OWA ill not let me log in?
Exchange 2000 SP3 Windows 2000 SP3 I just built a new Exchange 2000 Server and created a mailbox on it OWA will not let me log in, any ideas. It acts like I have the wrong Username and Password but I know it is right. I have tried Domain\Username and Password I have also tried Username and Password Joshua Morgan Method IQ Senior Network Engineer Main: (864) 272-1145 Mobile: (864) 449-9912 Email: [EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: OWA ill not let me log in?
What errors do the log files give you? Paste them verbatim. -Original Message- From: Joshua R. Morgan [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 03, 2003 6:56 AM To: Exchange Discussions Subject: OWA ill not let me log in? Exchange 2000 SP3 Windows 2000 SP3 I just built a new Exchange 2000 Server and created a mailbox on it OWA will not let me log in, any ideas. It acts like I have the wrong Username and Password but I know it is right. I have tried Domain\Username and Password I have also tried Username and Password Joshua Morgan Method IQ Senior Network Engineer Main: (864) 272-1145 Mobile: (864) 449-9912 Email: [EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: OWA ill not let me log in?
It takes a while for the email address to be created? Also an email needs to be sent to the account before you can access the mailbox. -Original Message- From: Joshua R. Morgan [mailto:[EMAIL PROTECTED] Sent: 03 June 2003 14:56 To: Exchange Discussions Subject: OWA ill not let me log in? Exchange 2000 SP3 Windows 2000 SP3 I just built a new Exchange 2000 Server and created a mailbox on it OWA will not let me log in, any ideas. It acts like I have the wrong Username and Password but I know it is right. I have tried Domain\Username and Password I have also tried Username and Password Joshua Morgan Method IQ Senior Network Engineer Main: (864) 272-1145 Mobile: (864) 449-9912 Email: [EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] ** This correspondence is confidential and is solely for the intended recipient(s). If you are not the intended recipient, you must not use, disclose, copy, distribute or retain this message or any part of it. If you are not the intended recipient please delete this correspondence from your system and notify the sender immediately. No warranty is given that this correspondence is free from any virus. In keeping with good computer practice, you should ensure that it is actually virus free. E-mail messages may be subject to delays, non-delivery and unauthorised alterations therefore, information expressed in this message is not given or endorsed by Sx3 unless otherwise notified by our duly authorised representative independent of this message. Sx3 is a trading name of Service and Systems Solutions Limited, a limited company registered in Northern Ireland under number NI 32979 whose registered office is at 120 Malone Road, Belfast, BT9 5HT. ** _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
IMS Corruption...
Exchange 5.5, SP4 Win2k, SP2 NAVME Version: 2.12 (Build 59) I have 6,949 of the following errors in my IMS Application event log, since 4/9/03: Event Type: Warning Event Source: MSExchangeIMC Event Category: Internal Processing Event ID: 3038 Date: 6/3/2003 Time: 8:43:03 AM User: N/A Computer: MAIL Description: An attempt to remove processed messages from the outbound store queue has failed. The removal will be retried later. If the messages are not removed before the service is shut down, the mail will be resent at service startup causing duplicate mail. This "Q" article is the exact message that I am getting and looks to be a valid fix for my problem: Q296879 - XFOR: Sent Messages Appear in the Internet Mail Service Queue and Event ID 3038 Occurs http://support.microsoft.com/default.aspx?scid=kb;en-us;296879 My question is this...The article says that this behavior has been observed when running CA's PantyShield, version 4.0.4. However, I am not, would not nor would I ever consider running this product on my Exchange box. So...can anyone tell me why this would happen? _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Background Cleanup
Isinteg Jeff -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Carmila Fresco Posted At: Monday, June 02, 2003 12:24 PM Posted To: Exchange Discussion List Conversation: Background Cleanup Subject: Background Cleanup See this error message in my logs everyday. Does anyone have any ideas what this is or how I can fix this? Source: MSExchangeIS Mailbox Category: Background Cleanup Event ID: 1101 Description: Error 0x8004010f occurred on message 1-14FBCE during a background cleanup on database "Storage group 1\Store 1A". Thanks, Carmila This email message may contain information that is confidential and proprietary to Babcock & Brown or a third party. If you are not the intended recipient, please contact the sender and destroy the original and any copies of the original message. Babcock & Brown takes measures to protect the content of its communications. However, Babcock & Brown cannot guarantee that email messages will not be intercepted by third parties or that email messages will be free of errors or viruses. _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: OWA ill not let me log in?
Silly me when I created the alternate SMTP it removed the default one created by the DC... I added it back and all is well Joshua Morgan Email: [EMAIL PROTECTED] -Original Message- From: Henderson Richard [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 03, 2003 10:40 AM To: Exchange Discussions Subject: RE: OWA ill not let me log in? It takes a while for the email address to be created? Also an email needs to be sent to the account before you can access the mailbox. -Original Message- From: Joshua R. Morgan [mailto:[EMAIL PROTECTED] Sent: 03 June 2003 14:56 To: Exchange Discussions Subject: OWA ill not let me log in? Exchange 2000 SP3 Windows 2000 SP3 I just built a new Exchange 2000 Server and created a mailbox on it OWA will not let me log in, any ideas. It acts like I have the wrong Username and Password but I know it is right. I have tried Domain\Username and Password I have also tried Username and Password Joshua Morgan Method IQ Senior Network Engineer Main: (864) 272-1145 Mobile: (864) 449-9912 Email: [EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] ** This correspondence is confidential and is solely for the intended recipient(s). If you are not the intended recipient, you must not use, disclose, copy, distribute or retain this message or any part of it. If you are not the intended recipient please delete this correspondence from your system and notify the sender immediately. No warranty is given that this correspondence is free from any virus. In keeping with good computer practice, you should ensure that it is actually virus free. E-mail messages may be subject to delays, non-delivery and unauthorised alterations therefore, information expressed in this message is not given or endorsed by Sx3 unless otherwise notified by our duly authorised representative independent of this message. Sx3 is a trading name of Service and Systems Solutions Limited, a limited company registered in Northern Ireland under number NI 32979 whose registered office is at 120 Malone Road, Belfast, BT9 5HT. ** _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
Messages supposedly not being deleted
Outlook 2000 Exchange 5.5 SP4 VPN access over broadband. We have a user with a computer at home they use to access their coporate email. They are saying that messages that they have deleted in that Outlook profile are not showing as deleted when they get back into the office. We don't have the ability to get in front of this box to see how it is (mis)configured. They are not using pop3 or IMAP. This is not happening to anyone else on the same server. What I am wondering is if anyone has seen this behavoir when accessing the mailbox from 2 different profiles. TIA Ken _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
Recovery Help. Request made from a new Exchange Admin.
Hello All: Second day on the job as the new Exchange Admin and I need help! My employer has a two yr old backup tape of Exchange data. The Co. was using Arc-Serve 6.5. We are now using Veritas but found a version of Arc-Serve and believe we have recovered the data. Now, I need to place the data onto an Exchange Server so I can XMerge the necessary mailboxes into .pst files. Is there a way I can move the priv.edb and pub.edb files to my bridgehead or other mail servers and XMerge the needed data that is being requested for legal reasons nonetheless? Or, do I need to build a new Exchange Server? Any detailed information is much appreciated. Thank you. LABD _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
Help for a Newbe
I'm REALLY! new to exchange. I inherited a exchange server about a week ago. I need to restore a mail box. (Have not done before but have done some reading) Ill tell you guys how I plan on doing it and would you be so kind to tell me if I have left anything out. 1. build second exchange sever with same server name and same version and patch level. (Does it need to belong to the same domain or does it even need to be on a domain at all?) 2. Copy the priv1.edb and priv1.stm from tape to the restore server. 3. Mount database store and use the eseutil tool to create the pst for the mailbox. 4. import pst file into account needing restored. Are these 4 steps all I need or are there additional steps? Thanks for any input. Matt __ Do you Yahoo!? Yahoo! Calendar - Free online calendar with sync to Outlook(TM). http://calendar.yahoo.com _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Recovery Help. Request made from a new Exchange Admin.
Data this old, I wouldn't put it anywhere NEAR my production environment. You can use a spare desktop machine for this type of work. Build a new server, and restore your data to that. If I were you, I'd keep it off the same LAN as your production servers, also. Through it on a test-lab VLAN, if you have one. Steven --- Steven Dickenson <[EMAIL PROTECTED]> Network Administrator The Key School, Annapolis Maryland -Original Message- From: labigdawrg [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 03, 2003 1:28 PM To: Exchange Discussions Subject: Recovery Help. Request made from a new Exchange Admin. Hello All: Second day on the job as the new Exchange Admin and I need help! My employer has a two yr old backup tape of Exchange data. The Co. was using Arc-Serve 6.5. We are now using Veritas but found a version of Arc-Serve and believe we have recovered the data. Now, I need to place the data onto an Exchange Server so I can XMerge the necessary mailboxes into .pst files. Is there a way I can move the priv.edb and pub.edb files to my bridgehead or other mail servers and XMerge the needed data that is being requested for legal reasons nonetheless? Or, do I need to build a new Exchange Server? Any detailed information is much appreciated. Thank you. LABD _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Help for a Newbe
Just one mailbox. That seems like a little overkill. How are you doing your backups? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Plahtinsky Sent: Tuesday, June 03, 2003 10:26 AM To: Exchange Discussions Subject: Help for a Newbe I'm REALLY! new to exchange. I inherited a exchange server about a week ago. I need to restore a mail box. (Have not done before but have done some reading) I'll tell you guys how I plan on doing it and would you be so kind to tell me if I have left anything out. 1. build second exchange sever with same server name and same version and patch level. (Does it need to belong to the same domain or does it even need to be on a domain at all?) 2. Copy the priv1.edb and priv1.stm from tape to the restore server. 3. Mount database store and use the "eseutil" tool to create the pst for the mailbox. 4. import pst file into account needing restored. Are these 4 steps all I need or are there additional steps? Thanks for any input. Matt __ Do you Yahoo!? Yahoo! Calendar - Free online calendar with sync to Outlook(TM). http://calendar.yahoo.com _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
Exchange and AD Question
This question may be a little off the list subject but you guys are some of the best authorities I know so I wanted your opinions. (Note the subtle butt-kissing) Situation: Single domain forest with single Exchange Server and total 4 DC. About 85 Employees. Class C IP block with fixed IP addresses for all. We are in the process of starting up a new venture company and want to keep them relatively separate from our main organization so as they grow, they can be easily separated if so chosen. We have our web presence under ourcompany.org and have reserved a domain theircompany.com for the new company's web presence. We have also set up recipient policies in Exchange to receive email sent to theircompany.com for the first couple users we have set up in our domain. Question. What would be the best way to set up this new company in our AD organization to meet the requirements of easy separation in the future, while allowing us to continue serving them with our single Exchange server and with minimal additional expense and complexity. We have been looking into the possibility of setting up a child domain for them so that they can have separate security and domain suffix but are unsure if we can do this without adding a subnet or some other complexity. I appreciate any opinions or recommendations from the wise ones of the list (more butt-kissing). Thanks... Ray Beckwith Network Administrator California Credit Union League Information Technology [EMAIL PROTECTED] www.ccul.org Thought for the day: An expert is a person who has made all the mistakes which can be made in a very narrow field. --Niels Bohr An expert is someone who knows some of the worst mistakes that can be made in his subject, and how to avoid them. --Werner Karl Heisenberg _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Exchange and AD Question
You want a separate TREE in the forest, not a child domain. -Original Message- From: Ray Beckwith [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 03, 2003 11:54 AM To: Exchange Discussions Subject: Exchange and AD Question This question may be a little off the list subject but you guys are some of the best authorities I know so I wanted your opinions. (Note the subtle butt-kissing) Situation: Single domain forest with single Exchange Server and total 4 DC. About 85 Employees. Class C IP block with fixed IP addresses for all. We are in the process of starting up a new venture company and want to keep them relatively separate from our main organization so as they grow, they can be easily separated if so chosen. We have our web presence under ourcompany.org and have reserved a domain theircompany.com for the new company's web presence. We have also set up recipient policies in Exchange to receive email sent to theircompany.com for the first couple users we have set up in our domain. Question. What would be the best way to set up this new company in our AD organization to meet the requirements of easy separation in the future, while allowing us to continue serving them with our single Exchange server and with minimal additional expense and complexity. We have been looking into the possibility of setting up a child domain for them so that they can have separate security and domain suffix but are unsure if we can do this without adding a subnet or some other complexity. I appreciate any opinions or recommendations from the wise ones of the list (more butt-kissing). Thanks... Ray Beckwith Network Administrator California Credit Union League Information Technology [EMAIL PROTECTED] www.ccul.org Thought for the day: An expert is a person who has made all the mistakes which can be made in a very narrow field. --Niels Bohr An expert is someone who knows some of the worst mistakes that can be made in his subject, and how to avoid them. --Werner Karl Heisenberg _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=en glish To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
Re:Help for a Newbe
Using Veritas Backup Exec V8.5. Full nightly backup of the Information Store and System State. -Original Message- From: Christopher Hummert [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 03, 2003 1:57 PM To: Exchange Discussions Subject: RE: Help for a Newbe Just one mailbox. That seems like a little overkill. How are you doing your backups? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Plahtinsky Sent: Tuesday, June 03, 2003 10:26 AM To: Exchange Discussions Subject: Help for a Newbe I'm REALLY! new to exchange. I inherited a exchange server about a week ago. I need to restore a mail box. (Have not done before but have done some reading) I'll tell you guys how I plan on doing it and would you be so kind to tell me if I have left anything out. 1. build second exchange sever with same server name and same version and patch level. (Does it need to belong to the same domain or does it even need to be on a domain at all?) 2. Copy the priv1.edb and priv1.stm from tape to the restore server. 3. Mount database store and use the "eseutil" tool to create the pst for the mailbox. 4. import pst file into account needing restored. Are these 4 steps all I need or are there additional steps? Thanks for any input. Matt __ Do you Yahoo!? Yahoo! Calendar - Free online calendar with sync to Outlook(TM). http://calendar.yahoo.com _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] __ Do you Yahoo!? Yahoo! Calendar - Free online calendar with sync to Outlook(TM). http://calendar.yahoo.com _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Exchange and AD Question
But, we found a reference that said that an Exchange server could not serve 2 trees without a third party application. Is my information bad on that subject? Thanks...Ray Thought for the day: An expert is a person who has made all the mistakes which can be made in a very narrow field. --Niels Bohr An expert is someone who knows some of the worst mistakes that can be made in his subject, and how to avoid them. --Werner Karl Heisenberg -Original Message- From: Akerlund, Scott [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 03, 2003 11:56 AM To: Exchange Discussions Subject: RE: Exchange and AD Question You want a separate TREE in the forest, not a child domain. -Original Message- From: Ray Beckwith [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 03, 2003 11:54 AM To: Exchange Discussions Subject: Exchange and AD Question This question may be a little off the list subject but you guys are some of the best authorities I know so I wanted your opinions. (Note the subtle butt-kissing) Situation: Single domain forest with single Exchange Server and total 4 DC. About 85 Employees. Class C IP block with fixed IP addresses for all. We are in the process of starting up a new venture company and want to keep them relatively separate from our main organization so as they grow, they can be easily separated if so chosen. We have our web presence under ourcompany.org and have reserved a domain theircompany.com for the new company's web presence. We have also set up recipient policies in Exchange to receive email sent to theircompany.com for the first couple users we have set up in our domain. Question. What would be the best way to set up this new company in our AD organization to meet the requirements of easy separation in the future, while allowing us to continue serving them with our single Exchange server and with minimal additional expense and complexity. We have been looking into the possibility of setting up a child domain for them so that they can have separate security and domain suffix but are unsure if we can do this without adding a subnet or some other complexity. I appreciate any opinions or recommendations from the wise ones of the list (more butt-kissing). Thanks... Ray Beckwith Network Administrator California Credit Union League Information Technology [EMAIL PROTECTED] www.ccul.org Thought for the day: An expert is a person who has made all the mistakes which can be made in a very narrow field. --Niels Bohr An expert is someone who knows some of the worst mistakes that can be made in his subject, and how to avoid them. --Werner Karl Heisenberg _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=en glish To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
Tracking and auditing Exchange administrators
I have a client that is in the middle of a Groupwise to Exchange 2000 migration. They were a bit unsettled at the discovery that an Exchange admin can grant himself permission to read anyone's mail (something that is completely impossible in Groupwise, short of changing the users' password). They want to know how they can audit whether an admin has modified the ACL on a mailbox store to grant himself access to anyones mailbox. I know, I know, you should be able to trust your administrators, but this is a law firm and it's important that there's a paper trail. I've done some testing and come up with the following results. I wanted to run this by the group to see if anyone can confirm or deny that I'm using the most appropriate method to perform the auditing. I've set the local policy on the Exchange server to audit process tracking and privelege use. I then went into ESM and gave an account full access to a mailbox store, including send as and receive as rights. I checked the security logs and found the following 3 events (I actually found more than 3 events that appeared to be generated when I modified the permissions, but these 3 seemed most relevant): Event Type: Success Audit Event Source: Security Event Category: Privilege Use Event ID: 577 Date: 6/3/2003 Time: 11:08:06 AM User: DOMAIN\User Computer: SERVER Description: Privileged Service Called: Server: Security Service:- Primary User Name: User Primary Domain: DOMAIN Primary Logon ID: (0x0,0x29E68) Client User Name: - Client Domain: - Client Logon ID:- Privileges: SeIncreaseBasePriorityPrivilege Event Type: Success Audit Event Source: Security Event Category: Privilege Use Event ID: 577 Date: 6/3/2003 Time: 11:08:06 AM User: DOMAIN\User Computer: SERVER Description: Privileged Service Called: Server: Security Service:- Primary User Name: User Primary Domain: DOMAIN Primary Logon ID: (0x0,0x29E68) Client User Name: - Client Domain: - Client Logon ID:- Privileges: SeIncreaseBasePriorityPrivilege - Event Type: Success Audit Event Source: Security Event Category: Object Access Event ID: 565 Date: 6/3/2003 Time: 11:08:25 AM User: DOMAIN\User Computer: SERVER Description: Object Open: Object Server: Microsoft Exchange Object Type:Microsoft Exchange Database Object Name:/o=ORG/ou=First Administrative Group/cn=Configuration/cn=Servers/cn=SERVER/cn=Microsoft Private MDB New Handle ID: 0 Operation ID: {0,227067} Process ID: 1636 Primary User Name: SERVER$ Primary Domain: DOMAIN Primary Logon ID: (0x0,0x3E7) Client User Name: User Client Domain: DOMAIN Client Logon ID:(0x0,0x29E68) AccessesUnknown specific access (bit 8) Privileges - Properties: Unknown specific access (bit 8) %{d0780592-afe6-11d2-aa04-00c04f8eedd8} %{d74a8762-22b9-11d3-aa62-00c04f8eedd8} %{d74a8774-2289-11d3-aa62-00c04f8eedd8} %{cf899a6a-afe6-11d2-aa04-00c04f8eedd8} %{cffe6da4-afe6-11d2-aa04-00c04f8eedd8} %{cfc7978e-afe6-11d2-aa04-00c04f8eedd8} %{d03a086e-afe6-11d2-aa04-00c04f8eedd8} %{d74a875e-22b9-11d3-aa62-00c04f8eedd8} %{cf4b9d46-afe6-11d2-aa04-00c04f8eedd8} %{cf0b3dc8-afe6-11d2-aa04-00c04f8eedd8} %{d74a8766-22b9-11d3-aa62-00c04f8eedd8} %{d74a8769-22b9-11d3-aa62-00c04f8eedd8} %{d74a876f-22b9-11d3-aa62-00c04f8eedd8} - Does this behavior seem correct? It appears that there's multiple entries that need to be tracked in order to tell the whole story: Event ID 577 signifies that privileges have been modified, and then event ID 565 lists the objects that were accessed at the time the privileges were modified. Not exactly as clean as I had hoped, but it'll do. Jason _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Exchange and AD Question
My understanding is that so long as it is all part of the same "root" forest you should have no problem with that. If I am wrong I am sure someone here will be more than happy to correct me. Scott -Original Message- From: Ray Beckwith [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 03, 2003 12:01 PM To: Exchange Discussions Subject: RE: Exchange and AD Question But, we found a reference that said that an Exchange server could not serve 2 trees without a third party application. Is my information bad on that subject? Thanks...Ray Thought for the day: An expert is a person who has made all the mistakes which can be made in a very narrow field. --Niels Bohr An expert is someone who knows some of the worst mistakes that can be made in his subject, and how to avoid them. --Werner Karl Heisenberg -Original Message- From: Akerlund, Scott [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 03, 2003 11:56 AM To: Exchange Discussions Subject: RE: Exchange and AD Question You want a separate TREE in the forest, not a child domain. -Original Message- From: Ray Beckwith [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 03, 2003 11:54 AM To: Exchange Discussions Subject: Exchange and AD Question This question may be a little off the list subject but you guys are some of the best authorities I know so I wanted your opinions. (Note the subtle butt-kissing) Situation: Single domain forest with single Exchange Server and total 4 DC. About 85 Employees. Class C IP block with fixed IP addresses for all. We are in the process of starting up a new venture company and want to keep them relatively separate from our main organization so as they grow, they can be easily separated if so chosen. We have our web presence under ourcompany.org and have reserved a domain theircompany.com for the new company's web presence. We have also set up recipient policies in Exchange to receive email sent to theircompany.com for the first couple users we have set up in our domain. Question. What would be the best way to set up this new company in our AD organization to meet the requirements of easy separation in the future, while allowing us to continue serving them with our single Exchange server and with minimal additional expense and complexity. We have been looking into the possibility of setting up a child domain for them so that they can have separate security and domain suffix but are unsure if we can do this without adding a subnet or some other complexity. I appreciate any opinions or recommendations from the wise ones of the list (more butt-kissing). Thanks... Ray Beckwith Network Administrator California Credit Union League Information Technology [EMAIL PROTECTED] www.ccul.org Thought for the day: An expert is a person who has made all the mistakes which can be made in a very narrow field. --Niels Bohr An expert is someone who knows some of the worst mistakes that can be made in his subject, and how to avoid them. --Werner Karl Heisenberg _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=en glish To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=en glish To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=en glish To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Exchange and AD Question
In either the child-domain or new tree scenario, is there a need to separate them onto a subnet or can they just be assigned IP addresses from our existing class C block? I wanted to clarify that this was one of the important questions that I have not been able to find a definitive answer on Thanks again for your assistance. ...Ray Thought for the day: An expert is a person who has made all the mistakes which can be made in a very narrow field. --Niels Bohr An expert is someone who knows some of the worst mistakes that can be made in his subject, and how to avoid them. --Werner Karl Heisenberg -Original Message- From: Akerlund, Scott [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 03, 2003 12:04 PM To: Exchange Discussions Subject: RE: Exchange and AD Question My understanding is that so long as it is all part of the same "root" forest you should have no problem with that. If I am wrong I am sure someone here will be more than happy to correct me. Scott -Original Message- From: Ray Beckwith [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 03, 2003 12:01 PM To: Exchange Discussions Subject: RE: Exchange and AD Question But, we found a reference that said that an Exchange server could not serve 2 trees without a third party application. Is my information bad on that subject? Thanks...Ray Thought for the day: An expert is a person who has made all the mistakes which can be made in a very narrow field. --Niels Bohr An expert is someone who knows some of the worst mistakes that can be made in his subject, and how to avoid them. --Werner Karl Heisenberg -Original Message- From: Akerlund, Scott [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 03, 2003 11:56 AM To: Exchange Discussions Subject: RE: Exchange and AD Question You want a separate TREE in the forest, not a child domain. -Original Message- From: Ray Beckwith [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 03, 2003 11:54 AM To: Exchange Discussions Subject: Exchange and AD Question This question may be a little off the list subject but you guys are some of the best authorities I know so I wanted your opinions. (Note the subtle butt-kissing) Situation: Single domain forest with single Exchange Server and total 4 DC. About 85 Employees. Class C IP block with fixed IP addresses for all. We are in the process of starting up a new venture company and want to keep them relatively separate from our main organization so as they grow, they can be easily separated if so chosen. We have our web presence under ourcompany.org and have reserved a domain theircompany.com for the new company's web presence. We have also set up recipient policies in Exchange to receive email sent to theircompany.com for the first couple users we have set up in our domain. Question. What would be the best way to set up this new company in our AD organization to meet the requirements of easy separation in the future, while allowing us to continue serving them with our single Exchange server and with minimal additional expense and complexity. We have been looking into the possibility of setting up a child domain for them so that they can have separate security and domain suffix but are unsure if we can do this without adding a subnet or some other complexity. I appreciate any opinions or recommendations from the wise ones of the list (more butt-kissing). Thanks... Ray Beckwith Network Administrator California Credit Union League Information Technology [EMAIL PROTECTED] www.ccul.org Thought for the day: An expert is a person who has made all the mistakes which can be made in a very narrow field. --Niels Bohr An expert is someone who knows some of the worst mistakes that can be made in his subject, and how to avoid them. --Werner Karl Heisenberg _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=en glish To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=en glish To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=en glish To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PRO
Re: Messages supposedly not being deleted
I see a couple possibilities. 1. They are using POP3 or IMAP connection and have the mailbox set to leave messages on the server when they download. 2. They are using Outlook in Corporate/Workgroup mode over the VPN but are working offline and not synchronizing the offline folder after reading/deleting the messages. Either possibility should be relatively easy to diagnose over the phone with the user. If you have them look in their Tools menu, you can tell what mode they are in by seeing if they have the Services or Accounts selection. Services means Corporate or Workgroup, Accounts means Internet Only. From there, you can either check their offline folder settings in CW mode or have them uncheck the "Leave Messages on Server" option in their account advanced settings for Internet Only. Good luck. > Outlook 2000 > Exchange 5.5 SP4 > VPN access over broadband. > > We have a user with a computer at home they use to access their coporate > email. They are saying that messages that they have deleted in that Outlook > profile are not showing as deleted when they get back into the office. We > don't have the ability to get in front of this box to see how it is > (mis)configured. They are not using pop3 or IMAP. This is not happening to > anyone else on the same server. > > What I am wondering is if anyone has seen this behavoir when accessing the > mailbox from 2 different profiles. > > TIA > > Ken _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Tracking and auditing Exchange administrators
Not sure if this is relevant to you, but I found that anyone who has administrative permissions to exchange can bring up anyone's email via OWA without having any specific permission. I have found this an advantage for me in certain circumstances but if security is an issue with the administrators. Todd -Original Message- From: Clishe, Jason [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 03, 2003 2:58 PM To: Exchange Discussions Subject: Tracking and auditing Exchange administrators I have a client that is in the middle of a Groupwise to Exchange 2000 migration. They were a bit unsettled at the discovery that an Exchange admin can grant himself permission to read anyone's mail (something that is completely impossible in Groupwise, short of changing the users' password). They want to know how they can audit whether an admin has modified the ACL on a mailbox store to grant himself access to anyones mailbox. I know, I know, you should be able to trust your administrators, but this is a law firm and it's important that there's a paper trail. I've done some testing and come up with the following results. I wanted to run this by the group to see if anyone can confirm or deny that I'm using the most appropriate method to perform the auditing. I've set the local policy on the Exchange server to audit process tracking and privelege use. I then went into ESM and gave an account full access to a mailbox store, including send as and receive as rights. I checked the security logs and found the following 3 events (I actually found more than 3 events that appeared to be generated when I modified the permissions, but these 3 seemed most relevant): Event Type: Success Audit Event Source: Security Event Category: Privilege Use Event ID: 577 Date: 6/3/2003 Time: 11:08:06 AM User: DOMAIN\User Computer: SERVER Description: Privileged Service Called: Server: Security Service:- Primary User Name: User Primary Domain: DOMAIN Primary Logon ID: (0x0,0x29E68) Client User Name: - Client Domain: - Client Logon ID:- Privileges: SeIncreaseBasePriorityPrivilege Event Type: Success Audit Event Source: Security Event Category: Privilege Use Event ID: 577 Date: 6/3/2003 Time: 11:08:06 AM User: DOMAIN\User Computer: SERVER Description: Privileged Service Called: Server: Security Service:- Primary User Name: User Primary Domain: DOMAIN Primary Logon ID: (0x0,0x29E68) Client User Name: - Client Domain: - Client Logon ID:- Privileges: SeIncreaseBasePriorityPrivilege - Event Type: Success Audit Event Source: Security Event Category: Object Access Event ID: 565 Date: 6/3/2003 Time: 11:08:25 AM User: DOMAIN\User Computer: SERVER Description: Object Open: Object Server: Microsoft Exchange Object Type:Microsoft Exchange Database Object Name:/o=ORG/ou=First Administrative Group/cn=Configuration/cn=Servers/cn=SERVER/cn=Microsoft Private MDB New Handle ID: 0 Operation ID: {0,227067} Process ID: 1636 Primary User Name: SERVER$ Primary Domain: DOMAIN Primary Logon ID: (0x0,0x3E7) Client User Name: User Client Domain: DOMAIN Client Logon ID:(0x0,0x29E68) AccessesUnknown specific access (bit 8) Privileges - Properties: Unknown specific access (bit 8) %{d0780592-afe6-11d2-aa04-00c04f8eedd8} %{d74a8762-22b9-11d3-aa62-00c04f8eedd8} %{d74a8774-2289-11d3-aa62-00c04f8eedd8} %{cf899a6a-afe6-11d2-aa04-00c04f8eedd8} %{cffe6da4-afe6-11d2-aa04-00c04f8eedd8} %{cfc7978e-afe6-11d2-aa04-00c04f8eedd8} %{d03a086e-afe6-11d2-aa04-00c04f8eedd8} %{d74a875e-22b9-11d3-aa62-00c04f8eedd8} %{cf4b9d46-afe6-11d2-aa04-00c04f8eedd8} %{cf0b3dc8-afe6-11d2-aa04-00c04f8eedd8} %{d74a8766-22b9-11d3-aa62-00c04f8eedd8} %{d74a8769-22b9-11d3-aa62-00c04f8eedd8} %{d74a876f-22b9-11d3-aa62-00c04f8eedd8} - Does this behavior seem correct? It appears that there's multiple entries that need to be tracked in order to tell the whole story: Event ID 577 signifies that privileges have been modified, and then event ID 565 lists the objects that were accessed at the time the privileg
RE: Help for a Newbe
If you didn't use the option to back up the mailboxes individually, your way is the only way to restore one mailboxI've been there before myself. I now back up the mailboxes individually. Todd -Original Message- From: Matt Plahtinsky [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 03, 2003 2:57 PM To: Exchange Discussions Subject: Re:Help for a Newbe Using Veritas Backup Exec V8.5. Full nightly backup of the Information Store and System State. -Original Message- From: Christopher Hummert [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 03, 2003 1:57 PM To: Exchange Discussions Subject: RE: Help for a Newbe Just one mailbox. That seems like a little overkill. How are you doing your backups? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Plahtinsky Sent: Tuesday, June 03, 2003 10:26 AM To: Exchange Discussions Subject: Help for a Newbe I'm REALLY! new to exchange. I inherited a exchange server about a week ago. I need to restore a mail box. (Have not done before but have done some reading) I'll tell you guys how I plan on doing it and would you be so kind to tell me if I have left anything out. 1. build second exchange sever with same server name and same version and patch level. (Does it need to belong to the same domain or does it even need to be on a domain at all?) 2. Copy the priv1.edb and priv1.stm from tape to the restore server. 3. Mount database store and use the "eseutil" tool to create the pst for the mailbox. 4. import pst file into account needing restored. Are these 4 steps all I need or are there additional steps? Thanks for any input. Matt __ Do you Yahoo!? Yahoo! Calendar - Free online calendar with sync to Outlook(TM). http://calendar.yahoo.com _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] __ Do you Yahoo!? Yahoo! Calendar - Free online calendar with sync to Outlook(TM). http://calendar.yahoo.com _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Recovery Help. Request made from a new Exchange Admin.
You took a job as an Exchange Admin and don't know how to build a basic DR environment? stemy -Original Message- From: labigdawrg [mailto:[EMAIL PROTECTED] Posted At: Tuesday, June 03, 2003 1:28 PM Posted To: Exchange Discussion List Conversation: Recovery Help. Request made from a new Exchange Admin. Subject: Recovery Help. Request made from a new Exchange Admin. Hello All: Second day on the job as the new Exchange Admin and I need help! My employer has a two yr old backup tape of Exchange data. The Co. was using Arc-Serve 6.5. We are now using Veritas but found a version of Arc-Serve and believe we have recovered the data. Now, I need to place the data onto an Exchange Server so I can XMerge the necessary mailboxes into .pst files. Is there a way I can move the priv.edb and pub.edb files to my bridgehead or other mail servers and XMerge the needed data that is being requested for legal reasons nonetheless? Or, do I need to build a new Exchange Server? Any detailed information is much appreciated. Thank you. LABD _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
Re: IMS Corruption...
Thats kind of an old build of NAVMSE - see if you can get 2.18 from a recent Symantec AV distribution CD or from Symantec support. 2.18 bld 76 is the most recent i've seen. - Original Message - From: "Blunt, James H (Jim)" <[EMAIL PROTECTED]> To: "Exchange Discussions" <[EMAIL PROTECTED]> Sent: Tuesday, June 03, 2003 12:13 PM Subject: IMS Corruption... > Exchange 5.5, SP4 > Win2k, SP2 > NAVME Version: 2.12 (Build 59) > > I have 6,949 of the following errors in my IMS Application event log, since > 4/9/03: > > Event Type: Warning > Event Source: MSExchangeIMC > Event Category: Internal Processing > Event ID: 3038 > Date: 6/3/2003 > Time: 8:43:03 AM > User: N/A > Computer: MAIL > Description: > An attempt to remove processed messages from the outbound store queue has > failed. The removal will be retried later. If the messages are not removed > before the service is shut down, the mail will be resent at service startup > causing duplicate mail. > > This "Q" article is the exact message that I am getting and looks to be a > valid fix for my problem: > Q296879 - XFOR: Sent Messages Appear in the Internet Mail Service Queue and > Event ID 3038 Occurs > http://support.microsoft.com/default.aspx?scid=kb;en-us;296879 > > My question is this...The article says that this behavior has been observed > when running CA's PantyShield, version 4.0.4. However, I am not, would not > nor would I ever consider running this product on my Exchange box. So...can > anyone tell me why this would happen? > > _ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin:[EMAIL PROTECTED] > _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Help for a Newbe
Brick level backups take forever though especially of you have big stores. -Original Message- From: Todd Graham [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 03, 2003 12:51 PM To: Exchange Discussions If you didn't use the option to back up the mailboxes individually, your way is the only way to restore one mailboxI've been there before myself. I now back up the mailboxes individually. Todd -Original Message- From: Matt Plahtinsky [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 03, 2003 2:57 PM To: Exchange Discussions Subject: Re:Help for a Newbe Using Veritas Backup Exec V8.5. Full nightly backup of the Information Store and System State. -Original Message- From: Christopher Hummert [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 03, 2003 1:57 PM To: Exchange Discussions Subject: RE: Help for a Newbe Just one mailbox. That seems like a little overkill. How are you doing your backups? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Plahtinsky Sent: Tuesday, June 03, 2003 10:26 AM To: Exchange Discussions Subject: Help for a Newbe I'm REALLY! new to exchange. I inherited a exchange server about a week ago. I need to restore a mail box. (Have not done before but have done some reading) I'll tell you guys how I plan on doing it and would you be so kind to tell me if I have left anything out. 1. build second exchange sever with same server name and same version and patch level. (Does it need to belong to the same domain or does it even need to be on a domain at all?) 2. Copy the priv1.edb and priv1.stm from tape to the restore server. 3. Mount database store and use the "eseutil" tool to create the pst for the mailbox. 4. import pst file into account needing restored. Are these 4 steps all I need or are there additional steps? Thanks for any input. Matt __ Do you Yahoo!? Yahoo! Calendar - Free online calendar with sync to Outlook(TM). http://calendar.yahoo.com _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] __ Do you Yahoo!? Yahoo! Calendar - Free online calendar with sync to Outlook(TM). http://calendar.yahoo.com _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] This email message may contain information that is confidential and proprietary to Babcock & Brown or a third party. If you are not the intended recipient, please contact the sender and destroy the original and any copies of the original message. Babcock & Brown takes measures to protect the content of its communications. However, Babcock & Brown cannot guarantee that email messages will not be intercepted by third parties or that email messages will be free of errors or viruses. _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Help for a Newbe
True, but from his situation it seems that he has a small server. BLB might be a good idea for you, but don't rely on them as your only backup option. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Carmila Fresco Sent: Tuesday, June 03, 2003 1:07 PM To: Exchange Discussions Subject: RE: Help for a Newbe Brick level backups take forever though especially of you have big stores. -Original Message- From: Todd Graham [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 03, 2003 12:51 PM To: Exchange Discussions If you didn't use the option to back up the mailboxes individually, your way is the only way to restore one mailboxI've been there before myself. I now back up the mailboxes individually. Todd -Original Message- From: Matt Plahtinsky [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 03, 2003 2:57 PM To: Exchange Discussions Subject: Re:Help for a Newbe Using Veritas Backup Exec V8.5. Full nightly backup of the Information Store and System State. -Original Message- From: Christopher Hummert [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 03, 2003 1:57 PM To: Exchange Discussions Subject: RE: Help for a Newbe Just one mailbox. That seems like a little overkill. How are you doing your backups? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Plahtinsky Sent: Tuesday, June 03, 2003 10:26 AM To: Exchange Discussions Subject: Help for a Newbe I'm REALLY! new to exchange. I inherited a exchange server about a week ago. I need to restore a mail box. (Have not done before but have done some reading) I'll tell you guys how I plan on doing it and would you be so kind to tell me if I have left anything out. 1. build second exchange sever with same server name and same version and patch level. (Does it need to belong to the same domain or does it even need to be on a domain at all?) 2. Copy the priv1.edb and priv1.stm from tape to the restore server. 3. Mount database store and use the "eseutil" tool to create the pst for the mailbox. 4. import pst file into account needing restored. Are these 4 steps all I need or are there additional steps? Thanks for any input. Matt __ Do you Yahoo!? Yahoo! Calendar - Free online calendar with sync to Outlook(TM). http://calendar.yahoo.com _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] __ Do you Yahoo!? Yahoo! Calendar - Free online calendar with sync to Outlook(TM). http://calendar.yahoo.com _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] This email message may contain information that is confidential and proprietary to Babcock & Brown or a third party. If you are not the intended recipient, please contact the sender and destroy the original and any copies of the original message. Babcock & Brown takes measures to protect the content of its communications. However, Babcock & Brown cannot guarantee that email messages will not be intercepted by third parties or that email messages will be free of errors or viruses. _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
Re: Help for a Newbe
And do not represent a method of server recovery, so it is a duplicate process. I never back up mailboxes individually. http://www.swinc.com/resource/exch_faq_appxb.htm - Original Message - From: "Carmila Fresco" <[EMAIL PROTECTED]> To: "Exchange Discussions" <[EMAIL PROTECTED]> Sent: Tuesday, June 03, 2003 1:06 PM Subject: RE: Help for a Newbe Brick level backups take forever though especially of you have big stores. -Original Message- From: Todd Graham [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 03, 2003 12:51 PM To: Exchange Discussions If you didn't use the option to back up the mailboxes individually, your way is the only way to restore one mailboxI've been there before myself. I now back up the mailboxes individually. Todd -Original Message- From: Matt Plahtinsky [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 03, 2003 2:57 PM To: Exchange Discussions Subject: Re:Help for a Newbe Using Veritas Backup Exec V8.5. Full nightly backup of the Information Store and System State. -Original Message- From: Christopher Hummert [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 03, 2003 1:57 PM To: Exchange Discussions Subject: RE: Help for a Newbe Just one mailbox. That seems like a little overkill. How are you doing your backups? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Plahtinsky Sent: Tuesday, June 03, 2003 10:26 AM To: Exchange Discussions Subject: Help for a Newbe I'm REALLY! new to exchange. I inherited a exchange server about a week ago. I need to restore a mail box. (Have not done before but have done some reading) I'll tell you guys how I plan on doing it and would you be so kind to tell me if I have left anything out. 1. build second exchange sever with same server name and same version and patch level. (Does it need to belong to the same domain or does it even need to be on a domain at all?) 2. Copy the priv1.edb and priv1.stm from tape to the restore server. 3. Mount database store and use the "eseutil" tool to create the pst for the mailbox. 4. import pst file into account needing restored. Are these 4 steps all I need or are there additional steps? Thanks for any input. Matt __ Do you Yahoo!? Yahoo! Calendar - Free online calendar with sync to Outlook(TM). http://calendar.yahoo.com _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] __ Do you Yahoo!? Yahoo! Calendar - Free online calendar with sync to Outlook(TM). http://calendar.yahoo.com _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] This email message may contain information that is confidential and proprietary to Babcock & Brown or a third party. If you are not the intended recipient, please contact the sender and destroy the original and any copies of the original message. Babcock & Brown takes measures to protect the content of its communications. However, Babcock & Brown cannot guarantee that email messages will not be intercepted by third parties or that email messages will be free of errors or viruses. _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Help for a Newbe
>>3. Mount database store and use the "eseutil" tool to create the pst Eseutil does not create .pst files. When you get your backup restored to your recovery server (which you ought to keep around to test restores regularly), you can extract a mailbox with 'ExMerge' to .pst. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Plahtinsky Sent: Tuesday, June 03, 2003 10:26 AM To: Exchange Discussions Subject: Help for a Newbe I'm REALLY! new to exchange. I inherited a exchange server about a week ago. I need to restore a mail box. (Have not done before but have done some reading) I'll tell you guys how I plan on doing it and would you be so kind to tell me if I have left anything out. 1. build second exchange sever with same server name and same version and patch level. (Does it need to belong to the same domain or does it even need to be on a domain at all?) 2. Copy the priv1.edb and priv1.stm from tape to the restore server. 3. Mount database store and use the "eseutil" tool to create the pst for the mailbox. 4. import pst file into account needing restored. Are these 4 steps all I need or are there additional steps? Thanks for any input. Matt _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Exchange and AD Question
My understanding (flawed it might be) considering the original question and design you suggested. Says you want a separate Tree, the two branches of this tree if you will can be on different subnets one for ourcompany.org and another for theircompany.org, you do not get this with the Child domain model. You only get the seperation you suggested with the separate Tree model, or a completely separate forest. But you can't go the Forest route, well unless you went to Windows 2003 then you could do a level 3 Federated Forest to share the GAL, Calendar excetra between forests. But that is outside of what you asked. Yes you can have these two trees on separate ip address or segments if you want to do that. A Forest is one or more Trees. The trees in a forest do not share a contiguous name space. However, the trees in a forest share a common schema and global catalog. Although two orgainizations do not share a common name space, adding the new Active Directory domain as a new tree in an existing Forest allows the two orgainizations to share resources and administrative Functions. In this model I do belive you can share a single Exchange 2000 Server and maintain the structure as you asked. -Original Message- From: Ray Beckwith [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 03, 2003 12:06 PM To: Exchange Discussions Subject: RE: Exchange and AD Question In either the child-domain or new tree scenario, is there a need to separate them onto a subnet or can they just be assigned IP addresses from our existing class C block? I wanted to clarify that this was one of the important questions that I have not been able to find a definitive answer on Thanks again for your assistance. ...Ray Thought for the day: An expert is a person who has made all the mistakes which can be made in a very narrow field. --Niels Bohr An expert is someone who knows some of the worst mistakes that can be made in his subject, and how to avoid them. --Werner Karl Heisenberg -Original Message- From: Akerlund, Scott [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 03, 2003 12:04 PM To: Exchange Discussions Subject: RE: Exchange and AD Question My understanding is that so long as it is all part of the same "root" forest you should have no problem with that. If I am wrong I am sure someone here will be more than happy to correct me. Scott -Original Message- From: Ray Beckwith [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 03, 2003 12:01 PM To: Exchange Discussions Subject: RE: Exchange and AD Question But, we found a reference that said that an Exchange server could not serve 2 trees without a third party application. Is my information bad on that subject? Thanks...Ray Thought for the day: An expert is a person who has made all the mistakes which can be made in a very narrow field. --Niels Bohr An expert is someone who knows some of the worst mistakes that can be made in his subject, and how to avoid them. --Werner Karl Heisenberg -Original Message- From: Akerlund, Scott [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 03, 2003 11:56 AM To: Exchange Discussions Subject: RE: Exchange and AD Question You want a separate TREE in the forest, not a child domain. -Original Message- From: Ray Beckwith [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 03, 2003 11:54 AM To: Exchange Discussions Subject: Exchange and AD Question This question may be a little off the list subject but you guys are some of the best authorities I know so I wanted your opinions. (Note the subtle butt-kissing) Situation: Single domain forest with single Exchange Server and total 4 DC. About 85 Employees. Class C IP block with fixed IP addresses for all. We are in the process of starting up a new venture company and want to keep them relatively separate from our main organization so as they grow, they can be easily separated if so chosen. We have our web presence under ourcompany.org and have reserved a domain theircompany.com for the new company's web presence. We have also set up recipient policies in Exchange to receive email sent to theircompany.com for the first couple users we have set up in our domain. Question. What would be the best way to set up this new company in our AD organization to meet the requirements of easy separation in the future, while allowing us to continue serving them with our single Exchange server and with minimal additional expense and complexity. We have been looking into the possibility of setting up a child domain for them so that they can have separate security and domain suffix but are unsure if we can do this without adding a subnet or some other complexity. I appreciate any opinions or recommendations from the wise ones of the list (more butt-kissing). Thanks... Ray Beckwith Network Administrator California Credit Union Leagu
RR: Help for a Newbe
Thanks for everyones help. One last question. When building my restore exchange server, how is permissions handled? Do I also need the server to connect to a DC to mount the store and run the ExMerge tool? -Original Message- From: William Lefkovics [TX] [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 03, 2003 4:29 PM To: Exchange Discussions Subject: RE: Help for a Newbe >>3. Mount database store and use the "eseutil" tool to create the pst Eseutil does not create .pst files. When you get your backup restored to your recovery server (which you ought to keep around to test restores regularly), you can extract a mailbox with 'ExMerge' to .pst. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Plahtinsky Sent: Tuesday, June 03, 2003 10:26 AM To: Exchange Discussions Subject: Help for a Newbe I'm REALLY! new to exchange. I inherited a exchange server about a week ago. I need to restore a mail box. (Have not done before but have done some reading) I'll tell you guys how I plan on doing it and would you be so kind to tell me if I have left anything out. 1. build second exchange sever with same server name and same version and patch level. (Does it need to belong to the same domain or does it even need to be on a domain at all?) 2. Copy the priv1.edb and priv1.stm from tape to the restore server. 3. Mount database store and use the "eseutil" tool to create the pst for the mailbox. 4. import pst file into account needing restored. Are these 4 steps all I need or are there additional steps? Thanks for any input. Matt _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] __ Do you Yahoo!? Yahoo! Calendar - Free online calendar with sync to Outlook(TM). http://calendar.yahoo.com _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: IMS Corruption...
Actually, now that I stop and think about it, this seems even stranger... Our IMS and Bridgehead machines run on very old hardware. Because of that, we are not running AV on either machine, only on the mailbox servers. So with no AV on the box trying to scan messages and attachments as the come thru the IMS, why would they have started seeing corruption all of a sudden? Would an increased amount of Spam being processed by the IMS cause this on old hardware? Our company has seen a ten-fold increase since January, in the number of NDR's being processed by the IMS and a five-fold increase in both the quantity of Spam blocked at the IMS and the amount of Spam still getting through and being reported. -Original Message- From: Greg S [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 03, 2003 12:57 PM To: Exchange Discussions Subject: Re: IMS Corruption... Thats kind of an old build of NAVMSE - see if you can get 2.18 from a recent Symantec AV distribution CD or from Symantec support. 2.18 bld 76 is the most recent i've seen. - Original Message - From: "Blunt, James H (Jim)" <[EMAIL PROTECTED]> To: "Exchange Discussions" <[EMAIL PROTECTED]> Sent: Tuesday, June 03, 2003 12:13 PM Subject: IMS Corruption... > Exchange 5.5, SP4 > Win2k, SP2 > NAVME Version: 2.12 (Build 59) > > I have 6,949 of the following errors in my IMS Application event log, since > 4/9/03: > > Event Type: Warning > Event Source: MSExchangeIMC > Event Category: Internal Processing > Event ID: 3038 > Date: 6/3/2003 > Time: 8:43:03 AM > User: N/A > Computer: MAIL > Description: > An attempt to remove processed messages from the outbound store queue > has failed. The removal will be retried later. If the messages are not > removed before the service is shut down, the mail will be resent at > service startup > causing duplicate mail. > > This "Q" article is the exact message that I am getting and looks to > be a valid fix for my problem: Q296879 - XFOR: Sent Messages Appear in > the Internet Mail Service Queue and > Event ID 3038 Occurs > http://support.microsoft.com/default.aspx?scid=kb;en-us;296879 > > My question is this...The article says that this behavior has been observed > when running CA's PantyShield, version 4.0.4. However, I am not, > would not > nor would I ever consider running this product on my Exchange box. So...can > anyone tell me why this would happen? > > _ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin:[EMAIL PROTECTED] > _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
Re: RR: Help for a Newbe
you do not have to join the restore box to a domain, just make sure you have these the same as you production system, orginazation [No default] administrative group - Site [First Administrative] Storage Group [First Storage Group] Databases in storage group [pub1.stm][pub1.edb] * If you have any leagacy DN stems you will have to fix these manually permissions are handled by the DB. - John Q Jr. From: Matt Plahtinsky <[EMAIL PROTECTED]> Reply-To: "Exchange Discussions" <[EMAIL PROTECTED]> To: "Exchange Discussions" <[EMAIL PROTECTED]> Subject: RR: Help for a Newbe Date: Tue, 3 Jun 2003 13:45:00 -0700 (PDT) Thanks for everyones help. One last question. When building my restore exchange server, how is permissions handled? Do I also need the server to connect to a DC to mount the store and run the ExMerge tool? -Original Message- From: William Lefkovics [TX] [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 03, 2003 4:29 PM To: Exchange Discussions Subject: RE: Help for a Newbe >>3. Mount database store and use the "eseutil" tool to create the pst Eseutil does not create .pst files. When you get your backup restored to your recovery server (which you ought to keep around to test restores regularly), you can extract a mailbox with 'ExMerge' to .pst. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Plahtinsky Sent: Tuesday, June 03, 2003 10:26 AM To: Exchange Discussions Subject: Help for a Newbe I'm REALLY! new to exchange. I inherited a exchange server about a week ago. I need to restore a mail box. (Have not done before but have done some reading) I'll tell you guys how I plan on doing it and would you be so kind to tell me if I have left anything out. 1. build second exchange sever with same server name and same version and patch level. (Does it need to belong to the same domain or does it even need to be on a domain at all?) 2. Copy the priv1.edb and priv1.stm from tape to the restore server. 3. Mount database store and use the "eseutil" tool to create the pst for the mailbox. 4. import pst file into account needing restored. Are these 4 steps all I need or are there additional steps? Thanks for any input. Matt _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] __ Do you Yahoo!? Yahoo! Calendar - Free online calendar with sync to Outlook(TM). http://calendar.yahoo.com _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ MSN 8 with e-mail virus protection service: 2 months FREE* http://join.msn.com/?page=features/virus _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: RR: Help for a Newbe
Would you mind enlightening all of us and explaining how you can install Exchange 2000 on a server that isn't a member of a domain? Jason > > -Original Message- > From: The Geek Q [mailto:[EMAIL PROTECTED] > Sent: Tuesday, June 03, 2003 7:12 PM > To: Exchange Discussions > > you do not have to join the restore box to a domain, just > make sure you have these the same as you production system, > > orginazation [No default] > administrative group - Site [First Administrative] Storage > Group [First Storage Group] Databases in storage group > [pub1.stm][pub1.edb] > * If you have any leagacy DN stems you will have to fix these manually > > permissions are handled by the DB. > > - John Q Jr. > > >From: Matt Plahtinsky <[EMAIL PROTECTED]> > >Reply-To: "Exchange Discussions" <[EMAIL PROTECTED]> > >To: "Exchange Discussions" <[EMAIL PROTECTED]> > >Subject: RR: Help for a Newbe > >Date: Tue, 3 Jun 2003 13:45:00 -0700 (PDT) > > > >Thanks for everyone's help. One last question. When building my > >restore exchange server, how is permissions handled? Do I also need > >the server to connect to a DC to mount the store and run > the ExMerge > >tool? > > > >-Original Message- > >From: William Lefkovics [TX] > >[mailto:[EMAIL PROTECTED] > >Sent: Tuesday, June 03, 2003 4:29 PM > >To: Exchange Discussions > >Subject: RE: Help for a Newbe > > > > > > > > >>3. Mount database store and use the "eseutil" tool > >to create the pst > > > >Eseutil does not create .pst files. > > > >When you get your backup restored to your recovery server (which you > >ought to keep around to test restores regularly), you can extract a > >mailbox with 'ExMerge' to .pst. > > > > > >-Original Message- > >From: [EMAIL PROTECTED] > >[mailto:[EMAIL PROTECTED] On Behalf Of Matt > >Plahtinsky > >Sent: Tuesday, June 03, 2003 10:26 AM > >To: Exchange Discussions > >Subject: Help for a Newbe > > > > > >I'm REALLY! new to exchange. I inherited a exchange > >server about a week ago. I need to restore a mail > >box. (Have not done before but have done some > >reading) I'll tell you guys how I plan on doing it and > would you be > >so kind to tell me if I have left anything out. 1. build second > >exchange sever with same server name and same version and > patch level. > >(Does it need to belong to the same domain or does it even > need to be > >on a domain at all?) 2. Copy the priv1.edb and priv1.stm > from tape to > >the restore server. 3. Mount database store and use the "eseutil" > >tool to create the pst for the mailbox. 4. > >import pst file into account needing restored. Are these 4 > steps all I > >need or are there additional > >steps? Thanks for any input. > > > > > > > >Matt > > > > > > > > > > > >_ > >List posting FAQ: > >http://www.swinc.com/resource/exch_faq.htm > >Web Interface: > >http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&; > text_mode= > >&lang=english > >To unsubscribe: > >mailto:[EMAIL PROTECTED] > >Exchange List admin:[EMAIL PROTECTED] > > > > > >__ > >Do you Yahoo!? > >Yahoo! Calendar - Free online calendar with sync to Outlook(TM). > >http://calendar.yahoo.com > > > >_ > >List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > >Web Interface: > >http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&; > text_mode=&lang=english > >To unsubscribe: mailto:[EMAIL PROTECTED] > >Exchange List admin:[EMAIL PROTECTED] > > _ > MSN 8 with e-mail virus protection service: 2 months FREE* > http://join.msn.com/?page=features/virus > > > _ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t > ext_mode=&lang=english > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin:[EMAIL PROTECTED] > > _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Help for a Newbe
You need a completely separate forest for your recovery server, isolated from your production environment. Obviously, to build a separate forest you need DNS and at least one domain controller, and there are some other very specific requirements that need to be met. The following article should help you out. Jason http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID= 9E52BAFC-5C33-46B9-AF14-04E4D989EF6B > > -Original Message- > From: Matt Plahtinsky [mailto:[EMAIL PROTECTED] > Sent: Tuesday, June 03, 2003 4:45 PM > To: Exchange Discussions > > Thanks for everyone's help. One last question. When > building my restore exchange server, how is permissions > handled? Do I also need the server to connect to a DC to > mount the store and run the ExMerge tool? > > -Original Message- > From: William Lefkovics [TX] > [mailto:[EMAIL PROTECTED] > Sent: Tuesday, June 03, 2003 4:29 PM > To: Exchange Discussions > Subject: RE: Help for a Newbe > > > > >>3. Mount database store and use the "eseutil" tool > to create the pst > > Eseutil does not create .pst files. > > When you get your backup restored to your recovery > server (which you ought to keep around to test > restores regularly), you can extract a mailbox with > 'ExMerge' to .pst. > > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf > Of Matt Plahtinsky > Sent: Tuesday, June 03, 2003 10:26 AM > To: Exchange Discussions > Subject: Help for a Newbe > > > I'm REALLY! new to exchange. I inherited a exchange > server about a week ago. I need to restore a mail > box. (Have not done before but have done some > reading) I'll tell you guys how I plan on doing it > and would you be so kind to tell me if I have left > anything out. 1. build second exchange sever with > same server name and same version and patch level. > (Does it need to belong to the same domain or does it > even need to be on a domain at all?) 2. Copy the > priv1.edb and priv1.stm from tape to the restore > server. 3. Mount database store and use the > "eseutil" tool to create the pst for the mailbox. 4. > import pst file into account needing restored. Are > these 4 steps all I need or are there additional > steps? Thanks for any input. > > > > Matt > > > > > > _ > List posting FAQ: > http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t > ext_mode=&lang=english > To unsubscribe: > mailto:[EMAIL PROTECTED] > Exchange List admin:[EMAIL PROTECTED] > > > __ > Do you Yahoo!? > Yahoo! Calendar - Free online calendar with sync to Outlook(TM). > http://calendar.yahoo.com > > _ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t > ext_mode=&lang=english > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin:[EMAIL PROTECTED] > > _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
Re: Is Anybody using IM on Exchange 2000? I can't get it to work....
Is it configured to use a firewall in the global settings? Exchange 2000 Exchange System Manager Global Settings Right-click Instant Messaging Settings, and then open the properties Click the Firewall Topology tab Unselect the option, "This network is protected by a firewall" Using NAT or a proxy? XCCC: Unable to Receive Instant Messages After Logging On Through a Proxy Server or by Using NAT http://support.microsoft.com/default.aspx?scid=kb;en-us;281610 - Original Message - From: "Todd Graham" <[EMAIL PROTECTED]> To: "Exchange Discussions" <[EMAIL PROTECTED]> Sent: Monday, June 02, 2003 10:56 AM Subject: RE: Is Anybody using IM on Exchange 2000? I can't get it to work There is no personal firewall, I will try to flush the DNS on both machines, and the correct IM version is on both. I also noticed that if I sign on I can see who is on but it doesn't update their status unless I signoff and on again. Weird. Todd -Original Message- From: Ali Wilkes (IT) [mailto:[EMAIL PROTECTED] Sent: Monday, June 02, 2003 1:46 PM To: Exchange Discussions Subject: RE: Is Anybody using IM on Exchange 2000? I can't get it to work Personal Firewall? Flush DNS on either pc? Correct IM version on either pc? (exchange version is different) -Original Message- From: Todd Graham [mailto:[EMAIL PROTECTED] Posted At: Monday, June 02, 2003 11:28 AM Posted To: List - Exchange Server List Conversation: Is Anybody using IM on Exchange 2000? I can't get it to work Subject: Is Anybody using IM on Exchange 2000? I can't get it to work I have installed the IM as the tech net articles describe. I have added a (A) host file for the server, I added the _rvp service in DNS. The virtual server appears to set up correctly. I can see the other person i enabled with IM but cannot send messages. I keep getting "message could not be delivered". Anyone have any ideas? Thanks, Todd _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Is Anybody using IM on Exchange 2000? I can't get it to work....
We ran into some issues with it as well with folks logging in w/our VPN solution - FWIW, changing settings on the Accounts tab (Exchange portion) from "Default" to "Polling" (and accepting default of 10 min) allowed people to reply to others w/out issue once changed (and client restarted). -Original Message- From: Todd Graham [mailto:[EMAIL PROTECTED] Sent: Monday, June 02, 2003 12:56 PM To: Exchange Discussions There is no personal firewall, I will try to flush the DNS on both machines, and the correct IM version is on both. I also noticed that if I sign on I can see who is on but it doesn't update their status unless I signoff and on again. Weird. Todd -Original Message- From: Ali Wilkes (IT) [mailto:[EMAIL PROTECTED] Sent: Monday, June 02, 2003 1:46 PM To: Exchange Discussions Subject: RE: Is Anybody using IM on Exchange 2000? I can't get it to work Personal Firewall? Flush DNS on either pc? Correct IM version on either pc? (exchange version is different) -Original Message- From: Todd Graham [mailto:[EMAIL PROTECTED] Posted At: Monday, June 02, 2003 11:28 AM Posted To: List - Exchange Server List Conversation: Is Anybody using IM on Exchange 2000? I can't get it to work Subject: Is Anybody using IM on Exchange 2000? I can't get it to work I have installed the IM as the tech net articles describe. I have added a (A) host file for the server, I added the _rvp service in DNS. The virtual server appears to set up correctly. I can see the other person i enabled with IM but cannot send messages. I keep getting "message could not be delivered". Anyone have any ideas? Thanks, Todd _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
Re: TechEd
I'm asleep at the back of several of the Exchange specific presentations. Except for the one Andy Webb did. - Original Message - From: "Mynhier, Stephen - contractor" <[EMAIL PROTECTED]> To: "Exchange Discussions" <[EMAIL PROTECTED]> Sent: Monday, June 02, 2003 1:10 PM Subject: TechEd > Who else is here? > > stemy > _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: TechEd
I am. Hoping the sessions start having more new info instead of just rehashing most of the same stuff we saw at MEC2002. -Original Message- From: Mynhier, Stephen - contractor [mailto:[EMAIL PROTECTED] Sent: Monday, June 02, 2003 3:11 PM To: Exchange Discussions Who else is here? stemy .+x)r뺷yiǶ)٥+rrʸW{j [EMAIL PROTECTED])j¹%Ë\¢o܂&âùr®+)éíz·±r§ë^Æ٨uéZ§X¬ :.˛±Êâm隊[hæ¯yì\ ©àz[,Ã)ärÅÈZËZvh§+-i٢Ì2G(
RE: Sending-Receiving Limit
Check the size limit on your SMTP connector(s) for your routing group & SMTP virtual server on their mailbox server? -Original Message- From: Exchange List [mailto:[EMAIL PROTECTED] Sent: Saturday, May 31, 2003 12:39 AM To: Exchange Discussions Dear list, I have applied a global limit of 2 MB on sending and receiving message size. One of the user wants to receive 5 MB of mail from Internet, I have increase the receive limit of that particular user by taking user property, but it is not working. What can be the problem. Help in this regard is requested. Thanks & Regards, Irf. _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Sending-Receiving Limit
You might also want to check Q322679, gives info on where to set the limits and what effect each has on your organization http://support.microsoft.com/default.aspx?scid=kb;en-us;Q322679&gssnb=1 -Original Message- From: Scott Pease Sent: Wednesday, June 04, 2003 12:01 AM To: Exchange Discussions Check the size limit on your SMTP connector(s) for your routing group & SMTP virtual server on their mailbox server? -Original Message- From: Exchange List [mailto:[EMAIL PROTECTED] Sent: Saturday, May 31, 2003 12:39 AM To: Exchange Discussions Dear list, I have applied a global limit of 2 MB on sending and receiving message size. One of the user wants to receive 5 MB of mail from Internet, I have increase the receive limit of that particular user by taking user property, but it is not working. What can be the problem. Help in this regard is requested. Thanks & Regards, Irf. _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Backing up the M Drive
Just out of curiosity, which FAQ do you refer to, the one in the siggy? Are there any more good websites with good read's for exchange? There was a good website which I found this list on, but I forgotten what website that was :o -Original Message- From: Blunt, James H (Jim) [mailto:[EMAIL PROTECTED] Sent: 02 June 2003 18:27 To: Exchange Discussions Subject: RE: Backing up the M Drive Neil, Have you even bothered to read the FAQ? All of the questions you are asking about restores/backups/retention are all in there. Jim -Original Message- From: Neil Doody [mailto:[EMAIL PROTECTED] Sent: Monday, June 02, 2003 10:18 AM To: Exchange Discussions Subject: RE: Backing up the M Drive Ahh right, so brick level backups albeit by Veritas or Arcserve is a bad idea anyway? Shame we have spent so much on Arcserve already, I wont recommend exchange agents and Veritas Backup then! So item retention is the way to go then. Let me think, this will allow me to restore files for a duration I set when setting up this retention (I assume?). That will have deleted files covered, the next scenario would be that the server crashes, I will only be wanting to do a full restore in this case. Okay, one last scenario, we have a leaver and we delete there mailbox from the server, then someone says "oh can you get it back". I guess the best policy for this is to put leavers on a 5 day standby. I think that pretty much covers all events, and could be a better and cheaper alternative. Also a reason for them to give me more hard disk space in my servers ;) -Original Message- From: Bob Sadler [mailto:[EMAIL PROTECTED] Sent: 02 June 2003 18:10 To: Exchange Discussions Subject: RE: Backing up the M Drive The only way you can restore a single mailbox, as you described, is to have Brick Level Backups turned on. Before you say, "Great", please consider this. When you run BLB's you do so by opening EVERY SINGLE EMAIL BOX to back them up. Not only is this time consuming, but is a great resource hog as well, and really quite un-necessary. Instead of using BLB's to correct user-errors such as deleting their whole inbox, you should implement Item Retention, and correct user permissions on public folders. Don't allow your users to delete ANY Public Folder, this way, you won't ever have to recreate it when they do this "accidentally". To achieve Item Retention, go to www.microsoft.com and do a lookup in the Knowledge Base for ITEM RETENTION. There are more then enough Q Articles there to explain how to set this up. Hth, Bob Sadler City of Leawood, KS, USA WAN/Internet Specialist 913-339-6700 x194 -Original Message- From: Neil Doody [mailto:[EMAIL PROTECTED] Sent: Monday, June 02, 2003 12:05 PM To: Exchange Discussions Subject: RE: Backing up the M Drive I was looking into the built in backup and noticed Exchange Options. Though I could not see anyway of selectively restoring only one mailbox via this method, or public folder using this backup? Is there a way of choosing which mailboxes you do and don't want to restore using the built in backup? When I try to expand the "Microsoft Exchange" tab it asks me which server do I want to query. I give it one, but the box never becomes un-greyed, the exchange server is local to where I am trying to run Microsoft Backup. The option for "Microsoft Exchange Server" is available and I can choose the server I want, but like I said previously this does not seem to allow for selective restore/backup on a per mailbox scale. -Original Message- From: Dickenson, Steven [mailto:[EMAIL PROTECTED] Sent: 02 June 2003 17:48 To: Exchange Discussions Subject: RE: Backing up the M Drive Ouch. Don't. Everything I've read says that this will be the seventh sign that brings about Armageddon. Use NTBackup on your Exchange 2000 Server to backup to a file, then backup that file to tape using Arcserve. Steven --- Steven Dickenson <[EMAIL PROTECTED]> Network Administrator The Key School, Annapolis Maryland -Original Message- From: Neil Doody [mailto:[EMAIL PROTECTED] Sent: Monday, June 02, 2003 11:37 AM To: Exchange Discussions Subject: Backing up the M Drive I honestly have come to conclusion today that my arcserve backups would be a lot better off backing up the M drive, and not using the Exchange Agent at all. Does anyone else get this feeling ? _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL
RE: Tracking and auditing Exchange administrators
Jason, By default the Exchange admin cannot read Emails (same as GroupWise), only if he has implemented the Q article on how to get round this security. I would say to set it back so they cannot go into emails. Cheers Paul Standards are like toothbrushes, everyone wants one but not yours -Original Message- From: Clishe, Jason [mailto:[EMAIL PROTECTED] Sent: 03 June 2003 19:58 To: Exchange Discussions Subject: Tracking and auditing Exchange administrators I have a client that is in the middle of a Groupwise to Exchange 2000 migration. They were a bit unsettled at the discovery that an Exchange admin can grant himself permission to read anyone's mail (something that is completely impossible in Groupwise, short of changing the users' password). They want to know how they can audit whether an admin has modified the ACL on a mailbox store to grant himself access to anyones mailbox. I know, I know, you should be able to trust your administrators, but this is a law firm and it's important that there's a paper trail. I've done some testing and come up with the following results. I wanted to run this by the group to see if anyone can confirm or deny that I'm using the most appropriate method to perform the auditing. I've set the local policy on the Exchange server to audit process tracking and privelege use. I then went into ESM and gave an account full access to a mailbox store, including send as and receive as rights. I checked the security logs and found the following 3 events (I actually found more than 3 events that appeared to be generated when I modified the permissions, but these 3 seemed most relevant): Event Type: Success Audit Event Source: Security Event Category: Privilege Use Event ID: 577 Date: 6/3/2003 Time: 11:08:06 AM User: DOMAIN\User Computer: SERVER Description: Privileged Service Called: Server: Security Service:- Primary User Name: User Primary Domain: DOMAIN Primary Logon ID: (0x0,0x29E68) Client User Name: - Client Domain: - Client Logon ID:- Privileges: SeIncreaseBasePriorityPrivilege Event Type: Success Audit Event Source: Security Event Category: Privilege Use Event ID: 577 Date: 6/3/2003 Time: 11:08:06 AM User: DOMAIN\User Computer: SERVER Description: Privileged Service Called: Server: Security Service:- Primary User Name: User Primary Domain: DOMAIN Primary Logon ID: (0x0,0x29E68) Client User Name: - Client Domain: - Client Logon ID:- Privileges: SeIncreaseBasePriorityPrivilege - Event Type: Success Audit Event Source: Security Event Category: Object Access Event ID: 565 Date: 6/3/2003 Time: 11:08:25 AM User: DOMAIN\User Computer: SERVER Description: Object Open: Object Server: Microsoft Exchange Object Type:Microsoft Exchange Database Object Name:/o=ORG/ou=First Administrative Group/cn=Configuration/cn=Servers/cn=SERVER/cn=Microsoft Private MDB New Handle ID: 0 Operation ID: {0,227067} Process ID: 1636 Primary User Name: SERVER$ Primary Domain: DOMAIN Primary Logon ID: (0x0,0x3E7) Client User Name: User Client Domain: DOMAIN Client Logon ID:(0x0,0x29E68) AccessesUnknown specific access (bit 8) Privileges - Properties: Unknown specific access (bit 8) %{d0780592-afe6-11d2-aa04-00c04f8eedd8} %{d74a8762-22b9-11d3-aa62-00c04f8eedd8} %{d74a8774-2289-11d3-aa62-00c04f8eedd8} %{cf899a6a-afe6-11d2-aa04-00c04f8eedd8} %{cffe6da4-afe6-11d2-aa04-00c04f8eedd8} %{cfc7978e-afe6-11d2-aa04-00c04f8eedd8} %{d03a086e-afe6-11d2-aa04-00c04f8eedd8} %{d74a875e-22b9-11d3-aa62-00c04f8eedd8} %{cf4b9d46-afe6-11d2-aa04-00c04f8eedd8} %{cf0b3dc8-afe6-11d2-aa04-00c04f8eedd8} %{d74a8766-22b9-11d3-aa62-00c04f8eedd8} %{d74a8769-22b9-11d3-aa62-00c04f8eedd8} %{d74a876f-22b9-11d3-aa62-00c04f8eedd8} - Does this behavior seem correct? It appears that there's multiple entries that need to be tracked in order to tell the whole story: Event ID 577 signifies that privileges have been modified, and then event ID 565 lists the objects that were accessed at the time the privileges were modified. Not exact
RE: Exchange and AD Question
That is incorrect, for the most part. You can have as many separate email domains (ie @company.com) on an Exchange server as you want, but there can be only one Exchange organization per forest. Therefore, there is no difference between parent/child domains and two tree domains - both would have to be served by a single Exchange organization. Microsoft maintains a good set of resources in their Service Providers section that has links to whitepapers on hosting multiple companies on a single Exchange organization. http://www.microsoft.com/serviceproviders/ Roger -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. > -Original Message- > From: Ray Beckwith [mailto:[EMAIL PROTECTED] > Sent: Tuesday, June 03, 2003 3:01 PM > To: Exchange Discussions > Subject: RE: Exchange and AD Question > > > But, we found a reference that said that an Exchange server > could not serve 2 trees without a third party application. Is > my information bad on that subject? > > > > Thanks...Ray > > Thought for the day: > An expert is a person who has made all the mistakes which can > be made in a very narrow field. > --Niels Bohr > > An expert is someone who knows some of the worst mistakes > that can be made in his subject, and how to avoid them. > --Werner Karl Heisenberg > > > > > > -Original Message- > From: Akerlund, Scott [mailto:[EMAIL PROTECTED] > Sent: Tuesday, June 03, 2003 11:56 AM > To: Exchange Discussions > Subject: RE: Exchange and AD Question > > > You want a separate TREE in the forest, not a child domain. > > -Original Message- > From: Ray Beckwith [mailto:[EMAIL PROTECTED] > Sent: Tuesday, June 03, 2003 11:54 AM > To: Exchange Discussions > Subject: Exchange and AD Question > > > This question may be a little off the list subject but you > guys are some of the best authorities I know so I wanted your > opinions. (Note the subtle > butt-kissing) > > Situation: > Single domain forest with single Exchange Server and total 4 > DC. About 85 Employees. Class C IP block with fixed IP > addresses for all. We are in the process of starting up a new > venture company and want to keep them relatively separate > from our main organization so as they grow, they can be > easily separated if so chosen. We have our web presence under > ourcompany.org and have reserved a domain theircompany.com > for the new company's web presence. We have also set up > recipient policies in Exchange to receive email sent to > theircompany.com for the first couple users we have set up in > our domain. > > Question. > What would be the best way to set up this new company in our > AD organization to meet the requirements of easy separation > in the future, while allowing us to continue serving them > with our single Exchange server and with minimal additional > expense and complexity. > > We have been looking into the possibility of setting up a > child domain for them so that they can have separate security > and domain suffix but are unsure if we can do this without > adding a subnet or some other complexity. > > I appreciate any opinions or recommendations from the wise > ones of the list (more butt-kissing). > > Thanks... > > Ray Beckwith > Network Administrator > California Credit Union League > Information Technology > [EMAIL PROTECTED] > www.ccul.org > > Thought for the day: > An expert is a person who has made all the mistakes which can > be made in a very narrow field. > --Niels Bohr > > An expert is someone who knows some of the worst mistakes > that can be made in his subject, and how to avoid them. > --Werner Karl Heisenberg > > > > > > _ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t ext_mode=&lang=en glish To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/
Exchange 5.5 client within a site
Hi, EX55 clients within a site when send or reply to each other is resolve name base on DN by default ->x.400->SMTP, in that order right? What about in E2K? Can someone please explain to me how this work? I'm clueless. Thanks!!! AP _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: TechEd
Any news on the release yet? -Original Message- From: William Lefkovics [TX] [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 04, 2003 12:43 AM To: Exchange Discussions I'm asleep at the back of several of the Exchange specific presentations. Except for the one Andy Webb did. - Original Message - From: "Mynhier, Stephen - contractor" <[EMAIL PROTECTED]> To: "Exchange Discussions" <[EMAIL PROTECTED]> Sent: Monday, June 02, 2003 1:10 PM Subject: TechEd > Who else is here? > > stemy > _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
Re: TechEd
not me:( - Original Message - From: "Mynhier, Stephen - contractor" <[EMAIL PROTECTED]> To: "Exchange Discussions" <[EMAIL PROTECTED]> Sent: Monday, June 02, 2003 16:10 Subject: TechEd > Who else is here? > > stemy > .+x )r뺷 yi )ퟘí¶¥+rrʸW{jr ZZvh˧+-i٢2̞G( _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
Re: TechEd
Ya, it felt great. - Original Message - From: "Woodruff, Michael" <[EMAIL PROTECTED]> To: "Exchange Discussions" <[EMAIL PROTECTED]> Sent: Wednesday, June 04, 2003 5:21 AM Subject: RE: TechEd Any news on the release yet? -Original Message- From: William Lefkovics [TX] [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 04, 2003 12:43 AM To: Exchange Discussions I'm asleep at the back of several of the Exchange specific presentations. Except for the one Andy Webb did. - Original Message - From: "Mynhier, Stephen - contractor" <[EMAIL PROTECTED]> To: "Exchange Discussions" <[EMAIL PROTECTED]> Sent: Monday, June 02, 2003 1:10 PM Subject: TechEd > Who else is here? > > stemy > _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]