Re: DynamicDistributionList - -RecipientFilter

[Russ Patterson]

Thanks Ian. Luckily, we convinced them to go w/ Custom Attributes.

If anybody wants to show off, I'f love to see what kind of -RecipientFilter
syntax they'd have recommended :)

Happy Friday!


On Thu, Jan 10, 2013 at 12:32 PM, Bruckner, Ian imbr...@ilstu.edu wrote:

  You’re on the right track from my experience. You’d have to say “members
 of x OU + members of y OU + members of z… OU”, because, “All OUs – a OU – b
 OU” is not possible with a msft ldap filter. It’s better to key off of
 another attribute, either one already existing, or one you script (and
 schedule to run nightly or whatever you’d like) the addition of.. and
 that’s nice because scripts CAN say “All OUs – a OU – b OU”.

 ** **

 Ian

 ** **

 *From:* Russ Patterson [mailto:rus...@gmail.com]
 *Sent:* Thursday, January 10, 2013 11:23
 *To:* MS-Exchange Admin Issues
 *Subject:* DynamicDistributionList - -RecipientFilter

 ** **

 Hello All - 

 ** **

 I seem to remember that excluding membership in a DDL by OU is a no- go,
 am I wrong?

 ** **

 I have a customer who has Exchange 2010 and an AD with a complicated
 structure - 

 AD

Continent

 Country

 Users

 Non-Employee

  Country

   Users

  Non-Employee

 ** **

 on  on, ad infinitum

 ** **

 They want a DDL with ALL users, except the ones in the 15 - 20 OUs named
 Non-Employee. I'm thinking something a good bit less dynamic, like
 CustomAttribute.

 ** **

 Anybody an LDAP or OPATH genius? Is there a way to use -RecipientFilter 
 get away with this? I'm pretty sure the answer is no, please let me know
 what you think.

 ** **

 Thanks very much, as always. 

 ** **

 Russ  

 ** **

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

DynamicDistributionList - -RecipientFilter

[Russ Patterson]

Hello All -

I seem to remember that excluding membership in a DDL by OU is a no- go, am
I wrong?

I have a customer who has Exchange 2010 and an AD with a complicated
structure -
AD
   Continent
Country
Users
Non-Employee
 Country
  Users
 Non-Employee

on  on, ad infinitum

They want a DDL with ALL users, except the ones in the 15 - 20 OUs named
Non-Employee. I'm thinking something a good bit less dynamic, like
CustomAttribute.

Anybody an LDAP or OPATH genius? Is there a way to use -RecipientFilter 
get away with this? I'm pretty sure the answer is no, please let me know
what you think.

Thanks very much, as always.

Russ

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

SLIGHTLY OFF TOPIC: IP list allowed to relay on IIS 2k3

[Russ Patterson]

I have a client who has an Exchange 2003 org behind two IIS servers
that act as the SMTP front-end outbound - in other words, the Exchange
org, and various other servers in their AD, relay across the two IIS
servers - which are Windows server 2003.

It's a fairly large company, and they have a few thousand IPs allowed
to relay. The problem is - over the years, one of the relay servers
has about 1500 IPs, where the other (Sadly) has close to 1900 listed
as allowed to relay.

In Windows 2003, scripting is not very user friendly (at least to me,
whose limit is hacking away at Powershell.) We have found a VB script
that appears to copy out the IP addresses, and has allowed us to get
the IPs from each server and compare them in Excel spreadsheets.

My issue is - using the same script to import the results of merging
those IP addresses back into IIS sort of appears to work; but no IPs
ever show up in the GUI. - If you use the script t pull the IPs out,
you see a list of IPs, but the GUI (IIS / SMTP/ Relay button) shows as
blank. I need the list to show to satisfy my client. What am I doing
wrong? Note - we tried a reboot, iisreset, etc.

http://blogs.msdn.com/b/vijaysk/archive/2009/05/07/setting-smtp-relayiplist-from-a-script.aspx
is a link to the script we're trying to use. Any suggestions greatly
appreciated!

Russ

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

MigrateUMCustomPrompts.ps1

[Russ Patterson]

Anybody had any experience with MigrateUMCustomPrompts.ps1?

 I'm in the middle of a 2007 - 2101 sp1 UM migration (soon to be
followed by mailboxes.) I've read lots of confusing stuff about
import-UMPrompt and Copy-UMCustomprompt  and then I find a blog that
implies that all you need is this script from the E2010sp1 bin/scripts
directory.

UM is my big weakness (that and scripting) - I'd like some
reassurances - or at least wiser input about this piece. I'd love some
reading recommendations too (don't be afraid to start with UM for
Dummies, either!)

Thanks as always.

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

Re: adding proxyAddresses to Exchange 2007 users

[Russ Patterson]

The actual table has more columns than this in it, but the data I'm
after is in two columns:
alias, proxyaddresses
alias: to -identify the mailbox I'm adding the data from
proxyaddresses column to;
Proxyaddresses: - a random number of smtp addresses, comma delimited
in one cell.

I can manipulate Excel to get each address in its own cell, if that
helps - then those headings would be from proxyaddress1 to
proxyaddress7

(I could even use DN instead of alias, if that's easier) - so the data is like:

fsmith, smtp:fsm...@abc.com,smtp:fsm...@xyz.com,smtp:fred.sm...@abc.com
tjones, 
smtp:tjo...@abc.com,smtp:tom.jo...@abc.com,smtp:tjo...@xyz.com,smtp:tom.jo...@xyz.com,smtp:t...@123.com

Thanks! - it's kicking my posterior.


On Mon, Jan 31, 2011 at 7:49 PM, Michael B. Smith mich...@smithcons.com wrote:
 I need to see the data! :-P

 Regards,

 Michael B. Smith
 Consultant and Exchange MVP
 http://TheEssentialExchange.com


 -Original Message-
 From: Russ Patterson [mailto:rus...@gmail.com]
 Sent: Monday, January 31, 2011 7:31 PM
 To: MS-Exchange Admin Issues
 Subject: Re: adding proxyAddresses to Exchange 2007 users

 This is still kicking me while I'm down.

 Michael, I can see that your logic (the If Then statement) needs to fit in my 
 poor attempts somewhere about where the XXX is:

 Import-CSV C:\data\test.csv | foreach-object -process { Get-mailbox
 -identity $_.displayname | update-list -property emailaddresses XXX
 -Add
   $_.proxyAddresses | Set-Mailbox}

 probably using some sort of nested foreach-object thing like:

 Import-CSV C:\data\test.csv | foreach-object -process { Get-mailbox 
 -identity $_.displayname | foreach-object -process { update-list -property 
 emailaddresses DO the IF THen .Splitloop here  -Add 
 magicalproxyArray.elementX.proxyAddresses } | Set-Mailbox}

 but nothing's working. Can I get one more hint? A BIG one? G

 As always, greatly appreciated.

 On Mon, Jan 31, 2011 at 5:18 PM, Michael B. Smith mich...@smithcons.com 
 wrote:
 If
        $a = x, y, z

 Then

        $ary = $a.Split( ',' )

 Regards,

 Michael B. Smith
 Consultant and Exchange MVP
 http://TheEssentialExchange.com


 -Original Message-
 From: Russ Patterson [mailto:rus...@gmail.com]
 Sent: Monday, January 31, 2011 5:16 PM
 To: MS-Exchange Admin Issues
 Subject: Re: adding proxyAddresses to Exchange 2007 users

 That's true - they are comma delimited in one column. How does one convert 
 those into an array - I tried prepending @( and a ) at the other end; didn't 
 work.

 I posted to both forums because I'm under a time crunch - often MS staff in 
 India respond over nightYOu guys are amazingly prompt - thanks!

 On Mon, Jan 31, 2011 at 5:10 PM, Campbell, Rob 
 rob_campb...@centraltechnology.net wrote:
 It sounds like there a comma-separated list of proxy addresses in one cell 
 that's going to need to be turned into an array of addresses first.

 -Original Message-
 From: Michael B. Smith [mailto:mich...@smithcons.com]
 Sent: Monday, January 31, 2011 4:05 PM
 To: MS-Exchange Admin Issues
 Subject: RE: adding proxyAddresses to Exchange 2007 users

 You reverse the technique shown here:

 http://theessentialexchange.com/blogs/michael/archive/2009/07/07/remo
 v ing-old-emailaddresses-proxyaddresses-in-exchange-2007.aspx

 You want $b += $e.

 Alternately, $b.Add( $e ).

 Regards,

 Michael B. Smith
 Consultant and Exchange MVP
 http://TheEssentialExchange.com


 -Original Message-
 From: Russ Patterson [mailto:rus...@gmail.com]
 Sent: Monday, January 31, 2011 5:02 PM
 To: MS-Exchange Admin Issues
 Subject: adding proxyAddresses to Exchange 2007 users

 Exchange 2007 SP3. I have a csv of over 500 rows, with displayname and 
 proxyAddresses in it as the columns. The proxyAddresses column has anywhere 
 from 3 to 7 smtp: addresses in it, comma delimited. Is there anyway to add 
 the email addresses to our users? They are all in one OU.

 I've been trying hundreds of variations of this:



 Import-CSV C:\data\test.csv | foreach-object -process { Get-mailbox
 -identity $_.displayname | update-list -property emailaddresses -Add
 $_.proxyAddresses | Set-Mailbox}

 Not having any luck at all.

 All help greatly appreciated!

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist


 *
 *
 
 Note:
 The information contained in this message may be privileged and
 confidential and protected from disclosure.  If the reader of this
 message is not the intended recipient, or an employee or agent
 responsible for delivering this message to the intended recipient,
 you

adding proxyAddresses to Exchange 2007 users

[Russ Patterson]

Exchange 2007 SP3. I have a csv of over 500 rows, with displayname and
proxyAddresses in it as the columns. The proxyAddresses column has
anywhere from 3 to 7 smtp: addresses in it, comma delimited. Is there
anyway to add the email addresses to our users? They are all in one
OU.

I've been trying hundreds of variations of this:



Import-CSV C:\data\test.csv | foreach-object -process { Get-mailbox
-identity $_.displayname | update-list -property emailaddresses -Add
$_.proxyAddresses | Set-Mailbox}

Not having any luck at all.

All help greatly appreciated!

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

Re: adding proxyAddresses to Exchange 2007 users

[Russ Patterson]

That's true - they are comma delimited in one column. How does one
convert those into an array - I tried prepending @( and a ) at the
other end; didn't work.

I posted to both forums because I'm under a time crunch - often MS
staff in India respond over nightYOu guys are amazingly prompt -
thanks!

On Mon, Jan 31, 2011 at 5:10 PM, Campbell, Rob
rob_campb...@centraltechnology.net wrote:
 It sounds like there a comma-separated list of proxy addresses in one cell 
 that's going to need to be turned into an array of addresses first.

 -Original Message-
 From: Michael B. Smith [mailto:mich...@smithcons.com]
 Sent: Monday, January 31, 2011 4:05 PM
 To: MS-Exchange Admin Issues
 Subject: RE: adding proxyAddresses to Exchange 2007 users

 You reverse the technique shown here:

 http://theessentialexchange.com/blogs/michael/archive/2009/07/07/removing-old-emailaddresses-proxyaddresses-in-exchange-2007.aspx

 You want $b += $e.

 Alternately, $b.Add( $e ).

 Regards,

 Michael B. Smith
 Consultant and Exchange MVP
 http://TheEssentialExchange.com


 -Original Message-
 From: Russ Patterson [mailto:rus...@gmail.com]
 Sent: Monday, January 31, 2011 5:02 PM
 To: MS-Exchange Admin Issues
 Subject: adding proxyAddresses to Exchange 2007 users

 Exchange 2007 SP3. I have a csv of over 500 rows, with displayname and 
 proxyAddresses in it as the columns. The proxyAddresses column has anywhere 
 from 3 to 7 smtp: addresses in it, comma delimited. Is there anyway to add 
 the email addresses to our users? They are all in one OU.

 I've been trying hundreds of variations of this:



 Import-CSV C:\data\test.csv | foreach-object -process { Get-mailbox 
 -identity $_.displayname | update-list -property emailaddresses -Add 
 $_.proxyAddresses | Set-Mailbox}

 Not having any luck at all.

 All help greatly appreciated!

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist


 **
 Note:
 The information contained in this message may be privileged and confidential 
 and
 protected from disclosure.  If the reader of this message is not the intended
 recipient, or an employee or agent responsible for delivering this message to
 the intended recipient, you are hereby notified that any dissemination,
 distribution or copying of this communication is strictly prohibited. If you
 have received this communication in error, please notify us immediately by
 replying to the message and deleting it from your computer.
 **



 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist



---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

Re: adding proxyAddresses to Exchange 2007 users

[Russ Patterson]

This is still kicking me while I'm down.

Michael, I can see that your logic (the If Then statement) needs to
fit in my poor attempts somewhere about where the XXX is:

 Import-CSV C:\data\test.csv | foreach-object -process { Get-mailbox
 -identity $_.displayname | update-list -property emailaddresses XXX -Add
  $_.proxyAddresses | Set-Mailbox}

probably using some sort of nested foreach-object thing like:

Import-CSV C:\data\test.csv | foreach-object -process { Get-mailbox
-identity $_.displayname | foreach-object -process { update-list
-property emailaddresses DO the IF THen .Splitloop here  -Add
magicalproxyArray.elementX.proxyAddresses } | Set-Mailbox}

but nothing's working. Can I get one more hint? A BIG one? G

As always, greatly appreciated.

On Mon, Jan 31, 2011 at 5:18 PM, Michael B. Smith mich...@smithcons.com wrote:
 If
        $a = x, y, z

 Then

        $ary = $a.Split( ',' )

 Regards,

 Michael B. Smith
 Consultant and Exchange MVP
 http://TheEssentialExchange.com


 -Original Message-
 From: Russ Patterson [mailto:rus...@gmail.com]
 Sent: Monday, January 31, 2011 5:16 PM
 To: MS-Exchange Admin Issues
 Subject: Re: adding proxyAddresses to Exchange 2007 users

 That's true - they are comma delimited in one column. How does one convert 
 those into an array - I tried prepending @( and a ) at the other end; didn't 
 work.

 I posted to both forums because I'm under a time crunch - often MS staff in 
 India respond over nightYOu guys are amazingly prompt - thanks!

 On Mon, Jan 31, 2011 at 5:10 PM, Campbell, Rob 
 rob_campb...@centraltechnology.net wrote:
 It sounds like there a comma-separated list of proxy addresses in one cell 
 that's going to need to be turned into an array of addresses first.

 -Original Message-
 From: Michael B. Smith [mailto:mich...@smithcons.com]
 Sent: Monday, January 31, 2011 4:05 PM
 To: MS-Exchange Admin Issues
 Subject: RE: adding proxyAddresses to Exchange 2007 users

 You reverse the technique shown here:

 http://theessentialexchange.com/blogs/michael/archive/2009/07/07/remov
 ing-old-emailaddresses-proxyaddresses-in-exchange-2007.aspx

 You want $b += $e.

 Alternately, $b.Add( $e ).

 Regards,

 Michael B. Smith
 Consultant and Exchange MVP
 http://TheEssentialExchange.com


 -Original Message-
 From: Russ Patterson [mailto:rus...@gmail.com]
 Sent: Monday, January 31, 2011 5:02 PM
 To: MS-Exchange Admin Issues
 Subject: adding proxyAddresses to Exchange 2007 users

 Exchange 2007 SP3. I have a csv of over 500 rows, with displayname and 
 proxyAddresses in it as the columns. The proxyAddresses column has anywhere 
 from 3 to 7 smtp: addresses in it, comma delimited. Is there anyway to add 
 the email addresses to our users? They are all in one OU.

 I've been trying hundreds of variations of this:



 Import-CSV C:\data\test.csv | foreach-object -process { Get-mailbox
 -identity $_.displayname | update-list -property emailaddresses -Add
 $_.proxyAddresses | Set-Mailbox}

 Not having any luck at all.

 All help greatly appreciated!

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist


 **
 
 Note:
 The information contained in this message may be privileged and
 confidential and protected from disclosure.  If the reader of this
 message is not the intended recipient, or an employee or agent
 responsible for delivering this message to the intended recipient, you
 are hereby notified that any dissemination, distribution or copying of
 this communication is strictly prohibited. If you have received this
 communication in error, please notify us immediately by replying to the 
 message and deleting it from your computer.
 **
 



 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist



 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist


 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist



---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

Re: GPO for Outlook signature - with a twist

[Russ Patterson]

Both good ideas, James - thanks. It will be decided by the sender when
to use a sig.

On Thu, Dec 2, 2010 at 10:45 PM, James Hill
james.h...@superamart.com.au wrote:
 Just had another idea.  Two different message templates.  One with sig, one 
 without.

 -Original Message-
 From: James Hill
 Sent: Friday, 3 December 2010 1:44 PM
 To: MS-Exchange Admin Issues
 Subject: RE: GPO for Outlook signature - with a twist

 How do they want it to be decided?  Based on who the message is sent to or do 
 they have to choose each time?

 If it's choosing each time the only non-3rd party way I can think of is to 
 create two signatures.  One being the standard, the other being one that 
 looks like it is just blank.  Then when sending a message they can right 
 click on the signature and choose the blank one (if that's what they want).

 -Original Message-
 From: Russ Patterson [mailto:rus...@gmail.com]
 Sent: Friday, 3 December 2010 2:47 AM
 To: MS-Exchange Admin Issues
 Subject: Re: GPO for Outlook signature - with a twist

 I've looked at Exclaimer before. It does look like a good piece of software, 
 thanks Paul. - Anyone have a non-3rd party way?

 On Thu, Dec 2, 2010 at 11:36 AM, Paul Hutchings paul.hutchi...@mira.co.uk 
 wrote:
 Have a look at Exclaimer signature manager.  Not free, does seem to do
 exactly that though.

 I'm trialling it now and look ma, no signature!

 -Original Message-
 From: Russ Patterson [mailto:rus...@gmail.com]
 Sent: 02 December 2010 16:33
 To: MS-Exchange Admin Issues
 Subject: GPO for Outlook signature - with a twist

 Morning All -

 HR has asked for a weird one, I think. They want a standardized
 Outlook signature for everyone, but - only when they choose to use a 
 signature.
 SO, we want to force a pre-defined signature if and only if a user
 chooses to use a sig. No need to add a sig when you're emailing your
 spouse about the groceries to pick up on the way home, etc.

 Any suggestions? Is this possible without any extra software? Is there
 software that would enable such?

 Thanks for the time - Happy Holidays.

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 --
 MIRA Ltd

 Watling Street, Nuneaton, Warwickshire, CV10 0TU, England Registered
 in England and Wales No. 402570 VAT Registration  GB 114 5409 96

 The contents of this e-mail are confidential and are solely for the use of 
 the intended recipient.  If you receive this e-mail in error, please delete 
 it and notify us either by e-mail, telephone or fax.  You should not copy, 
 forward or otherwise disclose the content of the e-mail as this is 
 prohibited.

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist



 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist


 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist


 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist



---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

GPO for Outlook signature - with a twist

[Russ Patterson]

Morning All -

HR has asked for a weird one, I think. They want a standardized
Outlook signature for everyone, but - only when they choose to use a
signature. SO, we want to force a pre-defined signature if and only if
a user chooses to use a sig. No need to add a sig when you're emailing
your spouse about the groceries to pick up on the way home, etc.

Any suggestions? Is this possible without any extra software? Is there
software that would enable such?

Thanks for the time - Happy Holidays.

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

Re: GPO for Outlook signature - with a twist

[Russ Patterson]

I've looked at Exclaimer before. It does look like a good piece of
software, thanks Paul. - Anyone have a non-3rd party way?

On Thu, Dec 2, 2010 at 11:36 AM, Paul Hutchings
paul.hutchi...@mira.co.uk wrote:
 Have a look at Exclaimer signature manager.  Not free, does seem to do
 exactly that though.

 I'm trialling it now and look ma, no signature!

 -Original Message-
 From: Russ Patterson [mailto:rus...@gmail.com]
 Sent: 02 December 2010 16:33
 To: MS-Exchange Admin Issues
 Subject: GPO for Outlook signature - with a twist

 Morning All -

 HR has asked for a weird one, I think. They want a standardized Outlook
 signature for everyone, but - only when they choose to use a signature.
 SO, we want to force a pre-defined signature if and only if a user
 chooses to use a sig. No need to add a sig when you're emailing your
 spouse about the groceries to pick up on the way home, etc.

 Any suggestions? Is this possible without any extra software? Is there
 software that would enable such?

 Thanks for the time - Happy Holidays.

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 --
 MIRA Ltd

 Watling Street, Nuneaton, Warwickshire, CV10 0TU, England
 Registered in England and Wales No. 402570
 VAT Registration  GB 114 5409 96

 The contents of this e-mail are confidential and are solely for the use of 
 the intended recipient.  If you receive this e-mail in error, please delete 
 it and notify us either by e-mail, telephone or fax.  You should not copy, 
 forward or otherwise disclose the content of the e-mail as this is prohibited.

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist



---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

Script to see Send-As rights for a DIst List

[Russ Patterson]

Anyone have a Powershell script that will list who has Send-As rights
on a particular DIstribution List? I'm googling  binging as much as I
can, but the demand for an answer is higher than my bandwidth at the
moment - Thanks All!

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

Re: Script to see Send-As rights for a DIst List

[Russ Patterson]

I found this:

http://exchangeshare.wordpress.com/2008/09/01/how-to-find-all-mailboxes-with-send-as-permission-assigned/

It'll do fine!

Thanks All.

On Thu, Nov 4, 2010 at 10:05 AM, Russ Patterson rus...@gmail.com wrote:
 Anyone have a Powershell script that will list who has Send-As rights
 on a particular DIstribution List? I'm googling  binging as much as I
 can, but the demand for an answer is higher than my bandwidth at the
 moment - Thanks All!

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

Specific connectors for specific address spaces

[Russ Patterson]

Hello everyone -

We're testing Exchange hosted services for archive via FOPE. Their
documentation strongly recommends using a dedicated smtp connector for
their archive address space to get the Journal mailbox traffic to
them. I set up a send connector pointing at the given archive
namespace, and set my Edge server as the source server. (This is all
Exchange 2007.)

Mail queued up on my hubs - with a next hop destination of my new
connector, untill we created a connector from my hubs to the edge
_with the same specific archive address space_.

I expected the old  well used * address space conn to get the journal
email to my Edge, and then the specific address space to shoot
straight at the Microsoft Archive name space - but it didn't,
apparently. My question is - if you're going to set up a specific
connector for a specific external address space, do you have to create
it all the way thru your org? i.e. like we did - one conn from Hub to
Edge with the specific address space, and then the one from Edge to
that spacific address space on the outside?

Thanks all!

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

OT: issue with voice mail on client

[Russ Patterson]

Has anyone encountered this error: “This file cannot be previewed
because there is no previewer installed for it.”  from Outlook 2007
when trying to play a voice mail - 2007 Exchange , w/ 2007 UM server?
Up until two days ago, user was able to play VM on Outlook, or choose
play on phone. Looging in two days ago, voice mail looks just like a
message with an attachment, and dbl-clicking the wav file gets that
error.

Add-in appears normal, it's not disabled, but there is no Voice Mail
tab in Tools/Options. We've tried a new Outlook proifile, with a new
extend.dat.

Any other suggestions?

Happy Friday, btw.

Re: issue with voice mail on client

[Russ Patterson]

I don't know the answer to that - are you implying I should try
deleting it  - does it get rebuilt on restart?

On Fri, Aug 20, 2010 at 2:54 PM, Maglinger, Paul pmaglin...@scvl.com wrote:
 I don't anything about UM, but does it use frmcache?

 -Original Message-
 From: Russ Patterson [mailto:rus...@gmail.com]
 Sent: Friday, August 20, 2010 1:52 PM
 To: MS-Exchange Admin Issues
 Subject: OT: issue with voice mail on client

 Has anyone encountered this error: This file cannot be previewed
 because there is no previewer installed for it.  from Outlook 2007
 when trying to play a voice mail - 2007 Exchange , w/ 2007 UM server?
 Up until two days ago, user was able to play VM on Outlook, or choose
 play on phone. Looging in two days ago, voice mail looks just like a
 message with an attachment, and dbl-clicking the wav file gets that
 error.

 Add-in appears normal, it's not disabled, but there is no Voice Mail
 tab in Tools/Options. We've tried a new Outlook proifile, with a new
 extend.dat.

 Any other suggestions?

 Happy Friday, btw.

Re: issue with voice mail on client

[Russ Patterson]

http://support.microsoft.com/kb/919596 - makes your suggestion
interesting - Thanks!

On Fri, Aug 20, 2010 at 2:54 PM, Maglinger, Paul pmaglin...@scvl.com wrote:
 I don't anything about UM, but does it use frmcache?

 -Original Message-
 From: Russ Patterson [mailto:rus...@gmail.com]
 Sent: Friday, August 20, 2010 1:52 PM
 To: MS-Exchange Admin Issues
 Subject: OT: issue with voice mail on client

 Has anyone encountered this error: This file cannot be previewed
 because there is no previewer installed for it.  from Outlook 2007
 when trying to play a voice mail - 2007 Exchange , w/ 2007 UM server?
 Up until two days ago, user was able to play VM on Outlook, or choose
 play on phone. Looging in two days ago, voice mail looks just like a
 message with an attachment, and dbl-clicking the wav file gets that
 error.

 Add-in appears normal, it's not disabled, but there is no Voice Mail
 tab in Tools/Options. We've tried a new Outlook proifile, with a new
 extend.dat.

 Any other suggestions?

 Happy Friday, btw.

Re: issue with voice mail on client

[Russ Patterson]

Help Desk swore they did that before they referred this to me - but
I'll dbl-check - Thanks!

On Fri, Aug 20, 2010 at 3:01 PM, David L Herrick
davidherr...@nincal.com wrote:
 Had that happen back when we used Nortel

 Add in may or may not have still appeared to be there - but the actual app 
 was gone or corrupt reinstall always took care of it (with Nortel it was 
 actually uninstall the 3 components with reboot and reinstall ..)



 -Original Message-
 From: Russ Patterson [mailto:rus...@gmail.com]
 Sent: Friday, August 20, 2010 11:52 AM
 To: MS-Exchange Admin Issues
 Subject: OT: issue with voice mail on client

 Has anyone encountered this error: This file cannot be previewed because 
 there is no previewer installed for it.  from Outlook 2007 when trying to 
 play a voice mail - 2007 Exchange , w/ 2007 UM server?
 Up until two days ago, user was able to play VM on Outlook, or choose play on 
 phone. Looging in two days ago, voice mail looks just like a message with an 
 attachment, and dbl-clicking the wav file gets that error.

 Add-in appears normal, it's not disabled, but there is no Voice Mail tab in 
 Tools/Options. We've tried a new Outlook proifile, with a new extend.dat.

 Any other suggestions?

 Happy Friday, btw.





 Regards,

 David Herrick

 Chief Financial Officer - Executive Vice President
 Names in the News
 180 Grand Avenue
 Suite 1545
 Oakland, CA 94612
 415 989-3350
 415 433 7796 Fax
 davidherr...@nincal.com
 www.namesinthenews.com




 This email and any attached files are confidential and intended solely for 
 the intended recipient(s).
 If you are not the named recipient you should not read, distribute, copy or 
 alter this email. Any views
 or opinions expressed in this email are those of the author and do not 
 represent those of Names in the News.
 Warning: Although precautions have been taken to make sure no viruses are 
 present in this email,
 the company cannot accept responsibility for any loss or damage that arise 
 from the use of this email or
 attachments. {*}

Re: issue with voice mail on client

[Russ Patterson]

Clearing the forms cache worked! - THanks a mil!!!

On Fri, Aug 20, 2010 at 3:03 PM, Sean Martin seanmarti...@gmail.com wrote:
 Yes it does. Try clearing the forms cache within Outlook first.

 Tools/Options
 Other tab
 Advanced
 Custom Forms
 Manage forms
 clear cache
 Restart outlook

 - Sean

 On Fri, Aug 20, 2010 at 10:59 AM, Russ Patterson rus...@gmail.com wrote:

 I don't know the answer to that - are you implying I should try
 deleting it  - does it get rebuilt on restart?

 On Fri, Aug 20, 2010 at 2:54 PM, Maglinger, Paul pmaglin...@scvl.com
 wrote:
  I don't anything about UM, but does it use frmcache?
 
  -Original Message-
  From: Russ Patterson [mailto:rus...@gmail.com]
  Sent: Friday, August 20, 2010 1:52 PM
  To: MS-Exchange Admin Issues
  Subject: OT: issue with voice mail on client
 
  Has anyone encountered this error: This file cannot be previewed
  because there is no previewer installed for it.  from Outlook 2007
  when trying to play a voice mail - 2007 Exchange , w/ 2007 UM server?
  Up until two days ago, user was able to play VM on Outlook, or choose
  play on phone. Looging in two days ago, voice mail looks just like a
  message with an attachment, and dbl-clicking the wav file gets that
  error.
 
  Add-in appears normal, it's not disabled, but there is no Voice Mail
  tab in Tools/Options. We've tried a new Outlook proifile, with a new
  extend.dat.
 
  Any other suggestions?
 
  Happy Friday, btw.
 
 
 
 
 

Re: Outlook Anywhere for restriced set of users

[Russ Patterson]

Hi, Michael - at present we're on 2007. That's VERY good to know about 2010
- perhaps we could just move mailboxes a bit earlier. Always most excellent
info - Thanks!

On Wed, Jul 21, 2010 at 5:23 PM, Michael B. Smith mich...@smithcons.comwrote:

  Modifying the IIS website is not supported.



 You don’t say what version of Exchange. At least Exchange 2010 supports
 “set-casMailbox –mapiBlockOutlookRpcHttp” to do what you want.



 Regards,



 Michael B. Smith

 Consultant and Exchange MVP

 http://TheEssentialExchange.com http://theessentialexchange.com/



 *From:* Russ Patterson [mailto:rus...@gmail.com]
 *Sent:* Wednesday, July 21, 2010 11:26 AM

 *To:* MS-Exchange Admin Issues
 *Subject:* Re: Outlook Anywhere for restriced set of users



 I'd love to do it that way; if it's possible. This is for a few users, when
 they travel - external access.

 On Wed, Jul 21, 2010 at 11:19 AM, Ellis, John P. johnel...@wirral.gov.uk
 wrote:

 Ive not seen it either. I was thinking if it was web based, you could
 create a group on AD , add users to the group and add the group to the IIS
 permissions.



 Is this for internal access?



 John


  --

 *From:* Russ Patterson [mailto:rus...@gmail.com]

 *Sent:* 21 July 2010 16:09


 *To:* MS-Exchange Admin Issues

 *Subject:* Re: Outlook Anywhere for restriced set of users

 OA is RPC over HTTP - but I don't think there's a web server - you just
 enable the protocol (rpc/http) and set up a DNS record. But it's gotta point
 to something, doesn't it? I've never used it, and now we've been asked to
 set it up IF we can restrict who uses it. I wish I could respond in a more
 informed manner, John.



 I think the DNS record just points to the enabled for rpc_over_http CAS
 server with a special name, and then Outlook talks to that CAS server with
 RPC to get pointed at the mailbox. Everyone, please chime in to correct my
 assumptions.

 On Wed, Jul 21, 2010 at 10:33 AM, Ellis, John P. johnel...@wirral.gov.uk
 wrote:

 Not sure, but can you enable/Disable the option inside AD?



 Is OA a web server?

 John




  --

 *From:* Russ Patterson [mailto:rus...@gmail.com]
 *Sent:* 21 July 2010 15:25
 *To:* MS-Exchange Admin Issues
 *Subject:* Outlook Anywhere for restriced set of users

 Hello All -



 Any creative suggestions as to how to allow Outlook Anywhere for only a
 sub-set of your users? Assume that any secret URL will stay secret for about
 37 seconds, and that we'd want a small percentage of users 'enabled.' -
 Seperate CAS server? restricted certs? All ideas welcomed. Thanks!

 **

 This email and any files transmitted with it are confidential and

 intended solely for the use of the individual or entity to whom they

 are addressed. If you have received this email in error please notify

 the system manager.

 This footnote also confirms that this email message has been swept by

 MIMEsweeper for the presence of computer viruses.

 www.clearswift.com

 **

Outlook Anywhere for restriced set of users

[Russ Patterson]

Hello All -

Any creative suggestions as to how to allow Outlook Anywhere for only a
sub-set of your users? Assume that any secret URL will stay secret for about
37 seconds, and that we'd want a small percentage of users 'enabled.' -
Seperate CAS server? restricted certs? All ideas welcomed. Thanks!

Re: Outlook Anywhere for restriced set of users

[Russ Patterson]

OA is RPC over HTTP - but I don't think there's a web server - you just
enable the protocol (rpc/http) and set up a DNS record. But it's gotta point
to something, doesn't it? I've never used it, and now we've been asked to
set it up IF we can restrict who uses it. I wish I could respond in a more
informed manner, John.

I think the DNS record just points to the enabled for rpc_over_http CAS
server with a special name, and then Outlook talks to that CAS server with
RPC to get pointed at the mailbox. Everyone, please chime in to correct my
assumptions.

On Wed, Jul 21, 2010 at 10:33 AM, Ellis, John P. johnel...@wirral.gov.ukwrote:

  Not sure, but can you enable/Disable the option inside AD?

 Is OA a web server?
 John


  --
 *From:* Russ Patterson [mailto:rus...@gmail.com]
 *Sent:* 21 July 2010 15:25
 *To:* MS-Exchange Admin Issues
 *Subject:* Outlook Anywhere for restriced set of users

  Hello All -

 Any creative suggestions as to how to allow Outlook Anywhere for only a
 sub-set of your users? Assume that any secret URL will stay secret for about
 37 seconds, and that we'd want a small percentage of users 'enabled.' -
 Seperate CAS server? restricted certs? All ideas welcomed. Thanks!

 **

 This email and any files transmitted with it are confidential and

 intended solely for the use of the individual or entity to whom they

 are addressed. If you have received this email in error please notify

 the system manager.

 This footnote also confirms that this email message has been swept by

 MIMEsweeper for the presence of computer viruses.

 www.clearswift.com

 **

Re: Outlook Anywhere for restriced set of users

[Russ Patterson]

I'd love to do it that way; if it's possible. This is for a few users, when
they travel - external access.

On Wed, Jul 21, 2010 at 11:19 AM, Ellis, John P. johnel...@wirral.gov.ukwrote:

  Ive not seen it either. I was thinking if it was web based, you could
 create a group on AD , add users to the group and add the group to the IIS
 permissions.

 Is this for internal access?

 John

  --
  *From:* Russ Patterson [mailto:rus...@gmail.com]
 *Sent:* 21 July 2010 16:09

 *To:* MS-Exchange Admin Issues
 *Subject:* Re: Outlook Anywhere for restriced set of users

   OA is RPC over HTTP - but I don't think there's a web server - you just
 enable the protocol (rpc/http) and set up a DNS record. But it's gotta point
 to something, doesn't it? I've never used it, and now we've been asked to
 set it up IF we can restrict who uses it. I wish I could respond in a more
 informed manner, John.

 I think the DNS record just points to the enabled for rpc_over_http CAS
 server with a special name, and then Outlook talks to that CAS server with
 RPC to get pointed at the mailbox. Everyone, please chime in to correct my
 assumptions.

 On Wed, Jul 21, 2010 at 10:33 AM, Ellis, John P. 
 johnel...@wirral.gov.ukwrote:

  Not sure, but can you enable/Disable the option inside AD?

 Is OA a web server?
 John


  --
 *From:* Russ Patterson [mailto:rus...@gmail.com]
 *Sent:* 21 July 2010 15:25
 *To:* MS-Exchange Admin Issues
 *Subject:* Outlook Anywhere for restriced set of users

  Hello All -

 Any creative suggestions as to how to allow Outlook Anywhere for only a
 sub-set of your users? Assume that any secret URL will stay secret for about
 37 seconds, and that we'd want a small percentage of users 'enabled.' -
 Seperate CAS server? restricted certs? All ideas welcomed. Thanks!

 **

 This email and any files transmitted with it are confidential and

 intended solely for the use of the individual or entity to whom they

 are addressed. If you have received this email in error please notify

 the system manager.

 This footnote also confirms that this email message has been swept by

 MIMEsweeper for the presence of computer viruses.

 www.clearswift.com

 **

More Digital Cert woes (somewhat off topic)

[Russ Patterson]

I got the cert for our 2010 CAS server  installed successfully this morning
(Thanks Michael B.) Everything was flowing smoothly for a few hours, so we
decided to export the cert  install it on our 2007 CAS server. We'll be
using both for several days/weeks as we migrate fully to 2010. (Split DNS,
trying to economize on names in the SAN as much as possible.) The cert does
not have the 2007 CAS server name as one of the SAN entries. We changed all
the internal URLs that looked pertinent to a name that was a SAN entry, but
now we are getting this error from Communicator:


---

Microsoft Office Communicator 2007

---

Communicator is in the process of trying to locate your Exchange Web
Services. Your Outlook calendar information and Out of Office message may
not be available and your calls may not be forwarded based on your working
hours.

---

OK

---



This error occurs as Communicator is starting up; if you click YES on the
digital cert nag (2 green check marks, then a red X on The name on the
security certificate is invalid or does not match the name of the site)
that pops up with it Communicator starts with no other issues. You then get
the same nag (2 green checkmarks  the red X) when you start Outlook. Any
suggestions as to what else I need to change to get rid of the nag?

Digital Cert Request response

[Russ Patterson]

Hello all -

We just got a SAN DigCert request back, and I'm trying to import it into our
2010 CAS server. Problem is - there's no Complete Pending Request wizard
on the Server Configuration / Exchange certificates tab Actions Pane.

Anybody have any suggestions about how to import this .CRT file? Do I just
use Import-ExchangeCertificate? I'm not real positive I understand the
-FileData part of that cmdlets syntax. Do I need to use the Certificate mmc
first?

Sorry about my lack of DigCert knowledge. Any suggestions gratefully
accepted.

Russ

Re: Digital Cert Request response

[Russ Patterson]

On that machine - that's why I'm so befuddled.

On Mon, May 3, 2010 at 1:57 PM, Michael B. Smith mich...@smithcons.comwrote:

  Where did you generate the CSR?



 Regards,



 Michael B. Smith

 Consultant and Exchange MVP

 http://TheEssentialExchange.com http://theessentialexchange.com/



 *From:* Russ Patterson [mailto:rus...@gmail.com]
 *Sent:* Monday, May 03, 2010 1:50 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* Digital Cert Request response



 Hello all -



 We just got a SAN DigCert request back, and I'm trying to import it into
 our 2010 CAS server. Problem is - there's no Complete Pending Request
 wizard on the Server Configuration / Exchange certificates tab Actions Pane.



 Anybody have any suggestions about how to import this .CRT file? Do I just
 use Import-ExchangeCertificate? I'm not real positive I understand the
 -FileData part of that cmdlets syntax. Do I need to use the Certificate mmc
 first?



 Sorry about my lack of DigCert knowledge. Any suggestions gratefully
 accepted.



 Russ

Re: Digital Cert Request response

[Russ Patterson]

I created the request (still have a copy of the .req file there) on the
machine I'm trying to import onto.

On Mon, May 3, 2010 at 1:58 PM, Tim Evans tev...@sparling.com wrote:

  You need to export it from your current server first, with the private
 key. It will give you a PFX file you can import into the new server.
 Whenever I get a new cert, I export like this and keep a copy for backup.



 ...Tim



 *From:* Russ Patterson [mailto:rus...@gmail.com]
 *Sent:* Monday, May 03, 2010 10:50 AM

 *To:* MS-Exchange Admin Issues
 *Subject:* Digital Cert Request response



 Hello all -



 We just got a SAN DigCert request back, and I'm trying to import it into
 our 2010 CAS server. Problem is - there's no Complete Pending Request
 wizard on the Server Configuration / Exchange certificates tab Actions Pane.



 Anybody have any suggestions about how to import this .CRT file? Do I just
 use Import-ExchangeCertificate? I'm not real positive I understand the
 -FileData part of that cmdlets syntax. Do I need to use the Certificate mmc
 first?



 Sorry about my lack of DigCert knowledge. Any suggestions gratefully
 accepted.



 Russ

Re: Digital Cert Request response

[Russ Patterson]

i generated the request with the Exchange wizard in the same place - E2010
Mgmt Console/ Server Configuration/Exchange Certificates.

On Mon, May 3, 2010 at 2:01 PM, Michael B. Smith mich...@smithcons.comwrote:

  But using what tool? The Certificates MMC? The IIS MMC? EMC? Certutil?



 Regards,



 Michael B. Smith

 Consultant and Exchange MVP

 http://TheEssentialExchange.com http://theessentialexchange.com/



 *From:* Russ Patterson [mailto:rus...@gmail.com]
 *Sent:* Monday, May 03, 2010 2:00 PM

 *To:* MS-Exchange Admin Issues
 *Subject:* Re: Digital Cert Request response



 On that machine - that's why I'm so befuddled.

 On Mon, May 3, 2010 at 1:57 PM, Michael B. Smith mich...@smithcons.com
 wrote:

 Where did you generate the CSR?



 Regards,



 Michael B. Smith

 Consultant and Exchange MVP

 http://TheEssentialExchange.com http://theessentialexchange.com/



 *From:* Russ Patterson [mailto:rus...@gmail.com]
 *Sent:* Monday, May 03, 2010 1:50 PM

 *To:* MS-Exchange Admin Issues
 *Subject:* Digital Cert Request response



 Hello all -



 We just got a SAN DigCert request back, and I'm trying to import it into
 our 2010 CAS server. Problem is - there's no Complete Pending Request
 wizard on the Server Configuration / Exchange certificates tab Actions Pane.



 Anybody have any suggestions about how to import this .CRT file? Do I just
 use Import-ExchangeCertificate? I'm not real positive I understand the
 -FileData part of that cmdlets syntax. Do I need to use the Certificate mmc
 first?



 Sorry about my lack of DigCert knowledge. Any suggestions gratefully
 accepted.



 Russ

Re: Digital Cert Request response

[Russ Patterson]

Thanks Tim. I WILL back it up, if I ever get it installed, I promise :)

On Mon, May 3, 2010 at 2:07 PM, Tim Evans tev...@sparling.com wrote:

  oops, never mind. I thought you were trying to move it from another
 server. I'd still make a backup once you get it installed.



 ...Tim



 *From:* Russ Patterson [mailto:rus...@gmail.com]
 *Sent:* Monday, May 03, 2010 11:03 AM

 *To:* MS-Exchange Admin Issues
 *Subject:* Re: Digital Cert Request response



 I created the request (still have a copy of the .req file there) on the
 machine I'm trying to import onto.

 On Mon, May 3, 2010 at 1:58 PM, Tim Evans tev...@sparling.com wrote:

 You need to export it from your current server first, with the private key.
 It will give you a PFX file you can import into the new server. Whenever I
 get a new cert, I export like this and keep a copy for backup.



 ...Tim



 *From:* Russ Patterson [mailto:rus...@gmail.com]
 *Sent:* Monday, May 03, 2010 10:50 AM


 *To:* MS-Exchange Admin Issues
 *Subject:* Digital Cert Request response



 Hello all -



 We just got a SAN DigCert request back, and I'm trying to import it into
 our 2010 CAS server. Problem is - there's no Complete Pending Request
 wizard on the Server Configuration / Exchange certificates tab Actions Pane.



 Anybody have any suggestions about how to import this .CRT file? Do I just
 use Import-ExchangeCertificate? I'm not real positive I understand the
 -FileData part of that cmdlets syntax. Do I need to use the Certificate mmc
 first?



 Sorry about my lack of DigCert knowledge. Any suggestions gratefully
 accepted.



 Russ

Re: Digital Cert Request response

[Russ Patterson]

So do I have to create yet another dig cert request  start over? or is
there a user-friendly un-delete sort of feature??

On Mon, May 3, 2010 at 2:09 PM, Michael B. Smith mich...@smithcons.comwrote:

  Picture send offline.



 Basically you have to click Server Config - Server Name (if more than one)
 - (new Certificate name) - Complete Pending Request



 If it’s not there, then someone has deleted it for you.



 Regards,



 Michael B. Smith

 Consultant and Exchange MVP

 http://TheEssentialExchange.com http://theessentialexchange.com/



 *From:* Russ Patterson [mailto:rus...@gmail.com]
 *Sent:* Monday, May 03, 2010 2:05 PM

 *To:* MS-Exchange Admin Issues
 *Subject:* Re: Digital Cert Request response



 i generated the request with the Exchange wizard in the same place - E2010
 Mgmt Console/ Server Configuration/Exchange Certificates.

 On Mon, May 3, 2010 at 2:01 PM, Michael B. Smith mich...@smithcons.com
 wrote:

 But using what tool? The Certificates MMC? The IIS MMC? EMC? Certutil?



 Regards,



 Michael B. Smith

 Consultant and Exchange MVP

 http://TheEssentialExchange.com http://theessentialexchange.com/



 *From:* Russ Patterson [mailto:rus...@gmail.com]
 *Sent:* Monday, May 03, 2010 2:00 PM


 *To:* MS-Exchange Admin Issues

 *Subject:* Re: Digital Cert Request response



 On that machine - that's why I'm so befuddled.

 On Mon, May 3, 2010 at 1:57 PM, Michael B. Smith mich...@smithcons.com
 wrote:

 Where did you generate the CSR?



 Regards,



 Michael B. Smith

 Consultant and Exchange MVP

 http://TheEssentialExchange.com http://theessentialexchange.com/



 *From:* Russ Patterson [mailto:rus...@gmail.com]
 *Sent:* Monday, May 03, 2010 1:50 PM


 *To:* MS-Exchange Admin Issues
 *Subject:* Digital Cert Request response



 Hello all -



 We just got a SAN DigCert request back, and I'm trying to import it into
 our 2010 CAS server. Problem is - there's no Complete Pending Request
 wizard on the Server Configuration / Exchange certificates tab Actions Pane.



 Anybody have any suggestions about how to import this .CRT file? Do I just
 use Import-ExchangeCertificate? I'm not real positive I understand the
 -FileData part of that cmdlets syntax. Do I need to use the Certificate mmc
 first?



 Sorry about my lack of DigCert knowledge. Any suggestions gratefully
 accepted.



 Russ

Added dig cert to our E2010 CAS server, all mailflow stopped

[Russ Patterson]

I was following the MS Deployment Checklist, and just added a DigCert to our
new 2010 CAS server. All we have in place (for 2010) is that machine, which
has CAS  HUB roles.

ALL inbound mail is now queueing on our 2007 Edge server. Any suggestions?

Thanks!

Re: Added dig cert to our E2010 CAS server, all mailflow stopped

[Russ Patterson]

Yes - -that's when mailflow stopped - when I added SMTP as a service.

Also - seeing this error on the queue :

451 4.4.0 Primary target IP address responded with 451 5.7.3 Cannot achieve
Exchange Server authentication. Attempted failover to alternate host, but
that did not succeed. Either there are no alternate hosts or delivery failed
to all alternate hosts.

On Wed, Apr 14, 2010 at 11:22 AM, Tom Kern tpk...@gmail.com wrote:

 Is smtp enabled as a service on the cert?



 On Wed, Apr 14, 2010 at 11:03 AM, Russ Patterson rus...@gmail.com wrote:

 I was following the MS Deployment Checklist, and just added a DigCert to
 our new 2010 CAS server. All we have in place (for 2010) is that machine,
 which has CAS  HUB roles.

 ALL inbound mail is now queueing on our 2007 Edge server. Any suggestions?

 Thanks!

Re: Added dig cert to our E2010 CAS server, all mailflow stopped

[Russ Patterson]

John - working on the root cert, Tom - we have rebuild the Edge Subscript.

Thanks much you guys!

On Wed, Apr 14, 2010 at 11:05 AM, Ellis, John P. johnel...@wirral.gov.ukwrote:

  Do you need to apply a root CA cert as well? Just a guess
 digcert or Digicert?

 John

  --
 *From:* Russ Patterson [mailto:rus...@gmail.com]
 *Sent:* 14 April 2010 16:04
 *To:* MS-Exchange Admin Issues
 *Subject:* Added dig cert to our E2010 CAS server, all mailflow stopped

  I was following the MS Deployment Checklist, and just added a DigCert to
 our new 2010 CAS server. All we have in place (for 2010) is that machine,
 which has CAS  HUB roles.

 ALL inbound mail is now queueing on our 2007 Edge server. Any suggestions?

 Thanks!

 **

 This email and any files transmitted with it are confidential and

 intended solely for the use of the individual or entity to whom they

 are addressed. If you have received this email in error please notify

 the system manager.

 This footnote also confirms that this email message has been swept by

 MIMEsweeper for the presence of computer viruses.

 www.clearswift.com

 **

Re: Added dig cert to our E2010 CAS server, all mailflow stopped

[Russ Patterson]

This was a strange one - called MS support; it turned out to be an old
connector (which had been functioning for over a year.)

At first, it had been to allow traffic from our Ironport appliances into the
org, then we retired the Ironports  added an Edge server. For a while, we
had both the Ironport IPs and the IP of the Edge in the Network tab of a
Receive connector in the Receive mail from remote servers that have these
IP addresses box.

We deleted the connector, since those were the only 3 IPs in there, and
restarted Transport all around. TheQueue from the Edge server to all our Hub
servers emptied. The MS tech could see this was needed by doing telnet in
both directions - after issuing an ehlo, a different list of verbs was
listed in the SMTP session going one way as compared to the other.

The thing we really don't have an answer for is  - why did it work for weeks
(after we turned off the Ironports) until this morning when I added the
digital cert on the 2010 CAS server? The mail stopped within seconds
of assigning the SMTP service to the new cert.

All's well that ends well, I guess. Thanks everyone for their assistance!

On Wed, Apr 14, 2010 at 11:41 AM, Russ Patterson rus...@gmail.com wrote:

  John - working on the root cert, Tom - we have rebuild the Edge
 Subscript.

 Thanks much you guys!

  On Wed, Apr 14, 2010 at 11:05 AM, Ellis, John P. johnel...@wirral.gov.uk
  wrote:

  Do you need to apply a root CA cert as well? Just a guess
 digcert or Digicert?

 John

  --
 *From:* Russ Patterson [mailto:rus...@gmail.com]
 *Sent:* 14 April 2010 16:04
 *To:* MS-Exchange Admin Issues
 *Subject:* Added dig cert to our E2010 CAS server, all mailflow stopped

  I was following the MS Deployment Checklist, and just added a DigCert to
 our new 2010 CAS server. All we have in place (for 2010) is that machine,
 which has CAS  HUB roles.

 ALL inbound mail is now queueing on our 2007 Edge server. Any suggestions?

 Thanks!

 **

 This email and any files transmitted with it are confidential and

 intended solely for the use of the individual or entity to whom they

 are addressed. If you have received this email in error please notify

 the system manager.

 This footnote also confirms that this email message has been swept by

 MIMEsweeper for the presence of computer viruses.

 www.clearswift.com

 **

Re: Added dig cert to our E2010 CAS server, all mailflow stopped

[Russ Patterson]

I misspoke - we didn't telnet back  forth between two servers, we telnetted
from the Edge to the Hub, and then on the hub we telnetted to localhost, and
saw different SMTP verbs after ehlo. That was the clue that we had a
non-Exchange-authentication-friendly connection happening. (We saw the
Exchange autrh verbs on telnet localhost, but not from Edge to hub.)

Sorry for the confusion - it's been one of those days.

On Wed, Apr 14, 2010 at 2:47 PM, Russ Patterson rus...@gmail.com wrote:

  This was a strange one - called MS support; it turned out to be an old
 connector (which had been functioning for over a year.)

 At first, it had been to allow traffic from our Ironport appliances into
 the org, then we retired the Ironports  added an Edge server. For a while,
 we had both the Ironport IPs and the IP of the Edge in the Network tab of a
 Receive connector in the Receive mail from remote servers that have these
 IP addresses box.

 We deleted the connector, since those were the only 3 IPs in there, and
 restarted Transport all around. TheQueue from the Edge server to all our Hub
 servers emptied. The MS tech could see this was needed by doing telnet in
 both directions - after issuing an ehlo, a different list of verbs was
 listed in the SMTP session going one way as compared to the other.

 The thing we really don't have an answer for is  - why did it work for
 weeks (after we turned off the Ironports) until this morning when I added
 the digital cert on the 2010 CAS server? The mail stopped within seconds
 of assigning the SMTP service to the new cert.

 All's well that ends well, I guess. Thanks everyone for their assistance!

  On Wed, Apr 14, 2010 at 11:41 AM, Russ Patterson rus...@gmail.comwrote:

  John - working on the root cert, Tom - we have rebuild the Edge
 Subscript.

 Thanks much you guys!

  On Wed, Apr 14, 2010 at 11:05 AM, Ellis, John P. 
 johnel...@wirral.gov.uk wrote:

  Do you need to apply a root CA cert as well? Just a guess
 digcert or Digicert?

 John

  --
 *From:* Russ Patterson [mailto:rus...@gmail.com]
 *Sent:* 14 April 2010 16:04
 *To:* MS-Exchange Admin Issues
 *Subject:* Added dig cert to our E2010 CAS server, all mailflow stopped

  I was following the MS Deployment Checklist, and just added a DigCert
 to our new 2010 CAS server. All we have in place (for 2010) is that machine,
 which has CAS  HUB roles.

 ALL inbound mail is now queueing on our 2007 Edge server. Any
 suggestions?

 Thanks!

 **

 This email and any files transmitted with it are confidential and

 intended solely for the use of the individual or entity to whom they

 are addressed. If you have received this email in error please notify

 the system manager.

 This footnote also confirms that this email message has been swept by

 MIMEsweeper for the presence of computer viruses.

 www.clearswift.com

 **

NLB name and OWA

[Russ Patterson]

Hello all -

We've decided to go with a WIndows NLB cluster for a CAS array on Exchange
2010. I'm seeing conflicting info about naming  was hoping the experts here
would chime in  help us out.

The name of the NLB cluster - should it be the same as the name we give
end-users to access OWA externally? Some folks are saying no, others are
saying yes. As an example - nlb.ourdomain.local for the NLB cluster, and
endusers use mail.ourdomain.com for owa.

If we don't do that, will we need to add the nlb cluster name to our cert
request?

Is the only reason to use the same name for both to reduce the number of
names ( therefore cost) on the cert request?

Is the only reason to use different names to reduce troubleshooting
confusion, if it becomes necessary?

Thanks!

Re: Strange entry as an Address List in OWA

[Russ Patterson]

:)

I found out who built that 'other' Address Book - turns out it's a legitmate
project, only just halfway done. Communication could have been a little more
open :)

On Wed, Mar 3, 2010 at 5:32 PM, Sherry Abercrombie saber...@gmail.comwrote:

 I know the 3 other people that have that kind of access on my Exchange
 server.  I'm the only one that actually knows how to do it. ;)


 On Wed, Mar 3, 2010 at 4:25 PM, Michael B. Smith mich...@smithcons.comwrote:

  True … lots of folks find when upgrading to 2007/2010 that in the
 “distant past” “someone” did “things” to their environment that no one knew
 anything about.



 Address List management is a common one. J



 Regards,



 Michael B. Smith

 Consultant and Exchange MVP

 http://TheEssentialExchange.com



 *From:* Sherry Abercrombie [mailto:saber...@gmail.com]
 *Sent:* Wednesday, March 03, 2010 5:19 PM

 *To:* MS-Exchange Admin Issues
 *Subject:* Re: Strange entry as an Address List in OWA



 And take a look at who has rights to create a new GAL and consider taking
 those rights away.

 On Wed, Mar 3, 2010 at 4:13 PM, Russ Patterson rus...@gmail.com wrote:

 Part 1 - Awesome!

 Part 2 - Great!

 Part 3 - Thanks as always! :)

 On Wed, Mar 3, 2010 at 5:05 PM, Michael B. Smith mich...@smithcons.com
 wrote:

 Part 1 – at some point, someone created another GAL and has made it the
 default. You’ll have to use PowerShell to change the default and remove the
 “bad GAL”. You only need msExchQueryBaseDN if you are hosting multiple
 companies with multiple GALs in multiple OUs. In other words – no. If you
 needed it, you would already know you needed it. J



 Part 2 – No.



 Part 3 – see part 1.



 Regards,



 Michael B. Smith

 Consultant and Exchange MVP

 http://TheEssentialExchange.com http://theessentialexchange.com/



 *From:* Russ Patterson [mailto:rus...@gmail.com]
 *Sent:* Wednesday, March 03, 2010 12:57 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* Strange entry as an Address List in OWA



 I think this is a two part question - I apologize for its length. First:
 When I open a new blank mail in OWA and click the TO: button (or the
 Address Book button in the toolbar) a new dialog box opens with the title
 Address Book -- Webpage Dialog. In the upper left corner, an item is
 selected called Primary Accounts. There is nothing displayed in the center
 or right panels of the Address Book -- Webpage Dialog dialog box.

 If I click just below Primary Accounts on the All Rooms item, I see
 all of our Room mailboxes listed. If I click Show other Address lists and
 then scroll to Default Global Address List - I see all of our entries in
 our GAL. It is NOT listed if I scroll back up a bit and select All Global
 Address Lists. So my first question is - why is an empty item (Primary
 Accounts) at the top of the list and selected, since it is empty. I also see
 this entry in Exchange Management Console under Organization Configuration /
 Mailbox on the Address List tab. The Container for Primary Accounts is \
 (without the quotes) and it's type is Global Address List. The same data
 applies to Default Global Address List - \ is the container, type is Global
 Address List.
 If I select either of those items, I only get a Help action available in
 the Actions pane. - Any other items in there (i.e. All Contacts, All Users,
 etc etc) - I also get an Edit, Apply, and Remove action available.

 So again - why is Primary Accounts selected by default in OWA?
 NOTE: I also see both Default Global Address List and Primary Accounts if
 I issue the Get-GlobalAddressList powershell cmdlet - however, the Primary
 Accounts entry seems to have no Recipient Filter. (Which I suppose explains
 why it's empty.) We are not hosting any services for anyone else, and I have
 never tried to create a custom Address List - tho' it sure seems someone
 here has (the Primary Accounts entry. - Right?) Also - all our users have
 an empty msExchQueryBaseDN. Do I need to script an entry for it?

 Part two:
 Am I supposed to have the Edit Action available when I select Primary
 Accounts in Exchange Management Console under Organization Configuration /
 Mailbox on the Address List tab?

 And I guess a THIRD part, sorry - given my description above, do you see
 actions I should take to improve Address List availablitiy for my users in
 OWA?

 Thanks very much!






 --
 Sherry Abercrombie

 Any sufficiently advanced technology is indistinguishable from magic.
 Arthur C. Clarke




 --
 Sherry Abercrombie

 Any sufficiently advanced technology is indistinguishable from magic.
 Arthur C. Clarke

Strange entry as an Address List in OWA

[Russ Patterson]

I think this is a two part question - I apologize for its length. First:
When I open a new blank mail in OWA and click the TO: button (or the Address
Book button in the toolbar) a new dialog box opens with the title Address
Book -- Webpage Dialog. In the upper left corner, an item is selected
called Primary Accounts. There is nothing displayed in the center or right
panels of the Address Book -- Webpage Dialog dialog box.

If I click just below Primary Accounts on the All Rooms item, I see all
of our Room mailboxes listed. If I click Show other Address lists and then
scroll to Default Global Address List - I see all of our entries in our
GAL. It is NOT listed if I scroll back up a bit and select All Global
Address Lists. So my first question is - why is an empty item (Primary
Accounts) at the top of the list and selected, since it is empty. I also see
this entry in Exchange Management Console under Organization Configuration /
Mailbox on the Address List tab. The Container for Primary Accounts is \
(without the quotes) and it's type is Global Address List. The same data
applies to Default Global Address List - \ is the container, type is Global
Address List.
If I select either of those items, I only get a Help action available in
the Actions pane. - Any other items in there (i.e. All Contacts, All Users,
etc etc) - I also get an Edit, Apply, and Remove action available.

So again - why is Primary Accounts selected by default in OWA?
NOTE: I also see both Default Global Address List and Primary Accounts if I
issue the Get-GlobalAddressList powershell cmdlet - however, the Primary
Accounts entry seems to have no Recipient Filter. (Which I suppose explains
why it's empty.) We are not hosting any services for anyone else, and I have
never tried to create a custom Address List - tho' it sure seems someone
here has (the Primary Accounts entry. - Right?) Also - all our users have
an empty msExchQueryBaseDN. Do I need to script an entry for it?

Part two:
Am I supposed to have the Edit Action available when I select Primary
Accounts in Exchange Management Console under Organization Configuration /
Mailbox on the Address List tab?

And I guess a THIRD part, sorry - given my description above, do you see
actions I should take to improve Address List availablitiy for my users in
OWA?

Thanks very much!

Re: Strange entry as an Address List in OWA

[Russ Patterson]

Part 1 - Awesome!
Part 2 - Great!
Part 3 - Thanks as always! :)

On Wed, Mar 3, 2010 at 5:05 PM, Michael B. Smith mich...@smithcons.comwrote:

  Part 1 – at some point, someone created another GAL and has made it the
 default. You’ll have to use PowerShell to change the default and remove the
 “bad GAL”. You only need msExchQueryBaseDN if you are hosting multiple
 companies with multiple GALs in multiple OUs. In other words – no. If you
 needed it, you would already know you needed it. J



 Part 2 – No.



 Part 3 – see part 1.



 Regards,



 Michael B. Smith

 Consultant and Exchange MVP

 http://TheEssentialExchange.com



 *From:* Russ Patterson [mailto:rus...@gmail.com]
 *Sent:* Wednesday, March 03, 2010 12:57 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* Strange entry as an Address List in OWA



 I think this is a two part question - I apologize for its length. First:
 When I open a new blank mail in OWA and click the TO: button (or the
 Address Book button in the toolbar) a new dialog box opens with the title
 Address Book -- Webpage Dialog. In the upper left corner, an item is
 selected called Primary Accounts. There is nothing displayed in the center
 or right panels of the Address Book -- Webpage Dialog dialog box.

 If I click just below Primary Accounts on the All Rooms item, I see all
 of our Room mailboxes listed. If I click Show other Address lists and then
 scroll to Default Global Address List - I see all of our entries in our
 GAL. It is NOT listed if I scroll back up a bit and select All Global
 Address Lists. So my first question is - why is an empty item (Primary
 Accounts) at the top of the list and selected, since it is empty. I also see
 this entry in Exchange Management Console under Organization Configuration /
 Mailbox on the Address List tab. The Container for Primary Accounts is \
 (without the quotes) and it's type is Global Address List. The same data
 applies to Default Global Address List - \ is the container, type is Global
 Address List.
 If I select either of those items, I only get a Help action available in
 the Actions pane. - Any other items in there (i.e. All Contacts, All Users,
 etc etc) - I also get an Edit, Apply, and Remove action available.

 So again - why is Primary Accounts selected by default in OWA?
 NOTE: I also see both Default Global Address List and Primary Accounts if I
 issue the Get-GlobalAddressList powershell cmdlet - however, the Primary
 Accounts entry seems to have no Recipient Filter. (Which I suppose explains
 why it's empty.) We are not hosting any services for anyone else, and I have
 never tried to create a custom Address List - tho' it sure seems someone
 here has (the Primary Accounts entry. - Right?) Also - all our users have
 an empty msExchQueryBaseDN. Do I need to script an entry for it?

 Part two:
 Am I supposed to have the Edit Action available when I select Primary
 Accounts in Exchange Management Console under Organization Configuration /
 Mailbox on the Address List tab?

 And I guess a THIRD part, sorry - given my description above, do you see
 actions I should take to improve Address List availablitiy for my users in
 OWA?

 Thanks very much!

Version Store full on two E2k7 mailbox servers

[Russ Patterson]

Hi -

In the last two days, we've had two different mailbox servers (in the same
site) have to have the store restarted during working hours. Examining the
app log afterwards, I see that we got several dozen of the following events
starting about an hour before we had to restart:


Log Name:  Application
Source:MSExchangeIS
Date:  2/1/2010 8:58:24 AM
Event ID:  9786
Task Category: Database Storage Engine
Level: Warning
Keywords:  Classic
User:  N/A
Computer:  S-EXCH-IRV-6.ds1.ltcorp.tree
Description:
The database engine has consumed 70% of the version store buckets resource
(11613 used out of a maximum of 16386) for storage group Managers-1'.
Log Name:  Application
Source:MSExchangeIS Mailbox Store
Date:  2/1/2010 8:56:28 AM
Event ID:  9828
Task Category: Background Cleanup
Level: Warning
Keywords:  Classic
User:  N/A
Computer:  S-EXCH-IRV-6.ds1.ltcorp.tree
Description:
Background cleanup of folders for database ExecSysAdmin\ExecSysAdmin' was
pre-empted because the database engine's version store was growing too
large. Before the task was pre-empted, 1 folders were inspected and 0 of
those were successfully deleted.

Note that the two warnings are about two different stores on the same box.

There were two of these events:

Log Name:  Application
Source:ESE
Date:  2/1/2010 9:30:23 AM
Event ID:  623
Task Category: Transaction Manager
Level: Error
Keywords:  Classic
User:  N/A
Computer:  S-EXCH-IRV-6.ds1.ltcorp.tree
Description:
MSExchangeIS (27084) Users-1: The version store for this instance (9) has
reached its maximum size of 511Mb. It is likely that a long-running
transaction is preventing cleanup of the version store and causing it to
build up in size. Updates will be rejected until the long-running
transaction has been completely committed or rolled back.
Possible long-running transaction:
 SessionId: 0x07C82780
 Session-context: 0x
 Session-context ThreadId: 0x6D10
 Cleanup: 1
For more information, click http://www.microsoft.com/contentredirect.asp.
One for each of the stores mentioned above. They occurred about 10 minutes
before we decide to bounce the store.

I haven't really been able to do much other investigating; I've also got a
family medical emergency that is taking most of my attention. I was hoping
someone could give me a few clues that woulds help me get my life back to
just 90 mph.

Any suggestions? BTW - these machies were both at version Version:
08.02.0176.002  - other places show it as Version 8.2 (Build 176.2) I do see
some suggestions when you click in the web links in the event log; I'm sure
they're pointing in the right direction - I was just hoping to cheat a
little bit  get a headstart if you will.

Thanks in advance!

Russ

Re: Version Store full on two E2k7 mailbox servers

[Russ Patterson]

In that site, Full Backups only happen on Saturdays, Incremental all other
days. The Saturday backup DID take an inordinately long time - ie instead of
4 or so hours, it took about 12. But there was a successful Incremental (of
a usual length) on Sunday night.




On Wed, Feb 3, 2010 at 10:16 AM, Sobey, Richard A r.so...@imperial.ac.ukwrote:

  Did your backups hang or one particular database take a long time to
 backup?



 *From:* bounce-8811937-8066...@lyris.sunbelt-software.com [mailto:
 bounce-8811937-8066...@lyris.sunbelt-software.com] *On Behalf Of *Russ
 Patterson
 *Sent:* 03 February 2010 15:14

 *To:* MS-Exchange Admin Issues
 *Subject:* Version Store full on two E2k7 mailbox servers



 Hi -



 In the last two days, we've had two different mailbox servers (in the same
 site) have to have the store restarted during working hours. Examining the
 app log afterwards, I see that we got several dozen of the following events
 starting about an hour before we had to restart:





 Log Name:  Application
 Source:MSExchangeIS
 Date:  2/1/2010 8:58:24 AM
 Event ID:  9786
 Task Category: Database Storage Engine
 Level: Warning
 Keywords:  Classic
 User:  N/A
 Computer:  S-EXCH-IRV-6.ds1.ltcorp.tree
 Description:
 The database engine has consumed 70% of the version store buckets
 resource (11613 used out of a maximum of 16386) for storage group
 Managers-1'.

 Log Name:  Application
 Source:MSExchangeIS Mailbox Store
 Date:  2/1/2010 8:56:28 AM
 Event ID:  9828
 Task Category: Background Cleanup
 Level: Warning
 Keywords:  Classic
 User:  N/A
 Computer:  S-EXCH-IRV-6.ds1.ltcorp.tree
 Description:
 Background cleanup of folders for database ExecSysAdmin\ExecSysAdmin' was
 pre-empted because the database engine's version store was growing too
 large. Before the task was pre-empted, 1 folders were inspected and 0 of
 those were successfully deleted.



 Note that the two warnings are about two different stores on the same box.



 There were two of these events:



 Log Name:  Application
 Source:ESE
 Date:  2/1/2010 9:30:23 AM
 Event ID:  623
 Task Category: Transaction Manager
 Level: Error
 Keywords:  Classic
 User:  N/A
 Computer:  S-EXCH-IRV-6.ds1.ltcorp.tree
 Description:
 MSExchangeIS (27084) Users-1: The version store for this instance (9) has
 reached its maximum size of 511Mb. It is likely that a long-running
 transaction is preventing cleanup of the version store and causing it to
 build up in size. Updates will be rejected until the long-running
 transaction has been completely committed or rolled back.
 Possible long-running transaction:
  SessionId: 0x07C82780
  Session-context: 0x
  Session-context ThreadId: 0x6D10
  Cleanup: 1

 For more information, click http://www.microsoft.com/contentredirect.asp.

 One for each of the stores mentioned above. They occurred about 10 minutes
 before we decide to bounce the store.



 I haven't really been able to do much other investigating; I've also got a
 family medical emergency that is taking most of my attention. I was hoping
 someone could give me a few clues that woulds help me get my life back to
 just 90 mph.



 Any suggestions? BTW - these machies were both at version Version:
 08.02.0176.002  - other places show it as Version 8.2 (Build 176.2) I do see
 some suggestions when you click in the web links in the event log; I'm sure
 they're pointing in the right direction - I was just hoping to cheat a
 little bit  get a headstart if you will.



 Thanks in advance!



 Russ

Re: Version Store full on two E2k7 mailbox servers

[Russ Patterson]

Firstly, Thanks to both Richard  Rob - great ideas so far. We do have
OfficeScan running on the filesytems on that box, but we administer it from
an AV server with all Exchange servers in a specific group that has all
Exchange files (including logs  mdbs etc etc) excluded. We don't have
MailScan on thiose boxes as yet.

Whats getting a bit scary is we're already getting warnings on the one that
we rebooted yesterday while I was out that the version store is 75% used for
one store:

Log Name:  Application
Source:MSExchangeIS
Date:  2/3/2010 8:02:11 AM
Event ID:  9786
Task Category: Database Storage Engine
Level: Warning
Keywords:  Classic
User:  N/A
Computer:  s-exch-irv-5.ds1.ltcorp.tree
Description:
The database engine has consumed 76% of the version store buckets resource
(12499 used out of a maximum of 16386) for storage group Sales-1'.


On Wed, Feb 3, 2010 at 10:48 AM, Campbell, Rob 
rob_campb...@centraltechnology.net wrote:

  I’d suspect AV.



 *From:* Russ Patterson [mailto:rus...@gmail.com]
 *Sent:* Wednesday, February 03, 2010 9:43 AM

 *To:* MS-Exchange Admin Issues
 *Subject:* Re: Version Store full on two E2k7 mailbox servers



 In that site, Full Backups only happen on Saturdays, Incremental all other
 days. The Saturday backup DID take an inordinately long time - ie instead of
 4 or so hours, it took about 12. But there was a successful Incremental (of
 a usual length) on Sunday night.







 On Wed, Feb 3, 2010 at 10:16 AM, Sobey, Richard A r.so...@imperial.ac.uk
 wrote:

 Did your backups hang or one particular database take a long time to
 backup?



 *From:* bounce-8811937-8066...@lyris.sunbelt-software.com [mailto:
 bounce-8811937-8066...@lyris.sunbelt-software.com] *On Behalf Of *Russ
 Patterson
 *Sent:* 03 February 2010 15:14


 *To:* MS-Exchange Admin Issues

 *Subject:* Version Store full on two E2k7 mailbox servers



 Hi -



 In the last two days, we've had two different mailbox servers (in the same
 site) have to have the store restarted during working hours. Examining the
 app log afterwards, I see that we got several dozen of the following events
 starting about an hour before we had to restart:





 Log Name:  Application
 Source:MSExchangeIS
 Date:  2/1/2010 8:58:24 AM
 Event ID:  9786
 Task Category: Database Storage Engine
 Level: Warning
 Keywords:  Classic
 User:  N/A
 Computer:  S-EXCH-IRV-6.ds1.ltcorp.tree
 Description:
 The database engine has consumed 70% of the version store buckets
 resource (11613 used out of a maximum of 16386) for storage group
 Managers-1'.

 Log Name:  Application
 Source:MSExchangeIS Mailbox Store
 Date:  2/1/2010 8:56:28 AM
 Event ID:  9828
 Task Category: Background Cleanup
 Level: Warning
 Keywords:  Classic
 User:  N/A
 Computer:  S-EXCH-IRV-6.ds1.ltcorp.tree
 Description:
 Background cleanup of folders for database ExecSysAdmin\ExecSysAdmin' was
 pre-empted because the database engine's version store was growing too
 large. Before the task was pre-empted, 1 folders were inspected and 0 of
 those were successfully deleted.



 Note that the two warnings are about two different stores on the same box.



 There were two of these events:



 Log Name:  Application
 Source:ESE
 Date:  2/1/2010 9:30:23 AM
 Event ID:  623
 Task Category: Transaction Manager
 Level: Error
 Keywords:  Classic
 User:  N/A
 Computer:  S-EXCH-IRV-6.ds1.ltcorp.tree
 Description:
 MSExchangeIS (27084) Users-1: The version store for this instance (9) has
 reached its maximum size of 511Mb. It is likely that a long-running
 transaction is preventing cleanup of the version store and causing it to
 build up in size. Updates will be rejected until the long-running
 transaction has been completely committed or rolled back.
 Possible long-running transaction:
  SessionId: 0x07C82780
  Session-context: 0x
  Session-context ThreadId: 0x6D10
  Cleanup: 1

 For more information, click http://www.microsoft.com/contentredirect.asp.

 One for each of the stores mentioned above. They occurred about 10 minutes
 before we decide to bounce the store.



 I haven't really been able to do much other investigating; I've also got a
 family medical emergency that is taking most of my attention. I was hoping
 someone could give me a few clues that woulds help me get my life back to
 just 90 mph.



 Any suggestions? BTW - these machies were both at version Version:
 08.02.0176.002  - other places show it as Version 8.2 (Build 176.2) I do see
 some suggestions when you click in the web links in the event log; I'm sure
 they're pointing in the right direction - I was just hoping to cheat a
 little bit  get a headstart if you will.



 Thanks in advance!



 Russ

Re: Version Store full on two E2k7 mailbox servers

[Russ Patterson]

We've now removed file level AV, and the version bickets are at 90%.



On Wed, Feb 3, 2010 at 11:34 AM, Tobie Fysh tobie.f...@freebridge.org.ukwrote:

  If you have AV installed on the server have you configured Exchange as
 per :



 http://technet.microsoft.com/en-us/library/bb332342.aspx



 Tobie

 http://Twitter.com/tobiefysh http://twitter.com/tobiefysh



 *From:* Campbell, Rob [mailto:rob_campb...@centraltechnology.net]
 *Sent:* 03 February 2010 15:48

 *To:* MS-Exchange Admin Issues
 *Subject:* RE: Version Store full on two E2k7 mailbox servers



 I’d suspect AV.



 *From:* Russ Patterson [mailto:rus...@gmail.com]
 *Sent:* Wednesday, February 03, 2010 9:43 AM
 *To:* MS-Exchange Admin Issues
 *Subject:* Re: Version Store full on two E2k7 mailbox servers



 In that site, Full Backups only happen on Saturdays, Incremental all other
 days. The Saturday backup DID take an inordinately long time - ie instead of
 4 or so hours, it took about 12. But there was a successful Incremental (of
 a usual length) on Sunday night.







 On Wed, Feb 3, 2010 at 10:16 AM, Sobey, Richard A r.so...@imperial.ac.uk
 wrote:

 Did your backups hang or one particular database take a long time to
 backup?



 *From:* bounce-8811937-8066...@lyris.sunbelt-software.com [mailto:
 bounce-8811937-8066...@lyris.sunbelt-software.com] *On Behalf Of *Russ
 Patterson
 *Sent:* 03 February 2010 15:14


 *To:* MS-Exchange Admin Issues

 *Subject:* Version Store full on two E2k7 mailbox servers



 Hi -



 In the last two days, we've had two different mailbox servers (in the same
 site) have to have the store restarted during working hours. Examining the
 app log afterwards, I see that we got several dozen of the following events
 starting about an hour before we had to restart:





 Log Name:  Application
 Source:MSExchangeIS
 Date:  2/1/2010 8:58:24 AM
 Event ID:  9786
 Task Category: Database Storage Engine
 Level: Warning
 Keywords:  Classic
 User:  N/A
 Computer:  S-EXCH-IRV-6.ds1.ltcorp.tree
 Description:
 The database engine has consumed 70% of the version store buckets
 resource (11613 used out of a maximum of 16386) for storage group
 Managers-1'.

 Log Name:  Application
 Source:MSExchangeIS Mailbox Store
 Date:  2/1/2010 8:56:28 AM
 Event ID:  9828
 Task Category: Background Cleanup
 Level: Warning
 Keywords:  Classic
 User:  N/A
 Computer:  S-EXCH-IRV-6.ds1.ltcorp.tree
 Description:
 Background cleanup of folders for database ExecSysAdmin\ExecSysAdmin' was
 pre-empted because the database engine's version store was growing too
 large. Before the task was pre-empted, 1 folders were inspected and 0 of
 those were successfully deleted.



 Note that the two warnings are about two different stores on the same box.



 There were two of these events:



 Log Name:  Application
 Source:ESE
 Date:  2/1/2010 9:30:23 AM
 Event ID:  623
 Task Category: Transaction Manager
 Level: Error
 Keywords:  Classic
 User:  N/A
 Computer:  S-EXCH-IRV-6.ds1.ltcorp.tree
 Description:
 MSExchangeIS (27084) Users-1: The version store for this instance (9) has
 reached its maximum size of 511Mb. It is likely that a long-running
 transaction is preventing cleanup of the version store and causing it to
 build up in size. Updates will be rejected until the long-running
 transaction has been completely committed or rolled back.
 Possible long-running transaction:
  SessionId: 0x07C82780
  Session-context: 0x
  Session-context ThreadId: 0x6D10
  Cleanup: 1

 For more information, click http://www.microsoft.com/contentredirect.asp.

 One for each of the stores mentioned above. They occurred about 10 minutes
 before we decide to bounce the store.



 I haven't really been able to do much other investigating; I've also got a
 family medical emergency that is taking most of my attention. I was hoping
 someone could give me a few clues that woulds help me get my life back to
 just 90 mph.



 Any suggestions? BTW - these machies were both at version Version:
 08.02.0176.002  - other places show it as Version 8.2 (Build 176.2) I do see
 some suggestions when you click in the web links in the event log; I'm sure
 they're pointing in the right direction - I was just hoping to cheat a
 little bit  get a headstart if you will.



 Thanks in advance!



 Russ



 **

 Note:

 The information contained in this message may be privileged and confidential 
 and

 protected from disclosure.  If the reader of this message is not the intended

 recipient, or an employee or agent responsible for delivering this message to

 the intended recipient, you are hereby notified that any dissemination,

 distribution or copying of this communication is strictly prohibited. If you

 have received

Re: Version Store full on two E2k7 mailbox servers

[Russ Patterson]

OK - We stopped the Transport for about 10 minutes, and watched version
buckets with PerfMon - the count went steadily upwards even while Transport
Service was stopped. No AV, no Backup. (CommVault admin console shows no
backup jobs pointing at the server in question.) I'm starting to lean
towards the idea we've got issues with the database, but then again, we've
had the issue on two servers in the same site. Any other ideas?

And BTW - thanks to everybody that's helped - greatly appreciated!

On Wed, Feb 3, 2010 at 11:55 AM, Russ Patterson rus...@gmail.com wrote:

  We've now removed file level AV, and the version bickets are at 90%.



  On Wed, Feb 3, 2010 at 11:34 AM, Tobie Fysh tobie.f...@freebridge.org.uk
  wrote:

  If you have AV installed on the server have you configured Exchange as
 per :



 http://technet.microsoft.com/en-us/library/bb332342.aspx



 Tobie

 http://Twitter.com/tobiefysh http://twitter.com/tobiefysh



 *From:* Campbell, Rob [mailto:rob_campb...@centraltechnology.net]
 *Sent:* 03 February 2010 15:48

 *To:* MS-Exchange Admin Issues
 *Subject:* RE: Version Store full on two E2k7 mailbox servers



 I’d suspect AV.



 *From:* Russ Patterson [mailto:rus...@gmail.com]
 *Sent:* Wednesday, February 03, 2010 9:43 AM
 *To:* MS-Exchange Admin Issues
 *Subject:* Re: Version Store full on two E2k7 mailbox servers



 In that site, Full Backups only happen on Saturdays, Incremental all other
 days. The Saturday backup DID take an inordinately long time - ie instead of
 4 or so hours, it took about 12. But there was a successful Incremental (of
 a usual length) on Sunday night.







 On Wed, Feb 3, 2010 at 10:16 AM, Sobey, Richard A r.so...@imperial.ac.uk
 wrote:

 Did your backups hang or one particular database take a long time to
 backup?



 *From:* bounce-8811937-8066...@lyris.sunbelt-software.com [mailto:
 bounce-8811937-8066...@lyris.sunbelt-software.com] *On Behalf Of *Russ
 Patterson
 *Sent:* 03 February 2010 15:14


 *To:* MS-Exchange Admin Issues

 *Subject:* Version Store full on two E2k7 mailbox servers



 Hi -



 In the last two days, we've had two different mailbox servers (in the same
 site) have to have the store restarted during working hours. Examining the
 app log afterwards, I see that we got several dozen of the following events
 starting about an hour before we had to restart:





 Log Name:  Application
 Source:MSExchangeIS
 Date:  2/1/2010 8:58:24 AM
 Event ID:  9786
 Task Category: Database Storage Engine
 Level: Warning
 Keywords:  Classic
 User:  N/A
 Computer:  S-EXCH-IRV-6.ds1.ltcorp.tree
 Description:
 The database engine has consumed 70% of the version store buckets
 resource (11613 used out of a maximum of 16386) for storage group
 Managers-1'.

 Log Name:  Application
 Source:MSExchangeIS Mailbox Store
 Date:  2/1/2010 8:56:28 AM
 Event ID:  9828
 Task Category: Background Cleanup
 Level: Warning
 Keywords:  Classic
 User:  N/A
 Computer:  S-EXCH-IRV-6.ds1.ltcorp.tree
 Description:
 Background cleanup of folders for database ExecSysAdmin\ExecSysAdmin' was
 pre-empted because the database engine's version store was growing too
 large. Before the task was pre-empted, 1 folders were inspected and 0 of
 those were successfully deleted.



 Note that the two warnings are about two different stores on the same box.



 There were two of these events:



 Log Name:  Application
 Source:ESE
 Date:  2/1/2010 9:30:23 AM
 Event ID:  623
 Task Category: Transaction Manager
 Level: Error
 Keywords:  Classic
 User:  N/A
 Computer:  S-EXCH-IRV-6.ds1.ltcorp.tree
 Description:
 MSExchangeIS (27084) Users-1: The version store for this instance (9) has
 reached its maximum size of 511Mb. It is likely that a long-running
 transaction is preventing cleanup of the version store and causing it to
 build up in size. Updates will be rejected until the long-running
 transaction has been completely committed or rolled back.
 Possible long-running transaction:
  SessionId: 0x07C82780
  Session-context: 0x
  Session-context ThreadId: 0x6D10
  Cleanup: 1

 For more information, click http://www.microsoft.com/contentredirect.asp.

 One for each of the stores mentioned above. They occurred about 10 minutes
 before we decide to bounce the store.



 I haven't really been able to do much other investigating; I've also got a
 family medical emergency that is taking most of my attention. I was hoping
 someone could give me a few clues that woulds help me get my life back to
 just 90 mph.



 Any suggestions? BTW - these machies were both at version Version:
 08.02.0176.002  - other places show it as Version 8.2 (Build 176.2) I do see
 some suggestions when you click in the web links in the event log; I'm sure
 they're pointing in the right direction - I was just hoping to cheat a
 little bit  get

Setting SCLJunkThreshold

[Russ Patterson]

Hello all -

Since we use a cloud based anti-spam filter, we want to be sure all received
mail makes it to the inbox. After a bit of research, we found the powershell
command Set-OrganizationConfig -SCLJunkThreshold  and are trying to set the
level to 9 (i.e. Set-OrganizationConfig -SCLJunkThreshold 9) when I try this
on an Edge we are using in one site I get the error Set-OrganizationConfig:
Failed to convert name format for , error 87.

It occurred to me that maybe I needed to set it on a Hub server  then force
an Edge Synch - since it's an Org setting, tried that, and if I run
Get-OrganizationConfig on an internal server, I see the SCLJunkThreshold is
set to 9. But even after I ran a Start-EdgeSynchronization, the
SCLJunkThreshold on the EDGE server still shows as set to 4.

My question is, does it matter? seems like, since this will effect a Store
action, the setting on the Edge doesn't really matter - it's where the
Stores are (i.e. inside the org, not in the DMZ) that will control our
mailflow concerns. Any comments?

THanks - and have a great weekend!

Russ

Re: Setting SCLJunkThreshold

[Russ Patterson]

Thanks Michael - always appreciate the expertise.

On Fri, Jan 29, 2010 at 1:52 PM, Michael B. Smith mich...@smithcons.comwrote:

 The setting on the Edge doesn't matter.

 From: Russ Patterson [mailto:rus...@gmail.com]
 Sent: Friday, January 29, 2010 1:45 PM
 To: MS-Exchange Admin Issues
 Subject: Setting SCLJunkThreshold

 Hello all -

 Since we use a cloud based anti-spam filter, we want to be sure all
 received mail makes it to the inbox. After a bit of research, we found the
 powershell command Set-OrganizationConfig -SCLJunkThreshold  and are trying
 to set the level to 9 (i.e. Set-OrganizationConfig -SCLJunkThreshold 9) when
 I try this on an Edge we are using in one site I get the error
 Set-OrganizationConfig: Failed to convert name format for , error 87.

 It occurred to me that maybe I needed to set it on a Hub server  then
 force an Edge Synch - since it's an Org setting, tried that, and if I run
 Get-OrganizationConfig on an internal server, I see the SCLJunkThreshold is
 set to 9. But even after I ran a Start-EdgeSynchronization, the
 SCLJunkThreshold on the EDGE server still shows as set to 4.

 My question is, does it matter? seems like, since this will effect a Store
 action, the setting on the Edge doesn't really matter - it's where the
 Stores are (i.e. inside the org, not in the DMZ) that will control our
 mailflow concerns. Any comments?

 THanks - and have a great weekend!

 Russ

Logging for Edge server

[Russ Patterson]

Greetings All -

We're transitioning from using Ironports to using FOSE  Edge servers  -
Ironports were wonderful, but way pricey... One thing we hope to 'duplicate'
on the Edge servers is the logging detail of the Ironports.

If we've already set the protocol logging to Verbose on all the connectors,
and turned on everything on the Log Settings tab of the Properties sheet of
the Edge server (i.e. Message Tracking  Connectivity Logging) - what other
log settings (Diagnostic Logging??) would you folks recommend to get as
detailed a picture as possible  from our new configuration?

Thanks everyone! Have a calm weekend!

Russ

Getting ready to retire an E2k7 server

[Russ Patterson]

Hi All -

We're getting ready to retire what was the first E2k7 server in our org. It
was installed as a MBox, Hub and CAS server. Later, we added a dedicated CAS
server that actually served up OWA. POP  IMAP, but this machine still has
all roles installed.

We're retiring it because it was our first Windows 2k8 production server,
and we made the C: partition too small. We will replace it with our first
W2k8R2 E2010 machine:)

I'm emailing the group to see if anyone has any tips/suggestions about
removing what was the first CAS server in an org - even tho' it's not used
as a primary CAS server. Just wanting to be as prepared as possible - Thanks
all!

Re: Getting ready to retire an E2k7 server

[Russ Patterson]

Thanks Michael -

We've already tested - got SMTP logs  even shut down Transport  the store
on that machine - watched queues and read logs all afternoon

Thanks!

On Thu, Oct 22, 2009 at 4:23 PM, Michael B. Smith mich...@owa.smithcons.com
 wrote:

  just make sure that it isn't being used for the ingress or egress of
 email.

 (look at message tracking logs, send-connectors, and receive-connectors)

  --
 *From:* Russ Patterson [rus...@gmail.com]
 *Sent:* Thursday, October 22, 2009 4:22 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* Getting ready to retire an E2k7 server

Hi All -

 We're getting ready to retire what was the first E2k7 server in our org. It
 was installed as a MBox, Hub and CAS server. Later, we added a dedicated CAS
 server that actually served up OWA. POP  IMAP, but this machine still has
 all roles installed.

 We're retiring it because it was our first Windows 2k8 production server,
 and we made the C: partition too small. We will replace it with our first
 W2k8R2 E2010 machine:)

 I'm emailing the group to see if anyone has any tips/suggestions about
 removing what was the first CAS server in an org - even tho' it's not used
 as a primary CAS server. Just wanting to be as prepared as possible - Thanks
 all!

Re: Getting ready to retire an E2k7 server

[Russ Patterson]

Thanks  :) This almost bit us. Finally got to use a script that came with
the Exchange install last week.

On Thu, Oct 22, 2009 at 4:33 PM, James Kerr cluster...@gmail.com wrote:

  Make sure the OAB and any public folders are migrated off of the old
 server as well. Make sure it isnt involved in sending and receiving of mail,
 like Michael said. The just go ahead and uninstall exchange.

  - Original Message -
 *From:* Michael B. Smith mich...@owa.smithcons.com
 *To:* MS-Exchange Admin Issues exchangelist@lyris.sunbelt-software.com
  *Sent:* Thursday, October 22, 2009 4:23 PM
 *Subject:* RE: Getting ready to retire an E2k7 server

  just make sure that it isn't being used for the ingress or egress of
 email.

 (look at message tracking logs, send-connectors, and receive-connectors)

  --
 *From:* Russ Patterson [rus...@gmail.com]
 *Sent:* Thursday, October 22, 2009 4:22 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* Getting ready to retire an E2k7 server

  Hi All -

 We're getting ready to retire what was the first E2k7 server in our org. It
 was installed as a MBox, Hub and CAS server. Later, we added a dedicated CAS
 server that actually served up OWA. POP  IMAP, but this machine still has
 all roles installed.

 We're retiring it because it was our first Windows 2k8 production server,
 and we made the C: partition too small. We will replace it with our first
 W2k8R2 E2010 machine:)

 I'm emailing the group to see if anyone has any tips/suggestions about
 removing what was the first CAS server in an org - even tho' it's not used
 as a primary CAS server. Just wanting to be as prepared as possible - Thanks
 all!

Re: Getting ready to retire an E2k7 server

[Russ Patterson]

And then swim around in all the loose SMTP bits sloshing around on the
floor.

On Thu, Oct 22, 2009 at 4:44 PM, Michael B. Smith mich...@owa.smithcons.com
 wrote:

  yeah, well, you can't uninstall (it's blocked) until you've fixed THOSE
 things. :-)

 you CAN uninstall if you haven't fixed your connectors!

  --
  *From:* Russ Patterson [rus...@gmail.com]
 *Sent:* Thursday, October 22, 2009 4:40 PM

 *To:* MS-Exchange Admin Issues
 *Subject:* Re: Getting ready to retire an E2k7 server

   Thanks  :) This almost bit us. Finally got to use a script that came
 with the Exchange install last week.

 On Thu, Oct 22, 2009 at 4:33 PM, James Kerr cluster...@gmail.com wrote:

  Make sure the OAB and any public folders are migrated off of the old
 server as well. Make sure it isnt involved in sending and receiving of mail,
 like Michael said. The just go ahead and uninstall exchange.

  - Original Message -
 *From:* Michael B. Smith mich...@owa.smithcons.com
 *To:* MS-Exchange Admin Issues exchangelist@lyris.sunbelt-software.com
  *Sent:* Thursday, October 22, 2009 4:23 PM
 *Subject:* RE: Getting ready to retire an E2k7 server

  just make sure that it isn't being used for the ingress or egress of
 email.

 (look at message tracking logs, send-connectors, and receive-connectors)

  --
 *From:* Russ Patterson [rus...@gmail.com]
 *Sent:* Thursday, October 22, 2009 4:22 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* Getting ready to retire an E2k7 server

  Hi All -

 We're getting ready to retire what was the first E2k7 server in our org.
 It was installed as a MBox, Hub and CAS server. Later, we added a dedicated
 CAS server that actually served up OWA. POP  IMAP, but this machine still
 has all roles installed.

 We're retiring it because it was our first Windows 2k8 production server,
 and we made the C: partition too small. We will replace it with our first
 W2k8R2 E2010 machine:)

 I'm emailing the group to see if anyone has any tips/suggestions about
 removing what was the first CAS server in an org - even tho' it's not used
 as a primary CAS server. Just wanting to be as prepared as possible - Thanks
 all!

Exchange 2007 SP2

[Russ Patterson]

Hello all -

We're getting ready to update our org to E2k7 SP2. I just wanted to ask all
the experts if there were any gotchas you all ran into, or any tips you'd
like to pass on. We do have a BES server in the mix - 6.1.4, IIRC. My boss
said he'd heard of some issues on CAS servers, anyone seen anything like
that?

Thanks all...

CommVault Data Archiver for Exchange

[Russ Patterson]

Anyone used CommVault Data Archiver for Exchange? We're considering it, and
I would love to hear from anyone with any experience with it. All info
welcome - thanks and Happy Labor Day!

Re: CommVault Data Archiver for Exchange

[Russ Patterson]

Thanks Ben. Sounds like the only working part is ingestion. That's
discouraging. We're looking to move away from Zantaz for the horrible
instability in their indexing/Discovery pieces.

Any others out there? Who has a positive comment? Who has a product they
recommend unequivocally?

On Fri, Sep 4, 2009 at 1:24 PM, Ben D. Kusa bdk...@sgh.com wrote:

  I have used it, we are actually in the process of moving off of it now.
 It has not been a pleasant experience. We used it initially because we were
 already using commvault for backups. Things that were negative for us were
 the instability of the outlook plugin. The inability to restore all archived
 email for particular users, they have a built in way to do some restores but
 it is not %100. The stability of the server side.



 We are moving to sunbelt exchange archiver now, it is taking forever
 because getting the email out of commvault is next to impossible.



 *From:* Russ Patterson [mailto:rus...@gmail.com]
 *Sent:* Friday, September 04, 2009 12:59 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* CommVault Data Archiver for Exchange



 Anyone used CommVault Data Archiver for Exchange? We're considering it, and
 I would love to hear from anyone with any experience with it. All info
 welcome - thanks and Happy Labor Day!

Auto-Responders with loop detection

[Russ Patterson]

I looked thru the archives, didn't see very much so:

We've suddenly 'acquired' the need to have some semi-unattended mailboxes
with an auto-response message like Thanks, we got your important email. A
human will respond very soon. Our security group really doesn't want us to
allow OOFs to the internet, and the VIP who wants these mailboxes doesn't
want OOF in the reply's subject line either.

This is a mixed E2k7 E2k3 org.

We're looking at GFI Mail Essentials, Exclaimer (

http://www.exclaimer.com/products/exchange-email-disclaimers.aspx  ) and
Email2Db ( http://www.email2db.com/editions.aspx )


Reading the online manuals, Exclaimer mentions a 10 reply/hour adjustable
throttle. Email2Db says you can use their scripting module to build in loop
detection. I can't find any mention in the GFI MailEssentials docs - so I am
asking the authorities:

Anyone here use any of these?  have warnings or recommendations? Anyone want
to recommend something else? Anyone know if you can control loop detection
with GFI?

Thanks very much for you time, and Happy Friday!

Re: Major goof when migrating OAB to E2K7

[Russ Patterson]

Great info, many thanks to you and Alex. We are thinking of turning down the
E2k3 server middle of next week.

Again - Thanks!

On Thu, Jul 2, 2009 at 3:48 PM, Michael B. Smith
mich...@owa.smithcons.comwrote:

  Once you mount the PF store, edit the properties of the OAB to include PF
 publishing, and then update-offlineaddressbook from the Exchange Management
 Shell (or the Exchange Management Console, whichever you are most familiar
 with).

 That's all it should take. No biggie.

 If you are using Outlook 2003 or above, you shouldn't need
 siteFolderServer; but as Alex said in another posting, it should be rehomed
 when you remove the server that hosts it, to any server in the AG that hosts
 a PF store.

  --
 *From:* Russ Patterson [rus...@gmail.com]
 *Sent:* Wednesday, July 01, 2009 11:33 AM
 *To:* MS-Exchange Admin Issues
 *Subject:* Major goof when migrating OAB to E2K7

Hi  - I think I just made the biggest mistake I've ever done in
 Exchange. When I moved OAB generation from E2k3 to E2k7, I pointed to an
 E2k7 server that did not have a Public Folder store. Geesh.

 I've since created one, and used PFDAVAdmin to set up replication, but I'm
 still having lots of issues with the System Folders.

 Main issue is no OAB getting created with these two errors:

 Log Name:  Application
 Source:MSExchangeSA
 Date:  7/1/2009 10:14:53 AM
 Event ID:  9331
 Task Category: OAL Generator
 Level: Error
 Keywords:  Classic
 User:  N/A
 Computer:  CLTEXCH0332.ds1.ltcorp.tree
 Description:
 OALGen encountered error 80070005 (internal ID 50103b4) accessing the
 public folder store while generating the offline address list for address
 list '/'.
 - Default Offline Address List


 Log Name:  Application
 Source:MSExchangeSA
 Date:  7/1/2009 10:14:53 AM
 Event ID:  9335
 Task Category: OAL Generator
 Level: Error
 Keywords:  Classic
 User:  N/A
 Computer:  CLTEXCH0332.ds1.ltcorp.tree
 Description:
 OALGen encountered error 80070005 while cleaning the offline address list
 public folders under /o=LendingTree/cn=addrlists/cn=oabs/cn=Default Offline
 Address List.  Please make sure the public folder store is mounted and
 replicas exist of the offline address list folders.  No offline address
 lists have been generated.  Please check the event log for more information.

 - Default Offline Address List

 I've turned up logging for MSExchangeSA\OAL Generator to medium, those are
 the only errors given.

 Any suggestions? It's easy to dismount the PF store (which I've done,) but
 there are end-users mailboxes on this server, so I could only restart the IS
 at night. I also see that the siteFolderServer attribute in ADSIEdit still
 points to our E2k3 server.

 Help greatly appreciated.

Major goof when migrating OAB to E2K7

[Russ Patterson]

Hi  - I think I just made the biggest mistake I've ever done in Exchange.
When I moved OAB generation from E2k3 to E2k7, I pointed to an E2k7 server
that did not have a Public Folder store. Geesh.

I've since created one, and used PFDAVAdmin to set up replication, but I'm
still having lots of issues with the System Folders.

Main issue is no OAB getting created with these two errors:

Log Name:  Application
Source:MSExchangeSA
Date:  7/1/2009 10:14:53 AM
Event ID:  9331
Task Category: OAL Generator
Level: Error
Keywords:  Classic
User:  N/A
Computer:  CLTEXCH0332.ds1.ltcorp.tree
Description:
OALGen encountered error 80070005 (internal ID 50103b4) accessing the public
folder store while generating the offline address list for address list '/'.

- Default Offline Address List


Log Name:  Application
Source:MSExchangeSA
Date:  7/1/2009 10:14:53 AM
Event ID:  9335
Task Category: OAL Generator
Level: Error
Keywords:  Classic
User:  N/A
Computer:  CLTEXCH0332.ds1.ltcorp.tree
Description:
OALGen encountered error 80070005 while cleaning the offline address list
public folders under /o=LendingTree/cn=addrlists/cn=oabs/cn=Default Offline
Address List.  Please make sure the public folder store is mounted and
replicas exist of the offline address list folders.  No offline address
lists have been generated.  Please check the event log for more information.

- Default Offline Address List

I've turned up logging for MSExchangeSA\OAL Generator to medium, those are
the only errors given.

Any suggestions? It's easy to dismount the PF store (which I've done,) but
there are end-users mailboxes on this server, so I could only restart the IS
at night. I also see that the siteFolderServer attribute in ADSIEdit still
points to our E2k3 server.

Help greatly appreciated.

Re: Major goof when migrating OAB to E2K7

[Russ Patterson]

Hi Alex - thanks for taking this on. BTW, the errors are from the 07 srvr
(in that server name in the eventID the 03 is the rack number and the 32 is
the row number)

We think the replicas were finished today after  update-OfflineAddressBook
and a Update-FileDistributionService were issued. A few hours after they
were issued, we saw the mailboxes we had been missing in the OAB. We've
created another test account to see if it appears during the regularly
scheduled OAB build at 5 am tomorrow. (Plus, we'll be checking for the event
I listed at the beginning of this thread.

I'll keep you posted. Again - Thanks! My next question may well be:
Shouldn't ADSIEdit show these two attributes as the same server? ::
offlineabserver sitefolderserver - one is still the old, E2k3 server that we
want to retire, and the other is set to the  troubled  E2k7 server we've
been talking about.

Russ



On Wed, Jul 1, 2009 at 5:25 PM, Alex Fontana afontana...@gmail.com wrote:

   Are the events below from the 03 or 07 server?

 You've set up replicas, but have they actually replicated over yet?  You
 can try checking via ESM if the '07 server has the instances of the OAB.

 On Wed, Jul 1, 2009 at 8:33 AM, Russ Patterson rus...@gmail.com wrote:

 Hi  - I think I just made the biggest mistake I've ever done in Exchange.
 When I moved OAB generation from E2k3 to E2k7, I pointed to an E2k7 server
 that did not have a Public Folder store. Geesh.

 I've since created one, and used PFDAVAdmin to set up replication, but I'm
 still having lots of issues with the System Folders.

 Main issue is no OAB getting created with these two errors:

 Log Name:  Application
 Source:MSExchangeSA
 Date:  7/1/2009 10:14:53 AM
 Event ID:  9331
 Task Category: OAL Generator
 Level: Error
 Keywords:  Classic
 User:  N/A
 Computer:  CLTEXCH0332.ds1.ltcorp.tree
 Description:
 OALGen encountered error 80070005 (internal ID 50103b4) accessing the
 public folder store while generating the offline address list for address
 list '/'.
 - Default Offline Address List


 Log Name:  Application
 Source:MSExchangeSA
 Date:  7/1/2009 10:14:53 AM
 Event ID:  9335
 Task Category: OAL Generator
 Level: Error
 Keywords:  Classic
 User:  N/A
 Computer:  CLTEXCH0332.ds1.ltcorp.tree
 Description:
 OALGen encountered error 80070005 while cleaning the offline address list
 public folders under /o=LendingTree/cn=addrlists/cn=oabs/cn=Default Offline
 Address List.  Please make sure the public folder store is mounted and
 replicas exist of the offline address list folders.  No offline address
 lists have been generated.  Please check the event log for more information.

 - Default Offline Address List

 I've turned up logging for MSExchangeSA\OAL Generator to medium, those are
 the only errors given.

 Any suggestions? It's easy to dismount the PF store (which I've done,) but
 there are end-users mailboxes on this server, so I could only restart the IS
 at night. I also see that the siteFolderServer attribute in ADSIEdit still
 points to our E2k3 server.

 Help greatly appreciated.

Re: Trying to add new E2k7 stores to our Journaling process

[Russ Patterson]

FYI - we figured this out - my mistake. I created the accounts for the
Journal mailboxes in the domain where all those users were, but we had had
to move the Exchange servers into another domain so we could do SCR. I moved
the accounts to the same domain as the servers, and Journaling went like
clockwork.  Sorry for the noise.

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Outlook choosing CAS server

[Russ Patterson]

Hello all -

I have a quick question about Outlook  CAS servers - how does Outlook
choose a Client Access server? - if the CAS role is installed where your
mailbox is, will Outlook always use that CAS server? Is there any
round-robin or load balancing involved? If your mailbox is NOT on a machine
with a CAS role installed, what algorithm does Outlook use to find a CAS
server?

Thanks!

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Named Property Limit

[Russ Patterson]

You can use the perfmons at the bottom of this:
http://technet.microsoft.com/en-us/library/bb851495.aspx

On Fri, Mar 20, 2009 at 8:30 AM, McCready, Robert
rob.mccrea...@dplinc.comwrote:

  Another quick question.  Is there any way to see how close we are to the
 32k hard limit today?


  --

 *From:* Alex Fontana [mailto:afontana...@gmail.com]
 *Sent:* Friday, March 20, 2009 1:05 AM
 *To:* MS-Exchange Admin Issues
 *Subject:* Re: Named Property Limit



 Seems this turned into a b-ch fest rather than answering your original
 question...;-)  While I agree this is a ridiculous characteristic in the
 design and one that opens us up for DoS attacks (eventually), it is what it
 is and we need to figure out how to work around it.  You have a few options;
 increase the limit, move users off, or find out what is causing it and stop
 it.

 My first suggestion is to take inventory of where your databases are as far
 as named props are concerned, you need to expose some IS counters to see
 this info, but it'll give you an understanding on whether it's widespread or
 concentrated on a set of databases (or users).  Next start monitoring your
 event logs.  An event ID is logged by default each time a new named prop is
 added (event id 9873 I believe) and when the quota's been reached (9666, 7,
 8, 9).  This can help you track down the culprit.  Note, the initial limit
 reached is the default quota...not the limit.  My understanding is that when
 the hard limit (32k) is reached the database will dismount and you will have
 to restore from backup and move users off.

 In my situation I found that less than a dozen users were creating hundreds
 of named props daily for weeks.  This was the result of an open source imap
 client called offlineIMAP.  This client is used to bidirectionally synch
 messages via IMAP.  It does this by creating a unique X-header for EVERY
 message that comes in, as opposed to a single X-header with a specific
 value.  After finding this out I reached out to the users, and being the
 ridiculously intelligent (and curious) crew they are they crafted a patch
 for offlineIMAP (http://software.complete.org/software/issues/show/114).

 Hope this helps.
 -alex








~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Trying to get first Edge server going...

[Russ Patterson]

Michael - Thanks! - As always, you are an amazing source of knowledge.
Ordered your book Monitoring Exchange Server 2007 with System Center
Operations Manager 

We'll keep everyone posted on progress.

On Wed, Mar 11, 2009 at 2:10 PM, Michael B. Smith 
mich...@theessentialexchange.com wrote:

  This is exactly what it breaks down to. These two lines. You should be
 able to execute them manually.



 Dsdbutil ‘Activate Instance MSExchange’ ‘SSL Port 1499’

 Set-itemproperty
 “HKLM:\SOFTWARE\Microsoft\Exchange\v8.0\EdgeTransportRole\AdamSettings\MSExchange”
 –name SslPort –value 1499



 *From:* Russ Patterson [mailto:rus...@gmail.com]
 *Sent:* Tuesday, March 10, 2009 11:46 AM
 *To:* MS-Exchange Admin Issues
 *Subject:* Trying to get first Edge server going...



 Greetings all -

 We're trying to get our Edge Transport server up  running with a custom
 SSLport - which you can do, as documented
 http://technet.microsoft.com/en-us/library/aa997269.aspx here.

 It says you can use the ConfigureAdam.ps1 file to change a few of the
 parameters. We tried, we get some errors. It appears that the script is
 written for ADAM, instead of AD LDS? Our Edge Server is installed on Windows
 server 2008, which uses ADLDS instead of ADAM.

 The errors we got initially were:

 [PS] D:\Program Files\Microsoft\Exchange Server\Scripts.\ConfigureAdam.ps1
 -ssl
 port:1499 -logpath:D:\logs\adam
 The term 'C:\Windows\Adam\dsdbutil.exe' is not recognized as a cmdlet,
 function
 , operable program, or script file. Verify the term and try again.
 At line:1 char:29
 + C:\Windows\Adam\dsdbutil.exe   'Activate Instance MSExchange' 'SSL
 Port 1
 499' 'quit'
 You cannot call a method on a null-valued expression.
 At D:\Program Files\Microsoft\Exchange Server\Scripts\ConfigureAdam.ps1:94
 char
 :25
 + if($log.ToString(  ).ToUpper().Contains(SUCCESSFULLY))

 Changing SSL Port to 1499 failed.
 The term 'C:\Windows\Adam\dsdbutil.exe' is not recognized as a cmdlet,
 function
 , operable program, or script file. Verify the term and try again.
 At line:1 char:29
 + C:\Windows\Adam\dsdbutil.exe   'Activate Instance MSExchange' 'Files'
 'se
 t path logs \D:\logs\adam\' 'quit' 'quit'
 You cannot call a method on a null-valued expression.
 At D:\Program Files\Microsoft\Exchange Server\Scripts\ConfigureAdam.ps1:94
 char
 :25
 + if($log.ToString(  ).ToUpper().Contains(SUCCESSFULLY))

 Changing Log Path to D:\logs\adam failed.
 WARNING: Waiting for service 'Microsoft Exchange ADAM (ADAM_MSExchange)' to
 finish starting...
 Start-Service : Service 'Microsoft Exchange Transport
 (MSExchangeTransport)' st
 art failed.
 At D:\Program Files\Microsoft\Exchange Server\Scripts\ConfigureAdam.ps1:348
 cha
 r:14
 + start-service   $EdgeTransportServiceName


 Reading the errors, we looked to see where dsdbutil.exe was installed - it
 was in C:\Windows\System32 instead of in C:\Windows\Adam. We tried copying
 dsdbutil.exe into the ADAM folder and ran the same powershell script again
 and got these errors:

 [PS] D:\Program Files\Microsoft\Exchange Server\Scripts.\ConfigureAdam.ps1
 -ssl
 port:1499 -logpath:D:\logs\adam
 ERROR reading resource file. Exiting.

 You cannot call a method on a null-valued expression.
 At D:\Program Files\Microsoft\Exchange Server\Scripts\ConfigureAdam.ps1:94
 char
 :25
 + if($log.ToString(  ).ToUpper().Contains(SUCCESSFULLY))

 Changing SSL Port to 1499 failed.
 ERROR reading resource file. Exiting.

 You cannot call a method on a null-valued expression.
 At D:\Program Files\Microsoft\Exchange Server\Scripts\ConfigureAdam.ps1:94
 char
 :25
 + if($log.ToString(  ).ToUpper().Contains(SUCCESSFULLY))

 Changing Log Path to D:\logs\adam failed.
 WARNING: Waiting for service 'Microsoft Exchange ADAM (ADAM_MSExchange)' to
 finish starting...
 Start-Service : Service 'Microsoft Exchange Transport
 (MSExchangeTransport)' st
 art failed.
 At D:\Program Files\Microsoft\Exchange Server\Scripts\ConfigureAdam.ps1:348
 cha
 r:14
 + start-service   $EdgeTransportServiceName
 [PS] D:\Program Files\Microsoft\Exchange Server\Scripts

 Do we need an updated version of ConfigureAdam.ps1? (We looked for a
 ConfigureADLDS.ps1, it wasn't there. G)

 Anyone have any suggestions? Thanks very much for your time.






~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Trying to get first Edge server going...

[Russ Patterson]

Greetings all -

We're trying to get our Edge Transport server up  running with a custom
SSLport - which you can do, as documented
http://technet.microsoft.com/en-us/library/aa997269.aspx here.

It says you can use the ConfigureAdam.ps1 file to change a few of the
parameters. We tried, we get some errors. It appears that the script is
written for ADAM, instead of AD LDS? Our Edge Server is installed on Windows
server 2008, which uses ADLDS instead of ADAM.

The errors we got initially were:

[PS] D:\Program Files\Microsoft\Exchange Server\Scripts.\ConfigureAdam.ps1
-ssl
port:1499 -logpath:D:\logs\adam
The term 'C:\Windows\Adam\dsdbutil.exe' is not recognized as a cmdlet,
function
, operable program, or script file. Verify the term and try again.
At line:1 char:29
+ C:\Windows\Adam\dsdbutil.exe   'Activate Instance MSExchange' 'SSL
Port 1
499' 'quit'
You cannot call a method on a null-valued expression.
At D:\Program Files\Microsoft\Exchange Server\Scripts\ConfigureAdam.ps1:94
char
:25
+ if($log.ToString(  ).ToUpper().Contains(SUCCESSFULLY))

Changing SSL Port to 1499 failed.
The term 'C:\Windows\Adam\dsdbutil.exe' is not recognized as a cmdlet,
function
, operable program, or script file. Verify the term and try again.
At line:1 char:29
+ C:\Windows\Adam\dsdbutil.exe   'Activate Instance MSExchange' 'Files'
'se
t path logs \D:\logs\adam\' 'quit' 'quit'
You cannot call a method on a null-valued expression.
At D:\Program Files\Microsoft\Exchange Server\Scripts\ConfigureAdam.ps1:94
char
:25
+ if($log.ToString(  ).ToUpper().Contains(SUCCESSFULLY))

Changing Log Path to D:\logs\adam failed.
WARNING: Waiting for service 'Microsoft Exchange ADAM (ADAM_MSExchange)' to
finish starting...
Start-Service : Service 'Microsoft Exchange Transport (MSExchangeTransport)'
st
art failed.
At D:\Program Files\Microsoft\Exchange Server\Scripts\ConfigureAdam.ps1:348
cha
r:14
+ start-service   $EdgeTransportServiceName


Reading the errors, we looked to see where dsdbutil.exe was installed - it
was in C:\Windows\System32 instead of in C:\Windows\Adam. We tried copying
dsdbutil.exe into the ADAM folder and ran the same powershell script again
and got these errors:

[PS] D:\Program Files\Microsoft\Exchange Server\Scripts.\ConfigureAdam.ps1
-ssl
port:1499 -logpath:D:\logs\adam
ERROR reading resource file. Exiting.

You cannot call a method on a null-valued expression.
At D:\Program Files\Microsoft\Exchange Server\Scripts\ConfigureAdam.ps1:94
char
:25
+ if($log.ToString(  ).ToUpper().Contains(SUCCESSFULLY))

Changing SSL Port to 1499 failed.
ERROR reading resource file. Exiting.

You cannot call a method on a null-valued expression.
At D:\Program Files\Microsoft\Exchange Server\Scripts\ConfigureAdam.ps1:94
char
:25
+ if($log.ToString(  ).ToUpper().Contains(SUCCESSFULLY))

Changing Log Path to D:\logs\adam failed.
WARNING: Waiting for service 'Microsoft Exchange ADAM (ADAM_MSExchange)' to
finish starting...
Start-Service : Service 'Microsoft Exchange Transport (MSExchangeTransport)'
st
art failed.
At D:\Program Files\Microsoft\Exchange Server\Scripts\ConfigureAdam.ps1:348
cha
r:14
+ start-service   $EdgeTransportServiceName
[PS] D:\Program Files\Microsoft\Exchange Server\Scripts

Do we need an updated version of ConfigureAdam.ps1? (We looked for a
ConfigureADLDS.ps1, it wasn't there. G)

Anyone have any suggestions? Thanks very much for your time.

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Default Mailbox Features POP and IMAP to Disabled

[Russ Patterson]

Hello all -

Anyone have a way to tweak things so that new users created in a Windows
2008, Exchange 2007 forest all default to disabled for POP and IMAP? We have
a real business need to have those OFF for the vast majority of our users. I
know you can script existing boxes with Set-CASMailbozx (I think) - but we
really need - in the GUI - for a new blank user dialog box to come up with
the defaults already at DISABLED. Anyone have any suggestions? As always -
thanks in advance!

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Edge server in a domain

[Russ Patterson]

Morning All -

We're getting ready to implement an E2k7 Edge server. At present, it's in a
workgroup on its own, and we haven't even done a subscription as yet, i.e.
the bits are installed, but no ports have been opened.

We've run into a few difficulties (not insurmountable, but a bit time
consuming) with this scenario, especially with monitoring software (Argent
and soon, hopefully SCOM.) My question is this: Anyone have experience with
putting an Edge server in a domain? - Our DMZ is a child domain in our
forest (root is completely empty except for the DC/GC;) quite separate but
for the required port openings. I apologize for the lack of detail here;
I'm not part of that team. Would we have trouble with an AD sync from our
users domain because the Edge server wasn't in a workgroup? Anyone have any
knowledge they'd like to share?

Michael, I'm eagerly awaiting your book about SCOM ;)

Thanks all - Russ Patterson

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: SCR troubleshooting

[Russ Patterson]

FYI -

MS got us fixed up - Using ADSIEdit, we went here:


CN=[*Storage Group*],CN=InformationStore,CN=[*Server
Name*],CN=Servers,CN=Exchange
Administrative Group (FYDIBOHF23SPDLT),CN=Administrative
Groups,CN=[*Org*],CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=[*Domain*],DC=com


Right-clicked the Storage Group that was just below CN=Information Store, in
the properties sheet is an attribute:

msExchStandbyCopyMachines

It had as its value a list with both the old, decommissioned server and the
new one we were trying to use as an SCR target.

Removing the old server from that list, then restarting the IS and the
MSExchangeRepl service and then performing a full backup got rid of all the
old TLogs, and started the new target's TLog truncation, too.



On Wed, Dec 3, 2008 at 12:35 PM, Russ Patterson [EMAIL PROTECTED] wrote:

 I thought I did  - used Disable-StorageGroupCopy - isn't that all there is
 to stopping it? - then removing the store  TLogs viz the file system on the
 Target (which of course completely went away.)

   On Wed, Dec 3, 2008 at 12:30 PM, KevinM [EMAIL PROTECTED] wrote:

  Server gone.. did you remove SCR replication settings via the command
 line when you took down the server?



 Anytime I've touched SCR I've removed it all, then started from scratch
 with a reseed to fix whatever I busted.



 *From:* Russ Patterson [mailto:[EMAIL PROTECTED]
 *Sent:* Wednesday, December 03, 2008 9:18 AM
 *To:* MS-Exchange Admin Issues
 *Subject:* Re: SCR troubleshooting



 We did NOT remove the SCR source, we removed the SCR Target - which was
 the machine that lost the trust etc.



 The SCR source is still here being the source.

 On Wed, Dec 3, 2008 at 12:05 PM, KevinM [EMAIL PROTECTED] wrote:

 Older should have been Old SCR replica server…. I missed a bunch of words
 on that one.



 *From:* KevinM [mailto:[EMAIL PROTECTED]
 *Sent:* Wednesday, December 03, 2008 8:32 AM


 *To:* MS-Exchange Admin Issues

 *Subject:* RE: SCR troubleshooting



 You removed the older, and created a new one, and the old SCR setup is
 still there???



 *From:* Russ Patterson [mailto:[EMAIL PROTECTED]
 *Sent:* Wednesday, December 03, 2008 7:01 AM
 *To:* MS-Exchange Admin Issues
 *Subject:* SCR troubleshooting



 Seasons Greetings All -



 I'm having a bit of trouble with SCR. Anyone have any suggestions about
 what logging levels to increase to help troubleshoot before I call MS?



 If anyone's feeling generous/adventurous here's the issue: You may
 remember I asked this list about an Exchange server who lost the machine
 trust to the domain a few weeks ago. Apparently, when this happened, the
 transaction logs stopped getting cleared on the SCR source when backed up by
 our CommVault BU. The suggestions here were to tear down that machine 
 build a new one.



 I did so, and before I tore down the old machine, I thought I stopped SCR
 to that machine. ( I used Disable-StorageGroupCopy : got no
 errors) Yesterday we started SCR to the replacement, that works, but it
 appears that the command above didn't work, because when I do this now:



 [PS] C:\Windows\System32$sg=Get-StorageGroup ExchServ\SCRStorageGroup
 [PS] C:\Windows\System32$sg.StandbyMachines



 I get this:



 NodeName Version ReplayLagTime
 TruncationLagTime
  --- -
 -
 ExchSrvr2.domain.co...   1 00:30:00
 00:15:00
 ExchSrvr4.domain.co...   1 00:30:00
 00:15:00



 the bottom one, ExchSrvr4 is the 'retired' machine (gone for good, no
 recourse.) It appears that nowhere (target or source) are Transaction logs
 going away . Tho' since we just started the new SCR target machine
 yesterday afternoon, maybe it's just not clearing those YET.



 I'm starting with MS, then CommVault but was hoping you folks could at
 least help me bump logging levels up so I'd have decent data for PSS. Any
 suggestions?



 Thanks!





















~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: SCR troubleshooting

[Russ Patterson]

Apparently so, even though I used DIsable-StorageGroupCopy  got no errors
before we killed the old box. Showing the standbymachines for our SCR source
still lists the old, dead server as well as the new target.

The main thing I'm worried about (which is why I'm calling MS later) is that
the TLogs aren't going away on the source machine, and haven't for several
days (since the machine trust was 'lost.')

All I've found for logging is  Set-EventLogLevel msexchange repl\Service
-level 7. Is that ALL there is?
On Wed, Dec 3, 2008 at 11:31 AM, KevinM [EMAIL PROTECTED] wrote:

  You removed the older, and created a new one, and the old SCR setup is
 still there???



 *From:* Russ Patterson [mailto:[EMAIL PROTECTED]
 *Sent:* Wednesday, December 03, 2008 7:01 AM
 *To:* MS-Exchange Admin Issues
 *Subject:* SCR troubleshooting



 Seasons Greetings All -



 I'm having a bit of trouble with SCR. Anyone have any suggestions about
 what logging levels to increase to help troubleshoot before I call MS?



 If anyone's feeling generous/adventurous here's the issue: You may remember
 I asked this list about an Exchange server who lost the machine trust to the
 domain a few weeks ago. Apparently, when this happened, the transaction logs
 stopped getting cleared on the SCR source when backed up by our CommVault
 BU. The suggestions here were to tear down that machine  build a new one.



 I did so, and before I tore down the old machine, I thought I stopped SCR
 to that machine. ( I used Disable-StorageGroupCopy : got no
 errors) Yesterday we started SCR to the replacement, that works, but it
 appears that the command above didn't work, because when I do this now:



 [PS] C:\Windows\System32$sg=Get-StorageGroup ExchServ\SCRStorageGroup
 [PS] C:\Windows\System32$sg.StandbyMachines



 I get this:



 NodeName Version ReplayLagTime
 TruncationLagTime
  --- -
 -
 ExchSrvr2.domain.co...   1 00:30:00
 00:15:00
 ExchSrvr4.domain.co...   1 00:30:00
 00:15:00



 the bottom one, ExchSrvr4 is the 'retired' machine (gone for good, no
 recourse.) It appears that nowhere (target or source) are Transaction logs
 going away . Tho' since we just started the new SCR target machine
 yesterday afternoon, maybe it's just not clearing those YET.



 I'm starting with MS, then CommVault but was hoping you folks could at
 least help me bump logging levels up so I'd have decent data for PSS. Any
 suggestions?



 Thanks!






~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: SCR troubleshooting

[Russ Patterson]

We did NOT remove the SCR source, we removed the SCR Target - which was the
machine that lost the trust etc.

The SCR source is still here being the source.

On Wed, Dec 3, 2008 at 12:05 PM, KevinM [EMAIL PROTECTED] wrote:

  Older should have been Old SCR replica server…. I missed a bunch of words
 on that one.



 *From:* KevinM [mailto:[EMAIL PROTECTED]
 *Sent:* Wednesday, December 03, 2008 8:32 AM
 *To:* MS-Exchange Admin Issues
 *Subject:* RE: SCR troubleshooting



 You removed the older, and created a new one, and the old SCR setup is
 still there???



 *From:* Russ Patterson [mailto:[EMAIL PROTECTED]
 *Sent:* Wednesday, December 03, 2008 7:01 AM
 *To:* MS-Exchange Admin Issues
 *Subject:* SCR troubleshooting



 Seasons Greetings All -



 I'm having a bit of trouble with SCR. Anyone have any suggestions about
 what logging levels to increase to help troubleshoot before I call MS?



 If anyone's feeling generous/adventurous here's the issue: You may remember
 I asked this list about an Exchange server who lost the machine trust to the
 domain a few weeks ago. Apparently, when this happened, the transaction logs
 stopped getting cleared on the SCR source when backed up by our CommVault
 BU. The suggestions here were to tear down that machine  build a new one.



 I did so, and before I tore down the old machine, I thought I stopped SCR
 to that machine. ( I used Disable-StorageGroupCopy : got no
 errors) Yesterday we started SCR to the replacement, that works, but it
 appears that the command above didn't work, because when I do this now:



 [PS] C:\Windows\System32$sg=Get-StorageGroup ExchServ\SCRStorageGroup
 [PS] C:\Windows\System32$sg.StandbyMachines



 I get this:



 NodeName Version ReplayLagTime
 TruncationLagTime
  --- -
 -
 ExchSrvr2.domain.co...   1 00:30:00
 00:15:00
 ExchSrvr4.domain.co...   1 00:30:00
 00:15:00



 the bottom one, ExchSrvr4 is the 'retired' machine (gone for good, no
 recourse.) It appears that nowhere (target or source) are Transaction logs
 going away . Tho' since we just started the new SCR target machine
 yesterday afternoon, maybe it's just not clearing those YET.



 I'm starting with MS, then CommVault but was hoping you folks could at
 least help me bump logging levels up so I'd have decent data for PSS. Any
 suggestions?



 Thanks!










~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: SCR troubleshooting

[Russ Patterson]

I thought I did  - used Disable-StorageGroupCopy - isn't that all there is
to stopping it? - then removing the store  TLogs viz the file system on the
Target (which of course completely went away.)

On Wed, Dec 3, 2008 at 12:30 PM, KevinM [EMAIL PROTECTED] wrote:

  Server gone.. did you remove SCR replication settings via the command
 line when you took down the server?



 Anytime I've touched SCR I've removed it all, then started from scratch
 with a reseed to fix whatever I busted.



 *From:* Russ Patterson [mailto:[EMAIL PROTECTED]
 *Sent:* Wednesday, December 03, 2008 9:18 AM
 *To:* MS-Exchange Admin Issues
 *Subject:* Re: SCR troubleshooting



 We did NOT remove the SCR source, we removed the SCR Target - which was the
 machine that lost the trust etc.



 The SCR source is still here being the source.

 On Wed, Dec 3, 2008 at 12:05 PM, KevinM [EMAIL PROTECTED] wrote:

 Older should have been Old SCR replica server…. I missed a bunch of words
 on that one.



 *From:* KevinM [mailto:[EMAIL PROTECTED]
 *Sent:* Wednesday, December 03, 2008 8:32 AM


 *To:* MS-Exchange Admin Issues

 *Subject:* RE: SCR troubleshooting



 You removed the older, and created a new one, and the old SCR setup is
 still there???



 *From:* Russ Patterson [mailto:[EMAIL PROTECTED]
 *Sent:* Wednesday, December 03, 2008 7:01 AM
 *To:* MS-Exchange Admin Issues
 *Subject:* SCR troubleshooting



 Seasons Greetings All -



 I'm having a bit of trouble with SCR. Anyone have any suggestions about
 what logging levels to increase to help troubleshoot before I call MS?



 If anyone's feeling generous/adventurous here's the issue: You may remember
 I asked this list about an Exchange server who lost the machine trust to the
 domain a few weeks ago. Apparently, when this happened, the transaction logs
 stopped getting cleared on the SCR source when backed up by our CommVault
 BU. The suggestions here were to tear down that machine  build a new one.



 I did so, and before I tore down the old machine, I thought I stopped SCR
 to that machine. ( I used Disable-StorageGroupCopy : got no
 errors) Yesterday we started SCR to the replacement, that works, but it
 appears that the command above didn't work, because when I do this now:



 [PS] C:\Windows\System32$sg=Get-StorageGroup ExchServ\SCRStorageGroup
 [PS] C:\Windows\System32$sg.StandbyMachines



 I get this:



 NodeName Version ReplayLagTime
 TruncationLagTime
  --- -
 -
 ExchSrvr2.domain.co...   1 00:30:00
 00:15:00
 ExchSrvr4.domain.co...   1 00:30:00
 00:15:00



 the bottom one, ExchSrvr4 is the 'retired' machine (gone for good, no
 recourse.) It appears that nowhere (target or source) are Transaction logs
 going away . Tho' since we just started the new SCR target machine
 yesterday afternoon, maybe it's just not clearing those YET.



 I'm starting with MS, then CommVault but was hoping you folks could at
 least help me bump logging levels up so I'd have decent data for PSS. Any
 suggestions?



 Thanks!


















~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

SCR broken when machine trust bit the dust

[Russ Patterson]

A question about SCR - Apologies about the lengthy write-up.

We had SCR up  running with no probs, until a co-worker broke the trust
between the SCR target (mailbox, CAS  HUB) and the domain. Our resident
Active Directory expert saved the object, and mail flows to  from mailboxes
on the target with no problems (no obvious problems, anyway.)

Last Monday, we decided to practise a failover  failback before we started
to migrate large numbers of people to E2k7. Our first step was to create a
new dummy storage group  store for using the Database Portability feature.
This was when we called off the practise run, because no-one could mount the
new store when they were directly logged on to the target. When we'd try
to mount the store we'd get 3 errors:

Log Name:  Application
Source:MSExchangeIS
Date:  11/10/2008 1:34:45 PM
Event ID:  9546
Task Category: General
Level: Error
Keywords:  Classic
User:  N/A
Computer:  Target.TLD.local
Description:
Failed to create the Event Registration Mailbox for Database SGPORT\MBPORT.
Error - 0xbf6f.

Log Name:  Application
Source:MSExchangeIS
Date:  11/10/2008 1:34:45 PM
Event ID:  9519
Task Category: General
Level: Error
Keywords:  Classic
User:  N/A
Computer:  Target.TLD.local
Description:
Error 0x80004005 starting database SGPORT\MBPORT on the Microsoft Exchange
Information Store.

Log Name:  Application
Source:MSExchangeIS
Date:  11/10/2008 1:34:45 PM
Event ID:  9518
Task Category: General
Level: Error
Keywords:  Classic
User:  N/A
Computer:  Target.TLD.local
Description:
Error 0x80004005 starting Storage Group
/DC=ourdata/DC=pointingat/CN=Configuration/CN=Services/CN=Microsoft
Exchange/CN=OurCompany/CN=Administrative Groups/CN=Exchange Administrative
Group
(FYDIBOHF23SPDLT)/CN=Servers/CN=TargetServerName/CN=InformationStore/CN=SGPORT
on the Microsoft Exchange Information Store. MDB failed to start.

The same people, logged onto the source (Mailbox, CAS  HUB,) were able to
mount the store on the target remotely with no issues.

However, about 12 hours after that weirdness, we started getting this in the
applog of the target:

Log Name:  Application
Source:MSExchangeRepl
Date:  11/11/2008 9:25:13 AM
Event ID:  2145
Task Category: Service
Level: Error
Keywords:  Classic
User:  N/A
Computer:  Target.TLD.local
Description:
The directory '\\NetBIOSnameofSource\b15c904b-b219-4f67-8289-ce4f95bdfdb3$'
required by the Microsoft Exchange Replication Service for
NetBIOSnameofSource\0315_ExecSysAdmin could not be accessed. Check the
network connectivity and name resolution. Error: 53.

We got this once:

Log Name:  Application
Source:MSExchangeRepl
Date:  11/11/2008 9:24:11 AM
Event ID:  2137
Task Category: Service
Level: Warning
Keywords:  Classic
User:  N/A
Computer:  Target.TLD.local
Description:
Log truncation request to the Information Store using RPC has failed for
storage group 'NetBIOSnameofSource\0315_ExecSysAdmin'. Error code: 1726.

This once:

Log Name:  Application
Source:MSExchangeRepl
Date:  11/11/2008 9:24:32 AM
Event ID:  2136
Task Category: Service
Level: Warning
Keywords:  Classic
User:  N/A
Computer:  Target.TLD.local
Description:
Log truncation open RPC context to the Information Store failed for storage
group 'NetBIOSnameofSource\0315_ExecSysAdmin'. Error code: 3355379671.

SCR doesn't work anymore, and now when we try  suspend  resume
StorageGroupCopy we get these:

Log Name:  Application
Source:MSExchangeRepl
Date:  11/12/2008 5:46:31 AM
Event ID:  2104
Task Category: Service
Level: Error
Keywords:  Classic
User:  N/A
Computer:  Target.TLD.local
Description:
Log file action LogCopy failed for storage group
CLTEXCH0315\0315_ExecSysAdmin. Reason: CreateFile(
\\NetBIOSnameofSource\b15c904b-b219-4f67-8289-ce4f95bdfdb3$\E02C8F0.logfile://netbiosnameofsource/b15c904b-b219-4f67-8289-ce4f95bdfdb3$/E02C8F0.log)
= 2

Log Name:  Application
Source:ESE
Date:  11/12/2008 5:46:58 AM
Event ID:  522
Task Category: General
Level: Error
Keywords:  Classic
User:  N/A
Computer:  Target.TLD.local
Description:
Microsoft.Exchange.Cluster.ReplayService (3960) Log Verifier e02 58178745:
An attempt to open the device name 
\\NetBIOSnameofSource\b15c904b-b219-4f67-8289-ce4f95bdfdb3$file://netbiosnameofsource/b15c904b-b219-4f67-8289-ce4f95bdfdb3$
containing 
\\NetBIOSnameofSource\b15c904b-b219-4f67-8289-ce4f95bdfdb3$\file://netbiosnameofsource/b15c904b-b219-4f67-8289-ce4f95bdfdb3$/
failed with system error 5 (0x0005): Access is denied. .  The
operation will fail with error -1032 (0xfbf8).


Obviously, we've got some permission issues; I suspect due to the machine
trust issue I mentioned 

Re: Need a little help...

[Russ Patterson]

Microsoft Windows [Version 6.0.6001]
Copyright (c) 2006 Microsoft Corporation.  All rights reserved.

C:\vssadmin list writers
vssadmin 1.1 - Volume Shadow Copy Service administrative command-line tool
(C) Copyright 2001-2005 Microsoft Corp.

Writer name: 'System Writer'
   Writer Id: {e8132975-6f93-4464-a53e-1050253ae220}
   Writer Instance Id: {b7553d72-d85c-4c92-b38c-b8803d09f556}
   State: [1] Stable
   Last error: No error

Writer name: 'SqlServerWriter'
   Writer Id: {a65faa63-5ea8-4ebc-9dbd-a0c4db26912a}
   Writer Instance Id: {ad09c339-b559-49d3-93e1-cdd6e7a39ec0}
   State: [1] Stable
   Last error: No error

Writer name: 'IIS Config Writer'
   Writer Id: {2a40fd15-dfca-4aa8-a654-1f8c654603f6}
   Writer Instance Id: {0e556b7b-92f6-4e77-bbcf-11798b52e3cf}
   State: [1] Stable
   Last error: No error

Writer name: 'Microsoft Exchange Writer'
   Writer Id: {76fe1ac4-15f7-4bcd-987e-8e1acb462fb7}
   Writer Instance Id: {e1d32431-b26b-418f-b1b8-a387c6306fd9}
   State: [1] Stable
   Last error: No error

Writer name: 'ASR Writer'
   Writer Id: {be000cbe-11fe-4426-9c58-531aa6355fc4}
   Writer Instance Id: {be1fb8e2-90a3-4fb6-85f8-e414df2ce003}
   State: [1] Stable
   Last error: No error

Writer name: 'IIS Metabase Writer'
   Writer Id: {59b1f0cf-90ef-465f-9609-6ca8b2938366}
   Writer Instance Id: {a9a98764-4321-4967-853d-6622314dc933}
   State: [1] Stable
   Last error: No error

Writer name: 'BITS Writer'
   Writer Id: {4969d978-be47-48b0-b100-f328f07ac1e0}
   Writer Instance Id: {2e0794f4-4cfe-4183-9788-7a29d46243ad}
   State: [1] Stable
   Last error: No error

Writer name: 'Registry Writer'
   Writer Id: {afbab4a2-367d-4d15-a586-71dbb18f8485}
   Writer Instance Id: {2b656618-401c-4b89-a3fa-d02688d69864}
   State: [1] Stable
   Last error: No error

Writer name: 'WMI Writer'
   Writer Id: {a6ad56c2-b509-4e6c-bb19-49d8f43532f0}
   Writer Instance Id: {91e2c4ac-6067-4635-975d-480153f7fc04}
   State: [1] Stable
   Last error: No error

Writer name: 'Shadow Copy Optimization Writer'
   Writer Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
   Writer Instance Id: {941d2b81-159f-4c08-9971-66a979ea83e9}
   State: [1] Stable
   Last error: No error

Writer name: 'COM+ REGDB Writer'
   Writer Id: {542da469-d3e1-473c-9f4f-7847f01fc64f}
   Writer Instance Id: {6e4b338e-fde5-4662-9390-371815bdf941}
   State: [1] Stable
   Last error: No error


On Wed, Oct 29, 2008 at 4:00 PM, Michael B. Smith 
[EMAIL PROTECTED] wrote:

  Could a few of you folks, if you are:



 1] running Exchange Server 2007

 2] on Windows Server 2008



 Do me a favor and send me the output of vssadmin list writers  ?



 Either here or privately.



 I would appreciate it, thanks.



 Regards,



 Michael B. Smith, MCITP:SA,EMA/MCSE/Exchange MVP

 My blog: 
 http://TheEssentialExchange.com/blogs/michaelhttp://theessentialexchange.com/blogs/michael

 Link with me at: http://www.linkedin.com/in/theessentialexchange






~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

ADMT 3 distribution grops

[Russ Patterson]

Hi all - quick sanity check.

Is ADMT 3  (
http://www.microsoft.com/downloads/details.aspx?FamilyID=6f86937b-533a-466d-a8e8-aff85ad3d212DisplayLang=en)
all that is needed to migrate mail-enabled security groups and distribution
groups from an Exchange 2000 Windows 2000 domain to an Exchange 2k7-E2k3
Windows 2k3 domain - seperate forests - and keep the mail flow working? -
i.e. you can reply to an old email with the pre-migrated DL in the CC line 
all users will receive a copy?

Thanks

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

script to dump perms on exchange server, storage group databases

[Russ Patterson]

Hello all -

I'm googling away, but thought this group could save a lot of time -  we
need to get a list of non-default permissions given on Exchange servers (2k3
and 2k7,) and their storage groups and databases. No need to filter out the
defaults, we just need to see a list - anyone have anything that will do
this, please?

Happy birthday all - my best friend's birthday is today -  mine was 3 days
ago - prompting his wife to say I was 3 days older than dirt

:)

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: script to dump perms on exchange server, storage group databases

[Russ Patterson]

Actually, both AD  Exchange would be cool (probably not in the same script)
 :)

On Fri, Jun 27, 2008 at 2:45 PM, Campbell, Rob 
[EMAIL PROTECTED] wrote:

  AD permissions?


  --

 *From:* Russ Patterson [mailto:[EMAIL PROTECTED]
 *Sent:* Friday, June 27, 2008 1:39 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* script to dump perms on exchange server, storage group 
 databases





 **
 Note:
 The information contained in this message may be privileged and confidential 
 and
 protected from disclosure.  If the reader of this message is not the intended
 recipient, or an employee or agent responsible for delivering this message to
 the intended recipient, you are hereby notified that any dissemination,
 distribution or copying of this communication is strictly prohibited. If you
 have received this communication in error, please notify us immediately by
 replying to the message and deleting it from your computer.
 **





~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: script to dump perms on exchange server, storage group databases

[Russ Patterson]

I was searching your site as I got your mail - Thanks Michael!

On Fri, Jun 27, 2008 at 2:54 PM, Michael B. Smith 
[EMAIL PROTECTED] wrote:

  It's on my blog. Search on permissions.



 http://theessentialexchange.com/blogs/michael



 Regards,



 Michael B. Smith

 MCITP:EM/MCSE/Exchange MVP

 http://TheEssentialExchange.com http://theessentialexchange.com/



 *From:* Russ Patterson [mailto:[EMAIL PROTECTED]
 *Sent:* Friday, June 27, 2008 2:52 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* Re: script to dump perms on exchange server, storage group 
 databases



 Actually, both AD  Exchange would be cool (probably not in the same
 script)  :)

 On Fri, Jun 27, 2008 at 2:45 PM, Campbell, Rob 
 [EMAIL PROTECTED] wrote:

 AD permissions?


  --

 *From:* Russ Patterson [mailto:[EMAIL PROTECTED]
 *Sent:* Friday, June 27, 2008 1:39 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* script to dump perms on exchange server, storage group 
 databases





 **

 Note:

 The information contained in this message may be privileged and confidential 
 and

 protected from disclosure.  If the reader of this message is not the intended

 recipient, or an employee or agent responsible for delivering this message to

 the intended recipient, you are hereby notified that any dissemination,

 distribution or copying of this communication is strictly prohibited. If you

 have received this communication in error, please notify us immediately by

 replying to the message and deleting it from your computer.

 **












~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: script to dump perms on exchange server, storage group databases

[Russ Patterson]

HI Michael - are you thinking of this ?
http://theessentialexchange.com/blogs/michael/archive/2007/11/13/displaying-security-on-active-directory-exchange-and-registry-objects.aspx


(Sent for anyone else who might be interested)

On Fri, Jun 27, 2008 at 2:54 PM, Michael B. Smith 
[EMAIL PROTECTED] wrote:

  It's on my blog. Search on permissions.



 http://theessentialexchange.com/blogs/michael



 Regards,



 Michael B. Smith

 MCITP:EM/MCSE/Exchange MVP

 http://TheEssentialExchange.com http://theessentialexchange.com/



 *From:* Russ Patterson [mailto:[EMAIL PROTECTED]
 *Sent:* Friday, June 27, 2008 2:52 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* Re: script to dump perms on exchange server, storage group 
 databases



 Actually, both AD  Exchange would be cool (probably not in the same
 script)  :)

 On Fri, Jun 27, 2008 at 2:45 PM, Campbell, Rob 
 [EMAIL PROTECTED] wrote:

 AD permissions?


  --

 *From:* Russ Patterson [mailto:[EMAIL PROTECTED]
 *Sent:* Friday, June 27, 2008 1:39 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* script to dump perms on exchange server, storage group 
 databases





 **

 Note:

 The information contained in this message may be privileged and confidential 
 and

 protected from disclosure.  If the reader of this message is not the intended

 recipient, or an employee or agent responsible for delivering this message to

 the intended recipient, you are hereby notified that any dissemination,

 distribution or copying of this communication is strictly prohibited. If you

 have received this communication in error, please notify us immediately by

 replying to the message and deleting it from your computer.

 **












~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

events 9666 and 9668 in an Exchange 2003 database

[Russ Patterson]

Hi all -

We've recently hit this issue in an Exchange 2003 database and I can't find
any specific info about E2k3. The data on E2k7 and these events is pretty
clear; and I did find some input somewhere (maybe Experts Exchange??) that
said the E2k7 info worked fine on E2k3.

We get event 9666 - warning about the number of named properties created for
database JournalStore. - this is a store where we have only 6 mailboxes,
each mailbox is journaling a store from our other Exchange servers. (We have
6 stores for end-users, one store for Journaling  1 store for mailboxes we
don't want to journal.)

Just wondering if the experts here can vouch for the assertion that the data
for E2k7 is harmless for E2k3? Is the max quota given for E2k7 (0x7FFF hex,
32767 decimal) safe for E2k3?

Can anyone explain why we need to keep track of all these random headers?
Can anyone offer a good explanation about why the store needs to keep up
with this info? - I know the kb article says  The named properties provide
a way for vendors to extend the standard MAPI property set by adding their
own properties. Because the named properties do not have specific IDs
assigned to them, MAPI provides a facility for dynamically creating unique
IDs for named properties and maintaining a persistent mapping between the
named property and its unique ID.  

and

For example, when a company implements a new application that integrates
with Exchange and uses a specific Simple Mail Transfer Protocol (SMTP)
X-header, the Microsoft Exchange Information Store service creates a named
property for that custom information when it processes the first message
that contains that information. Any subsequent messages that include the
same SMTP X-header do not result in the creation of additional named
properties.

but that doesn't really explain why we need to do this. Plus, it only warns
us at 20 before the quota, and we ate 12 of those in less than an hour.

Thanks for any input -

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: events 9666 and 9668 in an Exchange 2003 database

[Russ Patterson]

17 OOFs so far   :)

Thanks Michael - I think you're right (as usual) - it sure is new to us
 only getting a warning 20 before Kablooey is pretty rank!

On Mon, Jun 9, 2008 at 10:39 AM, Michael B. Smith 
[EMAIL PROTECTED] wrote:

  Yes, the same max values are fine.



 The easiest way to reset the counter is to move all the mailboxes in a
 given store to another store. Drop the old store.



 I'm personally of the opinion, although no one admits it, that there was a
 bug in Exchange 2003 prior to sp2 that caused the values to NOT be created
 in most circumstances. Because prior to sp2, no one ever complained about
 this….



 Regards,



 Michael B. Smith

 MCSE/Exchange MVP

 http://TheEssentialExchange.com http://theessentialexchange.com/



 *From:* Russ Patterson [mailto:[EMAIL PROTECTED]
 *Sent:* Monday, June 09, 2008 10:25 AM
 *To:* MS-Exchange Admin Issues
 *Subject:* events 9666 and 9668 in an Exchange 2003 database



 Hi all -



 We've recently hit this issue in an Exchange 2003 database and I can't find
 any specific info about E2k3. The data on E2k7 and these events is pretty
 clear; and I did find some input somewhere (maybe Experts Exchange??) that
 said the E2k7 info worked fine on E2k3.



 We get event 9666 - warning about the number of named properties created
 for database JournalStore. - this is a store where we have only 6
 mailboxes, each mailbox is journaling a store from our other Exchange
 servers. (We have 6 stores for end-users, one store for Journaling  1 store
 for mailboxes we don't want to journal.)



 Just wondering if the experts here can vouch for the assertion that the
 data for E2k7 is harmless for E2k3? Is the max quota given for E2k7 (0x7FFF
 hex, 32767 decimal) safe for E2k3?



 Can anyone explain why we need to keep track of all these random headers?
 Can anyone offer a good explanation about why the store needs to keep up
 with this info? - I know the kb article says  The named properties provide
 a way for vendors to extend the standard MAPI property set by adding their
 own properties. Because the named properties do not have specific IDs
 assigned to them, MAPI provides a facility for dynamically creating unique
 IDs for named properties and maintaining a persistent mapping between the
 named property and its unique ID.  



 and



 For example, when a company implements a new application that integrates
 with Exchange and uses a specific Simple Mail Transfer Protocol (SMTP)
 X-header, the Microsoft Exchange Information Store service creates a named
 property for that custom information when it processes the first message
 that contains that information. Any subsequent messages that include the
 same SMTP X-header do not result in the creation of additional named
 properties.



 but that doesn't really explain why we need to do this. Plus, it only warns
 us at 20 before the quota, and we ate 12 of those in less than an hour.



 Thanks for any input -






~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Public Folders and Poison Message Queue

[Russ Patterson]

Hello Everyone,

We've just introduced our first Exchange 2007 server into our native Ex2k3
org and moved a few mailboxes over. So far that looks very good. But - I am
seeing something that I haven't read about nor can I find any info in
Technet on this.
-

I started our Public Folders replicating to a PF store on the new E2k7
server, and several messages are showing up in the Poison Message queue. All
of these appear to be PF Replication messages; they have a Subject of
Folder Content Backfill Response. We are also seeing Event 10001 warnings
about these messages in the App Log -

Log Name:  Application
Source:MSExchangeTransport
Date:  4/1/2008 7:05:50 PM
Event ID:  10001
Task Category: PoisonMessage
Level: Warning
Keywords:  Classic
User:  N/A
Computer:  ServerName
Description:
Poison Count is 2 for the message with RecordID 14592. The message has
reached or exceeded the configured poison threshold of 2. After the
Microsoft
Exchange Transport service restarted, the message was moved to the poison
message queue.

Another possible event, an error this time, is event 10003. Here is the
text, minus most of the call stack, which is quite long:

Log Name:  Application
Source:MSExchangeTransport
Date:  4/1/2008 7:05:46 PM
Event ID:  10003
Task Category: PoisonMessage
Level: Error
Keywords:  Classic
User:  N/A
Computer:  ServerName
Description:
The transport process failed during message processing with the following
call stack: System.InvalidOperationException: Participant on a RecipientBase

can be updated only to the one with the same address
   at
Microsoft.Exchange.Data.Storage.RecipientBase.CheckCanUpdateParticipant(Participant
newParticipant)
   at
Microsoft.Exchange.Data.Storage.RecipientBase.InternalUpdateParticipant(Participant
newParticipant)
   at
Microsoft.Exchange.Data.Storage.RecipientBaseCollection`1.LoadAdditionalParticipantProperties(PropertyDefinition[]
keyProperties)
   at
Microsoft.Exchange.Data.Storage.RecipientBaseCollection`1.LookupMandatoryPropertiesIfNeeded()
   at Microsoft.Exchange.Data.Storage.RecipientBaseCollection`1.Save()
   at Microsoft.Exchange.Data.Storage.MessageItem.OnBeforeSave()
   at Microsoft.Exchange.Data.Storage.Item.SaveInternal(SaveMode saveMode,
Boolean commit)
   at
Microsoft.Exchange.Data.Storage.InboundTnefConverter.ParseAttachDataObject(TnefPropertyReader
propertyReader)
   at
Microsoft.Exchange.Data.Storage.InboundTnefConverter.ParseTnefProperty(TnefPropertyReader
propertyReader, Boolean forceTransmittable)

Anyone seeing such a thing? Any suggestions as to how to proceed other than
calling MS PSS??

Thanks very much!

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

Re: Public Folders and Poison Message Queue

[Russ Patterson]

Thanks for the quick response, Michael
- Do you suggest turning it off for a day? a week? forever?

On Tue, Apr 22, 2008 at 2:17 PM, Michael B. Smith 
[EMAIL PROTECTED] wrote:

  I can't tell you WHY it's happening, other than what you already know – a
 PF replication message is causing the transport engine to crash. It's a
 well-known issue. To resolve it, turn off poison message detection.



 get-transportserver | set-transportserver
 -PoisonMessageDetectionEnabled:$false



 Regards,



 Michael B. Smith

 MCSE/Exchange MVP

 http://TheEssentialExchange.com http://theessentialexchange.com/



 *From:* Russ Patterson [mailto:[EMAIL PROTECTED]
 *Sent:* Tuesday, April 22, 2008 2:09 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* Public Folders and Poison Message Queue





 Hello Everyone,

 We've just introduced our first Exchange 2007 server into our native Ex2k3
 org and moved a few mailboxes over. So far that looks very good. But - I am
 seeing something that I haven't read about nor can I find any info in
 Technet on this.
 -

 I started our Public Folders replicating to a PF store on the new E2k7
 server, and several messages are showing up in the Poison Message queue.
 All of these appear to be PF Replication messages; they have a Subject of
 Folder Content Backfill Response. We are also seeing Event 10001 warnings
 about these messages in the App Log -

 Log Name:  Application
 Source:MSExchangeTransport
 Date:  4/1/2008 7:05:50 PM
 Event ID:  10001
 Task Category: PoisonMessage
 Level: Warning
 Keywords:  Classic
 User:  N/A
 Computer:  ServerName
 Description:
 Poison Count is 2 for the message with RecordID 14592. The message has
 reached or exceeded the configured poison threshold of 2. After the
 Microsoft
 Exchange Transport service restarted, the message was moved to the poison
 message queue.

 Another possible event, an error this time, is event 10003. Here is the
 text, minus most of the call stack, which is quite long:

 Log Name:  Application
 Source:MSExchangeTransport
 Date:  4/1/2008 7:05:46 PM
 Event ID:  10003
 Task Category: PoisonMessage
 Level: Error
 Keywords:  Classic
 User:  N/A
 Computer:  ServerName
 Description:
 The transport process failed during message processing with the following
 call stack: System.InvalidOperationException: Participant on a
 RecipientBase
 can be updated only to the one with the same address
at
 Microsoft.Exchange.Data.Storage.RecipientBase.CheckCanUpdateParticipant(Participant
 newParticipant)
at
 Microsoft.Exchange.Data.Storage.RecipientBase.InternalUpdateParticipant(Participant
 newParticipant)
at
 Microsoft.Exchange.Data.Storage.RecipientBaseCollection`1.LoadAdditionalParticipantProperties(PropertyDefinition[]
 keyProperties)
at

 Microsoft.Exchange.Data.Storage.RecipientBaseCollection`1.LookupMandatoryPropertiesIfNeeded()
at Microsoft.Exchange.Data.Storage.RecipientBaseCollection`1.Save()
at Microsoft.Exchange.Data.Storage.MessageItem.OnBeforeSave()
at Microsoft.Exchange.Data.Storage.Item.SaveInternal(SaveMode saveMode,

 Boolean commit)
at
 Microsoft.Exchange.Data.Storage.InboundTnefConverter.ParseAttachDataObject(TnefPropertyReader
 propertyReader)
at
 Microsoft.Exchange.Data.Storage.InboundTnefConverter.ParseTnefProperty(TnefPropertyReader
 propertyReader, Boolean forceTransmittable)

 Anyone seeing such a thing? Any suggestions as to how to proceed other
 than calling MS PSS??

 Thanks very much!






~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

E2k7 migration question

[Russ Patterson]

Hi all -

We're getting ready to add our first E2k7 server  I had a question - in one
of our two Exchange routing groups. we have a server that's in a seperate AD
Site - it's a server for 150 mailboxes in a different state. We haven't
decided if we're going to leave the AD site and put a 64 bit box down there,
or bring the mailboxes onto servers that are here in our main AD site.

Do we need to decide before we bring the 1st E2k7 server onboard? i.e. can
we test a few of the out of state mailboxes on the E2k7 server to see if
performance is tolerable before we make the final decision?

Another 'quick' question - how 'tolerant' of Suppress Link State Routing are
Ex2k3 servers - do we need to hurry the retirement of E2k3, or can they deal
with Link State being gone as long as there's an E2k7 server around to make
routing decisions?

Thanks all.

~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~