Re: OAB 0X8004010F Error

[Alex Fontana]

Have you tried running a "Test E-mail AutoConfiguration" test from OLK2007?
I would test using both tcp/ip and https and see if there are any errors
related to your autodiscover/oab settings...

-alex

On Wed, Jan 28, 2009 at 9:29 AM, Sam Cayze  wrote:

>  The other way around.  If the PCs are connected local to the network (NOT
> Outlook Anywhere), I get the errors.
>
> If I they ARE connected via Outlook Anywhere, I don't get the errors.
>
> Cached mode is turned on in all scenarios.
>
> Thanks for chirming in :)
>
>  --
> *From:* Michael B. Smith [mailto:mich...@theessentialexchange.com]
> *Sent:* Wednesday, January 28, 2009 11:22 AM
> *To:* MS-Exchange Admin Issues
> *Subject:* RE: OAB 0X8004010F Error
>
>  I am not sure I understand.
>
>
>
> You mean you are connecting in cached mode via TCP instead of HTTPS when
> you get the error?
>
>
>
> Regards,
>
>
>
> Michael B. Smith, MCITP:SA,EMA/MCSE/Exchange MVP
>
> My blog: 
> http://TheEssentialExchange.com/blogs/michael
>
> I'll be at TEC'2009! http://www.tec2009.com/vegas/index.php
>
>
>
> *From:* Sam Cayze [mailto:sam.ca...@rollouts.com]
> *Sent:* Wednesday, January 28, 2009 12:16 PM
> *To:* MS-Exchange Admin Issues
> *Subject:* RE: OAB 0X8004010F Error
>
>
>
> If I crack up logging on MSExchangeSA\OAL Generator, I don't see any
> errors.
>
>
>
> Event Type: Information
> Event Source: MSExchangeSA
> Event Category: OAL Generator
> Event ID: 9107
> Date:  1/27/2009
> Time:  2:51:11 PM
> User:  N/A
> Computer: MAIL01
> Description:
> Offline address list generation finished.
> - ROLLOUTS1
>
>
>
>
>
>
> Although, I did just find this... never seen this posted yet
>
> Event Type: Error
> Event Source: MSExchangeSA
> Event Category: General
> Event ID: 9301
> Date:  1/27/2009
> Time:  2:45:14 PM
> User:  N/A
> Computer: MAIL01
> Description:
> Failed to generate offline Address Book
> /dc=com/dc=rollouts/dc=corp/cn=Configuration/cn=Services/cn=Microsoft
> Exchange/cn=ROLLOUTS INCORPORATED/cn=Address Lists Container/cn=Offline
> Address Lists/cn=ROLLOUTS, error '80072030'
>
>
>
>
>
>
>
>  --
>
> *From:* Sam Cayze [mailto:sam.ca...@rollouts.com]
> *Sent:* Wednesday, January 28, 2009 11:11 AM
> *To:* MS-Exchange Admin Issues
> *Subject:* RE: OAB 0X8004010F Error
>
> Total oops!
>
>
>
> Everything is 2003 (Client, server, network, outlook), SP2 on exch,
> single/no replicas.
>
>
>
> Public folder structure:
>
>
>
> 'New' is a test OAB I created last night to make sure changes were being
> updated to the system folders.  Not sure what the EX:/ folder is all about.
> Dates on the contents are very very old.
>
>
>  --
>
> *From:* Michael B. Smith [mailto:mich...@theessentialexchange.com]
> *Sent:* Wednesday, January 28, 2009 11:05 AM
> *To:* MS-Exchange Admin Issues
> *Subject:* RE: OAB 0X8004010F Error
>
> Exchange version and backend topology? (And yes, it may be relevant)
>
>
>
> Regards,
>
>
>
> Michael B. Smith, MCITP:SA,EMA/MCSE/Exchange MVP
>
> My blog: 
> http://TheEssentialExchange.com/blogs/michael
>
> I'll be at TEC'2009! http://www.tec2009.com/vegas/index.php
>
>
>
> *From:* Sam Cayze [mailto:sam.ca...@rollouts.com]
> *Sent:* Wednesday, January 28, 2009 11:37 AM
> *To:* MS-Exchange Admin Issues
> *Subject:* OAB 0X8004010F Error
>
>
>
> Yes, the famous 0X8004010F error.  Tons of info on the web, I know, but
> here is a twist that I can't find any information about online:
>
>
>
> I only get the download OAB error if I can connected via TCP/IP.  If I am
> connected via HTTPS, the OAB download works great...
>
>
>
> I have done all the basis OAB error checking, rebuilt it, checked the
> public/system folders, made sure an oab is selected for the storage group..
>
>
>
>
>
> Anyone know of a good place to start looking?
>
>
>
> Tia!
>
>
>
> Sam
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~<>

Re: Exchange 2007 and VMWare

[Alex Fontana]

Interesting statement...  Depending on the I/O availability from the disk
solution would be a matter of concern in a virtual and physical deployment,
not just in the virtual.  In all tests that I've performed I/O has not been
a concern for going physical over virtual.

IMO the only concern for virtualizing (on VMware at least) would be for
deployments where it is desired to exceed the 4 CPU limitation of the
virtual machine or Windows 2008 fail-over clusters are desired.

-alex

ps/ maybe i'm bias...;-)

On Wed, Mar 11, 2009 at 12:42 PM, Michael B. Smith <
mich...@theessentialexchange.com> wrote:

> You can either use VMware's HA or Exchange's HA - but not both.
>
> Note that that is the Microsoft support position and not VMware's.
>
> Exchange 2007 works just fine in a virtualized environment. I've got a
> number of deployments out there. Depending on I/O requirements and I/O
> availability from your disk solution, you might consider putting the
> mailbox
> role on physical hardware and everything else on virtual.
>
> -Original Message-
> From: John Bowles [mailto:john_bow...@yahoo.com]
> Sent: Wednesday, March 11, 2009 3:21 PM
> To: MS-Exchange Admin Issues
> Subject: Exchange 2007 and VMWare
>
>
> All-
>
> I've been tasked to research E2K7 and VMWare.  I know VMWare say's they
> support this type of installation.. but what I'm looking for is people that
> actually have this type of setup in their environment or have set this up
> in
> someone's environment.  Has anyone had success with this design scenario?
> Were there any gotcha's?  How does well does it work with HA?
>
> TIA,
>
>  _
> John Bowles
>
>
>
>
>
>
> ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
> ~ http://www.sunbeltsoftware.com/Ninja~
>
>
> ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
> ~ http://www.sunbeltsoftware.com/Ninja~
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Exchange 2007 and VMWare

[Alex Fontana]

Howdy Mike...I've been hiding in documentation hell for the past month or
so...

Most Exchange, SAN, Virtualization administrators I talk to (2-3 meetings a
week these days) are usually concerned with IO in a VM.  While this was a
valid concern a few years back, when it comes down to numbers we see very
little impact as a result of virtualizing.  If you do a quick search you can
find papers by HP, Dell, EMC and others that have compared physical IO to
virtual.  Of course the best advice is to test in your own environment...I
was skeptical, and not to mention a little scared at one time.  I had to
test for myself to get past that and I encourage anyone looking to go down
this road to do the same...or engage your storage vendor to do it for you.
If they want your business they'll usually do much of the heavy lifting.

-alex


On Thu, Mar 12, 2009 at 5:25 AM, Michael B. Smith <
mich...@theessentialexchange.com> wrote:

>  HI Alex. Long time no hear from you!
>
>
>
> IOPS delivered is always a concern. Depending on the I/O delivery
> mechanism, virtualization may impact it. Or it may not. J
>
>
>
> *From:* Alex Fontana [mailto:afontana...@gmail.com]
> *Sent:* Wednesday, March 11, 2009 8:30 PM
> *To:* MS-Exchange Admin Issues
> *Subject:* Re: Exchange 2007 and VMWare
>
>
>
> Interesting statement...  Depending on the I/O availability from the disk
> solution would be a matter of concern in a virtual and physical deployment,
> not just in the virtual.  In all tests that I've performed I/O has not been
> a concern for going physical over virtual.
>
> IMO the only concern for virtualizing (on VMware at least) would be for
> deployments where it is desired to exceed the 4 CPU limitation of the
> virtual machine or Windows 2008 fail-over clusters are desired.
>
> -alex
>
> ps/ maybe i'm bias...;-)
>
> On Wed, Mar 11, 2009 at 12:42 PM, Michael B. Smith <
> mich...@theessentialexchange.com> wrote:
>
> You can either use VMware's HA or Exchange's HA - but not both.
>
> Note that that is the Microsoft support position and not VMware's.
>
> Exchange 2007 works just fine in a virtualized environment. I've got a
> number of deployments out there. Depending on I/O requirements and I/O
> availability from your disk solution, you might consider putting the
> mailbox
> role on physical hardware and everything else on virtual.
>
>
> -Original Message-
> From: John Bowles [mailto:john_bow...@yahoo.com]
> Sent: Wednesday, March 11, 2009 3:21 PM
> To: MS-Exchange Admin Issues
> Subject: Exchange 2007 and VMWare
>
>
> All-
>
> I've been tasked to research E2K7 and VMWare.  I know VMWare say's they
> support this type of installation.. but what I'm looking for is people that
> actually have this type of setup in their environment or have set this up
> in
> someone's environment.  Has anyone had success with this design scenario?
> Were there any gotcha's?  How does well does it work with HA?
>
> TIA,
>
>  _
> John Bowles
>
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Virtual vs Physical for E2K7 Mailbox Server

[Alex Fontana]

My thoughts with a single mailbox server for 12k users would be port
exhaustion (
http://technet.microsoft.com/en-us/library/cc540453.aspx#TCPProtoConn) and
MS's guidance that the maximum number of cores that can efficiently be used
by the mailbox role is 8 and 32GB for memory.  Throwing a 16 core/64GB will
not efficiently scale, but carving that physical hardware into a few VMs
would make efficient use of the beefy servers.

-alex

On Thu, Mar 12, 2009 at 4:40 PM, Brian Dwyer wrote:

>  Apologies for not thinking before posting.
>
> Our organisation is in the process of  moving "everything" to a  Virtual
> environment. Exceptions will be made if necessary but must be justified.
>
> NetApps storage is being implemented with blade servers to host virrtual
> servers at the data centre, with a secnod NetApps storage and blades
> on-site.
> Data, VM images/snapshots etc will be replicated from the data centre
> and backed up here.
> All servers are currently located in a data centre - we have lost
> connectivity twice in the last 6 months (cut cables)
> Main Issue-
> All exisitng Exchange hardware is up for replacement.
>
> We need to-
> 1.  implement an email archiving solution.
> 2 . upgrade to Exchange 2007 as our 2003 service is reaching capacity.
>
> Exchange 2003 services consists of -
> 2 x FE and 3 X BE mailbox servers with direct attached storage.
> 1.4 TB of mail in 14 databases.
> 12,000 users, in 133 locations.   70% use OWA only.
>
> Original design was for and E2K7 services on physical servers
> 2 x Client Access/Hub Transport Servers
> A single clusted mailbox server with CCR live node and databases in the
> data centre
> passive node and database replicas on-site
>
> Management would now like the designed reviews for  virtualisation
>
> The physical servers allocated for the Clustered mailbox server are 32GB
> DL360 G5's with 4 x quad caore processors.  These may be "replaced" with
> BL680c GS E7450 2P 8G Svr with 64GB ram and 6 x quad core processors.
>
> My preference is for -
>
> 2 x VIRTUAL CAS/HUB servers running on existing virtual hosts (1in data
> cente one on-site) WFS installed on CAS/Hub onsite  server.
>
> 1 x Clustered Mailbox Serverwith CCR  running on the physical BL680c's.
> Live node in the Data Centre Blade Shelf, Passive Node in the onsite
> Blade shelf.
> Live databases on tier 1 storage in the Data Centre
> Passive databases on tier 2 (or3) storage on site.
>
> My reasoning is  -
>
> Exchange will be on a physical server. The high specs of the BL680c are
> required as the design has a single back-end server.
> Exchange 2007 and Server 2008 which will be running on the blade is
> fully 64-bit compliant and can make use of the RAM and processors much.
> Licencing costs will be reduced.
> CCR will provide automatic failover in event of a failure of data centre
> or nectwork  connectivity.
>
> Cheers
>
> Brian
>
>
>
>
>
>
>
>
>
>
>
>
>
> -Original Message-
> From: Robinson, Chuck [mailto:chuck.robin...@emc.com]
> Sent: Friday, 13 March 2009 7:11 AM
> To: MS-Exchange Admin Issues
> Subject: RE: Virtual vs Physical for E2K7 Mailbox Server
>
> Virtualized Scenario :
> In a failover situation, you would be hosting all 12000 users on 2
> virtual servers running on 1 physical host.
> If utilizing CCR, that would assume you are running the two CCR passive
> nodes on the remaining physical server as well.
>
> There is a lot more information to consider when sizing MBX servers,
> however my initial calculations says you are going to be over utilized.
>
> In a virtual environment, consider N+1 when planning capacity.
>
>
> Chuck Robinson
> ___
> Solutions Architect
> MCSE: Messaging
> EMC Consulting
> Phone: 732-321-3644 | Mobile: 973-865-0394 chuck.robin...@emc.com
> www.emc.com/consulting
>
> Transforming Information Into Business Results
>
>
> -Original Message-
> From: Brian Dwyer [mailto:bdw...@bne.catholic.edu.au]
> Sent: Thursday, March 12, 2009 4:53 PM
> To: MS-Exchange Admin Issues
> Subject: RE: Virtual vs Physical for E2K7 Mailbox Server
>
> 12000 mailboxes, 14 DB all around 100gb each currently running E2K3 2 x
> FE 3 xBE - 70% of clients connect via OWA NetApps storage tier1
> allocated to Exchange Storage and Servers located in DataCentre - with
> second storage unit located on-site -opportunity to CCR passive node and
> DB's - have had 2 instances of loss of connectivity to data centre due
> to connection failure which results in loss of email.
>
> -Original Message-
> From: Michael B. Smith [mailto:mich...@theessentialexchange.com]
> Sent: Thursday, 12 March 2009 10:19 PM
> To: MS-Exchange Admin Issues
> Subject: RE: Virtual vs Physical for E2K7 Mailbox Server
>
> How many mailboxes? What's the storage backend? How big are the stores?
> What's the front-end look like?
>
> -Original Message-
> From: Brian Dwyer [mailto:bdw...@bne.catholic.edu.au]
> Sent: Thursday, March 12, 2009 1:30 AM
> To: MS-Exchange Admin Issues
> Subject: V

Re: Update RU3 being offered after RU6 installed

[Alex Fontana]

Jeez...we've been waiting for RU7 because an IMAP patch that we require was
not rolled into RU6.

Any word back from MS?

On Thu, Mar 19, 2009 at 10:24 AM, KevinM  wrote:

>  One of my Ninja crazy smart Engineers discovered a bug in the Roll up 7
> already.. We are filing a bug with MS as we speak, I wonder if we can get a
> RU7.1 out of it = ]
>
>
>
> *When you send mail from a user that is hidden from the GAL after RU7 is
> installed the reply to address is the legacy exchange DN for that user.
> When sending from a user that is not hidden everything works fine.*
>
>
>
>
>
> ~Kevinm WLKMMAS
>
> My life http://www.hedonists.ca
>
>
>
> *From:* Barsodi.John [mailto:john.bars...@igt.com]
> *Sent:* Thursday, March 19, 2009 9:31 AM
> *To:* MS-Exchange Admin Issues
> *Subject:* RE: Update RU3 being offered after RU6 installed
>
>
>
> That is weird.  What happens when you try to check for updates directly
> from the Ex Server itself?  That would tell if it’s WSUS or something else.
>
>
>
> Also, RU7 was released yesterday.
>
>
>
> http://support.microsoft.com/kb/960384
>
>
>
> - John Barsodi
>
> *From:* Sobey, Richard A [mailto:r.so...@imperial.ac.uk]
> *Sent:* Thursday, March 19, 2009 4:14 AM
> *To:* MS-Exchange Admin Issues
> *Subject:* Update RU3 being offered after RU6 installed
>
>
>
> Hi all
>
>
>
> I think this is to do with WSUS, but I’m not entirely sure. I’ve installed
> a dev CAS server into the organization and got it fully patched (Windows
> Server 2008 and Exchange Server 2007 SP1 RU6). However, Windows Update –
> WSUS – is telling me that RU3 should also be applied.
>
>
>
> Has anyone seen this behaviour before? Another server I’ve installed
> recently (mailbox role) was patched straight to SP1 RU6 and isn’t offering
> to install RU3.
>
>
>
> The only difference between the servers is that one (the CAS) is a VM
> running on ESX, the mailbox server is physical.
>
>
>
> Richard
>
>
>
>
>
>
>
>
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Named Property Limit

[Alex Fontana]

Seems this turned into a b-ch fest rather than answering your original
question...;-)  While I agree this is a ridiculous characteristic in the
design and one that opens us up for DoS attacks (eventually), it is what it
is and we need to figure out how to work around it.  You have a few options;
increase the limit, move users off, or find out what is causing it and stop
it.

My first suggestion is to take inventory of where your databases are as far
as named props are concerned, you need to expose some IS counters to see
this info, but it'll give you an understanding on whether it's widespread or
concentrated on a set of databases (or users).  Next start monitoring your
event logs.  An event ID is logged by default each time a new named prop is
added (event id 9873 I believe) and when the quota's been reached (9666, 7,
8, 9).  This can help you track down the culprit.  Note, the initial limit
reached is the default quota...not the limit.  My understanding is that when
the hard limit (32k) is reached the database will dismount and you will have
to restore from backup and move users off.

In my situation I found that less than a dozen users were creating hundreds
of named props daily for weeks.  This was the result of an open source imap
client called offlineIMAP.  This client is used to bidirectionally synch
messages via IMAP.  It does this by creating a unique X-header for EVERY
message that comes in, as opposed to a single X-header with a specific
value.  After finding this out I reached out to the users, and being the
ridiculously intelligent (and curious) crew they are they crafted a patch
for offlineIMAP (http://software.complete.org/software/issues/show/114).

Hope this helps.
-alex

On Thu, Mar 19, 2009 at 5:27 AM, McCready, Robert
wrote:

>  I agree about it getting worse as it gets betterĸĸ  I was shocked by the
> whole powershell thingĸĸ  I know some people love it, but I think it
> stinks.ĸ  Hello 1960'ĸĸÂ  I had to move a mailbox in the lab the other day
> from Exchange 2007 back to Exchange 2003 to do an old restore, and the GUI
> move failedĸĸ  I then had to type out a 212 character PowerShell command to
> get it to work.ĸ  Some "Improvement" over 2003ĸĸ  HA!
>
>
> Can somebody dumb this Named Property thing down for me in 200ĸĸÂ  I'm not
> understanding here.ĸ
>
>
> *What is the Named Property list actually used for?*
>
> *What are the consequences for not being able to add to it?*
>
>
> It looks like we hit our 16,000 limit over 3 months ago, but nobody has
> reported any problems sending or receiving email???
>
>
>
>
>
>
>
> -Original Message-
> From: Steve Moffat [mailto:st...@optimum.bm] On Behalf Of Exchange
> (Sunbelt)
> Sent: Tuesday, March 17, 2009 5:44 PM
> To: MS-Exchange Admin Issues
> Subject: RE: Named Property Limit
>
>
>
> Is it just me, or is Exchange getting worse as it gets better..;)
>
>
>
> S
>
>
>
> -Original Message-
>
> From: Kurt Buff [mailto:kurt.b...@gmail.com]
>
> Sent: Tuesday, March 17, 2009 6:31 PM
>
> To: MS-Exchange Admin Issues
>
> Subject: Re: Named Property Limit
>
>
>
> I don't have an answer for you on that.
>
>
>
> I suppose a mail gateway between your Exchange box and the Internet
>
> could do some whitelisting, and discard any unrecognized headers, but
>
> I wouldn't have a good guess as to how to go about it.
>
>
>
> Kurt
>
>
>
> On Tue, Mar 17, 2009 at 13:43, McCready, Robert
>
>  wrote:
>
> > Is there a way to limit these X-headers, or find out what is causing so
> many?
>
> >
>
> > -Original Message-
>
> > From: Kurt Buff [mailto:kurt.b...@gmail.com]
>
> > Sent: Tuesday, March 17, 2009 4:30 PM
>
> > To: MS-Exchange Admin Issues
>
> > Subject: Re: Named Property Limit
>
> >
>
> > One of the things that seems to contribute are X- headers on inbound
>
> > mail - each new X-header is a new named property.
>
> >
>
> > Want to DoS someone? Send them emails with new X-headers - lots of
>
> > different ones.
>
> >
>
> > Spam seems to accumulate them, for one.
>
> >
>
> > Just looking at your message from the list, I see 4 different X-headers:
>
> >
>
> > X-MS-Has-Attach:
>
> > X-MS-TNEF-Correlator:
>
> > x-ems-proccessed: jxfyzdhlyVyYF5VF4W3Asg==
>
> > x-ems-stamp: sLcJ9ri/feAlRgbRlwdyOA==
>
> >
>
> >
>
> > Kurt
>
> >
>
> > On Tue, Mar 17, 2009 at 13:20, McCready, Robert
>
> >  wrote:
>
> >> I'm not sure I understand this named property quota thing or how we
> reached
>
> >> our limit...
>
> >>
>
> >>
>
> >>
>
> >> (http://technet.microsoft.com/en-us/library/bb851492.aspx)
>
> >>
>
> >>
>
> >>
>
> >> but my question is, how big of a deal is it really? We apparently
> reached
>
> >> our 16,000 limit back in December, yet nobody has had any trouble
>
> >> sending/receiving email.
>
> >>
>
> >>
>
> >>
>
> >>
>
> >>
>
> >> 
>
> >>
>
> >> From: McCready, Robert [mailto:rob.mccrea...@dplinc.com]
>
> >> Sent: Monday, March 16, 2009 2:41 PM
>
> >> To: MS-Exchange Admin Issues
>
> >> Subject: Event 9667 Quota L

Re: Patching Exchange 2007 Sp1

[Alex Fontana]

It's recommended to patch non-mbx roles first, however not sure about the
passive...I'd hold off and patch that at the same time as the active.
However if you choose to patch the passive and you have a fail-over then you
won't need to request that down timeor work late or on the weekend...;-)

-alex

On Thu, Mar 26, 2009 at 7:26 AM, McCready, Robert
wrote:

>
>
> Is there any harm in patching most of our Exchange Servers with Rollup 7
> (our two Edge Transport Servers, the two Hub Transport Servers and the
> Passive Mailbox Server) with Exchange Roll Up 7, and then patching the
> Active Mailbox Cluster server a few days later?  The Active Mailbox Cluster
> server will require a brief outage, so we need to schedule that.  Meanwhile,
> I was thinking of going ahead and patching the other servers one at a time,
> but I wasn’t sure if any complications could arise from several servers
> being on Roll Up 7 with one server on Roll Up 5?
>
>
>
> Thanks.
>
>
>
>
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Replication Issue - Cross Posting

[Alex Fontana]

Interesting...I wouldn't assume it's replication, I think the error is
simply telling you that at that time an rpc call failed because the DC
couldn't be reached.  So what's happening on f9f5... between 1:40-1:45?  Do
things return to normal after 1:45?  Have you setup any perf monitoring or
any monitoring to kick off just before...that is assuming it is every weds
at that time...to see what's going on at that time?  Do security logs show
anything special at that time?

-alex

On Wed, Mar 25, 2009 at 1:18 PM, Sherry Abercrombie wrote:

> I have an interesting issue that has been happening for almost 6 weeks
> now.  Every Wed. at approximately 1:40-1:45 PM, one of our domain
> controllers basically becomes totally unresponsive, causing the other two
> DC's to become effectively useless, AND causes the Exchange server to become
> unresponsive to clients.  (Outlook 2003) .
>
> The only clue that I have from the event logs is from the Directory Service
> log,
> Event ID:  1232
> Source: NTDS Replication
> Category:  DS RPC Client
> Type:  Warning
> Description:  Active Directory attempted to perform a remote procedure call
> (RPC) to the following server.  The call timed out and was cancelled.
>
> Server:
> f9f58f44-e7e7-4ea5-92fe-aa38ff4cb646._msdcs.domain.com
>
> The server guid referenced here is one of the other domain controllers,
> that at this point in time, is scheduled to be rebuilt. (FSMO roles have
> been moved, etc etc)
>
> The Exchange server event log just shows that it cannot contact any global
> catalog server and lists the 3 dc's that we have which are all global
> catalog servers.
>
> During the duration of this "outage" this specific dc cannot be accessed
> either remote desktop, or direct on the console, but the other dc's are
> accessible as well as the Exchange server, albeit very slow response.
>
> I have Googled,looked at EventID.net and Microsoft on this, and have come
> up with very little.  Did find a MS KB article that recommended making a
> registry change on the DC's to make the RPC call timeout at least 45
> minutes, this was done last week, and the DC's were rebooted over the
> weekend to apply this registry change, but, today it happened again, so that
> didn't work.  Found some other MS KB articles that were not applicable but
> did reference that event.
>
> Windows 2003 server, SP2.  My question is, what the heck is replicating
> once a week that could be causing RPC to time out like this and basically
> bring the domain to a halt for 10 - 15 minutes?  As I stated, this DC is
> going to be rebuilt, it just annoys me that I cannot find the reason for it,
> and a solution other than the rebuild.
>
> TIA,
> --
> Sherry Abercrombie
>
> "Any sufficiently advanced technology is indistinguishable from magic."
> Arthur C. Clarke
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Hardware upgrade CCR cluster

[Alex Fontana]

No.  You will need to update-storagegroupcopy -deleteexistingfiles (or
something like that) to reseed.  If you just re-enabled replication it would
stay failed because there's nothing to resume on.  But other than that, yeah
by doing the reseed you can do rolling hardware upgrades with no real
downtime.

-alex

On Fri, Mar 27, 2009 at 7:11 AM, Domingue, Jamie  wrote:

> Hello,
>
> We are beginning to run low on hard drive space on our servers that are
> part of a CCR cluster.
>
> What I would like to do, but am not sure if this would work is the
> following:
>
>
>  *
> Stop replication between the 2 hosts that make up the CCR cluster.
>  *
> On the passive node replace the hard drives that hold the mailbox databases
> with larger ones.
>  *
> Recreate the folder structure.
>  *
> Re-enable the replication wait till it is complete.
>  *
> Fail over to the upgraded passive node.
>  *
> Stop replication again.
>  *
> Upgrade the hard drives on the now passive node.
>  *
> Recreate the folder structure.
>  *
> Re-enable the replication.
>
>
> Question is would this work?
>
> Thanks in advance,
>
> Jamie
> CONFIDENTIALITY NOTICE
> This e-mail transmission (and/or the documents accompanying it) may contain
> confidential information belonging to the sender.  The information is
> intended only for the use of the individual or entity named above.  If you
> are not the intended recipient, you are hereby notified that any disclosure,
> copying, distribution or the taking of any action in reliance on the
> contents of this information is strictly prohibited.  If you have received
> this transmission in error, please immediately notify the sender by
> telephone.
>
>
> ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
> ~ http://www.sunbeltsoftware.com/Ninja~
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: DB Portability between Rollup version

[Alex Fontana]

Obviously I'd say try this in a test environment first, but given that you
can use database portability to move an Exchange 2007 RTM database to a
server running Exchange 2007 SP1 I don't see why this is much different.  As
far as I can tell there are no updates to the database.

-alex

On Thu, Apr 2, 2009 at 7:30 AM, Sobey, Richard A wrote:

>  Hi all
>
>
>
> One of our mailbox servers (Exchange 2007 SP1 Rollup 6) has a suspected
> hardware fault and we were planning to use database portability to mount the
> databases on a standby server. The “live” server is running RU6, but the
> standby is at RU7. I figured since we’re going to RU7 soon anyway, I didn’t
> want to give my users necessary downtime.
>
>
>
> Is this is a safe thing to do, or should the new mailbox server run the
> same RU version? Are the databases very twitchy in this respect?
>
>
>
> Thanks for any advice.
>
>
>
> Richard
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Ex2k7 - Restoring server side rules

[Alex Fontana]

Restore the mailbox, export rules, import rules?

On Tue, Apr 14, 2009 at 11:02 AM, Robert Smith  wrote:

> Hello,
>
> In Exchange 2007, we have a user that has 'lost' all of his Server Side
> rules, is there any way to restore these rules?
>
>
> Thanks
> Bob
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Behind an F5

[Alex Fontana]

The F5 *can* be setup for health checks, and if properly deployed *does*
have health checks in place so when the services go down the F5 will yank it
from the pool for x seconds before re-checking.  We use F5's and don't do
squat with them when we patch.

Interesting that they use F5's between ISA and CAS as opposed to using ISA's
load-balancing...

-alex

On Thu, Apr 30, 2009 at 7:27 AM, KevinM  wrote:

>  Some Network I just took over goes a little something like this.
>
>
>
> Interwebs === F5 === ISA pool === F5 === CAS + Hub pool
>
>
>
> Patching time is this weekend. Should I do anything in the F5 to disable
> the nodes as I patch the servers, or just patch things. –Discuss
>
>
>
> ~Kevinm WLKMMAS– This message is Certified Swine Flu Free
>
> My life http://www.hedonists.ca
>
>
>
>
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Exmon and Client Versions

[Alex Fontana]

Curious if anyone has any idea how to find out what a client version
reported in Exmon relates to.  I can link the obvious 6., 11., 12. clients,
but the ones that I'm unclear as to how to translate are the ones like
2049.-32432.0, 2049.-32409.2, 2049.-32457.2.

If anyone knows how to find out what component those are (I'm sure they are
imap, pop, activesync, etc but which is which) please let me know.

Thanks much!
-alex

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Exchange DB Portability

[Alex Fontana]

Well...there used to be another server right?  And AD knows about it...if
it's the same AD setup that is.  If it is then a move-mailbox
-configurationonly is necessary to update AD.  If this is a different
AD/Exchange Org then you may need to run a clean-mailboxdatabase to expose
the disconnected mailboxes.

As for the event ID that is generated after mounting a pre-existing mdb on a
new box, the only one I can find is Event ID 7043, Source: MSExchangeIS
Mailbox, Category: IS/AD Interactions.  The text refers to the GUID of the
SystemMailbox.

Hope this helps.

On Tue, May 5, 2009 at 7:56 AM, Joseph L. Casale
wrote:

>  That’s in essence what I did, except for the renaming. I made the new one
> the same name but since it’s a single exchange server setup, there was no
> move-mailbox possible?
>
>
>
> Oh well… I’ll just assume broken in Beta J
>
>
>
> jlc
>
>
>
> *From:* Sobey, Richard A [mailto:r.so...@imperial.ac.uk]
> *Sent:* Tuesday, May 05, 2009 4:26 AM
> *To:* MS-Exchange Admin Issues
> *Subject:* RE: Exchange DB Portability
>
>
>
> Assuming DB portability in 2010 works the same as 2007, these are the high
> level steps I used to move all databases from one server to another. It
> works lovely. I’ve taken some of my own notes out that relate specifically
> to my organization.
>
>
>
>
>
> 1) Shut down Exchange on . Run ESEUTIL /MH  file> and ensure it’s in a clean shutdown state.
>
> 2) Mailbox databases should be set NOT to mount at startup.
>
> 3) Disable Exchange services and turn  off.
>
> 4) Repoint the SAN presentations to .
>
> 5) Rescan the server so it sees the SAN disks and point them at the
> correct mount points or drive letters.
>
> 6) Create the new mailbox databases called NewDatabaseName.edb.
>
> 7) Set the AllowFileRestore flag on all new databases.
>
> 8) Rename the databases on disk from OldDataBaseName.edb to
> NewDataBaseName.edb.
>
> 9) Mount the databases on the new server.
>
> 10)   Move the mailboxes from the old server to the new one with the
> –ConfigurationOnly switch.
>
>
>
>
>
> *From:* bounce-8515732-8066...@lyris.sunbelt-software.com [mailto:
> bounce-8515732-8066...@lyris.sunbelt-software.com] *On Behalf Of *Joseph
> L. Casale
> *Sent:* 04 May 2009 23:23
> *To:* MS-Exchange Admin Issues
> *Subject:* Exchange DB Portability
>
>
>
> I had a lab setup with an E2k10 DB that had some data in it. I setup a new
> lab, same topology, different server names, used a cmdlet to create the
> Mailbox Database with the recovery switch specifying the pre-existing paths
> to the copied db (everything was copied over). It warned me that it needed
> to be in a clean shutdown state before mounting, so I checked it with
> eseutil /mh and it was. I mounted it without error but I couldn’t enumerate
> the disconnected MB’s in it? How does one accomplish this?
>
>
>
> Thanks!
> jlc
>
>
>
>
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: PFMigrate

[Alex Fontana]

I seem to recall an issue with pfmigrate between Ex2003 and Ex2007 due to
the differing administrative groups...?

On Tue, May 5, 2009 at 5:18 AM, Michael B. Smith
wrote:

>  I still use pfmigrate quite regularly, as it gives better reporting and
> control.
>
> Make sure you use the version from ExDeploy.exe (available from
> microsoft.com/downloads) and not the version on the Exchange 2003 CD.
>
>  --
> *From:* Matthew Bullock [mbull...@root9.com]
> *Sent:* Monday, May 04, 2009 10:20 PM
> *To:* MS-Exchange Admin Issues
> *Subject:* RE: PFMigrate
>
>Fire up the Exchange Management Shell and type “cd $exscripts”
>
>
>
> addreplicatopfrecursive.ps1 is what you can use, but here’s a great article
> presenting a couple different options:
>
>
>
> http://msexchangeteam.com/archive/2007/06/25/445429.aspx
>
>
>
> -mb
>
>
>
>
>
> *From:* vbs [mailto:dvant...@gmail.com]
> *Sent:* Monday, May 04, 2009 12:04 PM
> *To:* MS-Exchange Admin Issues
> *Subject:* PFMigrate
>
>
>
> I have installed Exchange 2007 into my 2003 environment and want to
> replicate the Public Folders to the 2007 machine. I have looked at KB 822895
> and 843107 about PFMigrate but neither indicates that it applies to 2007.
>
> Has anyone use this tool to replicate the PF's from 2003 to 2007
>
>
> --
> Thanks
> Dave Vantine
>
>
>
>
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: PFMigrate

[Alex Fontana]

ah-hah.  sweet, thanks.

On Tue, May 5, 2009 at 10:50 AM, Michael B. Smith  wrote:

>  Which is why you must use the one from the downloaded exdeploy tools;
> which works cross-AG. The version on the CD does not.
>
>  --
> *From:* Alex Fontana [afontana...@gmail.com]
> *Sent:* Tuesday, May 05, 2009 1:32 PM
> *To:* MS-Exchange Admin Issues
> *Subject:* Re: PFMigrate
>
>I seem to recall an issue with pfmigrate between Ex2003 and Ex2007 due
> to the differing administrative groups...?
>
> On Tue, May 5, 2009 at 5:18 AM, Michael B. Smith <
> mich...@owa.smithcons.com> wrote:
>
>>  I still use pfmigrate quite regularly, as it gives better reporting and
>> control.
>>
>> Make sure you use the version from ExDeploy.exe (available from
>> microsoft.com/downloads) and not the version on the Exchange 2003 CD.
>>
>>  --
>> *From:* Matthew Bullock [mbull...@root9.com]
>> *Sent:* Monday, May 04, 2009 10:20 PM
>> *To:* MS-Exchange Admin Issues
>> *Subject:* RE: PFMigrate
>>
>>Fire up the Exchange Management Shell and type “cd $exscripts”
>>
>>
>>
>> addreplicatopfrecursive.ps1 is what you can use, but here’s a great
>> article presenting a couple different options:
>>
>>
>>
>> http://msexchangeteam.com/archive/2007/06/25/445429.aspx
>>
>>
>>
>> -mb
>>
>>
>>
>>
>>
>> *From:* vbs [mailto:dvant...@gmail.com]
>> *Sent:* Monday, May 04, 2009 12:04 PM
>> *To:* MS-Exchange Admin Issues
>> *Subject:* PFMigrate
>>
>>
>>
>> I have installed Exchange 2007 into my 2003 environment and want to
>> replicate the Public Folders to the 2007 machine. I have looked at KB 822895
>> and 843107 about PFMigrate but neither indicates that it applies to 2007.
>>
>> Has anyone use this tool to replicate the PF's from 2003 to 2007
>>
>>
>> --
>> Thanks
>> Dave Vantine
>>
>>
>>
>>
>>
>>
>>
>
>
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Update-emailaddresspolicy warnings...

[Alex Fontana]

Created a new email address policy with a custom filter for
recipienttype -eq mailuser -and externalemailaddress -like *...@blah.domain.com.
When I check the preview through the EMC I see the intended mail users to
update, however when I run the update I get the following errors...

WARNING: Failed to update recipient "domain.com/users/recipient1". The
following exception occurred: Exchange Server
2007 exmbx01.domain.com returned an error -2147023286 from the Address List
Service..
WARNING: Failed to update recipient "domain.com/users/recipient2". The
following exception occurred: Exchange Server
 2007 exmbx01.domain.com returned an error -2147023653 from the Address List
Service..

Not really sure what is going on here, even though its just a warning the
policy does not get applied.  These are the only two recipients this policy
applies to at the moment and there's nothing really odd about them.
Eitherway, finding out wtf those error numbers mean would be great...  Any
ideas?

Thanks,
alex.

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Update-emailaddresspolicy warnings...

[Alex Fontana]

Well, still can't figure out what's going on here, but I have noticed one
thing.  If I add a third email address (first is the externalEmailAddress,
second is what I would like to be the primary SMTP email address), uncheck
the "automatically update email addresses based on policy", apply, set that
third as the primary (reply-to), apply, then check the "automatically..."
box, hit apply again the desired email address becomes primary.  However if
I set the externalEmailAddress as primary, via the method above, then check
the "Automatically..." box and hit apply the desired primary is not set as
primary, the externalEmailAddress keeps the primary role.

Not sure if this is by design or not, but it's annoying...sigh...

On Tue, May 12, 2009 at 9:15 PM, Alex Fontana  wrote:

>   Created a new email address policy with a custom filter for
> recipienttype -eq mailuser -and externalemailaddress -like
> *...@blah.domain.com.  When I check the preview through the EMC I see the
> intended mail users to update, however when I run the update I get the
> following errors...
>
> WARNING: Failed to update recipient "domain.com/users/recipient1". The
> following exception occurred: Exchange Server
> 2007 exmbx01.domain.com returned an error -2147023286 from the Address
> List Service..
> WARNING: Failed to update recipient "domain.com/users/recipient2". The
> following exception occurred: Exchange Server
>  2007 exmbx01.domain.com returned an error -2147023653 from the Address
> List Service..
>
> Not really sure what is going on here, even though its just a warning the
> policy does not get applied.  These are the only two recipients this policy
> applies to at the moment and there's nothing really odd about them.
> Eitherway, finding out wtf those error numbers mean would be great...  Any
> ideas?
>
> Thanks,
> alex.
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Update-emailaddresspolicy warnings...

[Alex Fontana]

At a certain point a policy was applied to them, yes.  Currently those
mailusers "policiesincluded" attribute shows the correct policy.

On Wed, May 13, 2009 at 1:35 PM, Michael B. Smith  wrote:

>  You are attempting to apply a policy to a set of mailusers to whom a
> policy has already been applied. Have I got that right?
>
>  ------
> *From:* Alex Fontana [afontana...@gmail.com]
> *Sent:* Wednesday, May 13, 2009 12:15 AM
> *To:* MS-Exchange Admin Issues
> *Subject:* Update-emailaddresspolicy warnings...
>
>   Created a new email address policy with a custom filter for
> recipienttype -eq mailuser -and externalemailaddress -like
> *...@blah.domain.com.  When I check the preview through the EMC I see the
> intended mail users to update, however when I run the update I get the
> following errors...
>
> WARNING: Failed to update recipient "domain.com/users/recipient1". The
> following exception occurred: Exchange Server
> 2007 exmbx01.domain.com returned an error -2147023286 from the Address
> List Service..
> WARNING: Failed to update recipient "domain.com/users/recipient2". The
> following exception occurred: Exchange Server
>  2007 exmbx01.domain.com returned an error -2147023653 from the Address
> List Service..
>
> Not really sure what is going on here, even though its just a warning the
> policy does not get applied.  These are the only two recipients this policy
> applies to at the moment and there's nothing really odd about them.
> Eitherway, finding out wtf those error numbers mean would be great...  Any
> ideas?
>
> Thanks,
> alex.
>
>
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: E2007/O2007/OOF issue

[Alex Fontana]

Running BES?  Only time I saw this was on blackberry users when we were
running an older version of BES.  This happened as soon as the users were
moved to Exchange 2007 SP1.

On Thu, May 14, 2009 at 8:34 AM, paul chinnery  wrote:

> We have the OOF issue with Outlook2007 where you can only modify OOF via
> OWA.  I ran the webservice virtualdirectory cmdlet and got
> https://ex2007.mydomain.com.  However, when I run Test Connectivity from
> the
> Outlook client I get, https://outlook.mydomain.com.  Our SSL for external
> access is set to outlook.mydomain.com.  When we moved to E07, I got a
> replacement cert for the new server.
> So, thought about the PS route, but if the cmdlet is already showing ex2007
>
> then I don't see how running the PS command will make any difference.
>
> P.S. I originally posted this on the ms-exch-misc list but so far, after
> posting the above, I haven't  rec'd a reply yet.
>
>
> --
> Hotmail® has a new way to see what's up with your friends. Check it 
> out.
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Update-emailaddresspolicy warnings...

[Alex Fontana]

I took out all the conditionals...they're empty.  Thanks.  BTW, still not
fixed...


RecipientFilter   : (RecipientType -eq 'MailUser' -and
ExternalEmailAddress -like '*...@sub.domain.com'
)
LdapRecipientFilter   :
(&(objectClass=user)(objectCategory=person)(mailNickname=*)(!(msExchHomeServerName=
*))(targetaddres...@sub.domain.com))
LastUpdatedRecipientFilter: (RecipientType -eq 'MailUser' -and
ExternalEmailAddress -like '*...@sub.domain.com'
)
RecipientFilterApplied: True
IncludedRecipients:
RecipientFilterType   : Custom
Priority  : 3
EnabledPrimarySMTPAddressTemplate : %...@domain.com
EnabledEmailAddressTemplates  : 
{SMTP:%...@domain.com
}
DisabledEmailAddressTemplates : {}
Enabled   : False
HasEmailAddressSetting: True
HasMailboxManagerSetting  : False
NonAuthoritativeDomains   : {smtp:@domain.com }
AdminDescription  :
AdminDisplayName  :
ExchangeVersion   : 0.1 (8.0.535.0)
Name  : sub.domain.com
DistinguishedName : CN=sub.domain.com,CN=Recipient
Policies,CN=Org,CN=Microsoft Exchange,CN=Servic
es,CN=Configuration,DC=domain,DC=com
Identity  : sub.domain.com
Guid  : c5687e79-2d31-444a-9b95-517d0eb561e5
ObjectCategory:
domain.com/Configuration/Schema/ms-Exch-Recipient-Policy
ObjectClass   : {top, msExchGenericPolicy,
msExchRecipientPolicy}
WhenChanged   : 5/12/2009 9:02:14 PM
WhenCreated   : 5/12/2009 5:01:15 PM
OriginatingServer : dc01.domain.com
IsValid   : True

On Wed, May 20, 2009 at 10:27 AM, Michael B. Smith <
mich...@owa.smithcons.com> wrote:

>  Did you already resolve this? if so, what was it?
>
> If not, can you provide a dump of the attributes of the EAP object?
>  --
>  *From:* Alex Fontana [afontana...@gmail.com]
> *Sent:* Wednesday, May 13, 2009 8:31 PM
> *To:* MS-Exchange Admin Issues
> *Subject:* Re: Update-emailaddresspolicy warnings...
>
>   At a certain point a policy was applied to them, yes.  Currently those
> mailusers "policiesincluded" attribute shows the correct policy.
>
> On Wed, May 13, 2009 at 1:35 PM, Michael B. Smith <
> mich...@owa.smithcons.com> wrote:
>
>>  You are attempting to apply a policy to a set of mailusers to whom a
>> policy has already been applied. Have I got that right?
>>
>>  --
>> *From:* Alex Fontana [afontana...@gmail.com]
>> *Sent:* Wednesday, May 13, 2009 12:15 AM
>> *To:* MS-Exchange Admin Issues
>> *Subject:* Update-emailaddresspolicy warnings...
>>
>>   Created a new email address policy with a custom filter for
>> recipienttype -eq mailuser -and externalemailaddress -like
>> *...@blah.domain.com.  When I check the preview through the EMC I see the
>> intended mail users to update, however when I run the update I get the
>> following errors...
>>
>> WARNING: Failed to update recipient "domain.com/users/recipient1". The
>> following exception occurred: Exchange Server
>> 2007 exmbx01.domain.com returned an error -2147023286 from the Address
>> List Service..
>> WARNING: Failed to update recipient "domain.com/users/recipient2". The
>> following exception occurred: Exchange Server
>>  2007 exmbx01.domain.com returned an error -2147023653 from the Address
>> List Service..
>>
>> Not really sure what is going on here, even though its just a warning the
>> policy does not get applied.  These are the only two recipients this policy
>> applies to at the moment and there's nothing really odd about them.
>> Eitherway, finding out wtf those error numbers mean would be great...  Any
>> ideas?
>>
>> Thanks,
>> alex.
>>
>>
>>
>>
>>
>
>
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Entourage Problems

[Alex Fontana]

Any luck using a new profile in Entourage or trying to re-synch the database
in Entourage...forget the exact terminology they use.  Entourage just uses
OWA so if that's working it should work, unless you are running the beta
which uses EWS, but even then if you're not seeing errors it seems to me
Entourage just needs a swift kick.  I've seen many cases where that was
necessary.

On Thu, May 21, 2009 at 8:50 AM, Matthew Bullock  wrote:

>   Thanks, I’ll give it a try.
>
>
>
> -mb
>
>
>
> *From:* Glaman, Mark [mailto:mdgla...@bechtel.com]
> *Sent:* Thursday, May 21, 2009 8:18 AM
> *To:* MS-Exchange Admin Issues
> *Subject:* RE: Entourage Problems
>
>
>
> try this Microsoft group.  I have had good luck.
>
>
>
>
> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx?dg=microsoft.public.mac.office.entourage&cat=en_US_2ba2a279-4301-4979-8491-5dc3ada8f137&lang=en&cr=US
>
>
>  --
>
> *From:* Matthew Bullock [mailto:mbull...@root9.com]
> *Posted At:* Wednesday, May 20, 2009 9:54 PM
> *Posted To:* Exchange List
> *Conversation:* Entourage Problems
> *Subject:* Entourage Problems
>
>  I’ve had an Exchange 2007 environment set up for a couple months now, and
> everything was working great – Outlook Anywhere, OWA, ActiveSync, and one
> guy (the boss) with a Mac and Entourage.  Yesterday we had a power outage,
> and even though one of the CAS/HUB and one of the SCC mailbox nodes were
> powered down gracefully, the other two weren’t.
>
>
>
> Everything came back up ok, DB’s were fine, but Outlook Anywhere had some
> problems with the certificate, and the Entourage client stopped syncing.
> OWA and ActiveSync continued working fine though.  I removed and re-imported
> the UCC certs on the CAS servers and Outlook Anywhere was happy again, but I
> still can’t get Entourage working.
>
>
>
> Does anyone know any good docs on getting Entourage working properly with
> Exchange 2007, and the permission required on all the IIS virtual
> directories?  All servers are on Windows 2008.
>
>
>
> Also, does anyone have any tips on troubleshooting in Entourage?  It isn’t
> giving me any errors, and depending on how the account settings are, will
> either say (not connected) or will do nothing at all.  I have no idea what
> its having trouble with.
>
>
>
> Thanks,
>
>
>
> -mb
>
>
>
>
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Entourage Problems

[Alex Fontana]

Yeah, that's what they call it  It has worked most times we've seen
Entourage stop synching.

-alex

On Tue, May 26, 2009 at 11:09 AM, Bolser, Scott <
scott.bol...@childrens.harvard.edu> wrote:

>  Usually emptying the cache which forces a re-synchronization does the
> trick.
>
>
>
> -Scott
>
>
>
> *From:* Alex Fontana [mailto:afontana...@gmail.com]
> *Sent:* Tuesday, May 26, 2009 1:31 PM
> *To:* MS-Exchange Admin Issues
> *Subject:* Re: Entourage Problems
>
>
>
> Any luck using a new profile in Entourage or trying to re-synch the
> database in Entourage...forget the exact terminology they use.  Entourage
> just uses OWA so if that's working it should work, unless you are running
> the beta which uses EWS, but even then if you're not seeing errors it seems
> to me Entourage just needs a swift kick.  I've seen many cases where that
> was necessary.
>
> On Thu, May 21, 2009 at 8:50 AM, Matthew Bullock 
> wrote:
>
> Thanks, I’ll give it a try.
>
>
>
> -mb
>
>
>
> *From:* Glaman, Mark [mailto:mdgla...@bechtel.com]
> *Sent:* Thursday, May 21, 2009 8:18 AM
>
>
> *To:* MS-Exchange Admin Issues
> *Subject:* RE: Entourage Problems
>
>
>
> try this Microsoft group.  I have had good luck.
>
>
>
>
> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx?dg=microsoft.public.mac.office.entourage&cat=en_US_2ba2a279-4301-4979-8491-5dc3ada8f137&lang=en&cr=US
>
>
>  --
>
> *From:* Matthew Bullock [mailto:mbull...@root9.com]
>
> *Posted At:* Wednesday, May 20, 2009 9:54 PM
> *Posted To:* Exchange List
> *Conversation:* Entourage Problems
>
> *Subject:* Entourage Problems
>
> I’ve had an Exchange 2007 environment set up for a couple months now, and
> everything was working great – Outlook Anywhere, OWA, ActiveSync, and one
> guy (the boss) with a Mac and Entourage.  Yesterday we had a power outage,
> and even though one of the CAS/HUB and one of the SCC mailbox nodes were
> powered down gracefully, the other two weren’t.
>
>
>
> Everything came back up ok, DB’s were fine, but Outlook Anywhere had some
> problems with the certificate, and the Entourage client stopped syncing.
> OWA and ActiveSync continued working fine though.  I removed and re-imported
> the UCC certs on the CAS servers and Outlook Anywhere was happy again, but I
> still can’t get Entourage working.
>
>
>
> Does anyone know any good docs on getting Entourage working properly with
> Exchange 2007, and the permission required on all the IIS virtual
> directories?  All servers are on Windows 2008.
>
>
>
> Also, does anyone have any tips on troubleshooting in Entourage?  It isn’t
> giving me any errors, and depending on how the account settings are, will
> either say (not connected) or will do nothing at all.  I have no idea what
> its having trouble with.
>
>
>
> Thanks,
>
>
>
> -mb
>
>
>
>
>
>
>
>
>
>
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: New Recipient policies don't apply

[Alex Fontana]

AFAIK, the recipient policies are not cumulative, so if one is applied it
will not continue to the next.  Have you tried increasing the priority,
perhaps that's not desired, but it could be that the recipients are hitting
the highest priority policy (priority 1) and not continuing on to the new
policy.

-alex

On Mon, Jun 8, 2009 at 11:01 AM, Jason Benway  wrote:

>  I created a new recipient policy for our Exchange 2003 org
> Its the second policy the first is pointing to a different exchange server
> than the one I'm working on.
> I setup the ldap query for only this server. the policy is to add an
> additional smtp address and set it as the default, still leaving all
> existing smtp addresses.
>
> This exchange server is in a subdomain of the forest and using a different
> DNS name space.
>
> I've read through many MS KB and a few blog post related to this.
>
> IT doesn't work for new users or for existing users.
>
> I ran the exchange BPA and nothing of interested came back.
>
> I'm going to increase logging levels, just not sure which domain or
> exchange server to do it on.
>
> Thanks,jb
>
>
> Jason Benway
> System/Storage Engineer
> 616-847-8474 telephone
> 616-850-1208 fax
> www.jsjcorp.com
>   *JSJ* *Corporation
> *700 Robbins Road
> Grand Haven, MI 49417
> --
> This message may contain confidential and/or privileged information. If you
> are not the addressee or authorized to receive this for the addressee,
> you must not use, copy, disclose or take any action based on this message
> or any information herein. If you have received this message in error,
> please advise the sender immediately by reply e-mail and delete this
> message. Thank you for your cooperation.
>
>
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~<>

Re: New Recipient policies don't apply

[Alex Fontana]

got it.  Can you take the filter that's being used, dump it into your
favorite ldap tool and see that the results are what you expect?

On Mon, Jun 8, 2009 at 12:01 PM, Jason Benway  wrote:

>  The 1 priority has a ldap query to apply to a total different exchange
> server. But I've been fighting this all day so I'll try anything :-)
>
> I'll bump it upto PR 1
>
> Just to add more detail
>
> Current PR 1 lets call it policy widget A is applying to exchange server A
> The current PR 2 call it policy widget B is applying to exchange server B
> <= is the one I'm trying to get to apply for all users on server B
>
> These servers are in the same exchange org, same AD forest just different
> AD domains.
>
> jb
>
>  --
> *From:* Alex Fontana [mailto:afontana...@gmail.com]
> *Sent:* Monday, June 08, 2009 2:56 PM
> *To:* MS-Exchange Admin Issues
> *Subject:* Re: New Recipient policies don't apply
>
>  AFAIK, the recipient policies are not cumulative, so if one is applied it
> will not continue to the next.  Have you tried increasing the priority,
> perhaps that's not desired, but it could be that the recipients are hitting
> the highest priority policy (priority 1) and not continuing on to the new
> policy.
>
> -alex
>
> On Mon, Jun 8, 2009 at 11:01 AM, Jason Benway  wrote:
>
>>  I created a new recipient policy for our Exchange 2003 org
>> Its the second policy the first is pointing to a different exchange server
>> than the one I'm working on.
>> I setup the ldap query for only this server. the policy is to add an
>> additional smtp address and set it as the default, still leaving all
>> existing smtp addresses.
>>
>> This exchange server is in a subdomain of the forest and using a different
>> DNS name space.
>>
>> I've read through many MS KB and a few blog post related to this.
>>
>> IT doesn't work for new users or for existing users.
>>
>> I ran the exchange BPA and nothing of interested came back.
>>
>> I'm going to increase logging levels, just not sure which domain or
>> exchange server to do it on.
>>
>> Thanks,jb
>>
>>
>> Jason Benway
>> System/Storage Engineer
>> 616-847-8474 telephone
>> 616-850-1208 fax
>> www.jsjcorp.com
>>   *JSJ* *Corporation
>> *700 Robbins Road
>> Grand Haven, MI 49417
>> --
>> This message may contain confidential and/or privileged information. If
>> you are not the addressee or authorized to receive this for the addressee,
>> you must not use, copy, disclose or take any action based on this message
>> or any information herein. If you have received this message in error,
>> please advise the sender immediately by reply e-mail and delete this
>> message. Thank you for your cooperation.
>>
>>
>>
>>
>>
>
>
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~<>

Re: Whitespace Question

[Alex Fontana]

You won't see it until 1. your deleted item retention period has passed, and
2. online defrag has completed, look for event 1221 in the app log on your
mailbox server.  That will give you the free space in the db.

On Thu, Jun 11, 2009 at 12:47 PM, Chris Pohlschneider <
chris.pohlschnei...@hollowayusa.com> wrote:

>  Hello,
>
>
>
> I have Exchange 2003 Enterprise SP2 on Windows Server 2003 SP2. A few of
> our users have large mailboxes and I am enforcing limits on them. One user
> copied about 4GB of folders into a pst file and her mailbox size showed the
> size difference after that happened (reduced size). The user did this two
> days ago and I thought that I would see some whitespace regained anytime a
> mailbox size is reduced. My question is does this only increase the size of
> whitespace when a user deletes items?
>
>
>
> Chris Pohlschneider
>
> Network Administrator
>
> chris.pohlschnei...@hollowayusa.com
>
> 937-494-2559
>
>
>
>
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Unable to remove E2K3 PF server, but not last E2K3

[Alex Fontana]

Just curious if you ever resolved this.  Had something
similar...well...maybe, mine was the last E2k3 PF server in the admin
group.  Because the site folder server had changed I had to restart the SA
service on the new PF server.  Once that was done the remaining PF Instances
on the old PF server were instantly gone and I could delete the PF Store...

-alex

On Mon, Mar 16, 2009 at 12:24 PM, Beahm, Keith  wrote:

>  It seems I must have slept since my last E2K3 shutdown, because nothing
> is working the way I recall it should.
>
> I've got a physical Exchange 2003 Ent SP2 on W2K3 R23 Std SP2.  We are at
> the tail end of the E2K3 - E2K7 migration, and I have all the PF's
> replicated to an E2K7 server.  This is not the last E2K3 server, and not the
> only E2K3 PF replica.  I have already tried "Moving all Replica's"
> to another server, and waited for 24+hr, but the Global Events PF still
> shows under Instances.  No errors relating to that request in the event
> log.  When I try to delete the PF DB I get the warning that "...cant delete
> because contains at least one replica...".  If I try to directly "Remove
> Replica" then I get the error that a PF must have at least 1 replica.
>
> Any ideas?
>
>  Keith
>
>
> This communication is from a law firm and may contain confidential and/or
> privileged information. If it has been sent to you in error, please contact
> the sender for instructions concerning return or destruction, and do not use
> or disclose the contents to others.
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Changing default address format

[Alex Fontana]

Either method will work as long as you have the priority set correctly, the
lower the number the higher the priority.

As for the format, you need to enter the domain, it'll error if you don't.

On Fri, Jun 19, 2009 at 9:56 AM, Joe Heaton  wrote:

> I need to change our company's e-mail format from:
> firstinitiallastn...@domain  to firstname.lastn...@domain.  I need to
> leave the original in place as a secondary for a period of time for the
> transition.  I know the variables I want are %g.%s, but here's my question:
>
> Do I need to edit the existing default recipient policy and add the new
> format as a new SMTP address, and make it the default, or should I create a
> new recipient policy for it?  Also, when I enter the new address format, do
> I just put in the %g.%s, or do I enter %g...@domain?
>
> Thanks,
>
> Joe Heaton
> ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
> ~ http://www.sunbeltsoftware.com/Ninja~
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Mailbox move question

[Alex Fontana]

I occasionally saw this in 2003, the left over was usually much smaller,
appeared as disconnected, but couldn't be manually purged.  I never left
those databases around long enough to see if the mailbox purge task would
clean them up.  You can't delete the database while that mailbox still shows
up there so what we did was dismount the database, delete/rename the edb/stm
files, mount (orphaned mailboxes are now gone), delete store.

-alex

On Fri, Jun 19, 2009 at 8:39 AM, David L Herrick wrote:

> Exchange 2003 running on server 2003 a number of mailboxes were moved to
> a new store all seemed well.
>
> Now one mailbox appears in both stores: in the old store it appears it
> is ready to be purged, if one attempts that it fails saying it has been
> reconnected to a user. It has not been logged into for some time and is
> clear that all activity is happening in the new store. Additional clue
> when the users logs into outlook 2007 they are asked if they want to use
> their temporary mailbox or their old one with a warning that using the
> old one will not allow them to send mail, etc.  To my knowledge they
> have never connected to the old mailbox
>
> How does one clean this up?
>
>
> thanks
>
>
> This email and any attached files are confidential and intended solely for
> the intended recipient(s). If you are not the named recipient you should not
> read, distribute, copy or alter this email. Any views or opinions expressed
> in this email are those of the author and do not represent those of the
> Names in the News company. Warning: Although precautions have been taken to
> make sure no viruses are present in this email, the company cannot accept
> responsibility for any loss or damage that arise from the use of this email
> or attachments.
>
> ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
> ~ http://www.sunbeltsoftware.com/Ninja~
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Exchange 2007 Persian language support

[Alex Fontana]

Control Panel > Regional Options to install the language packs you require.
You'll need to install on the DC/GCs and Exchange servers.  That'll get
Outlook clients working, OWA is different.

Check this link for more info:
http://technet.microsoft.com/en-us/library/bb123979.aspx

-alex

On Sat, Jun 27, 2009 at 2:09 PM, Connolly, Peter  wrote:

> All,
>
> Exchange 2007 includes language support (client) for Persian (Farsi).  How
> do I enable/install a language pack?  And are there any pitfalls for doing
> this?  Thanks!
>
> Peter
> ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
> ~ http://www.sunbeltsoftware.com/Ninja~
>
>

Re: Exchange 2003 message tracking

[Alex Fontana]

Absolutely possible, and when you see that the message is submitted to the
store you can check for rules/junk-email settings (as Don mentioned).

-alex

On Wed, Jul 1, 2009 at 1:48 AM, Ellis, John P. wrote:

> Is it possible to track messages using the message tracking function
> that have been CC'd to someone?
> We have a user that says hes not getting emails if hes on the CC line.
>
> Clients are Outlook 2003.
>
> Thanks
> John
>
> ---
>  John Ellis   Tel (0151) 666 3208
>  Senior IT OfficerFax (0151) 666 3049
> Wirral IT Services
>   johnel...@wirral.gov.uk
> ---
>
> **
> This email and any files transmitted with it are confidential and
> intended solely for the use of the individual or entity to whom they
> are addressed. If you have received this email in error please notify
> the system manager.
>
> This footnote also confirms that this email message has been swept by
> MIMEsweeper for the presence of computer viruses.
>
> www.clearswift.com
> **
>
>
>
>
>

Re: Major goof when migrating OAB to E2K7

[Alex Fontana]

Are the events below from the 03 or 07 server?

You've set up replicas, but have they actually replicated over yet?  You can
try checking via ESM if the '07 server has the instances of the OAB.

On Wed, Jul 1, 2009 at 8:33 AM, Russ Patterson  wrote:

> Hi  - I think I just made the biggest mistake I've ever done in Exchange.
> When I moved OAB generation from E2k3 to E2k7, I pointed to an E2k7 server
> that did not have a Public Folder store. Geesh.
>
> I've since created one, and used PFDAVAdmin to set up replication, but I'm
> still having lots of issues with the System Folders.
>
> Main issue is no OAB getting created with these two errors:
>
> Log Name:  Application
> Source:MSExchangeSA
> Date:  7/1/2009 10:14:53 AM
> Event ID:  9331
> Task Category: OAL Generator
> Level: Error
> Keywords:  Classic
> User:  N/A
> Computer:  CLTEXCH0332.ds1.ltcorp.tree
> Description:
> OALGen encountered error 80070005 (internal ID 50103b4) accessing the
> public folder store while generating the offline address list for address
> list '/'.
> - Default Offline Address List
>
>
> Log Name:  Application
> Source:MSExchangeSA
> Date:  7/1/2009 10:14:53 AM
> Event ID:  9335
> Task Category: OAL Generator
> Level: Error
> Keywords:  Classic
> User:  N/A
> Computer:  CLTEXCH0332.ds1.ltcorp.tree
> Description:
> OALGen encountered error 80070005 while cleaning the offline address list
> public folders under /o=LendingTree/cn=addrlists/cn=oabs/cn=Default Offline
> Address List.  Please make sure the public folder store is mounted and
> replicas exist of the offline address list folders.  No offline address
> lists have been generated.  Please check the event log for more information.
>
> - Default Offline Address List
>
> I've turned up logging for MSExchangeSA\OAL Generator to medium, those are
> the only errors given.
>
> Any suggestions? It's easy to dismount the PF store (which I've done,) but
> there are end-users mailboxes on this server, so I could only restart the IS
> at night. I also see that the siteFolderServer attribute in ADSIEdit still
> points to our E2k3 server.
>
> Help greatly appreciated.
>

Re: Removing Exchange Server

[Alex Fontana]

If its not showing up via ADSI then I gotta ask...did you refresh ESM or
restart it?  Did you uninstall Exchange 2003 from the box using add/remove,
and was that successful?

-alex

On Wed, Jul 1, 2009 at 3:41 AM, Richard Sice  wrote:

> Quick question...I've got an issue where I'm looking to remove an
> additional E2003 Server from our Exchange Admin Group.
>
> I went through MS's KB on doing this but for some reason when trying to
> finally remove the server from AD (via Exchange System Manager) I get the
> error message "An invalid ADSI pathname was passed" and Error ID c103fc97.
> MS KBs talk about the ability to remove the server thro ADSIedit. However
> when I look to do this the server is not shown in the list of Exchange
> Servers, even though the server name is still shown within Exchange System
> Manager.
>
> Any ideas on how to remove it from the Admin Group would be very welcome.
>

Re: Freebusy folder replication

[Alex Fontana]

Most people don't because it does just the opposite.  You are now subject to
public folder replication for having up to date free/busy.  If the users and
the f/b server are not well connected then it may be worth paying the price
for a little out of synch f/b to get a little snappier response from the f/b
populating in OLK.

Of course, I am assuming you are running Outlook 2003 clients or OLK 2007
connecting to Ex2003.

-alex

On Wed, Jul 1, 2009 at 1:04 AM, Peter Johnson
wrote:

>  Hi guys
>
>
>
> I just wanted a quick opinion . Is it worth replicating the free busy
> folder to the 3 exchange servers public folder stores I have. I assume this
> would speed up the viewing of the information  when people are booking
> meetings across the servers?
>
>
>
> Regards
>
> Peter Johnson
>
>
>

Free/busy question...

[Alex Fontana]

Exchange 2007 SP1, OLK 2003, 2007 and OWA

Have an availability address space of sub.domain.com with an access method
of public folder.  We have a recipient of type mailUser with an external
SMTP address of u...@sub.domain.com.  The free/busy data for this user is
perfectly visible from OLK2007 and OWA, but not from OLK2003.

Seems I'm missing something here...if the access method is public folder
aren't OLK (both versions) and OWA going to \non_ipm_subtree\schedule+ free
busy\EX:/O=org/OU=AG/cn=recipients/cn=user.eml for free/busy?  This users
legacyExchangeDN is /o=org/ou=ag/cn=recipients/cn=user

Thanks,
alex

Re: Major goof when migrating OAB to E2K7

[Alex Fontana]

Are the events below from the 03 or 07 server?

You've set up replicas, but have they actually replicated over yet?  You can
try checking via ESM if the '07 server has the instances of the OAB.

On Wed, Jul 1, 2009 at 8:33 AM, Russ Patterson  wrote:

> Hi  - I think I just made the biggest mistake I've ever done in Exchange.
> When I moved OAB generation from E2k3 to E2k7, I pointed to an E2k7 server
> that did not have a Public Folder store. Geesh.
>
> I've since created one, and used PFDAVAdmin to set up replication, but I'm
> still having lots of issues with the System Folders.
>
> Main issue is no OAB getting created with these two errors:
>
> Log Name:  Application
> Source:MSExchangeSA
> Date:  7/1/2009 10:14:53 AM
> Event ID:  9331
> Task Category: OAL Generator
> Level: Error
> Keywords:  Classic
> User:  N/A
> Computer:  CLTEXCH0332.ds1.ltcorp.tree
> Description:
> OALGen encountered error 80070005 (internal ID 50103b4) accessing the
> public folder store while generating the offline address list for address
> list '/'.
> - Default Offline Address List
>
>
> Log Name:  Application
> Source:MSExchangeSA
> Date:  7/1/2009 10:14:53 AM
> Event ID:  9335
> Task Category: OAL Generator
> Level: Error
> Keywords:  Classic
> User:  N/A
> Computer:  CLTEXCH0332.ds1.ltcorp.tree
> Description:
> OALGen encountered error 80070005 while cleaning the offline address list
> public folders under /o=LendingTree/cn=addrlists/cn=oabs/cn=Default Offline
> Address List.  Please make sure the public folder store is mounted and
> replicas exist of the offline address list folders.  No offline address
> lists have been generated.  Please check the event log for more information.
>
> - Default Offline Address List
>
> I've turned up logging for MSExchangeSA\OAL Generator to medium, those are
> the only errors given.
>
> Any suggestions? It's easy to dismount the PF store (which I've done,) but
> there are end-users mailboxes on this server, so I could only restart the IS
> at night. I also see that the siteFolderServer attribute in ADSIEdit still
> points to our E2k3 server.
>
> Help greatly appreciated.
>

Re: Major goof when migrating OAB to E2K7

[Alex Fontana]

The sitefolderserver will be moved (or changed in AD) to your Ex2007 server
once you remove the public folder database from the last ex2003 database;
you'll be pompted when you go to delete the pf db.  At that time you will
need to restart the SA on the Ex2007 public folder server for the change to
take affect.  As for the offlineoabserver, I believe so, but I'm not 100%
sure.  I can check on this a bit later and confirm...unless someone jumps in
before me.

also see this: http://technet.microsoft.com/en-us/library/bb288905.aspx

-alex

On Thu, Jul 2, 2009 at 7:55 AM, Russ Patterson  wrote:

> We didnt get any events 9331 or 9335 overnight, so I'm knocking-on-wood
> hoping we're good. Test mailboxes showed up in the OAB as well.
>
> Anybody feel like answering :
>
>  Shouldn't ADSIEdit show these two attributes as the same server? ::
> offlineabserver sitefolderserver - one is still the old, E2k3 server that we
> want to retire, and the other is set to the " troubled " E2k7 server we've
> been talking about.
>
> Thanks All!
>
> On Wed, Jul 1, 2009 at 6:06 PM, Russ Patterson  wrote:
>
>>  Hi Alex - thanks for taking this on. BTW, the errors are from the 07
>> srvr (in that server name in the eventID the 03 is the rack number and the
>> 32 is the row number)
>>
>> We think the replicas were finished today after
>> "update-OfflineAddressBook" and a "Update-FileDistributionService" were
>> issued. A few hours after they were issued, we saw the mailboxes we had been
>> missing in the OAB. We've created another test account to see if it appears
>> during the regularly scheduled OAB build at 5 am tomorrow. (Plus, we'll be
>> checking for the event I listed at the beginning of this thread.
>>
>> I'll keep you posted. Again - Thanks! My next question may well be:
>> Shouldn't ADSIEdit show these two attributes as the same server? ::
>> offlineabserver sitefolderserver - one is still the old, E2k3 server that we
>> want to retire, and the other is set to the " troubled " E2k7 server we've
>> been talking about.
>>
>> Russ
>>
>>
>>
>>  On Wed, Jul 1, 2009 at 5:25 PM, Alex Fontana wrote:
>>
>>>   Are the events below from the 03 or 07 server?
>>>
>>> You've set up replicas, but have they actually replicated over yet?  You
>>> can try checking via ESM if the '07 server has the instances of the OAB.
>>>
>>> On Wed, Jul 1, 2009 at 8:33 AM, Russ Patterson  wrote:
>>>
>>>> Hi  - I think I just made the biggest mistake I've ever done in
>>>> Exchange. When I moved OAB generation from E2k3 to E2k7, I pointed to an
>>>> E2k7 server that did not have a Public Folder store. Geesh.
>>>>
>>>> I've since created one, and used PFDAVAdmin to set up replication, but
>>>> I'm still having lots of issues with the System Folders.
>>>>
>>>> Main issue is no OAB getting created with these two errors:
>>>>
>>>> Log Name:  Application
>>>> Source:MSExchangeSA
>>>> Date:  7/1/2009 10:14:53 AM
>>>> Event ID:  9331
>>>> Task Category: OAL Generator
>>>> Level: Error
>>>> Keywords:  Classic
>>>> User:  N/A
>>>> Computer:  CLTEXCH0332.ds1.ltcorp.tree
>>>> Description:
>>>> OALGen encountered error 80070005 (internal ID 50103b4) accessing the
>>>> public folder store while generating the offline address list for address
>>>> list '/'.
>>>> - Default Offline Address List
>>>>
>>>>
>>>> Log Name:  Application
>>>> Source:MSExchangeSA
>>>> Date:  7/1/2009 10:14:53 AM
>>>> Event ID:  9335
>>>> Task Category: OAL Generator
>>>> Level: Error
>>>> Keywords:  Classic
>>>> User:  N/A
>>>> Computer:  CLTEXCH0332.ds1.ltcorp.tree
>>>> Description:
>>>> OALGen encountered error 80070005 while cleaning the offline address
>>>> list public folders under /o=LendingTree/cn=addrlists/cn=oabs/cn=Default
>>>> Offline Address List.  Please make sure the public folder store is mounted
>>>> and replicas exist of the offline address list folders.  No offline address
>>>> lists have been generated.  Please check the event log for more 
>>>> information.
>>>>
>>>> - Default Offline Address List
>>>>
>>>> I've turned up logging for MSExchangeSA\OAL Generator to medium, those
>>>> are the only errors given.
>>>>
>>>> Any suggestions? It's easy to dismount the PF store (which I've done,)
>>>> but there are end-users mailboxes on this server, so I could only restart
>>>> the IS at night. I also see that the siteFolderServer attribute in ADSIEdit
>>>> still points to our E2k3 server.
>>>>
>>>> Help greatly appreciated.
>>>>
>>>
>>>
>>
>

Re: Freebusy folder replication

[Alex Fontana]

In that case you are using the availability service for free/busy info.
Only legacy clients will query public folders for f/b.



On Thu, Jul 2, 2009 at 10:03 AM, Peter Johnson
wrote:

>  I’m running Outlook 2007 talking to Exchange 2007 Service Pack 1
>
>
>
>
>
> *From:* Alex Fontana [mailto:afontana...@gmail.com]
> *Sent:* 01 July 2009 23:33
> *To:* MS-Exchange Admin Issues
> *Subject:* Re: Freebusy folder replication
>
>
>
> Most people don't because it does just the opposite.  You are now subject
> to public folder replication for having up to date free/busy.  If the users
> and the f/b server are not well connected then it may be worth paying the
> price for a little out of synch f/b to get a little snappier response from
> the f/b populating in OLK.
>
>
>
> Of course, I am assuming you are running Outlook 2003 clients or OLK 2007
> connecting to Ex2003.
>
>
>
> -alex
>
> On Wed, Jul 1, 2009 at 1:04 AM, Peter Johnson 
> wrote:
>
> Hi guys
>
>
>
> I just wanted a quick opinion . Is it worth replicating the free busy
> folder to the 3 exchange servers public folder stores I have. I assume this
> would speed up the viewing of the information  when people are booking
> meetings across the servers?
>
>
>
> Regards
>
> Peter Johnson
>
>
>
>
>

Re: Free/busy question...

[Alex Fontana]

Do versions of outlook prior to 2007 even care about domain?  Aren't they
looking up f/b simply based on the legacyExchangeDN?

On the 2007 side I get how they look up via availability, but does that also
include f/b that is only contained in the Schedule+ Free Busy pf as an eml,
i.e. there is no Exchange mailbox only a service that pushes the f/b to the
public folder?  Is there anyway outside of OWA/Outlook to see that data?

Thanks for the help.
-alex

On Thu, Jul 2, 2009 at 1:32 PM, Michael B. Smith
wrote:

>  2007 and above (both Outlook and Exchange) will use the free/busy
> web-service preferentially to look up free/busy info. They do those lookups
> primarily via e-mail address.
>
> Versions of Outlook and Exchange prior to 2007 treated sub.domain.com as
> the same as domain.com in some places and as different things in other
> places.
>
>  ------
> *From:* Alex Fontana [afontana...@gmail.com]
> *Sent:* Wednesday, July 01, 2009 5:43 PM
> *To:* MS-Exchange Admin Issues
> *Subject:* Free/busy question...
>
>  Exchange 2007 SP1, OLK 2003, 2007 and OWA
>
> Have an availability address space of sub.domain.com with an access method
> of public folder.  We have a recipient of type mailUser with an external
> SMTP address of u...@sub.domain.com.  The free/busy data for this user is
> perfectly visible from OLK2007 and OWA, but not from OLK2003.
>
> Seems I'm missing something here...if the access method is public folder
> aren't OLK (both versions) and OWA going to \non_ipm_subtree\schedule+ free
> busy\EX:/O=org/OU=AG/cn=recipients/cn=user.eml for free/busy?  This users
> legacyExchangeDN is /o=org/ou=ag/cn=recipients/cn=user
>
> Thanks,
> alex
>

Re: SSL Accelerator/Cert Error on CAS

[Alex Fontana]

We sit behind F5's too, but keep the self-signed cert.  As far as we are
concerned no one should ever know that a CAS exists...all they need to know
is owa.ourdomain.com which hits the F5.  This allows us to bring up, decomm,
move around our CAS as we see fit.  All of our internalURL's point to
http://..., the external URLs point to https://owa.domain.com.  Only
exception to this would be a different AD site hosting mailboxes where you
wanted cas-to-cas proxying to be used, the other sites cas' would then need
to have the internalURLs as https://...

-alex

On Thu, Jul 16, 2009 at 6:22 AM, John Bowles wrote:

>   All-
>
> I have a f5 in front of my 2 CAS servers handling the SSL's for me.  When I
> hit the f5 it works fine, when I log into the OWA box I get a cert error.
> How do I remove the error?  By removing the self cert OWA has installed by
> default?
>
> Exchange 2007, 2 CAS/HUB, 1 Mailbox Server role
>
> Thank you,
>
>
> _
> John Bowles
>
>

Re: reply Rule

[Alex Fontana]

That...and create your "have server reply with..." rule and you should be
good.  Can be done with mailboxes and public folders.  However, watch for
out of office, ndr, bounce-back storms, for those reasons I tend to not do
this in Exchange.  Those auto-reply rules don't like using a different
reply-to address (i.e. donotre...@...) either, otherwise there would be no
prob...

-alex

On Thu, Jul 16, 2009 at 1:31 PM, Campbell, Rob <
rob_campb...@centraltechnology.net> wrote:

> Yes, you can.
>
> In EMC Org|Hub Transport|Remote Domains|Default|Format of original message
> sent as attachment to journal report tab (Probably the most non-intuitive
> name for a configuration tab anybody ever came up with, but there it is).
>
> Enable "Allow automatic replies"
>
>
>
>
>
> -Original Message-
> From: KevinM [mailto:kev...@wlkmmas.org]
> Sent: Thursday, July 16, 2009 2:59 PM
> To: MS-Exchange Admin Issues
> Subject: reply Rule
>
> Outlook 2007, Exchange 2007. All severs are Earthbound.
>
> My Want |  I want to make a rule on outlook that says "reply to every
> message with we got your email" . Basically an autoreply. Yes, These
> messages need to go externally...
> My Question  | Can I do enable rules based auto replies to the interwebs in
> Exchange 2007?
>
>
>
>
> **
> Note:
> The information contained in this message may be privileged and
> confidential and
> protected from disclosure.  If the reader of this message is not the
> intended
> recipient, or an employee or agent responsible for delivering this message
> to
> the intended recipient, you are hereby notified that any dissemination,
> distribution or copying of this communication is strictly prohibited. If
> you
> have received this communication in error, please notify us immediately by
> replying to the message and deleting it from your computer.
>
> **
>
>
>
>
>

Force a site change on Exchange 2007 server

[Alex Fontana]

If I move an Exchange server to a new IP segment it will eventually update
in AD to reflect that it is now in that site.  I won't have an opportunity
to try again until tomorrow, but curious if anyone knows.

Thanks!
-alex

Re: Event 9667 - Named properties quota limit

[Alex Fontana]

Probably not, most likely x-headers coming in from the internet, or if you
are like us with many home grown apps that send mail those apps may be at
fault.

I know I'm going to have a lot of work to do before going RU8 or SP2 due to
the amount of custom x-headers we have and how it will affect our IMAP
users...sigh...

-alex

On Wed, Aug 26, 2009 at 1:28 PM, Maglinger, Paul wrote:

> So could this problem be causing the problem we're having trying to get
> our iPhone to connect to the Exchange server?
>
> -Original Message-
> From: Michael B. Smith [mailto:mich...@owa.smithcons.com]
> Sent: Wednesday, August 26, 2009 3:18 PM
> To: MS-Exchange Admin Issues
>  Subject: RE: Event 9667 - Named properties quota limit
>
> This was a major area of effort in Exchange Server 2007 SP2. These fixes
> are not (and as far as I know, will not be) backported to Exchange
> Server 2003.
>
> Go ahead and bump it to 16K. Then keep track of it. If you hit 16K, you
> should seriously considering doing the move-mailbox.
>
> 
> From: Maglinger, Paul [pmaglin...@scvl.com]
> Sent: Wednesday, August 26, 2009 4:17 PM
> To: MS-Exchange Admin Issues
> Subject: Event 9667 - Named properties quota limit
>
> Getting the following in the Exchange 2003 server application log:
>
> Event Type: Error
> Event Source:   MSExchangeIS
> Event Category: General
> Event ID:   9667
> Date:   8/26/2009
> Time:   1:31:25 PM
> User:   N/A
> Computer:   OTIS
> Description:
> Failed to create a new named property for database "First Storage
> Group\Mailbox Store (OTIS)" because the number of named properties
> reached the quota limit (8192).
> User attempting to create the named property: "BESAdmin"
> Named property GUID: 00020386---c000-0046
> Named property name/id: "cd"
>
>
> Googling finds that I can bump the limit up in the registry. That's all
> well and good, but it goes on to say that if I hit the 32K limit the
> information store won't work anymore.  Okay, so if I bump the registry
> setting up to say... 16K, what are the odds that I'll hit that number
> any time soon?  And from what I've read, if it hits the 32K mark, the
> information store doesn't work anymore.  The fix for this appears to be
> creating another database and copying all the mailboxes over to it, but
> won't the quota just fill up again eventually?
>
>
> Paul
>
>
>
>
>

Re: Event 9667 - Named properties quota limit

[Alex Fontana]

hmm...got a link to details around the reg key?  That would definitely save
us, but I haven't seen a word about that in release notes, or other links
i've ready wrt sp2. -alex

On Wed, Aug 26, 2009 at 1:34 PM, Michael B. Smith  wrote:

>  Note that RU8 and SP2 have different solutions.
>
> Also, SP2 offers a registry key to "turn off" the new behavior.
>
>  ------
> *From:* Alex Fontana [afontana...@gmail.com]
> *Sent:* Wednesday, August 26, 2009 4:30 PM
>
> *To:* MS-Exchange Admin Issues
> *Subject:* Re: Event 9667 - Named properties quota limit
>
>Probably not, most likely x-headers coming in from the internet, or if
> you are like us with many home grown apps that send mail those apps may be
> at fault.
>
> I know I'm going to have a lot of work to do before going RU8 or SP2 due to
> the amount of custom x-headers we have and how it will affect our IMAP
> users...sigh...
>
> -alex
>
> On Wed, Aug 26, 2009 at 1:28 PM, Maglinger, Paul wrote:
>
>> So could this problem be causing the problem we're having trying to get
>> our iPhone to connect to the Exchange server?
>>
>> -Original Message-
>> From: Michael B. Smith [mailto:mich...@owa.smithcons.com]
>> Sent: Wednesday, August 26, 2009 3:18 PM
>> To: MS-Exchange Admin Issues
>>  Subject: RE: Event 9667 - Named properties quota limit
>>
>> This was a major area of effort in Exchange Server 2007 SP2. These fixes
>> are not (and as far as I know, will not be) backported to Exchange
>> Server 2003.
>>
>> Go ahead and bump it to 16K. Then keep track of it. If you hit 16K, you
>> should seriously considering doing the move-mailbox.
>>
>> 
>> From: Maglinger, Paul [pmaglin...@scvl.com]
>> Sent: Wednesday, August 26, 2009 4:17 PM
>> To: MS-Exchange Admin Issues
>> Subject: Event 9667 - Named properties quota limit
>>
>> Getting the following in the Exchange 2003 server application log:
>>
>> Event Type: Error
>> Event Source:   MSExchangeIS
>> Event Category: General
>> Event ID:   9667
>> Date:   8/26/2009
>> Time:   1:31:25 PM
>> User:   N/A
>> Computer:   OTIS
>> Description:
>> Failed to create a new named property for database "First Storage
>> Group\Mailbox Store (OTIS)" because the number of named properties
>> reached the quota limit (8192).
>> User attempting to create the named property: "BESAdmin"
>> Named property GUID: 00020386---c000-0046
>> Named property name/id: "cd"
>>
>>
>> Googling finds that I can bump the limit up in the registry. That's all
>> well and good, but it goes on to say that if I hit the 32K limit the
>> information store won't work anymore.  Okay, so if I bump the registry
>> setting up to say... 16K, what are the odds that I'll hit that number
>> any time soon?  And from what I've read, if it hits the 32K mark, the
>> information store doesn't work anymore.  The fix for this appears to be
>> creating another database and copying all the mailboxes over to it, but
>> won't the quota just fill up again eventually?
>>
>>
>> Paul
>>
>>
>>
>>
>>
>

Re: Event 9667 - Named properties quota limit

[Alex Fontana]

Sweet, thanks.

On Wed, Aug 26, 2009 at 1:51 PM, Campbell, Rob <
rob_campb...@centraltechnology.net> wrote:

>  http://technet.microsoft.com/en-us/library/bb124151.aspx
>
>
>
> See HeaderPromotionModeSetting
>
>
>  ------
>
> *From:* Alex Fontana [mailto:afontana...@gmail.com]
> *Sent:* Wednesday, August 26, 2009 3:42 PM
> *To:* MS-Exchange Admin Issues
> *Subject:* Re: Event 9667 - Named properties quota limit
>
>
>
> hmm...got a link to details around the reg key?  That would definitely save
> us, but I haven't seen a word about that in release notes, or other links
> i've ready wrt sp2. -alex
>
> On Wed, Aug 26, 2009 at 1:34 PM, Michael B. Smith <
> mich...@owa.smithcons.com> wrote:
>
> Note that RU8 and SP2 have different solutions.
>
>
>
> Also, SP2 offers a registry key to "turn off" the new behavior.
>
>
>  --
>
> *From:* Alex Fontana [afontana...@gmail.com]
> *Sent:* Wednesday, August 26, 2009 4:30 PM
>
>
> *To:* MS-Exchange Admin Issues
> *Subject:* Re: Event 9667 - Named properties quota limit
>
>
>
> Probably not, most likely x-headers coming in from the internet, or if you
> are like us with many home grown apps that send mail those apps may be at
> fault.
>
>
>
> I know I'm going to have a lot of work to do before going RU8 or SP2 due to
> the amount of custom x-headers we have and how it will affect our IMAP
> users...sigh...
>
>
>
> -alex
>
> On Wed, Aug 26, 2009 at 1:28 PM, Maglinger, Paul 
> wrote:
>
> So could this problem be causing the problem we're having trying to get
> our iPhone to connect to the Exchange server?
>
>
> -Original Message-
> From: Michael B. Smith [mailto:mich...@owa.smithcons.com]
> Sent: Wednesday, August 26, 2009 3:18 PM
> To: MS-Exchange Admin Issues
>
> Subject: RE: Event 9667 - Named properties quota limit
>
> This was a major area of effort in Exchange Server 2007 SP2. These fixes
> are not (and as far as I know, will not be) backported to Exchange
> Server 2003.
>
> Go ahead and bump it to 16K. Then keep track of it. If you hit 16K, you
> should seriously considering doing the move-mailbox.
>
> 
>  From: Maglinger, Paul [pmaglin...@scvl.com]
> Sent: Wednesday, August 26, 2009 4:17 PM
> To: MS-Exchange Admin Issues
> Subject: Event 9667 - Named properties quota limit
>
> Getting the following in the Exchange 2003 server application log:
>
> Event Type: Error
> Event Source:   MSExchangeIS
> Event Category: General
> Event ID:   9667
> Date:   8/26/2009
> Time:   1:31:25 PM
> User:   N/A
> Computer:   OTIS
> Description:
> Failed to create a new named property for database "First Storage
> Group\Mailbox Store (OTIS)" because the number of named properties
> reached the quota limit (8192).
> User attempting to create the named property: "BESAdmin"
> Named property GUID: 00020386---c000-0046
> Named property name/id: "cd"
>
>
> Googling finds that I can bump the limit up in the registry. That's all
> well and good, but it goes on to say that if I hit the 32K limit the
> information store won't work anymore.  Okay, so if I bump the registry
> setting up to say... 16K, what are the odds that I'll hit that number
> any time soon?  And from what I've read, if it hits the 32K mark, the
> information store doesn't work anymore.  The fix for this appears to be
> creating another database and copying all the mailboxes over to it, but
> won't the quota just fill up again eventually?
>
>
> Paul
>
>
>
>
>
>
>
> **
> Note:
> The information contained in this message may be privileged and confidential 
> and
> protected from disclosure.  If the reader of this message is not the intended
> recipient, or an employee or agent responsible for delivering this message to
> the intended recipient, you are hereby notified that any dissemination,
> distribution or copying of this communication is strictly prohibited. If you
> have received this communication in error, please notify us immediately by
> replying to the message and deleting it from your computer.
> **
>
>

Any Snow Leopard users?

[Alex Fontana]

We seem to have uncovered a strange/scary issue with some users who are
connecting to Exchange 2007 SP1 mailboxes via EWS using either Apple
mail.app, iCal or Entourage (more prevelant on mail.app and ical).

1. Users have reported inbox subfolders go missing, both from the client and
server, never to be seen again.  The inbox doesn't get touched though.
2. Users on occasion are presented someone elses mailbox when giving their
own credentials
3. Users have sent messages and the FROM address is someone elses, when
tracked via Exchange it appears from the "FROM" addresses mailbox

Raised a ticket with MS but thier response was "We don't support SL".  This
clearly seems like a server issue, but we can't reproduce on anything other
than SL.

Just curious if anyone else has seen any issues like this using EWS.

-alex

Re: Any Snow Leopard users?

[Alex Fontana]

I've been trying to reproduce this for the past week...it seems only
"Special" people can reproduce it...arg.  We have a case open with Apple.
I'll update with results if any...

On Wed, Sep 9, 2009 at 12:46 PM, Matthew Bullock  wrote:

>  Do you have a reliable way to reproduce with Entourage?  We only have one
> Macbook user at our company, but go figure, he owns the place.  He hasn’t
> been upgraded yet but it would be great to figure this one out on our test
> machine before he does want the upgrade to SL.
>
>
>
> -matt
>
>
>
> *From:* Alex Fontana [mailto:afontana...@gmail.com]
> *Sent:* Wednesday, September 09, 2009 11:46 AM
> *To:* MS-Exchange Admin Issues
> *Subject:* Any Snow Leopard users?
>
>
>
> We seem to have uncovered a strange/scary issue with some users who are
> connecting to Exchange 2007 SP1 mailboxes via EWS using either Apple
> mail.app, iCal or Entourage (more prevelant on mail.app and ical).
>
>
>
> 1. Users have reported inbox subfolders go missing, both from the client
> and server, never to be seen again.  The inbox doesn't get touched though.
>
> 2. Users on occasion are presented someone elses mailbox when giving their
> own credentials
>
> 3. Users have sent messages and the FROM address is someone elses, when
> tracked via Exchange it appears from the "FROM" addresses mailbox
>
>
>
> Raised a ticket with MS but thier response was "We don't support SL".  This
> clearly seems like a server issue, but we can't reproduce on anything other
> than SL.
>
>
>
> Just curious if anyone else has seen any issues like this using EWS.
>
>
>
> -alex
>

Re: Any Snow Leopard users?

[Alex Fontana]

I haven't seen the issue with Entourage, I think it did happen in beta of
ews, but the issue has been really bad with mail.app and ical.

On Wed, Sep 9, 2009 at 2:13 PM, Sobey, Richard A wrote:

>  Been using SL with Entourage EWS, 2007 SP1 RU9 for over a week now, seen
> no issues at all. We will not be stopping our users upgrading however (free
> reign on whatever client/platform they prefer) so I imagine if this issue is
> real it’ll rear its ugly head sooner or later.
>
>
>
> *From:* bounce-8653018-8066...@lyris.sunbelt-software.com [mailto:
> bounce-8653018-8066...@lyris.sunbelt-software.com] *On Behalf Of *Alex
> Fontana
> *Sent:* 09 September 2009 21:24
> *To:* MS-Exchange Admin Issues
> *Subject:* Re: Any Snow Leopard users?
>
>
>
> I've been trying to reproduce this for the past week...it seems only
> "Special" people can reproduce it...arg.  We have a case open with Apple.
> I'll update with results if any...
>
> On Wed, Sep 9, 2009 at 12:46 PM, Matthew Bullock 
> wrote:
>
> Do you have a reliable way to reproduce with Entourage?  We only have one
> Macbook user at our company, but go figure, he owns the place.  He hasn’t
> been upgraded yet but it would be great to figure this one out on our test
> machine before he does want the upgrade to SL.
>
>
>
> -matt
>
>
>
> *From:* Alex Fontana [mailto:afontana...@gmail.com]
> *Sent:* Wednesday, September 09, 2009 11:46 AM
> *To:* MS-Exchange Admin Issues
> *Subject:* Any Snow Leopard users?
>
>
>
> We seem to have uncovered a strange/scary issue with some users who are
> connecting to Exchange 2007 SP1 mailboxes via EWS using either Apple
> mail.app, iCal or Entourage (more prevelant on mail.app and ical).
>
>
>
> 1. Users have reported inbox subfolders go missing, both from the client
> and server, never to be seen again.  The inbox doesn't get touched though.
>
> 2. Users on occasion are presented someone elses mailbox when giving their
> own credentials
>
> 3. Users have sent messages and the FROM address is someone elses, when
> tracked via Exchange it appears from the "FROM" addresses mailbox
>
>
>
> Raised a ticket with MS but thier response was "We don't support SL".  This
> clearly seems like a server issue, but we can't reproduce on anything other
> than SL.
>
>
>
> Just curious if anyone else has seen any issues like this using EWS.
>
>
>
> -alex
>
>
>

Re: Any Snow Leopard users?

[Alex Fontana]

Folders are gone, from the mailbox and client.  Case is open with Apple,
interested to hear what they find, if anything.

On Wed, Sep 9, 2009 at 5:58 PM, Steve Szabo  wrote:

>  I do not have anyone running a Mac, never mind upgrading to Snow Leopard,
> but that does not stop me from reading about such things. As I saw mentioned
> above, there seem to be a number of compatibility issues that have cropped
> up, and it has been mentioned that there is a need for a number of patches
> for various issues to be issued as soon as possible.
>
>
>
> For those who have had the issue of disappearing folders, are they missing
> in OWA as well? Have you checked with Apple support (probably the first
> support call I would have made, since you say the issue is not reproducible
> on other machines, figuring you are including Windows machines)?
>
>
>
> \\Steve//
>
>
>
> *From:* Alex Fontana [mailto:afontana...@gmail.com]
> *Sent:* Wednesday, September 09, 2009 2:46 PM
> *To:* MS-Exchange Admin Issues
> *Subject:* Any Snow Leopard users?
>
>
>
> We seem to have uncovered a strange/scary issue with some users who are
> connecting to Exchange 2007 SP1 mailboxes via EWS using either Apple
> mail.app, iCal or Entourage (more prevelant on mail.app and ical).
>
>
>
> 1. Users have reported inbox subfolders go missing, both from the client
> and server, never to be seen again.  The inbox doesn't get touched though.
>
> 2. Users on occasion are presented someone elses mailbox when giving their
> own credentials
>
> 3. Users have sent messages and the FROM address is someone elses, when
> tracked via Exchange it appears from the "FROM" addresses mailbox
>
>
>
> Raised a ticket with MS but thier response was "We don't support SL".  This
> clearly seems like a server issue, but we can't reproduce on anything other
> than SL.
>
>
>
> Just curious if anyone else has seen any issues like this using EWS.
>
>
>
> -alex
>

Re: Inbox no more than 5 days worth on one mailbox.

[Alex Fontana]

yup, or if on 2007 used managed folders...simple.

On Tue, Sep 15, 2009 at 5:37 AM, Wulff Jr, Ronald J.
wrote:

>   Just make a recipient policy and apply it to that mailbox
>
>
>
>
>
>
>
> *From:* Paul Cookman [mailto:paul.cook...@selection.co.uk]
> *Sent:* Tuesday, September 15, 2009 3:06 AM
> *To:* MS-Exchange Admin Issues
> *Subject:* RE: Inbox no more than 5 days worth on one mailbox.
>
>
>
>
>
> I found that you have to be logged in to the mailbox for that particular
> rule to work as it is client side..
>
>
>
>
>
> *Paul Cookman  **+44(0) 844 874 1000 +44(0) 844 874 1001 *
>
> *paul.cook...@selection.co.u www.selection.co.uk** *
>
>
>
>
>
> This e-mail is confidential and is intended for the exclusive use of the
> addressee only. Selection Services Plc accepts no liability for personal
> views expressed. While every effort has been made to ensure the attachments
> are virus-free, they must be checked before further use, especially those
> containing encrypted data. If you have any problems with this e-mail, please
> contact our IT Manager on em...@selection.co.uk 
>
> Registered in England and Wales Registered Number: 2758710 Registered
> Office: Provident House, 122 High Street, Bromley, Kent BR1 1EZ
>
>
>
> *From:* King's Kid [mailto:kingskid1002...@yahoo.com]
> *Sent:* 14 September 2009 18:27
> *To:* MS-Exchange Admin Issues
> *Subject:* Re: Inbox no more than 5 days worth on one mailbox.
>
>
>
> A simple way may be just to add a rule to that Inbox to delete any email
> older than 5 days.
>
>
> BJ
>
>
>
> No trees were killed in the sending of this message, but a large number of
> electrons were terribly inconvenienced.
>
>
>
>
>   --
>
> *From:* Paul Cookman 
> *To:* MS-Exchange Admin Issues 
> *Sent:* Monday, September 14, 2009 9:28:11 AM
> *Subject:* Inbox no more than 5 days worth on one mailbox.
>
> I have one mailbox only that needs to have its inbox hold no more than 5
> days worth of emails. I know I can use a public folder but does anyone know
> of a way to use a mailbox?
>
>
>
> Ex 2007.
>
>
>
>
>
>
>
> *Paul Cookman Technical Account Manager*
> +44(0) 844 874 100 +44(0) 844 874 1001
>
> paul.cook...@selection.co.uk www.selection.co.uk
>
>
>
>
>
> This e-mail is confidential and is intended for the exclusive use of the
> addressee only. Selection Services Plc accepts no liability for personal
> views expressed. While every effort has been made to ensure the attachments
> are virus-free, they must be checked before further use, especially those
> containing encrypted data. If you have any problems with this e-mail, please
> contact our IT Manager on em...@selection.co.uk 
>
> Registered in England and Wales Registered Number: 2758710 Registered
> Office: Provident House, 122 High Street, Bromley, Kent BR1 1EZ
>
>
>
>
>
> --
> This message has been scanned for viruses and
> dangerous content by *MailScanner*,
> and is believed to be clean.
>
>   * * *
>
> This E-mail, along with any attachments, is considered confidential and may
> well be legally privileged. If you have received it in error, you are on
> notice of its status. Please notify us immediately by reply e-mail and then
> delete this message from your system. Please do not copy it or use it for
> any purposes, or disclose its contents to any other person. Thank you for
> your cooperation.
> * * *
> To ensure compliance with Treasury Department regulations, we inform you
> that, unless otherwise indicated in writing, any U.S. Federal tax advice
> contained in this communication  (including any attachments) is not intended
> or written to be used, and cannot be used, for the purpose of (1) avoiding
> penalties under the Internal Revenue Code or applicable state and local
> provisions or (2) promoting, marketing or recommending to another party any
> tax-related matters addressed herein.
>
> Disclaimer Version RS.US.1.01.03
>
> pdc1
>
<><><><>

Re: Antigen

[Alex Fontana]

We upgraded from Antigen everywhere to Forefront on the hub transports
only.  We use ProofPoinit for spam/av at the perimeter.  We've had no issues
with either.  Forefront config is pretty straight forward, we have four
scanners enabled with neutral scanning (I believe that means each message is
scanned by two scanners).  Configuration and updates are handled centrally
by the ForeFront management console.

-alex

On Wed, Sep 16, 2009 at 11:16 AM, mqcarp  wrote:

> Anyone still use Antigen? I am debating not renewing this service as
> we have several layers of AV. Since MS bought this product it has been
> more of a headache than anything. Is it still a common tool to use on
> Exchange?
>
> EX03
>
>

Re: Any Snow Leopard users?

[Alex Fontana]

Nothing yet, Apple is still working on this case.  I still have not been
able to reproduce the issue, but it has affected at least a dozen folks
here.  Will update as soon as I know more.

-alex

On Mon, Sep 21, 2009 at 8:00 AM, Sherry Abercrombie wrote:

> Hey Alex, anything to report on this?  I've got Mac users that are ready to
> upgrade to Snow Leopard, they especially want to upgrade our Mac server to
> it, and I'm not letting them do that right now.
>
> On Thu, Sep 10, 2009 at 12:13 AM, Alex Fontana wrote:
>
>> Folders are gone, from the mailbox and client.  Case is open with Apple,
>> interested to hear what they find, if anything.
>>
>>
>> On Wed, Sep 9, 2009 at 5:58 PM, Steve Szabo  wrote:
>>
>>>  I do not have anyone running a Mac, never mind upgrading to Snow
>>> Leopard, but that does not stop me from reading about such things. As I saw
>>> mentioned above, there seem to be a number of compatibility issues that have
>>> cropped up, and it has been mentioned that there is a need for a number of
>>> patches for various issues to be issued as soon as possible.
>>>
>>>
>>>
>>> For those who have had the issue of disappearing folders, are they
>>> missing in OWA as well? Have you checked with Apple support (probably the
>>> first support call I would have made, since you say the issue is not
>>> reproducible on other machines, figuring you are including Windows
>>> machines)?
>>>
>>>
>>>
>>> \\Steve//
>>>
>>>
>>>
>>> *From:* Alex Fontana [mailto:afontana...@gmail.com]
>>> *Sent:* Wednesday, September 09, 2009 2:46 PM
>>> *To:* MS-Exchange Admin Issues
>>> *Subject:* Any Snow Leopard users?
>>>
>>>
>>>
>>> We seem to have uncovered a strange/scary issue with some users who are
>>> connecting to Exchange 2007 SP1 mailboxes via EWS using either Apple
>>> mail.app, iCal or Entourage (more prevelant on mail.app and ical).
>>>
>>>
>>>
>>> 1. Users have reported inbox subfolders go missing, both from the client
>>> and server, never to be seen again.  The inbox doesn't get touched though.
>>>
>>> 2. Users on occasion are presented someone elses mailbox when giving
>>> their own credentials
>>>
>>> 3. Users have sent messages and the FROM address is someone elses, when
>>> tracked via Exchange it appears from the "FROM" addresses mailbox
>>>
>>>
>>>
>>> Raised a ticket with MS but thier response was "We don't support SL".
>>> This clearly seems like a server issue, but we can't reproduce on anything
>>> other than SL.
>>>
>>>
>>>
>>> Just curious if anyone else has seen any issues like this using EWS.
>>>
>>>
>>>
>>> -alex
>>>
>>
>>
>
>
> --
> Sherry Abercrombie
>
> "Any sufficiently advanced technology is indistinguishable from magic."
> Arthur C. Clarke
>

Re: Ironport or Proofpoint?

[Alex Fontana]

We use proofpoint virtual appliances and have been extremely happy with
them.  Never used Ironport.

-alex

On Thu, Sep 17, 2009 at 8:42 AM, Leedy, Andy  wrote:

>  Any insights or preferences if you had to choose between Ironport or
> Proofpoint?
>
>
>
> They both look like good products, but the salesmen always say their
> product is superior. I wonder which one does better job at filtering and
> which provides the best support.
>
>
>
> When it comes down to it, I’m looking for ease of manageability and
> effectiveness of filtering.
>
>
>
> Any thoughts or insights are appreciated (even a simple +1 vote for either
> one would be helpful).
>
>
>
> Thanks,
>
> Andy
>
>
>
> **
>
> CONFIDENTIALITY NOTICE: The information transmitted in this message is
> intended only for the person or entity to which it is addressed and may
> contain confidential and/or privileged material. Any review, retransmission,
> dissemination or other use of this information by persons or entities other
> than the intended recipient is prohibited. If you received this in error,
> please contact the sender and destroy all copies of this document. Thank
> you.
>
> Butler Animal Health Supply
>
> **
>
>
>

Re: DR site and OWA access

[Alex Fontana]

See the link below to understand cas proxying and redirection.  It sounds
like there is either some AD site misconfiguration, i.e. the mailbox you are
trying to log into may appear to be in the prod site.  What do you see when
you run a get-exchangeserver under "Site" are the DR boxes in a different
site than prod?

http://msexchangeteam.com/archive/2007/09/04/446918.aspx

-alex
On Tue, Sep 22, 2009 at 8:08 AM, Pfefferkorn, Pete (pfeffepe) <
pfeff...@ucmail.uc.edu> wrote:

> We have a DR site created and we have built a CAS/Hub server and a mailbox
> server.  The two servers are in another site so they are off-site.  I
> created a mailbox on that mailbox server and connected to the Hub server in
> that site via OWA.  When I get in, I get the message:
>
> Use the following link to open this mailbox with optimal performance
>
> It then re-directs me to our CAS in our primary site.  In a DR situation,
> those CAS would be down so I don't think we want it re-directing.  I must be
> missing some setting so that it doesn't re-direct users from that site.
>
>
>
>
>
>

Re: Exch2007 in ESX

[Alex Fontana]

Yes, currently four mailbox servers and six CAS/HT servers, working towards
a few thousand mailboxes to be migrated in the next few weeks.  All running
on ESX 3.5.

You should get new Dell server guys if they can't quantify that statement.
A properly configured VM running on a properly configured ESX server (can't
speak for Hyper-V) and properly sized should see no noticeable performance
hit.  Just as in the physical world you gotta make sure you understand your
current environment and size accordingly, with emphasize on storage and
memory.

There are at least a couple of whitepapers on Exchange 2007 performance on
ESX; HP and maybe Dell.  I would say take a look at those, test in your
environment with your type of workload and use that data to make your
decision.

-alex

On Mon, Apr 28, 2008 at 5:37 PM, Dennis Melahn <[EMAIL PROTECTED]>
wrote:

> Anyone virtualized Exchange 2007? I'm getting mixed opinions. My Dell
> server guys are saying performance would suffer too much.  I also have a
> local integrator who is a VMware and MS Gold Partner and says they
> virtualize everything and that because my information store is only about
> 25GB for approx 150 boxes I wouldn't have performance problems.  Thoughts?
>
> Thanks,
> Dennis
>
>
> ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
> ~ http://www.sunbeltsoftware.com/Ninja~
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Hotfix for Windows 2003 x64 D1 and 1E stop errors

[Alex Fontana]

FYI -

We encountered the stop errors listed in the subject when running Windows
2003 x64 SP2 with patch KB932596 on our Exchange 2007 servers.  The restarts
were random and happened across all of our x64 boxes.  MS has a hotfix for
the issue which you can request from PSS.

Update to improve kernel patch protection:
http://support.microsoft.com/kb/932596
Stop errors after installing KB932596:
http://support.microsoft.com/kb/950772

-alex

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Exmon for Exchange 2007?

[Alex Fontana]

Was able to get some exmon traces from an Exchange 2007 box but I'm unable
to open them.  I can't find any info and Exmon documentation only states
"requires Exchange 2000 or Exchange 2003 SP1 and later".

Does anyone know if it's supported or have had success?

Thanks,
-alex

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Exmon for Exchange 2007?

[Alex Fontana]

Thanks Michael.

On Tue, Apr 29, 2008 at 7:16 PM, Michael B. Smith <
[EMAIL PROTECTED]> wrote:

>  See my article in:
>
>
>
> http://www.slipstick.com/emo/2008/up080424.htm
>
>
>
> Regards,
>
>
>
> Michael B. Smith
>
> MCSE/Exchange MVP
>
> http://TheEssentialExchange.com
>
>
>
> *From:* Alex Fontana [mailto:[EMAIL PROTECTED]
> *Sent:* Tuesday, April 29, 2008 9:24 PM
> *To:* MS-Exchange Admin Issues
> *Subject:* Exmon for Exchange 2007?
>
>
>
> Was able to get some exmon traces from an Exchange 2007 box but I'm unable
> to open them.  I can't find any info and Exmon documentation only states
> "requires Exchange 2000 or Exchange 2003 SP1 and later".
>
> Does anyone know if it's supported or have had success?
>
> Thanks,
> -alex
>
>
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: DB dirty shutdown

[Alex Fontana]

you've got data loss, no doubt about thatbite the bullet and restore
from backup, but my spidey sense tells me you don't have a backup...

On Wed, Apr 30, 2008 at 12:27 AM, Adrian Teodorescu <[EMAIL PROTECTED]>
wrote:

>  Hi,
>
>
>
> Anyone has ever recover something from a db dirty shutdown ?
>
>
>
> Facts:
>
> Circular logging enable (I know was wrong)
>
> Of course missing logs …
>
> Eseutil /r cannot be done – no start logs for replay.
>
> Conclusion : missing logs for replay so no logs the only solution remain
> eseutil /p against dirty shutdown
>
>
>
> Btw db size 400 Gb ;)
>
>
>
> Eseutil /p will take 2-3 days to complete and I wonder if there are any
> chances after that to recover something an put the db in clean shutdown ?
>
>
>
> 10x,
>
>
>
> Adrian
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Export data from a disconnected mailbox?

[Alex Fontana]

Hi all,

anyone know if its possible in E2007 to export the mail out of a
disconnected mailbox with out connecting it to a user object?

TIA,

-alex

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Export data from a disconnected mailbox?

[Alex Fontana]

Thanks Victor, that's what I was trying to avoid though.

On Mon, May 12, 2008 at 5:56 AM, Victor Rodriguez <[EMAIL PROTECTED]>
wrote:

>  The easy way is to add a temp user and then connect the mail box to that
> user and export the pst file from ether the email client or the export
> mailbox command in the shell
>
>
>
> *From:* Alex Fontana [mailto:[EMAIL PROTECTED]
> *Sent:* Sunday, May 11, 2008 1:50 PM
> *To:* MS-Exchange Admin Issues
> *Subject:* Export data from a disconnected mailbox?
>
>
>
> Hi all,
>
> anyone know if its possible in E2007 to export the mail out of a
> disconnected mailbox with out connecting it to a user object?
>
> TIA,
>
> -alex
>
>
>
> --
> This e-Mail and any files transmitted with it are confidential and
> intended solely for the use of the individual or entity to whom they are
> addressed. If you have received this e-Mail in error please notify the
> sender via returned e-Mail. Please note that any views or opinions presented
> in this e-Mail are solely those of the author and do not necessarily
> represent those of the company. Although IDF operates anti-virus programs,
> it does not accept responsibility for any damage whatsoever that is caused
> by viruses being passed.
>
> ** Think before you print this message. **
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Removing mailboxes (for good dang it!)

[Alex Fontana]

Have you tried running clean-mailboxdatabase against that particular mdb?
that should check those mailboxes again and mark those that are disconnected
as such.

-alex
On Tue, Jun 10, 2008 at 12:18 PM, Ehren Benson <[EMAIL PROTECTED]>
wrote:

> Another interesting tidbit is when I use get-mailboxstatistics I can see
> all 3 of this guys mailboxes (only one of them being the one that is
> actually in use, the other 2 were 'disabled') however when I use get-mailbox
> it only shows the one that is currently enabled and in use.
>
> Ehren J. Benson, MCSE
> Windows Systems Administrator
>
> [EMAIL PROTECTED]
> 517-884-5469
>
>
> -Original Message-
> From: Ehren Benson [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, June 10, 2008 3:15 PM
> To: MS-Exchange Admin Issues
> Subject: RE: Removing mailboxes (for good dang it!)
>
> Since they are still in the "system" I believe there is a way you can get
> the guid of the "bad" mailbox and get rid of it with a powershell command
> but of course I haven't figured out how to do that.
>
> I already tried what you suggest and it is suprising that it didn't work.
>  Generally when you 'disable' a mailbox it goes into the disconnected area
> and I use the PS command I pasted before to get rid of it.  Its unexpected
> that it not show up in the disconnected area.
>
> If anyone knows how to do what I think works above I would love to know the
> commands, I will keep looking in the meantime.
>
> Ehren J. Benson, MCSE
> Windows Systems Administrator
>
> [EMAIL PROTECTED]
> 517-884-5469
>
>
> -Original Message-
> From: Michelle Weaver [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, June 10, 2008 2:45 PM
> To: MS-Exchange Admin Issues
> Subject: RE: Removing mailboxes (for good dang it!)
>
> So you didn't disconnect. You just disabled.  I must have missed that
> little tidbit (you know, the important part).
>
> If you have a little time and a cooperative customer, disconnect her
> current mailbox, re-enable the old one, delete it, then reconnect the
> current. It shouldn't take more than 5 minutes. You could also get
> creative about the mail that might get bounced in those five minutes, by
> forwarding it to another account then deleting the forwarding. It
> depends on how important it is that mail always be deliverable, if 5 -
> 10 minutes really matter that much (or time it so you do it at night).
>
> I don't know how else you can get rid of a disabled mailbox since I
> don't think disabled mailboxes will ever purge. Hopefully someone else
> has an ingenious plan. I'd just do it the hard way.
>
> Michelle
>
> -Original Message-
> From: Ehren Benson [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, June 10, 2008 2:29 PM
> To: MS-Exchange Admin Issues
> Subject: RE: Removing mailboxes (for good dang it!)
>
> I can not reconnect it because it is not listed in the disconnected
> mailboxes list, which is the original issue.  :)
>
> Thanks
>
> Ehren J. Benson, MCSE
> Windows Systems Administrator
>
> [EMAIL PROTECTED]
> 517-884-5469
>
>
> -Original Message-
> From: Michelle Weaver [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, June 10, 2008 12:56 PM
> To: MS-Exchange Admin Issues
> Subject: RE: Removing mailboxes (for good dang it!)
>
> Can you connect it to another user object and then delete?  You
> obviously can't reconnect it to the orignal user.
>
> Michelle Weaver
> System Administrator - Materials Research Institute Pennsylvania State
> University
>
> -Original Message-
> From: Ehren Benson [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, June 10, 2008 12:10 PM
> To: MS-Exchange Admin Issues
> Subject: RE: Removing mailboxes (for good dang it!)
>
> Sorry, if it wasn't clear this is exchange 2007.
>
>
>
> Thanks
>
>
>
> Ehren J. Benson, MCSE
>
> Windows Systems Administrator
>
>
>
> [EMAIL PROTECTED]
>
> 517-884-5469
>
>
>
> From: Ehren Benson [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, June 10, 2008 12:04 PM
> To: MS-Exchange Admin Issues
> Subject: Removing mailboxes (for good dang it!)
>
>
>
> Hi-
>
>
>
> This should be a quickie
>
>
>
> I learned a while back (the hard way) the difference between "disable"
> and "remove" for mailboxes.  Luckily (or not) it was on my own mailbox.
> Anyway...there is a user on our systems whose data got completely
> convoluted by their own doingsso I DISABLED their mailbox and
> created a new one.  Now presumably the old one would go to the
> "disconnected mailboxes" list and I would delete it for good with this
> powershell command
>
>
>
> Get-MailboxStatistics
>   -database
> "server\db" | where {$_.disconnectdate -ne $null} | foreach
> {Remove-mailbox -database $_.database -storemailboxidentity
> $_.mailboxguid}
>
>
>
> However for some reason it does not go to the disconnected mailbox
> list, but I still want to delete it because I don't want this 3.3GB
> mailbox floating around in limbo somewhere.  When I run the powershell
> command...
>
>
>
> Get-MailboxStat

Re: Resource Calendar Issue

[Alex Fontana]

The default will pop up a message in Outlook stating whether or not the
resource has been booked.  What we have done in the past is to setup a rule
to auto-reply when the resource is TO: or CC:'d on a message stating "you
did it wrong, check this link and try again or just add as a resource", then
the invite is deleted.

-alex

On Thu, Jun 12, 2008 at 11:49 AM, Chris Pohlschneider <
[EMAIL PROTECTED]> wrote:

>  I have an Exchange 2003 SP2 Server with clients running Outlook 2003 SP2.
> I am trying to setup resource calendar for each one of our conference rooms.
> I have created a user account and mailbox for each resource and logged in
> with outlook to setup the resource calendar options. I am going to instruct
> users to choose the conference rooms as a resource, however, I am sure some
> of them will mess up and choose it as required. My problem is that only one
> of the resource mailboxes actually send a message back stating that the
> meeting is accepted or declined if a user does it this way. Is there anyway
> to configure each resource mailbox to send an e-mail back stating something
> about the meeting they are trying to book?
>
>
>
> Chris Pohlschneider
>
> Network Administrator
>
> [EMAIL PROTECTED]
>
> 937-494-2559
>
>
>
>
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Exchange Certificate

[Alex Fontana]

Only one I've seen is WM5 devices don't like it

On Thu, Jun 12, 2008 at 7:44 AM, Glen Johnson <[EMAIL PROTECTED]> wrote:

>  Pardon my jump in here on this old thread but I've been on vacation for a
> while and just now catching up.
>
> Care to elaborate on the comment about wildcard cert problems?
> We just purchased one and I'd like to start using it but if it is going to
> cause problems, I'd appreciate any heads-up you can share.
>
> Thanks.
>
> Glen.
>
>
>
> *From:* Simon Butler [mailto:[EMAIL PROTECTED]
> *Sent:* Wednesday, May 28, 2008 1:23 PM
> *To:* MS-Exchange Admin Issues
> *Subject:* RE: Exchange Certificate
>
>
>
> There isn't a lot to it.
>
>
>
> Use the wizard on this page to generate the request:
> https://www.digicert.com/easy-csr/exchange2007.htm
>
> You need to include the real name of the server (server), the FQDN of the
> server (server.domain.local), the OWA address (owa.domain.com) and the
> autodiscover (autodiscover.domain.com). Most of the SSL providers allow
> five domains. I usually recommend that the owa address is the main common
> name.
>
>
>
> Once you have generated the request command, paste in to PowerShell on the
> server. You don't have to use Digicert.
>
> You can then take the result and use it with your preferred vendor.
> http://certificatesforexchange.com/ (disclaimer - that is my site) does
> the certificates for US$59.99/year which are from GoDaddy but are cheaper
> than GoDaddy are currently selling the certificates for. Don't be tempted to
> use a wildcard certificate as there can be some issues with their use.
>
>
>
> After you get the certificate back from the supplier, you need to import
> the result: http://technet.microsoft.com/en-us/library/bb124424.aspx
>
>
>
> Finally you can enable the certificate for the services that you require.
> For that I tend to use PowerGui (http://www.powergui.org) which makes the
> process quick and easy.
>
>
>
> For certificate acceptance you will have to adjust the URLs on some
> services, and ensure that the clients are using the correct URL for access.
> This is particularly important with POP3 and IMAP which can often not cope
> with SSL prompts - for example you are using the IP address for the server.
>
>
>
> Simon.
>
>
>
>
>
> --
> Simon Butler
> MVP: Exchange, MCSE
> Amset IT Solutions Ltd.
>
> e: [EMAIL PROTECTED]
> w: www.amset.co.uk
> w: www.amset.info
>
> Need cheap certificates for Exchange, compatible with Windows Mobile 5.0?
> http://CertificatesForExchange.com/ for 
> certificates from just $23.99.
> Need a domain for your certificate? 
> http://DomainsForExchange.net/
>
>
>
>
>  --
>
> *From:* Ehren Benson [mailto:[EMAIL PROTECTED]
> *Sent:* 28 May 2008 17:55
> *To:* MS-Exchange Admin Issues
> *Subject:* RE: Exchange Certificate
>
> Sorry, exchange 2007
>
>
>
> Ehren J. Benson, MCSE
>
> *Windows Systems Administrator*
>
>
>
> [EMAIL PROTECTED]
>
> 517-884-5469
>
>
>
> *From:* Michael B. Smith [mailto:[EMAIL PROTECTED]
> *Sent:* Wednesday, May 28, 2008 12:47 PM
> *To:* MS-Exchange Admin Issues
> *Subject:* RE: Exchange Certificate
>
>
>
> Knowing the version of Exchange would be a great help.
>
>
>
> Regards,
>
>
>
> Michael B. Smith
>
> MCSE/Exchange MVP
>
> http://TheEssentialExchange.com
>
>
>
> *From:* Ehren Benson [mailto:[EMAIL PROTECTED]
> *Sent:* Wednesday, May 28, 2008 12:36 PM
> *To:* MS-Exchange Admin Issues
> *Subject:* Exchange Certificate
>
>
>
> Hello!
>
>
>
> I need to get a certificate so that the warnings can go away for IMAP, SMTP
> and OWA.  I have done a bit of reading on this and it seems less than
> straightforward.  Has anyone done this and had an easy or hard time with
> it?  Who did you buy your cert from and do you have any resources that
> clearly specify how to create the request and then import the cert.
>
>
>
> I want to have my ducks in a row before I do this because I know just as it
> can make everything work smoothly it can expediously bring everything to a
> screeching halt if not done correctly!
>
>
>
> Thanks
>
>
>
> Ehren J. Benson, MCSE
>
> *Windows Systems Administrator*
>
> Department of Physics and Astronomy
>
> Michigan State University
>
> 1209 A Biomed Phys Sci
>
>
>
> [EMAIL PROTECTED]
>
> 517-884-5469
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Exch2007 : SCR

[Alex Fontana]

How many users? Is it feasible to start with an empty database and move
mailboxes there?  The amount of data copied to the remote site would be
roughly the same, but not all in one shot and the downtime for the users is
minimal.

-alex

On Fri, Jun 13, 2008 at 3:44 AM, Niki Blowfield <
[EMAIL PROTECTED]> wrote:

>  Dear All,
>
>
>
> I am testing SCR on our lab before implementing in our live environment,
> and whilst it appears to be working fine, I'd like some advice on the
> likelihood that what I'm proposing will work.
>
>
>
> We have some fairly large databases, but more significantly a slow WAN link
> between our source server and our proposed remote target server so the
> UPDATE-STORAGEGROUPCOPY cmd is not suitable for the initial seeding, though
> we expect it to be able to cope with the updates.
>
>
>
> The technet procedure specifies copying the offline database to the target
> before re-mounting the source database and re-enabling replication. However,
> the process of copying the database to the target server will be onto a
> removable drive and then transporting it there manually, and the duration of
> this may be unacceptably long for the source database to remain dismounted
> during this time.
>
>
>
> I've tried to alter the technet procedure somewhat by making an offline
> copy of the source database to removable media, then mounting the source
> database but leaving replication disabled, then generating some data within
> the database before placing the now out of date copy on the target and
> resuming replication.
>
>
>
> Unfortunately during testing this has left the replication status in a
> perpetual state of "initialization" so it doesn't look like it's going to
> work. Following the technet procedure of copying the database into position
> on the target before remounting the database and immediately enabling
> replication works fine.
>
>
>
> Can anyone confirm what I'm proposing will not work and that the source
> database needs to remain dismounted until the passive copy is in place? If
> this is the case, we will have to advise the business that downtime during
> the initial seeding could be an entire weekend. I'm quite confident our
> AV/Spam scanners would be able to cope with queuing 2 days email before the
> target database became available once more for delivery.
>
>
>
> Thanks
>
>
>
> Mr. Niki Blowfield
>
> Martin-Baker Aircraft Company Ltd.
>
> 01895 837 482
>
>
>  -
> This Email together with any attachments is confidential and intended
> solely for the Person to whom it is addressed. The unauthorised use,
> distribution, copying or alteration of the Email is forbidden and may be
> unlawful. If you have received this in error, please advise the sender
> immediately by returning the Email and then delete it from your system.
>
> As Internet communications are not secure, Martin-Baker Aircraft Company
> Limited does not accept legal responsibility for the contents of this Email
> or attachments. Furthermore, you should carry out such Virus and other
> checks as considered appropriate to ensure that the opening and/or use of
> this Email and any attachments do not adversely affect other systems or
> data, for which Martin-Baker Aircraft Company Limited can accept no legal
> responsibility.
>
> Martin-Baker Aircraft Company Ltd, Registered No. (England)868042,
> Registered Office Lower Road, Higher Denham, near Uxbridge, Middlesex, UB9
> 5AJ.
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Rights required to mail enable accounts

[Alex Fontana]

http://technet.microsoft.com/en-us/library/bb124053(EXCHG.65).aspx


On Thu, Jul 17, 2008 at 3:01 AM, Stuart Pittwood <
[EMAIL PROTECTED]> wrote:

>  Hi,
>
>
>
> Can anyone tell me, or point me to a source which details what rights I
> need to grant a user in order for them to mail-enable user accounts
> (Exchange 2003 SP2).
>
>
>
> Regards
>
>
>
> *Stuart Pittwood*
> Network & Infrastructure Team
> Briggs Equipment UK Ltd
> Orbital 7
> Orbital Way
> Cannock
> Staffordshire WS11 8XW
>
> t: +44 (0)1543 437864
>
> e: [EMAIL PROTECTED]
> w: www.briggsequipment.co.uk
>
>
>
>
> This email and any files transmitted with it are confidential and intended
> solely for the individual to whom they are addressed. If you have received
> this email in error please notify the sender and delete the message
> immediately. Any rights not expressly granted herein are reserved.
> Reproduction, transfer or distribution of part or all of the contents in any
> form without the prior written permission of Briggs Equipment UK Limited
> ("the Company") is prohibited. Views or opinions presented are solely those
> of the author and do not necessarily represent those of the Company. Please
> note that we reserve the right to monitor and read any emails sent and
> received by the Company under the Telecommunications (Lawful Business
> Practice) (Interception of Communications) Regulations 2000. Although the
> Company has taken every reasonable precaution to ensure that any e-mails
> have been checked for viruses, it is the responsibility of the recipient to
> ensure this e-mail and its attachments are virus free before opening. The
> Company accepts no liability for any damage caused by any virus transmitted
> by this email. Copyright Briggs Equipment UK Limited 2006
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Bounced message attachment name different in 2007

[Alex Fontana]

When a message bounces and is returned to an Exchange 2003 mailbox the
attached bounced message is named like the subject line of the original
message.  When a bounced message is returned to an Exchange 2007 mailbox the
attached bounced message is no longer named like the subject line of the
original message, rather it is named "Undelivered Message".

Does anyone know if this is configurable?

Thanks,
Alex.

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: OWA 2007 and public folder 2003

[Alex Fontana]

With the 07 pf store you can get the heirarchy, but you will be  
directed to the 03 public folder server for content, unless you set up  
replication of course. Looks like the real issue is that iis on the 03  
server requires ssl.

-alex

On Aug 27, 2008, at 1:53 PM, "Dahl, Peter" <[EMAIL PROTECTED]> wrote:

> I believe you will need an Exchange 2007 Public Folder Store even if  
> it only contains the hierarchy to have it successfully retrieve PF  
> data through OWA.
>
>
>
> From: Sascha Riela [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, August 27, 2008 11:14 AM
> To: MS-Exchange Admin Issues
> Subject: OWA 2007 and public folder 2003
>
>
>
> Hi all,
>
> we are in a process to migrate from exchange 2003 to exchange 2007  
> with CCR. For the moment the public folders is stored on exchange  
> 2003 server. The problem we have now is that when users use OWA 2007  
> you can see the public folders, but when you click it  tries to go  
> to the exchange 2003 public folder database. The message I get is “T 
> he page must be viewed over a secure channel”
>
> does someone of you know a workaround for this issue ??
>
>
>
> Thanks to all of you
>
> Sascha
>
>
>
>
>
>
>
> DISCLAIMER:
> This communication is confidential and may be legally privileged. If  
> you are not the intended recipient, (i) please do not read or  
> disclose to others, (ii) please notify the sender by reply mail, and  
> (iii) please delete this communication from your system. Failure to  
> follow this process may be unlawful. Thank you for your cooperation.
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Any heavy IMAP usage scenarios with Ex2007 out there?

[Alex Fontana]

Looking for some heavy IMAP usage scenarios and what type of performance
you're seeing.  We have some pretty heavy users with large mailboxes and
very often see the CPU on the CAS boxes hit 100% with the
microsoft.exchange.imap4 process taking most of it.  Memory is always
available and very little paging is happening.  Seems like one or two
clients can cause this if they do a large fetch (i.e. new setup), although
it is frequent.  The boxes have an average of 70 connections each, there are
currently 8 boxes sitting behind the load-balancer.  We're playing with
three different scenarios and moving everything to either the second or
third (pending more performance data):

1 - CAS/HT: 4CPU, 4GB
2 - CAS: 4CPU, 4GB
3 - CAS: 2CPU, 4GB

We're moving away from scenario 1 due to the IMAP CPU usage affecting mail
flow.  On the boxes running scenario 2 imap goes ahead and gobbles up 100%
of the CPU just as much as in 1 and 3, so i'm not sure we'd see the benefit
of the extra CPUs.

Thoughts?

Thanks in advance!
-alex

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Any heavy IMAP usage scenarios with Ex2007 out there?

[Alex Fontana]

I haven't seen the paper, I'll take a look.  We're running most on SP1 RU1,
two new boxes are running SP1 RU3.

Thanks Mike.

On Tue, Sep 2, 2008 at 12:49 PM, Michael B. Smith <
[EMAIL PROTECTED]> wrote:

>  SP and rollup?
>
>
>
> http://support.microsoft.com//kb/945141
>
>
>
> Have you looked at Mike Lagase's new whitepaper on measuring CAS
> performance?
>
>
>
> Regards,
>
>
>
> Michael B. Smith
>
> MCITP:SA,EMA/MCSE/Exchange MVP
>
> http://TheEssentialExchange.com
>
>
>
> *From:* Alex Fontana [mailto:[EMAIL PROTECTED]
> *Sent:* Tuesday, September 02, 2008 3:23 PM
> *To:* MS-Exchange Admin Issues
> *Subject:* Any heavy IMAP usage scenarios with Ex2007 out there?
>
>
>
> Looking for some heavy IMAP usage scenarios and what type of performance
> you're seeing.  We have some pretty heavy users with large mailboxes and
> very often see the CPU on the CAS boxes hit 100% with the
> microsoft.exchange.imap4 process taking most of it.  Memory is always
> available and very little paging is happening.  Seems like one or two
> clients can cause this if they do a large fetch (i.e. new setup), although
> it is frequent.  The boxes have an average of 70 connections each, there are
> currently 8 boxes sitting behind the load-balancer.  We're playing with
> three different scenarios and moving everything to either the second or
> third (pending more performance data):
>
> 1 - CAS/HT: 4CPU, 4GB
> 2 - CAS: 4CPU, 4GB
> 3 - CAS: 2CPU, 4GB
>
> We're moving away from scenario 1 due to the IMAP CPU usage affecting mail
> flow.  On the boxes running scenario 2 imap goes ahead and gobbles up 100%
> of the CPU just as much as in 1 and 3, so i'm not sure we'd see the benefit
> of the extra CPUs.
>
> Thoughts?
>
> Thanks in advance!
> -alex
>
>
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Microsoft support on VMware

[Alex Fontana]

No, but Plymouth U will be co-presenting at VMworld about their experiences
running Exchange in VMware.

-alex

On Wed, Sep 3, 2008 at 2:07 PM, Damian Myles <[EMAIL PROTECTED]> wrote:

> Thanks for the link Larry.. interesting reference to Exchange on VI at
> Plymouth Uni... anyone on the list been involved in that project?
>
> Cheers,
> Mylo
>
>
> On 9/3/08, TechInfo <[EMAIL PROTECTED]> wrote:
> >
> >
> >
> > Looks like VMware is now supported by Microsoft on the new Virtualization
> > Validation Program.  Here is a snippet from the page and the link to the
> > whole article.
> >
> >
> >
> > VMware, Inc. (NYSE:VMW), the global leader in virtualization solutions
> from
> > the desktop to the datacenter, today announced it has qualified its
> > industry-leading VMware ESX hypervisor under the Microsoft Server
> > Virtualization Validation Program (SVVP). VMware ESX 3.5 update 2 (ESX
> > 3.5u2) is the first hypervisor to be listed under the program, providing
> > VMware customers who run Windows Server and Microsoft applications with
> > access to cooperative support from Microsoft and VMware
> >
> >
> >
> >
> http://viops.vmware.com/home/message/1253;jsessionid=24F20D5C819FA1ED55BF127EECE01BDE#1253
> >
> >
> >
> >
> >
> > Larry Didtel
> >
> > Systems Administrator
> >
> > Stemilt Growers, Inc
> >
> > This e-mail transmission and any accompanying documents contain
> information
> > from the company, Stemilt Growers, Inc., which is confidential or
> > privileged. The information is intended to be for the use of the
> individual
> > or entity named in this transmission. If you are not the intended
> recipient,
> > be aware that any disclosure, copying, distribution or use of the
> contents
> > of this transmission is prohibited. If you have received this
> transmission
> > in error, please notify us by telephone immediately at 509-663-1451.
> >
> >
> >
>
> ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
> ~ http://www.sunbeltsoftware.com/Ninja~
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Admins in Email

[Alex Fontana]

Domain Admins are explicitly denied sendas/receiveas (doesn't mean they
can't change that), but IMHO if they're not trusted they shouldn't be domain
admins...
-alex

On Tue, Sep 9, 2008 at 11:54 AM, Travis Krampy <[EMAIL PROTECTED]>wrote:

> Is there a way to restrict someone with Domain Admin access from viewing
> other people's email?
>
> Thanks
>
> Travis
>
> ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
> ~ http://www.sunbeltsoftware.com/Ninja~
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Exchange 2007 Certificates

[Alex Fontana]

use the remove-exchangecertificate cmdlet to remove the cert that is
expired, if there is another cert available to be used for SMTP it will move
the role.  It's been a while so I can't remember if it will prompt you to
confirm that the smtp role is moving to the new cert or not, but it's
do-able.

-alex

On Fri, Sep 19, 2008 at 9:25 AM, McCready, Rob <[EMAIL PROTECTED]>wrote:

>  It looks like our default certificate expired on our Hub Transport
> Server.  Using this article…
>
>
>
> http://technet.microsoft.com/en-us/library/bb851554(EXCHG.80).aspx
>
>
>
> I tried to clone our current certificate to get another years worth of
> subscription.
>
>
> However, when I check the Trusted Root Certification
> Authorities\Certificate, the Hub Transport Server still has an expiration
> date of today.
>
>
> When I re-run the get-exchangecertificate –domainname
> hubtransport.domain.com
>
> I now get two thumbprints?
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Serious issue with POP3 in Exchange 2007

[Alex Fontana]

Sounds more like a serious issue with SMTP...  Any info regarding your SMTP
setup?   Where are the users located (internal vs. external) when trying to
send, what errors if any, etc, etc.

-alex

On Thu, Sep 4, 2008 at 3:22 AM, Liby Philip Mathew <
[EMAIL PROTECTED]> wrote:

>  Hi All,
>
> I am desperate having a serious issue with my POP3 clients.  At times
> clients are able to send mail and at times not able to.  But they always
> receive mails.
>
> I have published OWA, OA, POP3 587 and POP3 995 on ISA 2006 SP1.
>
> I have 2 Exchange 2007 Ent. SP1.
>
> My internal server kwmail.path.local holds the all the roles except Edge.
> Edge is in the DMZ.
>
> My Public domain is path-solutions.com.
>
> My public DNS zone is on the Edge Server behind the ISA and port 53 from
> Edge also published on ISA.
>
> I am using self generated certificates from MS PKI.
>
>
>
> I want to use https://kw.path-solutions.com as my url for all CAServices.
>
>
>
> I have generated the certificate as given below:
>
> *new-ExchangeCertificate* -GenerateRequest -Path
> c:\certificates\kwmail.req -SubjectName "c=KW, o=ICT Professional Services,
> cn=kw.path-solutions.com" -DomainName kw.path-solutions.com,
> kwmail.path-solutions.com,kwmail.path.local,kwmail -PrivateKeyExportable
> $true
>
>
>
> *import-exchangecertificate* -path
> c:\Certificates\Issued_cert_for_kwmail\DerEncodcert\kwmail.cer |
> enable-exchangecertificate  -services "SMTP,IIS,POP,IMAP,UM"
>
>
>
> *On the ISA I see the below error:*
>
> * *
>
> *Upstream Chaining Credential*
>
> *Description: *ISA Server was unable to establish an SSL connection with *
> kwmail.path.local*. A connection attempt failed because the connected
> party did not properly respond after a period of time, or established
> connection failed because connected host has failed to respond.
>
>
>
> If I check the certificate on kwmail.path.local, in the, *details, Subject
> Alternative Name field* I see a warning on the left side.
>
> I suspect this is the cause of SMTP 587 port on ISA behaving inconsistent.
>
>
>
>
>
> Any help appreciated.  This is in production and staffs all around the
> world calling and shouting at me.  Please help me
>
> Regards
>
> Liby
>
>
>
>
>
> --
> Disclaimer - This email and any files transmitted with it are confidential
> and intended solely for the use of the individual or entity to which they
> are addressed. If you have received this email in error please notify the
> system manager. Please note that any views or opinions presented in this
> email are solely those of the author and do not necessarily represent those
> of the company. Finally, the recipient should check this email and any
> attachments for the presence of viruses. The company accepts no liability
> for any damage caused by any virus transmitted by this email
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: E2K3 to E2K7 Migration

[Alex Fontana]

What I ate and drank ramping up to our migration and referenced during...

http://technet.microsoft.com/en-us/library/bb124558.aspx

-alex

On Tue, Sep 23, 2008 at 9:14 AM, John Bowles <[EMAIL PROTECTED]> wrote:

> All-
>
> I've done a google search to find documents that describe setting up E2K7
> and migrations paths etc.  What I'm asking you guys is there any particular
> articles you prefer over others?  If so, can you point me to them?
>
> I'm also going to be setting up CCR  to serve as the mailbox role.
>
> Thank you,
>
> _
> John Bowles
>
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Reporting Only Managed Folder Policies mode?

[Alex Fontana]

In Exchange 2003 I could setup a mailbox management policy that only
reported what it *would* delete if I turned it on.  For the life of me I
can't seem to find that in Ex2007...or it's not as obvious.  The only option
I can think of is to turn on "mark as past retention" and then comb through
the managed folder logs after a run.  I'm trying to get the total info of
what and how much will be deleted if I were to implement a x day retention
policy across the board.

Thanks!
-alex

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Reporting Only Managed Folder Policies mode?

[Alex Fontana]

bleh...

Thanks.

On Tue, Sep 23, 2008 at 3:12 PM, Michael B. Smith <
[EMAIL PROTECTED]> wrote:

>  Yes, the reporting has taken a nose-dive.
>
>
>
> I think you've found the best interim measure.
>
>
>
> Regards,
>
>
>
> Michael B. Smith, MCITP:SA,EMA/MCSE/Exchange MVP
>
> My blog: http://TheEssentialExchange.com/blogs/michael
>
> Link with me at: http://www.linkedin.com/in/theessentialexchange
>
>
>
> *From:* Alex Fontana [mailto:[EMAIL PROTECTED]
> *Sent:* Tuesday, September 23, 2008 6:05 PM
> *To:* MS-Exchange Admin Issues
> *Subject:* Reporting Only Managed Folder Policies mode?
>
>
>
> In Exchange 2003 I could setup a mailbox management policy that only
> reported what it *would* delete if I turned it on.  For the life of me I
> can't seem to find that in Ex2007...or it's not as obvious.  The only option
> I can think of is to turn on "mark as past retention" and then comb through
> the managed folder logs after a run.  I'm trying to get the total info of
> what and how much will be deleted if I were to implement a x day retention
> policy across the board.
>
> Thanks!
> -alex
>
>
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: MapiExceptionNamedPropsQuotaExceeded

[Alex Fontana]

We hit this recently on three of our DBs, we went the reg hack method.  We
have a few home grown systems that add tons of custom headers.  The biggest
issue we saw was IMAP client receiving "SERVER ERROR 15" and being
disconnected.  That was enough for them to get up in arms...as a fix we
moved them to different DBs while we got down time for
dismounting/remounting the DBs.  If you're using MOM it will alert when
you're getting close, and when you've reached the quota.

-alex

On Tue, Sep 30, 2008 at 12:45 PM, Brown, Larry <[EMAIL PROTECTED]>wrote:

>  Has anyone else run in to this issue?  Internal & external mails are
> being dropped because we have apparently filled up the Quota for Named
> Properties or Replica Identifiers for one of our DB's?
>
>
>
> The solutions we are finding say to either raise the limits with a reg hack
> and figure out what app or domain is sending emails with unique x-headers;
> or move all users to a new DB and figure out what app or domain is sending
> emails with unique x-headers.
> http://technet.microsoft.com/en-us/library/bb851495(EXCHG.80).aspx
>
>
>
> Does upgrading E2007 to SP1 fix the issue?
>
>
>
>
>
> *,"550 5.2.0 STOREDRV.Deliver: The Microsoft Exchange Information Store
> service reported an error. The following information should help identify
> the cause of this error:
> ""MapiExceptionNamedPropsQuotaExceeded:16.18969:5E00,*
>
> * *
>
> And
>
> * *
>
> *Event Type:   Error*
>
> *Event Source:MSExchangeIS*
>
> *Event Category: General *
>
> *Event ID:   9667*
>
> *Date:9/30/2008*
>
> *Time:2:03:33 PM*
>
> *User:N/A*
>
> *Computer: *
>
> *Description:*
>
> *Failed to create a new named property for database "SG7\MDB7" because the
> number of named properties reached the quota limit (8192).*
>
> * User attempting to create the named property:
> ""*
>
> * Named property GUID: 00020386---c000-0046*
>
> * Named property name/id: "x-onestopbaitshop.com-msgid" *
>
> * *
>
> *For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.*
>
> *Data:*
>
> *: 5b 44 49 41 47 5f 43 54   [DIAG_CT*
>
> *0008: 58 5d 00 00 6e 00 00 00   X]..n...*
>
> *0010: ff 14 18 00 00 00 00 00   ÿ...*
>
> *0018: 00 02 60 00 00 00 3a 67   ..`...:g*
>
> *0020: f0 1f 56 00 00 00 db 18   ð.V...Û.*
>
> *0028: 40 10 0f 01 04 80 fd 79   @€ýy*
>
> *0030: 20 10 00 00 00 00 db 18.Û.*
>
> *0038: 40 10 0f 01 04 80 bd 44   @€½D*
>
> *0040: 20 10 00 00 00 00 03 59..Y*
>
> *0048: 20 10 00 00 00 00 03 59..Y*
>
> *0050: 20 10 00 00 00 00 ad 59.­Y*
>
> *0058: 20 10 00 00 00 00 ed 4c.íL*
>
> *0060: 20 10 00 00 00 00 fd 45.ýE*
>
> *0068: 20 10 00 00 00 00 cd 6a.Íj*
>
> *0070: 20 10 00 00 00 00 03 59..Y*
>
> *0078: 20 10 00 00 00 00  .  *
>
>
>
>
>
>
>
> * **Larry C. Brown*
>
> LAN/WAN CS Support
>
>  Dayton Power & Light
>
> (937)-331-4922
>
>
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: MapiExceptionNamedPropsQuotaExceeded

[Alex Fontana]

Yup, RU1 (hopefully RU3 on mbx servers later this month).

On Thu, Oct 2, 2008 at 7:37 AM, Brown, Larry <[EMAIL PROTECTED]> wrote:

>  Alex,
>
> Are you on SP 1?
>
>
>  ------
>
> *From:* Alex Fontana [mailto:[EMAIL PROTECTED]
> *Sent:* Wednesday, October 01, 2008 11:29 AM
> *To:* MS-Exchange Admin Issues
> *Subject:* Re: MapiExceptionNamedPropsQuotaExceeded
>
>
>
>
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: From alias

[Alex Fontana]

make [EMAIL PROTECTED] a DL with her as a member and give her access to SEND
AS 'events'.

On Thu, Oct 2, 2008 at 11:39 AM, <[EMAIL PROTECTED]> wrote:

> I know this has come up before but I must have emptied the file draw in my
> brain it was stored in.
> Marketing user has an alias email address of [EMAIL PROTECTED] She wants
> to be able to have email delivered to her account and not resolve to her
> user name and also the ability to have the from field display
> [EMAIL PROTECTED] and not resolve to her username. Possible? How?
> Thanks.
> Steve
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Active Synch strange behavior

[Alex Fontana]

umm...are you allowing port 80 in or not enforcing SSL?

On Tue, Sep 30, 2008 at 7:13 AM, Sascha Riela <[EMAIL PROTECTED]> wrote:

>  Hi All,
>
> we are in a process of migrating from Exchange 2003 to Exchange 2007. On
> Exchange 2003 side we have a SSL certificate to access mails from outside
> and synch mobile phones. On Exchange 2007 side we have only a self signed
> certificate. Some migrated users can now synchronize the mobile phone
> although there is no SSL certificate installed on Exchange 2007.
>
> Does someone of you know how this is possible ?
>
>
>
> Thanks
>
> Sascha
>
> --
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: User can't disable OOF after mailbox migration.

[Alex Fontana]

last resort...disable-mailbox and connect-mailbox?  Other concern would be
if this is a BES user...there was a bug prior to 4.1.4 SP5 or 6 if I recall
correctly with OOF.

-alex

On Tue, Sep 30, 2008 at 1:05 PM, Troy Meyer <[EMAIL PROTECTED]>wrote:

> +1 use owa or make sure you are using a Outlook 2007 client.
>
>
>
> -Original Message-
> From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, September 30, 2008 12:53 PM
> To: MS-Exchange Admin Issues
> Subject: Re: User can't disable OOF after mailbox migration.
>
> What about via OWA or WM6 ?
>
> On Tue, Sep 30, 2008 at 3:49 PM, Campbell, Rob
> <[EMAIL PROTECTED]> wrote:
> > I've got a user who's mailbox was migrated from 2k3 to 2k7 while his Out
> of
> > Office was set, and now he can't turn it off.
> >
> >
> >
> > Anyone seen this before?
> >
> >
> **
> > Note:
> > The information contained in this message may be privileged and
> confidential
> > and
> > protected from disclosure.  If the reader of this message is not the
> > intended
> > recipient, or an employee or agent responsible for delivering this
> message
> > to
> > the intended recipient, you are hereby notified that any dissemination,
> > distribution or copying of this communication is strictly prohibited. If
> you
> > have received this communication in error, please notify us immediately
> by
> > replying to the message and deleting it from your computer.
> >
> **
> >
> >
>
>
>
> --
> ME2
>
> ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
> ~ http://www.sunbeltsoftware.com/Ninja~
>
> ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
> ~ http://www.sunbeltsoftware.com/Ninja~
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: need MakeGalLinked.exe

[Alex Fontana]

http://www.microsoft.com/downloads/details.aspx?FamilyId=C9CBBC69-4AE4-450D-AF5E-F49E7C701CF4&displaylang=en


On Wed, Oct 8, 2008 at 9:05 AM, Dennis Melahn <[EMAIL PROTECTED]> wrote:

> Where do I find this?  Prepping for Exch 07. Best Practices tool says I
> need this. Schema upgrade required.
>
> Thanks,
> Dennis
>
> ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
> ~ http://www.sunbeltsoftware.com/Ninja~
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: DL Question

[Alex Fontana]

It's been a while and I'm sure someone here can verify or shoot down this
idea...but what about adding a global mail-enabled group to a domain local
mail enabled group?

-alex

On Mon, Oct 13, 2008 at 11:03 AM, John Bowles <[EMAIL PROTECTED]> wrote:

> All-
>
> I have 1 root domain and 10 child domains in mixed mode.  I need to create
> a DL where I can add users from multiple domains.  Problem is we are in
> mixed mode, so I know the use of Universal groups is out.  My question, is
> there a workaround to this issue that anyone has came across until they
> flipped to native mode?
>
> Thank you,
>
> _
> John Bowles
>
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Cleaning a Mailbox

[Alex Fontana]

Absolutely the easiest (and fastest)...came across a mailbox last week with
over 8 million messages in the deleted items container.  Not sure what I was
thinking when I clicked on Deleted Items...like it would ever open...  I
ended up killing Outlook and running disable-mailbox...ridiculous.

On Mon, Oct 13, 2008 at 7:29 AM, John Hornbuckle <
[EMAIL PROTECTED]> wrote:

>  I had thought about that method. Didn't know if there was an easier way,
> but I suppose it doesn't get much easier than two or three commands…
>
>
>
>
>
>
>
>
>
> *From:* Michael B. Smith [mailto:[EMAIL PROTECTED]
> *Sent:* Monday, October 13, 2008 10:04 AM
> *To:* MS-Exchange Admin Issues
> *Subject:* RE: Cleaning a Mailbox
>
>
>
> Disable-mailbox 
>
> Clean-mailboxdatabase 
>
> Enable-mailbox 
>
>
>
> The clean-mailboxdatabase isn't theoretically required, but I like to throw
> it in there.
>
>
>
> Note that this actually removes the mailbox from a user and creates a new
> one for the user. If that isn't actually what you want, tell us more. :-0
>
>
>
> Regards,
>
>
>
> Michael B. Smith, MCITP:SA,EMA/MCSE/Exchange MVP
>
> My blog: http://TheEssentialExchange.com/blogs/michael
>
> Link with me at: http://www.linkedin.com/in/theessentialexchange
>
>
>
> *From:* John Hornbuckle [mailto:[EMAIL PROTECTED]
> *Sent:* Monday, October 13, 2008 9:29 AM
> *To:* MS-Exchange Admin Issues
> *Subject:* Cleaning a Mailbox
>
>
>
> With Exchange 2007, what's the easiest way to delete all of the messages
> from a specific mailbox?
>
>
>
>
>
>
>
> John Hornbuckle
>
> MIS Department
>
> Taylor County School District
>
> 318 North Clark Street
>
> Perry, FL 32347
>
>
>
> www.taylor.k12.fl.us
>
>
>
>
>
>
>
>
>
>
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Exchange Server 2007 sp1 ru4

[Alex Fontana]

Currently only running on a couple of CAS.  We'll be upgrading a few more
CAS this weekend and possibly some HT's.  There are a couple of fixes we've
been waiting for so we gotta see if they actually work.  We'll begin
updating the mailbox servers in November.

-alex

On Mon, Oct 13, 2008 at 5:56 AM, Michael B. Smith <
[EMAIL PROTECTED]> wrote:

>  I've installed it on my home server; at a client with 2,500 seats and a
> client with 1,800 seats and a couple of smaller organizations.
>
>
>
> No problems so far. I also know a couple of large organizations that have
> installed it with no reported issue.
>
>
>
> Regards,
>
>
>
> Michael B. Smith, MCITP:SA,EMA/MCSE/Exchange MVP
>
> My blog: http://TheEssentialExchange.com/blogs/michael
>
> Link with me at: http://www.linkedin.com/in/theessentialexchange
>
>
>
> *From:* John Hornbuckle [mailto:[EMAIL PROTECTED]
> *Sent:* Monday, October 13, 2008 8:51 AM
> *To:* MS-Exchange Admin Issues
> *Subject:* RE: Exchange Server 207 sp1 ru4
>
>
>
> Anyone installed it? Any feedback?
>
>
>
> I hate to be the guinea pig…
>
>
>
>
>
>
>
> John Hornbuckle
>
> MIS Department
>
> Taylor County School District
>
> 318 North Clark Street
>
> Perry, FL 32347
>
>
>
> www.taylor.k12.fl.us
>
>
>
>
>
>
>
>
>
> *From:* Michael B. Smith [mailto:[EMAIL PROTECTED]
> *Sent:* Tuesday, October 07, 2008 4:29 PM
> *To:* MS-Exchange Admin Issues
> *Subject:* Exchange Server 207 sp1 ru4
>
>
>
> There had been some questions in this forum about when it would be
> re-released.
>
>
>
> Well, the answer is today.
>
>
>
> http://support.microsoft.com/?kbid=952580 and
>
>
>
>
> http://www.microsoft.com/downloads/details.aspx?FamilyID=8b492ed2-ea92-412f-a852-3aa1c58d9499&DisplayLang=en
>
>
>
> Regards,
>
>
>
> Michael B. Smith, MCITP:SA,EMA/MCSE/Exchange MVP
>
> My blog: http://TheEssentialExchange.com/blogs/michael
>
> Link with me at: http://www.linkedin.com/in/theessentialexchange
>
>
>
>
>
>
>
>
>
>
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Circular Logging setting

[Alex Fontana]

Depends on what your RPO is.  By setting circular logging you are limiting
your recovery to the last full backup.  With circular logging disabled you
can recover up to your latest consistent log files.

-alex

On Tue, Oct 14, 2008 at 11:59 AM, Chris Pohlschneider <
[EMAIL PROTECTED]> wrote:

>  Hello,
>
>
>
> I am trying to control the amount of log files and the space that it is
> taking up on my Exchange server. Currently it is not enabled and I have read
> by enabling this option that it will prevent the overall number of log files
> that are stored on the server for Exchange. Is there any drawbacks to
> enabling this setting?
>
>
>
> Exchange 2003 Enterprise
>
> Windows Server 2003 Standard Service Pack 2
>
>
>
> Chris Pohlschneider
>
> Network Administrator
>
> [EMAIL PROTECTED]
>
> 937-494-2559
>
>
>
>
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Exchange 2007 on VMWare in a live environment [Scanned]

[Alex Fontana]

Yup, entire production environment; ~9500 mailboxes, ~10TB of data.
Couldn't be happierwell I could, but nothing to do with Virtualization.

On Mon, Oct 20, 2008 at 5:32 AM, Dave Hornby <[EMAIL PROTECTED]
> wrote:

> Hi Guys,
>
> Is anyone running (Or has run) Exchange 2007 on VMWare in a live
> environment?
> I only have a userbase of around 70 with mailboxes of .5 - 1.5Gb (Spread
> over 2 stores).
>
> I've done some reading and found some positive writeups but I want some
> real world info!
>
> Cheers
> Dave
>
> ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
> ~ http://www.sunbeltsoftware.com/Ninja~
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Dummy Email Account

[Alex Fontana]

I would create a distro-group with no members and give who ever will be
doing the sending "Send As" rights.  You could also do a public folder with
the anonymous and default permissions set to none.

-alex

On Mon, Oct 20, 2008 at 6:10 AM, Margo <[EMAIL PROTECTED]> wrote:

> Exchange 2003
>
> I recently receive a request for a new email account that should only be
> able to send out emails but not receive any.
>
> Can this be done?
>
> Thanks,
>
> Margo
> ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
> ~ http://www.sunbeltsoftware.com/Ninja~
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Exchange 2007 on VMWare in a live environment [Scanned]

[Alex Fontana]

You assume correctly for both, SAN, EMC Clariion storage.


On Tue, Oct 21, 2008 at 6:05 AM, Martin Blackstone <[EMAIL PROTECTED]>wrote:

>  I'm assuming you guys are keeping your mailbox stores on a SAN or
> something?
>
> Also, do you run your VM's off SAN/NAS?
>
>
>
>
>
> *From:* Greg Mulholland [mailto:[EMAIL PROTECTED]
> *Sent:* Tuesday, October 21, 2008 3:08 AM
> *To:* MS-Exchange Admin Issues
> *Subject:* RE: Exchange 2007 on VMWare in a live environment [Scanned]
>
>
>
> Same here
>
>
>
> multiple mailbox, ht, and cas all virtualised with ESX servers in different
> sites. Works a treat, as long as you do your planning with sizes and mailbox
> size particularly when dealing with large volumes of mailboxes. We are
> comparatively small exchange org as far as database sizes and mailbox
> numbers compared to those who have trillions of users! :p
>
>
>
> Greg
>
>
>
> *From:* Alex Fontana [EMAIL PROTECTED]
> *Sent:* Tuesday, 21 October 2008 11:44 AM
> *To:* MS-Exchange Admin Issues
> *Subject:* Re: Exchange 2007 on VMWare in a live environment [Scanned]
>
> Yup, entire production environment; ~9500 mailboxes, ~10TB of data.
> Couldn't be happierwell I could, but nothing to do with Virtualization.
>
> On Mon, Oct 20, 2008 at 5:32 AM, Dave Hornby <
> [EMAIL PROTECTED]> wrote:
>
> Hi Guys,
>
> Is anyone running (Or has run) Exchange 2007 on VMWare in a live
> environment?
> I only have a userbase of around 70 with mailboxes of .5 - 1.5Gb (Spread
> over 2 stores).
>
> I've done some reading and found some positive writeups but I want some
> real world info!
>
> Cheers
> Dave
>
> ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
> ~ http://www.sunbeltsoftware.com/Ninja~
>
>
>
>
>
>
>
>
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Dummy Email Account

[Alex Fontana]

yup...

On Tue, Oct 21, 2008 at 7:23 AM, James Winzenz <[EMAIL PROTECTED]>wrote:

> "send on behalf of" is different than "send as".  Send as allows you to
> type the name of the account in the from field, and the email is sent
> "from" that account, not from you on behalf of the account.  The "send
> as" permissions are found in the Security tab of the account.  As for a
> dummy account that can send but no one can send to, in the Exchange
> General tab, configure the Delivery Restrictions so that it can only
> receive mail from itself.  No one else will be able to send to it.  We
> do something similar to this for the generic accounts we use for sending
> out notifications to users.
>
> Thanks,
>
> James Winzenz
> Infrastructure Systems Engineer II - Security
> Pulte Homes Information Services
>
> -Original Message-
> From: Margo [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, October 21, 2008 6:54 AM
> To: MS-Exchange Admin Issues
> Subject: Re: Dummy Email Account
>
> Unfortunately I can't do a dist list.  The sender (the Pres) doesn't
> want the "sent on behalf" to be in the From line - only his name.
>
> Margo
> ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
> ~ http://www.sunbeltsoftware.com/Ninja~
>
> CONFIDENTIALITY NOTICE:  This email may contain confidential and privileged
> material for the sole use of the intended recipient(s).  Any review, use,
> distribution or disclosure by others is strictly prohibited.  If you have
> received this communication in error, please notify the sender immediately
> by email and delete the message and any file attachments from your computer.
>  Thank you.
>
> ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
> ~ http://www.sunbeltsoftware.com/Ninja~
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: E2k3 and Event ID 9666 from MSExchangeIS

[Alex Fontana]

isn't the default limit 16k, this is a warning that he's close to the limit,
but yeah, creating a new DB will zero it out, or you can bump the limit in
the DB (not sure what the limit is in '03, but '07 the hard limit per db is
32k or so).  of course that requires a dismount/mount of the DB though.

We've hit this limit a few times due to many custom apps that dump a slew of
custom x-headers.  The biggest issue we saw as a result was from IMAP
clients, they received "Server Error 15" and would end up timing out causing
for a bad IMAP experience.

-alex

On Thu, Oct 23, 2008 at 1:06 PM, Michael B. Smith <
[EMAIL PROTECTED]> wrote:

> Go ahead and bump the limit to 16K.
>
> Create a new store and move all your mailboxes. That will set the limit on
> the new mailstore at zero.
>
> Regards,
>
> Michael B. Smith, MCITP:SA,EMA/MCSE/Exchange MVP
> My blog: http://TheEssentialExchange.com/blogs/michael
> Link with me at: http://www.linkedin.com/in/theessentialexchange
>
>
> -Original Message-
> From: Kurt Buff [mailto:[EMAIL PROTECTED]
> Sent: Thursday, October 23, 2008 3:49 PM
> To: MS-Exchange Admin Issues
> Subject: E2k3 and Event ID 9666 from MSExchangeIS
>
> I've just noticed this event in my logs, and it looks pretty serious,
> but I can't find the KB article most people cite: 820379
>
> I've found http://technet.microsoft.com/en-us/library/bb851495.aspx,
> but don't know just how concerned I should be.
>
> Text of the event is:
>
> The number of named properties created for database "First Storage
> Group\Mailbox Store (XCH)" is close to quota limit.
>  Current number of named properties: 8190
>  Quota limit for named properties: 8192
>  User attempting to create the named property: "SYSTEM"
>  Named property GUID: 00020386---c000-0046
>  Named property name/id: "X-MS-WT"
>
> ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
> ~ http://www.sunbeltsoftware.com/Ninja~
>
>
> ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
> ~ http://www.sunbeltsoftware.com/Ninja~
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: E2k3 and Event ID 9666 from MSExchangeIS

[Alex Fontana]

+1

On Thu, Oct 23, 2008 at 5:10 PM, Michael B. Smith <
[EMAIL PROTECTED]> wrote:

> AFAIK, it's per mailbox store. Not per SG.
>
> Regards,
>
> Michael B. Smith, MCITP:SA,EMA/MCSE/Exchange MVP
> My blog: http://TheEssentialExchange.com/blogs/michael
> Link with me at: http://www.linkedin.com/in/theessentialexchange
>
>
> -Original Message-
> From: Kurt Buff [mailto:[EMAIL PROTECTED]
> Sent: Thursday, October 23, 2008 7:56 PM
> To: MS-Exchange Admin Issues
> Subject: Re: E2k3 and Event ID 9666 from MSExchangeIS
>
> Ouch.
>
> OK - I'm looking at the technet article, and it says "create a new
> mailbox database"
>
> Is that done at the server level, or at the storage group level? As
> you might guess, I have no training...
>
> Context menu at the server level asks to start a new Storage Group.
> Context menu at the Storage Group level asks to start a new Mailbox
> Store. I assume that I want the latter - a new Mailbox Store within
> the Storage Group, but would like confirmation.
>
> Also, I have a Message Journaling mailbox on the original store.
> Should I leave it there? Should a create yet another store and move it
> to that, then point all of the message journaling to that?
>
> Kurt
>
> On Thu, Oct 23, 2008 at 3:35 PM, Michael B. Smith
> <[EMAIL PROTECTED]> wrote:
> > Mailstore will dismount. Pretty significant.
> >
> > Regards,
> >
> > Michael B. Smith, MCITP:SA,EMA/MCSE/Exchange MVP
> > My blog: http://TheEssentialExchange.com/blogs/michael
> > Link with me at: http://www.linkedin.com/in/theessentialexchange
> >
> >
> > -Original Message-
> > From: Kurt Buff [mailto:[EMAIL PROTECTED]
> > Sent: Thursday, October 23, 2008 6:28 PM
> > To: MS-Exchange Admin Issues
> > Subject: Re: E2k3 and Event ID 9666 from MSExchangeIS
> >
> > Lovely.
> >
> > What's the impact if the limit is hit? I'm trying to patch my servers
> > right now...
> >
> > Kurt
> >
> > On Thu, Oct 23, 2008 at 1:06 PM, Michael B. Smith
> > <[EMAIL PROTECTED]> wrote:
> >> Go ahead and bump the limit to 16K.
> >>
> >> Create a new store and move all your mailboxes. That will set the limit
> on
> >> the new mailstore at zero.
> >>
> >> Regards,
> >>
> >> Michael B. Smith, MCITP:SA,EMA/MCSE/Exchange MVP
> >> My blog: http://TheEssentialExchange.com/blogs/michael
> >> Link with me at: http://www.linkedin.com/in/theessentialexchange
> >>
> >>
> >> -Original Message-
> >> From: Kurt Buff [mailto:[EMAIL PROTECTED]
> >> Sent: Thursday, October 23, 2008 3:49 PM
> >> To: MS-Exchange Admin Issues
> >> Subject: E2k3 and Event ID 9666 from MSExchangeIS
> >>
> >> I've just noticed this event in my logs, and it looks pretty serious,
> >> but I can't find the KB article most people cite: 820379
> >>
> >> I've found http://technet.microsoft.com/en-us/library/bb851495.aspx,
> >> but don't know just how concerned I should be.
> >>
> >> Text of the event is:
> >>
> >> The number of named properties created for database "First Storage
> >> Group\Mailbox Store (XCH)" is close to quota limit.
> >>  Current number of named properties: 8190
> >>  Quota limit for named properties: 8192
> >>  User attempting to create the named property: "SYSTEM"
> >>  Named property GUID: 00020386---c000-0046
> >>  Named property name/id: "X-MS-WT"
> >
> >
> > ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
> > ~ http://www.sunbeltsoftware.com/Ninja~
> >
>
> ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
> ~ http://www.sunbeltsoftware.com/Ninja~
>
>
> ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
> ~ http://www.sunbeltsoftware.com/Ninja~
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Certificates

[Alex Fontana]

We ran into the wildcard cert issue with WM5 devices.  I'd definitely be
interested in knowing how you got it to work.

Thanks,
Alex.

On Wed, Oct 29, 2008 at 4:49 AM, Micheal Espinola Jr <
[EMAIL PROTECTED]> wrote:

> With WM5?  I'm quite sure I've read in KB articles, etc, that its not
> possible.  You might want to tell MS that it is, if you did.
>
> --
> ME2
>
>
>
> On Wed, Oct 29, 2008 at 4:09 AM, Ellis, John P. <[EMAIL PROTECTED]>
> wrote:
> > I have windows Mobile 5 and 6 working with a wildcard cert for use with
> > ActiveSync. It took a while to get working. In the end, I needed to
> > added the intermediate cert to the device to trust the cert from the
> > server. We use DigiCert and works well. Digicert also allow us to create
> > a wildcard cert with an additional name for the server as well as
> > *.domain.gov.uk we can also have mail.domain.gov.uk on the same cert.
> >
> > Cheers
> > John
> >
> > -Original Message-
> > From: Micheal Espinola Jr [mailto:[EMAIL PROTECTED]
> > Sent: 28 October 2008 17:25
> > To: MS-Exchange Admin Issues
> > Subject: Re: Certificates
> >
> > Windows Mobile 5 wont.
> >
> > --
> > ME2
> >
> >
> >
> > On Tue, Oct 28, 2008 at 12:39 PM, Phil Thompson <[EMAIL PROTECTED]>
> > wrote:
> >> Some phones won't recognize the wildcard, I can't remember which ones,
> > maybe iPhone?
> >>
> >> Phil
> >>
> >> -Original Message-
> >> From: Kennedy, Jim [mailto:[EMAIL PROTECTED]
> >> Sent: Tuesday, October 28, 2008 12:30 PM
> >> To: MS-Exchange Admin Issues
> >> Subject: RE: Certificates
> >>
> >>
> >> I don't disagree with the answer below, but if you do go for a
> > commercial cert (for outside OWA for example) consider a wildcard cert
> > and use it everywhere. Much more cost effective. 200 bucks or so from
> > GoDaddy.
> >>
> >>
> >>
> >>> -Original Message-
> >>> From: Neil Hobson [mailto:[EMAIL PROTECTED]
> >>> Sent: Tuesday, October 28, 2008 11:45 AM
> >>> To: MS-Exchange Admin Issues
> >>> Subject: RE: Certificates
> >>>
> >>> Correct, the self-signed certificate installed on the Hub Transport
> >>> server will expire after 12 months and therefore requires renewal.
> >>> My opinion here is that, generally, the self-signed certificate is
> >>> ideal for Hub-Hub, Hub-Edge and Edge-Hub communications so in your
> >>> case I'd leave the self-signed certificate on the Hub Transport
> >>> server and renew as required.
> >>>
> >>> -Original Message-
> >>> From: McCready, Rob [mailto:[EMAIL PROTECTED]
> >>> Sent: 28 October 2008 12:12
> >>> To: MS-Exchange Admin Issues
> >>> Subject: Certificates
> >>>
> >>> By default, a certificate is installed on the first Hub Transport
> >>> Server in an Exchange 2007 environment, which last for 1 year,
> >>> correct?
> >>>
> >>> My question is, if I want to buy a certificate from a Certificate
> >>> Authority (to use as verification of encryption between us and
> >>> another company), do I place it on the Hub Transport server to
> >>> replace the "default"
> >>> certificate,
> >>> or do I need more than one certificate?  One to replace the Hub
> >>> Certificate which will expire after one year, and one to be installed
> >
> >>> on the Edge Transport Server(s) in the DMZ?
> >>>
> >>> Thanks all,
> >>>
> >>> Rob
> >>>
> >>> ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
> >>> ~ http://www.sunbeltsoftware.com/Ninja~
> >>>
> >>>
> >>> ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
> >>> ~ http://www.sunbeltsoftware.com/Ninja~
> >>
> >> ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
> >> ~ http://www.sunbeltsoftware.com/Ninja~
> >>
> >> ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
> >> ~ http://www.sunbeltsoftware.com/Ninja~
> >>
> >
> > ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
> > ~ http://www.sunbeltsoftware.com/Ninja~
> >
> > **
> > This email and any files transmitted with it are confidential and
> > intended solely for the use of the individual or entity to whom they
> > are addressed. If you have received this email in error please notify
> > the system manager.
> >
> > This footnote also confirms that this email message has been swept by
> > MIMEsweeper for the presence of computer viruses.
> >
> > www.clearswift.com
> > **
> >
> >
> >
> > ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
> > ~ http://www.sunbeltsoftware.com/Ninja~
> >
>
> ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
> ~ http://www.sunbeltsoftware.com/Ninja~
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftwar

Re: Exchange 2007 Self-Signed Certificate

[Alex Fontana]

If you try to delete the cert being used by the transport service you will
get an error.  You should be able to remove the others with no issues, esp
if HT is the only role on the box.  If that is also a CAS you will have to
make sure that cert isn't being used by any of the other services.

On Mon, Nov 3, 2008 at 6:45 AM, McCready, Rob <[EMAIL PROTECTED]>wrote:

>  I recently had some trouble trying to renew the default Exchange 2007
> self-signed certificate on our Hub Transport Server.  I think I MAY have
> finally had some success, but, I want to make sure before I delete the old
> certificates.
>
>
> My first question is, when *you run a get-exchangecertificate command,
> should you only see ONE thumbprint?  *I currently see four.  When I look
> at them, three say they expire in 2009 and one says September 2008.  I'm
> wondering if I can get rid of the other three.
>
>
>
> Also, when I open CERTIFICATES in the MMC and look at Trusted Root
> Certification Authorities\Certificates, I see the [EMAIL PROTECTED] says 
> September 2008.  Could this be because Active Directory could
> take four hours to update?  *How I can test that the new certificate is
> actually working before deleting the old ones?*
>
> * *
>
> Thanks.
>
>
> Rob
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Exchange 2007 Self-Signed Certificate

[Alex Fontana]

AFAIK, you can create certificates all day and they'll show up, but they
won't all be used.  I would check in the IIS config for the cert it is using
for OWA, activesync, etc to see which it is.  You can view which cert your
HT is using by running 'get-transportserver  |fl
InternalTransportCertificateThumbprint'

I've never had issues creating and removing certs from HT/CAS combo's for
use with IIS and the transport service.  Again, the only thing that's bit me
in the past was that when you do create a new cert the 'require secure
channel' check box checks itself on the Exchange Vdirs, if you don't use
that you'll need to go back and uncheck it.

-alex

On Tue, Nov 4, 2008 at 6:40 AM, McCready, Rob <[EMAIL PROTECTED]>wrote:

>  The server is a HUB and CAS (although we don't really use OWA).  The Hub
> also has Public Folders on it.  I'm not sure how to tell which certificates
> are actually IN use. When I open a Certificate MMC and look at
> Certificates\Trusted Root Certification\Authorities\Certificates\
> [EMAIL PROTECTED] and view it's properties, it tells me the (default)
> certificate has expired or is not yet valid (September 2008 date).
>
> If I do a get-exchangecertificate, I receive FOUR thumbprints, Two say they
> expire on 11/3/2009, one says it expires on 9/22/2009, and one says it
> expires on 9/19/2008.  The 9/19/2008 expired date is the one I see on
> Certificates\Trusted Root Certification\Authorities\Certificates\
> [EMAIL PROTECTED], and is the default certificate created when we built
> the server on 9/19/2007.  The 9/22/2009 certificate was probably my first
> attempt at a renewal, which I'm thinking didn't take.
>
> Perhaps I can delete the 9/19/2008 and 9/22/2009 certificates.  The
> 11/3/2009 are probably the ones I created successfully on November 3rd (one
> of which was the default certificate for SMTP, POP, IMAP…..  and the other
> was one I created for IIS).
>
>
>
> Is there any easy way to tell what certificates are actually in use and
> what might be safe to delete?
> What might have prevented my new certificate from functioning?
>
>
> Thanks!
>
>
>
>
>  --
>
> *From:* Alex Fontana [mailto:[EMAIL PROTECTED]
> *Sent:* Monday, November 03, 2008 11:17 PM
> *To:* MS-Exchange Admin Issues
> *Subject:* Re: Exchange 2007 Self-Signed Certificate
>
>
>
>  If you try to delete the cert being used by the transport service you will
> get an error.  You should be able to remove the others with no issues, esp
> if HT is the only role on the box.  If that is also a CAS you will have to
> make sure that cert isn't being used by any of the other services.
>
>
>
> On Mon, Nov 3, 2008 at 6:45 AM, McCready, Rob <[EMAIL PROTECTED]>
> wrote:
>
> I recently had some trouble trying to renew the default Exchange 2007
> self-signed certificate on our Hub Transport Server.  I think I MAY have
> finally had some success, but, I want to make sure before I delete the old
> certificates.
>
>
> My first question is, when *you run a get-exchangecertificate command,
> should you only see ONE thumbprint?  *I currently see four.  When I look
> at them, three say they expire in 2009 and one says September 2008.  I'm
> wondering if I can get rid of the other three.
>
>
>
> Also, when I open CERTIFICATES in the MMC and look at Trusted Root
> Certification Authorities\Certificates, I see the [EMAIL PROTECTED] says 
> September 2008.  Could this be because Active Directory could
> take four hours to update?  *How I can test that the new certificate is
> actually working before deleting the old ones?*
>
> * *
>
> Thanks.
>
>
> Rob
>
>
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Named property hog found...

[Alex Fontana]

Hi all,

we've been dealing with a few databases hitting the soft quota on named
properties.  After a bit of digging and combing over all of the event ID
9873 events we had been logging we found that a set of users were generating
hundreds of new named properties each day.  They were specifically
introducing new x-headers like "x-offlineimap-message_guid" for every
message they were synching between thier IMAP client and the mailbox.  We
contacted these users and one of them (they're all engineers of course) was
able to write a patch that changed the behavior from creating a unique
x-header to defining a single x-header wtih a unique data string to identify
the individual messages, thus allowing them to keep using the OfflineIMAP
tool to synch thier IMAP clients to thier mailboxes.

One of our users submitted a feature request to the dev of OfflineIMAP and
the patch writer submitted his patch:
http://software.complete.org/software/issues/show/114

Just something else to look out for...

-alex

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Named property hog found...

[Alex Fontana]

funny, that's exactly what most of us over here thought.  Not to mention the
biggest response from our message to the folks was "cool, now i know how to
DoS an Exchange server"

-alex

On Wed, Nov 26, 2008 at 12:21 PM, Kurt Buff <[EMAIL PROTECTED]> wrote:

>  On Wed, Nov 26, 2008 at 11:07 AM, Alex Fontana <[EMAIL PROTECTED]>
> wrote:
> > Hi all,
> >
> > we've been dealing with a few databases hitting the soft quota on named
> > properties.  After a bit of digging and combing over all of the event ID
> > 9873 events we had been logging we found that a set of users were
> generating
> > hundreds of new named properties each day.  They were specifically
> > introducing new x-headers like "x-offlineimap-message_guid" for every
> > message they were synching between thier IMAP client and the mailbox.  We
> > contacted these users and one of them (they're all engineers of course)
> was
> > able to write a patch that changed the behavior from creating a unique
> > x-header to defining a single x-header wtih a unique data string to
> identify
> > the individual messages, thus allowing them to keep using the OfflineIMAP
> > tool to synch thier IMAP clients to thier mailboxes.
> >
> > One of our users submitted a feature request to the dev of OfflineIMAP
> and
> > the patch writer submitted his patch:
> > http://software.complete.org/software/issues/show/114
> >
> > Just something else to look out for...
> >
> > -alex
>
> I consider this to be more of a design flaw with Exchange than
> anything else. A new database entry for every new header entry is
> shortsighted, and leads to easy DoS, unintentional or not. I assume
> that the idea is to be able to index on the property, but it just
> doesn't work well.
>
> Kurt
>
> ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
> ~ http://www.sunbeltsoftware.com/Ninja~
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Exchange 2007 Auto-Forward of emails

[Alex Fontana]

Someone please correct me if I'm wrong, but I believe the mailbox server
generates this message, not the hub transport.  The message will be squashed
at the hub transport.  Simple thing to do is to auto-forward to a mailbox
you can check and check it...

-alex

On Wed, Jan 7, 2009 at 2:04 PM, McCready, Robert
wrote:

>  I'm wondering if it's possible to prevent all auto-forwards of emails
> outside the company.  If I open the Exchange 2007 Management Console, and go
> to Organization Configuration - Hub Transport, then right click the Default,
> select Properties and click on the "Format of original message sent as
> attachment to journal report" tab. I see the "Allow automatic forward"
> box is unchecked.  Shouldn't this prevent auto-forwards outside the company?
>
>
> If I try a test message to someone with an auto-forward rule, I get this……
>
> *Your meeting was forwarded*
>
> Johny User  has forwarded your meeting request to additional recipients.
>
>
>
> *Meeting*
>
>
>
> Testing DPL Meetings
>
>
>
>
>
> *Meeting Time*
>
>
>
> Saturday, January 10, 2009 8:00 AM-8:30 AM.
>
>
>
>
>
> *Recipients*
>
>
>
> johny_user_exter...@email.com
>
>
>
> Sure seems like auto-forward is alive and kicking???
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: SCR troubleshooting

[Alex Fontana]

Sounds like you missed the -standbymachine parameter of the disable
command.  Good to know so we don't all start digging through adsiedit...

-alex

On Mon, Dec 8, 2008 at 6:54 AM, Russ Patterson  wrote:

> FYI -
>
> MS got us fixed up - Using ADSIEdit, we went here:
>
>
> CN=[*Storage Group*],CN=InformationStore,CN=[*Server 
> Name*],CN=Servers,CN=Exchange
> Administrative Group (FYDIBOHF23SPDLT),CN=Administrative 
> Groups,CN=[*Org*],CN=Microsoft
> Exchange,CN=Services,CN=Configuration,DC=[*Domain*],DC=com
>
>
> Right-clicked the Storage Group that was just below CN=Information Store,
> in the properties sheet is an attribute:
>
> msExchStandbyCopyMachines
>
> It had as its value a list with both the old, decommissioned server and the
> new one we were trying to use as an SCR target.
>
> Removing the old server from that list, then restarting the IS and the
> MSExchangeRepl service and then performing a full backup got rid of all the
> old TLogs, and started the new target's TLog truncation, too.
>
>
>
> On Wed, Dec 3, 2008 at 12:35 PM, Russ Patterson  wrote:
>
>> I thought I did  - used Disable-StorageGroupCopy - isn't that all there is
>> to stopping it? - then removing the store & TLogs viz the file system on the
>> Target (which of course completely went away.)
>>
>>   On Wed, Dec 3, 2008 at 12:30 PM, KevinM  wrote:
>>
>>>  Server gone.. did you remove SCR replication settings via the command
>>> line when you took down the server?
>>>
>>>
>>>
>>> Anytime I've touched SCR I've removed it all, then started from scratch
>>> with a reseed to fix whatever I busted.
>>>
>>>
>>>
>>> *From:* Russ Patterson [mailto:rus...@gmail.com]
>>> *Sent:* Wednesday, December 03, 2008 9:18 AM
>>> *To:* MS-Exchange Admin Issues
>>> *Subject:* Re: SCR troubleshooting
>>>
>>>
>>>
>>> We did NOT remove the SCR source, we removed the SCR Target - which was
>>> the machine that lost the trust etc.
>>>
>>>
>>>
>>> The SCR source is still here being the source.
>>>
>>> On Wed, Dec 3, 2008 at 12:05 PM, KevinM  wrote:
>>>
>>> Older should have been Old SCR replica server…. I missed a bunch of words
>>> on that one.
>>>
>>>
>>>
>>> *From:* KevinM [mailto:kev...@wlkmmas.org]
>>> *Sent:* Wednesday, December 03, 2008 8:32 AM
>>>
>>>
>>> *To:* MS-Exchange Admin Issues
>>>
>>> *Subject:* RE: SCR troubleshooting
>>>
>>>
>>>
>>> You removed the older, and created a new one, and the old SCR setup is
>>> still there???
>>>
>>>
>>>
>>> *From:* Russ Patterson [mailto:rus...@gmail.com]
>>> *Sent:* Wednesday, December 03, 2008 7:01 AM
>>> *To:* MS-Exchange Admin Issues
>>> *Subject:* SCR troubleshooting
>>>
>>>
>>>
>>> Seasons Greetings All -
>>>
>>>
>>>
>>> I'm having a bit of trouble with SCR. Anyone have any suggestions about
>>> what logging levels to increase to help troubleshoot before I call MS?
>>>
>>>
>>>
>>> If anyone's feeling generous/adventurous here's the issue: You may
>>> remember I asked this list about an Exchange server who lost the machine
>>> trust to the domain a few weeks ago. Apparently, when this happened, the
>>> transaction logs stopped getting cleared on the SCR source when backed up by
>>> our CommVault BU. The suggestions here were to tear down that machine &
>>> build a new one.
>>>
>>>
>>>
>>> I did so, and before I tore down the old machine, I thought I stopped SCR
>>> to that machine. ( I used Disable-StorageGroupCopy : got no
>>> errors) Yesterday we started SCR to the replacement, that works, but it
>>> appears that the command above didn't work, because when I do this now:
>>>
>>>
>>>
>>> [PS] C:\Windows\System32>$sg=Get-StorageGroup ExchServ\SCRStorageGroup
>>> [PS] C:\Windows\System32>$sg.StandbyMachines
>>>
>>>
>>>
>>> I get this:
>>>
>>>
>>>
>>> NodeName Version ReplayLagTime
>>> TruncationLagTime
>>>  --- -
>>> -
>>> ExchSrvr2.domain.co...   1 00:30:00
>>> 00:15:00
>>> ExchSrvr4.domain.co...   1 00:30:00
>>> 00:15:00
>>>
>>>
>>>
>>> the bottom one, ExchSrvr4 is the 'retired' machine (gone for good, no
>>> recourse.) It appears that nowhere (target or source) are Transaction logs
>>> going away . Tho' since we just started the new SCR target machine
>>> yesterday afternoon, maybe it's just not clearing those YET.
>>>
>>>
>>>
>>> I'm starting with MS, then CommVault but was hoping you folks could at
>>> least help me bump logging levels up so I'd have decent data for PSS. Any
>>> suggestions?
>>>
>>>
>>>
>>> Thanks!
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>
>>
>>
>
>
>

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~