Re: Blackberry Outage.. here we go again...

2011-11-07 Thread Jeff Brown
I have users in Arizona telling me no email on BB since before 6 a.m.  No
reports from Oklahoma users so far.

On Mon, Nov 7, 2011 at 10:17 AM, Steve Ens stevey...@gmail.com wrote:

 So far, so good in Winnipeg.  Perhaps the snow has something to do with
 it.  Finally got some white stuff last night.

 On Mon, Nov 7, 2011 at 10:04 AM, Damien Solodow 
 damien.solo...@harrison.edu wrote:

 *knock on wood* So far I'm working ok.

 DAMIEN SOLODOW
 Systems Engineer
 317.447.6033 (office)
 317.447.6014 (fax)
 HARRISON COLLEGE

 -Original Message-
 From: Jason Gurtz [mailto:jasongu...@npumail.com]
 Sent: Monday, November 07, 2011 10:56 AM
 To: MS-Exchange Admin Issues
 Subject: RE: Blackberry Outage.. here we go again...

 Yup, seeing it here too starting about 0920EST; BIS service seems to
 still work.

 ~JasonG

  -Original Message-
  From: David Mazzaccaro [mailto:david.mazzacc...@hudsonmobility.com]
  Sent: Monday, November 07, 2011 10:49
  To: MS-Exchange Admin Issues
  Subject: Blackberry Outage.. here we go again...
 
  Awaiting formal confirmation.
 
 
  .
 
 
  ---
  To manage subscriptions click here: http://lyris.sunbelt-
  software.com/read/my_forums/ or send an email to

  listmana...@lyris.sunbeltsoftware.com
  with the body: unsubscribe exchangelist


 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist


 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist


 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

Re: little help understanding header info

2011-05-11 Thread Jeff Brown
I don't think I said that. (if I did, it was my keyboard's fault)!  TC has
asserted all along that they enforce NO size limits on email.

On Fri, May 6, 2011 at 12:49 PM, Joseph Heaton jhea...@dfg.ca.gov wrote:

 You say that your TulsaConnect IS enforcing size limits, and you're not.
  So, besides everything in the header referencing TulsaConnect, I would
 still be leaning towards at least finding out what their limit is that
 they're enforcing, and whether or not you can get them to raise that limit.

  Jeff Brown 2jbr...@gmail.com 5/6/2011 7:49 AM 
 I have been asked a number of times by owners to adjust the email size
 limit
 up so pictures of grand-babies will not be blocked or filtered off.  Our
 email is routed through our ISP/Datacenter before being handed off to a
 Brightmail filter, then forwarded to the appropriate exchange server.  The
 10.1.9.8 address is the internal address of said filter.  I should have
 called them before I posted this, I know, but I would rather stick a fork
 in
 my head...

 Can anyone tell from this header if it is MY problem, either with an
 exchange setting I have overlooked or a problem with the filter?
  TulsaConnect has assured me they are enforcing size limits on email.  10
 meg seems to be the limit at this point, although I have opened up
 everything on our end considerably higher than that.

 thanks for any help.  I'm just asking for help understanding the contents
 of
 this bounce please, unless you can determine from the content of the header
 that this may be an exchange problem...

 thanks for any help:

  - The following addresses had permanent fatal errors -
 xx...@companymail.com 
(reason: 552 message size exceeds fixed maximum message size)

  - Transcript of session follows -
 ... while talking to [67.214.102.28]:
  MAIL From:x...@yahoo.com SIZE=30433191
  552 message size exceeds fixed maximum message size
 554 5.0.0 Service unavailable
 Reporting-MTA: dns; mscan4.tulsaconnect.com
 Received-From-MTA: DNS; localhost.localdomain
 Arrival-Date: Fri, 6 May 2011 09:19:39 -0500

 Final-Recipient: RFC822; xx...@companymail.com
 Action: failed
 Status: 5.3.4
 Diagnostic-Code: SMTP; 552 message size exceeds fixed maximum message size
 Last-Attempt-Date: Fri, 6 May 2011 09:21:19 -0500
 Return-Path: ...@yahoo.com
 Received: from mscan4.tulsaconnect.com (localhost.localdomain [127.0.0.1])
by mscan4.tulsaconnect.com (8.13.8/8.13.8) with ESMTP id p46EJdAI004340
for xxx...@companymail.com; Fri, 6 May 2011 09:19:39 -0500
 Received: from omp1029.access.mail.sp2.yahoo.com (
 omp1029.access.mail.sp2.yahoo.com [98.139.44.92])
by mscan4.tulsaconnect.com (mscan4.tulsaconnect.com [67.214.101.67])
 envelope-from xxx...@yahoo.com with SMTP
id n459Jd1776718739ZQ ret-id none; Fri, 06 May 2011 09:19:39 -0500
 Received: (qmail 96059 invoked by uid 1000); 6 May 2011 14:19:38 -
 Received: (qmail 74424 invoked by uid 60001); 6 May 2011 14:19:32 -
 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com;
 s=s1024;
 t=1304691561; bh=pn4FE+SR65YTvA5pXDzmFkRoVIIF7uaA7DxpPitMJ10=;

 h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type;

 b=ri21sjwBmDXi5wwM5pxe0cW+CDbqYGUoouCXCp41ddc86JiGHLRP5/dwFZvTkrzestPC0F/y5ZT95TRn1OEvbqgQxmeiYaHMlbGR4gMiVI59ejEmkpAAUbmNUtURCLE5cHNexwRUvOogoMG8IJbHQV3+his6o1WUsTr3lHoXtyk=
 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=s1024; d=yahoo.com;

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist



 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist



---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

Re: little help understanding header info

2011-05-11 Thread Jeff Brown
To answer your question, the offending rejected email is almost always
jpegs...   grandbaby pics.  we have tested using jpegs and a collection of
pdf's and other random files compressed together in one attachment.

On Mon, May 9, 2011 at 2:00 PM, Cameron cameron.orl...@gmail.com wrote:

 Wouldn't happen to be some sort of a .docx/.xlsx/etc type of file would it?
 I had the same sort of thing drive me crazy until I found out that an 8mb
 .xlsx file (well within our limits) actually translated to a 57mb expanded
 file (try using winzip to unzip the file to see it's *true* size).



 On Fri, May 6, 2011 at 10:56 AM, Campbell, Rob 
 rob_campb...@centraltechnology.net wrote:

  From those headers it appears that Exchange was willing to send an email
 that size, but the server at tulsaconnect.com [67.214.102.28] wouldn’t
 accept it.



 *From:* Jeff Brown [mailto:2jbr...@gmail.com]
 *Sent:* Friday, May 06, 2011 9:49 AM

 *To:* MS-Exchange Admin Issues
 *Subject:* little help understanding header info



 I have been asked a number of times by owners to adjust the email size
 limit up so pictures of grand-babies will not be blocked or filtered off.
  Our email is routed through our ISP/Datacenter before being handed off to a
 Brightmail filter, then forwarded to the appropriate exchange server.  The
 10.1.9.8 address is the internal address of said filter.  I should have
 called them before I posted this, I know, but I would rather stick a fork in
 my head...



 Can anyone tell from this header if it is MY problem, either with an
 exchange setting I have overlooked or a problem with the filter?
  TulsaConnect has assured me they are enforcing size limits on email.  10
 meg seems to be the limit at this point, although I have opened up
 everything on our end considerably higher than that.



 thanks for any help.  I'm just asking for help understanding the contents
 of this bounce please, unless you can determine from the content of the
 header that this may be an exchange problem...



 thanks for any help:



  - The following addresses had permanent fatal errors -

 xx...@companymail.com 
 (reason: 552 message size exceeds fixed maximum message size)

   - Transcript of session follows -
 ... while talking to [67.214.102.28]:
  MAIL From:x...@yahoo.com SIZE=30433191
  552 message size exceeds fixed maximum message size
 554 5.0.0 Service unavailable
 Reporting-MTA: dns; mscan4.tulsaconnect.com
 Received-From-MTA: DNS; localhost.localdomain
 Arrival-Date: Fri, 6 May 2011 09:19:39 -0500

 Final-Recipient: RFC822; xx...@companymail.com
 Action: failed
 Status: 5.3.4
 Diagnostic-Code: SMTP; 552 message size exceeds fixed maximum message size
 Last-Attempt-Date: Fri, 6 May 2011 09:21:19 -0500
 Return-Path: ...@yahoo.com
 Received: from mscan4.tulsaconnect.com (localhost.localdomain
 [127.0.0.1])
 by mscan4.tulsaconnect.com (8.13.8/8.13.8) with ESMTP id
 p46EJdAI004340
 for xxx...@companymail.com; Fri, 6 May 2011 09:19:39 -0500
 Received: from omp1029.access.mail.sp2.yahoo.com (
 omp1029.access.mail.sp2.yahoo.com [98.139.44.92])
 by mscan4.tulsaconnect.com (mscan4.tulsaconnect.com [67.214.101.67])
 envelope-from xxx...@yahoo.com with SMTP
 id n459Jd1776718739ZQ ret-id none; Fri, 06 May 2011 09:19:39 -0500
 Received: (qmail 96059 invoked by uid 1000); 6 May 2011 14:19:38 -
 Received: (qmail 74424 invoked by uid 60001); 6 May 2011 14:19:32 -
 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com;
 s=s1024; t=1304691561; bh=pn4FE+SR65YTvA5pXDzmFkRoVIIF7uaA7DxpPitMJ10=;
 h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type;
 b=ri21sjwBmDXi5wwM5pxe0cW+CDbqYGUoouCXCp41ddc86JiGHLRP5/dwFZvTkrzestPC0F/y5ZT95TRn1OEvbqgQxmeiYaHMlbGR4gMiVI59ejEmkpAAUbmNUtURCLE5cHNexwRUvOogoMG8IJbHQV3+his6o1WUsTr3lHoXtyk=

 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
   s=s1024; d=yahoo.com;

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 **
 Note:
 The information contained in this message may be privileged and confidential 
 and
 protected from disclosure.  If the reader of this message is not the intended
 recipient, or an employee or agent responsible for delivering this message to
 the intended recipient, you are hereby notified that any dissemination,
 distribution or copying of this communication is strictly prohibited. If you
 have received this communication in error, please notify us immediately by
 replying to the message and deleting it from your computer.
 **

 ---

 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana

Re: little help understanding header info

2011-05-11 Thread Jeff Brown
I wonder if my Brightmail filter is guilty of this behavior, but it LOOKS
like it's actually exchange, not Brightmail that is refusing the message.

On Wed, May 11, 2011 at 9:15 AM, Cameron cameron.orl...@gmail.com wrote:

 If they are straight .jpg attachments then I agreebutI have had
 users drop pictures into word documents and had this issue. I know that
 Vipre for Exchange actually *does* look at the uncompressed size when
 determining whether or not to let it through.

 On Wed, May 11, 2011 at 9:08 AM, Campbell, Rob 
 rob_campb...@centraltechnology.net wrote:

  I wouldn’t think it would make any difference in the scenario you
 described.  JPG files are already compressed.   If you try to zip a jpg, it
 actually gets bigger.



 *From:* Jeff Brown [mailto:2jbr...@gmail.com]
 *Sent:* Wednesday, May 11, 2011 8:03 AM

 *To:* MS-Exchange Admin Issues
 *Subject:* Re: little help understanding header info



 Wow, is it really possible that the uncompressed size of the attachment is
 what counts in the over-all size limit  That changes things
 DRAMATICALLY!!!

 On Mon, May 9, 2011 at 2:00 PM, Cameron cameron.orl...@gmail.com wrote:

 Wouldn't happen to be some sort of a .docx/.xlsx/etc type of file would
 it? I had the same sort of thing drive me crazy until I found out that an
 8mb .xlsx file (well within our limits) actually translated to a 57mb
 expanded file (try using winzip to unzip the file to see it's *true* size).





 On Fri, May 6, 2011 at 10:56 AM, Campbell, Rob 
 rob_campb...@centraltechnology.net wrote:

 From those headers it appears that Exchange was willing to send an email
 that size, but the server at tulsaconnect.com [67.214.102.28] wouldn’t
 accept it.



 *From:* Jeff Brown [mailto:2jbr...@gmail.com]
 *Sent:* Friday, May 06, 2011 9:49 AM


 *To:* MS-Exchange Admin Issues
 *Subject:* little help understanding header info



 I have been asked a number of times by owners to adjust the email size
 limit up so pictures of grand-babies will not be blocked or filtered off.
  Our email is routed through our ISP/Datacenter before being handed off to a
 Brightmail filter, then forwarded to the appropriate exchange server.  The
 10.1.9.8 address is the internal address of said filter.  I should have
 called them before I posted this, I know, but I would rather stick a fork in
 my head...



 Can anyone tell from this header if it is MY problem, either with an
 exchange setting I have overlooked or a problem with the filter?
  TulsaConnect has assured me they are enforcing size limits on email.  10
 meg seems to be the limit at this point, although I have opened up
 everything on our end considerably higher than that.



 thanks for any help.  I'm just asking for help understanding the contents
 of this bounce please, unless you can determine from the content of the
 header that this may be an exchange problem...



 thanks for any help:



  - The following addresses had permanent fatal errors -


 xx...@companymail.com 
 (reason: 552 message size exceeds fixed maximum message size)

   - Transcript of session follows -
 ... while talking to [67.214.102.28]:
  MAIL From:x...@yahoo.com SIZE=30433191
  552 message size exceeds fixed maximum message size
 554 5.0.0 Service unavailable
 Reporting-MTA: dns; mscan4.tulsaconnect.com
 Received-From-MTA: DNS; localhost.localdomain
 Arrival-Date: Fri, 6 May 2011 09:19:39 -0500

 Final-Recipient: RFC822; xx...@companymail.com
 Action: failed
 Status: 5.3.4
 Diagnostic-Code: SMTP; 552 message size exceeds fixed maximum message size
 Last-Attempt-Date: Fri, 6 May 2011 09:21:19 -0500
 Return-Path: ...@yahoo.com
 Received: from mscan4.tulsaconnect.com (localhost.localdomain
 [127.0.0.1])
 by mscan4.tulsaconnect.com (8.13.8/8.13.8) with ESMTP id
 p46EJdAI004340
 for xxx...@companymail.com; Fri, 6 May 2011 09:19:39 -0500
 Received: from omp1029.access.mail.sp2.yahoo.com (
 omp1029.access.mail.sp2.yahoo.com [98.139.44.92])
 by mscan4.tulsaconnect.com (mscan4.tulsaconnect.com [67.214.101.67])
 envelope-from xxx...@yahoo.com with SMTP
 id n459Jd1776718739ZQ ret-id none; Fri, 06 May 2011 09:19:39 -0500
 Received: (qmail 96059 invoked by uid 1000); 6 May 2011 14:19:38 -
 Received: (qmail 74424 invoked by uid 60001); 6 May 2011 14:19:32 -

 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com;
 s=s1024; t=1304691561; bh=pn4FE+SR65YTvA5pXDzmFkRoVIIF7uaA7DxpPitMJ10=;
 h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type;
 b=ri21sjwBmDXi5wwM5pxe0cW+CDbqYGUoouCXCp41ddc86JiGHLRP5/dwFZvTkrzestPC0F/y5ZT95TRn1OEvbqgQxmeiYaHMlbGR4gMiVI59ejEmkpAAUbmNUtURCLE5cHNexwRUvOogoMG8IJbHQV3+his6o1WUsTr3lHoXtyk=


 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
   s=s1024; d=yahoo.com;

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe

Re: little help understanding header info

2011-05-06 Thread Jeff Brown
Thank you Rob and Jim.

That 67.214.102.28 is one of MY public IP's that the firewall routes to my
filter, internal IP 10.1.9.8.  I should have included that detail.  I AM
able to send outbound messages with 15 meg attachements, and I can send
internally from one exchange domain to another with same attachments.  One
of our owners has a daughter in Sweden with the first grandchild, born this
year and she would prefer to receive emails to her company email, rather
than the hotmail account she is forced to use because I can't figure this
out.



On Fri, May 6, 2011 at 10:02 AM, Kennedy, Jim
kennedy...@elyriaschools.orgwrote:

 Tulsaconnect enforced the limit on that message.



 Feel free to send me a large attachment if you want to test to be sure.



 *From:* Jeff Brown [mailto:2jbr...@gmail.com]
 *Sent:* Friday, May 06, 2011 10:49 AM

 *To:* MS-Exchange Admin Issues
 *Subject:* little help understanding header info



 I have been asked a number of times by owners to adjust the email size
 limit up so pictures of grand-babies will not be blocked or filtered off.
  Our email is routed through our ISP/Datacenter before being handed off to a
 Brightmail filter, then forwarded to the appropriate exchange server.  The
 10.1.9.8 address is the internal address of said filter.  I should have
 called them before I posted this, I know, but I would rather stick a fork in
 my head...



 Can anyone tell from this header if it is MY problem, either with an
 exchange setting I have overlooked or a problem with the filter?
  TulsaConnect has assured me they are enforcing size limits on email.  10
 meg seems to be the limit at this point, although I have opened up
 everything on our end considerably higher than that.



 thanks for any help.  I'm just asking for help understanding the contents
 of this bounce please, unless you can determine from the content of the
 header that this may be an exchange problem...



 thanks for any help:



  - The following addresses had permanent fatal errors -
 xx...@companymail.com 
 (reason: 552 message size exceeds fixed maximum message size)

   - Transcript of session follows -
 ... while talking to [67.214.102.28]:
  MAIL From:x...@yahoo.com SIZE=30433191
  552 message size exceeds fixed maximum message size
 554 5.0.0 Service unavailable
 Reporting-MTA: dns; mscan4.tulsaconnect.com
 Received-From-MTA: DNS; localhost.localdomain
 Arrival-Date: Fri, 6 May 2011 09:19:39 -0500

 Final-Recipient: RFC822; xx...@companymail.com
 Action: failed
 Status: 5.3.4
 Diagnostic-Code: SMTP; 552 message size exceeds fixed maximum message size
 Last-Attempt-Date: Fri, 6 May 2011 09:21:19 -0500
 Return-Path: ...@yahoo.com
 Received: from mscan4.tulsaconnect.com (localhost.localdomain [127.0.0.1])
 by mscan4.tulsaconnect.com (8.13.8/8.13.8) with ESMTP id
 p46EJdAI004340
 for xxx...@companymail.com; Fri, 6 May 2011 09:19:39 -0500
 Received: from omp1029.access.mail.sp2.yahoo.com (
 omp1029.access.mail.sp2.yahoo.com [98.139.44.92])
 by mscan4.tulsaconnect.com (mscan4.tulsaconnect.com [67.214.101.67])
 envelope-from xxx...@yahoo.com with SMTP
 id n459Jd1776718739ZQ ret-id none; Fri, 06 May 2011 09:19:39 -0500
 Received: (qmail 96059 invoked by uid 1000); 6 May 2011 14:19:38 -
 Received: (qmail 74424 invoked by uid 60001); 6 May 2011 14:19:32 -
 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com;
 s=s1024; t=1304691561; bh=pn4FE+SR65YTvA5pXDzmFkRoVIIF7uaA7DxpPitMJ10=;
 h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type;
 b=ri21sjwBmDXi5wwM5pxe0cW+CDbqYGUoouCXCp41ddc86JiGHLRP5/dwFZvTkrzestPC0F/y5ZT95TRn1OEvbqgQxmeiYaHMlbGR4gMiVI59ejEmkpAAUbmNUtURCLE5cHNexwRUvOogoMG8IJbHQV3+his6o1WUsTr3lHoXtyk=
 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
   s=s1024; d=yahoo.com;

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

Re: OT (a little) Blackberry sync problem

2011-04-12 Thread Jeff Brown
Don's be shy about deleting her BES account and starting a new one, if
John's suggestions don't get it resolved.  If it is BES strangeness it will
not likely propagate to new account.  EA doesn't take that long.

On Tue, Apr 12, 2011 at 12:37 PM, Ralph Smith m...@gatewayindustries.orgwrote:

  Hi all,



 I know just enough about Blackberries to have installed BESx and connect
 the devices to it, so I am in search of some guidance.  Sorry for the long
 message.



 The CEO of our organization is having problems with messages synchronizing
 on her Blackberry.

 What she sees is that some (not all) messages that show up in her Outlook
 inbox never show up on her Blackberry.  For messages that do show up on her
 Blackberry, when they are showing as read on her BB, sometimes they continue
 to show as unread in Outlook.  Also messages she has deleted on her BB don’t
 always move to Deleted Items in Outlook.



 Sometimes the opposite is also true – messages she has read and deleted in
 Outlook continue to show as new unread messages on the BB.

 While I was talking to her this morning I witnessed two messages from the
 same internal Exchange user show up in Outlook, but only the second one
 showed up on her BB.



 I only have 4 BB users here, and none of the other three have reported
 issues.



 Her Blackberry is a Storm2 9550 on Verizon

 BES Express 5.0.2.29 on Windows 2003 R2 SP2

 Exchange 2003 SP2 on Windows 2003 SP2



 What I’ve tried so far:



 Made sure Outlook cached mode was off – it was.



 Made sure she is leaving messages in her Outlook deleted items folder for
 at least a day before permanently deleting – she was.



 I had her do a “Reconcile” Now on her BB – no change.



 I had her do a reset by removing the battery – no change.



 On the BB went to Messages  Options  General Options  and made sure
 “Hide filed email” is set to “Yes”



 Checked Messages  Options  Email Reconciliation settings:

 Delete On = Mailbox and Handheld

 Wireless Reconciliation = On

 On Conflicts = Mailbox Wins



 On the BESx server set Hard Deletes = true





 Any tips on what else I can try to do to help her out?



 Thanks,



 Ralph



 Confidentiality Notice:

 *

 This communication, including any attachments, may contain confidential
 information and is intended only for the individual or entity to whom it is
 addressed. Any review, dissemination, or copying of this communication by
 anyone other than the intended recipient is strictly prohibited. If you are
 not the intended recipient, please contact the sender by reply email, and
 delete and destroy all copies of the original message.

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

Re: BES 5.0 and Exchange 2010

2011-04-06 Thread Jeff Brown
Has MS really closed the gap between EAS and BES enough to make that a
wholesale, practical recommendation(as far as security is concerned)?

On Wed, Apr 6, 2011 at 1:45 PM, Don Ely don@gmail.com wrote:

 I'll speak!  Drop kick your BES server into the Sea of Japan and use
 EAS


 On Wed, Apr 6, 2011 at 11:29 AM, Michael B. Smith 
 mich...@smithcons.comwrote:

  It would be safe to presume (not ASSUME) J based on the way I worded my
 answer that there are known issues until 2010 sp1 ur3.



 Now, because of how I know what I know, I can’t tell you what those issues
 are. Silly, isn’t it? But there are other people on this forum that don’t
 have the same restrictions on them that I do. Perhaps one or more of them
 will speak up.



 Regards,



 Michael B. Smith

 Consultant and Exchange MVP

 http://TheEssentialExchange.com http://theessentialexchange.com/



 *From:* Beahm, Keith [mailto:kbe...@stinson.com]
 *Sent:* Wednesday, April 06, 2011 12:57 PM

 *To:* MS-Exchange Admin Issues
  *Subject:* RE: BES 5.0 and Exchange 2010



 I’m sorry to belabor the topic, but I was hoping to clarify that E2010 SP1
 RU2 with (either BES 5.02 MR5 or BES 5.03 MR1) is a stable bug free
 combination?





 *Keith D. Beahm *|* *Network Engineer | Stinson Morrison Hecker LLP
 1201 Walnut Street, Suite 2900 | Kansas City, MO 64106-2150
 T: 816.691.3374 | F: 816.412.1022 | M: 816.808.8983
 kbe...@stinson.com | www.stinson.com



 *From:* Michael B. Smith [mailto:mich...@smithcons.com]
 *Sent:* Wednesday, April 06, 2011 11:19 AM
 *To:* MS-Exchange Admin Issues
 *Subject:* RE: BES 5.0 and Exchange 2010



 My recommendation (which comes from someone really knows but I’m not
 allowed to say their names or companies) is that you should install 5.02 MR5
 or 5.03 with MR1; plus Exchange 2010 sp1 ur3 as soon as it is re-released.



 Regards,



 Michael B. Smith

 Consultant and Exchange MVP

 http://TheEssentialExchange.com http://theessentialexchange.com/



 *From:* Beahm, Keith [mailto:kbe...@stinson.com]
 *Sent:* Wednesday, April 06, 2011 12:16 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* BES 5.0 and Exchange 2010



 It seems that Blackberry has released several updates to BES this week
 (SP2 MR5, SP 3, SP 3 MR1).  The last thread (*BES 5.0 SP2 MR4 and
 Exchange 2010 SP1 RU3 warning..*) on this topic as it related to Exchange
 2010 indicated some issues with duplication of sent items.  Has anyone had
 any successes or issues with these RIM releases?





 *Keith D. Beahm *|* *Network Engineer | Stinson Morrison Hecker LLP
 1201 Walnut Street, Suite 2900 | Kansas City, MO 64106-2150
 T: 816.691.3374 | F: 816.412.1022 | M: 816.808.8983
 kbe...@stinson.com | www.stinson.com



 Please consider the environment before printing this e-mail.



 This communication is from a law firm and may contain confidential and/or
 privileged information. If it has been sent to you in error, please contact
 the sender for instructions concerning return or destruction, and do not use
 or disclose the contents to others.

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist


 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

Re: activesync on iphone still syncing after password change

2011-03-07 Thread Jeff Brown
HIJACK!

Is there any correlation between this thread and the report I keep getting
from my boss who claims to NOT have to enter his PW for Outlook to connect
VIA RPC from home?  W2K8 NON R2 server, E2K7, Outlook 2010.  I keep telling
him he's a no good dirty fork tongued liar, that there's no way outlook
would connect from home without asking him for his password, but he insists
that it does not.

IIS?



On Mon, Mar 7, 2011 at 1:41 PM, Michael B. Smith mich...@smithcons.comwrote:

  Works as designed.



 IIS still has a valid ticket with the old password. Bounce IIS or recycle
 the app pool and it’ll stop working.



 Regards,



 Michael B. Smith

 Consultant and Exchange MVP

 http://TheEssentialExchange.com



 *From:* Bill Songstad [mailto:bsongs...@gmail.com]
 *Sent:* Monday, March 07, 2011 2:13 PM

 *To:* MS-Exchange Admin Issues
 *Subject:* activesync on iphone still syncing after password change



 I have a user that forgot their password after a few weeks of using the
 password.  Couldn't log into OWA manually, but their iphone was able to send
 and receive fine with the cached password.  We reset the password on the
 domain.  User logs in to OWA using the new password.  Does not change the
 password on iphone.  Now the user is sending from OWA and the iphone.  Two
 passwords.  One account.  Success both ways.  My knowledge tells me this is
 impossible.  My eyes tell me otherwise.  Could this just be the old
 activesync session?  or is something horribly wrong?  or another option
 more likely?



 as always, thanks for any assistance,



 -Bill

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

Re: BESx?

2010-11-10 Thread Jeff Brown
We dissected our domain, created 2 new E2K7 domains on HV VM's and installed
BESx ON both. No worries.  some difficulty logging into management console
first time, but that's nothing new.

On Wed, Nov 10, 2010 at 8:04 AM, Alex Robinson 
robins...@franklinroadacademy.com wrote:

  I have heard conflicting feedback the BESX does not have to be on
 separate box and can be installed on same Exchange installation.  Can
 feedback be provided on this scenario?



 -Alex



 *From:* N Parr [mailto:npar...@mortonind.com]
 *Sent:* Wednesday, November 10, 2010 8:02 AM

 *To:* MS-Exchange Admin Issues
 *Subject:* RE: BESx?



 We have a sister company that implemented it and they haven't complained at
 all.  Pretty quick to install and set up.  Users were removed from my full
 BES and activated on their BESx and can't tell the difference.  Whole lot
 faster than using BIS or Http.  And yes put it on it's own machine or VM.


  --

 *From:* Castillo, Daniel (Directory Services) [mailto:
 daniel.casti...@hp.com]
 *Sent:* Wednesday, November 10, 2010 3:58 AM
 *To:* MS-Exchange Admin Issues
 *Subject:* BESx?

 Hi folks,



 Has anyone out there deployed Blackberry Express? Yes, the free version of
 BES.

 Anything to share from your experience?

 Regards,





 ~D



 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

Re: BESx?

2010-11-10 Thread Jeff Brown
My understanding ON the box install recommended for less than 75 users.

On Wed, Nov 10, 2010 at 8:18 AM, Jeff Brown 2jbr...@gmail.com wrote:

 We dissected our domain, created 2 new E2K7 domains on HV VM's and
 installed BESx ON both. No worries.  some difficulty logging into management
 console first time, but that's nothing new.


 On Wed, Nov 10, 2010 at 8:04 AM, Alex Robinson 
 robins...@franklinroadacademy.com wrote:

  I have heard conflicting feedback the BESX does not have to be on
 separate box and can be installed on same Exchange installation.  Can
 feedback be provided on this scenario?



 -Alex



 *From:* N Parr [mailto:npar...@mortonind.com]
 *Sent:* Wednesday, November 10, 2010 8:02 AM

 *To:* MS-Exchange Admin Issues
 *Subject:* RE: BESx?



 We have a sister company that implemented it and they haven't complained
 at all.  Pretty quick to install and set up.  Users were removed from my
 full BES and activated on their BESx and can't tell the difference.  Whole
 lot faster than using BIS or Http.  And yes put it on it's own machine or
 VM.


  --

 *From:* Castillo, Daniel (Directory Services) [mailto:
 daniel.casti...@hp.com]
 *Sent:* Wednesday, November 10, 2010 3:58 AM
 *To:* MS-Exchange Admin Issues
 *Subject:* BESx?

 Hi folks,



 Has anyone out there deployed Blackberry Express? Yes, the free version of
 BES.

 Anything to share from your experience?

 Regards,





 ~D



 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist




---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

Re: Most manageable and usable corporate smart phone?

2010-10-14 Thread Jeff Brown
I can only see 2 things that matter that we give up moving from full BES to
BES express:  1. High availability  2. large number of pre-configured IT
Policies(I was wrong, this one doesn't really matter to me).

Please tell me what security capabilities I loose with BES Express?  I don't
see it.

What I HAVE shucked is the $4,800 a year for support for ONE server that was
nothing less than WORLD CLASS highway robbery.  And I'll always have a fond
place in my heart(or some unnamed place) for their smoking gun trick policy
that said if I have more than 49 users and i don't pay the ridiculous price
for enterprise support they would refuse to provide per incident support for
me.




On Tue, Oct 12, 2010 at 10:31 AM, Simon Butler si...@sembee.co.uk wrote:

  Do ensure that you are comparing like with like, and also consider that
 the UK mobile phone market is a lot more advanced than the USA one, so some
 of the reasoning is different.



 The Blackberry pricing structure changed considerably earlier this year,
 which makes anything you read that pre-dates 2010 pretty much out of date.

 Until that point, to use the full Blackberry feature set you needed BES (or
 BPS) and the BES option on the devices. That made the Blackberry devices
 very expensive to run. Here in the UK, you were looking at £35/month plus
 call charges etc. My Blackberry cost me more to run than my phone used for
 voice.
 However, I never once paid for BES. If there were more than 10 devices I
 told the service provider that I wanted BES free, and if they didn’t hand it
 over, I would talk to someone else. The profit on BES data is so high, that
 they hand it over.



 However now, that has all changed.
 You can now run a Blackberry against BES Express on the BIS plan. BES
 Express is free for as many devices as you want. Therefore you can run a
 Blackberry, with all of the features that the end user wants on the cheaper
 BIS plans. My Blackberry now costs me less than £15/month to run.



 Of course if you want the full BES functionality, that means you need a
 full BES (which you rarely get free unless you have a large number of
 handsets or are bringing in a lot of business) and you must have the full
 BES data option on the devices. That makes the cost still pretty high.



 This PDF from RIM outlines the differences between the options available to
 you.


 http://na.blackberry.com/eng/services/business/server/express/ComparisonChart_NA_021610_v3.pdf



 As for other choices, you will not get full management without paying for
 additional software.
 For the iPhone, you would have to look at third party. For Windows Mobile,
 you would be looking at SCCM or whatever it is called now, or third party.
 Everyone is still playing catch up with Blackberry for the Enterprise
 management.



 Good Technologies (http://www.good.com/) is about the closest you will get
 to Blackberry and has cross-platform support if you need that. However if
 you can standardise on the device and don’t allow non-company devices to be
 used, you will find it easier to support and more cost effective.



 Simon





 --
 Simon Butler
 MVP: Exchange, MCSE
 Sembee Ltd.

 e: si...@sembee.co.uk
 w: http://www.sembee.co.uk/
 w: http://www.amset.info/

 w: http://blog.sembee.co.uk/

 Need cheap certificates for Exchange, compatible with the iPhone?
 http://CertificatesForExchange.com/ http://certificatesforexchange.com/for 
 certificates from just $23.99.
 Need a domain for your certificate? 
 http://DomainsForExchange.net/http://domainsforexchange.net/



 Exchange Resources: http://exbpa.com/







 *From:* Paul Hutchings [mailto:paul.hutchi...@mira.co.uk]
 *Sent:* 12 October 2010 16:15

 *To:* MS-Exchange Admin Issues
 *Subject:* RE: Most manageable and usable corporate smart phone?



 Thanks Joe, I’m picking up a bit of a theme when it comes to Blackberry in
 that some of it seems to be $$$ but they do seem to “just work” and are
 manageable should you decide to do something that should be fairly trivial
 but you need to update X number of mobiles.



 I’ll look into the free vs. pay software.  As I said I’m not expecting
 anyone to RTFM on my behalf but sometimes experience of a product highlights
 things that aren’t obvious simply by RTFM – are there any features you’d say
 are “must have” that the free software doesn’t do?



 *From:* Joe Pochedley [mailto:joe.poched...@fivesgroup.com]
 *Sent:* 12 October 2010 16:09
 *To:* MS-Exchange Admin Issues
 *Subject:* RE: Most manageable and usable corporate smart phone?



 Blackberries have the most centrally manageable options…  However to take
 advantage of much of that functionality you need to pay for the Blackberry
 Enterprise Server (BES).  The free BES Express edition has many of the
 centralized management capabilities disabled, but it’s worth a look
 depending on your needs…..



 Depending on your size, BES may or may not be a large expense (obviously,
 “large expense” is relative to your company’s income 

E2K3 help

2010-08-31 Thread Jeff Brown
I have a AD account that was inadvertently deleted.  I recreated the account
and it created a new mailbox.  i now see a new mailbox for this user, just
above the old, disabled mailbox.  how can I move/connect the current account
to the old mailbox?  There were some initials on the old account that were
left off the new account in AD, I'm guessing that is what caused it to
create new account rather than reconnect...

W2K3 servers, E2K3 SP2.

Thanks for any suggestions.

jeff

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

Re: E2K3 help

2010-08-31 Thread Jeff Brown
you are right.  that was easy.  Thanks.

On Tue, Aug 31, 2010 at 11:35 AM, Richard Stovall rich...@gmail.com wrote:

 It's quite simple.  Have a look here for starters:
 http://support.microsoft.com/kb/274343.  You may want to nuke the new user
 object if it's not being used already and start over.  Otherwise you'll have
 to delete the new mailbox and reconnect the account to the old one.

 On Tue, Aug 31, 2010 at 12:30 PM, Jeff Brown 2jbr...@gmail.com wrote:

 I have a AD account that was inadvertently deleted.  I recreated the
 account and it created a new mailbox.  i now see a new mailbox for this
 user, just above the old, disabled mailbox.  how can I move/connect the
 current account to the old mailbox?  There were some initials on the old
 account that were left off the new account in AD, I'm guessing that is what
 caused it to create new account rather than reconnect...

 W2K3 servers, E2K3 SP2.

 Thanks for any suggestions.

 jeff

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist


 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

Re: Do most of you prefer to build Exchange servers on RAID?

2010-08-04 Thread Jeff Brown
We build all ours raid1 system drive(not so big) and raid1 data drive(big)

On Wed, Aug 4, 2010 at 2:28 PM, Holstrom, Don dholst...@nbm.org wrote:

 I am about to build a new server, but I have always used static drives. We
 have about a hundred users.



Re: Exchange 2007 Spam Filtering

2010-07-21 Thread Jeff Brown
It looks like you know what you are doing and have done more work to stop
spam than a lot of guys.  With ZEROS getting through have you verified, as
MBS suggested at the start of this thread, that in fact these messages are
going through your edge servers?  This looks like what you get when SPAM
finds its way directly through a secondary MX pointer that may not be
filtered on the same level

On Tue, Jul 20, 2010 at 10:16 PM, Kurt Buff kurt.b...@gmail.com wrote:

 My RBL of choice is zen.spamhaus.org

 But, it's running on a Maia Mailguard box. Cost was hardware and time.

 On Tue, Jul 20, 2010 at 09:00, Brown, Larry larry.br...@dplinc.com
 wrote:
  Exchange 2007, SPAM SCL set to 7.
 
 
 
  To save money our company elected to rely on Exchange’s native SPAM
  filtering on the Exchange Edge servers.  However, now we are getting
  complaints about the high level of SPAM getting through to users.  One
 user
  is getting as many as 100 SPAM emails a day…and of course he is a VIP.
 
 
 
  He does not want to change his email address.  But he does want us to
 “fix”
  this problem without spending money.
 
 
 
  We are considering blocking Asian and Eastern European domains, as we
 don’t
  do business with those parts of the world.
 
 
 
  We also use free Real Time Black Lists (remember, can’t spend money),
 Sender
  ID check, and the open proxy test.
 
 
 
  Sadly, when reviewing a lot of the SPAM our user has received we have
 found
  way too many SCL’s of 0 for emails that are obviously SPAM.
 
 
 
  Oh, and lowering the SCL to 6 is also not an option, and it doesn’t look
  like it would make much of a difference anyway.
 
 
 
  Can anyone think of anything we have missed?  Is there a way to tweak the
  native anti-spam filtering to make it work better?  Or is this as good as
 it
  gets?
 
 
 
 
 
 





Re: New BES 5.0 server but can't login to BAS

2010-06-17 Thread Jeff Brown
We have to logon using the BAS account.  Even after service pak we are not
able to use AD logon.  Have a script to reset pw for that account.

On Thu, Jun 17, 2010 at 8:48 AM, Tammy George tammy.geo...@acadiau.cawrote:

  We installed BES 5.0 MR3 yesterday and have migrated a few users.  All
 seems fine except that we cannot login to Blackberry Administrative
 Service.  We get the error  “The username, password or domain is not
 correct.  Please correct the entry”



 It’s an outstanding issue which RIM developers have not resolved as
 mentioned in the article below:




 http://www.blackberry.com/btsc/search.do?cmd=displayKCdocType=kcexternalId=KB17949



 We have attempted to follow Workaround 1 as described in the article
 however we find the ‘how-to’ a bit vague so we aren’t even sure that what we
 did is what we’re supposed to do.



 Just wondering if anyone else has encountered this  if you were able to
 get around it.



 Thanks in advance.







 --

 Tammy George

 Sr. Systems Operator

 Technology Services

 Acadia University

 tel: (902) 585-1158

 fax: (902) 585-1066





undeliverables clogging que's

2010-06-09 Thread Jeff Brown
We are in the middle of a multi-domain migration from E2k3 servers to E2K7.
 We had an outside consultant come in and set this all up.  We had some time
constraints and unrelated hardware issues that have complicated this process
at times, and things have not always gone smoothly(imagine that).
 Everything seems to be working fine except that we have had reports of
missing email and looked to find a que with hundreds of undelivered
messages on the E2K7 Hub/CAS server.  80% or so of those messages are
identified as undeliverable.  When we manually delete the undeliverables
the rest of the messages seem to go out just fine.  I'll be happy to provide
more details about our setup, but I'm thinking that may be something someone
else has seen and may be able to point us in the right direction to get this
resolved???

thanks for any help.

Jeff


Re: undeliverables clogging que's

2010-06-09 Thread Jeff Brown
The From:  seems to by typical spam, spoofed addresses, predictable subject
lines.  The To: seems to vary, some to current employees, some to former
employees and some to unknowns...

On Wed, Jun 9, 2010 at 12:31 PM, Kennedy, Jim
kennedy...@elyriaschools.orgwrote:

 The undeliverable’s are from who and to who? Is there a common thread with
 them?







 *From:* Jeff Brown [mailto:2jbr...@gmail.com]
 *Sent:* Wednesday, June 09, 2010 1:18 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* undeliverables clogging que's



 We are in the middle of a multi-domain migration from E2k3 servers to E2K7.
  We had an outside consultant come in and set this all up.  We had some time
 constraints and unrelated hardware issues that have complicated this process
 at times, and things have not always gone smoothly(imagine that).
  Everything seems to be working fine except that we have had reports of
 missing email and looked to find a que with hundreds of undelivered
 messages on the E2K7 Hub/CAS server.  80% or so of those messages are
 identified as undeliverable.  When we manually delete the undeliverables
 the rest of the messages seem to go out just fine.  I'll be happy to provide
 more details about our setup, but I'm thinking that may be something someone
 else has seen and may be able to point us in the right direction to get this
 resolved???



 thanks for any help.



 Jeff



Re: undeliverables clogging que's

2010-06-09 Thread Jeff Brown
we are currently not doing any filtering with exchange, but we have a
gateway filter appliance and are running a symantec filter on the mailbox
server.

On Wed, Jun 9, 2010 at 12:43 PM, Campbell, Rob 
rob_campb...@centraltechnology.net wrote:

  Did your “consultant” not set up any spam filtering?  It sounds like
 you’re either wide open, or infected internally.



 *From:* Jeff Brown [mailto:2jbr...@gmail.com]
 *Sent:* Wednesday, June 09, 2010 12:35 PM

 *To:* MS-Exchange Admin Issues
 *Subject:* Re: undeliverables clogging que's



 The From:  seems to by typical spam, spoofed addresses, predictable subject
 lines.  The To: seems to vary, some to current employees, some to former
 employees and some to unknowns...

 On Wed, Jun 9, 2010 at 12:31 PM, Kennedy, Jim 
 kennedy...@elyriaschools.org wrote:

 The undeliverable’s are from who and to who? Is there a common thread with
 them?







 *From:* Jeff Brown [mailto:2jbr...@gmail.com]
 *Sent:* Wednesday, June 09, 2010 1:18 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* undeliverables clogging que's



 We are in the middle of a multi-domain migration from E2k3 servers to E2K7.
  We had an outside consultant come in and set this all up.  We had some time
 constraints and unrelated hardware issues that have complicated this process
 at times, and things have not always gone smoothly(imagine that).
  Everything seems to be working fine except that we have had reports of
 missing email and looked to find a que with hundreds of undelivered
 messages on the E2K7 Hub/CAS server.  80% or so of those messages are
 identified as undeliverable.  When we manually delete the undeliverables
 the rest of the messages seem to go out just fine.  I'll be happy to provide
 more details about our setup, but I'm thinking that may be something someone
 else has seen and may be able to point us in the right direction to get this
 resolved???



 thanks for any help.



 Jeff



 **
 Note:
 The information contained in this message may be privileged and confidential 
 and
 protected from disclosure.  If the reader of this message is not the intended
 recipient, or an employee or agent responsible for delivering this message to
 the intended recipient, you are hereby notified that any dissemination,
 distribution or copying of this communication is strictly prohibited. If you
 have received this communication in error, please notify us immediately by
 replying to the message and deleting it from your computer.
 **




Re: undeliverables clogging que's

2010-06-09 Thread Jeff Brown
These look like incoming spam, not NDR's , but I have deleted them all at
the moment and don't have any to copy and display.  I setup ZEN from
spamhouse to do recipient filtering, maybe that will help.  I really prefer
to drop messages for invalid recipients, but with all the migrations we are
doing the LDAP lookups weren't keeping up, and my filter refuses to look at
secondary SMTP addresses...

On Wed, Jun 9, 2010 at 12:57 PM, Kennedy, Jim
kennedy...@elyriaschools.orgwrote:

 The recipient verification needs to be on your externally exposed MTA for
 incoming email, so that would be the gateway filter I assume. The decent
 ones will do that through an LDAP connection (for example) to your exchange
 server.  If not you are accepting all email for your domain…it hits the
 exchange server and invalid recipients are generating the outgoing NDR’s on
 the exchange server. I really really think that is the root of your problem
 here. That flood of stuck outbound NDR’s is hanging everything else up.









 *From:* Jeff Brown [mailto:2jbr...@gmail.com]
 *Sent:* Wednesday, June 09, 2010 1:53 PM

 *To:* MS-Exchange Admin Issues
 *Subject:* Re: undeliverables clogging que's



 we are currently not doing any filtering with exchange, but we have a
 gateway filter appliance and are running a symantec filter on the mailbox
 server.

 On Wed, Jun 9, 2010 at 12:43 PM, Campbell, Rob 
 rob_campb...@centraltechnology.net wrote:

 Did your “consultant” not set up any spam filtering?  It sounds like you’re
 either wide open, or infected internally.



 *From:* Jeff Brown [mailto:2jbr...@gmail.com]
 *Sent:* Wednesday, June 09, 2010 12:35 PM


 *To:* MS-Exchange Admin Issues
 *Subject:* Re: undeliverables clogging que's



 The From:  seems to by typical spam, spoofed addresses, predictable subject
 lines.  The To: seems to vary, some to current employees, some to former
 employees and some to unknowns...

 On Wed, Jun 9, 2010 at 12:31 PM, Kennedy, Jim 
 kennedy...@elyriaschools.org wrote:

 The undeliverable’s are from who and to who? Is there a common thread with
 them?







 *From:* Jeff Brown [mailto:2jbr...@gmail.com]
 *Sent:* Wednesday, June 09, 2010 1:18 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* undeliverables clogging que's



 We are in the middle of a multi-domain migration from E2k3 servers to E2K7.
  We had an outside consultant come in and set this all up.  We had some time
 constraints and unrelated hardware issues that have complicated this process
 at times, and things have not always gone smoothly(imagine that).
  Everything seems to be working fine except that we have had reports of
 missing email and looked to find a que with hundreds of undelivered
 messages on the E2K7 Hub/CAS server.  80% or so of those messages are
 identified as undeliverable.  When we manually delete the undeliverables
 the rest of the messages seem to go out just fine.  I'll be happy to provide
 more details about our setup, but I'm thinking that may be something someone
 else has seen and may be able to point us in the right direction to get this
 resolved???



 thanks for any help.



 Jeff



 **

 Note:

 The information contained in this message may be privileged and confidential 
 and

 protected from disclosure.  If the reader of this message is not the intended

 recipient, or an employee or agent responsible for delivering this message to

 the intended recipient, you are hereby notified that any dissemination,

 distribution or copying of this communication is strictly prohibited. If you

 have received this communication in error, please notify us immediately by

 replying to the message and deleting it from your computer.

 **





Re: undeliverables clogging que's

2010-06-09 Thread Jeff Brown
*EXAMPLE #1*
Identity: SOL-EXCH1\7101\13399
Subject: Undeliverable: [Spam]  Make better food!
Internet Message ID: 2f3623af-1a77-4f11-8232-907fba43ce07
From Address: 
Status: Ready
Size (KB): 12
Message Source Name: DSN
Source IP: 255.255.255.255
SCL: -1
Date Received: 6/9/2010 1:46:12 PM
Expiration Time: 6/11/2010 1:46:12 PM
Last Error:
Queue ID: SOL-EXCH1\7101
Recipients:  1-77031-sojourncare.com?abai...@jasper.broadcastdeal.info
*EXAMPLE #2*
Identity: SOL-EXCH1\7101\13396
Subject: Undeliverable: [Spam]  Automobile Insurance � Compare and Save
Instantly.
Internet Message ID: a27817aa-817d-42a9-b5e0-a8bb9847ece1
From Address: 
Status: Ready
Size (KB): 11
Message Source Name: DSN
Source IP: 255.255.255.255
SCL: -1
Date Received: 6/9/2010 1:44:08 PM
Expiration Time: 6/11/2010 1:44:08 PM
Last Error: 421 4.4.2 Connection dropped
Queue ID: SOL-EXCH1\7101
Recipients:  2insure4l...@overcomingfa.com

NO From:  address on any of the undeliverables that are now in the que.
Recipient example 2 email domain not close to any accepted mail domain here.




On Wed, Jun 9, 2010 at 1:50 PM, Jay Dale jay.d...@3-gig.com wrote:

 Last time I saw something like this, it was employees with Out Of Office
 messages sent out into the world rather than limiting them to internal
 recipients or Contacts.  They got sent to spammers who then used them for
 NDR’s and spoofs.



 It might be a case where your network is secured but you just have to deal
 with the pains of the NDR’s until they eventually die down, which they will.



 *Jay Dale*

 I.T. Manager, 3GiG

 Mobile: 713.299.2541

 Email: jay.d...@3-gig.com



 Confidentiality Notice: This e-mail, including any attached files, may
 contain confidential and/or privileged information for the sole use of the
 intended recipient. If you are not the intended recipient, you are hereby
 notified that any review, dissemination or copying of this e-mail and
 attachments, if any, or the information contained herein, is strictly
 prohibited. If you are not the intended recipient (or authorized to receive
 information for the intended recipient), please contact the sender by reply
 e-mail and delete all copies of this message.





 *From:* Jeff Brown [mailto:2jbr...@gmail.com]
 *Sent:* Wednesday, June 09, 2010 12:18 PM

 *To:* MS-Exchange Admin Issues
 *Subject:* undeliverables clogging que's



 We are in the middle of a multi-domain migration from E2k3 servers to E2K7.
  We had an outside consultant come in and set this all up.  We had some time
 constraints and unrelated hardware issues that have complicated this process
 at times, and things have not always gone smoothly(imagine that).
  Everything seems to be working fine except that we have had reports of
 missing email and looked to find a que with hundreds of undelivered
 messages on the E2K7 Hub/CAS server.  80% or so of those messages are
 identified as undeliverable.  When we manually delete the undeliverables
 the rest of the messages seem to go out just fine.  I'll be happy to provide
 more details about our setup, but I'm thinking that may be something someone
 else has seen and may be able to point us in the right direction to get this
 resolved???



 thanks for any help.



 Jeff



Re: undeliverables clogging que's

2010-06-09 Thread Jeff Brown
I'll check on all that.  Thanks VERY much for all your help.

On Wed, Jun 9, 2010 at 2:14 PM, Kennedy, Jim
kennedy...@elyriaschools.orgwrote:

 Or….you said you have Symantec doing spam filtering on your exchange server
 also? It could be generating these NDR’s. Is it set up to deliver an NDR if
 it classifies an email as spam? If so that is very very bad.







 *From:* Kennedy, Jim [mailto:kennedy...@elyriaschools.org]
 *Sent:* Wednesday, June 09, 2010 3:07 PM

 *To:* MS-Exchange Admin Issues
 *Subject:* RE: undeliverables clogging que's



 Yep, that is an outgoing NDR from your Exchange server.  I stand by my
 initial guess if those messages are typical of what is filling your queue,
 outgoing  non-deliverables generated by your exchange server.  Your gateway
 tagged it as [Spam] then delivered it to your Exchange server. The exchange
 server can’t find the original recipient in your system so it generated the
 below outgoing NDR that is going to a bogus or non-functioning domain/email
 system.  The from is blank because Exchange does not want to create an
 endless loop of undeliverables, it knows it has enough problems already. J



 Turn up your gateway spam filtering so this doesn’t get to your exchange
 server or fix the recipient verification system on it. The latter would be
 better and if it doesn’t do that you should replace it.  Also look at your
 gateway and find the original message with that subject, that will give you
 some clues.







 *From:* Jeff Brown [mailto:2jbr...@gmail.com]
 *Sent:* Wednesday, June 09, 2010 3:00 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* Re: undeliverables clogging que's



 *EXAMPLE #1*

 Identity: SOL-EXCH1\7101\13399

 Subject: Undeliverable: [Spam]  Make better food!

 Internet Message ID: 2f3623af-1a77-4f11-8232-907fba43ce07

 From Address: 

 Status: Ready

 Size (KB): 12

 Message Source Name: DSN

 Source IP: 255.255.255.255

 SCL: -1

 Date Received: 6/9/2010 1:46:12 PM

 Expiration Time: 6/11/2010 1:46:12 PM

 Last Error:

 Queue ID: SOL-EXCH1\7101

 Recipients:  1-77031-sojourncare.com?abai...@jasper.broadcastdeal.info

 *EXAMPLE #2*

 Identity: SOL-EXCH1\7101\13396

 Subject: Undeliverable: [Spam]  Automobile Insurance � Compare and Save
 Instantly.

 Internet Message ID: a27817aa-817d-42a9-b5e0-a8bb9847ece1

 From Address: 

 Status: Ready

 Size (KB): 11

 Message Source Name: DSN

 Source IP: 255.255.255.255

 SCL: -1

 Date Received: 6/9/2010 1:44:08 PM

 Expiration Time: 6/11/2010 1:44:08 PM

 Last Error: 421 4.4.2 Connection dropped

 Queue ID: SOL-EXCH1\7101

 Recipients:  2insure4l...@overcomingfa.com



 NO From:  address on any of the undeliverables that are now in the que.
 Recipient example 2 email domain not close to any accepted mail domain here.









 On Wed, Jun 9, 2010 at 1:50 PM, Jay Dale jay.d...@3-gig.com wrote:

 Last time I saw something like this, it was employees with Out Of Office
 messages sent out into the world rather than limiting them to internal
 recipients or Contacts.  They got sent to spammers who then used them for
 NDR’s and spoofs.



 It might be a case where your network is secured but you just have to deal
 with the pains of the NDR’s until they eventually die down, which they will.



 *Jay Dale*

 I.T. Manager, 3GiG

 Mobile: 713.299.2541

 Email: jay.d...@3-gig.com



 Confidentiality Notice: This e-mail, including any attached files, may
 contain confidential and/or privileged information for the sole use of the
 intended recipient. If you are not the intended recipient, you are hereby
 notified that any review, dissemination or copying of this e-mail and
 attachments, if any, or the information contained herein, is strictly
 prohibited. If you are not the intended recipient (or authorized to receive
 information for the intended recipient), please contact the sender by reply
 e-mail and delete all copies of this message.





 *From:* Jeff Brown [mailto:2jbr...@gmail.com]
 *Sent:* Wednesday, June 09, 2010 12:18 PM


 *To:* MS-Exchange Admin Issues
 *Subject:* undeliverables clogging que's



 We are in the middle of a multi-domain migration from E2k3 servers to E2K7.
  We had an outside consultant come in and set this all up.  We had some time
 constraints and unrelated hardware issues that have complicated this process
 at times, and things have not always gone smoothly(imagine that).
  Everything seems to be working fine except that we have had reports of
 missing email and looked to find a que with hundreds of undelivered
 messages on the E2K7 Hub/CAS server.  80% or so of those messages are
 identified as undeliverable.  When we manually delete the undeliverables
 the rest of the messages seem to go out just fine.  I'll be happy to provide
 more details about our setup, but I'm thinking that may be something someone
 else has seen and may be able to point us in the right direction to get this
 resolved???



 thanks for any help.



 Jeff





Re: OT - BES upgrade

2010-06-01 Thread Jeff Brown
My advice, if you don't have to, don't do both upgrades at the same time.
 We did.  didn't have any big issues with upgrade/installations, but it's a
lot to take in for a busy production environment.  you won't know till you
in the middle of it what issues the exchange upgrade will present,
especially if you have developers trying to route stuff out through
exchange.

BES 5.0 is slick, but very different.  Since you are not already that
familiar with 4.x maybe it isn't such a deal for you.

On Tue, Jun 1, 2010 at 12:55 PM, Tammy George tammy.geo...@acadiau.cawrote:

  Looking for any offers of advice or suggestions –



 I will be upgrading our BES server from 4.1 to 5.0 in preparation for our
 Exchange upgrade from 2003 to 2010.  I have **no** experience with BES so
 I need to familiarize myself with it first and go from there.   Lots to
 learn!



 Just wondering if anyone is familiar with useful lists or forums?  Is the
 process straightforward or complex?



 If there’s anything at all that you’d be willing to share to get me
 started, it would be greatly appreciated!



 Thanks in advance.





 --

 Tammy George

 Sr. Systems Operator

 Technology Services

 Acadia University

 tel: (902) 585-1158

 fax: (902) 585-1066





Re: OT - BES upgrade

2010-06-01 Thread Jeff Brown
RIM support told me I could run it on R2, but only with the most recent
update.

On Tue, Jun 1, 2010 at 1:29 PM, Michael B. Smith mich...@smithcons.comwrote:

 Not supported.



 Regards,



 Michael B. Smith

 Consultant and Exchange MVP

 http://TheEssentialExchange.com



 *From:* Andy Shook [mailto:andy.sh...@peak10.com]
 *Sent:* Tuesday, June 01, 2010 2:29 PM

 *To:* MS-Exchange Admin Issues
 *Subject:* RE: OT - BES upgrade



 Why not R2?  Inquiring minds want to know….



 Shook



 *From:* John Cook [mailto:john.c...@pfsf.org]
 *Sent:* Tuesday, June 01, 2010 2:27 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* Re: OT - BES upgrade



 Well I just suffered through this so here goes - do backups at every stage,
 set up a new server (2008 SP2 not R2) if at all possible and migrate users
 (RIM has a tool for this)between servers. Upgrades are rarely clean or
 pretty. Open a case with RIM prior to starting, it will help mitigate down
 time.
 HTH
 John W. Cook
 Systems Administrator
 Partnership for Strong Families


 --

 *From*: Tammy George tammy.geo...@acadiau.ca
 *To*: MS-Exchange Admin Issues exchangelist@lyris.sunbelt-software.com
 *Sent*: Tue Jun 01 14:19:25 2010
 *Subject*: RE: OT - BES upgrade

 Yes.





 *From:* John Cook [mailto:john.c...@pfsf.org]
 *Sent:* June 1, 2010 3:14 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* Re: OT - BES upgrade



 Running on server 2003?
 John W. Cook
 Systems Administrator
 Partnership for Strong Families


 --

 *From*: Tammy George tammy.geo...@acadiau.ca
 *To*: MS-Exchange Admin Issues exchangelist@lyris.sunbelt-software.com
 *Sent*: Tue Jun 01 14:12:12 2010
 *Subject*: RE: OT - BES upgrade

 Version 4.1.6.10 and 36 users.







 *From:* John Cook [mailto:john.c...@pfsf.org]
 *Sent:* June 1, 2010 3:06 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* Re: OT - BES upgrade



 What version of 4.1? You'll need to upgrade to 4.1.7 first (DB changes)
 then 5. How many users?
 John W. Cook
 Systems Administrator
 Partnership for Strong Families


 --

 *From*: Tammy George tammy.geo...@acadiau.ca
 *To*: MS-Exchange Admin Issues exchangelist@lyris.sunbelt-software.com
 *Sent*: Tue Jun 01 13:55:48 2010
 *Subject*: OT - BES upgrade

 Looking for any offers of advice or suggestions –



 I will be upgrading our BES server from 4.1 to 5.0 in preparation for our
 Exchange upgrade from 2003 to 2010.  I have **no** experience with BES so
 I need to familiarize myself with it first and go from there.   Lots to
 learn!



 Just wondering if anyone is familiar with useful lists or forums?  Is the
 process straightforward or complex?



 If there’s anything at all that you’d be willing to share to get me
 started, it would be greatly appreciated!



 Thanks in advance.





 --

 Tammy George

 Sr. Systems Operator

 Technology Services

 Acadia University

 tel: (902) 585-1158

 fax: (902) 585-1066




 --

 CONFIDENTIALITY STATEMENT: The information transmitted, or contained or
 attached to or with this Notice is intended only for the person or entity to
 which it is addressed and may contain Protected Health Information (PHI),
 confidential and/or privileged material. Any review, transmission,
 dissemination, or other use of, and taking any action in reliance upon this
 information by persons or entities other than the intended recipient without
 the express written consent of the sender are prohibited. This information
 may be protected by the Health Insurance Portability and Accountability Act
 of 1996 (HIPAA), and other Federal and Florida laws. Improper or
 unauthorized use or disclosure of this information could result in civil
 and/or criminal penalties.
 Consider the environment. Please don't print this e-mail unless you really
 need to.

 This email and any attached files are confidential and intended solely for
 the intended recipient(s). If you are not the named recipient you should not
 read, distribute, copy or alter this email. Any views or opinions expressed
 in this email are those of the author and do not represent those of the
 company. Warning: Although precautions have been taken to make sure no
 viruses are present in this email, the company cannot accept responsibility
 for any loss or damage that arise from the use of this email or attachments.


 --

 CONFIDENTIALITY STATEMENT: The information transmitted, or contained or
 attached to or with this Notice is intended only for the person or entity to
 which it is addressed and may contain Protected Health Information (PHI),
 confidential and/or privileged material. Any review, transmission,
 dissemination, or other use of, and taking any action in reliance upon this
 information by persons or entities other than the intended recipient without
 the express written consent of the sender are prohibited. This information
 may be protected by the Health Insurance 

Re: OT - BES upgrade

2010-06-01 Thread Jeff Brown
As far as I know the only server product they are shy about is '08R2.  It'll
run on '03 just fine.

On Tue, Jun 1, 2010 at 1:43 PM, Tammy George tammy.geo...@acadiau.cawrote:

  Interesting...



 Could the new server be 2003 as opposed to 2008?







 *From:* John Cook [mailto:john.c...@pfsf.org]
 *Sent:* June 1, 2010 3:27 PM

 *To:* MS-Exchange Admin Issues
 *Subject:* Re: OT - BES upgrade



 Well I just suffered through this so here goes - do backups at every stage,
 set up a new server (2008 SP2 not R2) if at all possible and migrate users
 (RIM has a tool for this)between servers. Upgrades are rarely clean or
 pretty. Open a case with RIM prior to starting, it will help mitigate down
 time.
 HTH
 John W. Cook
 Systems Administrator
 Partnership for Strong Families


  --

 *From*: Tammy George tammy.geo...@acadiau.ca
 *To*: MS-Exchange Admin Issues exchangelist@lyris.sunbelt-software.com
 *Sent*: Tue Jun 01 14:19:25 2010
 *Subject*: RE: OT - BES upgrade

 Yes.





 *From:* John Cook [mailto:john.c...@pfsf.org]
 *Sent:* June 1, 2010 3:14 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* Re: OT - BES upgrade



 Running on server 2003?
 John W. Cook
 Systems Administrator
 Partnership for Strong Families


  --

 *From*: Tammy George tammy.geo...@acadiau.ca
 *To*: MS-Exchange Admin Issues exchangelist@lyris.sunbelt-software.com
 *Sent*: Tue Jun 01 14:12:12 2010
 *Subject*: RE: OT - BES upgrade

 Version 4.1.6.10 and 36 users.







 *From:* John Cook [mailto:john.c...@pfsf.org]
 *Sent:* June 1, 2010 3:06 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* Re: OT - BES upgrade



 What version of 4.1? You'll need to upgrade to 4.1.7 first (DB changes)
 then 5. How many users?
 John W. Cook
 Systems Administrator
 Partnership for Strong Families


  --

 *From*: Tammy George tammy.geo...@acadiau.ca
 *To*: MS-Exchange Admin Issues exchangelist@lyris.sunbelt-software.com
 *Sent*: Tue Jun 01 13:55:48 2010
 *Subject*: OT - BES upgrade

 Looking for any offers of advice or suggestions –



 I will be upgrading our BES server from 4.1 to 5.0 in preparation for our
 Exchange upgrade from 2003 to 2010.  I have **no** experience with BES so
 I need to familiarize myself with it first and go from there.   Lots to
 learn!



 Just wondering if anyone is familiar with useful lists or forums?  Is the
 process straightforward or complex?



 If there’s anything at all that you’d be willing to share to get me
 started, it would be greatly appreciated!



 Thanks in advance.





 --

 Tammy George

 Sr. Systems Operator

 Technology Services

 Acadia University

 tel: (902) 585-1158

 fax: (902) 585-1066




  --

 CONFIDENTIALITY STATEMENT: The information transmitted, or contained or
 attached to or with this Notice is intended only for the person or entity to
 which it is addressed and may contain Protected Health Information (PHI),
 confidential and/or privileged material. Any review, transmission,
 dissemination, or other use of, and taking any action in reliance upon this
 information by persons or entities other than the intended recipient without
 the express written consent of the sender are prohibited. This information
 may be protected by the Health Insurance Portability and Accountability Act
 of 1996 (HIPAA), and other Federal and Florida laws. Improper or
 unauthorized use or disclosure of this information could result in civil
 and/or criminal penalties.
 Consider the environment. Please don't print this e-mail unless you really
 need to.

 This email and any attached files are confidential and intended solely for
 the intended recipient(s). If you are not the named recipient you should not
 read, distribute, copy or alter this email. Any views or opinions expressed
 in this email are those of the author and do not represent those of the
 company. Warning: Although precautions have been taken to make sure no
 viruses are present in this email, the company cannot accept responsibility
 for any loss or damage that arise from the use of this email or attachments.


  --

 CONFIDENTIALITY STATEMENT: The information transmitted, or contained or
 attached to or with this Notice is intended only for the person or entity to
 which it is addressed and may contain Protected Health Information (PHI),
 confidential and/or privileged material. Any review, transmission,
 dissemination, or other use of, and taking any action in reliance upon this
 information by persons or entities other than the intended recipient without
 the express written consent of the sender are prohibited. This information
 may be protected by the Health Insurance Portability and Accountability Act
 of 1996 (HIPAA), and other Federal and Florida laws. Improper or
 unauthorized use or disclosure of this information could result in civil
 and/or criminal penalties.
 Consider the environment. Please don't print 

Re: OT - BES upgrade

2010-06-01 Thread Jeff Brown
Michael,

I may well be running in what is officially an unsupported environment,
but they didn't refuse to help me, and we were able to resolve the issues I
was having.  I am not able to use AD to login the the BES management
interface, as far as I know that is the only thing that doesn't work.  I am
running 5.0.1 MR2(bundle 117).That is running on a R2 HyperV VM and tied
to an E2k7 server environment.  Again, if I had it to do over again I'd
probably install 4.x for now.

On Tue, Jun 1, 2010 at 1:50 PM, May, Jeff j...@bbandt.com wrote:

  Same thing stated at WES as well…sp2 gets you R2, I think you can run but
 not officially supported, much like the SQL clustering, can run but not
 officially supported yet…..



 And yes, the new can be 2003, we are currently in the same boat, exchange
 2003 and BES 4.1.6, have a new environment with 5.0.1 on separate
 environment using BES Transporter to migrate, our biggest obstacle we are
 dealing with now is the named property limits within exchange 2003 being
 reached and causing migration issues for certain users.



 *From:* Michael B. Smith [mailto:mich...@smithcons.com]
 *Sent:* Tuesday, June 01, 2010 2:46 PM

 *To:* MS-Exchange Admin Issues
 *Subject:* RE: OT - BES upgrade



 Do you have a link? I called two weeks ago, and was told that R2 support
 wouldn’t be coming until 5.0 sp2.



 Thanks.



 Regards,



 Michael B. Smith

 Consultant and Exchange MVP

 http://TheEssentialExchange.com



 *From:* Jeff Brown [mailto:2jbr...@gmail.com]
 *Sent:* Tuesday, June 01, 2010 2:39 PM

 *To:* MS-Exchange Admin Issues
 *Subject:* Re: OT - BES upgrade



 RIM support told me I could run it on R2, but only with the most recent
 update.

 On Tue, Jun 1, 2010 at 1:29 PM, Michael B. Smith mich...@smithcons.com
 wrote:

 Not supported.



 Regards,



 Michael B. Smith

 Consultant and Exchange MVP

 http://TheEssentialExchange.com



 *From:* Andy Shook [mailto:andy.sh...@peak10.com]
 *Sent:* Tuesday, June 01, 2010 2:29 PM


 *To:* MS-Exchange Admin Issues

 *Subject:* RE: OT - BES upgrade



 Why not R2?  Inquiring minds want to know….



 Shook



 *From:* John Cook [mailto:john.c...@pfsf.org]
 *Sent:* Tuesday, June 01, 2010 2:27 PM

 *To:* MS-Exchange Admin Issues
 *Subject:* Re: OT - BES upgrade



 Well I just suffered through this so here goes - do backups at every stage,
 set up a new server (2008 SP2 not R2) if at all possible and migrate users
 (RIM has a tool for this)between servers. Upgrades are rarely clean or
 pretty. Open a case with RIM prior to starting, it will help mitigate down
 time.
 HTH
 John W. Cook
 Systems Administrator
 Partnership for Strong Families


  --

 *From*: Tammy George tammy.geo...@acadiau.ca
 *To*: MS-Exchange Admin Issues exchangelist@lyris.sunbelt-software.com
 *Sent*: Tue Jun 01 14:19:25 2010
 *Subject*: RE: OT - BES upgrade

 Yes.





 *From:* John Cook [mailto:john.c...@pfsf.org]
 *Sent:* June 1, 2010 3:14 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* Re: OT - BES upgrade



 Running on server 2003?
 John W. Cook
 Systems Administrator
 Partnership for Strong Families


  --

 *From*: Tammy George tammy.geo...@acadiau.ca
 *To*: MS-Exchange Admin Issues exchangelist@lyris.sunbelt-software.com
 *Sent*: Tue Jun 01 14:12:12 2010
 *Subject*: RE: OT - BES upgrade

 Version 4.1.6.10 and 36 users.







 *From:* John Cook [mailto:john.c...@pfsf.org]
 *Sent:* June 1, 2010 3:06 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* Re: OT - BES upgrade



 What version of 4.1? You'll need to upgrade to 4.1.7 first (DB changes)
 then 5. How many users?
 John W. Cook
 Systems Administrator
 Partnership for Strong Families


  --

 *From*: Tammy George tammy.geo...@acadiau.ca
 *To*: MS-Exchange Admin Issues exchangelist@lyris.sunbelt-software.com
 *Sent*: Tue Jun 01 13:55:48 2010
 *Subject*: OT - BES upgrade

 Looking for any offers of advice or suggestions –



 I will be upgrading our BES server from 4.1 to 5.0 in preparation for our
 Exchange upgrade from 2003 to 2010.  I have **no** experience with BES so
 I need to familiarize myself with it first and go from there.   Lots to
 learn!



 Just wondering if anyone is familiar with useful lists or forums?  Is the
 process straightforward or complex?



 If there’s anything at all that you’d be willing to share to get me
 started, it would be greatly appreciated!



 Thanks in advance.





 --

 Tammy George

 Sr. Systems Operator

 Technology Services

 Acadia University

 tel: (902) 585-1158

 fax: (902) 585-1066




  --

 CONFIDENTIALITY STATEMENT: The information transmitted, or contained or
 attached to or with this Notice is intended only for the person or entity to
 which it is addressed and may contain Protected Health Information (PHI),
 confidential and/or privileged material. Any review, transmission,
 dissemination, or other use of, and taking any action

Re: OT - BES upgrade

2010-06-01 Thread Jeff Brown
I too was given a 90 day temporary SRP.  All I did was ask.  It only came
with 5 CALS and would not allow me to transfer my NON-temp CAL's to it.

On Tue, Jun 1, 2010 at 2:40 PM, Bill Humphries nt...@hedgedigger.comwrote:

  They let you have two SRPs at one time without paying?  I know the
 transporter tools were free.

 We do have T support, but was told no multiple SRPs without buying another
 server license or this migration option.


 Martin Blackstone wrote:

  That’s how I did it, but I didn’t have to pay. It was free.



 *From:* Bill Humphries [mailto:nt...@hedgedigger.comnt...@hedgedigger.com]

 *Sent:* Tuesday, June 01, 2010 12:21 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* Re: OT - BES upgrade



 They don't really publicize it, but RIM has a migration plan you can
 purchase.  I think it costs $700, which I was willing to pay for the comfort
 , peace of mind and convenience.  It basically allows you to have a second
 SRP ID and your new server and old server both connected to the BB network
 for 90 days.  With this and the free BES migration tools, I simply setup my
 new server and moved users from the old system to the new one at my leisure.
 No moving databases, knife edge cut-overs or other silliness.  The migration
 was easy, with no downtime for users.

 The only effect the migration had on users was each BB was restarted
 remotely one time when I moved the specific user account.to the new
 server.


 Bill



 Tammy George wrote:

 Looking for any offers of advice or suggestions –



 I will be upgrading our BES server from 4.1 to 5.0 in preparation for our
 Exchange upgrade from 2003 to 2010.  I have **no** experience with BES so
 I need to familiarize myself with it first and go from there.   Lots to
 learn!



 Just wondering if anyone is familiar with useful lists or forums?  Is the
 process straightforward or complex?



 If there’s anything at all that you’d be willing to share to get me
 started, it would be greatly appreciated!



 Thanks in advance.





 --

 Tammy George

 Sr. Systems Operator

 Technology Services

 Acadia University

 tel: (902) 585-1158

 fax: (902) 585-1066









Re: Anyone using FortiGate as a spam filter?

2010-05-06 Thread Jeff Brown
We paid for the service but turned it off, it gave almost no control over
what it does with spam, was difficult to know if missing mail was being
rejected by the filter or something else...  very little management
options.

On Thu, May 6, 2010 at 10:24 AM, Jason Gurtz jasongu...@npumail.com wrote:

 Looking for some operational experiences.

 ~JasonG





Re: TLS on Exchange 2003

2010-04-23 Thread Jeff Brown
Not sure you have given enough information to get good help, but once you
create that secondary smtp tls connector all mail to that named domain will
try to go through that connector.  If TLS is not correctly setup or enabled
on the other end the mail will sit in that que.  We had a cert for OWA and
Active sync already setup and didn't have to do any further cert
configuration for TLS to work.

On Fri, Apr 23, 2010 at 11:01 AM, Chris Drobny
cdro...@lmsintellibound.comwrote:

  So I have googled this but not finding any real clear instructions.  I
 don't understand if I create a 2nd smtp server for comms between a user
 in my world and someone on the outside how does exchange know to use the
 other smtp server??  I also am a little unclear on the x.509 cert, I
 don't see how to get this one on godaddy or verisign anyone have any
 experience  in this??

 Chris Drobny
 Network/Systems Administrator
 LMS Intellibound, Inc.
 cdro...@lmsintellibound.com
 770.724.0562 office
 404.797.9710 cell



BES question

2010-04-01 Thread Jeff Brown
Sorry if this is off-topic.  I am growing impatient trying to get an answer
to this question directly from RIM.

We are running a single domain, W2K3 servers and E2K3 and BES 4.1.x.x.x.x

We are creating a new domain on the same physical network, W2k8, E2K7 and
BES x.x.x(we haven't decided yet).  We are NOT MIGRATING.  We will move a
few people from the existing domain to the new domain, test everything
thoroughly.  After we are satisfied that all works, we are creating 2 new
domains and will be moving some people from the current domain to the new
domains, and therefore to the new Exchange environment.  We are pretty sure
we have the exchange issues handled, but don't know what it will be like or
if it is possible to stand up another BES server on the same network.  We
have a spare BES license, so licensing isn't a concern.  we have 250 cals
and are current with RIM support.

anyone out there setup this way?  Know if it can be done?

Thanks for any help.

jeff


Re: BES question

2010-04-01 Thread Jeff Brown
Thank you all.  I needed that reassurance to get this kicked off.  Very
helpful.

On Thu, Apr 1, 2010 at 3:06 PM, May, Jeff j...@bbandt.com wrote:

  We are in a similar method, as long as you have CALs and a valid SRP you
 can do as many as you need on the same network.  We have several networks
 with several BES, currently are running two production, one at 4.1 and
 another at 5.0, if you go the 5.0 route make sure your CAL is at least a 20
 user CAL or more, if not you will get an error stating you are not running
 enterprise and they will hit you up for 3K to finish your install.  Past
 that, should be no issues at all running this method.



 *From:* Jeff Brown [mailto:2jbr...@gmail.com]
 *Sent:* Thursday, April 01, 2010 3:49 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* BES question



 Sorry if this is off-topic.  I am growing impatient trying to get an answer
 to this question directly from RIM.



 We are running a single domain, W2K3 servers and E2K3 and BES 4.1.x.x.x.x



 We are creating a new domain on the same physical network, W2k8, E2K7 and
 BES x.x.x(we haven't decided yet).  We are NOT MIGRATING.  We will move a
 few people from the existing domain to the new domain, test everything
 thoroughly.  After we are satisfied that all works, we are creating 2 new
 domains and will be moving some people from the current domain to the new
 domains, and therefore to the new Exchange environment.  We are pretty sure
 we have the exchange issues handled, but don't know what it will be like or
 if it is possible to stand up another BES server on the same network.  We
 have a spare BES license, so licensing isn't a concern.  we have 250 cals
 and are current with RIM support.



 anyone out there setup this way?  Know if it can be done?



 Thanks for any help.



 jeff



Re: secure email to external domain

2010-01-19 Thread Jeff Brown
Thank you Michael,  just what I was hoping for, validation that it is
doable.

On Tue, Jan 19, 2010 at 6:29 PM, Michael B. Smith mich...@smithcons.comwrote:

 Is the hosted exchange 2007 domain using a third party cert for SMTP or a
 self-signed cert?



 You can use “another” IP address for your Exchange 2003 server, create a
 new SMTP virtual server, mark it for TLS, load your local cert and the
 exchange 2007 cert, and set the address space to the remote server.



 (That’s a quick overview, there are still white papers online at Microsoft
 about setting up Exchange 2003 for TLS.)



 *From:* 2jbr...@gmail.com [mailto:2jbr...@gmail.com]
 *Sent:* Tuesday, January 19, 2010 5:26 PM

 *To:* MS-Exchange Admin Issues
 *Subject:* secure email to external domain



 Am I chasing my tail trying to find a way to get setup for secure email
 with an outside company on a hosted exchange platform? Their IT support is
 pretty weak. We are running E2k3 on W2003 all with latest SP's. FE/BE setup
 with 180+ mailboxes and BB's for all users with BES. Don't think the BB
 piece matters at all, I'm just wondering if there is any chance we can get
 the certificate exchange to work between my exchange domain and a hosted
 exchange 2007 domain? Any recomendations/thoughts?

 Thanks.

 Jeff



Re: BB Outage

2009-12-23 Thread Jeff Brown
7:15 central time and our BB data services are still down. 13+ hours.

On Wed, Dec 23, 2009 at 12:13 AM, Jeff Brown 2jbr...@gmail.com wrote:

 I am on BES, and am not getting any messages.  Have reset my phone, still
 no go.  Will I have to reboot BES server?

 On Wed, Dec 23, 2009 at 12:10 AM, Peter Sam srir...@hotmail.com wrote:

  BES (only BES) was recovered at 12:20 am EST;  there are no backlogs on
 the RIM side but your local infrastructure (and wireless network provider)
 may still be processing these backlogs and maybe queued up.



 --
 Date: Wed, 23 Dec 2009 00:05:51 -0600
 Subject: Re: BB Outage
 From: 2jbr...@gmail.com
 To: exchangelist@lyris.sunbelt-software.com


 Seeing posts on Blackberry website indicating that some have service
 restored.  Nothing working here as far as I can tell.  We first noticed that
 the internet wasn't working for our BB's, started about noon central, then
 we lost email service between 5:30 and 6 pm.  This is 6 hours long for us at
 this point.

 On Tue, Dec 22, 2009 at 9:00 PM, Martin Blackstone mblackst...@gmail.com
  wrote:

  This is the kind of chiz that makes people want iPhones!



 *
 *



 --
 Hotmail: Trusted email with Microsoft’s powerful SPAM protection. Sign up
 now. http://clk.atdmt.com/GBL/go/177141664/direct/01/





Re: BB Outage

2009-12-23 Thread Jeff Brown
Don't believe the press release.  It is BES issue, is NOT resolved for
everyone.  I DO have support contract with RIM, just off phone, tech
basically offered to troubleshoot if you want to but indicated that
problem is not on my end.

On Wed, Dec 23, 2009 at 7:54 AM, chosha2...@yahoo.com wrote:

 Is this affecting BIS, BES, or both? I'm receiving messages just fine via
 BIS on Verizon.
 --
 *From: * Martin Blackstone mblackst...@gmail.com
 *Date: *Tue, 22 Dec 2009 18:31:21 -0800
 *To: *MS-Exchange Admin Issuesexchangelist@lyris.sunbelt-software.com
 *Subject: *RE: BB Outage

  Seems we are having a similar issue. No BB service at all.



 *From:* Jeff Brown [mailto:2jbr...@gmail.com]
 *Sent:* Tuesday, December 22, 2009 6:20 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* BB Outage



 BB outage in Tulsa, Ok.  Verizon service.  Have buddy on ATT says his BB
 network down as well.  Also heard from friend in Kansas City, no BB data
 services Sprint and Verizon for his company.  anyone else monitoring the
 group after hours down?



 Jeff



Re: BB Outage

2009-12-23 Thread Jeff Brown
That IS interesting, IF you are a BES customer.  unless you typically go 12
to 15 hours with no email.

On Wed, Dec 23, 2009 at 8:56 AM, Kevin Lundy klu...@gmail.com wrote:

 Its been interesting reading that this has been 100 pct failure.  I've
 not noticed any impact at all.

 On 12/23/09, Jeff Brown 2jbr...@gmail.com wrote:
  Don't believe the press release.  It is BES issue, is NOT resolved for
  everyone.  I DO have support contract with RIM, just off phone, tech
  basically offered to troubleshoot if you want to but indicated that
  problem is not on my end.
 
  On Wed, Dec 23, 2009 at 7:54 AM, chosha2...@yahoo.com wrote:
 
  Is this affecting BIS, BES, or both? I'm receiving messages just fine
 via
  BIS on Verizon.
  --
  *From: * Martin Blackstone mblackst...@gmail.com
  *Date: *Tue, 22 Dec 2009 18:31:21 -0800
  *To: *MS-Exchange Admin Issuesexchangelist@lyris.sunbelt-software.com
  *Subject: *RE: BB Outage
 
   Seems we are having a similar issue. No BB service at all.
 
 
 
  *From:* Jeff Brown [mailto:2jbr...@gmail.com]
  *Sent:* Tuesday, December 22, 2009 6:20 PM
  *To:* MS-Exchange Admin Issues
  *Subject:* BB Outage
 
 
 
  BB outage in Tulsa, Ok.  Verizon service.  Have buddy on ATT says his
 BB
  network down as well.  Also heard from friend in Kansas City, no BB data
  services Sprint and Verizon for his company.  anyone else monitoring the
  group after hours down?
 
 
 
  Jeff
 
 

 --
 Sent from my mobile device




Re: BB Outage

2009-12-23 Thread Jeff Brown
I support a healthcare company.  We rely pretty heavily on BB email to
communicate in the field.  At least phone service still works.  We went down
between 5:30 and 6 last night and are still down.  RIM support did not seem
at all surprised that we are still down.

On Wed, Dec 23, 2009 at 9:03 AM, Jason Gurtz jasongu...@npumail.com wrote:

 I noticed SRP connection drop at around 22:30, then came back up at 00:22.
 Other than that no issue.  Feeling lucky with all the other reports out
 there...

 ~JasonG

  -Original Message-
  From: Kevin Lundy [mailto:klu...@gmail.com]
  Sent: Wednesday, December 23, 2009 10:01
  To: MS-Exchange Admin Issues
  Subject: Re: BB Outage
 
  Yep, BES.  And that's funny, no email :)
 
  On 12/23/09, Jeff Brown 2jbr...@gmail.com wrote:
   That IS interesting, IF you are a BES customer.  unless you typically
  go 12
   to 15 hours with no email.
  
   On Wed, Dec 23, 2009 at 8:56 AM, Kevin Lundy klu...@gmail.com wrote:
  
   Its been interesting reading that this has been 100 pct failure.
 I've
   not noticed any impact at all.
  
   On 12/23/09, Jeff Brown 2jbr...@gmail.com wrote:
Don't believe the press release.  It is BES issue, is NOT resolved
  for
everyone.  I DO have support contract with RIM, just off phone,
 tech
basically offered to troubleshoot if you want to but indicated
  that
problem is not on my end.
   
On Wed, Dec 23, 2009 at 7:54 AM, chosha2...@yahoo.com wrote:
   
Is this affecting BIS, BES, or both? I'm receiving messages just
  fine
   via
BIS on Verizon.
--
*From: * Martin Blackstone mblackst...@gmail.com
*Date: *Tue, 22 Dec 2009 18:31:21 -0800
*To: *MS-Exchange Admin Issuesexchangel...@lyris.sunbelt-
  software.com
*Subject: *RE: BB Outage
   
 Seems we are having a similar issue. No BB service at all.
   
   
   
*From:* Jeff Brown [mailto:2jbr...@gmail.com]
*Sent:* Tuesday, December 22, 2009 6:20 PM
*To:* MS-Exchange Admin Issues
*Subject:* BB Outage
   
   
   
BB outage in Tulsa, Ok.  Verizon service.  Have buddy on ATT says
  his
   BB
network down as well.  Also heard from friend in Kansas City, no
 BB
data
services Sprint and Verizon for his company.  anyone else
  monitoring
the
group after hours down?
   
   
   
Jeff
   
   
  
   --
   Sent from my mobile device
  
  
  
 
  --
  Sent from my mobile device






Re: BB Outage

2009-12-23 Thread Jeff Brown
Just heard from a friend here in Tulsa, his ATT BES service came back up
before he went to bed last night.  We are on Verizon and still down.

On Wed, Dec 23, 2009 at 9:06 AM, Jeff Brown 2jbr...@gmail.com wrote:

 I support a healthcare company.  We rely pretty heavily on BB email to
 communicate in the field.  At least phone service still works.  We went down
 between 5:30 and 6 last night and are still down.  RIM support did not seem
 at all surprised that we are still down.

 On Wed, Dec 23, 2009 at 9:03 AM, Jason Gurtz jasongu...@npumail.comwrote:

 I noticed SRP connection drop at around 22:30, then came back up at 00:22.
 Other than that no issue.  Feeling lucky with all the other reports out
 there...

 ~JasonG

  -Original Message-
  From: Kevin Lundy [mailto:klu...@gmail.com]
  Sent: Wednesday, December 23, 2009 10:01
  To: MS-Exchange Admin Issues
  Subject: Re: BB Outage
 
  Yep, BES.  And that's funny, no email :)
 
  On 12/23/09, Jeff Brown 2jbr...@gmail.com wrote:
   That IS interesting, IF you are a BES customer.  unless you typically
  go 12
   to 15 hours with no email.
  
   On Wed, Dec 23, 2009 at 8:56 AM, Kevin Lundy klu...@gmail.com
 wrote:
  
   Its been interesting reading that this has been 100 pct failure.
 I've
   not noticed any impact at all.
  
   On 12/23/09, Jeff Brown 2jbr...@gmail.com wrote:
Don't believe the press release.  It is BES issue, is NOT resolved
  for
everyone.  I DO have support contract with RIM, just off phone,
 tech
basically offered to troubleshoot if you want to but indicated
  that
problem is not on my end.
   
On Wed, Dec 23, 2009 at 7:54 AM, chosha2...@yahoo.com wrote:
   
Is this affecting BIS, BES, or both? I'm receiving messages just
  fine
   via
BIS on Verizon.
--
*From: * Martin Blackstone mblackst...@gmail.com
*Date: *Tue, 22 Dec 2009 18:31:21 -0800
*To: *MS-Exchange Admin Issuesexchangel...@lyris.sunbelt-
  software.com
*Subject: *RE: BB Outage
   
 Seems we are having a similar issue. No BB service at all.
   
   
   
*From:* Jeff Brown [mailto:2jbr...@gmail.com]
*Sent:* Tuesday, December 22, 2009 6:20 PM
*To:* MS-Exchange Admin Issues
*Subject:* BB Outage
   
   
   
BB outage in Tulsa, Ok.  Verizon service.  Have buddy on ATT says
  his
   BB
network down as well.  Also heard from friend in Kansas City, no
 BB
data
services Sprint and Verizon for his company.  anyone else
  monitoring
the
group after hours down?
   
   
   
Jeff
   
   
  
   --
   Sent from my mobile device
  
  
  
 
  --
  Sent from my mobile device







Re: Qwery: Is you BB via BES Working?

2009-12-23 Thread Jeff Brown
Tulsa, Verizon BES down.

On Wed, Dec 23, 2009 at 9:33 AM, Martin Blackstone mblackst...@gmail.comwrote:

  Mine on ATT is back up.

 How about Verizon or Sprint?





Re: Qwery: Is you BB via BES Working?

2009-12-23 Thread Jeff Brown
yes, and a RIM tech had us run a telnet test for port 3101 that probably
verified same thing...

On Wed, Dec 23, 2009 at 11:52 AM, Steve Ens stevey...@gmail.com wrote:

 Jeff
 Have you tried testing the connection using the server config tool?
 Steve

 On Wed, Dec 23, 2009 at 11:48 AM, Jeff Brown 2jbr...@gmail.com wrote:

 Am I really the only one on this list who's BES is still SRP down?(yes, I
 have rebooted server, no, RIM techs still seem to NOT be surprised that I am
 still down)


 On Wed, Dec 23, 2009 at 10:39 AM, Peter Sam srir...@hotmail.com wrote:

 We have a very large customer base and we have all the carriers -
 nationwide (US) and international.  Our BES servers started sending
 intermittenly at around 11:55 PM EST and then stopped for a while;  then it
 started back at around 2:15 am and by 3:45 am EST, all queues dissipated and
 all pending messages were delivered.

 Lookups started working at 3:15 am EST.

 BIS Service started working for us intermittenly at around 12 am on 12/23
 but I didn't see all messages till 4:30 am (12/23) when most of the BIS
 messages started to flow in.

 At this time, all our BES related services
 (BES/BIS/Browser/MDS/Lookups/pin-to-pin/BlackberryIM/activation) --  all are
 working fine - for the past 8 hours.

 (All times in EST)



 --
 Subject: RE: Qwery: Is you BB via BES Working?
 Date: Wed, 23 Dec 2009 11:19:05 -0500
 From: mike.cel...@rfsworld.com
 To: exchangelist@lyris.sunbelt-software.com

  We’ve got a BES with BBs from Sprint, Nextel, T-Mobile, ATT, and
 Verizon and they are all working in CT.



 Mike



 *From:* Martin Blackstone [mailto:mblackst...@gmail.com]
 *Sent:* Wednesday, December 23, 2009 10:33 AM
 *To:* MS-Exchange Admin Issues
 *Subject:* Qwery: Is you BB via BES Working?



 Mine on ATT is back up.

 How about Verizon or Sprint?



 --
 Hotmail: Trusted email with powerful SPAM protection. Sign up 
 now.http://clk.atdmt.com/GBL/go/177141665/direct/01/






Re: Qwery: Is you BB via BES Working?

2009-12-23 Thread Jeff Brown
was verifying that the port SRP uses was not being blocked on my end, I
believe.

On Wed, Dec 23, 2009 at 12:02 PM, Don Andrews don.andr...@safeway.comwrote:

 Think the telnet test only verifies basic network connectivity, not SRP
 activation.


 -
 Sent from my BlackBerry Wireless Handheld

 --
  *From*: Jeff Brown 2jbr...@gmail.com
 *To*: MS-Exchange Admin Issues exchangelist@lyris.sunbelt-software.com
 *Sent*: Wed Dec 23 10:59:50 2009
 *Subject*: Re: Qwery: Is you BB via BES Working?

 yes, and a RIM tech had us run a telnet test for port 3101 that probably
 verified same thing...

 On Wed, Dec 23, 2009 at 11:52 AM, Steve Ens stevey...@gmail.com wrote:

 Jeff
 Have you tried testing the connection using the server config tool?
 Steve

 On Wed, Dec 23, 2009 at 11:48 AM, Jeff Brown 2jbr...@gmail.com wrote:

 Am I really the only one on this list who's BES is still SRP down?(yes, I
 have rebooted server, no, RIM techs still seem to NOT be surprised that I am
 still down)


 On Wed, Dec 23, 2009 at 10:39 AM, Peter Sam srir...@hotmail.com wrote:

 We have a very large customer base and we have all the carriers -
 nationwide (US) and international.  Our BES servers started sending
 intermittenly at around 11:55 PM EST and then stopped for a while;  then it
 started back at around 2:15 am and by 3:45 am EST, all queues dissipated 
 and
 all pending messages were delivered.

 Lookups started working at 3:15 am EST.

 BIS Service started working for us intermittenly at around 12 am on
 12/23 but I didn't see all messages till 4:30 am (12/23) when most of the
 BIS messages started to flow in.

 At this time, all our BES related services
 (BES/BIS/Browser/MDS/Lookups/pin-to-pin/BlackberryIM/activation) --  all 
 are
 working fine - for the past 8 hours.

 (All times in EST)



 --
 Subject: RE: Qwery: Is you BB via BES Working?
 Date: Wed, 23 Dec 2009 11:19:05 -0500
 From: mike.cel...@rfsworld.com
 To: exchangelist@lyris.sunbelt-software.com

  We’ve got a BES with BBs from Sprint, Nextel, T-Mobile, ATT, and
 Verizon and they are all working in CT.



 Mike



 *From:* Martin Blackstone [mailto:mblackst...@gmail.com]
 *Sent:* Wednesday, December 23, 2009 10:33 AM
 *To:* MS-Exchange Admin Issues
 *Subject:* Qwery: Is you BB via BES Working?



 Mine on ATT is back up.

 How about Verizon or Sprint?



 --
 Hotmail: Trusted email with powerful SPAM protection. Sign up 
 now.http://clk.atdmt.com/GBL/go/177141665/direct/01/







BB Outage

2009-12-22 Thread Jeff Brown
BB outage in Tulsa, Ok.  Verizon service.  Have buddy on ATT says his BB
network down as well.  Also heard from friend in Kansas City, no BB data
services Sprint and Verizon for his company.  anyone else monitoring the
group after hours down?

Jeff


Re: BB Outage

2009-12-22 Thread Jeff Brown
Seeing posts on Blackberry website indicating that some have service
restored.  Nothing working here as far as I can tell.  We first noticed that
the internet wasn't working for our BB's, started about noon central, then
we lost email service between 5:30 and 6 pm.  This is 6 hours long for us at
this point.

On Tue, Dec 22, 2009 at 9:00 PM, Martin Blackstone mblackst...@gmail.comwrote:

  This is the kind of chiz that makes people want iPhones!



 *
 *



Re: BB Outage

2009-12-22 Thread Jeff Brown
I am on BES, and am not getting any messages.  Have reset my phone, still no
go.  Will I have to reboot BES server?

On Wed, Dec 23, 2009 at 12:10 AM, Peter Sam srir...@hotmail.com wrote:

  BES (only BES) was recovered at 12:20 am EST;  there are no backlogs on
 the RIM side but your local infrastructure (and wireless network provider)
 may still be processing these backlogs and maybe queued up.



 --
 Date: Wed, 23 Dec 2009 00:05:51 -0600
 Subject: Re: BB Outage
 From: 2jbr...@gmail.com
 To: exchangelist@lyris.sunbelt-software.com


 Seeing posts on Blackberry website indicating that some have service
 restored.  Nothing working here as far as I can tell.  We first noticed that
 the internet wasn't working for our BB's, started about noon central, then
 we lost email service between 5:30 and 6 pm.  This is 6 hours long for us at
 this point.

 On Tue, Dec 22, 2009 at 9:00 PM, Martin Blackstone 
 mblackst...@gmail.comwrote:

  This is the kind of chiz that makes people want iPhones!



 *
 *



 --
 Hotmail: Trusted email with Microsoft’s powerful SPAM protection. Sign up
 now. http://clk.atdmt.com/GBL/go/177141664/direct/01/



Re: defrag

2009-09-24 Thread Jeff Brown
My db's are on a separate data partition.  The system partition is what I
am trying to defrag.  Would you be hesitant to do that as well?

On Thu, Sep 24, 2009 at 3:15 AM, Sobey, Richard A r.so...@imperial.ac.ukwrote:

  Move the database onto a dedicated partition. I wouldn’t run a defrag
 utility within 10U of my mailbox servers!



 Richard



 *From:* bounce-8665541-8066...@lyris.sunbelt-software.com [mailto:
 bounce-8665541-8066...@lyris.sunbelt-software.com] *On Behalf Of *Jeff
 Brown
 *Sent:* 23 September 2009 20:18

 *To:* MS-Exchange Admin Issues
 *Subject:* defrag



 I googled and got more confused, so I figured I'd open myself up to
 ridicule and maybe start a fight in here.  running E2k3 on W2K3 servers.  On
 one of my mailbox servers the data partition that has the ex db files shows
 96% fragmentation. (looking at file fragmentation using windows sys tools
 defrag util).



 I've seen posts that say the util will skip the .edb file so it's ok to go
 ahead and run, but I think I've actually seen defrag hang on an .edb in the
 past.



 What do you recomend/use IF ANYTHING to do file level defrag of files on a
 partition with exchange files on it.  I am NOT asking about defraging the
 exchange files.



 Thanks for any insight.



 jeff



defrag

2009-09-23 Thread Jeff Brown
I googled and got more confused, so I figured I'd open myself up to ridicule
and maybe start a fight in here.  running E2k3 on W2K3 servers.  On one of
my mailbox servers the data partition that has the ex db files shows 96%
fragmentation. (looking at file fragmentation using windows sys tools defrag
util).
I've seen posts that say the util will skip the .edb file so it's ok to go
ahead and run, but I think I've actually seen defrag hang on an .edb in the
past.

What do you recomend/use IF ANYTHING to do file level defrag of files on a
partition with exchange files on it.  I am NOT asking about defraging the
exchange files.

Thanks for any insight.

jeff


monitoring tips?

2009-08-03 Thread Jeff Brown
Anyone have something they are proud of that confirms backup/log file
removal for multiple exchange servers?  FE/BE setup with 3 mailbox servers,
all running E2k3, W2K3 servers.  All standard versions.  (probably has to be
free for me to be able to use it).  Thanks for any help/suggestions.


Re: Anybody Out There?

2009-08-03 Thread Jeff Brown
here watching...

On Mon, Aug 3, 2009 at 10:46 AM, Matt Moore mattmoore...@hotmail.comwrote:

 





Re: monitoring tips?

2009-08-03 Thread Jeff Brown
That probably IS what I'm looking for, but Nagios is linux only tool, is it
not?  I'm not currently running any linux boxes.  :(

On Mon, Aug 3, 2009 at 10:55 AM, Andrew Greene
agre...@cityofanderson.comwrote:

  I use Nagios for this (in a roundabout way) – logs are on a separate
 drive from system and the information stores, so what I do is using
 NSClient, run checks to make sure that I’m not using more than 2% of the
 drive. If I’m using more than that on a drive, it means that the backup
 hasn’t run and the logs haven’t been removed. Do that for each of your
 servers. Not sure if this is will help or is what you’re looking for, but
 it’s what I use.



 Andrew Greene

 IS Technician / Webmaster

 City of Anderson



 *From:* Jeff Brown [mailto:2jbr...@gmail.com]
 *Sent:* Monday, August 03, 2009 11:45 AM
 *To:* MS-Exchange Admin Issues
 *Subject:* monitoring tips?



 Anyone have something they are proud of that confirms backup/log file
 removal for multiple exchange servers?  FE/BE setup with 3 mailbox servers,
 all running E2k3, W2K3 servers.  All standard versions.  (probably has to be
 free for me to be able to use it).  Thanks for any help/suggestions.



Re: monitoring tips?

2009-08-03 Thread Jeff Brown
using NT Backup on the Ex boxes to disk, then BackupExec puts them to tape.

On Mon, Aug 3, 2009 at 11:07 AM, Sherry Abercrombie saber...@gmail.comwrote:

 What backup software are you using?


 On Mon, Aug 3, 2009 at 11:02 AM, Jeff Brown 2jbr...@gmail.com wrote:

 That probably IS what I'm looking for, but Nagios is linux only tool, is
 it not?  I'm not currently running any linux boxes.  :(


 On Mon, Aug 3, 2009 at 10:55 AM, Andrew Greene 
 agre...@cityofanderson.com wrote:

  I use Nagios for this (in a roundabout way) – logs are on a separate
 drive from system and the information stores, so what I do is using
 NSClient, run checks to make sure that I’m not using more than 2% of the
 drive. If I’m using more than that on a drive, it means that the backup
 hasn’t run and the logs haven’t been removed. Do that for each of your
 servers. Not sure if this is will help or is what you’re looking for, but
 it’s what I use.



 Andrew Greene

 IS Technician / Webmaster

 City of Anderson



 *From:* Jeff Brown [mailto:2jbr...@gmail.com]
 *Sent:* Monday, August 03, 2009 11:45 AM
 *To:* MS-Exchange Admin Issues
 *Subject:* monitoring tips?



 Anyone have something they are proud of that confirms backup/log file
 removal for multiple exchange servers?  FE/BE setup with 3 mailbox servers,
 all running E2k3, W2K3 servers.  All standard versions.  (probably has to be
 free for me to be able to use it).  Thanks for any help/suggestions.





 --
 Sherry Abercrombie

 Any sufficiently advanced technology is indistinguishable from magic.
 Arthur C. Clarke



Re: Blackberry GAL

2009-07-27 Thread Jeff Brown
We use a 3rd party product, Add2Exchange to sync PF contact list to
individual mailboxes.  200 BB's, Exchange 2003, BES 4.6.  We've used the
product for 2 going on 3 years now and are very happy with it.
diditbettersoftware.com

On Mon, Jul 27, 2009 at 3:15 PM, Alverson, Tom (Xetron) 
tom.alver...@ngc.com wrote:

  How do you publish the GAL to a Public FoldeÿÿÂ  Do you mean just a one
 time manual export of the GAL and then import that into a Public Folder or
 is there some way to have an automatically updated copy of the GAL in a
 public contacts folder (without using a 3rd party app).



 How do you use DM to sync a PF to your device?



 Also, syncing a PF contact folder to your Blackberry requires 5.0 firmware
 (which does not exist for any of our devices) and 5.0 BES server, correct??



 Tom



 *From:* Wulff Jr, Ronald J. [mailto:rwu...@reedsmith.com]
 *Sent:* Thursday, July 23, 2009 3:42 PM

 *To:* MS-Exchange Admin Issues
 *Subject:* RE: Blackberry GAL



 Publish your GAL to a public Folder, and then use desktop manager to synch
 the public folder to the device.  In 5.0 you can do wireless synch of the PF
 as well



 *Ronald Wulff Jr*
 412.288.3601
 rwu...@reedsmith.com

 Reed Smith LLP
 20 Stanwix St

 Suite 1200
 Pittsburgh, PA 15222



 *From:* Harry Singh [mailto:hbo...@gmail.com]
 *Sent:* Thursday, July 23, 2009 3:41 PM

 *To:* MS-Exchange Admin Issues
 *Subject:* Re: Blackberry GAL



 Blackberry should really provide the admins the right to publish the
 Exchange GAL. So when i'm composing a message and i start typing in a
 persons name, the exchange GAL and my local contacts get auto-populated. I
 really don't see the resource/bandwidth/technical overhead with getting that
 done ( or I could just be resource/bandwidth/technically short-sighted)

 Maybe it's just my overall inexperience with blackberry and their
 respective shortcuts, but I'm really looking to type less, especially when
 it comes to the mundane part of adding the e-mail address. If I, or anyone,
 constantly e-mails a group of people --- is there a faster way of adding a
 frequently used recipient ?

 On Thu, Jul 23, 2009 at 3:07 PM, Don Andrews don.andr...@safeway.com
 wrote:

 I believe you can choose to add the results of a lookup to your contacts
 (we discourage this as it makes a static copy of a dynamic contact)



 Donÿÿ™t know about your second question unless youÿÿ™d like to prefix the
 field that is the sort key with a number or something.
  --

 *From:* Harry Singh [mailto:hbo...@gmail.com]
 *Sent:* Thursday, July 23, 2009 7:46 AM
 *To:* MS-Exchange Admin Issues
 *Subject:* OT: Blackberry GAL



 All --

 We recently made the move from Goodlink to BES. I have a few annoyances,
 but one of the main and most annoying issues i'm hoping there is an answer
 for is:

 #61623  Is there a way to default to the Exchange GAL when typing
 in a name during e-mail composition ? Right now, the list populates with
 your personal contacts within outlook and I'll have to lookup in order to
 find a name in the Exchange GAL..

 #61623  Is there a way to add or auto-populate a blackberry
 device with the most frequently e-mailed ? In other words, lets say you
 have 20 contacts with the last name Singh but frequently only e-mail 1 of
 them, is there a way to trick the blackberry to populate that Singh first
 ?


 Thanks,






 * * *



 This E-mail, along with any attachments, is considered confidential and may
 well be legally privileged. If you have received it in error, you are on
 notice of its status. Please notify us immediately by reply e-mail and then
 delete this message from your system. Please do not copy it or use it for
 any purposes, or disclose its contents to any other person. Thank you for
 your cooperation.

 * * *

 To ensure compliance with Treasury Department regulations, we inform you
 that, unless otherwise indicated in writing, any U.S. Federal tax advice
 contained in this communication  (including any attachments) is not intended
 or written to be used, and cannot be used, for the purpose of (1) avoiding
 penalties under the Internal Revenue Code or applicable state and local
 provisions or (2) promoting, marketing or recommending to another party any
 tax-related matters addressed herein.

 Disclaimer Version RS.US.1.01.03

 pdc1



Re: Blackberry BES vs. BPS

2009-07-23 Thread Jeff Brown
Running BES 4.6 or whatever, phone system forwards vm's to my inbox, Curve
plays them just fine.  Not sure why you would need 5.0.

On Thu, Jul 23, 2009 at 3:49 PM, Tom R. Holmlund tom.holml...@gmail.comwrote:

 I'm running a small BES 4.0 server with 10 clients and Exchange 2007.
  Would like to be able to listen to WAV files (from internal voicemail) and
 am told that BES 5.0 will do it and the upgrade cost is $999.  Sales person
 told me I could also switch to BPS (and use the same client l licenses)
 without any cost.
 Questions for you Exchange/Blackberry experts:

 1.  How do you feel BPS compares to BES?  Is it comparable to BES 5
 features?  Sales person did not have any kind of document to compare
 features.

 2.  Anyone with experience listening to WAV files on handheld?

 I'm not concerned about growing over the 30 user limit on BPS.

 Any comments are much appreciated.

 Tom





Re: How do you check licenses on BES 5.0

2009-07-22 Thread Jeff Brown
Thanks for posting.  I really want to do that, but i'm SKEERED!

On Thu, Jul 16, 2009 at 1:02 PM, Stefan Jafs sj...@amico.com wrote:

  Ok, found it under Servers and components | component view.



 *___*

 *Stefan Jafs*



 *From:* Stefan Jafs [mailto:sj...@amico.com]
 *Sent:* Thursday, July 16, 2009 1:54 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* How do you check licenses on BES 5.0



 Ok, I did ”it”, I upgraded to BES 5.0, I did an in place upgrade took about
 30 min. now I’m getting used to the new web interface, not to happy with it,
 anyhow progress I guess.

 My question is where do I see my license info?



 *___*

 *Stefan Jafs*



 This email and any attached files are confidential and intended solely for
 the intended recipient(s). If you are not the named recipient you should not
 read, distribute, copy or alter this email. Any views or opinions expressed
 in this email are those of the author and do not represent those of the
 Amico Corpoartion company. Warning: Although precautions have been taken to
 make sure no viruses are present in this email, the company cannot accept
 responsibility for any loss or damage that arise from the use of this email
 or attachments.

 This email and any attached files are confidential and intended solely for
 the intended recipient(s). If you are not the named recipient you should not
 read, distribute, copy or alter this email. Any views or opinions expressed
 in this email are those of the author and do not represent those of the
 Amico Corpoartion company. Warning: Although precautions have been taken to
 make sure no viruses are present in this email, the company cannot accept
 responsibility for any loss or damage that arise from the use of this email
 or attachments.



Re: Global Update Personal Calendars?

2009-06-29 Thread Jeff Brown
Add to Exchange is a third party tool we use here to sync contacts to
individual mailboxes.  The Enterprise version will let you use Active
Directory groups to decide which calendars get synchronized to which private
mailboxes.  (will work for contacts, calendars and tasks I believe)

On Mon, Jun 29, 2009 at 11:08 AM, Shields, Anthony 
ashie...@epsteinatlanta.org wrote:

 We're a school.  For the last 9 years, we have had a shared school calendar
 in public folders showing all the events and at the beginning of every
 school year, we have a csv file of all school events for employees to import
 into their Outlook calendar - if they want.

 Now I'm being asked if there's a way to make meeting changes on everyone's
 calendar that has that meeting on their calendar.

 Short of a person designated to invite all employees to every meeting - I
 don't know of a way to do what they would like.

 Thinking outside of the box - is this something that SharePoint would be
 good for or is there an entirely different/better way to do what they would
 like?


 Not all employees import the calendar.  Not all of the events are
 applicable to all employees.  Those that do import, realize they have a lot
 to cleanup/delete afterwards.



 The Epstein School is a proud beneficiary of the Jewish Federation of
 Greater Atlanta.

 ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
 ~ http://www.sunbeltsoftware.com/Ninja~



~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: RIM SUPPORT

2009-06-26 Thread Jeff Brown
We had a round of lay-off's in November, and then some more in January.
 Things are beginning to look up, maybe, but we are a LONG way from being
willing to shell out 6 large for that support.  We have a lead on a
contractor that is supposedly authorized by RIM who offers support
contracts.  Will let you know where that leads.

On Fri, Jun 26, 2009 at 10:08 AM, Mousa Hamad mha...@zetron.com wrote:

 You'll have to let us know how that works out.


 We have 15 devices and just got the lowest support package... We are on
 BPS, but interestingly they did price us based on the number of devices
 we have as well... I found that odd, but just assumed that was how they
 did it... I agree though, how many devices I have should be none of
 their business...

 Though RIM has already tried their best to alienate us with Verizon's
 help by forcing Blackberry Storms down our throat, needless to say I'll
 be completing the Curve for Storm switch out TODAY and my users are
 already a LOT happier..


 Mousa Hamad



 -Original Message-
 From: Michael B. Smith [mailto:mich...@owa.smithcons.com]
 Sent: Friday, June 26, 2009 6:28 AM
 To: MS-Exchange Admin Issues
 Subject: RE: RIM SUPPORT

 Anyone tried www.astrasync.com ?? I'm rolling it out to five users next
 week as a test.

 
 From: Ben Scott [mailvor...@gmail.com]
 Sent: Thursday, June 25, 2009 7:03 PM
 To: MS-Exchange Admin Issues
 Subject: Re: RIM SUPPORT

 On Thu, Jun 25, 2009 at 6:19 PM, Jeff Brown2jbr...@gmail.com wrote:
  Again, all they REALLY support for me is ONE BES server.

  Yah, same here.  And really, I'm agreeing with you -- if RIM keeps
 pissing off their customers, they'll eventually find they don't have
 customers to piss off.

 -- Ben

 ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
 ~ http://www.sunbeltsoftware.com/Ninja~

 ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
 ~ http://www.sunbeltsoftware.com/Ninja~


 ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
 ~ http://www.sunbeltsoftware.com/Ninja~



~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: RIM SUPPORT

2009-06-25 Thread Jeff Brown
What he's telling me is that this is the LOWEST POSSIBLE level of support
for me to get, 5x8 is not an option anymore, for anyone.  Maybe you're
right, maybe it's just the salesperson.

On Thu, Jun 25, 2009 at 2:18 PM, Eric Woodford ericwoodf...@gmail.comwrote:

 Maybe it's just your sales rep..

 On the other hand, we dropped from T4 Support - T3 and the price drop on
 the contract was substantial. (We support 1,500 devices)

 On Thu, Jun 25, 2009 at 9:35 AM, Jeff Brown 2jbr...@gmail.com wrote:

 Any one else pissed about how RIM changed their support offerings?
 I am a relatively small shop, with just over 200 phones and one BES
 server.  I can't imagine how they justify charging my support based on the
 number of phones, because that affects them almost NOT AT ALL, as what they
 really do is support my ONE server.  I have been running this for about 4
 years and have asked for help maybe 3 times.

 Last year my 12 month support contract was $4,600, this year they want
 more like $6,200, even though my number of phones has dropped from 265 to
 205.

 The drop in number of phones is indicative of our company economy.  It is
 a BAD time, really bad for them to limit my options to a new level of
 support with lots of great value that I cannot afford.

 Here's the cherry:  NO ONE with more than 50 handsets will be supported on
 a per incident basis according to my sales rep.

 They really want to know how I am going to respond when I feel like
 someone has put a gun against my head







~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: RIM SUPPORT

2009-06-25 Thread Jeff Brown
This is from the email, my users went from 265 to 205 and the cost went up
OVER $1,500 for 12 months.



I took a look at what you paid for support last year and it was around
$5000, I realize that this is an increase in price but I think its justified
based on the value identified above.

I would also like to make sure that you understand that our incident based
support (used by customers who do not have a contract) is only reserved for
customers with less then 50 handheld devices.  What this means to you is
that if you do decide not to renew you will be left completely unsupported
on your BlackBerry solution by Research in Motion


On Thu, Jun 25, 2009 at 2:39 PM, N Parr npar...@mortonwelding.com wrote:

  They did change their support program but the price didn't change.  I
 just renewed and it stayed exactly the same as it was last year respective
 to the number of phone on my BES.  I have 50 licenses but am only using 45
 and they only charged me for 45.  They never have been picky about the
 number of users increasing between license renewals.

  --
 *From:* Jeff Brown [mailto:2jbr...@gmail.com]
 *Sent:* Thursday, June 25, 2009 11:35 AM
 *To:* MS-Exchange Admin Issues
 *Subject:* RIM SUPPORT

 Any one else pissed about how RIM changed their support offerings?
 I am a relatively small shop, with just over 200 phones and one BES server.
  I can't imagine how they justify charging my support based on the number of
 phones, because that affects them almost NOT AT ALL, as what they really do
 is support my ONE server.  I have been running this for about 4 years and
 have asked for help maybe 3 times.

 Last year my 12 month support contract was $4,600, this year they want more
 like $6,200, even though my number of phones has dropped from 265 to 205.

 The drop in number of phones is indicative of our company economy.  It is a
 BAD time, really bad for them to limit my options to a new level of support
 with lots of great value that I cannot afford.

 Here's the cherry:  NO ONE with more than 50 handsets will be supported on
 a per incident basis according to my sales rep.

 They really want to know how I am going to respond when I feel like someone
 has put a gun against my head






~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: RIM SUPPORT

2009-06-25 Thread Jeff Brown
Maybe below 50 is a good place to be.

On Thu, Jun 25, 2009 at 2:54 PM, David Mazzaccaro 
david.mazzacc...@hudsonhhc.com wrote:

  40 devices
 Last year: $1625.00
 This year: $1769.00



  --
 *From:* Jeff Brown [mailto:2jbr...@gmail.com]
 *Sent:* Thursday, June 25, 2009 3:45 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* Re: RIM SUPPORT

  This is from the email, my users went from 265 to 205 and the cost went
 up OVER $1,500 for 12 months.



 I took a look at what you paid for support last year and it was around
 $5000, I realize that this is an increase in price but I think its justified
 based on the value identified above.

 I would also like to make sure that you understand that our incident based
 support (used by customers who do not have a contract) is only reserved for
 customers with less then 50 handheld devices.  What this means to you is
 that if you do decide not to renew you will be left completely unsupported
 on your BlackBerry solution by Research in Motion


 On Thu, Jun 25, 2009 at 2:39 PM, N Parr npar...@mortonwelding.com wrote:

  They did change their support program but the price didn't change.  I
 just renewed and it stayed exactly the same as it was last year respective
 to the number of phone on my BES.  I have 50 licenses but am only using 45
 and they only charged me for 45.  They never have been picky about the
 number of users increasing between license renewals.

  --
 *From:* Jeff Brown [mailto:2jbr...@gmail.com]
 *Sent:* Thursday, June 25, 2009 11:35 AM
 *To:* MS-Exchange Admin Issues
 *Subject:* RIM SUPPORT

  Any one else pissed about how RIM changed their support offerings?
 I am a relatively small shop, with just over 200 phones and one BES
 server.  I can't imagine how they justify charging my support based on the
 number of phones, because that affects them almost NOT AT ALL, as what they
 really do is support my ONE server.  I have been running this for about 4
 years and have asked for help maybe 3 times.

 Last year my 12 month support contract was $4,600, this year they want
 more like $6,200, even though my number of phones has dropped from 265 to
 205.

 The drop in number of phones is indicative of our company economy.  It is
 a BAD time, really bad for them to limit my options to a new level of
 support with lots of great value that I cannot afford.

 Here's the cherry:  NO ONE with more than 50 handsets will be supported on
 a per incident basis according to my sales rep.

 They really want to know how I am going to respond when I feel like
 someone has put a gun against my head











~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

BES upgrade to 5.0

2009-06-19 Thread Jeff Brown
I saw a post a week or so back but didn't see a lot of response.  Am
thinking about upgrading my BES server to the new 5.0 version for Exchange.
 Anyone do this and run into trouble so far?
Thanks for any help.  Jeff

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: BES upgrade to 5.0

2009-06-19 Thread Jeff Brown
If i was setup virtual I'd be tempted to wag my tail just a tiny little bit.
 :)

On Fri, Jun 19, 2009 at 3:43 PM, Andy Shook andy.sh...@peak10.com wrote:

  *“I may do it this weekend.”*





 And you felt the need to advertise this?



 Shook



 *From:* Stefan Jafs [mailto:sj...@amico.com]
 *Sent:* Friday, June 19, 2009 4:42 PM

 *To:* MS-Exchange Admin Issues
 *Subject:* RE: BES upgrade to 5.0



 I started to read the prerequisites and gave up. However I’m virtual so I
 can take a snapshot and do the in place upgrade, without worries. I may do
 it this weekend.



 *___*

 *Stefan Jafs*



 *From:* Jeff Brown [mailto:2jbr...@gmail.com]
 *Sent:* Friday, June 19, 2009 4:34 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* BES upgrade to 5.0



 I saw a post a week or so back but didn't see a lot of response.  Am
 thinking about upgrading my BES server to the new 5.0 version for Exchange.
  Anyone do this and run into trouble so far?



 Thanks for any help.  Jeff



 This email and any attached files are confidential and intended solely for
 the intended recipient(s). If you are not the named recipient you should not
 read, distribute, copy or alter this email. Any views or opinions expressed
 in this email are those of the author and do not represent those of the
 Amico Corpoartion company. Warning: Although precautions have been taken to
 make sure no viruses are present in this email, the company cannot accept
 responsibility for any loss or damage that arise from the use of this email
 or attachments.






~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: BES upgrade to 5.0

2009-06-19 Thread Jeff Brown
sorry, I ONCE was accused of being a little slow, but I'm pretty sure they
were wrong.

On Fri, Jun 19, 2009 at 4:12 PM, Andy Shook andy.sh...@peak10.com wrote:

  No, no, no…



 You may to” IT” this weekend.  It was a stupid and immature naughty joke.




 Shook



 *From:* Jeff Brown [mailto:2jbr...@gmail.com]
 *Sent:* Friday, June 19, 2009 5:03 PM

 *To:* MS-Exchange Admin Issues
 *Subject:* Re: BES upgrade to 5.0



 If i was setup virtual I'd be tempted to wag my tail just a tiny little
 bit.  :)

 On Fri, Jun 19, 2009 at 3:43 PM, Andy Shook andy.sh...@peak10.com wrote:

 *“I may do it this weekend.”*





 And you felt the need to advertise this?



 Shook



 *From:* Stefan Jafs [mailto:sj...@amico.com]
 *Sent:* Friday, June 19, 2009 4:42 PM


 *To:* MS-Exchange Admin Issues

 *Subject:* RE: BES upgrade to 5.0



 I started to read the prerequisites and gave up. However I’m virtual so I
 can take a snapshot and do the in place upgrade, without worries. I may do
 it this weekend.



 *___*

 *Stefan Jafs*



 *From:* Jeff Brown [mailto:2jbr...@gmail.com]
 *Sent:* Friday, June 19, 2009 4:34 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* BES upgrade to 5.0



 I saw a post a week or so back but didn't see a lot of response.  Am
 thinking about upgrading my BES server to the new 5.0 version for Exchange.
  Anyone do this and run into trouble so far?



 Thanks for any help.  Jeff



 This email and any attached files are confidential and intended solely for
 the intended recipient(s). If you are not the named recipient you should not
 read, distribute, copy or alter this email. Any views or opinions expressed
 in this email are those of the author and do not represent those of the
 Amico Corpoartion company. Warning: Although precautions have been taken to
 make sure no viruses are present in this email, the company cannot accept
 responsibility for any loss or damage that arise from the use of this email
 or attachments.












~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Blackberry :-( Issue

2009-05-14 Thread Jeff Brown
Think we had this problem and it was caused by JAVA version information
being wrong in config file on BES.

On Thu, May 14, 2009 at 10:22 AM, Clayton Doige clayton.do...@gmail.comwrote:

 Hi all, first if this is a reallynewbie stupid question I will apologies up
 front, as thus far in my career I have been fortunate enough not to have had
 the displeasure of supporting these devices too much, which leaves me not
 knowing a helck of a lot lol.

 BES, latest version, 2 mailbox servers, E2K3 SP2

 If a user is on exchange server A changes made onthe blackberry calendar
 sync to Outlook, however if you move them to server B the Blackberry changes
 no longer sync.

 I read that this can occur is mapi32.dll and cdo.dll on the exchange server
 does not match the version on the BES. I checked this all through and the
 same versions are present on all three machines.

 I checked the version of all of dll's in program files\exchsrvr (sad huh)
 on both mailbox servers and found only one discrepancy, exmime.dll (the non
 working server has an older version, but it is still a 6.5.76 version.

 Has anyone seen mismatches of exmime.dll cause the calendar issues
 decribed, and if so is it a simple matter of copying the dll from server a
 to server b and bouncing the server or is there a specific hot fix for this,
 google has not come upwith too much on this so far.

 TIA

 Clayton




~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

symantec smtp mail filter help

2009-03-13 Thread Jeff Brown
I'm hoping someone out there has done this already.  I am currently using
symantec's mail security for smtp.  I have been using the ldap sync to let
it dump mail to invalid recipients up front.  Using version 5.0.1 on W2k3
server.  The autofill settings for ldap synchronization DO NOT find
secondary smtp addresses.  I have an account created for marketing purposes
that has SEVERAL secondary addresses setup and have to turn ldap lookup off
in order for mail to those addresses to pass through.  Symantec tech support
tells me they don't support the cusomization of the ldap querry that would
enable to filter to inlcude secondary smtp adresses, but someone familiar
with ldap could modify to querry to do that.

anyone able to help with that?

here is what the current querry looks like:

((|(objectCategory=group)(objectCategory=person))((|(mail=*)(proxyAddresses=*))(sAMAccountName=*)))

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Blackberry contacts for remote user

2008-12-29 Thread Jeff Brown
look at https/RPC to allow recure, remote access to exchange.  I am not up
to speed on E2007, but can't emagine that they would take that feature out.

On Mon, Dec 29, 2008 at 10:49 AM, Steve Hart sh...@wrightbg.com wrote:


 This is probably an easy question, but I haven't played much with Office
 2007 and I'm still learning Exchange 2007.


 We're hosting a single email account for a loosely affiliated company on
 our E2007 server. The lone user is outside of our facilities and he's using
 OWA to get his mail. He has a Blackberry connecting using BIS.

 He has Office 2007 on his PC and would like to import his Blackberry
 contacts into Outlook. Apparently, he's set up his Outlook profile to
 connect to our server, but that's being blocked by the firewall and Outlook
 won't open.

 What's the easiest way to make this happen? Set up a local Outlook data
 file on his PC? Poke a hole in the firewall to allow him to connect? Somehow
 import through OWA or BIS?

 Thanks in advance,
 Steve


 ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
 ~ http://www.sunbeltsoftware.com/Ninja~


~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Phone system for remote/ satellite office

2008-12-16 Thread Jeff Brown
sometimes you have to ask the right questions.  Our system supports IP
trunking, not VOIP.  But I think most Voip systems can be tied back into
your legacy phone sys if it supports trunking.  shoretell is the bomb.

On Tue, Dec 16, 2008 at 2:57 PM, David Baca dbaca.gr...@yahoo.com wrote:

   our current system does not support voip.  I am hunting for options now.

 Regards,

 David

  --
 *From:* James Kerr cluster...@gmail.com
 *To:* MS-Exchange Admin Issues exchangelist@lyris.sunbelt-software.com
 *Sent:* Tuesday, December 16, 2008 12:47:17 PM
 *Subject:* Re: Phone system for remote/ satellite office

 What about getting a voip card in your current pbx and just getting them
 viop phones? You could have separate DID or hunt groups or what not.

 A long time ago I saw that Panasonic had small digital phone systems that
 were inexpensive and nice. Maybe you could take a look at what they have
 now.

 James

  - Original Message -
 *From:* David Baca dbaca.gr...@yahoo.com
  *To:* MS-Exchange Admin Issues exchangelist@lyris.sunbelt-software.com
  *Sent:* Tuesday, December 16, 2008 3:09 PM
 *Subject:* Phone system for remote/ satellite office

  Hello All,

 I was wondering if you had any suggestion or can share your experiences on
 phone system ideas for an office of three execs and one receptionist.  I am
 looking for a low cost solution.  I have considered fonality and avaya
 which can get expensive roughly 10 -15k with installation.


 Thanks in advance.


 David











~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: OWA problem

2008-12-12 Thread Jeff Brown
Don't think it's that.  they actually get the window, just not able to type
in it.

On Fri, Dec 12, 2008 at 7:23 AM, Miller Bonnie L. 
mille...@mukilteo.wednet.edu wrote:

  Pop-up blocker?



 -Bonnie



 *From:* Jeff Brown [mailto:2jbr...@gmail.com]
 *Sent:* Thursday, December 11, 2008 6:00 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* OWA problem



 Exch 03 environment, 3 mailbox servers with FE.  Users on remote mailbox
 server get greyed out window and cannot create new mail or reply when
 using OWA.  No problem reading mail in OWA.  No issues at all using Outlook.



 Any ideas?






~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

OWA problem

2008-12-11 Thread Jeff Brown
Exch 03 environment, 3 mailbox servers with FE.  Users on remote mailbox
server get greyed out window and cannot create new mail or reply when
using OWA.  No problem reading mail in OWA.  No issues at all using Outlook.

Any ideas?

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

bounced email

2008-11-21 Thread Jeff Brown
I have a secondary domain running in an exchange environment.  We are having
trouble with email from secondary domain getting bounced.  We have spf
records all setup for primary domain, not sure if that is needed for the
secondary, because I don't understand how that is all handled.  Can someone
give me some pointers or links to documents that can help me understand how
to look specifically at secondary email domain setup in an exchange
environment??  Thanks for any help.

This is the sort of message we are seeing:


This is an automatically generated Delivery Status Notification.



THIS IS A WARNING MESSAGE ONLY.



YOU DO NOT NEED TO RESEND YOUR MESSAGE.



Delivery to the following recipients has been delayed.



   [EMAIL PROTECTED]

   [EMAIL PROTECTED]

   [EMAIL PROTECTED]



They ultimately fail almost always.  There were between 400 nad 500 messages
sent, approximately 10 that wont' go through.

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

OWA issues

2008-09-02 Thread Jeff Brown
Recently replaced an older exchange server with a new box.  Migrated
mailboxes.  seemed to go smoothly, Less than 50 users on this mailbox
server.  FE/BE setup, W2003 servers with Exchange '03 on all Exchange
servers.  We missed something and I'm having trouble identifying exaclty
what the problem is.  Webmail won't work, getting a 404 error after putting
in credentials in logon screen.  Works for users on all other mailbox
servers, just not the new one.  Have walked through article 327843 and
verified all the usual permissions for OWA in ESM and IIS.  No change.  Can
anyone point me in the right direction.  From IE in session on the server,
localhost/exchange you get an authentication pop-up, which doesn't happen on
other servers(other servers take you straight to mailbox of authenticated
user) after putting in domain/username and password it will give normal
looking OWA logon screen, then 404 error after putting in credentials.

Any help would be appreciated.

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: OWA issues

2008-09-02 Thread Jeff Brown
Had reset permissions for authenticated users, then restarted IIS.  No
change.  Those permissions were either wrong or missing, so we really
thought that was the problem.  Rebooted exchange mailbox and problem is
resolved.  Thanks anyhow.

On 9/2/08, Jeff Brown [EMAIL PROTECTED] wrote:

  Recently replaced an older exchange server with a new box.  Migrated
 mailboxes.  seemed to go smoothly, Less than 50 users on this mailbox
 server.  FE/BE setup, W2003 servers with Exchange '03 on all Exchange
 servers.  We missed something and I'm having trouble identifying exaclty
 what the problem is.  Webmail won't work, getting a 404 error after putting
 in credentials in logon screen.  Works for users on all other mailbox
 servers, just not the new one.  Have walked through article 327843 and
 verified all the usual permissions for OWA in ESM and IIS.  No change.  Can
 anyone point me in the right direction.  From IE in session on the server,
 localhost/exchange you get an authentication pop-up, which doesn't happen on
 other servers(other servers take you straight to mailbox of authenticated
 user) after putting in domain/username and password it will give normal
 looking OWA logon screen, then 404 error after putting in credentials.

 Any help would be appreciated.




~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Email Certificates

2008-04-24 Thread Jeff Brown
I think I understood most of what you were saying.  I was referring to
tumbleweeds when I said off-site. (that really is off-site, right?)

On Wed, Apr 23, 2008 at 6:10 PM, Don Andrews [EMAIL PROTECTED]
wrote:

  Didn't mean to imply off-site – both the SMIME proxy and Secure Messenger
 solutions are internally hosted – in fact on the same set of servers.


  --

 Thanks for the input.  the off-site solution seems to be very popular.

 On Wed, Apr 23, 2008 at 3:23 PM, Don Andrews [EMAIL PROTECTED]
 wrote:

 Yep – SMIME is a client to client protocol – each client will need their
 own certificate, then will need to do a certificate exchange etc. etc. – and
 bottom line is the sending client is required to ensure that they send
 encrypted after all that.



 Some of us have gateways that act as SMIME proxies for our internal users
 freeing them from this burden, but there is an administrative overhead to
 getting it all working the first time – and the external client still has to
 do their end – the major advantage is that the server can ensure that
 outgoing messages are always encrypted and warn the recipient of unencrypted
 inbound messages.



 Given the overhead of SMIME encrypted email, some have opted for a browser
 based secure FTP-like solution – we use Tumbleweed's Secure Messenger for
 this.


  --

 *From:* Troy Meyer [mailto:[EMAIL PROTECTED]
 *Sent:* Wednesday, April 23, 2008 12:54 PM


 *To:* MS-Exchange Admin Issues

 *Subject:* RE: Email Certificates



 Uh-oh   that throws a wrench in the bucket, if we cant actually communicate
 with the admin of the email server on their end (cox) we may be in trouble.



 If they are using the standard cox server at mx.west.cox.net (or
 mx.east.cox.net) then transport encryption may not be possible ( a quick
 telnet into that address does not accept a TLS or STARTTLS command, its
 pretty plain jane).



 So options would be setting up SMIME User certificates which is a little
 more work and would require some user training. Or if the other company
 moved to a different (infer better) email hosting provider then they could
 except TLS encrypted email.



 No easy options L



 -troy





 *From:* Jeff Brown [mailto:[EMAIL PROTECTED]
 *Sent:* Wednesday, April 23, 2008 12:04 PM


 *To:* MS-Exchange Admin Issues

 *Subject:* Re: Email Certificates



 Any way to set that up from my E2K3 domain to their Outlook client?  Their
 email is hosted by an ISP and is pop3. (@cox.net email address)??

 On Wed, Apr 23, 2008 at 12:06 PM, Troy Meyer [EMAIL PROTECTED]
 wrote:

 Jeff, if you mean simply making sure that the general internet cant see the
 messages and you aren't worried about encryption once they reach the other
 companies servers, it should be simple; assuming the other company's MTA
 will accept TLS encryption, you can create a new routing group connector to
 that domain and require TLS and that should encrypt all transport traffic
 between your locations (including BB traffic because all BB sending occurs
 through your exchange server).



 I haven't configured 2003 in a while, but I believe that should be all that
 is required.  Michael, Kevin, any input?



 -troy





 *From:* Jeff Brown [mailto:[EMAIL PROTECTED]
 *Sent:* Wednesday, April 23, 2008 9:57 AM


 *To:* MS-Exchange Admin Issues

 *Subject:* Re: Email Certificates



 Thank you very much.   I will look at that information as time allows.  We
 are running E2K3 and BES 4.1.  Main concern at the moment is that we find a
 way to send email from BB's to vendors OUTSIDE our network in a secure way
 that is readable by them.

 On Wed, Apr 23, 2008 at 11:30 AM, Troy Meyer [EMAIL PROTECTED]
 wrote:

 Hi Jeff,



 You really need to understand PKI with regards to how it works before you
 can really implement encryption.  I assume you are running some flavor of
 exchange and are looking to encrypt messages, have you looked at this:



 http://technet.microsoft.com/en-us/library/bb123466(EXCHG.65).aspx

 http://technet.microsoft.com/en-us/library/bb124155(EXCHG.65).aspx





 It references 2003, but SMIME/PKI is not largely different between
 applications or exchange versions.  From the sounds of your email I think
 you are confusing different types of encryption, eg:  yes you can use
 transport encryption with SSL certificates that are trusted by all
 platforms/browsers without interchanging keys (because in essence the public
 key has already been accepted), but if you are looking for message
 encryption, you will need USER certificates, which will still need to be
 accepted by clients.  So when you tell exchange to encrypt all outgoing
 email, you are encrypting the transport from Exchange to the other server,
 but you are NOT encrypting the message itself. (Yes you can tell Exchange to
 encrypt all outgoing, and yes you can tell Exchange to encrypt transport to
 only a specific domain.)



 So really it comes down to what exactly you

Email Certificates

2008-04-23 Thread Jeff Brown
I need help correcting filling in/correcting holes in my understanding of
email certificates and how they work.

I purchase a well known cert for my domain so that I can send encrypted
email over the public domain.

Because I laid out the money for this well known cert, I don't have to
exchange certificates with folks outside my domain in order for them to read
my encrypted email, right?

In Outlook, there is a checkbox to encrypt outgoing email.  Is there a way
on the org. level to say all mail sent to anyone @thisorg.com  outside my
domain should always be encrypted?

Because I paid the big bucks, can we just set it on the domain level to
encrypt ALL outgoing email?

Will this well known cert allow my BB users to send encrypted email to folks
not in my org?

TIA,  I really appreciate those of you who are able/willing to educate the
poorly informed.

Jeff

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Email Certificates

2008-04-23 Thread Jeff Brown
Thank you very much.   I will look at that information as time allows.  We
are running E2K3 and BES 4.1.  Main concern at the moment is that we find a
way to send email from BB's to vendors OUTSIDE our network in a secure way
that is readable by them.

On Wed, Apr 23, 2008 at 11:30 AM, Troy Meyer [EMAIL PROTECTED]
wrote:

  Hi Jeff,



 You really need to understand PKI with regards to how it works before you
 can really implement encryption.  I assume you are running some flavor of
 exchange and are looking to encrypt messages, have you looked at this:



 http://technet.microsoft.com/en-us/library/bb123466(EXCHG.65).aspx

 http://technet.microsoft.com/en-us/library/bb124155(EXCHG.65).aspx





 It references 2003, but SMIME/PKI is not largely different between
 applications or exchange versions.  From the sounds of your email I think
 you are confusing different types of encryption, eg:  yes you can use
 transport encryption with SSL certificates that are trusted by all
 platforms/browsers without interchanging keys (because in essence the public
 key has already been accepted), but if you are looking for message
 encryption, you will need USER certificates, which will still need to be
 accepted by clients.  So when you tell exchange to encrypt all outgoing
 email, you are encrypting the transport from Exchange to the other server,
 but you are NOT encrypting the message itself. (Yes you can tell Exchange to
 encrypt all outgoing, and yes you can tell Exchange to encrypt transport to
 only a specific domain.)



 So really it comes down to what exactly you are hoping to do, do you want
 full message encryption or simply to prevent sniffing of traffic on the open
 internet?



 As for blackberry, you can do both here as well.  If you are running this
 you can sign/encrypt individual messages using SMIME.




 http://www.blackberry.com/btsc/search.do?cmd=displayKCdocType=kcexternalId=KB10199sliceId=SAL_PublicdialogID=55761554stateId=0%200%2055759922



 If you are running BES then your communication is encrypted until it comes
 back to your home exchange server, and then it will travel as a normal
 message (ie if you are encrypting outbound traffic it will travel over that
 tunnel, otherwise it becomes a plain text outbound.)





 Hope that helps, it's a lot of information, but security/PKI/SMIME
 deployments can be difficult if you don't break down exactly what you (and
 the business) want.



 -Troy





 *From:* Jeff Brown [mailto:[EMAIL PROTECTED]
 *Sent:* Wednesday, April 23, 2008 5:40 AM
 *To:* MS-Exchange Admin Issues
 *Subject:* Email Certificates



 I need help correcting filling in/correcting holes in my understanding of
 email certificates and how they work.



 I purchase a well known cert for my domain so that I can send encrypted
 email over the public domain.



 Because I laid out the money for this well known cert, I don't have to
 exchange certificates with folks outside my domain in order for them to read
 my encrypted email, right?



 In Outlook, there is a checkbox to encrypt outgoing email.  Is there a way
 on the org. level to say all mail sent to anyone @thisorg.com  outside my
 domain should always be encrypted?



 Because I paid the big bucks, can we just set it on the domain level to
 encrypt ALL outgoing email?



 Will this well known cert allow my BB users to send encrypted email to
 folks not in my org?



 TIA,  I really appreciate those of you who are able/willing to educate
 the poorly informed.



 Jeff






~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Email Certificates

2008-04-23 Thread Jeff Brown
Any way to set that up from my E2K3 domain to their Outlook client?  Their
email is hosted by an ISP and is pop3. (@cox.net email address)??

On Wed, Apr 23, 2008 at 12:06 PM, Troy Meyer [EMAIL PROTECTED]
wrote:

  Jeff, if you mean simply making sure that the general internet cant see
 the messages and you aren't worried about encryption once they reach the
 other companies servers, it should be simple; assuming the other company's
 MTA will accept TLS encryption, you can create a new routing group connector
 to that domain and require TLS and that should encrypt all transport traffic
 between your locations (including BB traffic because all BB sending occurs
 through your exchange server).



 I haven't configured 2003 in a while, but I believe that should be all
 that is required.  Michael, Kevin, any input?



 -troy





 *From:* Jeff Brown [mailto:[EMAIL PROTECTED]
 *Sent:* Wednesday, April 23, 2008 9:57 AM
 *To:* MS-Exchange Admin Issues
 *Subject:* Re: Email Certificates



 Thank you very much.   I will look at that information as time allows.  We
 are running E2K3 and BES 4.1.  Main concern at the moment is that we find a
 way to send email from BB's to vendors OUTSIDE our network in a secure way
 that is readable by them.

 On Wed, Apr 23, 2008 at 11:30 AM, Troy Meyer [EMAIL PROTECTED]
 wrote:

 Hi Jeff,



 You really need to understand PKI with regards to how it works before you
 can really implement encryption.  I assume you are running some flavor of
 exchange and are looking to encrypt messages, have you looked at this:



 http://technet.microsoft.com/en-us/library/bb123466(EXCHG.65).aspx

 http://technet.microsoft.com/en-us/library/bb124155(EXCHG.65).aspx





 It references 2003, but SMIME/PKI is not largely different between
 applications or exchange versions.  From the sounds of your email I think
 you are confusing different types of encryption, eg:  yes you can use
 transport encryption with SSL certificates that are trusted by all
 platforms/browsers without interchanging keys (because in essence the public
 key has already been accepted), but if you are looking for message
 encryption, you will need USER certificates, which will still need to be
 accepted by clients.  So when you tell exchange to encrypt all outgoing
 email, you are encrypting the transport from Exchange to the other server,
 but you are NOT encrypting the message itself. (Yes you can tell Exchange to
 encrypt all outgoing, and yes you can tell Exchange to encrypt transport to
 only a specific domain.)



 So really it comes down to what exactly you are hoping to do, do you want
 full message encryption or simply to prevent sniffing of traffic on the open
 internet?



 As for blackberry, you can do both here as well.  If you are running this
 you can sign/encrypt individual messages using SMIME.




 http://www.blackberry.com/btsc/search.do?cmd=displayKCdocType=kcexternalId=KB10199sliceId=SAL_PublicdialogID=55761554stateId=0%200%2055759922



 If you are running BES then your communication is encrypted until it comes
 back to your home exchange server, and then it will travel as a normal
 message (ie if you are encrypting outbound traffic it will travel over that
 tunnel, otherwise it becomes a plain text outbound.)





 Hope that helps, it's a lot of information, but security/PKI/SMIME
 deployments can be difficult if you don't break down exactly what you (and
 the business) want.



 -Troy





 *From:* Jeff Brown [mailto:[EMAIL PROTECTED]
 *Sent:* Wednesday, April 23, 2008 5:40 AM
 *To:* MS-Exchange Admin Issues
 *Subject:* Email Certificates



 I need help correcting filling in/correcting holes in my understanding of
 email certificates and how they work.



 I purchase a well known cert for my domain so that I can send encrypted
 email over the public domain.



 Because I laid out the money for this well known cert, I don't have to
 exchange certificates with folks outside my domain in order for them to read
 my encrypted email, right?



 In Outlook, there is a checkbox to encrypt outgoing email.  Is there a way
 on the org. level to say all mail sent to anyone @thisorg.com  outside my
 domain should always be encrypted?



 Because I paid the big bucks, can we just set it on the domain level to
 encrypt ALL outgoing email?



 Will this well known cert allow my BB users to send encrypted email to
 folks not in my org?



 TIA,  I really appreciate those of you who are able/willing to educate
 the poorly informed.



 Jeff














~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Email Certificates

2008-04-23 Thread Jeff Brown
Thanks for the input.  the off-site solution seems to be very popular.

On Wed, Apr 23, 2008 at 3:23 PM, Don Andrews [EMAIL PROTECTED]
wrote:

  Yep – SMIME is a client to client protocol – each client will need their
 own certificate, then will need to do a certificate exchange etc. etc. – and
 bottom line is the sending client is required to ensure that they send
 encrypted after all that.



 Some of us have gateways that act as SMIME proxies for our internal users
 freeing them from this burden, but there is an administrative overhead to
 getting it all working the first time – and the external client still has to
 do their end – the major advantage is that the server can ensure that
 outgoing messages are always encrypted and warn the recipient of unencrypted
 inbound messages.



 Given the overhead of SMIME encrypted email, some have opted for a browser
 based secure FTP-like solution – we use Tumbleweed's Secure Messenger for
 this.


  --

 *From:* Troy Meyer [mailto:[EMAIL PROTECTED]
 *Sent:* Wednesday, April 23, 2008 12:54 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* RE: Email Certificates



 Uh-oh   that throws a wrench in the bucket, if we cant actually
 communicate with the admin of the email server on their end (cox) we may be
 in trouble.



 If they are using the standard cox server at mx.west.cox.net (or
 mx.east.cox.net) then transport encryption may not be possible ( a quick
 telnet into that address does not accept a TLS or STARTTLS command, its
 pretty plain jane).



 So options would be setting up SMIME User certificates which is a little
 more work and would require some user training. Or if the other company
 moved to a different (infer better) email hosting provider then they could
 except TLS encrypted email.



 No easy options L



 -troy





 *From:* Jeff Brown [mailto:[EMAIL PROTECTED]
 *Sent:* Wednesday, April 23, 2008 12:04 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* Re: Email Certificates



 Any way to set that up from my E2K3 domain to their Outlook client?  Their
 email is hosted by an ISP and is pop3. (@cox.net email address)??

 On Wed, Apr 23, 2008 at 12:06 PM, Troy Meyer [EMAIL PROTECTED]
 wrote:

 Jeff, if you mean simply making sure that the general internet cant see
 the messages and you aren't worried about encryption once they reach the
 other companies servers, it should be simple; assuming the other company's
 MTA will accept TLS encryption, you can create a new routing group connector
 to that domain and require TLS and that should encrypt all transport traffic
 between your locations (including BB traffic because all BB sending occurs
 through your exchange server).



 I haven't configured 2003 in a while, but I believe that should be all
 that is required.  Michael, Kevin, any input?



 -troy





 *From:* Jeff Brown [mailto:[EMAIL PROTECTED]
 *Sent:* Wednesday, April 23, 2008 9:57 AM


 *To:* MS-Exchange Admin Issues

 *Subject:* Re: Email Certificates



 Thank you very much.   I will look at that information as time allows.  We
 are running E2K3 and BES 4.1.  Main concern at the moment is that we find a
 way to send email from BB's to vendors OUTSIDE our network in a secure way
 that is readable by them.

 On Wed, Apr 23, 2008 at 11:30 AM, Troy Meyer [EMAIL PROTECTED]
 wrote:

 Hi Jeff,



 You really need to understand PKI with regards to how it works before you
 can really implement encryption.  I assume you are running some flavor of
 exchange and are looking to encrypt messages, have you looked at this:



 http://technet.microsoft.com/en-us/library/bb123466(EXCHG.65).aspx

 http://technet.microsoft.com/en-us/library/bb124155(EXCHG.65).aspx





 It references 2003, but SMIME/PKI is not largely different between
 applications or exchange versions.  From the sounds of your email I think
 you are confusing different types of encryption, eg:  yes you can use
 transport encryption with SSL certificates that are trusted by all
 platforms/browsers without interchanging keys (because in essence the public
 key has already been accepted), but if you are looking for message
 encryption, you will need USER certificates, which will still need to be
 accepted by clients.  So when you tell exchange to encrypt all outgoing
 email, you are encrypting the transport from Exchange to the other server,
 but you are NOT encrypting the message itself. (Yes you can tell Exchange to
 encrypt all outgoing, and yes you can tell Exchange to encrypt transport to
 only a specific domain.)



 So really it comes down to what exactly you are hoping to do, do you want
 full message encryption or simply to prevent sniffing of traffic on the open
 internet?



 As for blackberry, you can do both here as well.  If you are running this
 you can sign/encrypt individual messages using SMIME.




 http://www.blackberry.com/btsc/search.do?cmd=displayKCdocType=kcexternalId=KB10199sliceId=SAL_PublicdialogID=55761554stateId=0%200%2055759922



 If you

Exchange Admin Permission Problem

2008-02-23 Thread Jeff Brown
I am trying to setup journaling and when I log on to ESM the features are
all greyed out.  E2k3 on W2k3 servers.  Latest service paks.  I have tried
logging on using an exchange admin account that IS NOT a member of Domain
Admins or any other built-in admin group and I have tried logging in as
administrator, which is how exchange was installed on all these boxes.

I have a FE server and 3 BE servers.  1 of the BE servers has no mailboxes.
We are trying to Journal to a new mailbox on that server.  The only server
the option to journal is NOT greyed out on is the FE server.  I have logged
directly on to each server several different ways.  Have manually removed
the deny send/receive permissions.

Really Jammed up here.  Anyone have any suggestions?

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Exchange Admin Permission Problem

2008-02-23 Thread Jeff Brown
Never mind.  System Policy was the answer!

On Sat, Feb 23, 2008 at 8:57 PM, Jeff Brown [EMAIL PROTECTED] wrote:

   I am trying to setup journaling and when I log on to ESM the features
 are all greyed out.  E2k3 on W2k3 servers.  Latest service paks.  I have
 tried logging on using an exchange admin account that IS NOT a member of
 Domain Admins or any other built-in admin group and I have tried logging in
 as administrator, which is how exchange was installed on all these boxes.

 I have a FE server and 3 BE servers.  1 of the BE servers has no
 mailboxes.  We are trying to Journal to a new mailbox on that server.  The
 only server the option to journal is NOT greyed out on is the FE server.  I
 have logged directly on to each server several different ways.  Have
 manually removed the deny send/receive permissions.

 Really Jammed up here.  Anyone have any suggestions?




~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

MX/txt record confusion

2008-01-24 Thread Jeff Brown
I have a secondary domain setup in my exchange environment, only a couple of
folks using that domain email.

Got an ndr that says unable to relay for mail.primarydomain.com at x.x.x.x
.

I have setup mx, A and txt records for the secondary email domain,
mail.secondarydomain.com

This was done with the help of a consultant who is an exchange specialist,
in whom I have a lot of confidence.

That being said, I'm wondering if exchange ever really sends mail out using
mail.secondarydomain.com??

Can someone enlighten me please?

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: MX/txt record confusion

2008-01-24 Thread Jeff Brown
An employee who uses an @secondarydomain.  address sent a message to someone
and their mail server did the reverse lookup and bounced the message.  The
smpt message says,  mail.primarydomain.com #5.5.0 smtp;553 sorry, relaying
denied from your location  and then has to correct IP address listed at the
end of that message.
Only reason I can see for it to fail to lookup would be the inconsistency
between her email address and the mx lookup or whatever resolved to
mail.primarydomain.com and not mail.secondarydomain.com??  As you can see, I
have only a very basic grasp of what may be going on here.



On Jan 24, 2008 3:21 PM, Micheal Espinola Jr [EMAIL PROTECTED]
wrote:

 So, from the outside, you tried to send an e-mail to your MX record
 for mail.primarydomain.com, and you got an unable to relay NDR
 (bounce) message?  Was that address local to that MX record?  If yes,
 you probably have a spam filter issue.

 Note:  TXT records are for specifying SPF or SenderID information.
 You are still missing PTR records.

 Does your mail server do the DNS ménage à trois?
 http://www.espinola.net/blog/archives/5


 On Jan 24, 2008 4:14 PM, Jeff Brown [EMAIL PROTECTED] wrote:
  I have a secondary domain setup in my exchange environment, only a
 couple of
  folks using that domain email.
 
  Got an ndr that says unable to relay for mail.primarydomain.com at
 x.x.x.x.
 
  I have setup mx, A and txt records for the secondary email domain,
  mail.secondarydomain.com
 
  This was done with the help of a consultant who is an exchange
 specialist,
  in whom I have a lot of confidence.
 
  That being said, I'm wondering if exchange ever really sends mail out
 using
  mail.secondarydomain.com??
 
  Can someone enlighten me please?
 
 



 --
 ME2

 ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
 ~ http://www.sunbeltsoftware.com/Ninja~


~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: GoExchange Response

2008-01-22 Thread Jeff Brown
I wondered what tool you were going to use to thicken you skin...

On Jan 22, 2008 1:30 PM, Tom Strader [EMAIL PROTECTED] wrote:



 *I get that way daily sir!!*
 **
 *I learned a Lo time back just how little I do know compared to
 some of the excellent list members here, including our hosts, Sunbelt
 Software and all their team.*
 **
 *NOW, THOSE PEOPLE ROCK*
 **
 *Please Don, keep the comments coming, it makes one think and rethink
 their situation and I appreciate that.*
 **
 *NOW, someone pass the beer will ya!!*

  --
  *From:* Don Ely [mailto:[EMAIL PROTECTED]
 *Sent:* Tuesday, January 22, 2008 2:06 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* Re: GoExchange Response

  I wasn't in an uproar...  :P

 And just for the record, the other day I was talking to myself because I
 couldn't remember where the config file for NTOP was and I said, self, you
 fscking idiot, stop being so stupid!.

  On Jan 22, 2008 10:56 AM, Tom Strader [EMAIL PROTECTED] wrote:

 
 
  HA!!
  Well, in my 19-20 years in this field, I agree it's been far and few
  between the number of times I have had to use the so called
  exchange utilities, however, w hen I came on board, this company was
  using DEMO backup software to backup files, but no Exchange backup so ANDY,
  you are correct, if a good admin has backups that are verified, there is no
  need for such a utility and it is like nails on a chalk board when I get the
  notification that GoExchange is getting ready to perform its' maintenance.
 
  Unfortunately, not everyone is as knowledgeable as Don Ely, that's why
  we depend on our fellow Admins subscribed to this list, even Don.
 
  Don, my skin is quite thick, thank you!!, and yes, unlike you who places
  yourself leagues above everyone else, I do feel stupid sometimes. That's why
  I subscribe to this excellent list and encourage other less fortunate Admins
  to do so to gain a greater knowledge of how to do things the right way.
 
  Your comments are appreciated sir. My apologies for getting your balls
  in an uproar.
  **
 
   --
   *From:* Don Ely [mailto:[EMAIL PROTECTED]
  *Sent:* Tuesday, January 22, 2008 1:43 PM
 
  *To:* MS-Exchange Admin Issues
  *Subject:* Re: GoExchange Response
 
 To clarify, I did NOT say you were stupid because you used the
  program...
 
  I said This product was created for stupid people who don't read the
  documentation or listen to PSS...  So, that wasn't necessarily directed at
  you.  Apparently, it was more appropriately directed at your predecessor and
  you were the unfortunate soul that had to deal with the product...  You just
  happen to take offense to the statement.  In which case, I would say you
  might need to thicken your skin...
 
  Their product is designed for a niche market and I would classify that
  market for so-called Exchange admins lacking the brain cells to actually be
  called admins[1].  Would do me no good to tell them I thought poorly of
  their product as it clearly wasn't designed for Exchange admins with a
  clue.  Oh, and my hard evidence regarding their product...  I can count on
  one hand how many times I have run ESEUTIL or ISINTEG on an Exchange
  database in the last 11-12 years.  And of those times, I was a consultant
  called in for emergency support to ressurect Exchange...
 
  [1] Is that better than the shorter version stupid?
 
   On Jan 22, 2008 10:31 AM, Tom Strader [EMAIL PROTECTED] wrote:
 
  
  
   Don,
  
   I can take constructive criticism and welcome it if its done in a
   positive light, but classifying anyone as stupid just because they use a
   program you disagree with is very unprofessional.
  
   I DO know Exchange and how to use the utilities (manually), learned
   the hard way. I didn't want to use the program:
  
   1.  Because its grossly overpriced
   2.  I feel it is unnecessary if, like you say, you know how to
   administer Exchange.
  
   However, I was literally forced to purchase and install it for this
   company due to their experience with the last stupid administrator.
  
   Thanks for your comments anyhow. I'd suggest if you are so adamantly
   against such a program, you might want to contact them and express your
   feelings to them and provide hard evidence to disapprove the use of the
   program so that we can avoid having other stupid administrators in the
   world.
  
   Have a good day sir!
   **
  
--
*From:* Don Ely [mailto:[EMAIL PROTECTED]
   *Sent:* Tuesday, January 22, 2008 1:14 PM
  
   *To:* MS-Exchange Admin Issues
   *Subject:* Re: GoExchange Response
  
  I don't recall what page it was, but when I read this product was
   designed because most IT people don't know what order to run these
   utilities, etc...; my opinion was quickly formed...
  
   That said, if you don't know how to administer Exchange and have no
   intention of learning, this product is for you.  If you DO