rollup 3 status There is no public information on the specific release date. And even if there were, those can slide quite dramatically. However, in general, URs are targeted to come out every 8 - 12 weeks. So... one could reasonably assume that the target date is... fairly soon. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Stringham, Steven [mailto:sstri...@lrlaw.com] Sent: Wednesday, March 02, 2011 12:49 PM To: MS-Exchange Admin Issues Subject: Exchange 2010 sp1 rollup 3 status According to this article, rollup 3 is coming out. This supposedly fixes the udp issues for 2003 Outlook client. Any word on the status of this coming out? http://msexchangeteam.com/archive/2011/01/28/457845.aspx For more information about Lewis and Roca LLP, please go to www.lewisandroca.comhttp://www.lewisandroca.com/. Phoenix (602)262-5311 Minden (775)586-9500 Tucson (520)622-2090 Albuquerque (505)764-5400 Las Vegas (702)949-8200 Silicon Valley (650)391-1380 Reno (775)823-2900 This message is intended only for the use of the individual or entity to which it is addressed. If the reader of this message is not the intended recipient, or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this message is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the sender of this E-Mail by
RE: Windows 2008 R2 SP1 patching in a DAG
That's exactly what I've done without any issues. Cheers, Phil From: Sobey, Richard A [mailto:r.so...@imperial.ac.uk] Sent: 09 March 2011 22:33 To: MS-Exchange Admin Issues Subject: Windows 2008 R2 SP1 patching in a DAG Hi all, Going to be patching the member servers of my DAG tomorrow with SP1 for Windows 2008 R2. Anyone done this yet? My plan was simply to switchover, patch, switchover again, patch, balance the databases. Is it that simple or so I need to do some reading? Thanks Richard --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Herefordshire Council. You should be aware that Herefordshire Council monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: CAS upgrade to SP1
Have a read of http://msexchangeteam.com/archive/2010/09/01/456094.aspx first. Very useful. Cheers, Phil -- Phil Randal | Infrastructure Engineer NHS Herefordshire Herefordshire Council | Deputy Chief Executive's Office | I.C.T. Services Division Thorn Office Centre, Rotherwas, Hereford, HR2 6JT Tel: 01432 260160 From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: 27 January 2011 13:45 To: MS-Exchange Admin Issues Subject: RE: CAS upgrade to SP1 Just run the upgrade. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: phil levine [mailto:plevin...@yahoo.com] Sent: Thursday, January 27, 2011 8:40 AM To: MS-Exchange Admin Issues Subject: CAS upgrade to SP1 we are upgrading our RTM environment to SP1 on Exchange 2010 and having issues with the CAS upgrades and activesync. last night, after our 3rd call to microsoft we were told that in order to upgrade to SP1 we need to take one of the load balanced CAS down and upgrade the other. can we just run the upgrade to SP1 or should we uninstall Exchange and reinstall with 2010 SP1? luckily we have multiple sites and can fail to one of the other sites to keep clients running. thangs again phil --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: anti-spam DNS requests
Or that SpamTitan's Use DNS Cache option has been turned off. Cheers, Phil -- Phil Randal | Infrastructure Engineer NHS Herefordshire Herefordshire Council | Deputy Chief Executive's Office | I.C.T. Services Division Thorn Office Centre, Rotherwas, Hereford, HR2 6JT Tel: 01432 260160 -Original Message- From: Steve Hart [mailto:sh...@wrightbg.com] Sent: 20 January 2011 16:39 To: MS-Exchange Admin Issues Subject: RE: anti-spam DNS requests It might be that SpamTitan caches DNS entries for a shorter time than Windows. Steve Hart Network Administrator 503.491.4343 -Direct | 503.492.8160 - Fax -Original Message- From: Osborne, Richard [mailto:richard.osbo...@wth.org] Sent: Thursday, January 20, 2011 8:37 AM To: MS-Exchange Admin Issues Subject: RE: anti-spam DNS requests Our previous Windows-based anti-spam queried the same 3 RBLs, so I don't understand the increase. -Original Message- From: Alex Eckelberry [mailto:al...@sunbelt-software.com] Sent: Thursday, January 20, 2011 10:31 AM To: MS-Exchange Admin Issues Subject: RE: anti-spam DNS requests Spamtitan, like many open-source based appliances, queries a bunch of RBLs, like SURBL, Spamhaus, etc. Look at what RBLs are listed, there's going to be a bunch of lookups. I am not surprised that you saw a jump. Alex Alex Eckelberry General Manager, Security Business Unit GFI Software, Inc. (formerly Sunbelt Software) 33 N. Garden Avenue, Clearwater, FL 33755 p: 919-297-1347 f: 727-562-5199 e: al...@gfi.com MSN: alex...@hotmail.com Skype: alexeckelberry oovoo: alexeck w: www.sunbeltsoftware.com b: www.sunbeltblog.com -Original Message- From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk] Sent: Thursday, January 20, 2011 11:07 AM To: MS-Exchange Admin Issues Subject: RE: anti-spam DNS requests Maybe it queries more RBLs, maybe it does root hint lookups rather than forwarders, it could be a lot of things depending on how it's configured vs. the old product. Paul -Original Message- From: Osborne, Richard [mailto:richard.osbo...@wth.org] Sent: 20 January 2011 16:03 To: MS-Exchange Admin Issues Subject: anti-spam DNS requests Our anti-spam solution sits behind our firewall with the necessary ports open to the Internet. We recently changed from a Windows-based (Symantec Mail Security) to a Linux-based (SpamTitan) anti-spam system. My firewall guy is concerned that the number of DNS connections on the firewall (Checkpoint Firewall-1) has more than doubled. We saw the same behavior when we demo'ed Untangle (also Linux-based). Both anti-spam solutions use RBL's, so of course there will be a lot of DNS requests. Any ideas why the number has grown so much higher and whether it should be a concern? Should we just move our anti-spam server outside the firewall? Thanks. Richard Osborne Information Systems Jackson-Madison County General Hospital NOTICE: (1) The foregoing is not intended to be a legally binding or legally effective electronic signature. (2) This message may contain legally privileged or confidential information. If you are not the intended recipient of this message, please so notify me, disregard the foregoing message, and delete the message immediately. I apologize for any inconvenience this may have caused. --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist -- MIRA Ltd Watling Street, Nuneaton, Warwickshire, CV10 0TU, England Registered in England and Wales No. 402570 VAT Registration GB 100 1464 84 The contents of this e-mail are confidential and are solely for the use of the intended recipient. If you receive this e-mail in error, please delete it and notify us either by e-mail, telephone or fax. You should not copy, forward or otherwise disclose the content of the e-mail as this is prohibited. --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Herefordshire Council. You should be aware that Herefordshire Council monitors its email service. This e-mail and any attached files are
RE: MS Support on VMware?
http://lmgtfy.com/?q=exchange+2010+on+vmware -- Phil Randal | Infrastructure Engineer NHS Herefordshire Herefordshire Council | Deputy Chief Executive's Office | I.C.T. Services Division Thorn Office Centre, Rotherwas, Hereford, HR2 6JT Tel: 01432 260160 From: Phil Hershey [mailto:phers...@agia.com] Sent: 10 November 2010 16:37 To: MS-Exchange Admin Issues Subject: MS Support on VMware? Under what conditions, if any, will MS support Exchange 2010 on VMware vSphere? Our current Exchange 2003 is running on an IBM blade/NetApp iSCSI SAN on ESX 3.0.2, and performance sucks. Unfortunately the 'let's virtualize it' flu is running rampant here, although my vote is to take the Exchange system physical (~450 users and 500GB in EDB, STM, LOG files). Thanks. Philip --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: Rich Text Format setting in Exchange 2010
Unfortunately, TNEF is a proprietary Microsoft format, and is the antithesis of interoperability. Phil -Original Message- From: Jason Gurtz [mailto:jasongu...@npumail.com] Sent: 29 October 2010 14:46 To: MS-Exchange Admin Issues Subject: RE: Rich Text Format setting in Exchange 2010 Yea, that was a rhetorical question. Many/most people I talk to that allow RTF outbound to the Internet are blissfully unaware that things such as the user's domain username or path to pst file are included in clear text in the winmail.dat. It's too bad, because the TNEF format its self is more efficient than the various mime schemes. Maybe these security issues will be fixed someday. ~JasonG -Original Message- From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Friday, October 29, 2010 09:09 To: MS-Exchange Admin Issues Subject: RE: Rich Text Format setting in Exchange 2010 it's the message in TNEF - Transport Neutral Encapsulation Format. you can biggle for that and find it if you are interested in the technical details. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Jason Gurtz [jasongu...@npumail.com] Sent: Friday, October 29, 2010 8:26 AM To: MS-Exchange Admin Issues Subject: RE: Rich Text Format setting in Exchange 2010 What kind of issues did you experience? We disable all outbound RTF globally on Exchg 2k3 and haven't had any problems that I'm aware of. Anyone here ever bothered to open up a winmail.dat in a text editor to check out what's in there? ~JasonG -Original Message- From: HELP_PC [mailto:g...@enter.it] Sent: Friday, October 29, 2010 00:09 To: MS-Exchange Admin Issues Subject: R: Rich Text Format setting in Exchange 2010 Can be set also in Exch2k3, but the problem is getting it working GuidoElia HELPPC Da: Michael B. Smith [mailto:mich...@smithcons.com] Inviato: venerdì 29 ottobre 2010 0.07 A: MS-Exchange Admin Issues Oggetto: RE: Rich Text Format setting in Exchange 2010 It can be set individually via Set-Mailbox or globally. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Chris Pohlschneider [mailto:chris.pohlschnei...@hollowayusa.com] Sent: Thursday, October 28, 2010 9:24 AM To: MS-Exchange Admin Issues Subject: Rich Text Format setting in Exchange 2010 Hello, We have Exchange 2010 that contains mail enabled contacts in the GAL and users have their own personal contacts. I have had some complaints about internet recipients receiving e-mails with the winmail.dat attachment instead of the intended attachment. I changed the setting on all the mail enabled contacts to not use rich text format. However, I have one user that when she sends an e-mail to one of her personal contacts with an attachment, it still goes through as a winmail.dat attachment instead of the pdf attachment that she is trying to send. Is there a setting within Exchange 2010 that I can disable rich text to internet recipients? I have googled this with no luck in finding the correct answer. Thanks in advance for any insight. Chris Pohlschneider Holloway Sportswear Network Administrator chris.pohlschnei...@hollowayusa.com 937-494-2559 --- To manage subscriptions click here: http://lyris.sunbelt- software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt- software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt- software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt- software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt- software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: Slightly OT: Vipre for Email
Because uncompressing highly compressed archive files can be a very nice/nasty Denial Of Service. http://en.wikipedia.org/wiki/Zip_bomb Cheers, Phil -- Phil Randal | Infrastructure Engineer NHS Herefordshire Herefordshire Council | Deputy Chief Executive's Office | I.C.T. Services Division Thorn Office Centre, Rotherwas, Hereford, HR2 6JT Tel: 01432 260160 From: Micheal Espinola Jr [mailto:michealespin...@gmail.com] Sent: 20 October 2010 16:36 To: MS-Exchange Admin Issues Subject: Re: Slightly OT: Vipre for Email I'm confused. So you would bounce .zip files for being too large if/when uncompressed? This seems to go against why people commonly compress email attachments. -- ME2 On Wed, Oct 20, 2010 at 7:40 AM, Cameron cameron.orl...@gmail.com wrote: Good morning all! More an informational post than anything. Was it just me that didn't know that the new MS Office documents (.xlsx, .docx, etc) were compressed files? Vipre for Exchange was trapping an 8mb .xlsx file even though the limit was set to 50mb and saying that it was over the size when uncompressed. So...Sunbelt Tech Support (which in my opinion rocks!) helped me to determine that the actual file size was 54mbs..therefore being bounced. Who'd a thunk it. Cheers, Cameron --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: Issues after SP1.
Look here: http://msexchangeteam.com/archive/2010/02/04/453946.aspx Missing WSMan entry? That was the problem that we had. Cheers, Phil -- Phil Randal | Infrastructure Engineer NHS Herefordshire Herefordshire Council | Deputy Chief Executive's Office | I.C.T. Services Division Thorn Office Centre, Rotherwas, Hereford, HR2 6JT Tel: 01432 260160 From: Castillo, Daniel (Directory Services) [mailto:daniel.casti...@hp.com] Sent: 04 October 2010 14:32 To: MS-Exchange Admin Issues Subject: Issues after SP1. So after installing SP1 I can no longer EMC not EMS... The error on EMC is: [server-fqdn] Connecting to remote server failed with the following error message: The WinRM client cannot process the request. It cannot determine the content type of the HTTP response from the destination computer. The content type is absent or invalid. For more information see the about_Remote_Troubleshooting Help topic. It was running the command 'Discover-ExchangeServer -UseWIA $true -SuppressError $true -CurrentVersion 'Version 14.1 (Build 218.15). The error on EMS is: [server-fqdn] Connecting to remote server failed with the following error message: The WinRM client cannot process the request. It cannot determine the content type of the HTTP response from the destination computer. The content type is absent or invalid. For more information see the about_Remote_Troubleshooting Help topic. +CategoryInfo : OpenError: (System.ManagementRemoteRunspace:RemoteRunspace) []. PSRemotingTransportException + FullyQualifiedErrorId : PSSessionOpenFailed I checked the protocolSettings attribute and its set to RemotePowerShell§1, all required group memberships are in place. This is a mixed 2007 SP3 / 2010 SP1 environment, everything on 2K7 works as expected. And other pure and mixed 2010 SP1 environments I look at are just fine... this is odd. I've googled around and others are having this problem too but no solution found yet :( Any ideas? ~D --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Herefordshire Council. You should be aware that Herefordshire Council monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: Exchange 2010 SP1 FAQ and known issues
They should have included the hotfixes in the service pack and installed them automagically where needed. I guess that's too much to ask. Phil -- Phil Randal | Networks Engineer NHS Herefordshire Herefordshire Council | Deputy Chief Executive's Office | I.C.T. Services Division Thorn Office Centre, Rotherwas, Hereford, HR2 6JT Tel: 01432 260160 email: pran...@herefordshire.gov.uk -Original Message- From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: 01 September 2010 22:29 To: MS-Exchange Admin Issues Subject: Exchange 2010 SP1 FAQ and known issues After my blog post comes the Microsoft official support statement: http://msexchangeteam.com/archive/2010/09/01/456094.aspx Doesn't change the experience though. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Herefordshire Council. You should be aware that Herefordshire Council monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: Exchange 2010 SP1 FAQ and known issues
Nits, being picked... Server and Exchange teams should work together... Phil -- Phil Randal | Networks Engineer NHS Herefordshire Herefordshire Council | Deputy Chief Executive's Office | I.C.T. Services Division Thorn Office Centre, Rotherwas, Hereford, HR2 6JT Tel: 01432 260160 email: pran...@herefordshire.gov.uk Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Herefordshire Council. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. -Original Message- From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: 02 September 2010 11:55 To: MS-Exchange Admin Issues Subject: RE: Exchange 2010 SP1 FAQ and known issues They aren't Exchange hotfixes. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com -Original Message- From: Randal, Phil [mailto:pran...@herefordshire.gov.uk] Sent: Thursday, September 02, 2010 5:22 AM To: MS-Exchange Admin Issues Subject: RE: Exchange 2010 SP1 FAQ and known issues They should have included the hotfixes in the service pack and installed them automagically where needed. I guess that's too much to ask. Phil -- Phil Randal | Networks Engineer NHS Herefordshire Herefordshire Council | Deputy Chief Executive's Office | I.C.T. Services Division Thorn Office Centre, Rotherwas, Hereford, HR2 6JT Tel: 01432 260160 email: pran...@herefordshire.gov.uk -Original Message- From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: 01 September 2010 22:29 To: MS-Exchange Admin Issues Subject: Exchange 2010 SP1 FAQ and known issues After my blog post comes the Microsoft official support statement: http://msexchangeteam.com/archive/2010/09/01/456094.aspx Doesn't change the experience though. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Herefordshire Council. You should be aware that Herefordshire Council monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Herefordshire Council. You should be aware that Herefordshire Council monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: Exchange 2003 whitespace
You can also try this one: http://gsexdev.blogspot.com/2008/07/show-exchange-whitespace-retained-it ems.html I use something based on this in PowerGUI. Cheers, Phil -- Phil Randal | Networks Engineer NHS Herefordshire Herefordshire Council | Deputy Chief Executive's Office | I.C.T. Services Division Thorn Office Centre, Rotherwas, Hereford, HR2 6JT Tel: 01432 260160 email: pran...@herefordshire.gov.uk Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Herefordshire Council. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. -Original Message- From: Kleciak, Clint D A7IT [mailto:clint.klec...@cigna.com] Sent: 23 July 2010 15:36 To: MS-Exchange Admin Issues Subject: RE: Exchange 2003 whitespace Powershell Script I wrote\stole. Works in Ex2007 with Powershell 2.0. It needs some modifications on the order of application entries it brings into the array but it will get you going. #startscript #Need Power Shell Version 2.0 # Note: Event ID 1221 has an InstanceID of 1074136261 on both MSX 2007 and MSX 2003 servers. # #Vairables# # $es = Servers Array # # $srv = Servername # # $dbc = Database Count # # $DB = Database Name # # $WS = WhiteSpace# ### #Create File for Output $fileName=read-host Enter the File Name where the information will be stored: $File=New-Item -ItemType file $FileName.txt #Adds Header Info to file add-content $file Server DateBase NumberOfUsers DataBaseSize WhiteSpace #Gets All Exchange Servers with the Mailbox Role including Public Folders $es = Get-ExchangeServer | Sort-Object -Property name | Where-Object {$_.ServerRole -eq Mailbox} foreach ($srv in $es) { #Getting the database count $dbc = get-mailboxdatabase -server $srv |Measure-Object #Getting the 1221 events. #need to modify the following line in order to only get correct app entries $events = Get-EventLog -ComputerName $srv -LogName application -instanceid 1074136261 -source MSExchangeIS Mailbox Store -Newest $dbc.count| Sort-Object -Property Message #Writing the output to Screen Write-Host Write-Host Server - $srv -ForegroundColor Blue Write-Host Databases - $dbc.Count -ForegroundColor Blue Write-Host foreach ($item in $events) { $DBName = $item.ReplacementStrings[1] $WS = $item.ReplacementStrings[0] $database1=$DBName #Getting File Size of Databases $db = Get-MailboxDatabase $srv\$Database1 #write-host $db $path = `\`\ + $srv + `\ + $db.EdbFilePath.DriveName.Remove(1).ToString() + $+ $db.EdbFilePath.PathName.Remove(0,2) $dbsize = Get-ChildItem $path $ReturnedObj = New-Object PSObject #$ReturnedObj | Add-Member NoteProperty -Name Server\StorageGroup\Database -Value $objItem.Identity #$ReturnedObj | Add-Member NoteProperty -Name Size (MB) -Value ({0:n2} -f ($dbsize.Length/1024KB)) #$ReturnedObj | Add-Member NoteProperty -Name -Value ({0:n2} -f ($dbsize.Length/1024KB)) $ReturnedOBJ = ({0:n2} -f ($dbsize.Length/1024KB)) #Getting Number of Users on Databases $NuUsers=Get-MailboxStatistics -database $srv\$Database1 |where-object {!$_.DisconnectDate} | group-object -property:displayName |Measure-Object $NumBerOfUSers=$NuUsers.Count #Writing to Screen Write-Host Write-Host ServerName $srv Write-Host DBName $DBName write-host NmbrUsers $NumberOfUsers Write-Host SizeOfDB$ReturnedObj Write-Host WhtSpace$WS Write-Host #Writing to File add-content $file $srv $DBName $NumberOfUsers $ReturnedObj $WS } } #endscript ___ Clint Kleciak Infrastructure Engineer Mgr CIGNA IT Confidential, unpublished property of CIGNA. Do not duplicate or distribute. Use and distribution limited solely to authorized personnel. (c) Copyright 2010 CIGNA -Original Message- From: Ellis, John P. [mailto:johnel...@wirral.gov.uk] Sent: Friday, July 23, 2010 5:02 AM To: MS-Exchange Admin Issues Subject: Exchange 2003 whitespace Is it possible to obtain free disc space, EDB size, and white space from the command line and export it to a file? Thanks John ---
RE: OT : Missing network connection
McAfee DAT update 5958 broke things a bit for a lot of folks, it appears. McAfee's KB article is here: https://kc.mcafee.com/corporate/index?page=contentid=KB68780 McAfee Forum: http://community.mcafee.com/thread/24056?start=0tstart=0 Good luck, Phil -- Phil Randal | Networks Engineer NHS Herefordshire Herefordshire Council | Deputy Chief Executive's Office | I.C.T. Services Division Thorn Office Centre, Rotherwas, Hereford, HR2 6JT Tel: 01432 260160 email: pran...@herefordshire.gov.uk Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Herefordshire Council. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: 21 April 2010 18:22 To: MS-Exchange Admin Issues Subject: RE: OT : Missing network connection Running mcafee? It's broke. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Doug Rooney [mailto:d...@sonomatilemakers.com] Sent: Wednesday, April 21, 2010 1:18 PM To: MS-Exchange Admin Issues Subject: RE: OT : Missing network connection Importance: High I just received this moments ago... From: Sent: Wednesday, April 21, 2010 10:05 AM To: Subject: Virus Alert This is to advise you that there is a new virus attack propagating today. The origin is unknown at this time so we don't know whether it is coming through the Internet or email. The symptoms may vary, but we are seeing clients who are losing their start button, network access, no desktop, unable to launch applications, etc. If you are experiencing any of these symptoms or other strange behavior, please shut the system immediately. We are investigating methods to repair or eradicate the virus. If you have not experienced the symptoms above, we recommend taking standard precautions, including staying off the Internet or not opening emails from unknown senders. Please contact your IT department if you are experiencing this problem on your network. Thank you, The Network Team Thank You ~Doug Rooney Sonoma Tilemakers IT Manager 7750 Bell Rd. Windsor Ca, 95492 i...@sonomatilemakers.com From: Steve Hart [mailto:sh...@wrightbg.com] Sent: Wednesday, April 21, 2010 9:43 AM To: MS-Exchange Admin Issues Subject: OT : Missing network connection I have two workstations this morning with the same problem. No network shows up in the control panel and of course all of the network services won't start. The card shows up in device manager. Changing cards and drivers hasn't helped. Is anyone else seeing this problem? Steve From: Clayton Doige [mailto:clayton.do...@gmail.com] Sent: Wednesday, April 21, 2010 8:17 AM To: MS-Exchange Admin Issues Subject: Re: RPC/HTTP Revisited can't, 2003 is my clients standard desktop - I am running 2010 on my machine, was very happy when it worked only to be dropped back into the frustration thereafter (my 2010 is Beta still!) thanks On 21 April 2010 15:58, Michael B. Smith mich...@smithcons.com wrote: Use 2010. Honestly, I've no idea. If 2010 works, then it's probably part of the security package rework that happened in 2010. Certainly not going to be backported... Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Clayton Doige [mailto:clayton.do...@gmail.com] Sent: Wednesday, April 21, 2010 10:49 AM To: MS-Exchange Admin Issues Subject: Re: RPC/HTTP Revisited OK, tried that, no joy. I'll document the settings in the client in this case: Digital Cert is a wild card and IT throws no errors when trying to connect Account Settings Tab: Mailserver = internal name of mail server (I am on the local LAN) Cached mode unticked username = * - this resolves when clicking check name internally More Settings General Automatically Detect Connection Type Ticked More Settings Security Encryption is ticked Kerberos/NTLM is the logon protocol RPC Proxy Settings https:// (domain name used to connect to webmail - MX record points to Web sense) Mutually Authenticate is ticked - target = msstd:*.webmaildomain Both HTTP connection types are ticked Authentication is set to basic Again, the above works with 2010, but not 2003 Thanks for any pointers Clayton On 21 April 2010 15:41, Michael B. Smith mich...@smithcons.com wrote: Try enabling encryption.
RE: OT : Missing network connection
Try here too - extra.dat attached there. http://vil.nai.com/vil/content/v_265240.htm http://vil.nai.com/vil/content/v_265240.htm Cheers, Phil -- Phil Randal | Networks Engineer NHS Herefordshire Herefordshire Council | Deputy Chief Executive's Office | I.C.T. Services Division Thorn Office Centre, Rotherwas, Hereford, HR2 6JT Tel: 01432 260160 email: pran...@herefordshire.gov.uk Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Herefordshire Council. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. From: Sean Martin [mailto:seanmarti...@gmail.com] Sent: 21 April 2010 18:49 To: MS-Exchange Admin Issues Subject: Re: OT : Missing network connection Bad DAT (5958). There's an extra.dat the suppresses the false positive, but if you can't download it If the PCs are in a reboot cycle, type shutdown -a from a command prompt. Access the VirusScan Console, Tools, Rollback DATs. I don't manage our AntiVirus suite here so I don't know the requirements for this specific fix to work. We use EPO to manage and can verify this has worked in our environment. On Wed, Apr 21, 2010 at 9:42 AM, Steve Hart sh...@wrightbg.com wrote: We do run McAfee on our workstations. Neither of these links is currently accessible. Do you recall the gist of the issue? Steve From: Randal, Phil [mailto:pran...@herefordshire.gov.uk] Sent: Wednesday, April 21, 2010 10:25 AM To: MS-Exchange Admin Issues Subject: RE: OT : Missing network connection McAfee DAT update 5958 broke things a bit for a lot of folks, it appears. McAfee's KB article is here: https://kc.mcafee.com/corporate/index?page=contentid=KB68780 McAfee Forum: http://community.mcafee.com/thread/24056?start=0tstart=0 Good luck, Phil -- Phil Randal | Networks Engineer NHS Herefordshire Herefordshire Council | Deputy Chief Executive's Office | I.C.T. Services Division Thorn Office Centre, Rotherwas, Hereford, HR2 6JT Tel: 01432 260160 email: pran...@herefordshire.gov.uk Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Herefordshire Council. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: 21 April 2010 18:22 To: MS-Exchange Admin Issues Subject: RE: OT : Missing network connection Running mcafee? It's broke. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com http://theessentialexchange.com/ From: Doug Rooney [mailto:d...@sonomatilemakers.com] Sent: Wednesday, April 21, 2010 1:18 PM To: MS-Exchange Admin Issues Subject: RE: OT : Missing network connection Importance: High I just received this moments ago... From: Sent: Wednesday, April 21, 2010 10:05 AM To: Subject: Virus Alert This is to advise you that there is a new virus attack propagating today. The origin is unknown at this time so we don't know whether it is coming through the Internet or email. The symptoms may vary, but we are seeing clients who are losing their start button, network access, no desktop, unable to launch applications, etc. If you are experiencing any of these symptoms or other strange behavior, please shut the system immediately. We are investigating methods to repair or eradicate the virus. If you have not experienced the symptoms above, we recommend taking
RE: stopping spam from inside server?
You need to spam filter in both directions, then... Phil -- Phil Randal | Networks Engineer NHS Herefordshire Herefordshire Council | Deputy Chief Executive's Office | I.C.T. Services Division Thorn Office Centre, Rotherwas, Hereford, HR2 6JT Tel: 01432 260160 email: pran...@herefordshire.gov.uk Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Herefordshire Council. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. From: Boggis, Josh [mailto:josh.bog...@uconn.edu] Sent: 22 January 2010 16:23 To: MS-Exchange Admin Issues Subject: RE: stopping spam from inside server? To be clear, this is the same as normal traffic. This is not being done on an open relay, a user has given out their ID/Password to a phishing scheme, and they are logging in remotely over OWA to send out large amounts of spam. It the same as a professor sending out 5000 mails to an academic group they run. This is where things get tough for me. I am looking for something to distinguish a user who has been compromised and is sending out spam vs a user sending out valid large amounts of email. Oh and I forgot to put in, we are running Exchange 2007. Do have Forefront installed to handle antivirus, and have a few barracuda boxes for spam filtering incoming. From: Carl Houseman [mailto:c.house...@gmail.com] Sent: Friday, January 22, 2010 10:26 AM To: MS-Exchange Admin Issues Subject: RE: stopping spam from inside server? +1. No port 25 traffic should be allowed out except from the known mail servers. Then all you have to secure is those servers. Carl From: Roger Wright [mailto:rhw...@gmail.com] Sent: Friday, January 22, 2010 9:35 AM To: MS-Exchange Admin Issues Subject: Re: stopping spam from inside server? Have you verified you're not configured as an open relay? Is your firewall only allowing SMTP traffic to/from your Exchange box? Die dulci fruere! Roger Wright ___ Marie von Ebner-Eschenbach http://www.brainyquote.com/quotes/authors/m/marie_von_ebnereschenbac.ht ml - Even a stopped clock is right twice a day. On Fri, Jan 22, 2010 at 8:15 AM, Boggis, Josh josh.bog...@uconn.edu wrote: Anyone have any suggestions on anything for stopping what I call internal spam. Users who reply to phishing emails, who's account is then used to send out massive amounts of spam to the world. Because of this massive blast of spam, our mail server gets placed on many block lists, and then I have to spend the day getting us off block lists because of one users who thinks it's a good idea to give out login id, password, home address, favorite ice cream flavor and blood type just because an email asked them to. Any ideas on solutions? User education has proven fruitless, we still get people who reply. Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Herefordshire Council. You should be aware that Herefordshire Council monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it.
RE: Server Updates
Just remember that malware doesn't have to ask your boss for permission and doesn't give a hoot about your internal policies or whether it should have administrative rights or not. Too much bureaucracy aids the malware purveyors. Cheers, Phil -- Phil Randal | Networks Engineer Herefordshire Council | Deputy Chief Executive's Office | I.C.T. Services Division Thorn Office Centre, Rotherwas, Hereford, HR2 6JT Tel: 01432 260160 email: pran...@herefordshire.gov.uk Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Herefordshire Council. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. -Original Message- From: mqcarp [mailto:mqcarpen...@gmail.com] Sent: 01 July 2009 16:08 To: MS-Exchange Admin Issues Subject: Server Updates How you do you prefer to handle server OS updates? We are debating not using WSUS due to internal policy and reboot issues but could adjust the server policy to not allow the reboot. Does anyone allow the server to get updates directly? The issue I have with that is the administrative rights needed to apply the patches and or/access them.
RE: Finally 2010
Would PowerGUI and some of the powerpacks from http://www.powergui.org/kbcategory.jspa?categoryID=47 help here? The Exchange 2003 one is fabulous. Cheers, Phil -- Phil Randal | Networks Engineer Herefordshire Council | Deputy Chief Executive's Office | I.C.T. Services Division Thorn Office Centre, Rotherwas, Hereford, HR2 6JT Tel: 01432 260160 email: pran...@herefordshire.gov.uk Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Herefordshire Council. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. -Original Message- From: John Hornbuckle [mailto:john.hornbuc...@taylor.k12.fl.us] Sent: 16 April 2009 18:28 To: MS-Exchange Admin Issues Subject: RE: Finally 2010 That's exactly it. I'm the guy in charge of Exchange for our organization, but it's just one thing among many for which I'm responsible for. EMS is powerful, to be sure--but there's no way I have time to learn all of the commands. Stuff that I used to be able to easily do via GUI I now have to do from the shell, and I seem to do some of those things just rarely enough so that I forget the commands. Big example... Looking at mailbox sizes. With Ex2003, I could very easily do this via GUI. I could quickly sort my users by item count or mailbox size. Now I have to do this from EMS, which is just not at quick. I'm also not thrilled that I can no longer create a mailbox via ADUC. I used to jump to ADUC, copy an existing user to create a new account, and in just a couple of clicks have a new user's account and mailbox created. Now I have to split this task between ADUC and EMC. -Original Message- From: Maglinger, Paul [mailto:pmaglin...@scvl.com] Sent: Thursday, April 16, 2009 12:09 PM To: MS-Exchange Admin Issues Subject: RE: Finally 2010 GUI, definitely. There's already too much CLI out there with their own special syntax. I don't care how much training you have, if you're an administrator that wears a lot of hats it's difficult to keep them straight. Especially if you have network administration thrown in with several flavors of Unix. Granted, I have seen the need for CLI for some tasks not covered in the GUI, but items should not be taken away from the GUI. -Original Message- From: HELP_PC [mailto:g...@enter.it] Sent: Thursday, April 16, 2009 10:58 AM To: MS-Exchange Admin Issues Subject: R: Finally 2010 In special mode if you have to manage a small business and they cannot afford an Exchange administrator . Compelling users to use Powershell for standard operations is insane . GUI is the way to go also for economical reasons GuidoElia HELPPC -Messaggio originale- Da: John Hornbuckle [mailto:john.hornbuc...@taylor.k12.fl.us] Inviato: giovedì 16 aprile 2009 14.36 A: MS-Exchange Admin Issues Oggetto: RE: Finally 2010 So, will Microsoft be moving some of the things back into the GUI that they had pulled out in 2007? That decrease in functionality never made sense to me. I'm all for a strong CLI, but from a usability standpoint it seems to make more sense to let the user choose whether they want to use a GUI or a CLI for certain functions, rather than to force them to use the CLI. John Hornbuckle MIS Department Taylor County School District 318 North Clark Street Perry, FL 32347 www.taylor.k12.fl.us ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: Finally 2010
It's worth looking here for Microsoft's cureent take on public folders: http://msexchangeteam.com/archive/2008/03/31/448537.aspx Cheers, Phil -- Phil Randal | Networks Engineer Herefordshire Council | Deputy Chief Executive's Office | I.C.T. Services Division Thorn Office Centre, Rotherwas, Hereford, HR2 6JT Tel: 01432 260160 email: pran...@herefordshire.gov.uk Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Herefordshire Council. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. From: Sherry Abercrombie [mailto:saber...@gmail.com] Sent: 15 April 2009 17:21 To: MS-Exchange Admin Issues Subject: Re: Finally 2010 Kewl. I will be checking it out whenever I finish my deployment of E2K7. Just getting my test network up and running for the E2K3 - E2K7 migration so that I have no surprises with the production migration. Then, I think I will try out the E2K10 beta... And we still have public folders eh? Interesting. On Wed, Apr 15, 2009 at 10:24 AM, Jeremy Phillips jere...@cohesivelogic.com wrote: Oh, I'm sure it will be fixed. No worries there. I don't remember the exact concern as archiving is one thing I haven't played with, but I do remember being concerned when I saw the design. :) Thanks, Jeremy Phillips Managing Consultant | Cohesive Logic LLC | M: 540-322-7980 | D: 425-949-1337 | BB PIN: 318A6889 -Original Message- From: John Cook [mailto:john.c...@pfsf.org] Sent: Wednesday, April 15, 2009 8:19 AM To: MS-Exchange Admin Issues Subject: Re: Finally 2010 I'm sure some lurking MVPs will express the importance of putting the archive on different storage. ;-) John W. Cook Systems Administrator Partnership For Strong Families Sent to you from my Blackberry in the Cloud - Original Message - From: Jeremy Phillips jere...@cohesivelogic.com To: MS-Exchange Admin Issues exchangelist@lyris.sunbelt-software.com Sent: Wed Apr 15 11:14:22 2009 Subject: RE: Finally 2010 Yeah, but honestly it's not going to be what people want at first. If I remember correctly you can't move the archive databases off to different storage so you really don't gain much storage wise. It will be nice to have it in the product though, that's for sure. Thanks, Jeremy Phillips Managing Consultant | Cohesive Logic LLC | M: 540-322-7980 | D: 425-949-1337 | BB PIN: 318A6889 -Original Message- From: John Cook [mailto:john.c...@pfsf.org] Sent: Wednesday, April 15, 2009 8:12 AM To: MS-Exchange Admin Issues Subject: Re: Finally 2010 And the prospect of built in archiving is huge! John W. Cook Systems Administrator Partnership For Strong Families Sent to you from my Blackberry in the Cloud - Original Message - From: KevinM kev...@wlkmmas.org To: MS-Exchange Admin Issues exchangelist@lyris.sunbelt-software.com Sent: Wed Apr 15 10:22:48 2009 Subject: RE: Finally 2010 The DAG, The secondary mailbox thing. Calendaring federation, the cloud move stuff.. the more pretty OWA. The comical dictation of my voicemails. NO MORE CLUSTERING. Much hugely improved Jet Design. ~Kevinm WLKMMAS My life http://www.hedonists.ca -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Wednesday, April 15, 2009 5:20 AM To: MS-Exchange Admin Issues Subject: Re: Finally 2010 On Wed, Apr 15, 2009 at 12:34 AM, KevinM kev...@wlkmmas.org wrote: We can finally talk to ya'll about Exchange 2010 Okay. So what do people find most compelling about Exchange 2010? :) (I figured I'd leave it open-ended so people can give one item or several, and write a few words or many.) Thanks... -- Ben ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja ~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
RE: Named Property Limit
Set your limit to somewhat less than the hard limit as per the technet articles and wait for your eventlog to fill up :-) Cheers, Phil -- Phil Randal | Networks Engineer Herefordshire Council | Deputy Chief Executive's Office | I.C.T. Services Division Thorn Office Centre, Rotherwas, Hereford, HR2 6JT Tel: 01432 260160 email: pran...@herefordshire.gov.uk Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Herefordshire Council. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. From: McCready, Robert [mailto:rob.mccrea...@dplinc.com] Sent: 20 March 2009 12:31 To: MS-Exchange Admin Issues Subject: RE: Named Property Limit Another quick question. Is there any way to see how close we are to the 32k hard limit today? From: Alex Fontana [mailto:afontana...@gmail.com] Sent: Friday, March 20, 2009 1:05 AM To: MS-Exchange Admin Issues Subject: Re: Named Property Limit Seems this turned into a b-ch fest rather than answering your original question...;-) While I agree this is a ridiculous characteristic in the design and one that opens us up for DoS attacks (eventually), it is what it is and we need to figure out how to work around it. You have a few options; increase the limit, move users off, or find out what is causing it and stop it. My first suggestion is to take inventory of where your databases are as far as named props are concerned, you need to expose some IS counters to see this info, but it'll give you an understanding on whether it's widespread or concentrated on a set of databases (or users). Next start monitoring your event logs. An event ID is logged by default each time a new named prop is added (event id 9873 I believe) and when the quota's been reached (9666, 7, 8, 9). This can help you track down the culprit. Note, the initial limit reached is the default quota...not the limit. My understanding is that when the hard limit (32k) is reached the database will dismount and you will have to restore from backup and move users off. In my situation I found that less than a dozen users were creating hundreds of named props daily for weeks. This was the result of an open source imap client called offlineIMAP. This client is used to bidirectionally synch messages via IMAP. It does this by creating a unique X-header for EVERY message that comes in, as opposed to a single X-header with a specific value. After finding this out I reached out to the users, and being the ridiculously intelligent (and curious) crew they are they crafted a patch for offlineIMAP (http://software.complete.org/software/issues/show/114). Hope this helps. -alex ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: Named Property Limit
It's typical of Microsoft, putting in an arbitrary limit in a world where anyone can create any number of X- headers. It's one of those unintended consequences of treating email as a database, I guess. *sigh* Cheers, Phil -- Phil Randal | Networks Engineer Herefordshire Council | Deputy Chief Executive's Office | I.C.T. Services Division Thorn Office Centre, Rotherwas, Hereford, HR2 6JT Tel: 01432 260160 email: pran...@herefordshire.gov.uk Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Herefordshire Council. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. From: McCready, Robert [mailto:rob.mccrea...@dplinc.com] Sent: 19 March 2009 12:27 To: MS-Exchange Admin Issues Subject: RE: Named Property Limit I agree about it getting worse as it gets better I was shocked by the whole powershell thing I know some people love it, but I think it stinks. Hello 1960' I had to move a mailbox in the lab the other day from Exchange 2007 back to Exchange 2003 to do an old restore, and the GUI move failed I then had to type out a 212 character PowerShell command to get it to work. Some Improvement over 2003 HA! Can somebody dumb this Named Property thing down for me in 200 I'm not understanding here. What is the Named Property list actually used for? What are the consequences for not being able to add to it? It looks like we hit our 16,000 limit over 3 months ago, but nobody has reported any problems sending or receiving email??? -Original Message- From: Steve Moffat [mailto:st...@optimum.bm] On Behalf Of Exchange (Sunbelt) Sent: Tuesday, March 17, 2009 5:44 PM To: MS-Exchange Admin Issues Subject: RE: Named Property Limit Is it just me, or is Exchange getting worse as it gets better..;) S -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Tuesday, March 17, 2009 6:31 PM To: MS-Exchange Admin Issues Subject: Re: Named Property Limit I don't have an answer for you on that. I suppose a mail gateway between your Exchange box and the Internet could do some whitelisting, and discard any unrecognized headers, but I wouldn't have a good guess as to how to go about it. Kurt On Tue, Mar 17, 2009 at 13:43, McCready, Robert rob.mccrea...@dplinc.com wrote: Is there a way to limit these X-headers, or find out what is causing so many? -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Tuesday, March 17, 2009 4:30 PM To: MS-Exchange Admin Issues Subject: Re: Named Property Limit One of the things that seems to contribute are X- headers on inbound mail - each new X-header is a new named property. Want to DoS someone? Send them emails with new X-headers - lots of different ones. Spam seems to accumulate them, for one. Just looking at your message from the list, I see 4 different X-headers: X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ems-proccessed: jxfyzdhlyVyYF5VF4W3Asg== x-ems-stamp: sLcJ9ri/feAlRgbRlwdyOA== Kurt On Tue, Mar 17, 2009 at 13:20, McCready, Robert rob.mccrea...@dplinc.com wrote: I'm not sure I understand this named property quota thing or how we reached our limit... (http://technet.microsoft.com/en-us/library/bb851492.aspx) but my question is, how big of a deal is it really? We apparently reached our 16,000 limit back in December, yet nobody has had any trouble sending/receiving email. From: McCready, Robert [mailto:rob.mccrea...@dplinc.com] Sent: Monday, March 16, 2009 2:41 PM To: MS-Exchange Admin Issues Subject: Event 9667 Quota Limit on Named Property We are running Exchange 2007 SP1. Apparently, we have reached our named property quota (which I do not completely understand) on one of our storage groups. Event ID: 9667 Source: MSExchangeIS Compute Failed to create a new named property for database SGx\MDBx because the number of named properties reached the quota limit (9274 User attempting to create the named property: Hub Transport Server Named property GUID: ----xx Named property name/id: pipe-summary All the fixes I read say to either.. Modify the registry and dismount/remount the database. Create a new Storage Group and move all the mailboxes there. We've only been running Exchange 2007 for about
RE: Happy Birthday Wishes to Michael B. Smith
Farcebook sure is good for DLP (Data Leakage Promotion). Phil -- Phil Randal | Networks Engineer Herefordshire Council | Deputy Chief Executive's Office | I.C.T. Services Division Thorn Office Centre, Rotherwas, Hereford, HR2 6JT Tel: 01432 260160 email: pran...@herefordshire.gov.uk Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Herefordshire Council. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. From: Sherry Abercrombie [mailto:saber...@gmail.com] Sent: 16 March 2009 14:05 To: MS-Exchange Admin Issues Subject: OT: Happy Birthday Wishes to Michael B. Smith All you guys and gals @ Winconnections if you see MBS today, be sure to wish him a very happy birthday! (I just love FaceBook) -- Sherry Abercrombie Any sufficiently advanced technology is indistinguishable from magic. Arthur C. Clarke ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: SMTP Issue?
Or this one? http://theessentialexchange.com/blogs/michael/archive/2007/11/16/exchang e-2003-sp2-and-greylisting.aspx Cheers, Phil -- Phil Randal | Networks Engineer Herefordshire Council | Deputy Chief Executive's Office | I.C.T. Services Division Thorn Office Centre, Rotherwas, Hereford, HR2 6JT Tel: 01432 260160 email: pran...@herefordshire.gov.uk Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Herefordshire Council. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. From: Neil Hobson [mailto:nhob...@gmail.com] Sent: 13 March 2009 16:41 To: MS-Exchange Admin Issues Subject: RE: SMTP Issue? Is this possibly the old temp table issue? http://windowsitpro.com/article/articleid/50422/have-you-checked-your-sm tp-mailbox-temporary-tables-lately.html From: Cameron Cooper [mailto:ccoo...@aurico.com] Sent: 13 March 2009 16:37 To: MS-Exchange Admin Issues Subject: SMTP Issue? We have been having an issue with our exchange (ws2k3) server when restarting it... Every time the server restarts users will start to receive NDRs to emails that will be dated anywhere from a week to a month ago. In addition to the NDRs, some of our clients are receiving emails (again dated in the past) from our users. Below is an error message that one of our users received: Your message did not reach some or all of the intended recipients. Subject: Invoice from Aurico Reports, Inc. Sent: 2/23/2009 9:35 AM The following recipient(s) could not be reached: (email address) on 3/11/2009 5:09 AM You do not have permission to send to this recipient. For assistance, contact your system administrator. AURICOEXCHANGE.reports.aurico.com #4.7.1 smtp;451 4.7.1 0 Is this an issue with email/NDR getting stuck in a queue and not being released until the SMTP service is restarted? What can we do to resolve this? _ Cameron Cooper IT Director - CompTIA A+ Certified Aurico Reports, Ine Phone: 847-890-4021Fax: 847-255-1896 ccoo...@aurico.com ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: Filtering Spam
And, does it have to run on the same box as the Exchange server, or on another box? Are non-Windows solutions acceptable? I heartily recommend MailScanner (http://www.mailscanner.info), which we have running on a couple of CentOS 5 boxes. Cheers, Phil -- Phil Randal | Networks Engineer Herefordshire Council | Deputy Chief Executive's Office | I.C.T. Services Division Thorn Office Centre, Rotherwas, Hereford, HR2 6JT Tel: 01432 260160 email: pran...@herefordshire.gov.uk Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Herefordshire Council. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. -Original Message- From: John Bowles [mailto:john_bow...@yahoo.com] Sent: 11 March 2009 13:41 To: MS-Exchange Admin Issues Subject: Re: Filtering Spam First thing first when it comes to questions like this is.. what is the budget looking like for implementing this product? There are plenty of options out there, you just need to find which one fits within your budget and addresses the functionality you're looking for. _ John Bowles - Original Message From: Rick Corgiat rcorg...@techworksnet.com To: MS-Exchange Admin Issues exchangelist@lyris.sunbelt-software.com Sent: Wednesday, March 11, 2009 9:30:15 AM Subject: RE: Filtering Spam www.untangle.com The basic setup is free. It does spam filtering, content filtering, malware protection... If you opt for the monthly subscription there are add-ons like AD integration and so on... It runs on a fairly small PC - depending on the amount of users. Rick -Original Message- From: Roger Wright [mailto:rwri...@evatone.com] Sent: Wednesday, March 11, 2009 8:23 AM To: MS-Exchange Admin Issues Subject: RE: Filtering Spam How many users? Roger Wright Network Administrator Evatone, Inc. 727.572.7076 x388 _ -Original Message- From: Daniel Hood [mailto:dsmh...@gmail.com] Sent: Tuesday, March 10, 2009 11:12 PM To: MS-Exchange Admin Issues Subject: Filtering Spam Hey, I'm looking for a good open-source/free product that we can use in conjuction with our exchange server to filter out spam. We did have mailwasher but due to the opensource version being crap and the enterprise version costing as much as putting an entire detriot high school through college, I'm looking for another free/open-source spam product that actually works. Ideas? Daniel ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: {Disarmed} Can some one remove me from this list?
Yes, you can - look in your email headers for any mail from this list. Cheers, Phil -- Phil Randal | Networks Engineer Herefordshire Council | Deputy Chief Executive's Office | I.C.T. Services Division Thorn Office Centre, Rotherwas, Hereford, HR2 6JT Tel: 01432 260160 email: pran...@herefordshire.gov.uk Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Herefordshire Council. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. From: Alex Rodriguez [mailto:a...@ontimecomputing.com] Sent: 03 March 2009 16:41 To: MS-Exchange Admin Issues Subject: {Disarmed} Can some one remove me from this list? Alex Rodriguez, President On Time Technology Solutions, Inc. PO BOX 3285* 1206 S. Cedar St. Borger, TX 79007 * Office 806-274-9912* Fax 806-274-9596 www.ontimecomputing.com http://www.ontimecomputing.com MailScanner has detected a possible fraud attempt from www.borgerhasslefreeit.com claiming to be www.ontimebdr.com http://www.borgerhasslefreeit.com Why is a trusted IT Partner better than Just a Guy? - Read More at http://www.wevegottaguy.com/ http://www.wevegottaguy.com/ On Time Technology Solutions, Inc. will be your trusted IT Partner, we pride ourselves in providing the Texas Panhandle market with proven and best of breed technology solutions. This message (and any associated files) is intended only for the use of the individual or entity to which it is addressed and may contain information that is confidential, subject to copyright or constitutes a trade secret. If you are not the intended recipient you are hereby notified that any dissemination, copying or distribution of this message, or files associated with this message, is strictly prohibited. If you have received this message in error, please notify us immediately by replying to the message and deleting it from your computer. Messages sent to and from us may be monitored. Internet communications cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. Therefore, we do not accept responsibility for any errors or omissions that are present in this message, or any attachment, that have arisen as a result of e-mail transmission. If verification is required, please request a hard-copy version. Any views or opinions presented are solely those of the author and do not necessarily represent those of the company. ExchangeDefender Message Security: Check Authenticity http://www.exchangedefender.com/verify.asp?id=n23GeUPK007432from=arod@ ontimecomputing.com ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~image001.jpgimage002.gifimage003.gif
RE: A/V Scanning
Even if you use the same vendor, there's still a chance that the A/V patterns might be updated after arrival at the gateway and before the recipient tries to access the email. My votes is for both, and multiple scan engines on both gateway and information store. Cheers, Phil -- Phil Randal | Networks Engineer Herefordshire Council | Deputy Chief Executive's Office | I.C.T. Services Division Thorn Office Centre, Rotherwas, Hereford, HR2 6JT Tel: 01432 260160 email: [EMAIL PROTECTED] Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Herefordshire Council. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it. From: Kennedy, Jim [mailto:[EMAIL PROTECTED] Sent: 07 November 2008 14:46 To: MS-Exchange Admin Issues Subject: RE: A/V Scanning Both, and use different vendors for each system. I had one slip past the gateway AV but get caught by the Exchange server. From: Roger Wright [mailto:[EMAIL PROTECTED] Sent: Friday, November 07, 2008 9:14 AM To: MS-Exchange Admin Issues Subject: A/V Scanning Need some thoughts on anti-virus scanning. If all email is scanned at the gateway, is it still advisable to have scanning software for the information store? I'm thinking that while it adds more depth to the protection, it really doesn't do much unless it uses different engines than the gateway. Any concensus on this? Roger Wright Network Administrator Evatone, Inc. 727.572.7076 x388 _ Any smoothly functioning technology will have the appearance of magic.--Clarke ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~image001.jpg
RE: AV on Exchange?
Our Exchange 2003 boxes seem to cope with Antigen's multiple scan engines OK. And load is a very bad reason for getting rid of AV on those boxes. It is a good reason for getting beefier boxes, though. Sometimes new trojans get past the first line of defense and into your information store. And then the patterns get updated. Desktop AV patterns might be updated rather less frequently than the scanner used on your Mailbox servers (e.g. McAfee still has only daily updates).. For example, just yesterday we has some stuff get past ClamAV and McAfee's uvscan on our gateway boxes, only to be clobbered by more up to date patterns in Microsoft and Sophos's scanners. It's also a lot easier to be certain that email viruses are contained if you're scanning your exchange stores on access. Only a handful of servers to verify as properly working vs thousands of desktop PCs. So my answer would be that the right strategy is defense in depth. At the gateway, on your mail servers, and on the desktop. Cheers, Phil -- Phil Randal Networks Engineer Herefordshire Council Hereford, UK From: Maglinger, Paul [mailto:[EMAIL PROTECTED] Sent: 11 August 2008 20:31 To: MS-Exchange Admin Issues Subject: RE: AV on Exchange? Both, but I don't like the performance hit I'm taking on the Exchange server. From: Matt Plahtinsky [mailto:[EMAIL PROTECTED] Sent: Monday, August 11, 2008 1:46 PM To: MS-Exchange Admin Issues Subject: AV on Exchange? Do you put AV on your Exchange server or let your gateway scanners do all the work? I'm not talking about file based AV b/c everyone knows it would be just silly not to put that on your server. If you would have ask me a year ago whether or not I would recommend putting AV on exchange I would have said with out a question YES. Over the last year I have seen a ton of places only relying on their SMTP gateway scanner and the desktop scanners. So if your a shop tight on money it begs the question can you do without or its that just a BIG no no. What do you guys do? Matt ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: Suggestion Requested for a email newsletter
Hmmm, we've gotten loads of spam here over the years supposedly sent via Constant Contact. Whatever software you use, make sure you have proper double-opt-in and easy opt-out procedures. Cheers, Phil -- Phil Randal Networks Engineer Herefordshire Council Hereford, UK -Original Message- From: Eric Wittersheim [mailto:[EMAIL PROTECTED] Sent: 08 August 2008 14:01 To: MS-Exchange Admin Issues Subject: RE: Suggestion Requested for a email newsletter Take a look at Constant Contact http://www.constantcontact.com/index.jsp -Original Message- From: roger rabus [mailto:[EMAIL PROTECTED] Sent: Thursday, August 07, 2008 9:26 PM To: MS-Exchange Admin Issues Subject: Suggestion Requested for a email newsletter My boss ask today our department to setup a Email Newsletter system for our customers(500 to 750) to send out on a monthly basis. I wonder it it easier to manage in house vs outside service. i am pushing to use a outside service, but don't have a clue on how to pick one. so I ask the group who you have used and who you won't use. Also any pitfalls to watch out for. we are running exchange 2003, with this few address would it just as easy to do in house? thanks Roger Rabus Starrco ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: Exchange 2007, memory usage, and hunt the thimble
This one's useful, perhaps: Understanding Exchange 2007 Memory Usage and its use of the Paging File http://msexchangeteam.com/archive/2008/08/06/449484.aspx Cheers, Phil -- Phil Randal Networks Engineer Herefordshire Council Hereford, UK -Original Message- From: Michael B. Smith [mailto:[EMAIL PROTECTED] Sent: 07 August 2008 13:50 To: MS-Exchange Admin Issues Subject: RE: Exchange 2007, memory usage, and hunt the thimble In another email in this thread, you also mentioned that it was the DC/GC. I would start with Perfmon, using the counters I named below (and I'd also be looking at disk queuing at the same time). Then exbpa. You should be able to quickly determine the problem. Fixing it may be a tad more challenging, but identifying it is cake. Regards, Michael B. Smith MCITP:SA,EMA/MCSE/Exchange MVP http://TheEssentialExchange.com -Original Message- From: Oliver Marshall [mailto:[EMAIL PROTECTED] Sent: Thursday, August 07, 2008 3:44 AM To: MS-Exchange Admin Issues Subject: RE: Exchange 2007, memory usage, and hunt the thimble What leads me to ask? Well partly a general curiosity. Having a server who's memory is constantly in use fires off loads of alerts (here at least) and these alerts go to more people than just me, so questions will get asked, especially as we just upgraded the ram. Secondly, the server runs like a one legged dog with a bad foot. Everything exchange related from the exchange 2007 interface which redraws in small squares (god how I miss the ADUC integration, where did that go, hey?) to users complaining of 3+ seconds to open an email (frankly I don't think thats awful but hey-ho) and regularly up to 10 seconds. Flicking between email folders is the same. If it were a 2003 box I would say it needs more ram or look at replacing the sata disks, as it feels like a sata disk issue perhaps. However in this case we are running SAS disks, with lots of space etc. The server is only exchange, all the file duties are handled by an SVN box next door and sharepoint is on a separate server too. Olly -Original Message- From: Michael B. Smith [mailto:[EMAIL PROTECTED] Sent: 06 August 2008 16:05 To: MS-Exchange Admin Issues Subject: RE: Exchange 2007, memory usage, and hunt the thimble I consider these the key performance counters used for looking at memory utilization on an Exchange Server: Memory\Pages/Sec Memory\% Committed Bytes In Use Memory\Available Mbytes Note that memory-in-use has little correlation with MEMORY PRESSURE, which is much more important on an Exchange Server. I use the same memory chart that Kevin recommends for initial memory sizing on my servers. So...what led you to add more memory? Why do you think you may need even more? Regards, Michael B. Smith MCITP:SA,EMA/MCSE/Exchange MVP http://TheEssentialExchange.com -Original Message- From: Bingham, Kevin [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 06, 2008 10:34 AM To: MS-Exchange Admin Issues Subject: RE: Exchange 2007, memory usage, and hunt the thimble You start with the easy step of following one of the memory planning guides, like the simple one in TechNet: http://technet.microsoft.com/en-us/library/bb738124(EXCHG.80).aspx which uses things like server roles, number of mailboxes and number of storage groups, and whether you are doing any clustering or replication, to suggest your minimum recommended RAM requirements -- none of which are in your listed specs. After that, there are more complex things you can do for monitoring like page hits, disk I/O, and RPC latency... but if you hit the recommended targets from TechNet or many other sources, you're probably good. -Original Message- From: Oliver Marshall [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 06, 2008 7:21 AM To: MS-Exchange Admin Issues Subject: Exchange 2007, memory usage, and hunt the thimble Hi chaps, If the store.exe process of Exchange 2007 is designed to consume as much memory as it can in order to bring the much vaunted (though I would say much missing) speed improvements, then how do you know when your server needs a memory upgrade? What I mean is that, if the memory is always around 95% in use, what indications are there that your exchange box may be running out of ram? We have an exchange 2007 machine running Win 2003 64bit with 8GB of ram in it. It used to have 4GB in it and, not knowing if it need more ram, we plumbed for adding another 4gb. Of course, it instantly used it all. For all I know, it could be needing 28GB and be slowly dying a ram-restricted death. So is there anything in place in Exch2007 now that will indicate when we do, correctly, need to look at additional ram ? Olly ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ __ Information from ESET NOD32 Antivirus, version of virus signature database 3335 (20080807) __ The message was checked by
RE: Exch2007 in ESX
And if they don't, they darned well should, instead of acting like the local bully. Suggestion to Microsoft: Don't even think of throwing money purchasing Yahoo, but instead spend a fraction of that on a bunch of ESX servers and training your support personnel to support ALL users of Microsoft products, whether they are run on bare metal, under VMWare, Zen, KVM, or whatever. Cheers, Phil -- Phil Randal Networks Engineer Herefordshire Council Hereford, UK -Original Message- From: Matt Moore [mailto:[EMAIL PROTECTED] Sent: 29 April 2008 14:52 To: MS-Exchange Admin Issues Subject: RE: Exch2007 in ESX A month or two ago they succumbed to pressure and it's now supported on selected hardware and VS combinations. Can't tell you which ones because I haven't been down that road yet. It's only a matter of time. M -Original Message- From: David Lum [mailto:[EMAIL PROTECTED] Sent: Tuesday, April 29, 2008 6:17 AM To: MS-Exchange Admin Issues Subject: RE: Exch2007 in ESX Per MS it's not supported, unless someone knows of a newer document: Neither Exchange 2007 nor Exchange 2007 SP1 is supported in production in a virtual environment -Also- 2007 and Exchange 2007 SP1 are also not supported in production in a virtual environment using virtualization software that is not Microsoft software. For details about the Microsoft support policy for third-party virtualization software, see Microsoft Knowledge Base article 897615, Support policy for Microsoft software running in non-Microsoft hardware virtualization software. However, from the same article: The first 64-bit guest support is expected to be included with Hypervisor, which is an add-in for Windows Server 2008 from Microsoft that is scheduled to ship within 180 days of Windows Server 2008 http://technet.microsoft.com/en-us/library/bb232170.aspx Dave Lum - Systems Engineer [EMAIL PROTECTED] - (971)-222-1025 When you step on the brakes your life is in your foot's hands -Original Message- From: Dennis Melahn [mailto:[EMAIL PROTECTED] Sent: Monday, April 28, 2008 6:20 PM To: MS-Exchange Admin Issues Subject: RE: Exch2007 in ESX Yes. A 2TB Dell MD3000i is specified for this project. Sorry, SAN -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED] Sent: Monday, April 28, 2008 6:11 PM To: MS-Exchange Admin Issues Subject: RE: Exch2007 in ESX Do you have a NAS for storage? ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: Spamhaus
Try cbl.abuseat.org too. Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK From: Stefan Jafs [mailto:[EMAIL PROTECTED] Sent: 13 February 2008 15:32 To: MS-Exchange Admin Issues Subject: RE: Spamhaus I added bl.spamcop.net and catching a few more about 6k / day which isn't bad but Spamhaus was catching 15k / day. __ Stefan Jafs From: Ellis, John P. [mailto:[EMAIL PROTECTED] Sent: Wednesday, February 13, 2008 03:17 To: MS-Exchange Admin Issues Subject: RE: Spamhaus What happens is, if you push to many email lookup requests to Spamhaus they will throttle you back. We had the same issue, so I investigated their Datafeed service. I did get it setup, but didnt get it tested in time before the trial expired. john From: Stefan Jafs [mailto:[EMAIL PROTECTED] Sent: 12 February 2008 16:40 To: MS-Exchange Admin Issues Subject: RE: Spamhaus I can see why I'm receiving about 50k messages / month! __ Stefan Jafs From: Ellis, John P. [mailto:[EMAIL PROTECTED] Sent: Tuesday, February 12, 2008 11:33 To: MS-Exchange Admin Issues Subject: RE: Spamhaus Looks like you need their Datafeed service. We had the same issue with Spamhaus. John From: Stefan Jafs [mailto:[EMAIL PROTECTED] Sent: 12 February 2008 15:54 To: MS-Exchange Admin Issues Subject: Spamhaus It looks like my free service to them is no longer working! I'm nowhere near to the maximum of the free service limits. 1.Your use of the Spamhaus DNSBLs is non-commercial*, and 2.Your email traffic is less than 80,000 SMTP connections per day, and 3.Your DNSBL query volume is less than 320,000 queries per day. Any ideas? __ Stefan Jafs This email and any attached files are confidential and intended solely for the intended recipient(s). If you are not the named recipient you should not read, distribute, copy or alter this email. Any views or opinions expressed in this email are those of the author and do not represent those of Amico Corporation . Warning: Although precautions have been taken to make sure no viruses are present in this email, the company cannot accept responsibility for any loss or damage that arise from the use of this email or attachments. ** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept by MIMEsweeper for the presence of computer viruses. www.clearswift.com ** This email and any attached files are confidential and intended solely for the intended recipient(s). If you are not the named recipient you should not read, distribute, copy or alter this email. Any views or opinions expressed in this email are those of the author and do not represent those of Amico Corporation . Warning: Although precautions have been taken to make sure no viruses are present in this email, the company cannot accept responsibility for any loss or damage that arise from the use of this email or attachments. This email and any attached files are confidential and intended solely for the intended recipient(s). If you are not the named recipient you should not read, distribute, copy or alter this email. Any views or opinions expressed in this email are those of the author and do not represent those of Amico Corporation . Warning: Although precautions have been taken to make sure no viruses are present in this email, the company cannot accept responsibility for any loss or damage that arise from the use of this email or attachments. ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~
RE: Exchange 2000 SP3 - Doesn't remove Post-SP2 Security Hotfix
Here's the list of hotfixes which might cause problems with SP3: http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q309601 Phil - Phil Randal Network Engineer Herefordshire Council Hereford, UK -Original Message- From: Rob Wilcox [mailto:[EMAIL PROTECTED]] Sent: 01 August 2002 18:27 To: MS-Exchange Admin Issues Subject: RE: Exchange 2000 SP3 - Doesn't remove Post-SP2 Security Hotfix Do you mean Q316056 ? The changes in that are going to be in SP3, as there are later builds of system attendant. Q320436 towards the bottom of the article it says that it is first fixed in SP 3. As post-sp2 fixes are developed there comes a point of cut off whereby the post-sp2 fixes continue for a little while, but those changes aren't applied to SP3, as that code becomes frozen. So there will be a post-sp2 hotfix for something, and also a post-sp3 hot fix for it as well. I would say since there are later builds of system attendant referenced in q articles on microsoft.com, that you have those in SP 3. With regards to removing them from add/remove programs.. Hmm not sure. I certainly wouldn't do it on a production machine ! Thanks Rob -Original Message- From: Patrick Baird [mailto:[EMAIL PROTECTED]] Sent: 01 August 2002 15:16 To: MS-Exchange Admin Issues Subject: Exchange 2000 SP3 - Doesn't remove Post-SP2 Security Hotfix I installed Windows 2000 SP3, then Exchange 2000 SP3 on our 'test' production box (it's a desktop configured equal to our production server) It had the following to Post-SP2 hotfixes on it: http://support.microsoft.com/default.aspx?scid=kb;en-us;q320436 (Malformed Mail Attack) http://support.microsoft.com/default.aspx?scid=kb;en-us;q316056 (Admin Tool Fixes) When I installed SP3 for Exchange, it left both in add/remove. Looking at the Exchange SP3 fix list, Q320436 is there as included. Q316056 is not, and its Q articles still says Post-SP2. An Example file from Q320436 29-Apr-2002 15:04 6.0.5770.91676,352 %EXSRVROOT%\Bin\Davex.dll --After SP3 Install 18-Jun-2002 10:17 6.0.6249.0 660,000 %EXSRVROOT%\Bin\Davex.dll An Example file from Q315056 Mad.exe 6.0.5770.21 --After SP3 Install Mad.exe 6.0.6249.0 So, 2 questions: 1. Is Q315056 included in SP3 even though the include list doesn't have it. 2. Should I remove them both through add/remove or will this cause issues? Thanks All! List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: W2k Sp3 is out
Title: RE: W2k Sp3 is out It appears to be the real thing. Went onto 3 desktop PCs here without problems. Official release date is on Thursday. Enjoy. Phil -Phil RandalNetwork EngineerHerefordshire CouncilHereford, UK -Original Message-From: MHR(Michael Ross) [mailto:[EMAIL PROTECTED]]Sent: 31 July 2002 13:35To: MS-Exchange Admin IssuesSubject: RE: W2k Sp3 is out Anyone test this yet to be sure its not an RC build? -Original Message- From: David N. Precht [mailto:[EMAIL PROTECTED]] Sent: Tuesday, July 30, 2002 9:53 PM To: MS-Exchange Admin Issues Subject: RE: W2k Sp3 is out **gets hit by DE's netware server** -Original Message- From: Garland Mac Neill [mailto:[EMAIL PROTECTED]] Sent: Tuesday, July 30, 2002 22:33 To: MS-Exchange Admin Issues Subject: RE: W2k Sp3 is out You're cross posting :) -Original Message- From: David N. Precht [mailto:[EMAIL PROTECTED]] Sent: Tuesday, July 30, 2002 8:08 PM To: MS-Exchange Admin Issues Subject: W2k Sp3 is out Nothing mentioned on the Microsoft pages, but http://download.microsoft.com/download/win2000platform/SP/SP3/NT5/EN-US/ w2ksp3.exe List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Exchange 5.5 post SP4 patch
Title: Message tongueincheekPeople here don't apply patches unless their servers are broken/tongueincheek Applied here as soon as I knew about it. No adverse effects so far. Phil -Phil RandalNetwork EngineerHerefordshire CouncilHereford, UK -Original Message-From: Moody, Jacqueline [mailto:[EMAIL PROTECTED]]Sent: 30 July 2002 12:58To: MS-Exchange Admin IssuesSubject: Exchange 5.5 post SP4 patch Q326322 http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q326322 MS02-037: The Server Response to an SMTP Client EHLO Command Causes a Buffer Overrun I could not find a discussion on this one. Has anyone applied this patch? If so, how did it go? Thanks! JackyeList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Exchange SP4
Tut tut to you, my good man. Take a trip to www.microsoft.com/security and read the bulletins carefully next time. Cheers, Phil - Phil Randal Network Engineer Herefordshire Council Hereford, UK -Original Message- From: Schwartz, Jim [mailto:[EMAIL PROTECTED]] Sent: 25 July 2002 16:45 To: MS-Exchange Admin Issues Subject: RE: Exchange SP4 Tut tut Phil. Don't install the Post-SP4 fixes unless you have a need to or are experiencing the issue that is solved by installing the SP. -Original Message- From: Randal, Phil [mailto:[EMAIL PROTECTED]] Sent: Thursday, July 25, 2002 10:27 AM To: MS-Exchange Admin Issues Subject: RE: Exchange SP4 Tut tut, Martin, you forgot to check that everything had restarted OK ;-) Don't forget the Post-SP4 fixes, the latest of which was released yesterday. Cheers, Phil - Phil Randal Network Engineer Herefordshire Council Hereford, UK -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: 25 July 2002 15:25 To: MS-Exchange Admin Issues Subject: RE: Exchange SP4 You will want to do the following when performing SP4. Stop all Exchange services manually (Shut down SA service. This will kill everything else). Stop IIS admin service (this will also shut down any other IIS services). Stop any AV software. Stop all Compaq agent services. Run SP4. Run Performance Optimizer. Have a beer. Go home. Have a beer. Have a beer. Have a beer. -Original Message- From: Scott Oliver [mailto:[EMAIL PROTECTED]] Sent: Thursday, July 25, 2002 7:22 AM To: MS-Exchange Admin Issues Subject: RE: Exchange SP4 Compaq -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Thursday, July 25, 2002 9:31 AM To: MS-Exchange Admin Issues Subject: RE: Exchange SP4 SP4 is great. What brand are your servers? -Original Message- From: Scott Oliver [mailto:[EMAIL PROTECTED]] Sent: Thursday, July 25, 2002 6:28 AM To: MS-Exchange Admin Issues Subject: Exchange SP4 Does anyone know of any issues that might arrise when upgrading from Exchange SP2 to Exchange SP4? Has anyone had any major problems with SP4? Scott Oliver Liz Claiborne Shoes Computer Operations Supervisor Microsoft Exchange Administrator List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Exchange SP4
The trouble with that philosophy is that things get overlooked when changes are made. Configure a new Internet Mail Connector under your regime and you're asking for trouble unless you have a photographic memory (which I certainly don't). And, for the record, I've had no ptoblems whatsoever with the Post-SP4 fixes. Cheers, Phil - Phil Randal Network Engineer Herefordshire Council Hereford, UK -Original Message- From: Schwartz, Jim [mailto:[EMAIL PROTECTED]] Sent: 25 July 2002 16:53 To: MS-Exchange Admin Issues Subject: RE: Exchange SP4 Tut tut. I do and when I have a NEED to install a security fix, I test and then install. I don't install security fixes for things that do not apply to my environment. -Original Message- From: Randal, Phil [mailto:[EMAIL PROTECTED]] Sent: Thursday, July 25, 2002 11:46 AM To: MS-Exchange Admin Issues Subject: RE: Exchange SP4 Tut tut to you, my good man. Take a trip to www.microsoft.com/security and read the bulletins carefully next time. Cheers, Phil - Phil Randal Network Engineer Herefordshire Council Hereford, UK -Original Message- From: Schwartz, Jim [mailto:[EMAIL PROTECTED]] Sent: 25 July 2002 16:45 To: MS-Exchange Admin Issues Subject: RE: Exchange SP4 Tut tut Phil. Don't install the Post-SP4 fixes unless you have a need to or are experiencing the issue that is solved by installing the SP. -Original Message- From: Randal, Phil [mailto:[EMAIL PROTECTED]] Sent: Thursday, July 25, 2002 10:27 AM To: MS-Exchange Admin Issues Subject: RE: Exchange SP4 Tut tut, Martin, you forgot to check that everything had restarted OK ;-) Don't forget the Post-SP4 fixes, the latest of which was released yesterday. Cheers, Phil - Phil Randal Network Engineer Herefordshire Council Hereford, UK -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: 25 July 2002 15:25 To: MS-Exchange Admin Issues Subject: RE: Exchange SP4 You will want to do the following when performing SP4. Stop all Exchange services manually (Shut down SA service. This will kill everything else). Stop IIS admin service (this will also shut down any other IIS services). Stop any AV software. Stop all Compaq agent services. Run SP4. Run Performance Optimizer. Have a beer. Go home. Have a beer. Have a beer. Have a beer. -Original Message- From: Scott Oliver [mailto:[EMAIL PROTECTED]] Sent: Thursday, July 25, 2002 7:22 AM To: MS-Exchange Admin Issues Subject: RE: Exchange SP4 Compaq -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Thursday, July 25, 2002 9:31 AM To: MS-Exchange Admin Issues Subject: RE: Exchange SP4 SP4 is great. What brand are your servers? -Original Message- From: Scott Oliver [mailto:[EMAIL PROTECTED]] Sent: Thursday, July 25, 2002 6:28 AM To: MS-Exchange Admin Issues Subject: Exchange SP4 Does anyone know of any issues that might arrise when upgrading from Exchange SP2 to Exchange SP4? Has anyone had any major problems with SP4? Scott Oliver Liz Claiborne Shoes Computer Operations Supervisor Microsoft Exchange Administrator List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Anybody have an idea of how to automatic purge the items (wit hout asking end-user) in the inbox for more than 2 hours?
Title: RE: Anybody have an idea of how to automatic purge the items (without asking end-user) in the inbox for more than 2 hours? Weekly? We run mailbox manager daily here (Exch 5.5SP4). Set your expiry periods to what you want (in days). Phil -Phil RandalNetwork EngineerHerefordshire CouncilHereford, UK -Original Message-From: Abercrombie, Sherry [mailto:[EMAIL PROTECTED]]Sent: 09 July 2002 13:31To: MS-Exchange Admin IssuesSubject: RE: Anybody have an idea of how to automatic purge the items (wit hout asking end-user) in the inbox for more than 2 hours? MBM only scheduling option is weekly time frame options are in days.. Sherry Abercrombie Data Center Administration Team Information Technology "With sufficient thrust, pigs fly just fine." -Original Message- From: William Lefkovics [mailto:[EMAIL PROTECTED]] Sent: Tuesday, July 09, 2002 12:03 AM To: MS-Exchange Admin Issues Subject: RE: Anybody have an idea of how to automatic purge the items (without asking end-user) in the inbox for more than 2 hours? Maybe with Mailbox Manager. Feel free to ask the question in the body of your post. :o) -Original Message- From: cslee [mailto:[EMAIL PROTECTED]] Sent: Monday, July 08, 2002 8:27 PM To: MS-Exchange Admin Issues Subject: Anybody have an idea of how to automatic purge the items (without asking end-user) in the inbox for more than 2 hours? Regards, Lee Choon Sim IT Department Tel: +604-6321000 ext 1760 DID Tel: +604-6321760 Fax: +604-6321034 List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Klez article
Title: Message Can you insure that you post valid links in future, Kevin? http://www.dictionary.com/search?q=insure Cheers, Phil P.S. Let's start a debate as to whether fair-haired men are blonds or blondes while we're at it ;-) -Phil RandalNetwork EngineerHerefordshire CouncilHereford, UK -Original Message-From: Snook, Kevin S (ITD) [mailto:[EMAIL PROTECTED]]Sent: 09 July 2002 14:24To: MS-Exchange Admin IssuesSubject: RE: Klez article Try this link.. www.english101dropout.com/whocaresaboutthedifferencebetweeninsureandensure.htm -Original Message-From: Abercrombie, Sherry [mailto:[EMAIL PROTECTED]]Sent: 09 July 2002 13:38To: MS-Exchange Admin IssuesSubject: RE: Klez article Dear God help us, the English majors have taken over the Exchange discussion list.please use a separate discussion list to discuss proofing and or editing articles.:) Sherry Abercrombie Data Center Administration Team Information Technology "With sufficient thrust, pigs fly just fine." -Original Message-From: John Allhiser [mailto:[EMAIL PROTECTED]] Sent: Tuesday, July 09, 2002 7:22 AMTo: MS-Exchange Admin IssuesSubject: RE: Klez article And only use Ensure when you feel you're not getting the proper amount of vitamins and minerals. -Original Message-From: Allen Crawford [mailto:[EMAIL PROTECTED]]Sent: Monday, July 08, 2002 5:00 PMTo: MS-Exchange Admin IssuesSubject: RE: Klez article Cool. The only thing I'd change is replacing the word "insure" with "ensure" in the third paragraph (counting your first sentence about Kansas as the first paragraph). If I sound anal it is only because I've seen that word misused too many times-four times in the last week or so. Only use "insure" when referring to insurance-related items. J -Original Message-From: Steve Hart [mailto:[EMAIL PROTECTED]]Sent: Monday, July 01, 2002 1:39 PMTo: MS-Exchange Admin IssuesSubject: Klez article I write a monthly column for our company newsletter on computer issues. We're not a computer company and our user base is a bit uneducated, so I try to write in basic, naive user terms. This month's column will cover Klez. Since Klez seems to be as much a social issue as a computer problem, I find I'm always explaining the crazy thing. If any of you have a use forthe column,I posted it at http://www.wrightbg.com/private/klez.htm Steve List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Exchange on DC?
Title: Message Special Boat Squadron ;-) http://home3.inet.tele.dk/jdj/spec_ops/count/uk_sbs.htm In the MS world, it probably means Small Business Server Phil -Phil RandalNetwork EngineerHerefordshire CouncilHereford, UK -Original Message-From: Herchenbach, Jim [mailto:[EMAIL PROTECTED]]Sent: 03 July 2002 19:26To: MS-Exchange Admin IssuesSubject: RE: Exchange on DC? I think I'm allowed one stupid question a year.. What does SBS stand for? -Original Message-From: Ely, Don [mailto:[EMAIL PROTECTED]]Sent: Wednesday, July 03, 2002 12:46 PMTo: MS-Exchange Admin IssuesSubject: RE: Exchange on DC? Check out the thread on the NTSYSadmin list about SBS2K... You'll see that DR procedures aren't all they're cracked up to be. SBS is shite and any reasonable professional would echo these same sentiments. SBS has it's place, particularly nowhere near any network I work on! -Original Message-From: Chris Peden [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 03, 2002 11:56 AMTo: MS-Exchange Admin IssuesSubject: RE: Exchange on DC? yes I have, its very goodas far as changing hardware, all w2k has that problem Thanks, -Chris- IT Director Sundowner Interiors -Original Message-From: William Lefkovics [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 03, 2002 10:35 AMTo: MS-Exchange Admin IssuesSubject: RE: Exchange on DC? Are you reading the marketing? Have you ever tried to switch hardware for it? Or even upgrade from previous versions? Or perform disaster revocery when it bombed? It's a good idea, poorly implemented, in my opinion. -Original Message-From: Chris Peden [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 03, 2002 8:15 AMTo: MS-Exchange Admin IssuesSubject: RE: Exchange on DC? thats stupid, its very cost effective and great for smb's Thanks, -Chris- IT Director Sundowner Interiors -Original Message-From: Ely, Don [mailto:[EMAIL PROTECTED]] Sent: Tuesday, July 02, 2002 5:36 PMTo: MS-Exchange Admin IssuesSubject: RE: Exchange on DC? Yeah Well, most of us don't recommend SBS on anything... -Original Message-From: Chris Peden [mailto:[EMAIL PROTECTED]] Sent: Tuesday, July 02, 2002 5:30 PMTo: MS-Exchange Admin IssuesSubject: RE: Exchange on DC? i don't see how its not recommended, this is what they do in the SBS 2000 product. Thanks, -Chris- IT Director Sundowner Interiors -Original Message-From: Herchenbach, Jim [mailto:[EMAIL PROTECTED]] Sent: Friday, June 21, 2002 1:49 PMTo: MS-Exchange Admin IssuesSubject: Exchange on DC? I know it's not recommended, but can Exchange 2k be installed on a DC? -Original Message-From: Herchenbach, Jim [mailto:[EMAIL PROTECTED]]Sent: Friday, June 21, 2002 1:21 PMTo: MS-Exchange Admin IssuesSubject: RE: Reference guide thanks John.since i got such a big response...sounds like i"ll go for it. -Original Message-From: John Matteson [mailto:[EMAIL PROTECTED]]Sent: Friday, June 21, 2002 10:56 AMTo: MS-Exchange Admin IssuesSubject: RE: Reference guide Tony Redmond's book "Microsoft Exchange server for Windows 2000"; published by Digital Press. Secondary books are "Mission Critical Microsoft Exchange 2000" and "Scaling Microsoft Exchange 2000" both of which are published by Digital Press as well. John Matteson; Exchange ManagerGeac Corporate Infrastructure Systems and
RE: McAfee The final Results.
Which version of Groupshield had you been using? MAPI /AVAPI / ESE scanning? Phil - Phil Randal Network Engineer Herefordshire Council Hereford, UK -Original Message- From: Majetic, John RAME [mailto:[EMAIL PROTECTED]] Sent: 02 July 2002 22:07 To: MS-Exchange Admin Issues Subject: McAfee The final Results. Well I just got done replacing McAfee VirusScan with Trend OfficeScan on all my desktops, and I thought I would post the results here. Trend found 22 out of 84 computers had a virus on them despite having VirusScan with up to date (4209) data files installed on them. They were all set up to check for new dats automatically. Most had multiple infections, with one even having 6 different viruses on it. 90 percent of the viruses were Outlook based email viruses that somehow got through GroupShield, and VirusScan! I even saw several infections from KLEZ, and supposedly you didn't even have to be up to date on your DAT fields for VirusScan to clean that one. I just thought that this info was worth putting out there for those using or thinking of using VirusScan. John Majetic List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: McAfee The final Results.
It ain't come yet ;-) - Phil Randal Network Engineer Herefordshire Council Hereford, UK -Original Message- From: Clark, Steve [mailto:[EMAIL PROTECTED]] Sent: 03 July 2002 16:16 To: MS-Exchange Admin Issues Subject: RE: McAfee The final Results. Do I smell a www.clarksupport.com/whynotmcafee.htm coming? Steve Clark Clark Systems Support, LLC AVIEN Charter Member Who's watching your network? www.clarksupport.com 301-610-9584 voice 240-465-0323 Efax The data furnished in connection with this document is deemed by Clark Systems Support, LLC., to contain proprietary and privileged information and shall not be disclosed or used for the benefit of others without the prior written permission of Clark Systems Support, LLC. -Original Message- From: Stephen J. Norton [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 03, 2002 10:19 AM To: MS-Exchange Admin Issues Subject: RE: McAfee The final Results. Wow! Now there is a wonderful reference for McSlapme. I think CA should buy them. -Original Message- From: Majetic, John RAME [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 03, 2002 10:10 AM To: MS-Exchange Admin Issues Subject: RE: McAfee The final Results. Well as I have stated before, when we first bought McAfee we did exactly that, we bought it, with three years of upgrade, and support options. I think we paid about 8K total for 19 servers, and 300 users. In three years McAfee called, and said we had to pay up, or take all the software off of our PCs. They said we only leased the software, not bought it. I faxed them the original contract, and no where in it was the word lease. They said it didn't matter. I told them to put it where the sun don't shine, and started looking for other vendors. The called both my boss, and the president, and basically said if we did not pay up in two weeks, the would report us a software pirates. My boss caved, and officially put us in a leasing arrangement. It was 7K for 8 servers, and 180 users, and it only covered us for 2 years. We had sold off a division, so our user and server base went down to those numbers. Seriously half the users, and half the servers, for 1/3 less time, and it's only 1K cheaper! Can you say bend over? When they called this time I didn't even ask the price I just told them to stuff it. They tried to do the same thing, and say they would report us a pirates. I would not do business with them if they were the last anti-virus company in the world. John Majetic -Original Message- From: Bunting, Jeff [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 03, 2002 9:04 AM To: MS-Exchange Admin Issues Subject: RE: McAfee The final Results. I think the key phrase is last time we paid. We have about the same number of users and they wanted something like $15k to renew our licensing. Our original pricing was comparable to yours. -Original Message- From: Majetic, John RAME [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 03, 2002 8:52 AM To: MS-Exchange Admin Issues Subject: RE: McAfee The final Results. I priced it out at CDW before my parent company bought it for all subsidiaries worldwide. The Trend Neat Suite, which includes, Client, Server, and Exchange versions, along with some other goodies, was about $7887 Plus $2000 a year for maintenance for 250 users through CDW. I think we paid about $8k for two years of McAfee last time we paid, by comparison. John Majetic -Original Message- From: Eldridge, Dave [mailto:[EMAIL PROTECTED]] Sent: Tuesday, July 02, 2002 5:32 PM To: MS-Exchange Admin Issues Subject: RE: McAfee The final Results. can you buy trend from any software var (insight,cdw)? what sort of pricing structure can you get. I have about 600 mailboxes. I like stirring up this nest because it makes my job easier to go upwards and get the ok to change from groupshield. dave -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Tuesday, July 02, 2002 3:40 PM To: MS-Exchange Admin Issues Subject: RE: McAfee The final Results. Personally I use Trend. I have always had excellent experiences with it. I demo'd anitgen and while it is a great program, I found the interface to be kludgy. Also the fact that I have to enter the file extensions one at a time did not please me. Frankly, both are excellent products and you cant go wrong with eihter. -Original Message- From: Clark, Steve [mailto:[EMAIL PROTECTED]] Sent: Tuesday, July 02, 2002 2:35 PM To: MS-Exchange Admin Issues Subject: RE: McAfee The final Results. Antigen. No comments from AB on this. Steve Clark Clark Systems Support, LLC AVIEN Charter Member Who's watching your network? www.clarksupport.com 301-610-9584 voice
RE: exchnage query
No, we'd rather pay a fortune for Exchange ;-) Phil -Phil RandalNetwork EngineerHerefordshire CouncilHereford, UK -Original Message-From: Jeremiah Watson [mailto:[EMAIL PROTECTED]]Sent: 02 July 2002 13:33To: MS-Exchange Admin IssuesSubject: RE: exchnage query WTF? Free Email? We Don't Need no Stinkin' Free Email!! -Original Message-From: naveen_ipx [mailto:[EMAIL PROTECTED]]Sent: Tuesday, July 02, 2002 8:00 AMTo: MS-Exchange Admin IssuesSubject: exchnage query Get Your Private, Free E-mail from Indiatimes at http://email.indiatimes.comBuy Music, Video, CD-ROM, Audio-Books and Music Accessories from http://www.planetm.co.in List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Finding out who sent an attachment.
The resolve names utility functionality is built in to Groupshield 5. I haven't the time to wade through the docs to find what info is stored when you quarantine to directories. Phil - Phil Randal Network Engineer Herefordshire Council Hereford, UK -Original Message- From: Andy David [mailto:[EMAIL PROTECTED]] Sent: 10 May 2002 14:05 To: MS-Exchange Admin Issues Subject: RE: Finding out who sent an attachment. Sure. Uninstall Gropeshield and install Antigen. :0 -Original Message- From: Stuart Tonge [mailto:[EMAIL PROTECTED]] Sent: Friday, May 10, 2002 8:51 AM To: MS-Exchange Admin Issues Subject: Finding out who sent an attachment. Hi all. I'm using groupshield (boo hiss) on an exchange 5.5 server. I am quaranting most attachments to a directory such as .exe etc. Is there any way for me to find out who sent the offending attachment? I know this can be done if they are quarantined to a database but what about a directory? If not - then is it possible to open the quarantine directory to see what files are in there? Cheers Stu CCNA. -- The information contained in this email message is privileged and confidential information intended only for the use of the individual or entity to whom it is addressed. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution or copy of this message is strictly prohibited. If you have received this email in error, please immediately notify Veronis Suhler Stevenson by telephone (212)935-4990, fax (212)381-8168, or email ([EMAIL PROTECTED]) and delete the message. Thank you. == List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: It's Friday!!
Title: Message I must be the winner at 49 with a 7 year old daughter. Do I get a prize? Phil -Phil RandalNetwork EngineerHerefordshire CouncilHereford, UK -Original Message-From: Hanief Chowdhary [mailto:[EMAIL PROTECTED]]Sent: 07 May 2002 11:30To: MS-Exchange Admin IssuesSubject: RE: It's Friday!! ...finally caught up with the list34 with a 12 year old daughter and 9 year old sonthere. -Original Message-From: Brent Hudson [mailto:[EMAIL PROTECTED]]Sent: 06 May 2002 08:28To: MS-Exchange Admin IssuesSubject: RE: It's Friday!! aahh 36 -Original Message-From: Bill Kuhn - MCSE [mailto:[EMAIL PROTECTED]]Sent: 03 May 2002 10:49To: MS-Exchange Admin IssuesSubject: RE: It's Friday!! Thank God, somebody on here is older than me! 44 (with a 16 and a 2 yr old boy) -Original Message-From: Ray Zorz [mailto:[EMAIL PROTECTED]]Sent: Friday, May 03, 2002 3:37 PMTo: MS-Exchange Admin IssuesSubject: RE: It's Friday!! Byte me! 46 -Original Message-From: Preston Jeffares [mailto:[EMAIL PROTECTED]]Sent: Friday, May 03, 2002 1:33 PMTo: MS-Exchange Admin IssuesSubject: RE: It's Friday!! I am so freaking old I'm thinking about arguing for early acceptance for Kroger's Seniors discount... 26 -Original Message-From: Matthew Carpenter [mailto:[EMAIL PROTECTED]]Sent: Friday, May 03, 2002 3:49 PMTo: MS-Exchange Admin IssuesSubject: RE: It's Friday!! Has anyone noticed that most of the responses are from the 20 somethings? lol -Original Message-From: TWU-Durham, Ryan [mailto:[EMAIL PROTECTED]] Sent: Friday, May 03, 2002 2:47 PMTo: MS-Exchange Admin IssuesSubject: RE: It's Friday!! Ripe age of 22 J -Original Message-From: Precht, David [mailto:[EMAIL PROTECTED]] Sent: Friday, May 03, 2002 2:41 PMTo: MS-Exchange Admin IssuesSubject: RE: It's Friday!! i just turned 24 -Original Message-From: Paul Green [mailto:[EMAIL PROTECTED]]Sent: Friday, May 03, 2002 14:26 To: MS-Exchange Admin IssuesSubject: RE: It's Friday!! i just turned 22 haha ;) -Original Message-From: Matthew Carpenter [mailto:[EMAIL PROTECTED]]Posted At: Friday, May 03, 2002 11:21 AMPosted To: Exchange 2000 ServerConversation: It's Friday!!Subject: RE: It's Friday!! Man how old are you guys??? Lol My daughter makes me feel old, but YOU guys keep me young! -Original Message-From: Eldridge, Dave [mailto:[EMAIL PROTECTED]] Sent: Friday, May 03, 2002 12:57 PMTo: MS-Exchange Admin IssuesSubject: RE: It's Friday!! Hey Martin congrats, My two girls have grown and moved on but keep coming back with grandkids. Enjoy it really does go quick. I will have a beer in Vegas next for you. dave -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]Sent: Friday, May 03, 2002 11:17 AMTo: MS-Exchange Admin IssuesSubject: RE: It's Friday!! Very Nice! You be the MAN!Cheerish the moments as they seem to go by so fast. MJ 3 sons, all gone. -Original Message-From: Martin Blackstone [mailto:[EMAIL PROTECTED]]Sent: Friday, May 03, 2002
RE: It's Friday!!
Title: Message Darn, I must get treatment for my Alzheimer's ;-) Phil -Phil RandalNetwork EngineerHerefordshire CouncilHereford, UK -Original Message-From: Ray Zorz [mailto:[EMAIL PROTECTED]]Sent: 07 May 2002 13:58To: MS-Exchange Admin IssuesSubject: RE: It's Friday!! Not even close. We had a couple 60+ yr olds check in. -Original Message-From: Snook, Kevin S (ITD) [mailto:[EMAIL PROTECTED]]Sent: Tuesday, May 07, 2002 4:31 AMTo: MS-Exchange Admin IssuesSubject: RE: It's Friday!! Yes, you are eligible for the MAP program at Microsoft. Most Ancient Professional. Of course, I'm 17 next birthday. -Original Message-From: Randal, Phil [mailto:[EMAIL PROTECTED]]Sent: 07 May 2002 11:42To: MS-Exchange Admin IssuesSubject: RE: It's Friday!! I must be the winner at 49 with a 7 year old daughter. Do I get a prize? Phil -Phil RandalNetwork EngineerHerefordshire CouncilHereford, UK -Original Message-From: Hanief Chowdhary [mailto:[EMAIL PROTECTED]]Sent: 07 May 2002 11:30To: MS-Exchange Admin IssuesSubject: RE: It's Friday!! ...finally caught up with the list34 with a 12 year old daughter and 9 year old sonthere. -Original Message-From: Brent Hudson [mailto:[EMAIL PROTECTED]]Sent: 06 May 2002 08:28To: MS-Exchange Admin IssuesSubject: RE: It's Friday!! aahh 36 -Original Message-From: Bill Kuhn - MCSE [mailto:[EMAIL PROTECTED]]Sent: 03 May 2002 10:49To: MS-Exchange Admin IssuesSubject: RE: It's Friday!! Thank God, somebody on here is older than me! 44 (with a 16 and a 2 yr old boy) -Original Message-From: Ray Zorz [mailto:[EMAIL PROTECTED]]Sent: Friday, May 03, 2002 3:37 PMTo: MS-Exchange Admin IssuesSubject: RE: It's Friday!! Byte me! 46 -Original Message-From: Preston Jeffares [mailto:[EMAIL PROTECTED]]Sent: Friday, May 03, 2002 1:33 PMTo: MS-Exchange Admin IssuesSubject: RE: It's Friday!! I am so freaking old I'm thinking about arguing for early acceptance for Kroger's Seniors discount... 26 -Original Message-From: Matthew Carpenter [mailto:[EMAIL PROTECTED]]Sent: Friday, May 03, 2002 3:49 PMTo: MS-Exchange Admin IssuesSubject: RE: It's Friday!! Has anyone noticed that most of the responses are from the 20 somethings? lol -Original Message-From: TWU-Durham, Ryan [mailto:[EMAIL PROTECTED]] Sent: Friday, May 03, 2002 2:47 PMTo: MS-Exchange Admin IssuesSubject: RE: It's Friday!! Ripe age of 22 J -Original Message-From: Precht, David [mailto:[EMAIL PROTECTED]] Sent: Friday, May 03, 2002 2:41 PMTo: MS-Exchange Admin IssuesSubject: RE: It's Friday!! i just turned 24 -Original Message-From: Paul Green [mailto:[EMAIL PROTECTED]]Sent: Friday, May 03, 2002 14:26 To: MS-Exchange Admin IssuesSubject: RE: It's Friday!! i just turned 22 haha ;) -Original Message-From: Matthew Carpenter [mailto:[EMAIL PROTECTED]]Posted At: Friday, May 03, 2002 11:21 AMPosted To: Exchange 2000 ServerConversation: It's Friday!!Subject: RE: It's Friday!! Man how old are you guys
RE: Word as your E-mail editor (OL98)
DON'T DO IT! - Phil Randal Network Engineer Herefordshire Council Hereford, UK -Original Message- From: McCready, Robert [mailto:[EMAIL PROTECTED]] Sent: 29 April 2002 12:53 To: MS-Exchange Admin Issues Subject: Word as your E-mail editor (OL98) Exchange 5.5 SP4, NT 4.0 SP6a, OL98. Has anybody had problems using Word as your E-mail editor? I've got a user that frequently has Word freeze up when she has one document open, and then tries to open another one via an attachment through E-mail. I'm pretty sure I had documentation on this at one time, but I can't seem to find it in Technet. Thanks. Robert List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: McAfee GroupShield 5.0 and Exchange 5.5 SP4
The first point to note is that the original question is about Groupshield 5, not previous versions. The new version, like Antigen and ScanMail, supports ESE scanning. I'll agree that GS 4.5 sucked until SP1, Hotfix 7, and AVAPI registry hacks were done. But it has been reliable here since patching and OpenRetryDelay was tweaked. MS-DOS 4 sucked big time too, but DOS 6.22 was pretty good (as DOSes go). So, would anyone out there with experience of GS 5 for Exchange 5.5 like to share their experiences? Cheers, Phil - Phil Randal Network Engineer Herefordshire Council Hereford, UK -Original Message- From: Dimitri Limanovski [mailto:[EMAIL PROTECTED]] Sent: 23 April 2002 21:37 To: MS-Exchange Admin Issues Subject: RE: McAfee GroupShield 5.0 and Exchange 5.5 SP4 Not so pretty here. VAPI puke on me twice, allowing viruses inbound. SP for GroupShield has fixed a lot of issues but I'd still pick Antigen or Trend Micro any day over McAfee.. Just my $.02 worth. List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Checking white space size of database
It's part of the NHS cutbacks ;-) Phil - Phil Randal Network Engineer Herefordshire Council Hereford, UK -Original Message- From: Neil Hobson [mailto:[EMAIL PROTECTED]] Sent: 22 April 2002 14:09 To: MS-Exchange Admin Issues Subject: RE: Checking white space size of database Ah yes, but your display name doesn't include a comma to distinguish first and surnames. Very shoddy. :-) Neil List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Annoying outlook Problem
Check the item entitled Avoid WordMail to Lessen Impact of Outlook's Latest HTML Mail Vulnerability on http://www.slipstick.com Never use MS Word as an email editor. Cheers, Phil - Phil Randal Network Engineer Herefordshire Council Hereford, UK -Original Message- From: Majetic, John RAME [mailto:[EMAIL PROTECTED]] Sent: 22 April 2002 14:11 To: MS-Exchange Admin Issues Subject: RE: Annoying outlook Problem I would never use Word as my email editor, I have read to much about how unstable it is, and how much it crashes your system. My secrateries also like to use it, and they also wonder why there machines crash. Another good one is But I have 100MB of free space why do I need more?. John List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: 5.5 Ex2K Differences
Title: 5.5 & Ex2K Differences You could compromise and buy a few good books on the subject... Exchange 2000 admin is totally different from Exchange 5.5 admin. I've administered both, trained in neither. It is possible to do, you know. Cheers, Phil -Phil RandalNetwork EngineerHerefordshire CouncilHereford, UK -Original Message-From: Mike Channon [mailto:[EMAIL PROTECTED]]Sent: 19 April 2002 11:06To: MS-Exchange Admin IssuesSubject: 5.5 Ex2K Differences Hi People, I am having to justify to the big boss man why he needs to fund a training course on Exchange 2000. Because I already administer our 5.5 Exchange server he says he needs justification to spend the money because he does not see any difference between the two versions, he says " It's the same product been renamed". Can any one tell me in lay terms what are the fundamental differences between the two versions, I am open to any suggestions as what to tell him why it should be me who attend the course. Regards Mike Channon MCSE, CAN, CCSA Senior Server Engineer, Systems and Infrastructure Support . Logica UK (Automotive) This e-mail and any attachment is for authorised use by the intended recipient's) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you. List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Patches after SP4 for Exchange 5.5
Seeing how Microsoft's patches often fix issues which Microsoft chooses not to document, this argument is a bit lame. The only way to know whether a hotfix fixes one's problems is to install it and see what happern. Cheers, Phil - Phil Randal Network Engineer Herefordshire Council Hereford, UK -Original Message- From: William Lefkovics [mailto:[EMAIL PROTECTED]] Sent: 03 April 2002 04:05 To: MS-Exchange Admin Issues Subject: RE: Patches after SP4 for Exchange 5.5 I certainly agree with that one! So does Microsoft. William -Original Message- From: Schwartz, Jim [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 02, 2002 9:34 AM To: MS-Exchange Admin Issues Subject: RE: Patches after SP4 for Exchange 5.5 You shouldn't install hotfixes just because they exist. You should only install fixes if you are experiencing issues that the hotfix addresses. -Original Message- From: Clark, Steve [SMTP:[EMAIL PROTECTED]] Sent: Tuesday, April 02, 2002 12:22 PM To: MS-Exchange Admin Issues Subject:RE: Patches after SP4 for Exchange 5.5 Nope - just keeping them up to date so I don't have problems. Steve Clark Clark Systems Support, LLC AVIEN Charter Member Who's watching your network? www.clarksupport.com 301-610-9584 voice 240-465-0323 Efax The data furnished in connection with this document is deemed by Clark Systems Support, LLC., to contain proprietary and privileged information and shall not be disclosed or used for the benefit of others without the prior written permission of Clark Systems Support, LLC. -Original Message- From: Schwartz, Jim [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 02, 2002 12:18 PM To: MS-Exchange Admin Issues Subject: RE: Patches after SP4 for Exchange 5.5 You must have had a lot of problems with your servers to have to install those patches. -Original Message- From: Clark, Steve [SMTP:[EMAIL PROTECTED]] Sent: Tuesday, April 02, 2002 10:39 AM To: MS-Exchange Admin Issues Subject: RE: Patches after SP4 for Exchange 5.5 I've got every hotfix, patch and update install on all my 5.5 servers with no problems. Steve Clark Clark Systems Support, LLC AVIEN Charter Member Who's watching your network? www.clarksupport.com 301-610-9584 voice 240-465-0323 Efax List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Exchange server reboot simple q
-Original Message- From: Brent Hudson [mailto:[EMAIL PROTECTED]] Sent: 02 April 2002 15:32 To: MS-Exchange Admin Issues Subject: RE: Exchange server reboot simple q It aint broke yet so I aint fixin nuthing.. It isn't broke? You sure? Take a look at http://www.microsoft.com/security/ sometime. Beats patching servers ;-) Phil - Phil Randal Network Engineer Herefordshire Council Hereford, UK List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Exchange 5.5 SP4 Issues
Title: Message Arg! :-) -Phil RandalNetwork EngineerHerefordshire CouncilHereford, UK -Original Message-From: MHR(Michael Ross) [mailto:[EMAIL PROTECTED]]Sent: 26 March 2002 13:48To: MS-Exchange Admin IssuesSubject: RE: Exchange 5.5 SP4 Issues If you do Brick-level backups, you dont need to restore the whole IS. List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Exchange 5.5 SP4 Issues
Title: Message Ignorance is bliss... -Phil RandalNetwork EngineerHerefordshire CouncilHereford, UK -Original Message-From: Snook, Kevin S (ITD) [mailto:[EMAIL PROTECTED]]Sent: 26 March 2002 14:35To: MS-Exchange Admin IssuesSubject: RE: Exchange 5.5 SP4 Issues And that's what you do, is it? BLBs are not a good idea for 5.5. -Original Message-From: MHR(Michael Ross) [mailto:[EMAIL PROTECTED]]Sent: 26 March 2002 13:48To: MS-Exchange Admin IssuesSubject: RE: Exchange 5.5 SP4 Issues If you do Brick-level backups, you dont need to restore the whole IS. List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: O O F Replies
It has now! :-) Phil - Phil Randal Network Engineer Herefordshire Council Hereford, UK -Original Message- From: Lynn Karen [mailto:[EMAIL PROTECTED]] Sent: 20 March 2002 14:37 To: MS-Exchange Admin Issues Subject: RE: O O F Replies Lollygagging?? Has that word made it to the UK yet? Karen List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: OT (slightly) - how to test your users e-mail habits
Isn't your job in danger if the worst offenders are management? ;-) Phil - Phil Randal Network Engineer Herefordshire Council Hereford, UK -Original Message- From: Jim Holmgren [mailto:[EMAIL PROTECTED]] Sent: 20 March 2002 16:35 To: MS-Exchange Admin Issues Subject: RE: OT (slightly) - how to test your users e-mail habits We do the same type of thing, in-house. We wrote a little program that we send out as an attachment from time-to-time. We send it to everyone in the company with a forged header to appear to come from elsewhere, and we include a nice little pigeon-english subject, similar to I send you this file to have your advice ;-). If the (l)user runs it, a nice little box pops up on their PC and lets them know that they could have just hosed their machine and seriously fzckued up the network. It also logs their username to a text file on one of our servers, so we can keep tabs on who we caught. It makes for good entertainment on a Friday afternoon. -Jim Jim Holmgren MCSE, CCNA [EMAIL PROTECTED] Network Engineer Advertising.com List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Exchange store dismounts unexpectedly
Title: RE: Exchange store dismounts unexpectedly We're using Groupshield 4.5 SP1 plust hotfix 7 here without any such problems on our Exchange 5.5 servers. Phil -Phil RandalNetwork EngineerHerefordshire CouncilHereford, UK -Original Message-From: Kent, Larry SYNETICS [mailto:[EMAIL PROTECTED]]Sent: 15 March 2002 13:49To: MS-Exchange Admin IssuesSubject: RE: Exchange store dismounts unexpectedly Stop blaming the software. That's like saying just because you are hsving trouble shifting a manual transmission car, there is someting wrong with the car and you should go out and buy a different one... -Original Message- From: Walt Brannon [mailto:[EMAIL PROTECTED]] Sent: Thursday, March 14, 2002 7:54 PM To: MS-Exchange Admin Issues Subject: RE: Exchange store dismounts unexpectedly We are using GroupShield anti-virus software. We are using GroupShield anti-virus software. We are using GroupShield anti-virus software. We are using GroupShield anti-virus software. This is your problem. I have heard of two other systems using Groupshield doing the same thing. Get Trend or Antigen. Walt -Original Message- From: Sonny Meza [mailto:[EMAIL PROTECTED]] Sent: Friday, January 11, 2002 6:55 PM To: MS-Exchange Admin Issues Cc: Michael Hoelscher; Dan Reed; John Moreland; Bill Brown Subject: Exchange store dismounts unexpectedly We've had problems with our Exchange store dismounting unexpectedly. This happens quite often - sometimes two or three times a week. We are using GroupShield anti-virus software. Other than that, we have nothing else running on that server. Has anyone experienced this problem? Would appreciate any thoughts or ideas we could get. Thanks. List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Groupshield issue
Title: RE: Groupshield issue While you're there, grab hotfix 7 for Groupshield 4.5 and apply it. Phil -Phil RandalNetwork EngineerHerefordshire CouncilHereford, UK -Original Message-From: Rybski Dajo [mailto:[EMAIL PROTECTED]]Sent: 08 February 2002 08:19To: MS-Exchange Admin IssuesSubject: RE: Groupshield issue I found it now. Thanks all. Btw, you need to use a Quarantine database instead of a directory to use it. Dajo -Oorspronkelijk bericht-Van: Kent, Larry SYNETICS [mailto:[EMAIL PROTECTED]]Verzonden: donderdag 7 februari 2002 18:00Aan: MS-Exchange Admin IssuesOnderwerp: RE: Groupshield issue It is the Resolve Names Utility -Original Message-From: Abercrombie, Sherry [mailto:[EMAIL PROTECTED]]Sent: Thursday, February 07, 2002 11:40 AMTo: MS-Exchange Admin IssuesSubject: RE: Groupshield issue Can you give us the name of this file from NAI? -Original Message- From: Richard McMahon [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 07, 2002 7:28 AM To: MS-Exchange Admin Issues Subject: RE: Groupshield issue You need to install a separate file from nai's site. It scans through all tickets and assigns the user id etc to it. This is because of issues with the new antivirus API in exchange. Hope this helps Richard -Original Message- From: Rybski Dajo [mailto:[EMAIL PROTECTED]] Sent: 07 February 2002 08:28 To: MS-Exchange Admin Issues Subject: Groupshield issue After installing Groupshield 4.5 on my Exchange server 5.5 SP4, it detects viruses just fine (thank god for that) but I'm unable to see who sent the infected mail or who the recipient was. As administrator I receive a mail from Groupshield (the ticket) but To, From, Sent and Subject are always empty (in the body of the ticket I mean). Furthermore I receive the alert as a plain mail whereas with Groupshield 4.0.3 it had it's own form. Maybe this is related. Any clues? Dajo List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Priv.edb not decreasing despite deleting moving mailboxes
It appears to back up the whole lot here :-( Phil - Phil Randal Network Engineer Herefordshire Council Hereford, UK -Original Message- From: Douglas Hull [mailto:[EMAIL PROTECTED]] Sent: 31 January 2002 10:45 To: MS-Exchange Admin Issues Subject: RE: Priv.edb not decreasing despite deleting moving mailboxes Thanks for all the responses. Am I right in thinking that even though my PRIV.edb is saying it is 15GB in size a lot of that is white space? If so, when I run my backup, does it backup the entire 15GB worth (ie. the database and the white space)or does it only backup the actual database? That is my concern - my backups are taking ages and I was hoping that by deleting and archiving emails that the PRIV.edb would be reduced and the backups would complete quicker. Thanks again Doug and that is how it should be. If you have a look at the white (free) = space within the database you will find that it is increasing with the amount = of email etc being deleted. Also if you have deleted items retention = turned on the files will not be cleared until after the retention time is up. If = you really need to reclaim the DISK space=20 flame suit=20 you can use Eseutil to shrink the database=20 flame suit /=20 but I would suggest using this only if it is an absolute do or die. = The point here has been made many times on this list but I'll say it again. = The database file only grows if the white space within it has been used. Shrinking the database file using eseutil can be counterproductive = because when your database attempts to grow it must reclaim some the freed up = disk space and devote cpu cycles to incorporating this space into the = database. Also given that the eseutil programme is used by PSS as a diagnosis and repair tool, it is not really meant as a maintenance tool. Another = point is that you need as much disk space extra as your database uses now to = complete the operation. Because this tool works on your database, there is the = risk of corruption (you did backup before starting didn't you ;-) ) Last but = not least, your email is offline while doing this and your users will be = pissed at you. =20 the above is really a rehash of the discussion held a month ago when = one of our subscribers said that she did this monthly. Boy did she cop a = flaming! =A0 cheers=20 Wayne Hanks=20 Systems Administrator=20 Paterson Ord Minnett=20 Ph 08 9263 1114 fax 08 9325 1086=20 Don't Panic -Douglas Adams The Hitchhikers Guide to the Galaxy=20 =A0 -Original Message- From: Douglas Hull [mailto:[EMAIL PROTECTED]] Sent: Thursday, 31 January 2002 0:41 To: MS-Exchange Admin Issues Subject: Priv.edb not decreasing despite deleting moving mailboxes I have built a 2nd Exchange server for my site as my primary server is running out of disk space. I have been moving mailboxes across to the = new server as well as getting users to delete and archive as much as = possible, however the size of my PRIV.edb file on primary server does not seem to = be decreasing! It is approaching 16GB which I know is the limit of the private info store. What do I need to do to reclaim this disk space? Many thanks Doug List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: NAI Groupshield for Exchange
Hotfix 7 - from www.mcafeeb2b.com product upgrades section. Andincrease OpenRetryDelay as detailed here: http://support.microsoft.com/support/kb/articles/Q264/7/31.ASP We use 0x800 as our value. Phil -Phil RandalNetwork EngineerHerefordshire CouncilHereford, UK -Original Message-From: Jen [mailto:[EMAIL PROTECTED]]Sent: 08 January 2002 22:44To: MS-Exchange Admin IssuesSubject: NAI Groupshield for Exchange I know I'm going to be chastised for this, but is anyone familiar with Groupshield? I have been pulling my hair out trying to get it configured on my cluster (NT 4 SP6 EX 5.5 SP4). I can't get the DAT files to update.. periodically it becomes very overzealous and replaces all my file attachments with an empty alert.txt... I'm not even close to an expert on anti-virus or Exchange but unfortunately I'm the Lone Ranger here at the University as far as server support is concerned. Any help would be greatly appreciated. jenList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Upgrade of Patches
Title: Upgrade of Patches SP4 for Exchange 5.5 Post SP6A security fixes, etc Check out http://www.microsoft.com/technet/security Phil -Phil RandalNetwork EngineerHerefordshire CouncilHereford, UK -Original Message-From: Martey, Emmanuel E [mailto:[EMAIL PROTECTED]]Sent: 21 December 2001 13:42To: MS-Exchange Admin IssuesSubject: Upgrade of Patches Hi guys, I am running Exchange 5.5 (Build 2650.24: ServicePack 3) on NT 4.0 server SP 6, with about 150 users. Can anybody advice me on what upgrade path I need to go. what they latest patch is. Many thanks. Emmanuel __ Disclaimer and confidentiality note Everything in this e-mail and any attachments relating to the official business of Standard Bank Investment Corporation (Stanbic) is proprietary to the company. It is confidential, legally privileged and protected by law. Stanbic does not own and endorse any other content. Views and opinions are those of the sender unless clearly stated as being that of Stanbic. The person addressed in the e-mail is the sole authorised recipient. Please notify the sender immediately if it has unintentionally reached you and do not read, disclose or use the content in any way. Stanbic can not assure that the integrity of this communication has been maintained nor that it is free of errors, virus, interception or interference. ___List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Upgrade of Patches
Title: Upgrade of Patches SP4 went on to our Exchange 5.5 servers without any problems. To make sure, you might want to do the following: Set all exchange services (and and exchange antivirus services) to manual, reboot, apply SP4, reboot if it asks, then set services back to automatic and restart them. Prevents any "cannot write to file" messages (which I did see when applying SP3). Phil -Phil RandalNetwork EngineerHerefordshire CouncilHereford, UK -Original Message-From: Martey, Emmanuel E [mailto:[EMAIL PROTECTED]]Sent: 21 December 2001 14:09To: MS-Exchange Admin IssuesSubject: RE: Upgrade of Patches Thanks, Is there any precauion apart from backups?. -Original Message-From: Randal, Phil [mailto:[EMAIL PROTECTED]]Sent: 21/12/2001 13:40To: MS-Exchange Admin IssuesSubject: RE: Upgrade of Patches SP4 for Exchange 5.5 Post SP6A security fixes, etc Check out http://www.microsoft.com/technet/security Phil -Phil RandalNetwork EngineerHerefordshire CouncilHereford, UK -Original Message-From: Martey, Emmanuel E [mailto:[EMAIL PROTECTED]]Sent: 21 December 2001 13:42To: MS-Exchange Admin IssuesSubject: Upgrade of Patches Hi guys, I am running Exchange 5.5 (Build 2650.24: ServicePack 3) on NT 4.0 server SP 6, with about 150 users. Can anybody advice me on what upgrade path I need to go. what they latest patch is. Many thanks. Emmanuel __ Disclaimer and confidentiality note Everything in this e-mail and any attachments relating to the official business of Standard Bank Investment Corporation (Stanbic) is proprietary to the company. It is confidential, legally privileged and protected by law. Stanbic does not own and endorse any other content. Views and opinions are those of the sender unless clearly stated as being that of Stanbic. The person addressed in the e-mail is the sole authorised recipient. Please notify the sender immediately if it has unintentionally reached you and do not read, disclose or use the content in any way. Stanbic can not assure that the integrity of this communication has been maintained nor that it is free of errors, virus, interception or interference. ___List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm __ Disclaimer and confidentiality note Everything in this e-mail and any attachments relating to the official business of Standard Bank Investment Corporation (Stanbic) is proprietary to the company. It is confidential, legally privileged and protected by law. Stanbic does not own and endorse any other content. Views and opinions are those of the sender unless clearly stated as being that of Stanbic. The person addressed in the e-mail is the sole authorised recipient. Please notify the sender immediately if it has unintentionally reached you and do not read, disclose or use the content in any way. Stanbic can not assure that the integrity of this communication has been maintained nor that it is free of errors, virus, interception or interference. ___List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Body Scanning Utility for GroupShield
No reboot is requested. It adds a new service for message body scanning, so check in control panel to make sure it is running. Went in without a hitch here. Phil - Phil Randal Network Engineer Herefordshire Council Hereford, UK -Original Message- From: Dimitri Limanovski [mailto:[EMAIL PROTECTED]] Sent: 17 December 2001 17:02 To: MS-Exchange Admin Issues Subject: Body Scanning Utility for GroupShield Has anyone installed Body Scanning Utility for GroupSUCKS on Exchange5.5? I was planning to bundle this install along with Resolve Names Utility sometime this week but was wondering if anyone has encountered any issues these add-ons. Also, is reboot required after installation is completed? README.TXT doesn't mention anything about it. TIA, Dimitri List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Wondering
Title: Message And I thought we were drowning our sorrows! :-) Phil -Phil RandalNetwork EngineerHerefordshire CouncilHereford, UK -Original Message-From: Don Ely [mailto:[EMAIL PROTECTED]]Sent: 04 December 2001 15:44To: MS-Exchange Admin IssuesSubject: RE: Wondering We pray to the gods and drink beer in order to ensure life long success in administering Exchange... "If you can't beat your computer at chess, try kickboxing." -Anon List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: looking for hardware
Nor have we had any major problems. And the latest Dell server setup disk is just as easy to use as Compaq's SmartStart. Phil - Phil Randal Network Engineer Herefordshire Council Hereford, UK -Original Message- From: Don Ely [mailto:[EMAIL PROTECTED]] Sent: 15 November 2001 15:24 To: MS-Exchange Admin Issues Subject: RE: looking for hardware Oh really! Please elaborate as I've never had any of my Dell servers crash or have an appearance of instability. Are you sure it isn't an unstable admin? -Original Message- From: Stuart Swift [mailto:[EMAIL PROTECTED]] Sent: Thursday, November 15, 2001 7:10 AM To: MS-Exchange Admin Issues Subject: RE: looking for hardware Don't buy Dell in my experiance they are very unstable. -Original Message- From: Clayton [mailto:[EMAIL PROTECTED]] Sent: 15 November 2001 14:54 To: MS-Exchange Admin Issues Subject: RE: looking for hardware Me likes Compaq, easy to build up the RAID configs using their smart start disks -Original Message- From: Arnold, Jamie [mailto:[EMAIL PROTECTED]] Sent: Thursday, November 15, 2001 9:50 AM To: MS-Exchange Admin Issues Subject: RE: looking for hardware Dell, IBM, Compaq..not necessarily in that order. -Original Message- From: Kim Schotanus [mailto:[EMAIL PROTECTED]] Sent: Thursday, November 15, 2001 9:52 AM To: MS-Exchange Admin Issues Subject: looking for hardware I'm shopping for a new server for exch2000. Any best bets? Kim List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: looking for hardware
You forgot to add another 36.4Gb drive for hot-swap. Phil - Phil Randal Network Engineer Herefordshire Council Hereford, UK -Original Message- From: Brian Mead [mailto:[EMAIL PROTECTED]] Sent: 15 November 2001 16:10 To: MS-Exchange Admin Issues Subject: RE: looking for hardware Compaq ML3770. Throw in 3x36.4Gb with a couple 9.1 and you're set. Right Bob? -Original Message- From: Snook, Kevin S (ITD) [mailto:[EMAIL PROTECTED]] Sent: Thursday, November 15, 2001 8:16 AM To: MS-Exchange Admin Issues Subject: RE: looking for hardware Try re-adjusting the feet on the rack! -Original Message- From: Stuart Swift [mailto:[EMAIL PROTECTED]] Sent: 15 November 2001 15:10 To: MS-Exchange Admin Issues Subject: RE: looking for hardware Don't buy Dell in my experiance they are very unstable. -Original Message- From: Clayton [mailto:[EMAIL PROTECTED]] Sent: 15 November 2001 14:54 To: MS-Exchange Admin Issues Subject: RE: looking for hardware Me likes Compaq, easy to build up the RAID configs using their smart start disks -Original Message- From: Arnold, Jamie [mailto:[EMAIL PROTECTED]] Sent: Thursday, November 15, 2001 9:50 AM To: MS-Exchange Admin Issues Subject: RE: looking for hardware Dell, IBM, Compaq..not necessarily in that order. -Original Message- From: Kim Schotanus [mailto:[EMAIL PROTECTED]] Sent: Thursday, November 15, 2001 9:52 AM To: MS-Exchange Admin Issues Subject: looking for hardware I'm shopping for a new server for exch2000. Any best bets? Kim List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Eseutil
Title: Message There's one caveat I'd add to this, and that is... Make sure your online defrag is running to completion each day (or at least once a week). If you're going to reclaim whitespace, you might as well make sure that the process is working. I let the online maintenance run all weekend if it wants to :-) Phil -Phil RandalNetwork EngineerHerefordshire CouncilHereford, UK -Original Message-From: Scott Schnoll [mailto:[EMAIL PROTECTED]]Sent: 31 October 2001 18:51To: MS-Exchange Admin IssuesSubject: Re: Eseutil Um, that's what I said (except for the part about rebooting servers weekly). Did you not read me post in its entirety? Let me hit the highlights g: Exchange's online defragmentation is great for defragmenting and reclaiming white space; however, this process does not reduce the size of the database file. If you aren't move large amounts of data out of your databases, and you aren't running into any storage limitations (e.g., because you are running Standard or because you're running out of disk space), then running ESEUTIL won't provide much, if any, benefits. For the large majority of Exchange orgs, it probably won't be a regular maintenance tool. - Original Message - From: Lefkovics, William To: MS-Exchange Admin Issues Sent: Wednesday, October 31, 2001 10:26 AM Subject: RE: Eseutil Sure. Some people reboot their servers weekly, too. For the average deployment, offline defragging using eseutil as a regular maintenance toolremains a complete waste of time and resources.(Read:reclamation of whitespace that will be reused anyway) William snipList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Trend Micro Medium Risk Virus Alert - PE_NIMDA.E
The attachment is now sample.exe The dropped dll is httpodbc.dll Worm is dropped into system directory as csrss.exe (was mmc.exe). McAfee says it will be detected by existing DAT patterns. Phil - Phil Randal Network Engineer Herefordshire Council Hereford, UK -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: 30 October 2001 13:09 To: MS-Exchange Admin Issues Subject: FW: Trend Micro Medium Risk Virus Alert - PE_NIMDA.E FYI -Original Message- From: Trend Virus Info [mailto:[EMAIL PROTECTED]] Sent: Monday, October 29, 2001 10:04 PM To: Martin Blackstone Subject: Trend Micro Medium Risk Virus Alert - PE_NIMDA.E Trend Micro Medium Risk Virus Alert - PE_NIMDA.E Dear Trend Micro Customer: PE_NIMDA.E is a fast-spreading Internet worm and file infector that arrives via email, as an attachment called SAMPLE.EXE. It employs various infection mechanisms and exploits several known vulnerabilities. Like the original variant, PE_NIMDA.A, it has four modes of propagation: through email, through network shared drives, through un-patched IIS servers, and through file infection. The main difference between this variant and PE_NIMDA.A are the names of three of its dropped files. However, similar to the original variant, the names of the dropped executables are names of valid system files. PE_NIMDA.E is detected by pattern file #161 or #961. For more information on PE_NIMDA.E please visit our Web site at: http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName =PE_NIMDAE ** You are receiving this email from Trend Micro, because you have either downloaded a Trend Micro product or have signed up for our Virus Alerts. If you would like to change the way you receive email from Trend Micro please make changes in your account page at http://www.antivirus.com/subscriptions/default.asp?email=mblackstone@sup erioraccess.net To UNSUBSCRIBE go to: http://www.antivirus.com/subscriptions/default.asp?format=unsubscribe For questions regarding viruses, please contact the Virus Doctor at [EMAIL PROTECTED] For questions regarding products, please contact Tech Support at [EMAIL PROTECTED] *** List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Antivirus API
Title: RE: Antivirus API We use OpenRetryDelay of 0x800 here with no problems (touch wood). The default set by the GroupShield install is plain wrong. Phil -Phil RandalNetwork EngineerHerefordshire CouncilHereford, UK -Original Message-From: Brian Dewar [mailto:[EMAIL PROTECTED]]Sent: 24 October 2001 19:03To: MS-Exchange Admin IssuesSubject: RE: Antivirus API We were experiencing problems with our user's Outlook encountering "Operation Failed" errors. Once we increased the Open Retry Delay setting on the Exchange server, it seemed to alleviate the problem. We do see the error every so often with very large attachments, but they are few and far between. We are using NT4 SP6a, Exch 5.5 sp4 and Groupshield 4.5 from NAI. Brian Dewar [EMAIL PROTECTED] -Original Message- From: Montgomery, John [mailto:[EMAIL PROTECTED]] Sent: October 24, 2001 10:32 AM To: MS-Exchange Admin Issues Subject: Antivirus API Of those of you that are using an antivirus program that utilizes the Antivirus API, have you seen and or addresses the MAPI issues discussed in Q264731? Basically we are seeing issues with MAPI clients accessing unscanned attachments getting errors. After the first attempt everything seems to work fine. We were told to look at Q264731. I was curious if anyone else has done these changes and if so did it fix the issue for you or did it cause other problems? Exchange 5.5 SP4 GroupShield 4.5 Thank you for your time, John Montgomery Information Technology LAN Administrator HoneyBaked Ham List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Preferred Disk Config
Title: SMTP mail to exchange help Try 4 x 36GB RAID 5 with hot swap spare Phil -Phil RandalNetwork EngineerHerefordshire CouncilHereford, UK -Original Message-From: Colin Maynard [mailto:[EMAIL PROTECTED]]Sent: 26 September 2001 10:37To: MS-Exchange Admin IssuesSubject: Preferred Disk Config Hi All, I know that this question has been asked before so I apologise in advancebut can't seem to find a solid answer anywhere.Here goes. What would be the ideal disk config for performance and reliability? Money is not an issue at this time. I am thinking: 2 x 9Gb RAID 1 for System 2 x 18Gb RAID 1 for transaction logs 3 x 36Gb RAID 5 for Info stores Please let me know if I have got it completely wrong as I need to recommend a solution soon andwould rather get it right first time :-) TIA Colin List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Email Viruses
You could try unplugging the network cable... - Phil Randal Network Engineer Herefordshire Council Hereford, UK -Original Message- From: Rudy Lovato [mailto:[EMAIL PROTECTED]] Sent: 26 September 2001 14:01 To: MS-Exchange Admin Issues Subject: RE: Email Viruses Is there a free program that will block attachments on the Exchange server? -Original Message- From: Larry Penrod [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 25, 2001 1:52 PM To: MS-Exchange Admin Issues Subject: RE: Email Viruses I block these: vbs, exe, bat, js, vbe, wsf, wsh, hta, shs, com, pif, cmd, reg, scr, chm, asx, wmd, wmz, lnk, eml and nws -Original Message- From: Rudy Lovato [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 25, 2001 1:44 PM To: MS-Exchange Admin Issues Subject: Email Viruses Anybody have any ideas on what extensions to block for viruses I have (.vbs, .bat, .com, .exe, .vbe, .dll, .mp3) any others? Thanx Rudy Lovato Heel, Inc. (505) 293-3843 Ext. 7025 mailto:[EMAIL PROTECTED] mailto:[EMAIL PROTECTED] List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Email Viruses
Title: Message No, it blocks them on the local Outlook client with a registry hack and hotfixes applied to it. Phil -Phil RandalNetwork EngineerHerefordshire CouncilHereford, UK -Original Message-From: Rudy Lovato [mailto:[EMAIL PROTECTED]]Sent: 26 September 2001 14:38To: MS-Exchange Admin IssuesSubject: RE: Email Viruses Alright, help me out here... So the admin pack does not block them on the server -Original Message-From: Randal, Phil [mailto:[EMAIL PROTECTED]] Sent: Wednesday, September 26, 2001 7:34 AMTo: MS-Exchange Admin IssuesSubject: RE: Email Viruses That's not blocking them on the server! Phil -Phil RandalNetwork EngineerHerefordshire CouncilHereford, UK -Original Message-From: MHR(Michael Ross) [mailto:[EMAIL PROTECTED]]Sent: 26 September 2001 14:16To: MS-Exchange Admin IssuesSubject: RE: Email Viruses If you have the lastest security patches installed, you can use the FREE admin pack to specify what file attachments to block. http://www.slipstick.com/outlook/esecup/admin.htm -Original Message- From: Randal, Phil [mailto:[EMAIL PROTECTED]] Sent: Wednesday, September 26, 2001 8:11 AM To: MS-Exchange Admin Issues Subject: RE: Email Viruses You could try unplugging the network cable... - Phil Randal Network Engineer Herefordshire Council Hereford, UK -Original Message- From: Rudy Lovato [mailto:[EMAIL PROTECTED]] Sent: 26 September 2001 14:01 To: MS-Exchange Admin Issues Subject: RE: Email VirusesIs there a free program that will block attachments on the Exchange server? -Original Message- From: Larry Penrod [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 25, 2001 1:52 PM To: MS-Exchange Admin Issues Subject: RE: Email Viruses I block these: vbs, exe, bat, js, vbe, wsf, wsh, hta, shs, com, pif, cmd, reg, scr, chm, asx, wmd, wmz, lnk, eml and nws -Original Message- From: Rudy Lovato [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 25, 2001 1:44 PM To: MS-Exchange Admin Issues Subject: Email Viruses Anybody have any ideas on what extensions to block for viruses I have (.vbs, .bat, .com, .exe, .vbe, .dll, .mp3) any others? Thanx Rudy Lovato Heel, Inc. (505) 293-3843 Ext. 7025 mailto:[EMAIL PROTECTED] mailto:[EMAIL PROTECTED] List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Groupshield
Title: Message I thinkso... That attitude sucks big time. The product is broken without it, broken with it. Some of the fixes in HF7 seem pretty critical to me. Like not detecting attachments in html-formatted emails, for example... Phil -Phil RandalNetwork EngineerHerefordshire CouncilHereford, UK -Original Message-From: Brian Bauer ** Network Technician [mailto:[EMAIL PROTECTED]]Sent: 26 September 2001 14:40To: MS-Exchange Admin IssuesSubject: RE: Groupshield I got the hotfix, with pretty much no screaming necessary. I asked the tech why they wont post it, and they said it would break more than it would fix. How about that for a product... Should we be looking at something else than NAI? -Original Message-From: Randal, Phil [mailto:[EMAIL PROTECTED]]Sent: Wednesday, September 26, 2001 8:23 AMTo: MS-Exchange Admin IssuesSubject: RE: Groupshield We've alread been hit by #11. Arrggghhh. Phil -Phil RandalNetwork EngineerHerefordshire CouncilHereford, UK -Original Message-From: Clark, Steve [mailto:[EMAIL PROTECTED]]Sent: 26 September 2001 13:11To: MS-Exchange Admin IssuesSubject: RE: Groupshield Just 1 or 2 things. I'm going to try to call today. If anybody has the fix, would be nice to get it rather than call and convince them otherwise. thanks Steve Clark Clark Systems Support, LLC AVIEN Charter Member "Who's watching your network?" www.clarksupport.com 301-610-9584 voice 240-465-0323 Efax -Original Message-From: Randal, Phil [mailto:[EMAIL PROTECTED]]Sent: Wednesday, September 26, 2001 8:02 AMTo: MS-Exchange Admin IssuesSubject: RE: Groupshield Found on another mailing list: A HF7 is not-public-available from NAI - see further below for resolved issues.(the "not-public-available" is like saying: You got to have the problem before you can get the hotfix) Snip from the readme: *A2. RESOLVED ISSUES 1. This HotFix adds an Advanced button to the Internet Settings dialog box. The new button allows you to enter a user name and password to access a secure FTP server. Without this HotFix, the GroupShield Exchange software can only access FTP sites with anonymous login. 2. This HotFix resolves an issue where a locked SCAN.DAT file caused the TKUPD32.EXE and UPDSVC.EXE processes to run at high processor utilization. This HotFix also resolves this issue. 3. This HotFix resolves an issue where the AutoUpdate feature was unable to update a locked SCAN.DAT file. The software now unlocks the file before it performs the update. 4. This HotFix ensures that an AutoUpdate task completes successfully if it runs at the same time as an on-demand scan task. 5. This Hotfix resolves an issue where repeated scheduled on-demand scan tasks started at a time later than scheduled.6. This Hotfix resolves an issue with notification messages with Sender, CC or recipient fields longer than 256 characters where the field would be truncated to the first 256 characters. 7. Notification messages sent when an infected message has been detected now report whether a message has been Cleaned, Quarantined, Deleted or Logged. 8. Notification messages generated following an on-demand scan task that detected an embedded HTML infection in an e-mail message now show the correct time that the infected message was sent.9. This HotFix resolves an issue where attachments included in HTML formatted messages were not scanned by the on-demand scanner. 10. An ODCMD.EXE application error given when the GroupShield Exchange services were closed or an on-demand scan task completed on a stand-alone server no longer appears.* The HF7 has these additional resolved issues *11. This HotFix resolves an issue that caused attachments to be incorrectly Quarantined during a DAT file update. 12. This HotFix resolves an issue where an on-demand scan task would fail if the Microsoft Exchange server display name contained extended characters,
RE: Groupshield
It's a feature! G... Phil -Phil RandalNetwork EngineerHerefordshire CouncilHereford, UK -Original Message-From: Clark, Steve [mailto:[EMAIL PROTECTED]]Sent: 25 September 2001 03:36To: MS-Exchange Admin IssuesSubject: Groupshield Has anyone had experience with Groupshield 4.5.1 where if you select block extensions, it blocks only extensions. If you select filenames, it blocks only filenames (even if you have blocked EXE's in the extension side)? Steve Clark Clark Systems Support, LLC AVIEN Charter Member "Who's watching your network?" www.clarksupport.com 301-610-9584 voice 240-465-0323 Efax List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: ANTIGEN users
Here's a list of some of the .exe files we've blocked or cleared out of our IS in the last few days: perfectman lurve loveforecaster spinning-around skiing gift coolpicture invaders dizzy the dino elf bowling beertend britney4 monet sheep rudolf lamb where-my-dog fight blender dance cat-a-pult frogpult funtest rabbit and more and more... All work-related, of course :-) - Phil Randal Network Engineer Herefordshire Council Hereford, UK -Original Message- From: Benjamin Winzenz [mailto:[EMAIL PROTECTED]] Sent: 25 September 2001 13:18 To: MS-Exchange Admin Issues Subject: RE: ANTIGEN users We just started blocking it, and I get a copy of all the Scanmail messages stating which attachment was blocked. It really is amazing to actually see how many are not business-related. Plus, wth the new reporting another possible .exe virus (wtc.exe), makes me even more glad that we are blocking them. Haven't seen anything on AV vendor's sites regarding that one, but it was talked about on the radio both late last night and this morning. Anyone else heard anything regarding this? Ben Winzenz, MCSE Network/Systems Administrator Peregrine Systems, Inc. List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Groupshield
It's supposedly fixed in Hotfix 7 for Groupshield 4.5. Phil -Phil RandalNetwork EngineerHerefordshire CouncilHereford, UK -Original Message-From: Clark, Steve [mailto:[EMAIL PROTECTED]]Sent: 25 September 2001 13:39To: MS-Exchange Admin IssuesSubject: RE: Groupshield That feature is enough to: sign up as a Trend Micro reseller switch all companies with Ex to Trend Micro tell NAI to stick it too many features - Steve Clark Clark Systems Support, LLC AVIEN Charter Member "Who's watching your network?" www.clarksupport.com 301-610-9584 voice 240-465-0323 Efax -Original Message-From: Randal, Phil [mailto:[EMAIL PROTECTED]]Sent: Tuesday, September 25, 2001 4:52 AMTo: MS-Exchange Admin IssuesSubject: RE: Groupshield It's a feature! G... Phil -Phil RandalNetwork EngineerHerefordshire CouncilHereford, UK -Original Message-From: Clark, Steve [mailto:[EMAIL PROTECTED]]Sent: 25 September 2001 03:36To: MS-Exchange Admin IssuesSubject: Groupshield Has anyone had experience with Groupshield 4.5.1 where if you select block extensions, it blocks only extensions. If you select filenames, it blocks only filenames (even if you have blocked EXE's in the extension side)? Steve Clark Clark Systems Support, LLC AVIEN Charter Member "Who's watching your network?" www.clarksupport.com 301-610-9584 voice 240-465-0323 Efax List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Groupshield
You have to call support and convince them you need it. Good luck! Phil -Phil RandalNetwork EngineerHerefordshire CouncilHereford, UK -Original Message-From: Clark, Steve [mailto:[EMAIL PROTECTED]]Sent: 25 September 2001 13:48To: MS-Exchange Admin IssuesSubject: RE: Groupshield Where could I get that hotfix? Steve Clark Clark Systems Support, LLC AVIEN Charter Member "Who's watching your network?" www.clarksupport.com 301-610-9584 voice 240-465-0323 Efax -Original Message-From: Randal, Phil [mailto:[EMAIL PROTECTED]]Sent: Tuesday, September 25, 2001 8:44 AMTo: MS-Exchange Admin IssuesSubject: RE: Groupshield It's supposedly fixed in Hotfix 7 for Groupshield 4.5. Phil -Phil RandalNetwork EngineerHerefordshire CouncilHereford, UK -Original Message-From: Clark, Steve [mailto:[EMAIL PROTECTED]]Sent: 25 September 2001 13:39To: MS-Exchange Admin IssuesSubject: RE: Groupshield That feature is enough to: 1. sign up as a Trend Micro reseller 2. switch all companies with Ex to Trend Micro 3. tell NAI to stick it too many features - Steve Clark Clark Systems Support, LLC AVIEN Charter Member "Who's watching your network?" www.clarksupport.com 301-610-9584 voice 240-465-0323 Efax -Original Message-----From: Randal, Phil [mailto:[EMAIL PROTECTED]]Sent: Tuesday, September 25, 2001 4:52 AMTo: MS-Exchange Admin IssuesSubject: RE: Groupshield It's a feature! G... Phil -Phil RandalNetwork EngineerHerefordshire CouncilHereford, UK -Original Message-From: Clark, Steve [mailto:[EMAIL PROTECTED]]Sent: 25 September 2001 03:36To: MS-Exchange Admin IssuesSubject: Groupshield Has anyone had experience with Groupshield 4.5.1 where if you select block extensions, it blocks only extensions. If you select filenames, it blocks only filenames (even if you have blocked EXE's in the extension side)? Steve Clark Clark Systems Support, LLC AVIEN Charter Member "Who's watching your network?" www.clarksupport.com 301-610-9584 voice 240-465-0323 Efax List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Groupshield
I don't have it! Phil -Phil RandalNetwork EngineerHerefordshire CouncilHereford, UK -Original Message-From: Clark, Steve [mailto:[EMAIL PROTECTED]]Sent: 25 September 2001 14:11To: MS-Exchange Admin IssuesSubject: RE: Groupshield And how much would it cost me to get the hotfix from you? I think Diane would like a copy as well. Steve Clark Clark Systems Support, LLC AVIEN Charter Member "Who's watching your network?" www.clarksupport.com 301-610-9584 voice 240-465-0323 Efax List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Does NIMDA Corrupt Exchange???
If you're using Groupshield 4.5, block extensions.. Microsoft has a list it considers unsafe at http://support.microsoft.com/support/kb/articles/Q262/6/31.ASP. Earlier threads on this issue mentioned vbs;shs;js;com;bat;cmd;pif;scr;chm; And .exe? Phil - Phil Randal Network Engineer Herefordshire Council Hereford, UK -Original Message- From: Mike Keane [mailto:[EMAIL PROTECTED]] Sent: 24 September 2001 13:51 To: MS-Exchange Admin Issues Subject: RE: Does NIMDA Corrupt Exchange??? What if I am already using Mcaffee on the server? ANTIGEN will make you feel safer. www.sybari.com -Original Message- From: Ropiak Steve - NAO Florence Office Exchange and Bar Code Admn. [mailto:[EMAIL PROTECTED]] Sent: 24 September 2001 13:06 To: MS-Exchange Admin Issues Subject: RE: Does NIMDA Corrupt Exchange??? We had a severe infestation of our German systems and all they needed = to clean was the mailboxes. 'd be wary of is anything stuck in a queue when I crank up the services again. mit freundlichen Gr=FC=DFen / best regards=20 =20 Steve Ropiak [EMAIL PROTECTED] office (207) 989-9115 cell (513) 314-0197 -Original Message- From: Mike Keane [mailto:[EMAIL PROTECTED]] Sent: Monday, September 24, 2001 7:59 AM To: MS-Exchange Admin Issues Subject: Does NIMDA Corrupt Exchange??? Hello, I am trying to figure out if NIMDA will infect the Exchange Database? My Exchange Services are shutdown and the server is up. I've cleaned the server of the NIMDA virus, but I am now worried about restarting the Exchange services in fear of unleashing the virus if it resides in the database. Any ideas of whether it does or notor if there is a cleaner for the Exchange database? Thanks,=20 Mike List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Does NIMDA Corrupt Exchange???
Oops, and .eml and .nws Phil - Phil Randal Network Engineer Herefordshire Council Hereford, UK -Original Message- From: Randal, Phil [mailto:[EMAIL PROTECTED]] Sent: 24 September 2001 13:57 To: MS-Exchange Admin Issues Subject: RE: Does NIMDA Corrupt Exchange??? If you're using Groupshield 4.5, block extensions.. Microsoft has a list it considers unsafe at http://support.microsoft.com/support/kb/articles/Q262/6/31.ASP. Earlier threads on this issue mentioned vbs;shs;js;com;bat;cmd;pif;scr;chm; And .exe? Phil - Phil Randal Network Engineer Herefordshire Council Hereford, UK -Original Message- From: Mike Keane [mailto:[EMAIL PROTECTED]] Sent: 24 September 2001 13:51 To: MS-Exchange Admin Issues Subject: RE: Does NIMDA Corrupt Exchange??? What if I am already using Mcaffee on the server? ANTIGEN will make you feel safer. www.sybari.com -Original Message- From: Ropiak Steve - NAO Florence Office Exchange and Bar Code Admn. [mailto:[EMAIL PROTECTED]] Sent: 24 September 2001 13:06 To: MS-Exchange Admin Issues Subject: RE: Does NIMDA Corrupt Exchange??? We had a severe infestation of our German systems and all they needed = to clean was the mailboxes. 'd be wary of is anything stuck in a queue when I crank up the services again. mit freundlichen Gr=FC=DFen / best regards=20 =20 Steve Ropiak [EMAIL PROTECTED] office (207) 989-9115 cell (513) 314-0197 -Original Message- From: Mike Keane [mailto:[EMAIL PROTECTED]] Sent: Monday, September 24, 2001 7:59 AM To: MS-Exchange Admin Issues Subject: Does NIMDA Corrupt Exchange??? Hello, I am trying to figure out if NIMDA will infect the Exchange Database? My Exchange Services are shutdown and the server is up. I've cleaned the server of the NIMDA virus, but I am now worried about restarting the Exchange services in fear of unleashing the virus if it resides in the database. Any ideas of whether it does or notor if there is a cleaner for the Exchange database? Thanks,=20 Mike List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
Microsost's take on Nimda
Check out: http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/ topics/nimda.asp Phil - Phil Randal Network Engineer Herefordshire Council Hereford, UK List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
FW: ARCserve 6.61 Share Access Vulnerability
Found on BugTraq - Phil Randal Network Engineer Herefordshire Council Hereford, UK -Original Message- From: ron [mailto:[EMAIL PROTECTED]] Sent: 16 September 2001 05:27 To: [EMAIL PROTECTED] Subject: ARCserve 6.61 Share Access Vulnerability I have found a vulnerability with ARCServe for NT 6.61 SP2a. I stumbled upon this while performing a vulnerability analysis. Details: The default install of ARCServe for NT creates a hidden share on Windows NT machines when it is installed. The name of this share is ARCSERVE$. The permissions of the share allow all users in a domain to map this share. However, this is not the worst part. Within the share is a file named aremote.dmp. The full path is ARCSERVE$\DR\NAME of SERVER\aremote.dmp. In the aremote.dmp file, the account name that runs the backup is in cleartext within this file. Also, a little further within the file, the password for the account is in cleartext. Seeing as how the account that performs backups can access system files, this is very dangerous. Some places run their backups as the NT domain administrator account. Fix: CA has been notified and will be making a patch available to all customers. Also, it _should_ be possible to change the share permissions, allowing only the backup account and the administrator access to the share. I am not sure if this is in ARCServe 2000 or in releases prior, as I have not checked them. - rdr List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Exchange Server Memory Limiter
Sounds like you don't have enough RAM in your server to start with, but try running Exchange Optimizer (sic). Phil - Phil Randal Network Engineer Herefordshire Council Hereford, UK -Original Message- From: Robert Jackson [mailto:[EMAIL PROTECTED]] Sent: 11 September 2001 09:50 To: MS-Exchange Admin Issues Subject: Exchange Server Memory Limiter Hi All, It has been mentioned that you can limit the amount of RAM that Exchange Server 5.5 uses. Is this correct? If so what configuration changes do I need to make? My main problem is that the STORE.EXE process currently running on my email server is using 75Mb of RAM and I think this is partly to blame for the server grinding to a halt. My server is running NT 4.0 SP6 with Exchange Server 5.5 SP3. Any help would be most welcome. TIA, Rab. = Robert JacksonPhone: +44 (0) 141 332 7999 Software Engineer Fax: +44 (0) 141 331 2820 Walker Martyn Ltd 1 Park Circus Place Email: [EMAIL PROTECTED] Glasgow G3 6AH, Scotland Web: http://www.walkermartyn.co.uk = ** ** The information in this internet E-mail is confidential and is intended solely for the addressee. Access, copying or re-use of information in it by anyone else is unauthorised. Any views or opinions presented are solely those of the author and do not necessarily represent those of Walker Martyn Ltd or any of its affiliates. If you are not the intended recipient please contact [EMAIL PROTECTED] List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Change Of IPs
Indeed... All detailed in RFC1918 http://www.faqs.org/rfcs/rfc1918.html Cheers Phil - Phil Randal Network Engineer Herefordshire Council Hereford, UK -Original Message- From: Neil Hobson [mailto:[EMAIL PROTECTED]] Sent: 10 September 2001 14:27 To: MS-Exchange Admin Issues Subject: RE: Change Of IPs You're getting the 172.16.x.x to 172.31.x.x range and the 10.x.x.x range mixed up. William was correct. Neil -Original Message- From: Andrew Goddard [mailto:[EMAIL PROTECTED]] Posted At: 10 September 2001 14:27 Posted To: Sunbelt Exchange List Conversation: Change Of IPs Subject: RE: Change Of IPs I think only the following 16 class B networks are private: 10.16.0.0/16 to 10.31.0.0/16 The rest are public. Cheers, Andrew. -Original Message- From: Lefkovics, William [mailto:[EMAIL PROTECTED]] Sent: 07 September 2001 20:40 To: MS-Exchange Admin Issues Subject: RE: Change Of IPs and 10.x.x. -Original Message- From: missy koslosky [mailto:[EMAIL PROTECTED]] Sent: Friday, September 07, 2001 12:33 PM To: MS-Exchange Admin Issues Subject: Re: Change Of IPs 172.16.x.x is also private addressing. M - Original Message - From: [EMAIL PROTECTED] To: MS-Exchange Admin Issues [EMAIL PROTECTED] Sent: Friday, September 07, 2001 11:31 AM Subject: RE: Change Of IPs Be careful. We own a C Block and were told that it's in the works, from who ever manages all the IP's in the world, to pull IP's away from companies. Seems there getting ready for the day of us running out of IP's and companies are using C block after C block on what could be used with Internal IP's (192.168.x.x). Just a heads up. -Original Message- From: Roger Ali [mailto:[EMAIL PROTECTED]] Sent: Friday, September 07, 2001 9:41 AM To: MS-Exchange Admin Issues Subject: Change Of IPs Hey Guys, We are planning to migrate our networks from a 192.168.x.x Class C address range to a 172.16.x.x at our corporate headquarters. I have 2 questions if you can help 1. We have a proxy, email, outlook web access, vpn, print server, tape backup (ArcServ), and our PDC Servers. Will any services get corrupted or refuse to start if we change the IP Configuration of these servers. If so how can we fix the problems that can occur? 2. We have some off site facilities that may access our servers at the 192.168.x.x network through LMHOST files. My question is can we create MIPs at our routers solve this problem. Please help ASAP as we need to verify this. Thanks Roger Ali List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm ** This eMail and any files transmitted with it are confidential and intended solely for the use of the individual to whom it is addressed. Any view or opinions presented are solely those of the author and do not necessarily represent those of Silversands or any of its subsidiary companies. If you have received this eMail in error please contact the Support Desk Immediately by telephone on 01202-36 or on eMail at [EMAIL PROTECTED] ** List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: MS01_044
Yes, I have. Server hasn't crashed (yet). Phil - Phil Randal Network Engineer Herefordshire Council Hereford, UK -Original Message- From: mark verschaeve [mailto:[EMAIL PROTECTED]] Sent: 16 August 2001 16:01 To: MS-Exchange Admin Issues Subject: MS01_044 Hi all, Did someone already applied the cumulative patch for IIS (4.0 or 5.0) I would apply, but I'm not sure if I will get a BSOD or not likementioned earlier on this list with the roll-up package. Thanks, Mark. List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm