RE: Unable to remove additional mailboxs in Outlook 2010 with Exchange 2010?
Back again, Still baffled on this, but more information. Our network admin was kind enough to detach my mailbox to change types which apparently blew away all of my exchange attributes (quotes, smtp addresses, etc...). Interestingly enough, after this I am still having the problem with those extra mailboxes showing up in Outlook 2010 and Outlook 2007. Sometimes on the client they will show up in the list of additional mailboxes, but removing them is ineffective as they show right back up in the folder list a few minutes later but no longer in the additional mailbox list. It would seem these connections are not part of exchange attributes but something actually stored in/with my mailbox. They're not part of the Outlook profile as I have deleted and created a new one several times. In-fact I have created new windows profiles and new Outlook profiles on two clients and have the same issue. I have no desire to delete and recreate my mailbox quite yet so still looking for other ideas. Brad From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Thursday, January 27, 2011 9:24 AM To: MS-Exchange Admin Issues Subject: RE: Unable to remove additional mailboxs in Outlook 2010 with Exchange 2010? I've been busy, but the problem persists, along with several other new problems that seem to be affecting more users each day so now I'm dropping other projects to start troubleshooting exchange issues again. Brad From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, January 27, 2011 9:09 AM To: MS-Exchange Admin Issues Subject: RE: Unable to remove additional mailboxs in Outlook 2010 with Exchange 2010? Wow. blast from the past. :) Sure. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Thursday, January 27, 2011 11:56 AM To: MS-Exchange Admin Issues Subject: RE: Unable to remove additional mailboxs in Outlook 2010 with Exchange 2010? I don't see any Top of Information Store objects. Only one mailbox is marked as Default. Can send you a screencap if you like. Brad From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Saturday, November 13, 2010 1:56 PM To: MS-Exchange Admin Issues Subject: RE: Unable to remove additional mailboxs in Outlook 2010 with Exchange 2010? So, I haven't looked at this in detail, but if you open the profile in MFCMAPI (at Codeplex) can you see multiple Top of Information Store objects? Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Thursday, November 11, 2010 4:14 PM To: MS-Exchange Admin Issues Subject: RE: Unable to remove additional mailboxs in Outlook 2010 with Exchange 2010? Bob, Already tried killing OST's on new profiles, but more importantly, same problem on new machine, new user profile, new outlook profile. It has to be coming from server. Doesn't seem .ost would be related. Brad From: Bob Fronk [mailto:b...@btrfronk.com] Sent: Thursday, November 11, 2010 11:55 AM To: MS-Exchange Admin Issues Subject: RE: Unable to remove additional mailboxs in Outlook 2010 with Exchange 2010? Edit - RENAME OST instead of delete. (profile.ost.old or something) From: Bob Fronk [mailto:b...@btrfronk.com] Sent: Thursday, November 11, 2010 2:54 PM To: MS-Exchange Admin Issues Subject: RE: Unable to remove additional mailboxs in Outlook 2010 with Exchange 2010? Turn off cached mode and delete your OST, then turn cached mode back on. From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Thursday, November 11, 2010 1:44 PM To: MS-Exchange Admin Issues Subject: Unable to remove additional mailboxs in Outlook 2010 with Exchange 2010? Riddle me this: Added three additional mailboxes to Outlook 2010 to assist HR with something. Later, removed those three mailboxes from the profile. Next day, noticed they still show up on the left under my list of mailboxes. Check additional mailbox tab in the profile, not there. Right-click to close, and get a notice saying to remove from the profile. Go back to the profile, they don't appear as additional mailboxes, nothing to remove. Make new profile, they're still there. Go to new computer with Outlook 2010 and log in for the first time, make new profile, and they as still there as well. It appears the server side is somehow making these mailboxes always show up in my list. Anyone know why? They don't show up in OWA or Outlook 2007, so I'm guessing it's an Exchange/Outlook 2010 feature? Thanks Outlook 2010/Exchange 2010 SP1/Win7 32bit. Brad --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana
RE: Unable to remove additional mailboxs in Outlook 2010 with Exchange 2010?
Confirmed, that was the problem. I'm going to join you in the 'not a fan' boat on this one. Interesting idea, might be helpful here and there, but for most people I'd rather it not do this. They really do need to add a way to control this feature by admins... Brad -Original Message- From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, February 03, 2011 11:23 AM To: MS-Exchange Admin Issues Subject: RE: Unable to remove additional mailboxs in Outlook 2010 with Exchange 2010? Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [69.68.185.96] Content-Type: multipart/alternative; boundary=_000_206E053EFD8D754CB67242D59E47B8373B5D9F2FWin2008R2Ex2010_ MIME-Version: 1.0 --_000_206E053EFD8D754CB67242D59E47B8373B5D9F2FWin2008R2Ex2010_ Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable E2010 SP1 - Auto Mapping Feature: This is a new feature in E2010 SP1. Share= d mailboxes appear automatically in your Outlook profile for easy access, n= o configuration is required. User needs to have full access permissions on = shared mailbox, which also provides access to other user's Archive Mailbox.= Info about shared mailboxes comes via Autodiscover to Outlook and it acts = accordingly. This work was done under 'Archive Mailbox' feature delegate = accesshttp://technet.microsoft.com/en-us/library/dd979795.aspx#CA to arch= ive mailbox. It works only in OL2010 OL2007 (with Office 2007 Dec. CUhtt= p://support.microsoft.com/kb/2479671). There is a known issue documented i= n KB:2443651http://support.microsoft.com/kb/2443651. While this is subject to the default throttling policy, nothing else restri= cts it, today. It can come as quite a surprise when your OST suddenly appears to grow to f= ill your entire hard drive... That's everything I can say. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Michael B. Smith Sent: Thursday, February 03, 2011 2:14 PM To: MS-Exchange Admin Issues Subject: RE: Unable to remove additional mailboxs in Outlook 2010 with Exch= ange 2010? Actually, they are part of the results returned from autodiscover. A nasty = feature, IMO. If you remove your permissions from them, they should disappear. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Thursday, February 03, 2011 2:00 PM To: MS-Exchange Admin Issues Subject: RE: Unable to remove additional mailboxs in Outlook 2010 with Exch= ange 2010? Back again, Still baffled on this, but more information. Our network admin was kind eno= ugh to detach my mailbox to change types which apparently blew away all of = my exchange attributes (quotes, smtp addresses, etc...). Interestingly enou= gh, after this I am still having the problem with those extra mailboxes sho= wing up in Outlook 2010 and Outlook 2007. Sometimes on the client they will= show up in the list of additional mailboxes, but removing them is ineffect= ive as they show right back up in the folder list a few minutes later but n= o longer in the additional mailbox list. It would seem these connections are not part of exchange attributes but som= ething actually stored in/with my mailbox. They're not part of the Outlook = profile as I have deleted and created a new one several times. In-fact I ha= ve created new windows profiles and new Outlook profiles on two clients and= have the same issue. I have no desire to delete and recreate my mailbox qu= ite yet so still looking for other ideas. Brad From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Thursday, January 27, 2011 9:24 AM To: MS-Exchange Admin Issues Subject: RE: Unable to remove additional mailboxs in Outlook 2010 with Exch= ange 2010? I've been busy, but the problem persists, along with several other new prob= lems that seem to be affecting more users each day so now I'm dropping othe= r projects to start troubleshooting exchange issues again. Brad From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, January 27, 2011 9:09 AM To: MS-Exchange Admin Issues Subject: RE: Unable to remove additional mailboxs in Outlook 2010 with Exch= ange 2010? Wow. blast from the past. :) Sure. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Thursday, January 27, 2011 11:56 AM To: MS-Exchange Admin Issues Subject: RE: Unable to remove additional mailboxs in Outlook 2010 with Exch= ange 2010? I don't see any Top of Information Store objects. Only one mailbox is mar= ked as Default. Can send you a screencap if you like. Brad From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Saturday, November 13, 2010 1:56 PM To: MS-Exchange Admin Issues Subject: RE: Unable to remove additional mailboxs in Outlook 2010
RE: Unable to remove additional mailboxes in Outlook 2010 with Exchange 2010?
Thanks Simon, For the purposes of this list I will point out from the linked article that the attribute msExchDelegateListLink can be edited to remove people from your mailbox without removing your full permissions to the mailbox. I haven't tested this myself but it appears that is a possible workaround when needed. Article it is a good read though to understand how and when this new feature actually works or is invoked. Thanks guys! Brad -Original Message- From: Simon Butler [mailto:si...@sembee.co.uk] Sent: Thursday, February 03, 2011 12:29 PM To: MS-Exchange Admin Issues Subject: RE: Unable to remove additional mailboxes in Outlook 2010 with Exchange 2010? There is more about this feature here: http://www.stevieg.org/2010/08/auto-mapping-shared-mailboxes-in-exchange-2010-sp1-with-outlook-2010/ Otherwise very little written about it. Simon. -- Simon Butler MVP: Exchange, MCSE Sembee Ltd. e: si...@sembee.co.uk w: http://www.sembee.co.uk/ w: http://www.amset.info/ w: http://blog.sembee.co.uk/ Need cheap certificates for Exchange, compatible with the iPhone? http://CertificatesForExchange.com/ for certificates from just $26.99. Need a domain for your certificate? http://DomainsForExchange.net/ Exchange Resources: http://exbpa.com/ -Original Message- From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: 03 February 2011 19:47 To: MS-Exchange Admin Issues Subject: RE: Unable to remove additional mailboxs in Outlook 2010 with Exchange 2010? Confirmed, that was the problem. I'm going to join you in the 'not a fan' boat on this one. Interesting idea, might be helpful here and there, but for most people I'd rather it not do this. They really do need to add a way to control this feature by admins... Brad -Original Message- From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, February 03, 2011 11:23 AM To: MS-Exchange Admin Issues Subject: RE: Unable to remove additional mailboxs in Outlook 2010 with Exchange 2010? Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [69.68.185.96] Content-Type: multipart/alternative; boundary=_000_206E053EFD8D754CB67242D59E47B8373B5D9F2FWin2008R2Ex2010_ MIME-Version: 1.0 --_000_206E053EFD8D754CB67242D59E47B8373B5D9F2FWin2008R2Ex2010_ Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable E2010 SP1 - Auto Mapping Feature: This is a new feature in E2010 SP1. Share= d mailboxes appear automatically in your Outlook profile for easy access, n= o configuration is required. User needs to have full access permissions on = shared mailbox, which also provides access to other user's Archive Mailbox.= Info about shared mailboxes comes via Autodiscover to Outlook and it acts = accordingly. This work was done under 'Archive Mailbox' feature delegate = accesshttp://technet.microsoft.com/en-us/library/dd979795.aspx#CA to arch= ive mailbox. It works only in OL2010 OL2007 (with Office 2007 Dec. CUhtt= p://support.microsoft.com/kb/2479671). There is a known issue documented i= n KB:2443651http://support.microsoft.com/kb/2443651. While this is subject to the default throttling policy, nothing else restri= cts it, today. It can come as quite a surprise when your OST suddenly appears to grow to f= ill your entire hard drive... That's everything I can say. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Michael B. Smith Sent: Thursday, February 03, 2011 2:14 PM To: MS-Exchange Admin Issues Subject: RE: Unable to remove additional mailboxs in Outlook 2010 with Exch= ange 2010? Actually, they are part of the results returned from autodiscover. A nasty = feature, IMO. If you remove your permissions from them, they should disappear. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Thursday, February 03, 2011 2:00 PM To: MS-Exchange Admin Issues Subject: RE: Unable to remove additional mailboxs in Outlook 2010 with Exch= ange 2010? Back again, Still baffled on this, but more information. Our network admin was kind eno= ugh to detach my mailbox to change types which apparently blew away all of = my exchange attributes (quotes, smtp addresses, etc...). Interestingly enou= gh, after this I am still having the problem with those extra mailboxes sho= wing up in Outlook 2010 and Outlook 2007. Sometimes on the client they will= show up in the list of additional mailboxes, but removing them is ineffect= ive as they show right back up in the folder list a few minutes later but n= o longer in the additional mailbox list. It would seem these connections are not part of exchange attributes but som= ething actually stored in/with my mailbox. They're not part of the Outlook = profile as I have deleted and created a new one several times. In-fact I ha= ve created new
RE: Unable to remove additional mailboxs in Outlook 2010 with Exchange 2010?
I don't see any Top of Information Store objects. Only one mailbox is marked as Default. Can send you a screencap if you like. Brad From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Saturday, November 13, 2010 1:56 PM To: MS-Exchange Admin Issues Subject: RE: Unable to remove additional mailboxs in Outlook 2010 with Exchange 2010? So, I haven't looked at this in detail, but if you open the profile in MFCMAPI (at Codeplex) can you see multiple Top of Information Store objects? Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Thursday, November 11, 2010 4:14 PM To: MS-Exchange Admin Issues Subject: RE: Unable to remove additional mailboxs in Outlook 2010 with Exchange 2010? Bob, Already tried killing OST's on new profiles, but more importantly, same problem on new machine, new user profile, new outlook profile. It has to be coming from server. Doesn't seem .ost would be related. Brad From: Bob Fronk [mailto:b...@btrfronk.com] Sent: Thursday, November 11, 2010 11:55 AM To: MS-Exchange Admin Issues Subject: RE: Unable to remove additional mailboxs in Outlook 2010 with Exchange 2010? Edit - RENAME OST instead of delete. (profile.ost.old or something) From: Bob Fronk [mailto:b...@btrfronk.com] Sent: Thursday, November 11, 2010 2:54 PM To: MS-Exchange Admin Issues Subject: RE: Unable to remove additional mailboxs in Outlook 2010 with Exchange 2010? Turn off cached mode and delete your OST, then turn cached mode back on. From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Thursday, November 11, 2010 1:44 PM To: MS-Exchange Admin Issues Subject: Unable to remove additional mailboxs in Outlook 2010 with Exchange 2010? Riddle me this: Added three additional mailboxes to Outlook 2010 to assist HR with something. Later, removed those three mailboxes from the profile. Next day, noticed they still show up on the left under my list of mailboxes. Check additional mailbox tab in the profile, not there. Right-click to close, and get a notice saying to remove from the profile. Go back to the profile, they don't appear as additional mailboxes, nothing to remove. Make new profile, they're still there. Go to new computer with Outlook 2010 and log in for the first time, make new profile, and they as still there as well. It appears the server side is somehow making these mailboxes always show up in my list. Anyone know why? They don't show up in OWA or Outlook 2007, so I'm guessing it's an Exchange/Outlook 2010 feature? Thanks Outlook 2010/Exchange 2010 SP1/Win7 32bit. Brad --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: Unable to remove additional mailboxs in Outlook 2010 with Exchange 2010?
I've been busy, but the problem persists, along with several other new problems that seem to be affecting more users each day so now I'm dropping other projects to start troubleshooting exchange issues again. Brad From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, January 27, 2011 9:09 AM To: MS-Exchange Admin Issues Subject: RE: Unable to remove additional mailboxs in Outlook 2010 with Exchange 2010? Wow. blast from the past. :) Sure. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Thursday, January 27, 2011 11:56 AM To: MS-Exchange Admin Issues Subject: RE: Unable to remove additional mailboxs in Outlook 2010 with Exchange 2010? I don't see any Top of Information Store objects. Only one mailbox is marked as Default. Can send you a screencap if you like. Brad From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Saturday, November 13, 2010 1:56 PM To: MS-Exchange Admin Issues Subject: RE: Unable to remove additional mailboxs in Outlook 2010 with Exchange 2010? So, I haven't looked at this in detail, but if you open the profile in MFCMAPI (at Codeplex) can you see multiple Top of Information Store objects? Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Thursday, November 11, 2010 4:14 PM To: MS-Exchange Admin Issues Subject: RE: Unable to remove additional mailboxs in Outlook 2010 with Exchange 2010? Bob, Already tried killing OST's on new profiles, but more importantly, same problem on new machine, new user profile, new outlook profile. It has to be coming from server. Doesn't seem .ost would be related. Brad From: Bob Fronk [mailto:b...@btrfronk.com] Sent: Thursday, November 11, 2010 11:55 AM To: MS-Exchange Admin Issues Subject: RE: Unable to remove additional mailboxs in Outlook 2010 with Exchange 2010? Edit - RENAME OST instead of delete. (profile.ost.old or something) From: Bob Fronk [mailto:b...@btrfronk.com] Sent: Thursday, November 11, 2010 2:54 PM To: MS-Exchange Admin Issues Subject: RE: Unable to remove additional mailboxs in Outlook 2010 with Exchange 2010? Turn off cached mode and delete your OST, then turn cached mode back on. From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Thursday, November 11, 2010 1:44 PM To: MS-Exchange Admin Issues Subject: Unable to remove additional mailboxs in Outlook 2010 with Exchange 2010? Riddle me this: Added three additional mailboxes to Outlook 2010 to assist HR with something. Later, removed those three mailboxes from the profile. Next day, noticed they still show up on the left under my list of mailboxes. Check additional mailbox tab in the profile, not there. Right-click to close, and get a notice saying to remove from the profile. Go back to the profile, they don't appear as additional mailboxes, nothing to remove. Make new profile, they're still there. Go to new computer with Outlook 2010 and log in for the first time, make new profile, and they as still there as well. It appears the server side is somehow making these mailboxes always show up in my list. Anyone know why? They don't show up in OWA or Outlook 2007, so I'm guessing it's an Exchange/Outlook 2010 feature? Thanks Outlook 2010/Exchange 2010 SP1/Win7 32bit. Brad --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana
Unable to remove additional mailboxs in Outlook 2010 with Exchange 2010?
Riddle me this: Added three additional mailboxes to Outlook 2010 to assist HR with something. Later, removed those three mailboxes from the profile. Next day, noticed they still show up on the left under my list of mailboxes. Check additional mailbox tab in the profile, not there. Right-click to close, and get a notice saying to remove from the profile. Go back to the profile, they don't appear as additional mailboxes, nothing to remove. Make new profile, they're still there. Go to new computer with Outlook 2010 and log in for the first time, make new profile, and they as still there as well. It appears the server side is somehow making these mailboxes always show up in my list. Anyone know why? They don't show up in OWA or Outlook 2007, so I'm guessing it's an Exchange/Outlook 2010 feature? Thanks Outlook 2010/Exchange 2010 SP1/Win7 32bit. Brad --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: Unable to remove additional mailboxs in Outlook 2010 with Exchange 2010?
Bob, Already tried killing OST's on new profiles, but more importantly, same problem on new machine, new user profile, new outlook profile. It has to be coming from server. Doesn't seem .ost would be related. Brad From: Bob Fronk [mailto:b...@btrfronk.com] Sent: Thursday, November 11, 2010 11:55 AM To: MS-Exchange Admin Issues Subject: RE: Unable to remove additional mailboxs in Outlook 2010 with Exchange 2010? Edit - RENAME OST instead of delete. (profile.ost.old or something) From: Bob Fronk [mailto:b...@btrfronk.com] Sent: Thursday, November 11, 2010 2:54 PM To: MS-Exchange Admin Issues Subject: RE: Unable to remove additional mailboxs in Outlook 2010 with Exchange 2010? Turn off cached mode and delete your OST, then turn cached mode back on. From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Thursday, November 11, 2010 1:44 PM To: MS-Exchange Admin Issues Subject: Unable to remove additional mailboxs in Outlook 2010 with Exchange 2010? Riddle me this: Added three additional mailboxes to Outlook 2010 to assist HR with something. Later, removed those three mailboxes from the profile. Next day, noticed they still show up on the left under my list of mailboxes. Check additional mailbox tab in the profile, not there. Right-click to close, and get a notice saying to remove from the profile. Go back to the profile, they don't appear as additional mailboxes, nothing to remove. Make new profile, they're still there. Go to new computer with Outlook 2010 and log in for the first time, make new profile, and they as still there as well. It appears the server side is somehow making these mailboxes always show up in my list. Anyone know why? They don't show up in OWA or Outlook 2007, so I'm guessing it's an Exchange/Outlook 2010 feature? Thanks Outlook 2010/Exchange 2010 SP1/Win7 32bit. Brad --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: Exchange 2010 device security on Android
Anyone else know any more about this? Originally it only affected our Droid 2 users, but since the 2.2 update now our original Droid users and it sounds like possibly some others are seeing this. We verified no password requirement in the policy on the server. Brad From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Tuesday, August 24, 2010 9:28 AM To: MS-Exchange Admin Issues Subject: RE: Exchange 2010 device security on Android The trick here being we have no AS policies configured. I would expect none of our devices would force a PIN. So far the only one that appears to do that is the Droid 2 running v2.2 Greg suggested it may be a difference between 2.1 and 2.2, but my point being that I have observed 2.2 on a Droid (1) and do not see that behavior. I would be curious to know on what device Greg's 2.2 user was seeing this issue. Was is also a Droid 2 or a different device? Brad From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Tuesday, August 24, 2010 8:47 AM To: MS-Exchange Admin Issues Subject: RE: Exchange 2010 device security on Android For a given phone from a given manufacturer and software version, and users deployed with the same AS policy, I would expect them to behave the same. ActiveSync is a protocol which includes policies. A given implementation can choose to include or exclude whatever it wants, including which policies it chooses to enforce. The only overall expectation is what when a device says it implements a policy, it actually does so. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Tuesday, August 24, 2010 11:42 AM To: MS-Exchange Admin Issues Subject: RE: Exchange 2010 device security on Android Oddly it isn't just software. Droid 2 running 2.2 forced the PIN, Droid running 2.2 does not force the pin. Anyone else have any insight? Brad From: Greg Olson [mailto:gol...@markettools.com] Sent: Tuesday, August 17, 2010 2:11 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2010 device security on Android I saw this yesterday on one of our new Droid users that was running the new 2.2 Android software. I have the original Droid running 2.1 and it doesn't have this behavior. We just made him put in a pin, but would be interested to find out the answer as well. -Greg From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Tuesday, August 17, 2010 2:00 PM To: MS-Exchange Admin Issues Subject: Exchange 2010 device security on Android We just brought out first few Android users onboard. Our activesync policy is default, no password or device requirements, however while iPhone and Winmobile don't require a password, the Android devices require a device password as soon as you add the exchange account and under settings indicate that it is required by corporate policy. Anyone else running into this or just a bug in our deployment? Brad --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: Exchange 2010 device security on Android
Oddly it isn't just software. Droid 2 running 2.2 forced the PIN, Droid running 2.2 does not force the pin. Anyone else have any insight? Brad From: Greg Olson [mailto:gol...@markettools.com] Sent: Tuesday, August 17, 2010 2:11 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2010 device security on Android I saw this yesterday on one of our new Droid users that was running the new 2.2 Android software. I have the original Droid running 2.1 and it doesn't have this behavior. We just made him put in a pin, but would be interested to find out the answer as well. -Greg From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Tuesday, August 17, 2010 2:00 PM To: MS-Exchange Admin Issues Subject: Exchange 2010 device security on Android We just brought out first few Android users onboard. Our activesync policy is default, no password or device requirements, however while iPhone and Winmobile don't require a password, the Android devices require a device password as soon as you add the exchange account and under settings indicate that it is required by corporate policy. Anyone else running into this or just a bug in our deployment? Brad
RE: Exchange 2010 device security on Android
The trick here being we have no AS policies configured. I would expect none of our devices would force a PIN. So far the only one that appears to do that is the Droid 2 running v2.2 Greg suggested it may be a difference between 2.1 and 2.2, but my point being that I have observed 2.2 on a Droid (1) and do not see that behavior. I would be curious to know on what device Greg's 2.2 user was seeing this issue. Was is also a Droid 2 or a different device? Brad From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Tuesday, August 24, 2010 8:47 AM To: MS-Exchange Admin Issues Subject: RE: Exchange 2010 device security on Android For a given phone from a given manufacturer and software version, and users deployed with the same AS policy, I would expect them to behave the same. ActiveSync is a protocol which includes policies. A given implementation can choose to include or exclude whatever it wants, including which policies it chooses to enforce. The only overall expectation is what when a device says it implements a policy, it actually does so. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Tuesday, August 24, 2010 11:42 AM To: MS-Exchange Admin Issues Subject: RE: Exchange 2010 device security on Android Oddly it isn't just software. Droid 2 running 2.2 forced the PIN, Droid running 2.2 does not force the pin. Anyone else have any insight? Brad From: Greg Olson [mailto:gol...@markettools.com] Sent: Tuesday, August 17, 2010 2:11 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2010 device security on Android I saw this yesterday on one of our new Droid users that was running the new 2.2 Android software. I have the original Droid running 2.1 and it doesn't have this behavior. We just made him put in a pin, but would be interested to find out the answer as well. -Greg From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Tuesday, August 17, 2010 2:00 PM To: MS-Exchange Admin Issues Subject: Exchange 2010 device security on Android We just brought out first few Android users onboard. Our activesync policy is default, no password or device requirements, however while iPhone and Winmobile don't require a password, the Android devices require a device password as soon as you add the exchange account and under settings indicate that it is required by corporate policy. Anyone else running into this or just a bug in our deployment? Brad
Exchange 2010 device security on Android
We just brought out first few Android users onboard. Our activesync policy is default, no password or device requirements, however while iPhone and Winmobile don't require a password, the Android devices require a device password as soon as you add the exchange account and under settings indicate that it is required by corporate policy. Anyone else running into this or just a bug in our deployment? Brad
Finding Delegates on a mailbox
There is difference between delegates set in Outlook and delegates set on a mailbox on the server. I believe I understand how to view and modify delegates on the mailbox using EMC or EMS for Exchange 2010. However, how does one view/modify the delegates that were set in Outlook without actually opening the mailbox in Outlook, or is this even possible? Brad
Delegates Error on Exchange 2010
I am experiencing the following error message when trying to add/remove/modify delegate rights. Cannot activate send-on-behalf-of list. You do not have sufficient permission to perform this operation on this object. It occurs on mailboxes migrated from Exchange 2003 to Exchange 2010. We originally discovered it when creating profiles for resource mailboxes and attempting to modify their delegates while logged in under our own credentials with Full Access to the resource mailbox. The program did not occur when opening our own mailboxes and modifying our own delegates, however we are now finding users who cannot modify even their own delegate rights. Additionally the options underneath the delegate rights are also grayed out for these users. We have attempted adding the Write Exchange Personal Information permission to the SELF account on the mailboxes as suggested in some Exchange 2007 guides online, but this has not resolved the issue. Anyone else running into this and have a resolution? Brad
RE: Delegates Error on Exchange 2010
Thanks, have you actually used this with success? The issue I have right now is that a user is getting this error on his own mailbox and there are Full and Send As rights granted to SELF for his mailbox. Eventually I will need to deal with the delegate rights on the room resource mailboxes also, but for the moment this appears to be another issue. Also, when testing, I tried granting myself full and send as rights on a room for testing and still received the delegates error when I made a profile for that room and tried to modify delegate rights. So I understand using a role group to give Full and Send As rights to resource mailboxes, but what about when you get the error when you already have those rights? Brad From: greg.swe...@actsconsulting.net [mailto:greg.swe...@actsconsulting.net] Sent: Monday, March 22, 2010 3:02 PM To: MS-Exchange Admin Issues Subject: RE: Delegates Error on Exchange 2010 I found this on MSDN. http://blogs.msdn.com/pepeedu/archive/2010/02/04/outlook-delegate-with-exchange-2010-rbac-implementation.aspx From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Monday, March 22, 2010 5:58 PM To: MS-Exchange Admin Issues Subject: RE: Delegates Error on Exchange 2010 I'm heading to another educational client tomorrow to attempt to figure out this specific issue. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Monday, March 22, 2010 5:21 PM To: MS-Exchange Admin Issues Subject: Delegates Error on Exchange 2010 I am experiencing the following error message when trying to add/remove/modify delegate rights. Cannot activate send-on-behalf-of list. You do not have sufficient permission to perform this operation on this object. It occurs on mailboxes migrated from Exchange 2003 to Exchange 2010. We originally discovered it when creating profiles for resource mailboxes and attempting to modify their delegates while logged in under our own credentials with Full Access to the resource mailbox. The program did not occur when opening our own mailboxes and modifying our own delegates, however we are now finding users who cannot modify even their own delegate rights. Additionally the options underneath the delegate rights are also grayed out for these users. We have attempted adding the Write Exchange Personal Information permission to the SELF account on the mailboxes as suggested in some Exchange 2007 guides online, but this has not resolved the issue. Anyone else running into this and have a resolution? Brad
RE: Delegates Error on Exchange 2010
Is there such thing in Exchange 2010? Brad From: Campbell, Rob [mailto:rob_campb...@centraltechnology.net] Sent: Monday, March 22, 2010 3:35 PM To: MS-Exchange Admin Issues Subject: RE: Delegates Error on Exchange 2010 Have you checked the ReceiveAs right? From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Monday, March 22, 2010 5:32 PM To: MS-Exchange Admin Issues Subject: RE: Delegates Error on Exchange 2010 Thanks, have you actually used this with success? The issue I have right now is that a user is getting this error on his own mailbox and there are Full and Send As rights granted to SELF for his mailbox. Eventually I will need to deal with the delegate rights on the room resource mailboxes also, but for the moment this appears to be another issue. Also, when testing, I tried granting myself full and send as rights on a room for testing and still received the delegates error when I made a profile for that room and tried to modify delegate rights. So I understand using a role group to give Full and Send As rights to resource mailboxes, but what about when you get the error when you already have those rights? Brad From: greg.swe...@actsconsulting.net [mailto:greg.swe...@actsconsulting.net] Sent: Monday, March 22, 2010 3:02 PM To: MS-Exchange Admin Issues Subject: RE: Delegates Error on Exchange 2010 I found this on MSDN. http://blogs.msdn.com/pepeedu/archive/2010/02/04/outlook-delegate-with-exchange-2010-rbac-implementation.aspx From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Monday, March 22, 2010 5:58 PM To: MS-Exchange Admin Issues Subject: RE: Delegates Error on Exchange 2010 I'm heading to another educational client tomorrow to attempt to figure out this specific issue. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Monday, March 22, 2010 5:21 PM To: MS-Exchange Admin Issues Subject: Delegates Error on Exchange 2010 I am experiencing the following error message when trying to add/remove/modify delegate rights. Cannot activate send-on-behalf-of list. You do not have sufficient permission to perform this operation on this object. It occurs on mailboxes migrated from Exchange 2003 to Exchange 2010. We originally discovered it when creating profiles for resource mailboxes and attempting to modify their delegates while logged in under our own credentials with Full Access to the resource mailbox. The program did not occur when opening our own mailboxes and modifying our own delegates, however we are now finding users who cannot modify even their own delegate rights. Additionally the options underneath the delegate rights are also grayed out for these users. We have attempted adding the Write Exchange Personal Information permission to the SELF account on the mailboxes as suggested in some Exchange 2007 guides online, but this has not resolved the issue. Anyone else running into this and have a resolution? Brad ** Note: The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. **
RE: Friday funnies
That's because your cat is pooping in your neighbors' yards and digging up their flower beds and leaving dead rodents on their doorsteps and scratching up their paint on their cars to enjoy the warmth of the engine, etc... but I'm not bitter :P -Brad From: Sean Martin [mailto:seanmarti...@gmail.com] Sent: Friday, March 19, 2010 8:56 AM To: MS-Exchange Admin Issues Subject: Re: Friday funnies I'd have to disagree. I don't spend countless hours outdoors picking up after my cat. I'd say dogs have slaves as well, they're just better at keeping your morale up so you don't realize it. - Sean On Fri, Mar 19, 2010 at 7:28 AM, Ellis, John P. johnel...@wirral.gov.ukmailto:johnel...@wirral.gov.uk wrote: I'd go with that. Dogs have masters and cats have slavessounds right to me. -Original Message- From: Orland, Kathleen [mailto:korl...@rogers.commailto:korl...@rogers.com] Sent: 19 March 2010 15:25 To: MS-Exchange Admin Issues Subject: Re: Friday funnies They most certainly do not... They have slaves, thank you very much! lol - Original Message - From: Campbell, Rob rob_campb...@centraltechnology.netmailto:rob_campb...@centraltechnology.net To: MS-Exchange Admin Issues exchangelist@lyris.sunbelt-software.commailto:exchangelist@lyris.sunbelt-software.com Sent: Friday, March 19, 2010 11:21 AM Subject: RE: Friday funnies Dogs have masters. Cats have staff. ** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept by MIMEsweeper for the presence of computer viruses. www.clearswift.comhttp://www.clearswift.com/ **
RE: Friday funnies
John, in my personal experience, I find that outdoor cats left to wander the neighborhood rarely limit themselves to just the neighbor next door. That said, their natural tendency for laziness would suggest there is a radius in which the homes must be in order to receive their regular ‘treatment’. I expect this radius could be scientifically correlated to how fat the particular cat in question may be. Brad P.S. mailbox, hub transport, CAS, topical content, blah blah… Carry on… From: John Cook [mailto:john.c...@pfsf.org] Sent: Friday, March 19, 2010 9:16 AM To: MS-Exchange Admin Issues Subject: Re: Friday funnies Do you live next door From: Brad Metzler To: MS-Exchange Admin Issues Sent: Fri Mar 19 12:14:15 2010 Subject: RE: Friday funnies That’s because your cat is pooping in your neighbors’ yards and digging up their flower beds and leaving dead rodents on their doorsteps and scratching up their paint on their cars to enjoy the warmth of the engine, etc… but I’m not bitter…. :P -Brad From: Sean Martin [mailto:seanmarti...@gmail.com] Sent: Friday, March 19, 2010 8:56 AM To: MS-Exchange Admin Issues Subject: Re: Friday funnies I'd have to disagree. I don't spend countless hours outdoors picking up after my cat. I'd say dogs have slaves as well, they're just better at keeping your morale up so you don't realize it. - Sean On Fri, Mar 19, 2010 at 7:28 AM, Ellis, John P. johnel...@wirral.gov.ukmailto:johnel...@wirral.gov.uk wrote: I'd go with that. Dogs have masters and cats have slavessounds right to me. -Original Message- From: Orland, Kathleen [mailto:korl...@rogers.commailto:korl...@rogers.com] Sent: 19 March 2010 15:25 To: MS-Exchange Admin Issues Subject: Re: Friday funnies They most certainly do not... They have slaves, thank you very much! lol - Original Message - From: Campbell, Rob rob_campb...@centraltechnology.netmailto:rob_campb...@centraltechnology.net To: MS-Exchange Admin Issues exchangelist@lyris.sunbelt-software.commailto:exchangelist@lyris.sunbelt-software.com Sent: Friday, March 19, 2010 11:21 AM Subject: RE: Friday funnies Dogs have masters. Cats have staff. ** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept by MIMEsweeper for the presence of computer viruses. www.clearswift.comhttp://www.clearswift.com/ ** CONFIDENTIALITY STATEMENT: The information transmitted, or contained or attached to or with this Notice is intended only for the person or entity to which it is addressed and may contain Protected Health Information (PHI), confidential and/or privileged material. Any review, transmission, dissemination, or other use of, and taking any action in reliance upon this information by persons or entities other than the intended recipient without the express written consent of the sender are prohibited. This information may be protected by the Health Insurance Portability and Accountability Act of 1996 (HIPAA), and other Federal and Florida laws. Improper or unauthorized use or disclosure of this information could result in civil and/or criminal penalties. Consider the environment. Please don't print this e-mail unless you really need to. This email and any attached files are confidential and intended solely for the intended recipient(s). If you are not the named recipient you should not read, distribute, copy or alter this email. Any views or opinions expressed in this email are those of the author and do not represent those of the company. Warning: Although precautions have been taken to make sure no viruses are present in this email, the company cannot accept responsibility for any loss or damage that arise from the use of this email or attachments.
Backup Exec and Exchange 2010 Gotcha
Since there is another Exchange backup thread it may me think to just throw this up for those who use Backup Exec and are looking to go to Exchange 2010. First, if you're running something before Backup Exec 2010, you'll need to upgrade to get support for Exchange 2010. Second, the Exchange management tools are required on the Backup Exec 2010 server. For Exchange 2010 this means you'll need to make sure your Backup Exec 2010 is running a 64bit OS. This one was a gotcha for us since our Backup Exec servers were all 32 bit still. Just a heads up for those on the path to upgrade. Brad
Outlook Authentication Prompt on reboot of server
I have noticed one difference between using Outlook 2007 on Exchange 2003 vs. Exchange 2010 is a prompt to users for credentials. On Exchange 2003, the user (particularly when using Cached Exchange mode) would normally not even notice a reboot of the server. However, now on Exchange 2010 if we reboot the server, users are immediately prompted for credentials which continue until the server is back up or until they restart Outlook when the server is back up. This seem significantly more invasive than before where Outlook would simply go into offline mode temporarily until the server was available again. Anyone happen to know why this change in behavior, or is this not normal? Brad
RE: Outlook Authentication Prompt on reboot of server
To my knowledge, AutoDiscover is configured properly and last I ran the test from testexchangeconnectivity.com it ran through everything fine. I just tried it again and it appears the app on testexchangeconnectivity.com is crashing so I'll have to rerun it another time and see if the results have changed for some reason. Brad From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Wednesday, March 03, 2010 6:41 PM To: MS-Exchange Admin Issues Subject: RE: Outlook Authentication Prompt on reboot of server This goes away with Outlook 2010. And it shouldn't happen if autodiscover is configured properly in your current environment. That's what I would investigate www.testexchangeconnectivity.com is your friend. J Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Wednesday, March 03, 2010 9:29 PM To: MS-Exchange Admin Issues Subject: Outlook Authentication Prompt on reboot of server I have noticed one difference between using Outlook 2007 on Exchange 2003 vs. Exchange 2010 is a prompt to users for credentials. On Exchange 2003, the user (particularly when using Cached Exchange mode) would normally not even notice a reboot of the server. However, now on Exchange 2010 if we reboot the server, users are immediately prompted for credentials which continue until the server is back up or until they restart Outlook when the server is back up. This seem significantly more invasive than before where Outlook would simply go into offline mode temporarily until the server was available again. Anyone happen to know why this change in behavior, or is this not normal? Brad
Outlook Anywhere Authentication Behavior Domain Member vs. Non-Domain member
I have observed in our implementation for Exchange 2010 that non-Domain Members can use Outlook Anywhere, but Domain Member systems are unable. When a non-Domain Member creates a profile and auto-configures from a remote location, it appears Autodiscover works properly and they are prompted to authenticate to the server. The authentication box that is presented to them is asking them to authenticate to the external FQDN of the CAS server which works properly. When a Domain Member creates a profile and auto-configures from a remote location, while the Autodiscover appears to work, they are then prompted to authenticate to the internal name of the CAS server, an operation which they cannot complete remotely or without VPN. It appears that this may not even be a DNS related issue. As an experiment, I put the internal name of the server into the hosts file of the Domain Member system and tested it could ping the CAS server using the Internal name from the remote location. However when prompted to authenticate to the internal name server, the authentication still fails. We also tried configuring a Domain Member for Outlook Anywhere while on site, then taking the system off-site and the authentication issue persists, so it is not an issue that is only present during configuration. It seems that Domain Member systems are treated differently in how Outlook Anywhere handles their configuration. Again, non-Domain Members work as expected, it is only the Domain Members that cannot use Outlook Anywhere. Does anyone else out there successfully use Outlook Anywhere with Domain Member clients off-site? Brad
RE: Outlook Anywhere Authentication Behavior Domain Member vs. Non-Domain member
Thanks Michael. The connectivity test was unhappy that the SSL name had
a mismatch between the External FQDN and the cert (we use a wildcard
cert). So I used Set-OutlookProvider EXPR -CertPrincipalName to set the
wildcard cert name and now it passes the test.
It has now worked on 4 out of 5 tries. The failed try, I rebooted and
tried again and it worked (when it failed it was just re-prompting for
credentials over and over).
Interestingly, the prompt for domain members is still the internal name,
but it does accept the credentials.
Brad
From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Monday, February 15, 2010 9:01 AM
To: MS-Exchange Admin Issues
Subject: RE: Outlook Anywhere Authentication Behavior Domain Member vs.
Non-Domain member
Sure, all the time. It's a key use case for OA.
Almost certainly you have the ClientAuth or RpcAuth for one of the
vdir's set wrong or an external URL set wrong.
I'd start with testexchangeconnectivity.com and see what it says.
Note that the detailed content of the response from autodiscover will
tell you almost everything about your configuration. Using
testexchangeconnectivity, you should be able to find the parameter which
is set incorrectly and map it back to the parameter you need to change
('cuz the names just don't match).
Regards,
Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com
From: Brad Metzler [mailto:bmetz...@cu-portland.edu]
Sent: Monday, February 15, 2010 11:34 AM
To: MS-Exchange Admin Issues
Subject: Outlook Anywhere Authentication Behavior Domain Member vs.
Non-Domain member
I have observed in our implementation for Exchange 2010 that non-Domain
Members can use Outlook Anywhere, but Domain Member systems are unable.
When a non-Domain Member creates a profile and auto-configures from a
remote location, it appears Autodiscover works properly and they are
prompted to authenticate to the server. The authentication box that is
presented to them is asking them to authenticate to the external FQDN of
the CAS server which works properly.
When a Domain Member creates a profile and auto-configures from a remote
location, while the Autodiscover appears to work, they are then prompted
to authenticate to the internal name of the CAS server, an operation
which they cannot complete remotely or without VPN.
It appears that this may not even be a DNS related issue. As an
experiment, I put the internal name of the server into the hosts file of
the Domain Member system and tested it could ping the CAS server using
the Internal name from the remote location. However when prompted to
authenticate to the internal name server, the authentication still
fails. We also tried configuring a Domain Member for Outlook Anywhere
while on site, then taking the system off-site and the authentication
issue persists, so it is not an issue that is only present during
configuration.
It seems that Domain Member systems are treated differently in how
Outlook Anywhere handles their configuration. Again, non-Domain Members
work as expected, it is only the Domain Members that cannot use Outlook
Anywhere.
Does anyone else out there successfully use Outlook Anywhere with Domain
Member clients off-site?
Brad
RE: Exchange Database - recovery from snapshot - NetApp SnapManager
Brian, Is not the answer to your question in the error message itself? It's telling you that you can't store the database in the root and it appears you are trying to put it in Z:\ Perhaps if you put it in Z:\Recover\ or something like that instead? Brad From: Brian Dwyer [mailto:bdw...@bne.catholic.edu.au] Sent: Monday, February 15, 2010 1:50 PM To: MS-Exchange Admin Issues Subject: Exchange Database - recovery from snapshot - NetApp SnapManager BACKGROUND: We use NetApp Snap Manager to snapshot our exchange databases (38 db's over 2 servers) daily Monday to Friday (15 generations retained). Snapshots are backed up to tape on w/e. 5 Databases per LUN In Exchange Management console the database file path is G:\LUN_SG02Database\SG02DB.edb PROBLEM: Requirement to recover items deleted from senior staff members mailbox. Using NetApp Snap Manager to recover a snapshot to Recovery Storage Group fails with the following :- [PowerShell Cmdlet]: New-MailboxDatabase -StorageGroup PNMG004\SG02-RSG -MailboxDatabaseToRecover PNMG004\SG02\SG02DB -EDBFilePath Z:\SG02DB.edb -DomainController PNDC003.bne.catholic.edu.au PowerShell Cmdlet Error]: Exchange cannot store database (.edb) files in the root directory. Please choose another location. The specified file path is 'Z:\SG02DB.edb'. [10:51:24.799] Failed to create the database! I have create test DB with a Data base File Path of -H:\RSG01Recovery\2ndtest\TestSGDB.edb Taken a snap shot, removed some items from test mailbox, and performed a Snap Manager restore from the snapshot with not problems. Anyone experienced anything like this or have any ideas on how to get around it? Cheers, Brian -- This message has been scanned for viruses and dangerous content by the BCEC Security Gateway, and is believed to be clean. Brisbane Catholic Education however gives no warranties that this e-mail is free from computer viruses or other defects. Except for responsibilities implied by law that cannot be excluded, Brisbane Catholic Education, its employees and agents will not be responsible for any loss, damage or consequence arising from this e-mail.
RE: Exchange Database - recovery from snapshot - NetApp SnapManager
Ahh So Snap Manager forces the file into Z:\? I presume you can't move the edb file yourself after Snap Manager puts it in Z:\? If that's the case, then I suppose you'll just tell NetApp to suck less for Exchange and hope they fix it? Brad From: Brian Dwyer [mailto:bdw...@bne.catholic.edu.au] Sent: Monday, February 15, 2010 1:58 PM To: MS-Exchange Admin Issues Subject: RE: Exchange Database - recovery from snapshot - NetApp SnapManager Yep aware of that, unfortunately Snap Manager does not allow me to specify a path From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Tuesday, 16 February 2010 7:51 AM To: MS-Exchange Admin Issues Subject: RE: Exchange Database - recovery from snapshot - NetApp SnapManager Brian, Is not the answer to your question in the error message itself? It's telling you that you can't store the database in the root and it appears you are trying to put it in Z:\ Perhaps if you put it in Z:\Recover\ or something like that instead? Brad From: Brian Dwyer [mailto:bdw...@bne.catholic.edu.au] Sent: Monday, February 15, 2010 1:50 PM To: MS-Exchange Admin Issues Subject: Exchange Database - recovery from snapshot - NetApp SnapManager BACKGROUND: We use NetApp Snap Manager to snapshot our exchange databases (38 db's over 2 servers) daily Monday to Friday (15 generations retained). Snapshots are backed up to tape on w/e. 5 Databases per LUN In Exchange Management console the database file path is G:\LUN_SG02Database\SG02DB.edb PROBLEM: Requirement to recover items deleted from senior staff members mailbox. Using NetApp Snap Manager to recover a snapshot to Recovery Storage Group fails with the following :- [PowerShell Cmdlet]: New-MailboxDatabase -StorageGroup PNMG004\SG02-RSG -MailboxDatabaseToRecover PNMG004\SG02\SG02DB -EDBFilePath Z:\SG02DB.edb -DomainController PNDC003.bne.catholic.edu.au PowerShell Cmdlet Error]: Exchange cannot store database (.edb) files in the root directory. Please choose another location. The specified file path is 'Z:\SG02DB.edb'. [10:51:24.799] Failed to create the database! I have create test DB with a Data base File Path of -H:\RSG01Recovery\2ndtest\TestSGDB.edb Taken a snap shot, removed some items from test mailbox, and performed a Snap Manager restore from the snapshot with not problems. Anyone experienced anything like this or have any ideas on how to get around it? Cheers, Brian -- This message has been scanned for viruses and dangerous content by the BCEC Security Gateway, and is believed to be clean. Brisbane Catholic Education however gives no warranties that this e-mail is free from computer viruses or other defects. Except for responsibilities implied by law that cannot be excluded, Brisbane Catholic Education, its employees and agents will not be responsible for any loss, damage or consequence arising from this e-mail. -- This message has been scanned for viruses and dangerous content by the BCEC Security Gateway, and is believed to be clean. Brisbane Catholic Education however gives no warranties that this e-mail is free from computer viruses or other defects. Except for responsibilities implied by law that cannot be excluded, Brisbane Catholic Education, its employees and agents will not be responsible for any loss, damage or consequence arising from this e-mail.
Rules Delegates in Exchange 2003 to Exchange Migration 2010
We have observed that as we migrate users from our Exchange 2003 server to our Exchange 2010 server that for some mailboxes, some rules are ineffective after the move until they are recreated. We have observed the same behavior with delegate permissions. Some delegates need to be removed and re-added before the permissions will become effective again. Has anyone else observed anything like this? Is there any way to force the Exchange 2010 server to re-evaluate the rules and delegates and 'reapply' them so they become effective without the user doing it? This is confusing for users because the rules and delegates still exist, but they do not know if they are ineffective until the rule fails to function or the delegated party calls to advise them they no longer have access. Brad
RE: Rules Delegates in Exchange 2003 to Exchange Migration 2010
We did have some issues with users not having the inheritance set which prevents them from using their SmartPhones, but all of the users having the Rules or Delegates issues have inheritance set. The rules and delegates still exist, they just don't function correctly. And even more oddly, for one of the users, out of a list of 5 rules, only 2 stopped working... Brad From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Friday, February 12, 2010 12:17 PM To: MS-Exchange Admin Issues Subject: RE: Rules Delegates in Exchange 2003 to Exchange Migration 2010 That...shouldn't happen. I might suggest you see if a given user and/or mailbox has been blocked from permission inheritance. That's the only item that pops to mind that would cause that without major mumbo jumbo. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Friday, February 12, 2010 12:39 PM To: MS-Exchange Admin Issues Subject: Rules Delegates in Exchange 2003 to Exchange Migration 2010 We have observed that as we migrate users from our Exchange 2003 server to our Exchange 2010 server that for some mailboxes, some rules are ineffective after the move until they are recreated. We have observed the same behavior with delegate permissions. Some delegates need to be removed and re-added before the permissions will become effective again. Has anyone else observed anything like this? Is there any way to force the Exchange 2010 server to re-evaluate the rules and delegates and 'reapply' them so they become effective without the user doing it? This is confusing for users because the rules and delegates still exist, but they do not know if they are ineffective until the rule fails to function or the delegated party calls to advise them they no longer have access. Brad
RE: Rules Delegates in Exchange 2003 to Exchange Migration 2010
They do all show up in OWA. I haven't used mfcmapi. We are migrating another back of users right now, I'll wait till I catch another one with a broken rule and have them leave it alone and buzz you offline with a sample when I have one. Brad From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Friday, February 12, 2010 1:46 PM To: MS-Exchange Admin Issues Subject: RE: Rules Delegates in Exchange 2003 to Exchange Migration 2010 Are all of the working rules visible in OWA? Or all of the broken rules? Ever used mfcmapi? You know rules are associated messages, right? The SACL on the subtree holding rules is the next thing I would look at. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Friday, February 12, 2010 4:40 PM To: MS-Exchange Admin Issues Subject: RE: Rules Delegates in Exchange 2003 to Exchange Migration 2010 We did have some issues with users not having the inheritance set which prevents them from using their SmartPhones, but all of the users having the Rules or Delegates issues have inheritance set. The rules and delegates still exist, they just don't function correctly. And even more oddly, for one of the users, out of a list of 5 rules, only 2 stopped working... Brad From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Friday, February 12, 2010 12:17 PM To: MS-Exchange Admin Issues Subject: RE: Rules Delegates in Exchange 2003 to Exchange Migration 2010 That...shouldn't happen. I might suggest you see if a given user and/or mailbox has been blocked from permission inheritance. That's the only item that pops to mind that would cause that without major mumbo jumbo. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Friday, February 12, 2010 12:39 PM To: MS-Exchange Admin Issues Subject: Rules Delegates in Exchange 2003 to Exchange Migration 2010 We have observed that as we migrate users from our Exchange 2003 server to our Exchange 2010 server that for some mailboxes, some rules are ineffective after the move until they are recreated. We have observed the same behavior with delegate permissions. Some delegates need to be removed and re-added before the permissions will become effective again. Has anyone else observed anything like this? Is there any way to force the Exchange 2010 server to re-evaluate the rules and delegates and 'reapply' them so they become effective without the user doing it? This is confusing for users because the rules and delegates still exist, but they do not know if they are ineffective until the rule fails to function or the delegated party calls to advise them they no longer have access. Brad
RE: Evil OAB message 0x8004010F
FYI, The original issue of not being able to DL the address book was related to the Internal/External URL configurations. In one case, one was not set. In two other cases I fat-fingered the period in the file name. If you CTRL-Right-Click on the Outlook icon in the system tray and do Test E-mail Autoconfiguration, put in an address on your target server, no credentials, and uncheck the second two checkboxes, you will see all the URLs being returned by the server. If any of them are wrong, Google and you'll find the MS article to fix them. After those were resolved, we found that the Exchange 2007 users couldn't see Exchange 2003 user Free/Busy information despite all the replica partners being set. After 6 more hours on the phone with PSS, they finally got someone on the phone who knew what they were doing. In 5 minutes he found that SSL was enabled on the 'public' IIS folder and Integrated Authentication was not enabled on Exchange 2003 which prevents the Exch2k7 server from authenticating and accessing the FB info from the 2k3 server. So there you go! Brad -Original Message- From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Wednesday, February 03, 2010 12:10 PM To: MS-Exchange Admin Issues Subject: RE: Evil OAB message 0x8004010F I also tried to work through this one with Brad, offline - but he has a much more complicated issue than Steve's. Unfortunately, I had to recommend that he call PSS. We were able to correct the PF replication issue and get the OAB to generate but due to security changes that have occurred in his environment, that wasn't enough. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Monday, February 01, 2010 8:25 PM To: MS-Exchange Admin Issues Subject: RE: Evil OAB message 0x8004010F Gentlemen, I’m back in the office and still faced with this same issue, however another symptom has revealed itself. Users on the new Exchange 2007 server cannot see Free/Busy information. I am guessing these problems are one in the same because I believe both the OAB and Free/Busy are probably relying on this replication that is not happening and which I cannot access. Any more advice or do I have to schedule a weekend to sit on the phone with PSS for this one? Thanks! Brad From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Friday, January 15, 2010 8:03 AM To: MS-Exchange Admin Issues Subject: RE: Evil OAB message 0x8004010F Richard, Thank you. I did check and the domain admin account I was using is in-fact already set as “Exchange Full Administrator”. Brad From: Richard Stovall [mailto:richard.stov...@researchdata.com] Sent: Thursday, January 14, 2010 12:22 PM To: MS-Exchange Admin Issues Subject: RE: Evil OAB message 0x8004010F Is this not accomplished with the Exchange Administration Delegation Wizard? (In 2003’s System Manager, right click the Org and choose “Delegate Control…”) The option there is listed as “Exchange Full Administrator” instead of “Exchange Organization Administrator” so I may be wrong about this being the place to give yourself appropriate rights. From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Thursday, January 14, 2010 2:37 PM To: MS-Exchange Admin Issues Subject: RE: Evil OAB message 0x8004010F Michael, Thanks. The install was done logged into the server as the domain administrator. I confirmed the domain administrator account is a member of the Exchange Organization Administrators groups. How might one go about gaining proper access rights for this action? Brad From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, January 14, 2010 11:25 AM To: MS-Exchange Admin Issues Subject: RE: Evil OAB message 0x8004010F This appears that you are signed in as a “Exchange View-Only Administrator” and you need to be signed in as a “Exchange Organization Administrator”. Preferably, the account that was used to install Exchange Server. From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Thursday, January 14, 2010 2:19 PM To: MS-Exchange Admin Issues Subject: RE: Evil OAB message 0x8004010F Thank you! Unfortunately when I attempt to add the 2007 server under the replication tab on any of the items in the System Public Folders, I get the following: I’m guessing permissions issue? I’ve tried this as a user with domain admin rights on a client, and also from the server itself, logged in as the domain administrator with the same result. Brad Microsoft Exchange Error The following error(s) occurred while saving changes: set-publicfolder Failed Error: Cannot save the object '\NON_IPM_SUBTREE\OFFLINE ADDRESS BOOK'. Please make sure that you specified the correct Identity and that you have the necessary permissions to save it. MapiExceptionNotFound: Unable
RE: Evil OAB message 0x8004010F
Michael, What specifically do you mean by add the server? If I open the ESM on the Exchange 2003 server, I do in-fact see the new administrative group and the new 2007 server under that group. Brad -Original Message- From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Tuesday, February 02, 2010 6:32 AM To: MS-Exchange Admin Issues Subject: RE: Evil OAB message 0x8004010F Have y’all tried adding the server using ESM on the Exchange 2003 server? From: chipsh...@comcast.net [mailto:chipsh...@comcast.net] Sent: Tuesday, February 02, 2010 8:50 AM To: MS-Exchange Admin Issues Subject: Re: Evil OAB message 0x8004010F I don't have a solution for you. I just stopped by to commiserate. I am going through the exact same thing with a 20032010 migration. Error messages are just about identical along with the attempted steps to resolve. It's as much fun as sticking pencils in my eye. PSS is in my very near future. Steve - Original Message - From: Brad Metzler bmetz...@cu-portland.edu To: MS-Exchange Admin Issues exchangelist@lyris.sunbelt-software.com Sent: Monday, February 1, 2010 8:25:14 PM GMT -05:00 US/Canada Eastern Subject: RE: Evil OAB message 0x8004010F Gentlemen, I’m back in the office and still faced with this same issue, however another symptom has revealed itself. Users on the new Exchange 2007 server cannot see Free/Busy information. I am guessing these problems are one in the same because I believe both the OAB and Free/Busy are probably relying on this replication that is not happening and which I cannot access. Any more advice or do I have to schedule a weekend to sit on the phone with PSS for this one? Thanks! Brad From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Friday, January 15, 2010 8:03 AM To: MS-Exchange Admin Issues Subject: RE: Evil OAB message 0x8004010F Richard, Thank you. I did check and the domain admin account I was using is in-fact already set as “Exchange Full Administrator”. Brad From: Richard Stovall [mailto:richard.stov...@researchdata.com] Sent: Thursday, January 14, 2010 12:22 PM To: MS-Exchange Admin Issues Subject: RE: Evil OAB message 0x8004010F Is this not accomplished with the Exchange Administration Delegation Wizard? (In 2003’s System Manager, right click the Org and choose “Delegate Control…”) The option there is listed as “Exchange Full Administrator” instead of “Exchange Organization Administrator” so I may be wrong about this being the place to give yourself appropriate rights. From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Thursday, January 14, 2010 2:37 PM To: MS-Exchange Admin Issues Subject: RE: Evil OAB message 0x8004010F Michael, Thanks. The install was done logged into the server as the domain administrator. I confirmed the domain administrator account is a member of the Exchange Organization Administrators groups. How might one go about gaining proper access rights for this action? Brad From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, January 14, 2010 11:25 AM To: MS-Exchange Admin Issues Subject: RE: Evil OAB message 0x8004010F This appears that you are signed in as a “Exchange View-Only Administrator” and you need to be signed in as a “Exchange Organization Administrator”. Preferably, the account that was used to install Exchange Server. From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Thursday, January 14, 2010 2:19 PM To: MS-Exchange Admin Issues Subject: RE: Evil OAB message 0x8004010F Thank you! Unfortunately when I attempt to add the 2007 server under the replication tab on any of the items in the System Public Folders, I get the following: I’m guessing permissions issue? I’ve tried this as a user with domain admin rights on a client, and also from the server itself, logged in as the domain administrator with the same result. Brad Microsoft Exchange Error The following error(s) occurred while saving changes: set-publicfolder Failed Error: Cannot save the object '\NON_IPM_SUBTREE\OFFLINE ADDRESS BOOK'. Please make sure that you specified the correct Identity and that you have the necessary permissions to save it. MapiExceptionNotFound: Unable to set properties on object. (hr=0x8004010f, ec=-2147221233) Diagnostic context: Lid: 18969 EcDoRpcExt2 called [length=185] Lid: 27161 EcDoRpcExt2 returned [ec=0x0][length=560][latency=0] Lid: 23226 --- ROP Parse Start --- Lid: 27962 ROP: ropSetProps [10] Lid: 17082 ROP Error: 0x8004010F Lid: 30561 Lid: 21921 StoreEc: 0x8004010F Lid: 27962 ROP: ropExtendedError [250] Lid: 1494 Remote Context Beg Lid: 1238 Remote Context Overflow Lid: 21970 StoreEc: 0x8004010F PropTag: 0x678A0102 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x3D210102 Lid: 21970 StoreEc
RE: Evil OAB message 0x8004010F
If you mean, ESM, Administrative Groups, '2003 Servers', Folders, Public Folders, Properties, 'Public Stores Associated to the folder tree:' - then the new server is already listed there. Also, under connectors under both the 2003 server group and the new Exchange Administrative group there is a connector from the 2003 bridgehead server to the new 2007 server in both places. Where else would I add this? Brad -Original Message- From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Tuesday, February 02, 2010 9:02 AM To: MS-Exchange Admin Issues Subject: RE: Evil OAB message 0x8004010F I was referring specifically to adding the exchange 2010 server to the replication list of the public folders, using esm on 2003 instead of powershell or emc on 2010. -Original Message- From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Tuesday, February 02, 2010 11:23 AM To: MS-Exchange Admin Issues Subject: RE: Evil OAB message 0x8004010F Michael, What specifically do you mean by add the server? If I open the ESM on the Exchange 2003 server, I do in-fact see the new administrative group and the new 2007 server under that group. Brad -Original Message- From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Tuesday, February 02, 2010 6:32 AM To: MS-Exchange Admin Issues Subject: RE: Evil OAB message 0x8004010F Have y’all tried adding the server using ESM on the Exchange 2003 server? From: chipsh...@comcast.net [mailto:chipsh...@comcast.net] Sent: Tuesday, February 02, 2010 8:50 AM To: MS-Exchange Admin Issues Subject: Re: Evil OAB message 0x8004010F I don't have a solution for you. I just stopped by to commiserate. I am going through the exact same thing with a 20032010 migration. Error messages are just about identical along with the attempted steps to resolve. It's as much fun as sticking pencils in my eye. PSS is in my very near future. Steve - Original Message - From: Brad Metzler bmetz...@cu-portland.edu To: MS-Exchange Admin Issues exchangelist@lyris.sunbelt-software.com Sent: Monday, February 1, 2010 8:25:14 PM GMT -05:00 US/Canada Eastern Subject: RE: Evil OAB message 0x8004010F Gentlemen, I’m back in the office and still faced with this same issue, however another symptom has revealed itself. Users on the new Exchange 2007 server cannot see Free/Busy information. I am guessing these problems are one in the same because I believe both the OAB and Free/Busy are probably relying on this replication that is not happening and which I cannot access. Any more advice or do I have to schedule a weekend to sit on the phone with PSS for this one? Thanks! Brad From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Friday, January 15, 2010 8:03 AM To: MS-Exchange Admin Issues Subject: RE: Evil OAB message 0x8004010F Richard, Thank you. I did check and the domain admin account I was using is in-fact already set as “Exchange Full Administrator”. Brad From: Richard Stovall [mailto:richard.stov...@researchdata.com] Sent: Thursday, January 14, 2010 12:22 PM To: MS-Exchange Admin Issues Subject: RE: Evil OAB message 0x8004010F Is this not accomplished with the Exchange Administration Delegation Wizard? (In 2003’s System Manager, right click the Org and choose “Delegate Control…”) The option there is listed as “Exchange Full Administrator” instead of “Exchange Organization Administrator” so I may be wrong about this being the place to give yourself appropriate rights. From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Thursday, January 14, 2010 2:37 PM To: MS-Exchange Admin Issues Subject: RE: Evil OAB message 0x8004010F Michael, Thanks. The install was done logged into the server as the domain administrator. I confirmed the domain administrator account is a member of the Exchange Organization Administrators groups. How might one go about gaining proper access rights for this action? Brad From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, January 14, 2010 11:25 AM To: MS-Exchange Admin Issues Subject: RE: Evil OAB message 0x8004010F This appears that you are signed in as a “Exchange View-Only Administrator” and you need to be signed in as a “Exchange Organization Administrator”. Preferably, the account that was used to install Exchange Server. From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Thursday, January 14, 2010 2:19 PM To: MS-Exchange Admin Issues Subject: RE: Evil OAB message 0x8004010F Thank you! Unfortunately when I attempt to add the 2007 server under the replication tab on any of the items in the System Public Folders, I get the following: I’m guessing permissions issue? I’ve tried this as a user with domain admin rights on a client, and also from the server itself, logged in as the domain administrator with the same result. Brad Microsoft Exchange Error
RE: Evil OAB message 0x8004010F
Gentlemen, I’m back in the office and still faced with this same issue, however another symptom has revealed itself. Users on the new Exchange 2007 server cannot see Free/Busy information. I am guessing these problems are one in the same because I believe both the OAB and Free/Busy are probably relying on this replication that is not happening and which I cannot access. Any more advice or do I have to schedule a weekend to sit on the phone with PSS for this one? Thanks! Brad From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Friday, January 15, 2010 8:03 AM To: MS-Exchange Admin Issues Subject: RE: Evil OAB message 0x8004010F Richard, Thank you. I did check and the domain admin account I was using is in-fact already set as “Exchange Full Administrator”. Brad From: Richard Stovall [mailto:richard.stov...@researchdata.com] Sent: Thursday, January 14, 2010 12:22 PM To: MS-Exchange Admin Issues Subject: RE: Evil OAB message 0x8004010F Is this not accomplished with the Exchange Administration Delegation Wizard? (In 2003’s System Manager, right click the Org and choose “Delegate Control…”) The option there is listed as “Exchange Full Administrator” instead of “Exchange Organization Administrator” so I may be wrong about this being the place to give yourself appropriate rights. From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Thursday, January 14, 2010 2:37 PM To: MS-Exchange Admin Issues Subject: RE: Evil OAB message 0x8004010F Michael, Thanks. The install was done logged into the server as the domain administrator. I confirmed the domain administrator account is a member of the Exchange Organization Administrators groups. How might one go about gaining proper access rights for this action? Brad From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, January 14, 2010 11:25 AM To: MS-Exchange Admin Issues Subject: RE: Evil OAB message 0x8004010F This appears that you are signed in as a “Exchange View-Only Administrator” and you need to be signed in as a “Exchange Organization Administrator”. Preferably, the account that was used to install Exchange Server. From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Thursday, January 14, 2010 2:19 PM To: MS-Exchange Admin Issues Subject: RE: Evil OAB message 0x8004010F Thank you! Unfortunately when I attempt to add the 2007 server under the replication tab on any of the items in the System Public Folders, I get the following: I’m guessing permissions issue? I’ve tried this as a user with domain admin rights on a client, and also from the server itself, logged in as the domain administrator with the same result. Brad Microsoft Exchange Error The following error(s) occurred while saving changes: set-publicfolder Failed Error: Cannot save the object '\NON_IPM_SUBTREE\OFFLINE ADDRESS BOOK'. Please make sure that you specified the correct Identity and that you have the necessary permissions to save it. MapiExceptionNotFound: Unable to set properties on object. (hr=0x8004010f, ec=-2147221233) Diagnostic context: Lid: 18969 EcDoRpcExt2 called [length=185] Lid: 27161 EcDoRpcExt2 returned [ec=0x0][length=560][latency=0] Lid: 23226 --- ROP Parse Start --- Lid: 27962 ROP: ropSetProps [10] Lid: 17082 ROP Error: 0x8004010F Lid: 30561 Lid: 21921 StoreEc: 0x8004010F Lid: 27962 ROP: ropExtendedError [250] Lid: 1494 Remote Context Beg Lid: 1238Remote Context Overflow Lid: 21970 StoreEc: 0x8004010F PropTag: 0x678A0102 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x3D210102 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x668F0040 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x67870102 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x678A0102 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x668F0040 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x3D210102 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x67870102 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x678A0102 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x67870102 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x678A0102 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x668F0040 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x66980102 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x678D0102 Lid: 3362StoreEc: 0x8004010F Lid: 9206StoreEc: 0x8004010F Lid: 4559StoreEc: 0x8004010F Lid: 1750 Remote Context End Lid: 26849 Lid: 21817 ROP Failure: 0x8004010F Lid: 25761 Lid: 1940StoreEc: 0x8004010F Lid: 25297 Lid: 21201 StoreEc: 0x8004010F OK From
RE: Evil OAB message 0x8004010F
Richard, Thank you. I did check and the domain admin account I was using is in-fact already set as “Exchange Full Administrator”. Brad From: Richard Stovall [mailto:richard.stov...@researchdata.com] Sent: Thursday, January 14, 2010 12:22 PM To: MS-Exchange Admin Issues Subject: RE: Evil OAB message 0x8004010F Is this not accomplished with the Exchange Administration Delegation Wizard? (In 2003’s System Manager, right click the Org and choose “Delegate Control…”) The option there is listed as “Exchange Full Administrator” instead of “Exchange Organization Administrator” so I may be wrong about this being the place to give yourself appropriate rights. From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Thursday, January 14, 2010 2:37 PM To: MS-Exchange Admin Issues Subject: RE: Evil OAB message 0x8004010F Michael, Thanks. The install was done logged into the server as the domain administrator. I confirmed the domain administrator account is a member of the Exchange Organization Administrators groups. How might one go about gaining proper access rights for this action? Brad From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, January 14, 2010 11:25 AM To: MS-Exchange Admin Issues Subject: RE: Evil OAB message 0x8004010F This appears that you are signed in as a “Exchange View-Only Administrator” and you need to be signed in as a “Exchange Organization Administrator”. Preferably, the account that was used to install Exchange Server. From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Thursday, January 14, 2010 2:19 PM To: MS-Exchange Admin Issues Subject: RE: Evil OAB message 0x8004010F Thank you! Unfortunately when I attempt to add the 2007 server under the replication tab on any of the items in the System Public Folders, I get the following: I’m guessing permissions issue? I’ve tried this as a user with domain admin rights on a client, and also from the server itself, logged in as the domain administrator with the same result. Brad Microsoft Exchange Error The following error(s) occurred while saving changes: set-publicfolder Failed Error: Cannot save the object '\NON_IPM_SUBTREE\OFFLINE ADDRESS BOOK'. Please make sure that you specified the correct Identity and that you have the necessary permissions to save it. MapiExceptionNotFound: Unable to set properties on object. (hr=0x8004010f, ec=-2147221233) Diagnostic context: Lid: 18969 EcDoRpcExt2 called [length=185] Lid: 27161 EcDoRpcExt2 returned [ec=0x0][length=560][latency=0] Lid: 23226 --- ROP Parse Start --- Lid: 27962 ROP: ropSetProps [10] Lid: 17082 ROP Error: 0x8004010F Lid: 30561 Lid: 21921 StoreEc: 0x8004010F Lid: 27962 ROP: ropExtendedError [250] Lid: 1494 Remote Context Beg Lid: 1238Remote Context Overflow Lid: 21970 StoreEc: 0x8004010F PropTag: 0x678A0102 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x3D210102 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x668F0040 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x67870102 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x678A0102 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x668F0040 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x3D210102 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x67870102 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x678A0102 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x67870102 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x678A0102 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x668F0040 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x66980102 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x678D0102 Lid: 3362StoreEc: 0x8004010F Lid: 9206StoreEc: 0x8004010F Lid: 4559StoreEc: 0x8004010F Lid: 1750 Remote Context End Lid: 26849 Lid: 21817 ROP Failure: 0x8004010F Lid: 25761 Lid: 1940StoreEc: 0x8004010F Lid: 25297 Lid: 21201 StoreEc: 0x8004010F OK From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, January 14, 2010 10:19 AM To: MS-Exchange Admin Issues Subject: RE: Evil OAB message 0x8004010F I’m guessing you want the gui version… In the exchange management console, open toolbox - public folder management console Expand system public folders. For all of the entries in the middle pane, and their children, click properties and add the Exchange 2007 server as a replication partner. From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Thursday, January 14, 2010 1:10 PM To: MS-Exchange Admin Issues Subject: RE: Evil OAB message 0x8004010F I have seen
Evil OAB message 0x8004010F
We have a 2 server Exchange 2003 environment where we have added an Exchange 2007 server which we are now attempting to migrate users to. However, all the users migrated to Exchange 2007 get an error when attempting to download the address book under Send/Receive: Task 'Microsoft Exchange' report error (0x8004010F) : 'The operation failed. An object cannot be found.' After going through many articles via Google, I'm not seeing a clear answer to this one. We moved our OAB generation from the 2003 server to the 2007 server and added publishing it to the web OAB directory as well (it was already set to publish to the public folders). The clients on the 2003 server can still download the OAB just fine, but even after 24 hours the error persists on the people who have been moved to the 2007 server. Anyone have a magic bullet or some good suggestions on things to check on this one? Thanks Brad
RE: Evil OAB message 0x8004010F
I have seen this mentioned repeatedly but never an explanation of how. How does one do that? Brad From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, January 14, 2010 10:08 AM To: MS-Exchange Admin Issues Subject: RE: Evil OAB message 0x8004010F Did you add the exchange 2007 server as a replica to the public folder versions of the OAB? I'm betting not... From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Thursday, January 14, 2010 1:04 PM To: MS-Exchange Admin Issues Subject: Evil OAB message 0x8004010F We have a 2 server Exchange 2003 environment where we have added an Exchange 2007 server which we are now attempting to migrate users to. However, all the users migrated to Exchange 2007 get an error when attempting to download the address book under Send/Receive: Task 'Microsoft Exchange' report error (0x8004010F) : 'The operation failed. An object cannot be found.' After going through many articles via Google, I'm not seeing a clear answer to this one. We moved our OAB generation from the 2003 server to the 2007 server and added publishing it to the web OAB directory as well (it was already set to publish to the public folders). The clients on the 2003 server can still download the OAB just fine, but even after 24 hours the error persists on the people who have been moved to the 2007 server. Anyone have a magic bullet or some good suggestions on things to check on this one? Thanks Brad
RE: Evil OAB message 0x8004010F
Thank you! Unfortunately when I attempt to add the 2007 server under the replication tab on any of the items in the System Public Folders, I get the following: I'm guessing permissions issue? I've tried this as a user with domain admin rights on a client, and also from the server itself, logged in as the domain administrator with the same result. Brad Microsoft Exchange Error The following error(s) occurred while saving changes: set-publicfolder Failed Error: Cannot save the object '\NON_IPM_SUBTREE\OFFLINE ADDRESS BOOK'. Please make sure that you specified the correct Identity and that you have the necessary permissions to save it. MapiExceptionNotFound: Unable to set properties on object. (hr=0x8004010f, ec=-2147221233) Diagnostic context: Lid: 18969 EcDoRpcExt2 called [length=185] Lid: 27161 EcDoRpcExt2 returned [ec=0x0][length=560][latency=0] Lid: 23226 --- ROP Parse Start --- Lid: 27962 ROP: ropSetProps [10] Lid: 17082 ROP Error: 0x8004010F Lid: 30561 Lid: 21921 StoreEc: 0x8004010F Lid: 27962 ROP: ropExtendedError [250] Lid: 1494 Remote Context Beg Lid: 1238Remote Context Overflow Lid: 21970 StoreEc: 0x8004010F PropTag: 0x678A0102 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x3D210102 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x668F0040 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x67870102 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x678A0102 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x668F0040 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x3D210102 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x67870102 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x678A0102 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x67870102 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x678A0102 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x668F0040 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x66980102 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x678D0102 Lid: 3362StoreEc: 0x8004010F Lid: 9206StoreEc: 0x8004010F Lid: 4559StoreEc: 0x8004010F Lid: 1750 Remote Context End Lid: 26849 Lid: 21817 ROP Failure: 0x8004010F Lid: 25761 Lid: 1940StoreEc: 0x8004010F Lid: 25297 Lid: 21201 StoreEc: 0x8004010F OK From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, January 14, 2010 10:19 AM To: MS-Exchange Admin Issues Subject: RE: Evil OAB message 0x8004010F I'm guessing you want the gui version... In the exchange management console, open toolbox - public folder management console Expand system public folders. For all of the entries in the middle pane, and their children, click properties and add the Exchange 2007 server as a replication partner. From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Thursday, January 14, 2010 1:10 PM To: MS-Exchange Admin Issues Subject: RE: Evil OAB message 0x8004010F I have seen this mentioned repeatedly but never an explanation of how. How does one do that? Brad From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, January 14, 2010 10:08 AM To: MS-Exchange Admin Issues Subject: RE: Evil OAB message 0x8004010F Did you add the exchange 2007 server as a replica to the public folder versions of the OAB? I'm betting not... From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Thursday, January 14, 2010 1:04 PM To: MS-Exchange Admin Issues Subject: Evil OAB message 0x8004010F We have a 2 server Exchange 2003 environment where we have added an Exchange 2007 server which we are now attempting to migrate users to. However, all the users migrated to Exchange 2007 get an error when attempting to download the address book under Send/Receive: Task 'Microsoft Exchange' report error (0x8004010F) : 'The operation failed. An object cannot be found.' After going through many articles via Google, I'm not seeing a clear answer to this one. We moved our OAB generation from the 2003 server to the 2007 server and added publishing it to the web OAB directory as well (it was already set to publish to the public folders). The clients on the 2003 server can still download the OAB just fine, but even after 24 hours the error persists on the people who have been moved to the 2007 server. Anyone have a magic bullet or some good suggestions on things to check on this one? Thanks Brad
RE: Evil OAB message 0x8004010F
Michael, Thanks. The install was done logged into the server as the domain administrator. I confirmed the domain administrator account is a member of the Exchange Organization Administrators groups. How might one go about gaining proper access rights for this action? Brad From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, January 14, 2010 11:25 AM To: MS-Exchange Admin Issues Subject: RE: Evil OAB message 0x8004010F This appears that you are signed in as a Exchange View-Only Administrator and you need to be signed in as a Exchange Organization Administrator. Preferably, the account that was used to install Exchange Server. From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Thursday, January 14, 2010 2:19 PM To: MS-Exchange Admin Issues Subject: RE: Evil OAB message 0x8004010F Thank you! Unfortunately when I attempt to add the 2007 server under the replication tab on any of the items in the System Public Folders, I get the following: I'm guessing permissions issue? I've tried this as a user with domain admin rights on a client, and also from the server itself, logged in as the domain administrator with the same result. Brad Microsoft Exchange Error The following error(s) occurred while saving changes: set-publicfolder Failed Error: Cannot save the object '\NON_IPM_SUBTREE\OFFLINE ADDRESS BOOK'. Please make sure that you specified the correct Identity and that you have the necessary permissions to save it. MapiExceptionNotFound: Unable to set properties on object. (hr=0x8004010f, ec=-2147221233) Diagnostic context: Lid: 18969 EcDoRpcExt2 called [length=185] Lid: 27161 EcDoRpcExt2 returned [ec=0x0][length=560][latency=0] Lid: 23226 --- ROP Parse Start --- Lid: 27962 ROP: ropSetProps [10] Lid: 17082 ROP Error: 0x8004010F Lid: 30561 Lid: 21921 StoreEc: 0x8004010F Lid: 27962 ROP: ropExtendedError [250] Lid: 1494 Remote Context Beg Lid: 1238Remote Context Overflow Lid: 21970 StoreEc: 0x8004010F PropTag: 0x678A0102 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x3D210102 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x668F0040 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x67870102 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x678A0102 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x668F0040 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x3D210102 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x67870102 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x678A0102 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x67870102 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x678A0102 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x668F0040 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x66980102 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x678D0102 Lid: 3362StoreEc: 0x8004010F Lid: 9206StoreEc: 0x8004010F Lid: 4559StoreEc: 0x8004010F Lid: 1750 Remote Context End Lid: 26849 Lid: 21817 ROP Failure: 0x8004010F Lid: 25761 Lid: 1940StoreEc: 0x8004010F Lid: 25297 Lid: 21201 StoreEc: 0x8004010F OK From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, January 14, 2010 10:19 AM To: MS-Exchange Admin Issues Subject: RE: Evil OAB message 0x8004010F I'm guessing you want the gui version... In the exchange management console, open toolbox - public folder management console Expand system public folders. For all of the entries in the middle pane, and their children, click properties and add the Exchange 2007 server as a replication partner. From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Thursday, January 14, 2010 1:10 PM To: MS-Exchange Admin Issues Subject: RE: Evil OAB message 0x8004010F I have seen this mentioned repeatedly but never an explanation of how. How does one do that? Brad From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, January 14, 2010 10:08 AM To: MS-Exchange Admin Issues Subject: RE: Evil OAB message 0x8004010F Did you add the exchange 2007 server as a replica to the public folder versions of the OAB? I'm betting not... From: Brad Metzler [mailto:bmetz...@cu-portland.edu] Sent: Thursday, January 14, 2010 1:04 PM To: MS-Exchange Admin Issues Subject: Evil OAB message 0x8004010F We have a 2 server Exchange 2003 environment where we have added an Exchange 2007 server which we are now attempting to migrate users to. However, all the users migrated to Exchange 2007 get an error when attempting to download the address book under Send/Receive: Task 'Microsoft Exchange' report error (0x8004010F) : 'The operation
Exchange 2007 New Mailbox Appearance in GAL
Today we added an Exchange 2007 server (on Win2k8) to our existing Exchange 2003 organization. The installation appears to have worked properly, all services are running, etc... I created a new user in ADUC and made a mailbox on the new E2k7 Server. I also create a user through the Exchange Management Console. Neither of these users appear in the GAL. Neither user can connect to their E2k7 mailbox. Both get the The name cannot be resolved. The name cannot be matched to a name in the address list. Message. I created a new user in ADUC and made a new mailbox on an E2k3 server and moved it to the E2k7 server*. This new user can send and receive mail both internally and externally and can log on to the mailbox successfully. Any ideas why the new mailboxes on the E2k7 server don't show up in the GAL and thusly can't log on? A few notes: On suggestion, I tried changing the OAB polling from 480min to 15min and restarted the Exchange DFS service , no luck. Also on suggestion, I open the Exchange System Manager and tried Update Now under the Recipient Update Service for both the Enterprise and the Domain. Still no luck. Incidentally, I can send SMTP E-mail from inside and outside to the two E2k7 mailboxes without a bounce, so I assume they are being delivered to the mailboxes, but of course I can't open them to check. So again, any ideas on why new users with mailboxes created on E2k7 server can't log on but a migrated mailbox seems to work just fine? Did I miss some kind of GAL/GC config step to get this new E2k7 server to play nice in the existing E2k3 org? Thanks Brad *I noticed that I can't move mailboxes from E2k3 to E2k7 using ADUC even with the E2k7 32bit management tools installed, it throws this error: The requesting program is an incompatible version. Contact your system administrator about upgrading your Microsoft Exchange client. This version of the client application is incompatible with the version of Microsoft Exchange Server running on the server computer. Microsoft Exchange Server Information Store ID no: 80040110-0510-80040110 Moving them through the Exchange Management Console works just fine though. I presume that's normal, no moving mailboxes to E2k7 in ADUC?
RE: Exchange Deployment Services
Don, We are using iSCSI storage. The utilization on our Employee/Instructor mail server is relatively low so I am not entirely concerned with the I/O being an issue even in the virtual environment with the iSCSI. The bigger issue is we already attempted an E2k7 install on W2k8 Server earlier this year and did the requisite schema changes, however we were never able to complete that installation successfully for reasons I do not recall. My only admin right now is backlogged with a handful of other projects for which he is better qualified than for Exchange, as am I which is why we are looking to have an experienced party come in and knock out the installation for us and ensure we don't missing anything in the setup, routing, permissions, etc... Thanks Brad From: Don Ely [mailto:don@gmail.com] Sent: Tuesday, November 10, 2009 1:02 PM To: MS-Exchange Admin Issues Subject: Re: Exchange Deployment Services 1000 users, single MB server with a CAS in front of it... Easy squeezy... What kind of storage are you hooking the ESX hosts to? What connection method are you using (iSCSI, NFS, or Fiber)? On Tue, Nov 10, 2009 at 12:57 PM, Brad Metzler bmetz...@cu-portland.edu wrote: Good question. The site is presently 2 Exchange servers, one for employees and instructors, one for students. The Employee/Instructor server is the priority with less than 1000 mailboxes, a mix of users and resource mailboxes for room scheduling. No public folders. The student server has about 5000 mailboxes and is scheduled to be decommissioned in the next 12-18 months to be replaced by an outside service so we have no intention of upgrading it but it would need to continue to exist in the site until is it decommissioned. And my apologies to the ladies on the list, I'm sure you have brilliant recommendations as well, so let's hear them! Brad From: Don Ely [mailto:don@gmail.com] Sent: Tuesday, November 10, 2009 12:50 PM To: MS-Exchange Admin Issues Subject: Re: Exchange Deployment Services How many users are we talking about? On Tue, Nov 10, 2009 at 12:43 PM, Brad Metzler bmetz...@cu-portland.edu wrote: Gentlemen, We are looking to upgrade from E2k3 to E2k7 or possibly even 2010 immediately. I am looking for recommendations on providers, partners, or individuals in the Portland Oregon area that really know their stuff and wouldn't come out here trying to figure it out on site but who could do a complete and competent deployment of at E2k7. Our current servers are physical but we intend to do the new deployments to a virtual environment (VMWare) so I'd prefer people who are familiar with deploying to a virtual environment. Also we are running Antigen on our E2k3 servers and Forefront is by far the cheapest on-board antivir we can get as an academic user for running on E2k7 or 2010, so another preference would be someone who has experience with Forefront as well. What say ye? Any hot talent or reliable companies anyone can speak to out here that know E2k7 with Forefront in a virtual environment? Microsoft's list of providers doesn't really help figure out who actually knows what they're doing. Thanks guys. Brad
RE: Exchange Deployment Services
Good question. The site is presently 2 Exchange servers, one for employees and instructors, one for students. The Employee/Instructor server is the priority with less than 1000 mailboxes, a mix of users and resource mailboxes for room scheduling. No public folders. The student server has about 5000 mailboxes and is scheduled to be decommissioned in the next 12-18 months to be replaced by an outside service so we have no intention of upgrading it but it would need to continue to exist in the site until is it decommissioned. And my apologies to the ladies on the list, I'm sure you have brilliant recommendations as well, so let's hear them! Brad From: Don Ely [mailto:don@gmail.com] Sent: Tuesday, November 10, 2009 12:50 PM To: MS-Exchange Admin Issues Subject: Re: Exchange Deployment Services How many users are we talking about? On Tue, Nov 10, 2009 at 12:43 PM, Brad Metzler bmetz...@cu-portland.edu wrote: Gentlemen, We are looking to upgrade from E2k3 to E2k7 or possibly even 2010 immediately. I am looking for recommendations on providers, partners, or individuals in the Portland Oregon area that really know their stuff and wouldn't come out here trying to figure it out on site but who could do a complete and competent deployment of at E2k7. Our current servers are physical but we intend to do the new deployments to a virtual environment (VMWare) so I'd prefer people who are familiar with deploying to a virtual environment. Also we are running Antigen on our E2k3 servers and Forefront is by far the cheapest on-board antivir we can get as an academic user for running on E2k7 or 2010, so another preference would be someone who has experience with Forefront as well. What say ye? Any hot talent or reliable companies anyone can speak to out here that know E2k7 with Forefront in a virtual environment? Microsoft's list of providers doesn't really help figure out who actually knows what they're doing. Thanks guys. Brad
Exchange Deployment Services
Gentlemen, We are looking to upgrade from E2k3 to E2k7 or possibly even 2010 immediately. I am looking for recommendations on providers, partners, or individuals in the Portland Oregon area that really know their stuff and wouldn't come out here trying to figure it out on site but who could do a complete and competent deployment of at E2k7. Our current servers are physical but we intend to do the new deployments to a virtual environment (VMWare) so I'd prefer people who are familiar with deploying to a virtual environment. Also we are running Antigen on our E2k3 servers and Forefront is by far the cheapest on-board antivir we can get as an academic user for running on E2k7 or 2010, so another preference would be someone who has experience with Forefront as well. What say ye? Any hot talent or reliable companies anyone can speak to out here that know E2k7 with Forefront in a virtual environment? Microsoft's list of providers doesn't really help figure out who actually knows what they're doing. Thanks guys. Brad
RE: Exchange Deployment Services
A Dell NX1950, which is just a Windows server acting as an iSCSI host for a few shelves of disks. It's cheap and works shockingly well. The VMFS volumes are run on RAID5 SAS 10k disk sets. Most of the rest of the storage are in much larger and cheaper (but slower) near-line SAS arrays. Brad From: Don Ely [mailto:don@gmail.com] Sent: Tuesday, November 10, 2009 1:16 PM To: MS-Exchange Admin Issues Subject: Re: Exchange Deployment Services H... What kind of disks are in the SAN? What kind of SAN is it? On Tue, Nov 10, 2009 at 1:10 PM, Brad Metzler bmetz...@cu-portland.edu wrote: Don, We are using iSCSI storage. The utilization on our Employee/Instructor mail server is relatively low so I am not entirely concerned with the I/O being an issue even in the virtual environment with the iSCSI. The bigger issue is we already attempted an E2k7 install on W2k8 Server earlier this year and did the requisite schema changes, however we were never able to complete that installation successfully for reasons I do not recall. My only admin right now is backlogged with a handful of other projects for which he is better qualified than for Exchange, as am I which is why we are looking to have an experienced party come in and knock out the installation for us and ensure we don't missing anything in the setup, routing, permissions, etc... Thanks Brad From: Don Ely [mailto:don@gmail.com] Sent: Tuesday, November 10, 2009 1:02 PM To: MS-Exchange Admin Issues Subject: Re: Exchange Deployment Services 1000 users, single MB server with a CAS in front of it... Easy squeezy... What kind of storage are you hooking the ESX hosts to? What connection method are you using (iSCSI, NFS, or Fiber)? On Tue, Nov 10, 2009 at 12:57 PM, Brad Metzler bmetz...@cu-portland.edu wrote: Good question. The site is presently 2 Exchange servers, one for employees and instructors, one for students. The Employee/Instructor server is the priority with less than 1000 mailboxes, a mix of users and resource mailboxes for room scheduling. No public folders. The student server has about 5000 mailboxes and is scheduled to be decommissioned in the next 12-18 months to be replaced by an outside service so we have no intention of upgrading it but it would need to continue to exist in the site until is it decommissioned. And my apologies to the ladies on the list, I'm sure you have brilliant recommendations as well, so let's hear them! Brad From: Don Ely [mailto:don@gmail.com] Sent: Tuesday, November 10, 2009 12:50 PM To: MS-Exchange Admin Issues Subject: Re: Exchange Deployment Services How many users are we talking about? On Tue, Nov 10, 2009 at 12:43 PM, Brad Metzler bmetz...@cu-portland.edu wrote: Gentlemen, We are looking to upgrade from E2k3 to E2k7 or possibly even 2010 immediately. I am looking for recommendations on providers, partners, or individuals in the Portland Oregon area that really know their stuff and wouldn't come out here trying to figure it out on site but who could do a complete and competent deployment of at E2k7. Our current servers are physical but we intend to do the new deployments to a virtual environment (VMWare) so I'd prefer people who are familiar with deploying to a virtual environment. Also we are running Antigen on our E2k3 servers and Forefront is by far the cheapest on-board antivir we can get as an academic user for running on E2k7 or 2010, so another preference would be someone who has experience with Forefront as well. What say ye? Any hot talent or reliable companies anyone can speak to out here that know E2k7 with Forefront in a virtual environment? Microsoft's list of providers doesn't really help figure out who actually knows what they're doing. Thanks guys. Brad
RE: Exchange Deployment Services
2GB limits on all the mailboxes right now. For the convenience of being able to take down individual stores without killing everyone the mailboxes are distributed across 9 stores on the server, presently about 180GB in total. Brad From: Don Ely [mailto:don@gmail.com] Sent: Tuesday, November 10, 2009 1:32 PM To: MS-Exchange Admin Issues Subject: Re: Exchange Deployment Services How big are your databases now? Any retention policies? Any size limits? On Tue, Nov 10, 2009 at 1:21 PM, Brad Metzler bmetz...@cu-portland.edu wrote: A Dell NX1950, which is just a Windows server acting as an iSCSI host for a few shelves of disks. It's cheap and works shockingly well. The VMFS volumes are run on RAID5 SAS 10k disk sets. Most of the rest of the storage are in much larger and cheaper (but slower) near-line SAS arrays. Brad From: Don Ely [mailto:don@gmail.com] Sent: Tuesday, November 10, 2009 1:16 PM To: MS-Exchange Admin Issues Subject: Re: Exchange Deployment Services H... What kind of disks are in the SAN? What kind of SAN is it? On Tue, Nov 10, 2009 at 1:10 PM, Brad Metzler bmetz...@cu-portland.edu wrote: Don, We are using iSCSI storage. The utilization on our Employee/Instructor mail server is relatively low so I am not entirely concerned with the I/O being an issue even in the virtual environment with the iSCSI. The bigger issue is we already attempted an E2k7 install on W2k8 Server earlier this year and did the requisite schema changes, however we were never able to complete that installation successfully for reasons I do not recall. My only admin right now is backlogged with a handful of other projects for which he is better qualified than for Exchange, as am I which is why we are looking to have an experienced party come in and knock out the installation for us and ensure we don't missing anything in the setup, routing, permissions, etc... Thanks Brad From: Don Ely [mailto:don@gmail.com] Sent: Tuesday, November 10, 2009 1:02 PM To: MS-Exchange Admin Issues Subject: Re: Exchange Deployment Services 1000 users, single MB server with a CAS in front of it... Easy squeezy... What kind of storage are you hooking the ESX hosts to? What connection method are you using (iSCSI, NFS, or Fiber)? On Tue, Nov 10, 2009 at 12:57 PM, Brad Metzler bmetz...@cu-portland.edu wrote: Good question. The site is presently 2 Exchange servers, one for employees and instructors, one for students. The Employee/Instructor server is the priority with less than 1000 mailboxes, a mix of users and resource mailboxes for room scheduling. No public folders. The student server has about 5000 mailboxes and is scheduled to be decommissioned in the next 12-18 months to be replaced by an outside service so we have no intention of upgrading it but it would need to continue to exist in the site until is it decommissioned. And my apologies to the ladies on the list, I'm sure you have brilliant recommendations as well, so let's hear them! Brad From: Don Ely [mailto:don@gmail.com] Sent: Tuesday, November 10, 2009 12:50 PM To: MS-Exchange Admin Issues Subject: Re: Exchange Deployment Services How many users are we talking about? On Tue, Nov 10, 2009 at 12:43 PM, Brad Metzler bmetz...@cu-portland.edu wrote: Gentlemen, We are looking to upgrade from E2k3 to E2k7 or possibly even 2010 immediately. I am looking for recommendations on providers, partners, or individuals in the Portland Oregon area that really know their stuff and wouldn't come out here trying to figure it out on site but who could do a complete and competent deployment of at E2k7. Our current servers are physical but we intend to do the new deployments to a virtual environment (VMWare) so I'd prefer people who are familiar with deploying to a virtual environment. Also we are running Antigen on our E2k3 servers and Forefront is by far the cheapest on-board antivir we can get as an academic user for running on E2k7 or 2010, so another preference would be someone who has experience with Forefront as well. What say ye? Any hot talent or reliable companies anyone can speak to out here that know E2k7 with Forefront in a virtual environment? Microsoft's list of providers doesn't really help figure out who actually knows what they're doing. Thanks guys. Brad
The magic of Address Lists in E2k
Can anyone explain to me how to manage address lists in E2k? The default global address list had read permissions for everyone, yet everyone saw a blank address book when looking at the global address list. Question #1) How come with an everyone read permission set on the default global address list, the global address list is empty on the clients? So, under All Global Address Lists in the system manager, I created a list which queries for all users and groups on server 1, and I gave it an everyone permission of read. After doing that, all users on Server 1 and Server 2 saw only the addresses for people on Server 1 under the global address list. This seemed logical, until... I went back and created another list under global address lists which queries for all users and groups on server 2 and again gave it an everyone permission of read. After doing that, everyone on Server 1 still saw only recipients on server 1 and everyone on server 2 only saw recipient on server 2. Question #2) Why this behavior? Why does one list appear to preempt the other list? The permissions are the same on both lists, shouldn't users on both servers see the recipients of both lists? Thanks for any insight on this. Brad List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
Installing Second Service
In attempting to install a second exchange server into our site, I keep getting the following message: The component Microsoft Exchange Messaging and Collaboration Services cannot be assigned the action Install because: - Active Directory has not replicated all the necessary permissions for the deleted items container. Please wait until replication completes before running setup. I have gone into sites and services and forced replication on all DC's and waited about 2 hours now and continue to get that message. I get the feeling something is screwed up. Anyone have any ideas? Brad List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Permissions In E2k
William, I have found there are quite a few inherited permissions, but I still can't figure out where they come from. Here is what is on the mailbox now: Domain\administrator - read (inherited) domain\domain admins - delete,read,change,take ownership,full (all inherited) domain\enterprise admins- delete,read,change,take ownership,full (all inherited) Everyone - read (inherited) Exchange Domain Servers - delete,read,change,take ownership,full (all inherited) Exchange Service Account - delete,read,change,take ownership,full (all inherited) Exchange Services - delete,read,change,take ownership,full (all inherited) Self - Delete, full, Associated external account (not inherited) The test user I am trying to give access to is not a member of any of the above groups except of course everyone, but he can get access if I add him to the list with full permissions. When I put the test group in and give it full permissions (and of course he is a member of that test group) it doesn't work, even after waiting and forcing an AD replication to be sure his group membership is being evaluated. 1) Do you see anything in this ACL that would be affecting this? 2) Where the hell are all the inherited permissions coming from, I can't find a higher level in the hierarchy to modify them (in the AD or the server manager)? 3) That Everyone - read permission makes me nervous, but it was there by default on all mailboxes, and again I don't know where it is being inherited from to remove it. I have checked around on a few regular user accounts and noone can access each others mailbox so it would seem it doesn't work anyway, but it still makes me nervous. Thanks for your help. Brad -Original Message- From: William Lefkovics [mailto:[EMAIL PROTECTED]] Sent: Monday, July 15, 2002 2:27 PM To: MS-Exchange Admin Issues Subject: RE: Permissions In E2k It should work for groups, too: http://support.microsoft.com/search/preview.aspx?scid=kb;en-us;Q268754 Are they inheriting any other perms preventing it? -Original Message- From: Brad Metzler [mailto:[EMAIL PROTECTED]] Sent: Monday, July 15, 2002 2:01 PM To: MS-Exchange Admin Issues Subject: Permissions In E2k I'm still trying to figure out exactly how permissions work in E2k, but one behavior I have discovered is a pain the ass and I'm hoping someone can confirm this is what is supposed to be happening. If I open a user in the Active Directory users and computer and in mailbox permissions give access to a particular active directory user (full mailbox access), then that user can open the mailbox. duh. If however I create a group (I've tried domain local and global) and give that group full mailbox access and add a user to that group, that user is unable to open the mailbox. Am I to assume that you can only give mailbox rights to individual users and not to groups? Am I'm setting the permissions in the wrong place? Brad List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
Permissions In E2k
I'm still trying to figure out exactly how permissions work in E2k, but one behavior I have discovered is a pain the ass and I'm hoping someone can confirm this is what is supposed to be happening. If I open a user in the Active Directory users and computer and in mailbox permissions give access to a particular active directory user (full mailbox access), then that user can open the mailbox. duh. If however I create a group (I've tried domain local and global) and give that group full mailbox access and add a user to that group, that user is unable to open the mailbox. Am I to assume that you can only give mailbox rights to individual users and not to groups? Am I'm setting the permissions in the wrong place? Brad List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
SMTP configuration error?
E2K SP2 Just finished move from 5.5 to E2K. 5.5 server is still in site, but SMTP has been redirected at the gateway mail sweeper to the E2K server. Scenario: When a message is sent internally to the SMTP address [EMAIL PROTECTED] is returned with 'A configuration error in the recipient's e-mail system prevented delivery of this message. Two recipients are configured with the same e-mail address. Contact your administrator.' When a message is sent to the display name Postmaster, the message is delivered to the postmaster mailbox correctly. When a message is sent to [EMAIL PROTECTED] from externally, it arrives in the Administrator mailbox (which has only two SMTP addresses configured for it, [EMAIL PROTECTED] (primary) and [EMAIL PROTECTED]). Given the evidence, one would think the second instance of the postmaster@ address that the NDR is complaining about would be somewhere in the configuration for the administrator mailbox perhaps. However, I have been unable to locate anywhere in the administrator's configuration any instance of the postmaster@ address. Any ideas or KB articles I missed? Thanks Brad List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
Installtion issue was: ADC/Extending Schema Problem
Ryan Kiste of Pacific Info Systems in Portland, Oregon. I revealed the answer to him on the phone while our account manager was also on the line. I suspect he will be laughed at for quite some time by everyone in the office. In the mean time, I have another problem. After continuing with the installation, we installed E2k SP2 and a few of the hot fixes including the information store hot fix and suddenly we were faced by any number of errors when trying to mount the store. we tried rolling back to SP2 and still couldn't mount the store. The answer from his 'guru' on the phone was to go ahead and rebuild the e2k server and start over before moving mailboxes. Problem is, after the rebuild it won't let me do a reinstall because the server object is already there somewhere. Our consultant hasn't shown up yet this morning (not really sure which one they will send today), but I suspect he won't know the answer. The installation suggests running in disaster recovery mode. Is this the best thing to do, or is there a place I can clean out the old server name entry and do a clean install? Thanks again guys Brad -Original Message- From: William Lefkovics [mailto:[EMAIL PROTECTED]] Sent: Tuesday, June 18, 2002 1:33 AM To: MS-Exchange Admin Issues Subject: RE: ADC/Extending Schema Problem NAMES! I WANT NAMES! -Original Message- From: Brad Metzler [mailto:[EMAIL PROTECTED]] Sent: Monday, June 17, 2002 2:02 PM To: MS-Exchange Admin Issues Subject: RE: ADC/Extending Schema Problem Really? Interesting... our Exchange 2000 migration expert who was here at $100+ per hour was very convinced that those exchange tasks and tabs should be showing up on our DC's after the ADC installation on a stand-alone server. He actually left about an hour ago planning on sending out an MCSE tommorrow believing that our Schema was the problem. He said even without any action regarding Exchange 2k, we should have exchange tasks in the AD users and computers manager to manage the exchange 5.5 mailboxes for our users. Brad -Original Message- From: Keith Nelson [mailto:[EMAIL PROTECTED]] Sent: Monday, June 17, 2002 2:01 PM To: MS-Exchange Admin Issues Subject: RE: ADC/Extending Schema Problem Brad those tabs only show up on the computers that have ADC installed or Exchange Admin tools. Keith Nelson Network Administrator Orange County High School of the Arts -Original Message- From: Brad Metzler [mailto:[EMAIL PROTECTED]] Sent: Monday, June 17, 2002 1:56 PM To: MS-Exchange Admin Issues Subject: RE: ADC/Extending Schema Problem We did run the forestprep and domainprep as the exchange service account. There weren't any errors, but afterward there are still no exchange tabs or tasks in the active directory users and computer. I'm assuming the edits didn't take place because I am not seeing those items. Brad -Original Message- From: Cook, Jason [mailto:[EMAIL PROTECTED]] Sent: Monday, June 17, 2002 1:47 PM To: MS-Exchange Admin Issues Subject: RE: ADC/Extending Schema Problem Hmmm...Does the Domain Admin account have Exchange service account permissions? To run /forestprep and /domainprep it is recommended you use the Exchange service account. When you got the ADC up, could you create a connection agreement? Further, how do you know the schema edits didn't take place? Did you use the support tool for that? Jason Cook J.H. Ellwood and Associates Network Administrator [EMAIL PROTECTED] -Original Message- From: Brad Metzler [mailto:[EMAIL PROTECTED]] Sent: Monday, June 17, 2002 3:33 PM To: MS-Exchange Admin Issues Subject: ADC/Extending Schema Problem We are trying to migrate from Exchange 5.5 to 2k and were able to install the ADC and it replicated user information over to the AD, but it appears to have not extended the schema. We tried re-installing and yet again, it didn't extend the schema. We tried running the ADC setup with the /schemaonly flag on two different DC's (one the schema master, one not) and still it didn't extend the schema. In despiration, we tried running forestprep and domainprep on the new server that will be our new exchange 2k server to see if that would finally extend the schema, no joy. Anyone have any viagra for AD schema, cause ours just doesn't seem to want to extend :) I am looking for any advice on what I might be missing here, and perhaps a tool for testing whether it is just exchange or whether the schema is screwed up somehow. We tried all of this logged in as domain admin, BTW. Thanks in advance. Brad List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
No mail from E2k to 5.5 server
As the saga continues... We now have our E2K server up and running and we are getting ready to move mailboxes from the 5.5 server. Internet E-mail can get in and out fine from the 2K server and messages from the 5.5 server to the 2K server (to mailboxes we already moved as a test) work just fine. However, those who we already moved to the 2K server can no longer send mail to users who are still on the 5.5 server. The message bounces with an NDR The e-mail address could not be found. Perhaps the recipient moved to a different E-mail organization or there was a mistake in the address. Check the address and try again. The MTS-ID of the original message... Blah Blah Blah... this NDR is coming from the 2K server, not the 5.5 server. I get the impression the MTA isn't aware of the 5.5 server still being there. We already tried the legacyExchangeDN thing from the KB... Any ideas? Brad List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: No mail from E2k to 5.5 server
It appears most everyone is there. A few entries are missing, but not for the mailboxes we have been testing with. If we put in an alias it will even resolve it to the full display name for the NDR, but it's still bouncing. Brad -Original Message- From: Garland Mac Neill [mailto:[EMAIL PROTECTED]] Sent: Tuesday, June 18, 2002 1:37 PM To: MS-Exchange Admin Issues Subject: RE: No mail from E2k to 5.5 server Check your global address list and make sure it has populated correctly. This is where we had our issue. -Original Message- From: Brad Metzler [mailto:[EMAIL PROTECTED]] Sent: Tuesday, June 18, 2002 2:26 PM To: MS-Exchange Admin Issues Subject: No mail from E2k to 5.5 server As the saga continues... We now have our E2K server up and running and we are getting ready to move mailboxes from the 5.5 server. Internet E-mail can get in and out fine from the 2K server and messages from the 5.5 server to the 2K server (to mailboxes we already moved as a test) work just fine. However, those who we already moved to the 2K server can no longer send mail to users who are still on the 5.5 server. The message bounces with an NDR The e-mail address could not be found. Perhaps the recipient moved to a different E-mail organization or there was a mistake in the address. Check the address and try again. The MTS-ID of the original message... Blah Blah Blah... this NDR is coming from the 2K server, not the 5.5 server. I get the impression the MTA isn't aware of the 5.5 server still being there. We already tried the legacyExchangeDN thing from the KB... Any ideas? Brad List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
Inherited Mailbox Permission in E2K
After moving some mailboxes, we discovered that the permissions for every mailbox has the domain admins group with a deny set on it, but this is being inherited from somewhere. What is the parent object here? If you go up a level or two in Active directory users and computers there is no place to modify the permissions going down to that mailbox. So I looked in the system manager and tried the delegate control option at the org and site levels, but that isn't where it is coming from either. So where exactly is the parent from which mailboxes are inheriting their permissions? Thanks Brad List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Web redirects - virus/CSS/Email based?
Dennis, This is happening to clean system with no messaging agents or anything on them. No new installs, no modifications, secured access computers. There is nothing to indicate that the problem is being started by an adware or spyware agent. The problem is that it is trying to install one obviously, we are trying to find out where this chain is starting. Somehow that first site is getting called that starts the redirect and the install attempts, but where is the first call coming from? We are trying to determine if it is embedded in a popular web site like msn or yahoo or something or if it is embedded in an E-mail. If we're the only ones having this problem then I'll know to start looking for the source internally, but right now I have really no leads on the source. Brad -Original Message- From: Dennis Atherton [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 23, 2002 12:06 PM To: MS-Exchange Admin Issues Subject: RE: Web redirects - virus/CSS/Email based? Go to www.lavasoftusa.com, and download the latest version of Ad-Aware. It will scan your systems and kill the sh*t. -Original Message- From: Brad Metzler [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 23, 2002 12:01 PM To: MS-Exchange Admin Issues Subject: Web redirects - virus/CSS/Email based? Is anyone else having this problem? We are suddenly having dozens of reports from users who find that anywhere they web-browse to is being redirected to a domain for sale page with pop-ups and other windows for places like reunion.com and in some cases it attempted to start an install of Gator. Once you pick it up, it appears you have to reboot to be able to browse normally again. It doesn't affect all sites you browse to afterward however(?). Smells like a virus, but feels like a javascript dropper from a CSS attack or something. We have been unable to isolate which site is dropping the file or if maybe it is embedded in an email. All three levels of our virus scanning on E-mail and on the network have detected nothing. The source address of the redirect file is 161.58.178.209 and if you visit that address you will see the domain for sale page and the popups, and in my case it again tried to install gator, so USE CAUTION. I'm posting this here hoping someone else may recognize the symptoms and also curious is there is an E-mail going around that might be carrying the starting point for this. Thanks Brad Metzler Director of ITS Infrastructure Concordia University - Portland List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Web redirects - virus/CSS/Email based?
Done, on two victim machines so far, returned nothing. -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 23, 2002 12:13 PM To: MS-Exchange Admin Issues Subject: RE: Web redirects - virus/CSS/Email based? Do it anyways -Original Message- From: Brad Metzler [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 23, 2002 12:13 PM To: MS-Exchange Admin Issues Subject: RE: Web redirects - virus/CSS/Email based? Dennis, This is happening to clean system with no messaging agents or anything on them. No new installs, no modifications, secured access computers. There is nothing to indicate that the problem is being started by an adware or spyware agent. The problem is that it is trying to install one obviously, we are trying to find out where this chain is starting. Somehow that first site is getting called that starts the redirect and the install attempts, but where is the first call coming from? We are trying to determine if it is embedded in a popular web site like msn or yahoo or something or if it is embedded in an E-mail. If we're the only ones having this problem then I'll know to start looking for the source internally, but right now I have really no leads on the source. Brad -Original Message- From: Dennis Atherton [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 23, 2002 12:06 PM To: MS-Exchange Admin Issues Subject: RE: Web redirects - virus/CSS/Email based? Go to www.lavasoftusa.com, and download the latest version of Ad-Aware. It will scan your systems and kill the sh*t. -Original Message- From: Brad Metzler [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 23, 2002 12:01 PM To: MS-Exchange Admin Issues Subject: Web redirects - virus/CSS/Email based? Is anyone else having this problem? We are suddenly having dozens of reports from users who find that anywhere they web-browse to is being redirected to a domain for sale page with pop-ups and other windows for places like reunion.com and in some cases it attempted to start an install of Gator. Once you pick it up, it appears you have to reboot to be able to browse normally again. It doesn't affect all sites you browse to afterward however(?). Smells like a virus, but feels like a javascript dropper from a CSS attack or something. We have been unable to isolate which site is dropping the file or if maybe it is embedded in an email. All three levels of our virus scanning on E-mail and on the network have detected nothing. The source address of the redirect file is 161.58.178.209 and if you visit that address you will see the domain for sale page and the popups, and in my case it again tried to install gator, so USE CAUTION. I'm posting this here hoping someone else may recognize the symptoms and also curious is there is an E-mail going around that might be carrying the starting point for this. Thanks Brad Metzler Director of ITS Infrastructure Concordia University - Portland List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Web redirects - virus/CSS/Email based?
Sophos, pulled every hour, all clients updated every hour, mail gateways every 5 minutes, NAI groupshield onboard exchange servers updated once a week (yeah, groupsuck, but it's a different vendor just as a double check). We've run active scans on all web servers and all victim clients with sophos, nothing. The issue has been reported to Sophos tech support, we're waiting on a reply presently. It is hitting a new person on our campus at the rate of about 1 every 15-20 minutes. We are seeing it on everything from secured admin workstations to 'very' unsecured student computers. No common denominator yet for a possible delivery application, except they are all Win2k running IE6 or IE5.5SP2 so far. Several of the clients don't even have outlook, but could be accessing through OWA, so mail-based starting point isn't out of the picture yet. We are getting nervous that noone else outside our campus seems to be reporting this yet. Brad -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 23, 2002 12:33 PM To: MS-Exchange Admin Issues Subject: RE: Web redirects - virus/CSS/Email based? Do you have the latest and greats dat files for it? Also, try the free AV scanner from Trend -Original Message- From: Brad Metzler [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 23, 2002 12:31 PM To: MS-Exchange Admin Issues Subject: RE: Web redirects - virus/CSS/Email based? Done, on two victim machines so far, returned nothing. -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 23, 2002 12:13 PM To: MS-Exchange Admin Issues Subject: RE: Web redirects - virus/CSS/Email based? Do it anyways -Original Message- From: Brad Metzler [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 23, 2002 12:13 PM To: MS-Exchange Admin Issues Subject: RE: Web redirects - virus/CSS/Email based? Dennis, This is happening to clean system with no messaging agents or anything on them. No new installs, no modifications, secured access computers. There is nothing to indicate that the problem is being started by an adware or spyware agent. The problem is that it is trying to install one obviously, we are trying to find out where this chain is starting. Somehow that first site is getting called that starts the redirect and the install attempts, but where is the first call coming from? We are trying to determine if it is embedded in a popular web site like msn or yahoo or something or if it is embedded in an E-mail. If we're the only ones having this problem then I'll know to start looking for the source internally, but right now I have really no leads on the source. Brad -Original Message- From: Dennis Atherton [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 23, 2002 12:06 PM To: MS-Exchange Admin Issues Subject: RE: Web redirects - virus/CSS/Email based? Go to www.lavasoftusa.com, and download the latest version of Ad-Aware. It will scan your systems and kill the sh*t. -Original Message- From: Brad Metzler [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 23, 2002 12:01 PM To: MS-Exchange Admin Issues Subject: Web redirects - virus/CSS/Email based? Is anyone else having this problem? We are suddenly having dozens of reports from users who find that anywhere they web-browse to is being redirected to a domain for sale page with pop-ups and other windows for places like reunion.com and in some cases it attempted to start an install of Gator. Once you pick it up, it appears you have to reboot to be able to browse normally again. It doesn't affect all sites you browse to afterward however(?). Smells like a virus, but feels like a javascript dropper from a CSS attack or something. We have been unable to isolate which site is dropping the file or if maybe it is embedded in an email. All three levels of our virus scanning on E-mail and on the network have detected nothing. The source address of the redirect file is 161.58.178.209 and if you visit that address you will see the domain for sale page and the popups, and in my case it again tried to install gator, so USE CAUTION. I'm posting this here hoping someone else may recognize the symptoms and also curious is there is an E-mail going around that might be carrying the starting point for this. Thanks Brad Metzler Director of ITS Infrastructure Concordia University - Portland List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com
RE: Web redirects - virus/CSS/Email based?
John, Thanks. I had the same experience on my workstation. I can go there, get the page, get the install dialog and then still be fine. However, I think that site is the second step in the 'infection'. Whatever it is that our users are picking up is what is sending them to that site. What we can't figure out is what program or Email or file or website is starting the 'infection' and causing clients to get redirected to that target. We are getting reports now of people who have rebooted and been able to get to the sites they were not able to before now getting it on other sites, so a reboot is apparently just a temporary fix. Brad -Original Message- From: Majetic, John RAME [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 23, 2002 1:06 PM To: MS-Exchange Admin Issues Subject: RE: Web redirects - virus/CSS/Email based? Well I fired up an old usless laptop and went to the site to specified, and got the Domain sale site, and it tryed to install Gator, but I was able to browse normally after that. I would just close IE, and repopen it, and I could browse just like normal. No redirects, no more domain for sale thing, nothing. I think there is more to this than the web page. John Majetic -Original Message- From: Brad Metzler [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 23, 2002 4:03 PM To: MS-Exchange Admin Issues Subject: RE: Web redirects - virus/CSS/Email based? Sophos, pulled every hour, all clients updated every hour, mail gateways every 5 minutes, NAI groupshield onboard exchange servers updated once a week (yeah, groupsuck, but it's a different vendor just as a double check). We've run active scans on all web servers and all victim clients with sophos, nothing. The issue has been reported to Sophos tech support, we're waiting on a reply presently. It is hitting a new person on our campus at the rate of about 1 every 15-20 minutes. We are seeing it on everything from secured admin workstations to 'very' unsecured student computers. No common denominator yet for a possible delivery application, except they are all Win2k running IE6 or IE5.5SP2 so far. Several of the clients don't even have outlook, but could be accessing through OWA, so mail-based starting point isn't out of the picture yet. We are getting nervous that noone else outside our campus seems to be reporting this yet. Brad -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 23, 2002 12:33 PM To: MS-Exchange Admin Issues Subject: RE: Web redirects - virus/CSS/Email based? Do you have the latest and greats dat files for it? Also, try the free AV scanner from Trend -Original Message- From: Brad Metzler [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 23, 2002 12:31 PM To: MS-Exchange Admin Issues Subject: RE: Web redirects - virus/CSS/Email based? Done, on two victim machines so far, returned nothing. -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 23, 2002 12:13 PM To: MS-Exchange Admin Issues Subject: RE: Web redirects - virus/CSS/Email based? Do it anyways -Original Message- From: Brad Metzler [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 23, 2002 12:13 PM To: MS-Exchange Admin Issues Subject: RE: Web redirects - virus/CSS/Email based? Dennis, This is happening to clean system with no messaging agents or anything on them. No new installs, no modifications, secured access computers. There is nothing to indicate that the problem is being started by an adware or spyware agent. The problem is that it is trying to install one obviously, we are trying to find out where this chain is starting. Somehow that first site is getting called that starts the redirect and the install attempts, but where is the first call coming from? We are trying to determine if it is embedded in a popular web site like msn or yahoo or something or if it is embedded in an E-mail. If we're the only ones having this problem then I'll know to start looking for the source internally, but right now I have really no leads on the source. Brad -Original Message- From: Dennis Atherton [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 23, 2002 12:06 PM To: MS-Exchange Admin Issues Subject: RE: Web redirects - virus/CSS/Email based? Go to www.lavasoftusa.com, and download the latest version of Ad-Aware. It will scan your systems and kill the sh*t. -Original Message- From: Brad Metzler [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 23, 2002 12:01 PM To: MS-Exchange Admin Issues Subject: Web redirects - virus/CSS/Email based? Is anyone else having this problem? We are suddenly having dozens of reports from users who find that anywhere they web-browse to is being redirected to a domain for sale page with pop-ups and other windows for places like reunion.com and in some cases it attempted to start an install of Gator. Once you pick it up, it appears you have to reboot to be able
Language Support - Japanese
We have several Japanese users now that are using OWA to access their mailboxes. Some are complaining that when they receive messages in Japanese they see only question marks for most if not all characters in the messages. Japanese language support is loaded the workstation with the browser they are using to access OWA but I am guessing there is something on the OWA/IIS/Exchange side that has to be changed for them to be able to view these messages. Any hints? Brad List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
Hacking tool to .pst files
One of our ever wise staff members managed to lock herself out of her personal folders by setting a password on it which she can not recall. This file of course contains 'mission critical' information for her (blah blah blah). Anyone have a name or URL for a good pst password hacking tool? Thanks Brad List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: *** Warning *** New Virus - W32.goner.a@mm
Eric, We use groupsuck here still, (primarily because we can't get rid of it clean) but it has worked flawlessly (yeah I know, a miracle). I have had a few other people try to sell me other on-board scanners for exchange, but the two I had seen demo'd both broke SIS by opening and copying messages in the MTA for the scanning process. This also triggers delivery notification. Is there another on-board product out there that does suck, doesn't break SIS and doesn't open messages and trigger delivery notification as part of the scanning process? Brad -Original Message- From: Eric Brouwer [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 04, 2001 11:35 AM To: MS-Exchange Admin Issues Subject: RE: *** Warning *** New Virus - W32.goner.a@mm I have nothing good to say about Groupsuck. How they can sell that product is beyond me. I am also getting away from it ASAP. Just to warn you, the uninstall is not clean. List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
