Exchange 2010 relay settings

2013-05-14 Thread Tom Miller
I have two Exchange 2010 SP3  CAS servers.  They are front-ended by several
load balancers.  In front of that we have a spam and a/v appliance that
filters e-mail first for inbound and outbound.

This morning I noticed that Internet mail was going out, but not coming in.
 The load balancers did not report any errors with connectivity.  The spam
appliance reported that it could not send messages to Exchange as no
resources were available on the Exchange side.

Looking at the CAS servers, I saw entries in the app logs:   receive
connected relay server_name rejected an incoming connection from IP address
x.x.x.x.  The maximum number of connections per source (20) for th is
connector has been reached by this source IP address.

I restarted CAS servers and they started to accept mail again, although I
do see that message again.

I know I can change this via the MaxInboundConnectionPerSource and
MaxInboundConnectionPercentagePerSource.  But I'd really like to know how
to properly troubleshoot this.  The relay connectors on the server are
limited to specific IP addresses such as our copiers, notification systems,
and the load balancers.  The App log referred specifically to the IP of the
primary load balancer.  Other than enabling verbose logging on that
connector, how else would one troubleshoot this?

Thanks,
Tom

---
To manage subscriptions click here: 
or send an email to 
with the body: unsubscribe exchangelist

Exchange 2010 backup/DR questions

2013-04-30 Thread Tom Miller
Hi All,

I manage an Exchange 2010 SP3 system:  several CAS servers front-ended by a
pair of load balancers, and a DAG hosted on several other servers.  This is
at our main site.   We have other sites on the East Coast.

Regarding backups, what sort of backups do you do?  Currently I run DAG
backups, but not full server backups (these are hosted on VMWare and I take
snapshot backups of our other systems).  I am concerned that DAG-only
backups might be an issue if our main office failed and I needed to restore
Exchange.

I'd love to replicate our Exchange system to one of our remote offices, as
we have sufficient reliable bandwidth, but the Director here does not see
the point (Director knows nothing about Exchange or it's complexities,
however)

So are there any best or recommended methods to backup and restore
Exchange?  I guess that since I'd have to rebuild the servers, I would have
to install Exchange in Recover Server mode?

Tom

---
To manage subscriptions click here: 
or send an email to 
with the body: unsubscribe exchangelist

Archive search utility?

2013-04-15 Thread Tom Miller
I have several users that have multiple PST files.  Are there any utilities
that can search multiple PSTs at the same time?  These users want to do
cleanup and it would be helpful to view the contents of the PSTs side by
side, or even search by sender, etc, for similar messages.

Tom

---
To manage subscriptions click here: 
or send an email to 
with the body: unsubscribe exchangelist

Re: Backup Exec 2013 and Exchange 2013 issues - Symantec's response

2013-04-12 Thread Tom Miller
I was eventually contacted by Symantec - I had an open ticket - and was
told that backups won't work with Exchange 2010 SP3 and the update for
supporting it won't be out until May, but more like June.

Our Symantec rep said we could try Netbackup as an option, as that support
Exchange 2010 SP3.  Naturally it's more expensive.

I'm also looking at Veeam.


On Tue, Apr 2, 2013 at 1:20 PM, Chyka, Robert bch...@medaille.edu wrote:

  I am interested also please.

 ** **

 Thanks.

 ** **

 [image: cid:3366368584_1217441]

 ** **

 *From:* Tom Miller [mailto:tominyorkt...@gmail.com]
 *Sent:* Tuesday, April 02, 2013 12:56 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* Re: Backup Exec 2013 and Exchange 2013 issues - Symantec's
 response

 ** **

 That would be appreciated, thanks.

 ** **

 On Tue, Apr 2, 2013 at 10:39 AM, Steve Ens stevey...@gmail.com wrote:***
 *

 Symantec gave me a couple of scripts to use a while back to fix this
 issue.  If you're interested I can see if I can pull them up. 

 ** **

 On Tue, Apr 2, 2013 at 4:33 AM, Tom Miller tominyorkt...@gmail.com
 wrote:

 Thanks for the comments and it's good to know it's not just my environment
 at least.  The backups never fail on my small databases and public folders,
 just the large databases.  When I check on the backups, I see the backup
 rate getting slower as time goes by and I suppose it times out.  I use
 backup to disk, copy to tape method.

  

 Anyone have any suggestions for a product that works?  ** **

  

 Tom

 ** **

 On Mon, Apr 1, 2013 at 10:21 PM, Steve Ens stevey...@gmail.com wrote:***
 *

 My suggestion is to start tweeting to the backup exec accountthat
 usually wakes up their tier two or three support.

 Sent from my FriPad


 On 2013-04-01, at 9:04 PM, Chyka, Robert bch...@medaille.edu wrote:***
 *

  I am using the same setup with you and encountering the same issues.  I
 get a successful, clean, no error backup about once every 6 backups or so.
 I am very frustrated also.  I may consider changing software packages if
 this doesn’t get fixed soon.  I really don’t think this is a Microsoft
 issue as my exchange environment is very stable.

  

 image001.png

  

 *From:* Tom Miller [mailto:tominyorkt...@gmail.com]
 *Sent:* Monday, April 01, 2013 9:30 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* Backup Exec 2013 and Exchange 2013 issues - Symantec's response
 

  

 I've been having issues with Backup Exec backing up my Exchange 2010 SP3
 environment.  I've had the same issues since we migrated to Exchange 2010
 and that was on SP2.

  

 Backup Exec 2012 (and Backup Exec 2010 before I upgraded) always failed on
 Exchange DAGs here.  This is a VMware environment.  Exchange is on Windows
 2008 R2 servers.  My environment is simple:  two CAS servers, two DAG
 servers.

  

 I opened a support request with Symantec about the issue.  The response I
 received is:  

 * *

 * I would like to inform you that exchange 2010 SP3 is not yet supported
 by the latest version of BE at the moment.**

 By not supported I mean that BE has not been tested with Exchange 2010 SP3
 officialy. Support for the same may be expected in upcoming releases.

 About the VSS writers, BE calls them during the backup to take a snapshot
 of the databases and logs. But due to some reason the writers fail again
 and again and cause the backup job to fail inturn.

 In this case, I would suggest you to contact Microsoft Support to fix the
 VSS writer issue. Once fixed, you can continue taking backups successfully.
 Just make sure that the Advanced Open File Option is not selected in the
 backup as it is not recommended for exchange.*

 Well...that sucks.  I didn't know about the advanced open file. so I'll
 disable that and give it another try.  So, what are you folks using for
 backup?  The vss writers are always stable, at least when I check.  

  

 Tom

  

  

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 ** **

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 ** **

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe

Re: Backup Exec 2013 and Exchange 2013 issues - Symantec's response

2013-04-02 Thread Tom Miller
Thanks for the comments and it's good to know it's not just my environment
at least.  The backups never fail on my small databases and public folders,
just the large databases.  When I check on the backups, I see the backup
rate getting slower as time goes by and I suppose it times out.  I use
backup to disk, copy to tape method.

Anyone have any suggestions for a product that works?

Tom


On Mon, Apr 1, 2013 at 10:21 PM, Steve Ens stevey...@gmail.com wrote:

 My suggestion is to start tweeting to the backup exec accountthat
 usually wakes up their tier two or three support.

 Sent from my FriPad

 On 2013-04-01, at 9:04 PM, Chyka, Robert bch...@medaille.edu wrote:

  I am using the same setup with you and encountering the same issues.  I
 get a successful, clean, no error backup about once every 6 backups or so.
 I am very frustrated also.  I may consider changing software packages if
 this doesn’t get fixed soon.  I really don’t think this is a Microsoft
 issue as my exchange environment is very stable.

 ** **

 image001.png

 ** **

 *From:* Tom Miller [mailto:tominyorkt...@gmail.com]
 *Sent:* Monday, April 01, 2013 9:30 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* Backup Exec 2013 and Exchange 2013 issues - Symantec's response
 

 ** **

 I've been having issues with Backup Exec backing up my Exchange 2010 SP3
 environment.  I've had the same issues since we migrated to Exchange 2010
 and that was on SP2.

  

 Backup Exec 2012 (and Backup Exec 2010 before I upgraded) always failed on
 Exchange DAGs here.  This is a VMware environment.  Exchange is on Windows
 2008 R2 servers.  My environment is simple:  two CAS servers, two DAG
 servers.

  

 I opened a support request with Symantec about the issue.  The response I
 received is:  

 * *

 * I would like to inform you that exchange 2010 SP3 is not yet supported
 by the latest version of BE at the moment.**

 By not supported I mean that BE has not been tested with Exchange 2010 SP3
 officialy. Support for the same may be expected in upcoming releases.

 About the VSS writers, BE calls them during the backup to take a snapshot
 of the databases and logs. But due to some reason the writers fail again
 and again and cause the backup job to fail inturn.

 In this case, I would suggest you to contact Microsoft Support to fix the
 VSS writer issue. Once fixed, you can continue taking backups successfully.
 Just make sure that the Advanced Open File Option is not selected in the
 backup as it is not recommended for exchange.*

 Well...that sucks.  I didn't know about the advanced open file. so I'll
 disable that and give it another try.  So, what are you folks using for
 backup?  The vss writers are always stable, at least when I check.  

  

 Tom

  

  

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

Re: Anyone using Backup Exec 2012 for Exchange 2010?

2013-03-25 Thread Tom Miller
Yes, same SP as the Exchange servers.

On Mon, Mar 25, 2013 at 12:42 PM, Steve Ens stevey...@gmail.com wrote:

 You have Exchange management console installed on the BE server?


 On Mon, Mar 25, 2013 at 11:35 AM, Tom Miller tominyorkt...@gmail.comwrote:

 I'm having a difficult time getting Exchange 2010 backups from Backup
 Exec 2012.  BE is fully patched and Exchange is at SP3.  These are servers
 on VMWare.  The vmware snapshot backup runs okay.  The problem is the DAG
 backups.  DAG backups tend to run slowly and in many cases time out during
 a backup.  I've tried various options:  disabling GRT, trying different VSS
 providers, changing compression.  DAG backups error out.

 Anyone on the list able to back up a DAG with Backup Exec 2012?  If so,
 what did you do to get it to work?

 I don't have issues with my other virtual or physical servers - just
 Exchange.

 Thanks,
 Tom

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist


 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

Re: Anyone using Backup Exec 2012 for Exchange 2010?

2013-03-25 Thread Tom Miller
V-79-57344-64247 failure reading object.

Sometimes I get errors about an Exchange database being corrupt.  Exchange
does not report any issues with any of the copies, though.

V-79-57344-34108

There are others.  I've read the Symantec KBs on these errors but they do
not seem to apply.

On Mon, Mar 25, 2013 at 1:07 PM, Steve Ens stevey...@gmail.com wrote:

 What is the error you are getting?


 On Mon, Mar 25, 2013 at 11:54 AM, Tom Miller tominyorkt...@gmail.comwrote:

 Yes, same SP as the Exchange servers.


 On Mon, Mar 25, 2013 at 12:42 PM, Steve Ens stevey...@gmail.com wrote:

 You have Exchange management console installed on the BE server?


 On Mon, Mar 25, 2013 at 11:35 AM, Tom Miller tominyorkt...@gmail.comwrote:

 I'm having a difficult time getting Exchange 2010 backups from Backup
 Exec 2012.  BE is fully patched and Exchange is at SP3.  These are servers
 on VMWare.  The vmware snapshot backup runs okay.  The problem is the DAG
 backups.  DAG backups tend to run slowly and in many cases time out during
 a backup.  I've tried various options:  disabling GRT, trying different VSS
 providers, changing compression.  DAG backups error out.

 Anyone on the list able to back up a DAG with Backup Exec 2012?  If so,
 what did you do to get it to work?

 I don't have issues with my other virtual or physical servers - just
 Exchange.

 Thanks,
 Tom

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist


 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist


 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist


 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

Re: Anyone using Backup Exec 2012 for Exchange 2010?

2013-03-25 Thread Tom Miller
Yup.  I have  an account that is Exchange org role that does the backups.

On Mon, Mar 25, 2013 at 2:23 PM, Steve Ens stevey...@gmail.com wrote:

 You've got your service account suitable permissions?


 On Mon, Mar 25, 2013 at 1:18 PM, Tom Miller tominyorkt...@gmail.comwrote:

 V-79-57344-64247 failure reading object.

 Sometimes I get errors about an Exchange database being corrupt.
 Exchange does not report any issues with any of the copies, though.

 V-79-57344-34108

 There are others.  I've read the Symantec KBs on these errors but they do
 not seem to apply.

 On Mon, Mar 25, 2013 at 1:07 PM, Steve Ens stevey...@gmail.com wrote:

 What is the error you are getting?


 On Mon, Mar 25, 2013 at 11:54 AM, Tom Miller tominyorkt...@gmail.comwrote:

 Yes, same SP as the Exchange servers.


 On Mon, Mar 25, 2013 at 12:42 PM, Steve Ens stevey...@gmail.comwrote:

 You have Exchange management console installed on the BE server?


 On Mon, Mar 25, 2013 at 11:35 AM, Tom Miller 
 tominyorkt...@gmail.comwrote:

 I'm having a difficult time getting Exchange 2010 backups from Backup
 Exec 2012.  BE is fully patched and Exchange is at SP3.  These are 
 servers
 on VMWare.  The vmware snapshot backup runs okay.  The problem is the DAG
 backups.  DAG backups tend to run slowly and in many cases time out 
 during
 a backup.  I've tried various options:  disabling GRT, trying different 
 VSS
 providers, changing compression.  DAG backups error out.

 Anyone on the list able to back up a DAG with Backup Exec 2012?  If
 so, what did you do to get it to work?

 I don't have issues with my other virtual or physical servers - just
 Exchange.

 Thanks,
 Tom

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist


 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist


 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist


 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist


 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist


 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: Exchange 2010 SP3 and OWA ECP directory

2013-03-04 Thread Tom Miller
I got it.  I used the following syntax:

new-ecpvirtualdirectory -externalurl  
https://emaildomainname.com/ews/exchange.asmx; -internalurl 
https://emaildomainname.com/ews/exchange.asmx; -server 
server.internaldomainname

Tom

From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Monday, March 04, 2013 10:21 AM
To: MS-Exchange Admin Issues
Subject: RE: Exchange 2010 SP3 and OWA ECP directory

-identity server\ecp

Is the proper syntax. If it fails, share the error.

Sent from my Windows Phone

From: Tom Miller
Sent: 3/4/2013 4:48 AM
To: MS-Exchange Admin Issues
Subject: Exchange 2010 SP3 and OWA ECP directory
Hi All,

Exchange SP3 hosed the ECP virtual directory for my OWA servers.  I tried

Remove-ecpvirtualdirtory -identity server\ecp (default web site) this worked 
fine

Then

New-ecpvirtualdirectory -identity server\ecp (default web site) and this 
failed

Also tried syntax:

New-ecpvirtualdirectory -identity server -name ecp -websitename default 
web site

But this failed too.  Suggestions?  I can manually recreate if I know what the 
perms are supposed to be.

Thanks,
Tom


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: Exchange 2010 SP3 and OWA ECP directory

2013-03-04 Thread Tom Miller
Me too.  The only thing I could think is that our AD domain does not match the 
email domain name (name only not an AD domain), and internally we have dns with 
entries for the exchange servers in both dns zones.  IP addresses are the same, 
just different FQDN names.  In any case I'm glad it worked.



And I'm astounded that you are astounded.



Tom


From: Michael B. Smith [mich...@smithcons.com]
Sent: Monday, March 04, 2013 2:58 PM
To: MS-Exchange Admin Issues
Subject: RE: Exchange 2010 SP3 and OWA ECP directory

It astounds me that that works.

From: Tom Miller [mailto:tmil...@sfgtrust.com]
Sent: Monday, March 4, 2013 2:04 PM
To: MS-Exchange Admin Issues
Subject: RE: Exchange 2010 SP3 and OWA ECP directory

I got it.  I used the following syntax:

new-ecpvirtualdirectory -externalurl  
https://emaildomainname.com/ews/exchange.asmx; -internalurl 
https://emaildomainname.com/ews/exchange.asmx; -server 
server.internaldomainname

Tom

From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Monday, March 04, 2013 10:21 AM
To: MS-Exchange Admin Issues
Subject: RE: Exchange 2010 SP3 and OWA ECP directory

-identity server\ecp

Is the proper syntax. If it fails, share the error.

Sent from my Windows Phone

From: Tom Miller
Sent: 3/4/2013 4:48 AM
To: MS-Exchange Admin Issues
Subject: Exchange 2010 SP3 and OWA ECP directory
Hi All,

Exchange SP3 hosed the ECP virtual directory for my OWA servers.  I tried

Remove-ecpvirtualdirtory –identity “server\ecp (default web site)” this worked 
fine

Then

New-ecpvirtualdirectory –identity “server\ecp (default web site)” and this 
failed

Also tried syntax:

New-ecpvirtualdirectory –identity “server” –name “ecp” –websitename “default 
web site”

But this failed too.  Suggestions?  I can manually recreate if I know what the 
perms are supposed to be.

Thanks,
Tom


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist



RE: Issue with load balancers, relay, autodiscover

2013-02-20 Thread Tom Miller
Thanks!  I'm back to Exchange after years away from it so this is still 
new(ish) to me.

Tom

From: Alexander Rose [mailto:arose...@gmail.com]
Sent: Wednesday, February 20, 2013 8:32 AM
To: MS-Exchange Admin Issues
Subject: Re: Issue with load balancers, relay, autodiscover

First error message is normal, it is because of the way the test is done, it 
first try an autodiscover test with your domain name in the URL. If your domain 
is contoso it will try first
Autodiscover to 
https://contoso.com/autodiscover/autodiscover.xlmhttps://mycompany.com/autodiscover/autodiscover.xlm

I get the same error myself but autodiscover works fine from outside.

On Wed, Feb 20, 2013 at 12:36 PM, Tom Miller 
tmil...@sfgtrust.commailto:tmil...@sfgtrust.com wrote:
This past weekend I inserted two Barracuda load balancers into my Exchange 2010 
environment.  With a few exceptions, they seems to be working well.

I need some suggestions from the list on a few things:

External autodiscover is failing, then succeeding.  In the log when I get test 
connection, I see this:

Autodiscover to https://mycompany.com/autodiscover/autodiscover.xlm failed 
(0x800c203)
Autodiscover to 
https://autodiscover.mycompany.com/autodiscover/autodiscover.xml starting
GetLastError = 0; httpStatus=200
Autodiscover to 
https://autodiscover.mycompany.com/autodiscover/autodiscover.xml succeeded

Any ideas on this one?

The second issue I have is relay.  I have a relay for our various 
environmental, copiers, BusinessObject systems, and other equipment/systems.  
That worked fine with I used Windows NLB on the CAS servers.  Now that I'm 
using the load balancers, the relay works only for internal recipients.  If a 
relay is destined for external e-mail addresses, it fails.  This is 
particularly an issue for our BusinessObjects systems, which send out reports 
to non-internal addresses.  Any thoughts on this one?

Thanks,
Tom

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: Issue with load balancers, relay, autodiscover

2013-02-20 Thread Tom Miller
Exchange servers and anonymous users.  Only specific IP addresses are permitted 
however.

From: Alexander Rose [mailto:arose...@gmail.com]
Sent: Wednesday, February 20, 2013 10:27 AM
To: MS-Exchange Admin Issues
Subject: Re: Issue with load balancers, relay, autodiscover

How is your receive connector configured for relaying (Authentication and 
Permission Groups) ?


On Wed, Feb 20, 2013 at 3:17 PM, Tom Miller 
tmil...@sfgtrust.commailto:tmil...@sfgtrust.com wrote:
Thanks!  I'm back to Exchange after years away from it so this is still 
new(ish) to me.

Tom

From: Alexander Rose [mailto:arose...@gmail.commailto:arose...@gmail.com]
Sent: Wednesday, February 20, 2013 8:32 AM
To: MS-Exchange Admin Issues
Subject: Re: Issue with load balancers, relay, autodiscover

First error message is normal, it is because of the way the test is done, it 
first try an autodiscover test with your domain name in the URL. If your domain 
is contoso it will try first
Autodiscover to 
https://contoso.com/autodiscover/autodiscover.xlmhttps://mycompany.com/autodiscover/autodiscover.xlm

I get the same error myself but autodiscover works fine from outside.
On Wed, Feb 20, 2013 at 12:36 PM, Tom Miller 
tmil...@sfgtrust.commailto:tmil...@sfgtrust.com wrote:
This past weekend I inserted two Barracuda load balancers into my Exchange 2010 
environment.  With a few exceptions, they seems to be working well.

I need some suggestions from the list on a few things:

External autodiscover is failing, then succeeding.  In the log when I get test 
connection, I see this:

Autodiscover to https://mycompany.com/autodiscover/autodiscover.xlm failed 
(0x800c203)
Autodiscover to 
https://autodiscover.mycompany.com/autodiscover/autodiscover.xml starting
GetLastError = 0; httpStatus=200
Autodiscover to 
https://autodiscover.mycompany.com/autodiscover/autodiscover.xml succeeded

Any ideas on this one?

The second issue I have is relay.  I have a relay for our various 
environmental, copiers, BusinessObject systems, and other equipment/systems.  
That worked fine with I used Windows NLB on the CAS servers.  Now that I'm 
using the load balancers, the relay works only for internal recipients.  If a 
relay is destined for external e-mail addresses, it fails.  This is 
particularly an issue for our BusinessObjects systems, which send out reports 
to non-internal addresses.  Any thoughts on this one?

Thanks,
Tom

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: Internal user failed to send (UNCLASSIFIED)

2013-02-20 Thread Tom Miller
Several people are getting this message, all internal staff, different 
recipients though.  I can't imagine that a number of staff would simultaneously 
have the same issue.

Selecting users from the address book instead of auto-complete seems to resolve 
it.

-Original Message-
From: Kent, Larry J CTR (US) [mailto:larry.j.kent2@mail.mil] 
Sent: Wednesday, February 20, 2013 10:49 AM
To: MS-Exchange Admin Issues
Subject: RE: Internal user failed to send (UNCLASSIFIED)

Classification: UNCLASSIFIED
Caveats: NONE

Did this error occur just sending to this one user or was he part of a mass 
mailing or send to a distribution list?  I believe there is a limit of 5000 
recipients per message for Exchange 2010

-Original Message-
From: Tom Miller [mailto:tmil...@sfgtrust.com] 
Sent: Wednesday, February 20, 2013 10:35 AM
To: MS-Exchange Admin Issues
Subject: Internal user failed to send

Anyone ever seen anything like this:

 

Your message did not reach some or all of the intended recipients.

 

  Subject:sample

  Sent: 2/20/2013 8:59 AM

 

The following recipient(s) cannot be reached:

 

 2/20/2013 9:00 AM

This message could not be sent. Try sending the message again 
later, or contact your network administrator.  Error is 
[0x80004005--].

 

   on 2/20/2013 9:00 AM

This message could not be sent. Try sending the message again 
later, or contact your network administrator.  Error is 
[0x80004005--].

 

These are all internal person.  I've seen a few reports like this since we 
started to use load balancers.  Exchange 2010 SP2.

 

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist


Classification: UNCLASSIFIED
Caveats: NONE



---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist



RE: Barracuda Load Balancer

2013-02-12 Thread Tom Miller
Thanks for your comments.  I'll certainly keep them in mind during the test 
period.  Do use also use the SSL offload option?  We have only about 300 or so 
users so this environment is much smaller and less load than your devices.

Tom

From: Tomo [mailto:t...@london.edu]
Sent: Monday, February 11, 2013 12:00 PM
To: MS-Exchange Admin Issues
Subject: RE: Barracuda Load Balancer

Tom

I have to say that our experience of Barracuda Loadbalancers (physical 440 
appliances) for Loadbalancing Exchange 2010 has been pretty poor. Some other 
members of the team refer to the LB440s as chocolate teapots compared the 
reliability of some of our other kit.

We've had the boxes for just over a year, and we struggled all the way through 
3.X, 4.0 and 4.1 code, with binaries crashing, core dumps being taken by 
development teams, and it's only in the past three months running 4.2.0.015 
code have we had a stable service. I think there was an oddity with one part of 
OWA that we had been having problems with from the outset that was magically 
fixed by one firmware upgrade but wasn't described in the release notes. The 
Barracuda is pretty good at detecting when a binary has crashed and restarting 
it, but there's a 2-3 minute outage when that happens. The HA failover between 
devices only cuts in for proper service outages that last minutes - it's 
definitely not hitless failover.

The LB Barracuda support is based out of India but they are pretty responsive, 
are knowledgeable L2-L3 engineers, have a direct line to the developers, and 
speak good English, so if you want to open a call e-mail 
supp...@barracuda.commailto:supp...@barracuda.com but copy in 
linkandloadsupport_t...@barracuda.commailto:linkandloadsupport_t...@barracuda.com
 and they'll be on the case pretty quickly. If you're able to enable the 
support tunnel (you initiate a SSH connection from the LB440 back to their 
systems) they can diagnose what's gone wrong fairly well. Just to add insult to 
injury one batch of firmware was good at messing up the disk partitions and 
hence bricking the appliances, although thankfully we didn't lose both at the 
same time so we've even had both devices swapped out under next day 
replacement. They've earnt their money for the first year support contract.

After almost a year of pain with multiple release of code, up until last week 
we had just had 3 months of uninterrupted service. But last week we had a 
tell-tale sign of a binary crash with a 2-3min outage. The crash (after 
analysis of the core dump by Barracuda) is a bug they've already fixed in 
4.2.1.006. now I'm asking questions about how stable this new release is, 
and we'll have the dilemma of staying put or branching off into the unknown new 
firmware.

I think it's true to say that all the issues we've had have not resulted in 
service outages more than a few minutes, but there have been plenty of those. 
And if a binary crash is going to occur it's going to be when it's busy, 
typically not in the middle of the night. We have approx. 5000 users and 
traffic peaks between 50-70Mbit's on LB440 during busy periods. It's doing the 
full range of protocols including IMAPS and POPS.

Our experiences may have fixed all the problems for everyone else, but you can 
make up your own minds.
Sent to you via a Barracuda LB440 :)


_

Tomo | Senior Infrastructure Engineer - Networks, Telecoms  Security.
Direct line +44 (0)20 7000 

www.london.eduhttp://www.london.edu/ | London experience. World impact.
Connect with us: [Description: Description: twitter.jpg] 
https://twitter.com/LondonBSchool  Follow us on 
Twitterhttps://twitter.com/LondonBSchool  [Description: Description: 
facebook.jpg] 
http://www.facebook.com/pages/London-United-Kingdom/London-Business-School/14027365105
  Become a fan on 
Facebookhttp://www.facebook.com/pages/London-United-Kingdom/London-Business-School/14027365105

From: Tom Miller [mailto:tmil...@sfgtrust.com]
Sent: 11 February 2013 14:59
To: MS-Exchange Admin Issues
Subject: Barracuda Load Balancer

Hi Folks,

I'm about to trial the Barracuda Load Balancer 440Vx on VMWare for Exchange 
2010 (it will replace standard Windows NLB).  For those of you using this 
series,  any words of wisdom?

Thanks,
Tom

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelistinline: image001.jpginline: image002.jpg

RE: Reconnect Exchange 2010 mailbox

2013-02-04 Thread Tom Miller
That was it.  I saw in an MS support forum that the Clean-Mailboxdatabase 
db_name is needed for immediate access.  Supposedly fixed in the current rollup 
(I'm not on it).

Thank you,
Tom

-Original Message-
From: Rupprecht, James R. [mailto:jimruppre...@ku.edu] 
Sent: Monday, February 04, 2013 1:18 PM
To: MS-Exchange Admin Issues
Subject: RE: Reconnect Exchange 2010 mailbox

Run Clean-MailboxDatabase against the database that hosts the reconnected 
mailbox.

Jim Rupprecht   
KU Information Technology   

- Original Message -
From: Tom Miller [mailto:tmil...@sfgtrust.com] 
Sent: Monday, February 04, 2013 11:40 AM
To: MS-Exchange Admin Issues
Subject: Reconnect Exchange 2010 mailbox

We have an account that was disabled accidentally.  I recreated the account in 
ADUC, and used the reconnect option in the EMC.  However, when I go into the 
account on OWA, the web page states that the account is disabled, but it is 
not.  Anyone have any suggestions?

Tom
---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist



RE: Anyone know Crystal/Business Objects

2013-01-23 Thread Tom Miller
We got it.  I had to append the domain name to the sender name, and not just 
the sender name.  Doesn't Exchange 2010 no longer append the domain 
automatically?  In any case that was it.



From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Wednesday, January 23, 2013 1:32 PM
To: MS-Exchange Admin Issues
Subject: RE: Anyone know Crystal/Business Objects

What is the error? Check out the Connectivity logs, especially.

From: Tom Miller [mailto:tmil...@sfgtrust.com]
Sent: Wednesday, January 23, 2013 11:42 AM
To: MS-Exchange Admin Issues
Subject: Anyone know Crystal/Business Objects

Hi Folks,

I finally retired the last of our Exchange 2003 servers this past Monday.  Our 
programmers forgot to configure one of the systems to the new relay I have 
configured (relay allowed via specified IP addresses only).

This works fine for our copiers and other systems that need relay, but our 
Business Objects systems refuses to  work.  This is Version 11 SP2.  Anyone 
know Business Objects and have suggestions?  I've tried so many different 
configurations but none take.


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

VMWare, multicast, load balancing

2013-01-14 Thread Tom Miller
A few questions for you Exchange 2010 gurus (I'm pretty new this version).

We have Exchange 2010, four servers, two are DAG and two are client access 
servers.  We use Windows NLP to balance the load for the client access servers. 
 All of these servers are running on vmware.

I understand there are issues with vmware and NLB.  There is a way to address 
the unicast issues in vmware:  
http://kb.vmware.com/selfservice/microsites/search.do?language=en_UScmd=displayKCexternalId=1556,
 but I'd need to configure all of my network devices to support multicast.

Another option instead of reconfiguring my devices to support multicast is to 
use a load-balancing appliance.  The sysadmin list has provided suggestions.

For those of you running Exchange on VMWare, what do you do?  We have about 300 
clients spread over a number of sites.

Tom

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist



RE: Anti-spam choices in general?

2013-01-11 Thread Tom Miller
We use Symantec's Brightstor gateway for inbound and outbound mail.  Easy to 
use and reliable.

In the past I've used Barracuda.  What don't you like about Barracuda?  I found 
the unit I used very flexible.  At my old shop we allowed users to have logons 
to create their own custom controls.

-Original Message-
From: Michael B. Smith [mailto:mich...@smithcons.com] 
Sent: Friday, January 11, 2013 11:03 AM
To: MS-Exchange Admin Issues
Subject: RE: Anti-spam choices in general?

I'm rather fond of Vircom's ModusGate solutions.

-Original Message-
From: Mike Benedict [mailto:benedic...@palmer.edu] 
Sent: Friday, January 11, 2013 10:56 AM
To: MS-Exchange Admin Issues
Subject: Anti-spam choices in general?

Just wondering if there's anti-spam recommendations for either appliances or 
standalone server based software (we need it to front-end a mail router ahead 
of Exchange)?

I currently use Barracuda and while I feel it represents a good value, I'm 
interested in a next-step solution that allows the customer a bit more 
flexibility to define custom rules.

Thanks,
Mike Benedict




---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist



RE: Outlook disconnects

2013-01-10 Thread Tom Miller
Part of my issue was resource allocation on the HLB servers.  I built them with 
4GB memory initially and forgot to increase that.  I addressed it this morning. 
  I have the same config as Dana, just fewer mailboxes and Outlook 2007 client, 
about 300 mailboxes, but many are several gigabytes.

Will follow up with the list if this continues.



From: Rupprecht, James R. [mailto:jimruppre...@ku.edu]
Sent: Thursday, January 10, 2013 1:08 AM
To: MS-Exchange Admin Issues
Subject: RE: Outlook disconnects

Tom, I would look at the affinity and timeout settings on your HLB solution.

In your case, Dana, your issues may be an artifact of the CAS + Mailbox role 
combination. Would it be possible to light all the replicas on one server then 
just shut the other one off for a day and see if the problem still happened?

Jim Rupprecht
Enterprise Architect, Microsoft Technologies
The University of Kansas


From: xyz [mailto:x...@minneapolis.edu]
Sent: Wednesday, January 09, 2013 7:54 PM
To: MS-Exchange Admin Issues
Subject: RE: Outlook disconnects

Greetings,
Not sure if this is the same issue you are having, but similar to what I see 
and hoping for some input from the list as I look to find a solution.
W2K8 R2 SP1 servers
EXCHANGE 2010 SP2 UR3.
1200 Mailboxes
EXCHANGE 2010 client
Two node(server)  DAG
Each node runs the CAS and MAILOBOX roles with a hardware load balancer.
Users routinely see the prompt you mention every month when we flip the MOUNTED 
and HEALTHY databases so we can do MSUPDATES.
Not a big deal, but it always results in calls and I am looking to make this a 
better experience for the users.

I have done a little research.
The link below seems to describe what we observe so please take a look.
http://anewmessagehasarrived.blogspot.com/2011/07/outlook-authentication-popup-when.html

However, we do get a couple of user calls each week reporting the same during 
normal hours and I occasionally see this myself.

I believe all our PCs are rolled with EXCHANGE 2010 client  Negotiate 
Authentication.
This is the way it was set up when we installed  EXCHANGE 2010 a couple of 
years ago by  the consultants.
The other options ( looking in the client) are:
Kerberos Password Authentication
Password Authentication ( NTLM).

The link I posted seems to indicate that NTLM will solve the issue?

Before I ask more questions, I am hoping someone can explain a little better 
what all this means and if that is a valid solution.
What is not clear to me is if we can change the settings on a few clients to 
NTLM, to test or does this require we make changes on our EXCHANGE SERVERS as 
well.

One consultant I checked with indicated this was all or nothing and if we 
make any changes, it needs to be done on both the servers and the clients at 
the same time.

That would be a huge project with 1200 user PCs on a large college campus.
Not sure I agree, but I simply don't have the EXCHANGE  experience to know the 
correct answer.
I am wondering if we can't just make the change on a couple of the client PCs 
that routinely report this problem to test before we do something in full 
production?
Hoping for some input on this.

Thanks for your help.
Dana


From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Friday, January 04, 2013 6:28 PM
To: MS-Exchange Admin Issues
Subject: RE: Outlook disconnects

What is the authentication set to?

Are there any event log errors on the 2010 servers?

What SP and UR on the 2010 servers?

From: Tom Miller 
[mailto:tmil...@sfgtrust.com]mailto:[mailto:tmil...@sfgtrust.com]
Sent: Friday, January 4, 2013 4:23 PM
To: MS-Exchange Admin Issues
Subject: Outlook disconnects

Hi Folks,

I am moving our accounts from Exchange 2003 to an Exchange 2010 system.  Not 
many users:  about 300 or so.  There are two servers for a DAG and two for a 
client access array.   We use Outlook 2007.  What I am seeing sporadically 
(maybe once or twice a day) is Outlook will disconnect, then prompt the user 
for a password (bottom right of taskbar says something like need password).  If 
the user does not enter anything, the client eventually reconnects and it's 
fine.

Thoughts?

Tom Miller
Specialty Food Group
Engineer, Information Technology
21 Enterprise Parkway, 4th Floor
Hampton, VA  23666
Desk:  757-952-1228
Mobile:  757-570-5165


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body