RE: Testing operational status of an Exchange 2010 CAS server

2010-12-16 Thread Young, Darren
That's actually what I've done. RPC is set to use a static port and we monitor 
that.

From: Campbell, Rob [mailto:rob_campb...@centraltechnology.net]
Sent: Thursday, December 16, 2010 11:26 AM
To: MS-Exchange Admin Issues
Subject: RE: Testing operational status of an Exchange 2010 CAS server

135 is the RPC port mapper.  It's used to negotiate an rpc connection for a 
specific service, and that can be any arbitrary unused port above 49152.

If you want to lock down the ports on the firewall, you'll need to edit the 
registry to force the CAS servers to only use specific ports:

http://social.technet.microsoft.com/wiki/contents/articles/configuring-static-rpc-ports-on-an-exchange-2010-client-access-server.aspx

From: Sobey, Richard A [mailto:r.so...@imperial.ac.uk]
Sent: Thursday, December 16, 2010 11:07 AM
To: MS-Exchange Admin Issues
Subject: Testing operational status of an Exchange 2010 CAS server

Hi all,

Does anyone have any recommendations for which port(s) to test on an Exchange 
2010 CAS server for load-balancing / operational status?

We're currently using 135 but stopping the "RPC Client Access Service" - 
effectively killing the server - doesn't close port 135.

SP1 if it matters.

Cheers

Richard

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

**

Note:

The information contained in this message may be privileged and confidential and

protected from disclosure.  If the reader of this message is not the intended

recipient, or an employee or agent responsible for delivering this message to

the intended recipient, you are hereby notified that any dissemination,

distribution or copying of this communication is strictly prohibited. If you

have received this communication in error, please notify us immediately by

replying to the message and deleting it from your computer.

**

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: Retiring a domain

2011-02-15 Thread Young, Darren
Yea, we have 34,000 mailboxes.

I'm thinking a transport rule where any recipient matches @old_domain and Bcc a 
dummy mailbox that has an auto-reply on it. Someone's going to get to log into 
that dummy mailbox every day and expunge the deleted messages. I've never found 
a way to auto-purge deleted messages.

From: Steve Hart [mailto:sh...@wrightbg.com]
Sent: Tuesday, February 15, 2011 5:15 PM
To: MS-Exchange Admin Issues
Subject: RE: Retiring a domain

I ran into this same situation just last week.  The best answer given was to 
create a new user account and mailbox for each of the old addresses. Assign the 
old address to this "old address box". Use Out-of-office to deliver the 
auto-replies from these dummy boxes. I used transport rules for forward the 
emails from the "old address boxes" to the real email boxes by using a cc. That 
way the end users could see which outside users were still using the old 
addresses.

Of course, I was lucky and I only had 9 mailboxes to stress over. If I'd had 
1,000, it wouldn't have been feasible.


Steve Hart
Network Administrator
503.491.4343 -Direct | 503.492.8160 - Fax
____
From: Young, Darren [mailto:darren.yo...@chicagobooth.edu]
Sent: Tuesday, February 15, 2011 2:58 PM
To: MS-Exchange Admin Issues
Subject: Retiring a domain

We switched domains with Educause 18 months back and they gave us time to move 
to the new one. The time is coming to retire the previous one and we want to 
auto-reply to any message sent to the old domain telling people it's going 
away. How could a transport rule be applied to any message sent to a particular 
domain that Exchange is authoritative for? 'when a recipient address matches 
'?

Darren Young
Systems & Security Architect
Computing Services
University of Chicago
Booth School of Business
5807 South Woodlawn Avenue
Chicago, IL 60637
Voice 773.702.0331 | Fax 773.702.0233


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: Retiring a domain

2011-02-15 Thread Young, Darren
Hmm, people, not SMTP addresses, not very much good as an SMTP transport 
"thingy" then...

Barracuda on the edge but I can't find anything there.

The other thing I was thinking was perhaps a custom NDR for anything sent to 
the old domain.

On a good note, old domain expires in November with Educause so at least we 
have some advance warning this time.

From: Steve Hart [mailto:sh...@wrightbg.com]
Sent: Tuesday, February 15, 2011 5:21 PM
To: MS-Exchange Admin Issues
Subject: RE: Retiring a domain

The problem I found with that kind of an approach is that transport rules see 
"people" which are users, not email addresses. Any rule criteria I could find, 
applied to an individual user, no matter what address was used.

If you have a pre-exchange filter of some kind, (a spam solution or something 
else), it may have more options.

Steve



Steve Hart
Network Administrator
503.491.4343 -Direct | 503.492.8160 - Fax
________
From: Young, Darren [mailto:darren.yo...@chicagobooth.edu]
Sent: Tuesday, February 15, 2011 3:17 PM
To: MS-Exchange Admin Issues
Subject: RE: Retiring a domain

Yea, we have 34,000 mailboxes.

I'm thinking a transport rule where any recipient matches @old_domain and Bcc a 
dummy mailbox that has an auto-reply on it. Someone's going to get to log into 
that dummy mailbox every day and expunge the deleted messages. I've never found 
a way to auto-purge deleted messages.

From: Steve Hart [mailto:sh...@wrightbg.com]
Sent: Tuesday, February 15, 2011 5:15 PM
To: MS-Exchange Admin Issues
Subject: RE: Retiring a domain

I ran into this same situation just last week.  The best answer given was to 
create a new user account and mailbox for each of the old addresses. Assign the 
old address to this "old address box". Use Out-of-office to deliver the 
auto-replies from these dummy boxes. I used transport rules for forward the 
emails from the "old address boxes" to the real email boxes by using a cc. That 
way the end users could see which outside users were still using the old 
addresses.

Of course, I was lucky and I only had 9 mailboxes to stress over. If I'd had 
1,000, it wouldn't have been feasible.


Steve Hart
Network Administrator
503.491.4343 -Direct | 503.492.8160 - Fax

From: Young, Darren [mailto:darren.yo...@chicagobooth.edu]
Sent: Tuesday, February 15, 2011 2:58 PM
To: MS-Exchange Admin Issues
Subject: Retiring a domain

We switched domains with Educause 18 months back and they gave us time to move 
to the new one. The time is coming to retire the previous one and we want to 
auto-reply to any message sent to the old domain telling people it's going 
away. How could a transport rule be applied to any message sent to a particular 
domain that Exchange is authoritative for? 'when a recipient address matches 
'?

Darren Young
Systems & Security Architect
Computing Services
University of Chicago
Booth School of Business
5807 South Woodlawn Avenue
Chicago, IL 60637
Voice 773.702.0331 | Fax 773.702.0233


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: Retiring a domain

2011-02-15 Thread Young, Darren
Got it.

When a recipient's address matches 
^first.last@old_domain.edu$<mailto:%5efirst.last@old_domain.edu$>

I set a bogus header on that (with my old email) and the header is set.

From: Steve Hart [mailto:sh...@wrightbg.com]
Sent: Tuesday, February 15, 2011 5:21 PM
To: MS-Exchange Admin Issues
Subject: RE: Retiring a domain

The problem I found with that kind of an approach is that transport rules see 
"people" which are users, not email addresses. Any rule criteria I could find, 
applied to an individual user, no matter what address was used.

If you have a pre-exchange filter of some kind, (a spam solution or something 
else), it may have more options.

Steve



Steve Hart
Network Administrator
503.491.4343 -Direct | 503.492.8160 - Fax
________
From: Young, Darren [mailto:darren.yo...@chicagobooth.edu]
Sent: Tuesday, February 15, 2011 3:17 PM
To: MS-Exchange Admin Issues
Subject: RE: Retiring a domain

Yea, we have 34,000 mailboxes.

I'm thinking a transport rule where any recipient matches @old_domain and Bcc a 
dummy mailbox that has an auto-reply on it. Someone's going to get to log into 
that dummy mailbox every day and expunge the deleted messages. I've never found 
a way to auto-purge deleted messages.

From: Steve Hart [mailto:sh...@wrightbg.com]
Sent: Tuesday, February 15, 2011 5:15 PM
To: MS-Exchange Admin Issues
Subject: RE: Retiring a domain

I ran into this same situation just last week.  The best answer given was to 
create a new user account and mailbox for each of the old addresses. Assign the 
old address to this "old address box". Use Out-of-office to deliver the 
auto-replies from these dummy boxes. I used transport rules for forward the 
emails from the "old address boxes" to the real email boxes by using a cc. That 
way the end users could see which outside users were still using the old 
addresses.

Of course, I was lucky and I only had 9 mailboxes to stress over. If I'd had 
1,000, it wouldn't have been feasible.


Steve Hart
Network Administrator
503.491.4343 -Direct | 503.492.8160 - Fax

From: Young, Darren [mailto:darren.yo...@chicagobooth.edu]
Sent: Tuesday, February 15, 2011 2:58 PM
To: MS-Exchange Admin Issues
Subject: Retiring a domain

We switched domains with Educause 18 months back and they gave us time to move 
to the new one. The time is coming to retire the previous one and we want to 
auto-reply to any message sent to the old domain telling people it's going 
away. How could a transport rule be applied to any message sent to a particular 
domain that Exchange is authoritative for? 'when a recipient address matches 
'?

Darren Young
Systems & Security Architect
Computing Services
University of Chicago
Booth School of Business
5807 South Woodlawn Avenue
Chicago, IL 60637
Voice 773.702.0331 | Fax 773.702.0233


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

2010 IMAP Issues

2011-02-23 Thread Young, Darren
We've been having some issues with 2010 IMAP (SP1). In production we have 3 
physical machines, all are Dell R610's with 48GB RAM and 2 sockets/8 cores each 
running ESX 4i. Each host has 1 (total of 3) 64-bit 2008 EE VM's with 4 vCPU's 
and 12 GB RAM running CAS & HT roles. Additionally, each host has 1 (total of 
3) 64-bit 2008 EE VM's with 4 vCPU's and 32GB RAM running mailbox roles. Total 
of 9 mailbox stores, 3 on each mailbox VM's.

Our 2003 environment is still operational as we're still migrating users to 
2010. Some of the users going through the 2010 IMAP instance have 2003 
mailboxes; in fact, most of the Faculty are still homeMDB'd on 2003.

Sitting in front of the CAS machines are a pair of F5 LTM's (10.x software) 
that host the IMAP 993 instance, we don't support customer facing non-SSL IMAP 
(port 143). I configured the F5 virtuals based on F5's Exchange 2010 design 
guide and they're really quite basic. The pool behind the F5 virtual points to 
port 143 on each of the CAS systems. SSL certificate is installed on the F5 and 
attached to the 993 IMAP virtual.

We essentially support any IMAP client but the majority of them are Apple 
clients and mobile devices that don't support ActiveSync. I also know a good 
amount of Faculty run Thunderbird remotely.

The IMAP4 process on any of the CAS systems will run using 600MB or so RAM but 
will rise to perhaps 1.1-1.2GB resident size. We have monitors in place to 
watch the banner string returned by port 143 on each of the CAS hosts as well 
as 993 on the F5 interface.

At times we receive alerts with no banner string returned by 143 on one or more 
of the CAS hosts and when I manually telnet to that port it connects but 
receive no banner. If I leave that telnet connection open sometimes it will 
eventually return the IMAP banner and sometimes it just times out. Sometimes it 
appears to "recover" itself yet at other times we have to restart the IMAP 
service to kick it into working again. One of our other admins has noticed that 
this seems to happen when the size of the process reaches a larger resident 
size, somewhere in the 1.2GB  range. No proof on that though, just an 
observation.

There's no apparent rhyme or reason as to when or why this happens, could be 
1:00 in the afternoon or 2:00 in the morning. We had this problem with the RTM 
version and it was causing so many problems we moved the IMAP DNS name back to 
the 2003 front-ends. I ran the Exchange load generator against 2010's IMAP 
after we installed SP1 and never had an issue. Now it's back.

Prior to SP1 we phoned Microsoft when this was occurring and they had me watch 
the process for any crash information. As I told them, it never actually 
"crashed", it simply stopped processing client requests and sometimes would 
recover, and other times would not. Since it was not a "production down 
emergency" they wanted us to pay for escalation to perform root cause analysis. 
At the time we were receiving intense pressure from Faculty to make it stable 
which is why we pointed the IMAP DNS name back to the 2003 F5 front-end 
interface. Exchange 2003 IMAP has no issues.

Anyone have any thoughts? We're sort of at our wits end with this and I don't 
believe a new call to MS will yield better results.
Darren Young
Systems & Security Architect
Computing Services
University of Chicago
Booth School of Business
5807 South Woodlawn Avenue
Chicago, IL 60637
Voice 773.702.0331 | Fax 773.702.0233


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: 2010 IMAP Issues

2011-02-24 Thread Young, Darren
Yep, RU2 for SP1 is installed on all nodes as of 12/14/2010.

We use a product called Up.Time to monitor everything. This is configured to 
watch for the banner on all IMAP host's port 143. We then configured it to 
restart the IMAP processes after 2 consecutive failures on the monitor as a 
stop-gap measure. Faculty have a tendency to use email at strange overnight 
times. When I compare the time the agent performed an IMAP service restart 
against the resident size of the process at the same time it's almost always 
1.1GB when it fails.

We're averaging around 550 connections to the F5 IMAP virtual and it pretty 
evenly splits those connections against the 3 IMAP front-ends at around 180 
connections per member.

Separating out IMAP to dedicated machines, although we haven't experienced it 
taking down OWA & MAPI when it has issues. When IMAP does misbehave 
killing/restarting the process/service kicks it back into working order. I 
haven't had to restart the machines as a result of the issue, at least, not yet.

One thing that I did discover recently is that the mailbox hosts had inadequate 
page file sizes. I normally run 1.25-1.5x RAM for page and with 32GB of RAM 
allocated to the VM's the 12GB that was there wasn't adequate. I increased that 
and restarted all the mailbox hosts and so far (knock on wood) I haven't seen 
an alert or automated restart message.

From: Sobey, Richard A [mailto:r.so...@imperial.ac.uk]
Sent: Thursday, February 24, 2011 9:29 AM
To: MS-Exchange Admin Issues
Subject: RE: 2010 IMAP Issues

We've isolated POP3/IMAP CAS onto different servers than our OWA/MAPI CAS. Only 
18 people using IMAP so far but we'll have around 3500 Exchange 2010 users of 
IMAP by Summer. If you can wait that long I'll let you know what happens :)

The reason we moved IMAP onto separate servers was because the service was so 
resource hungry it would often cause the entire server to run out of core 
resources, thus breaking OWA. At least we could bounce an IMAP server by itself 
without disrupting other users; this is even more of a priority now MAPI is 
terminated at a CAS server.

I assume you're on RU2 though?

From: bounce-9286301-8066...@lyris.sunbelt-software.com 
[mailto:bounce-9286301-8066...@lyris.sunbelt-software.com] On Behalf Of Young, 
Darren
Sent: 23 February 2011 14:25
To: MS-Exchange Admin Issues
Subject: 2010 IMAP Issues

We've been having some issues with 2010 IMAP (SP1). In production we have 3 
physical machines, all are Dell R610's with 48GB RAM and 2 sockets/8 cores each 
running ESX 4i. Each host has 1 (total of 3) 64-bit 2008 EE VM's with 4 vCPU's 
and 12 GB RAM running CAS & HT roles. Additionally, each host has 1 (total of 
3) 64-bit 2008 EE VM's with 4 vCPU's and 32GB RAM running mailbox roles. Total 
of 9 mailbox stores, 3 on each mailbox VM's.

Our 2003 environment is still operational as we're still migrating users to 
2010. Some of the users going through the 2010 IMAP instance have 2003 
mailboxes; in fact, most of the Faculty are still homeMDB'd on 2003.

Sitting in front of the CAS machines are a pair of F5 LTM's (10.x software) 
that host the IMAP 993 instance, we don't support customer facing non-SSL IMAP 
(port 143). I configured the F5 virtuals based on F5's Exchange 2010 design 
guide and they're really quite basic. The pool behind the F5 virtual points to 
port 143 on each of the CAS systems. SSL certificate is installed on the F5 and 
attached to the 993 IMAP virtual.

We essentially support any IMAP client but the majority of them are Apple 
clients and mobile devices that don't support ActiveSync. I also know a good 
amount of Faculty run Thunderbird remotely.

The IMAP4 process on any of the CAS systems will run using 600MB or so RAM but 
will rise to perhaps 1.1-1.2GB resident size. We have monitors in place to 
watch the banner string returned by port 143 on each of the CAS hosts as well 
as 993 on the F5 interface.

At times we receive alerts with no banner string returned by 143 on one or more 
of the CAS hosts and when I manually telnet to that port it connects but 
receive no banner. If I leave that telnet connection open sometimes it will 
eventually return the IMAP banner and sometimes it just times out. Sometimes it 
appears to "recover" itself yet at other times we have to restart the IMAP 
service to kick it into working again. One of our other admins has noticed that 
this seems to happen when the size of the process reaches a larger resident 
size, somewhere in the 1.2GB  range. No proof on that though, just an 
observation.

There's no apparent rhyme or reason as to when or why this happens, could be 
1:00 in the afternoon or 2:00 in the morning. We had this problem with the RTM 
version and it was causing so many problems we moved the IMAP DNS name back to 
the 2003 front-ends. I ran the E

RE: Load Balancing Incoming Email Using DNS MX Records

2011-02-28 Thread Young, Darren
We use method 1 and have been for 15+ years. The *vast* majority of software 
out there follow MX's decently. Every once in a while when one of those edge 
systems is down we'll get reports that something inbound failed, but it's very 
few and far between.

We have 3 inbound receivers on the MX records and it's almost perfect on load 
balancing across them.

Oh, we receive about 27 million inbound connections per month on the perimeter.

From: Tu, Kevin [mailto:k...@ccscorporation.ca]
Sent: Monday, February 28, 2011 10:30 AM
To: MS-Exchange Admin Issues
Subject: Load Balancing Incoming Email Using DNS MX Records

Hello,

It seems there are two ways to load balancing incoming email using DNS MX 
records.

Method 1: Multiple MX records with equal priority.

Method 2: One MX record with multiple IP address.

What's the pros and cons? Somebody suggested the Method 1, because multiple MX 
entries with the same priority will cause the mail to be delivered faster to 
the alternative server if the first one it tries is unavailable. Is that right?

Thanks,


This email and any files transmitted with it are solely intended for the use of 
the addressee(s) and may contain information that is confidential and 
privileged. If you receive this email in error, please advise us by return 
email immediately. Please also disregard the contents of the email, delete it 
and destroy any copies
immediately.
CCS Corporation and its subsidiaries do not accept liability for the views 
expressed in the email or for the consequences of any malicious code that may 
be transmitted with this email.
This email is also subject to copyright. No part of it should be reproduced, 
adapted or transmitted without the written consent of the copyright owner.

CCS-06-01-2009

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

IMAP Issue

2011-03-04 Thread Young, Darren
Opened a case with MS and were told yesterday that the IMAP issue we have been 
experiencing is known and they have an interim update for it. KB on the file is 
2496083 but I am unable to find any public reference for that anywhere. I asked 
the engineer for details.

>From them:

"My name is X and I'm an Escalation Engineer on the Exchange team at 
Microsoft. I just looked through the dumps and iDNA traces for your IMAP issue, 
and it looks like you're running into a known bug that causes a thread deadlock 
in the IMAP process. This bug is scheduled to be fixed in Exchange 2010 SP1 
RU3. I don't have a release date on that, but it should be out fairly soon. In 
the meantime, we can give you an Interim Update which will fix this specific 
issue. We currently already have an Interim Update built for SP1 RU1 and SP1 
RU2, but don't have one for straight SP1. I wanted to see if you are interested 
in getting an Interim Update, and if so, if you would like one of the ones 
already built for RU1 or RU2? If you want one for straight SP1, we can build 
that too, but it will probably take 3-5 days to build."

The problem is fairly reproducible, when the Imap4.exe process reaches around 
1.1-1.2GB working set it stops processing client requests. It never hangs or 
dies, it just ceases operating.

Darren Young
Systems & Security Architect
Computing Services
University of Chicago
Booth School of Business
5807 South Woodlawn Avenue
Chicago, IL 60637
Voice 773.702.0331 | Fax 773.702.0233


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: IMAP Issue

2011-03-04 Thread Young, Darren
Here is the current content from MS. It is currently unpublished and could 
change they said.

Symptoms
Consider the following scenario:
* You have a mixed Microsoft Exchange Server 2010 and Microsoft 
Exchange Server 2003 environment.
* You use an Exchange Server 2010 Client Access server to proxy 
requests for Exchange Server 2003 mailbox servers.
* Users try to access the mailboxes that are hosted on Exchange Server 
2003 servers by using IMAP4 clients.
* The Exchange Server 2010 Client Access server is under heavy load.
In this scenario, the Microsoft Exchange IMAP4 service on the Exchange Server 
2010 Client Access server may stop responding. Therefore, the IMAP4 clients 
cannot connect to the mailboxes.
Cause
This issue occurs because of a deadlock situation, which is caused by a timing 
issue when the sessions are managed and released. Additionally, issues in 
network performance may cause this issue to occur more frequently.
Resolution
To resolve this issue, install the following update rollup:
2492690<http://vkbexternal.partners.extranet.microsoft.com/VKBWebService/ViewContent.aspx?scid=KB;EN-US;2492690>
 Description of Update Rollup 3 for Exchange Server 2010 Service Pack 1
Workaround
To work around this issue, you have to restart the Microsoft Exchange IMAP4 
service on the Exchange Server 2010 Client Access server.
Status
Microsoft has confirmed that this is a problem in the Microsoft products that 
are listed in the "Applies to" section.


From: Young, Darren [mailto:darren.yo...@chicagobooth.edu]
Sent: Friday, March 04, 2011 8:02 AM
To: MS-Exchange Admin Issues
Subject: IMAP Issue

Opened a case with MS and were told yesterday that the IMAP issue we have been 
experiencing is known and they have an interim update for it. KB on the file is 
2496083 but I am unable to find any public reference for that anywhere. I asked 
the engineer for details.

>From them:

"My name is X and I'm an Escalation Engineer on the Exchange team at 
Microsoft. I just looked through the dumps and iDNA traces for your IMAP issue, 
and it looks like you're running into a known bug that causes a thread deadlock 
in the IMAP process. This bug is scheduled to be fixed in Exchange 2010 SP1 
RU3. I don't have a release date on that, but it should be out fairly soon. In 
the meantime, we can give you an Interim Update which will fix this specific 
issue. We currently already have an Interim Update built for SP1 RU1 and SP1 
RU2, but don't have one for straight SP1. I wanted to see if you are interested 
in getting an Interim Update, and if so, if you would like one of the ones 
already built for RU1 or RU2? If you want one for straight SP1, we can build 
that too, but it will probably take 3-5 days to build."

The problem is fairly reproducible, when the Imap4.exe process reaches around 
1.1-1.2GB working set it stops processing client requests. It never hangs or 
dies, it just ceases operating.

Darren Young
Systems & Security Architect
Computing Services
University of Chicago
Booth School of Business
5807 South Woodlawn Avenue
Chicago, IL 60637
Voice 773.702.0331 | Fax 773.702.0233


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: Exchange 2010 Migration Planning - Database Size?

2011-03-08 Thread Young, Darren
We're trying to stick under 500GB per store. In the event DAG fails and we have 
to go to tape, FCP LTO-4 can restore 500GB. It'd blow the RTO but really bad 
stuff does happen.

From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk]
Sent: Tuesday, March 08, 2011 12:34 PM
To: MS-Exchange Admin Issues
Subject: Exchange 2010 Migration Planning - Database Size?


I've been getting conflicting suggestions on the sensible maximum database size 
to use when we go to Exchange 2010.

Initially we should be going with a single HT/CAS/MBX box with a view to 
perhaps bringing in a DAG pretty soon.

Some people are suggesting 200gb is the biggest they'd let a single database 
grow to, some MS docs suggest 2tb.

If I split our users across three databases we'd be well under 200gb per 
database but if we increase mailbox quotas we may stray above.

Assuming proper storage/lots of IOPS/spindles etc. what is the "sweet spot"?

Between SAN snapshots and our backup software I'm not expecting RTO/RPO to be a 
significant issue.

Thanks,
Paul


MIRA Ltd

Watling Street, Nuneaton, Warwickshire, CV10 0TU, England
Registered in England and Wales No. 402570
VAT Registration  GB 100 1464 84

The contents of this e-mail are confidential and are solely for the use of the 
intended recipient.  If you receive this e-mail in error, please delete it and 
notify us either by e-mail, telephone or fax.  You should not copy, forward or 
otherwise disclose the content of the e-mail as this is prohibited.

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

IMAP Issue

2011-03-14 Thread Young, Darren
We've been informed that the fix for the IMAP high memory/threading issue we 
experienced is included in Rollup 3.

Darren Young
Systems & Security Architect
Computing Services
University of Chicago
Booth School of Business
5807 South Woodlawn Avenue
Chicago, IL 60637
Voice 773.702.0331 | Fax 773.702.0233


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: IMAP Issue

2011-03-14 Thread Young, Darren
Interesting. I think we had that happen.

From: Sobey, Richard A [mailto:r.so...@imperial.ac.uk]
Sent: Monday, March 14, 2011 10:14 AM
To: MS-Exchange Admin Issues
Subject: RE: IMAP Issue

Also included that wasn't documented is that, prior to RU3, an IMAP client was 
unable to download a meeting request if it was stored in Deleted Items.

From: bounce-9298697-8066...@lyris.sunbelt-software.com 
[mailto:bounce-9298697-8066...@lyris.sunbelt-software.com] On Behalf Of Young, 
Darren
Sent: 14 March 2011 15:05
To: MS-Exchange Admin Issues
Subject: IMAP Issue

We've been informed that the fix for the IMAP high memory/threading issue we 
experienced is included in Rollup 3.

Darren Young
Systems & Security Architect
Computing Services
University of Chicago
Booth School of Business
5807 South Woodlawn Avenue
Chicago, IL 60637
Voice 773.702.0331 | Fax 773.702.0233


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: IMAP Issue

2011-03-14 Thread Young, Darren
We've tried countless times to get a policy in place that lets us purge deleted 
items.

Ditto. Walk away.

From: Guyer, Don [mailto:don.gu...@fiserv.com]
Sent: Monday, March 14, 2011 3:09 PM
To: MS-Exchange Admin Issues
Subject: RE: IMAP Issue

I've had users tell me along the lines that "it's a better place to store stuff 
and it keeps my Inbox cleaner".

I can't even argue and just walk away.

Don Guyer
Windows Systems Engineer
Datasafe Platform
Enterprise Technology Group
Fiserv
don.gu...@fiserv.com<mailto:don.gu...@fiserv.com>
Office: 1-800-523-7282 x 1673
Fax: 610-293-4499
www.fiserv.com<http://www.fiserv.com/>

From: Jonathan Link [mailto:jonathan.l...@gmail.com]
Sent: Monday, March 14, 2011 4:03 PM
To: MS-Exchange Admin Issues
Subject: Re: IMAP Issue

Please!
You haven't had a user that stores their important stuff there?
On Mon, Mar 14, 2011 at 3:45 PM, Don Andrews 
mailto:don.andr...@safeway.com>> wrote:
That's an odd phrase - "stored in Deleted Items"  ;-)


From: Sobey, Richard A 
[mailto:r.so...@imperial.ac.uk<mailto:r.so...@imperial.ac.uk>]
Sent: Monday, March 14, 2011 8:14 AM

To: MS-Exchange Admin Issues
Subject: RE: IMAP Issue

Also included that wasn't documented is that, prior to RU3, an IMAP client was 
unable to download a meeting request if it was stored in Deleted Items.

From: 
bounce-9298697-8066...@lyris.sunbelt-software.com<mailto:bounce-9298697-8066...@lyris.sunbelt-software.com>
 
[mailto:bounce-9298697-8066...@lyris.sunbelt-software.com<mailto:bounce-9298697-8066...@lyris.sunbelt-software.com>]
 On Behalf Of Young, Darren
Sent: 14 March 2011 15:05
To: MS-Exchange Admin Issues
Subject: IMAP Issue

We've been informed that the fix for the IMAP high memory/threading issue we 
experienced is included in Rollup 3.

Darren Young
Systems & Security Architect
Computing Services
University of Chicago
Booth School of Business
5807 South Woodlawn Avenue
Chicago, IL 60637
Voice 773.702.0331 | Fax 773.702.0233


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: CAS Array with SSL offloading

2011-03-30 Thread Young, Darren
Have you tried: https://www.testexchangeconnectivity.com/


From: Damien Solodow [mailto:damien.solo...@harrison.edu]
Sent: Wednesday, March 30, 2011 5:12 PM
To: MS-Exchange Admin Issues
Subject: CAS Array with SSL offloading

I'm settings things up for our Exchange 2010 migration and have run into a snag 
that is proving obstinate.

We have two CAS servers, Exchange 2010 SP1 on Windows 2008R2 SP1. I've created 
the CAS array via EMS.

I'm using an F5 BigIP to provide load balancing between the two members, and 
configured it using the including Exchange 2010 template. OWA seems to be 
working properly.

The issue I'm having is with autodiscovery. When I have Outlook 2007 create a 
new profile, it say that it's able to configure my settings. However, it 
doesn't setup Outlook Anywhere. If I tell Outlook to test autoconfiguration, it 
says that it was unable to determine my settings.

The log message for the autoconfig in Outlook says "autodiscover request 
completed with status code 500". If I have that PC point a web-browser to the 
autodiscover URL, I am prompted for credentials multiple times before it 
returns "you are not authorized". If I disable basic authentication for the 
autodiscover virtual directory and hit it with the browser I get what looks 
like an XML file.

Currently I only have CAS and HT servers, no mailbox role yet. Could that be 
part of my problem?

DAMIEN SOLODOW
Systems Engineer
317.447.6033 (office)
317.217.6851 (fax)
HARRISON COLLEGE
500 North Meridian St
Suite 500
Indianapolis, IN 46204-1213
www.harrison.edu


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: NetApp

2011-06-14 Thread Young, Darren
We have 6500 staff/faculty/student and 18,000 alum mailboxes on a FAS 3040 
pair. Exchange 2010 on ESX 4.0i via iSCSI.

We use de-dupe on all the Exchange volumes as well. Looking to OnTAP 8 to start 
using compression as well on them.

If you have any specific questions, let me know.

Rock solid, performs well.


From: Ryan Finnesey [mailto:ryan.finne...@harrierinvestments.com]
Sent: Tuesday, June 14, 2011 10:31 AM
To: MS-Exchange Admin Issues
Subject: NetApp

I was hoping to get some general feedback from the group on NetApp storage for 
larger Exchange deployments

Cheers
Ryan


This message is for the designated recipient only and may contain privileged, 
proprietary, or otherwise private information. If you have received it in 
error, please notify the sender immediately and delete the original. Any other 
use of the email by you is prohibited

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: OT - Delivery monitoring

2011-06-28 Thread Young, Darren
I did something years back against a Sun Message Server IMAP mailbox using 
Perl. Can't seem to find the code though.

We use Return Path for this type of service now.

From: Steve Hart [mailto:sh...@wrightbg.com]
Sent: Tuesday, June 28, 2011 1:18 PM
To: MS-Exchange Admin Issues
Subject: OT - Delivery monitoring

This isn't an Exchange question, but I figure there's more general email 
experience here than anywhere else I frequent.

I've been asked to come up with a system that will automatically check for 
email on a remote POP3 server. It should have some way of returning a true or 
false value depending on whether email exists or not. The system should then 
delete any email in the box to prepare a clean slate for next time.

The idea is to set up a free external email account somewhere and send it a 
small email once every five minutes through our normal email system (Exchange 
07). This external system would be an automated test that everything is working 
properly in our outbound email system from Outlook to Exchange to ISPs to soup 
to nuts.

Ideas?

Thanks in advance,
Steve


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

Outbound HELO/EHLO

2011-06-30 Thread Young, Darren
Exchange 2010 SP1.

By default when a machine goes outbound to send mail it appears to be using 
{hostname}.{AD domain} as the second parameter to HELO/EHLO. I see that you can 
set this on a per send connector basis but can it be set to a variable? Such as 
$hostname.$someotherdomain.

So, hub/transport 1, call it HT1 with IP address 1.1.1.1, goes out and after it 
gets the 220 banner it says:
EHLO ht1.internal.ad.com

(say internal.ad.com is our AD domain)

Then when the remote does a reverse lookup on 1.1.1.1 it doesn't get 
ht1.internal.ad.com

Now, I don't control the name servers that resolve the 1.1.1.1 name however I 
can get names in it...  So I add names like ht1.ad.com. Then, when 2010 goes 
out it would issue:
EHLO ht1.ad.com

Which would resolve. From time to time I've run into really picky mail server 
that *must* have the HELO/EHLO response reverse DNS correctly.

In 2003 we could do just this however in 2010 it appears to be only at the 
connector level and not at the host level. $hostname in the connector setting 
would be nice.

Darren Young
Systems & Security Architect
Computing Services
University of Chicago
Booth School of Business
5807 South Woodlawn Avenue
Chicago, IL 60637
Voice 773.702.0331 | Fax 773.702.0233


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: Outbound HELO/EHLO

2011-06-30 Thread Young, Darren
It basically is the external name, though from an IP perspective everything 
here is external.

But yea, the name would be the external hostname. I just can't find where to 
set it on a per host basis in 2010 just on a per connector basis.

From: Micheal Espinola Jr [mailto:michealespin...@gmail.com]
Sent: Thursday, June 30, 2011 5:23 PM
To: MS-Exchange Admin Issues
Subject: Re: Outbound HELO/EHLO

Your HELO should reflect your external name, not internal.

--
ME2




On Thu, Jun 30, 2011 at 3:06 PM, Young, Darren 
mailto:darren.yo...@chicagobooth.edu>> wrote:
Exchange 2010 SP1.

By default when a machine goes outbound to send mail it appears to be using 
{hostname}.{AD domain} as the second parameter to HELO/EHLO. I see that you can 
set this on a per send connector basis but can it be set to a variable? Such as 
$hostname.$someotherdomain.

So, hub/transport 1, call it HT1 with IP address 1.1.1.1, goes out and after it 
gets the 220 banner it says:
EHLO ht1.internal.ad.com<http://ht1.internal.ad.com>

(say internal.ad.com<http://internal.ad.com> is our AD domain)

Then when the remote does a reverse lookup on 1.1.1.1 it doesn't get 
ht1.internal.ad.com<http://ht1.internal.ad.com>

Now, I don't control the name servers that resolve the 1.1.1.1 name however I 
can get names in it...  So I add names like ht1.ad.com<http://ht1.ad.com>. 
Then, when 2010 goes out it would issue:
EHLO ht1.ad.com<http://ht1.ad.com>

Which would resolve. From time to time I've run into really picky mail server 
that *must* have the HELO/EHLO response reverse DNS correctly.

In 2003 we could do just this however in 2010 it appears to be only at the 
connector level and not at the host level. $hostname in the connector setting 
would be nice.

Darren Young
Systems & Security Architect
Computing Services
University of Chicago
Booth School of Business
5807 South Woodlawn Avenue
Chicago, IL 60637
Voice 773.702.0331 | Fax 773.702.0233


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: Outbound HELO/EHLO

2011-06-30 Thread Young, Darren
For the receive connector that's fine, this is for the send connector.

Problem 1: remote ISP requires that the name provided in HELO/EHLO match a 
reverse DNS lookup of the source IP of the connection.
Problem 2: DNS for the IP range used by our servers is out of our control. 
People that manage that DNS will *not* point it to the name of our Exchange 
server (DNS domain gsb.uchicago.edu), they will only point it to a name in 
their DNS domain (uchicago.edu).
Problem 3: Setting the fqdn at the send connector level ends up pointing to a 
name that the remote in #1 can't lookup in the DNS.

From: daemonR00t [mailto:daemonr...@sysadmin-cr.com]
Sent: Friday, July 01, 2011 12:20 AM
To: MS-Exchange Admin Issues
Subject: RE: Outbound HELO/EHLO

This might help you customize your SMTP banner to meet your needs 
http://telnet25.blogspot.com/2010/05/cambiando-el-banner-de-smtp.html

From: Young, Darren [mailto:darren.yo...@chicagobooth.edu]
Sent: Thursday, June 30, 2011 4:27 PM
To: MS-Exchange Admin Issues
Subject: RE: Outbound HELO/EHLO

It basically is the external name, though from an IP perspective everything 
here is external.

But yea, the name would be the external hostname. I just can't find where to 
set it on a per host basis in 2010 just on a per connector basis.

From: Micheal Espinola Jr [mailto:michealespin...@gmail.com]
Sent: Thursday, June 30, 2011 5:23 PM
To: MS-Exchange Admin Issues
Subject: Re: Outbound HELO/EHLO

Your HELO should reflect your external name, not internal.

--
ME2



On Thu, Jun 30, 2011 at 3:06 PM, Young, Darren 
mailto:darren.yo...@chicagobooth.edu>> wrote:
Exchange 2010 SP1.

By default when a machine goes outbound to send mail it appears to be using 
{hostname}.{AD domain} as the second parameter to HELO/EHLO. I see that you can 
set this on a per send connector basis but can it be set to a variable? Such as 
$hostname.$someotherdomain.

So, hub/transport 1, call it HT1 with IP address 1.1.1.1, goes out and after it 
gets the 220 banner it says:
EHLO ht1.internal.ad.com<http://ht1.internal.ad.com>

(say internal.ad.com<http://internal.ad.com> is our AD domain)

Then when the remote does a reverse lookup on 1.1.1.1 it doesn't get 
ht1.internal.ad.com<http://ht1.internal.ad.com>

Now, I don't control the name servers that resolve the 1.1.1.1 name however I 
can get names in it...  So I add names like ht1.ad.com<http://ht1.ad.com>. 
Then, when 2010 goes out it would issue:
EHLO ht1.ad.com<http://ht1.ad.com>

Which would resolve. From time to time I've run into really picky mail server 
that *must* have the HELO/EHLO response reverse DNS correctly.

In 2003 we could do just this however in 2010 it appears to be only at the 
connector level and not at the host level. $hostname in the connector setting 
would be nice.

Darren Young
Systems & Security Architect
Computing Services
University of Chicago
Booth School of Business
5807 South Woodlawn Avenue
Chicago, IL 60637
Voice 773.702.0331 | Fax 773.702.0233


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: Dr Site OWA

2011-07-11 Thread Young, Darren
Yep, I definitely do and need pointers to articles.

From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Monday, July 11, 2011 12:06 PM
To: MS-Exchange Admin Issues
Subject: RE: Dr Site OWA

Spend a few minutes on msexchangeteam.com (especially the recent article on 
multi-site misconceptions) and technet.microsoft.com/exchange.

You have some basic misunderstandings.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Young, Darren [mailto:darren.yo...@chicagobooth.edu]
Sent: Monday, July 11, 2011 12:28 PM
To: MS-Exchange Admin Issues
Subject: Dr Site OWA

Has anyone deployed Exchange 2010 OWA at a DR site? Did you make those 
front-ends part of the same CAS Array at the primary site or did you create a 
second CAS Array?

Are there any docs/guidelines on deploying Exchange 2010 front-end services at 
a DR site?

Darren Young
Systems & Security Architect
Computing Services
University of Chicago
Booth School of Business
5807 South Woodlawn Avenue
Chicago, IL 60637
Voice 773.702.0331 | Fax 773.702.0233


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: 2010 Mail Forwarding

2011-07-14 Thread Young, Darren
What does Exchange do when you set the forwarding via Set-Mailbox? How is that 
forward actually implemented by 2010?

From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Thursday, July 14, 2011 12:45 PM
To: MS-Exchange Admin Issues
Subject: RE: 2010 Mail Forwarding

If it's truly a CONTACT then you should be using New-MailContact. You can also 
migrate an AD contact to an Exchange contact by using Enable-MailContact.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Young, Darren [mailto:darren.yo...@chicagobooth.edu]
Sent: Thursday, July 14, 2011 12:34 PM
To: MS-Exchange Admin Issues
Subject: 2010 Mail Forwarding

For mail forwarding, in Exchange 2003 we built a web app that creates a contact 
object with a targetAddress of the external email then "attached" that to the 
altRecipient attribute for the user. This still works after we "upgrade" the 
contact object to work with 2010, however I would like to move this to a more 
native 2010 method. Is it really as simple as Set-Mailbox -Identity <> 
-ForwardingAddress ?

If so, where does Exchange store this forwarded address?

Darren Young
Systems & Security Architect
Computing Services
University of Chicago
Booth School of Business
5807 South Woodlawn Avenue
Chicago, IL 60637
Voice 773.702.0331 | Fax 773.702.0233


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: 2010 Mail Forwarding

2011-07-14 Thread Young, Darren
So, I create a new Mail Contact with the external address then use that object 
for the option -ForwardingAddress it works.

In AD altRecipent is in fact set to the DN of the previously created Mail 
Contact object.

And there are several new attributes on that object vs. what we used in 2003.

MS's docs here: http://technet.microsoft.com/en-us/library/dd351134.aspx appear 
to be incorrect, when I try using their example it says there's no such object. 
I didn't think it was as simple as passing the target address.

From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Thursday, July 14, 2011 2:23 PM
To: MS-Exchange Admin Issues
Subject: RE: 2010 Mail Forwarding

Set-Mailbox requires a mailbox, which means that it requires a user object. 
That's far different than a contact.

TTBOMK, the actual implementation of forwarding hasn't changed (in terms of the 
attributes used), but Exchange 2010 does stamp objects with more attributes 
than Exchange 2003 or Exchange 2007 did, and if the attribute's versions aren't 
correct then Exchange 2010 complains.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Young, Darren [mailto:darren.yo...@chicagobooth.edu]
Sent: Thursday, July 14, 2011 3:06 PM
To: MS-Exchange Admin Issues
Subject: RE: 2010 Mail Forwarding

What does Exchange do when you set the forwarding via Set-Mailbox? How is that 
forward actually implemented by 2010?

From: Michael B. Smith 
[mailto:mich...@smithcons.com]<mailto:[mailto:mich...@smithcons.com]>
Sent: Thursday, July 14, 2011 12:45 PM
To: MS-Exchange Admin Issues
Subject: RE: 2010 Mail Forwarding

If it's truly a CONTACT then you should be using New-MailContact. You can also 
migrate an AD contact to an Exchange contact by using Enable-MailContact.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Young, Darren 
[mailto:darren.yo...@chicagobooth.edu]<mailto:[mailto:darren.yo...@chicagobooth.edu]>
Sent: Thursday, July 14, 2011 12:34 PM
To: MS-Exchange Admin Issues
Subject: 2010 Mail Forwarding

For mail forwarding, in Exchange 2003 we built a web app that creates a contact 
object with a targetAddress of the external email then "attached" that to the 
altRecipient attribute for the user. This still works after we "upgrade" the 
contact object to work with 2010, however I would like to move this to a more 
native 2010 method. Is it really as simple as Set-Mailbox -Identity <> 
-ForwardingAddress ?

If so, where does Exchange store this forwarded address?

Darren Young
Systems & Security Architect
Computing Services
University of Chicago
Booth School of Business
5807 South Woodlawn Avenue
Chicago, IL 60637
Voice 773.702.0331 | Fax 773.702.0233


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: 2010 Mail Forwarding

2011-07-14 Thread Young, Darren
Thanks. Any idea what attribute is used to store that?

From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Thursday, July 14, 2011 3:35 PM
To: MS-Exchange Admin Issues
Subject: RE: 2010 Mail Forwarding

You are correct, the example is wrong. I'll report it. You still don't have to 
have a mail contact if you don't want one. You do this instead:

Set-mailbox -ForwardingSMTPAddress 
addr...@example.com<mailto:addr...@example.com>

Note the addition of "smtp" in the parameter.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Young, Darren [mailto:darren.yo...@chicagobooth.edu]
Sent: Thursday, July 14, 2011 4:04 PM
To: MS-Exchange Admin Issues
Subject: RE: 2010 Mail Forwarding

So, I create a new Mail Contact with the external address then use that object 
for the option -ForwardingAddress it works.

In AD altRecipent is in fact set to the DN of the previously created Mail 
Contact object.

And there are several new attributes on that object vs. what we used in 2003.

MS's docs here: http://technet.microsoft.com/en-us/library/dd351134.aspx appear 
to be incorrect, when I try using their example it says there's no such object. 
I didn't think it was as simple as passing the target address.

From: Michael B. Smith 
[mailto:mich...@smithcons.com]<mailto:[mailto:mich...@smithcons.com]>
Sent: Thursday, July 14, 2011 2:23 PM
To: MS-Exchange Admin Issues
Subject: RE: 2010 Mail Forwarding

Set-Mailbox requires a mailbox, which means that it requires a user object. 
That's far different than a contact.

TTBOMK, the actual implementation of forwarding hasn't changed (in terms of the 
attributes used), but Exchange 2010 does stamp objects with more attributes 
than Exchange 2003 or Exchange 2007 did, and if the attribute's versions aren't 
correct then Exchange 2010 complains.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Young, Darren 
[mailto:darren.yo...@chicagobooth.edu]<mailto:[mailto:darren.yo...@chicagobooth.edu]>
Sent: Thursday, July 14, 2011 3:06 PM
To: MS-Exchange Admin Issues
Subject: RE: 2010 Mail Forwarding

What does Exchange do when you set the forwarding via Set-Mailbox? How is that 
forward actually implemented by 2010?

From: Michael B. Smith 
[mailto:mich...@smithcons.com]<mailto:[mailto:mich...@smithcons.com]>
Sent: Thursday, July 14, 2011 12:45 PM
To: MS-Exchange Admin Issues
Subject: RE: 2010 Mail Forwarding

If it's truly a CONTACT then you should be using New-MailContact. You can also 
migrate an AD contact to an Exchange contact by using Enable-MailContact.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Young, Darren 
[mailto:darren.yo...@chicagobooth.edu]<mailto:[mailto:darren.yo...@chicagobooth.edu]>
Sent: Thursday, July 14, 2011 12:34 PM
To: MS-Exchange Admin Issues
Subject: 2010 Mail Forwarding

For mail forwarding, in Exchange 2003 we built a web app that creates a contact 
object with a targetAddress of the external email then "attached" that to the 
altRecipient attribute for the user. This still works after we "upgrade" the 
contact object to work with 2010, however I would like to move this to a more 
native 2010 method. Is it really as simple as Set-Mailbox -Identity <> 
-ForwardingAddress ?

If so, where does Exchange store this forwarded address?

Darren Young
Systems & Security Architect
Computing Services
University of Chicago
Booth School of Business
5807 South Woodlawn Avenue
Chicago, IL 60637
Voice 773.702.0331 | Fax 773.702.0233


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-softw

RE: 2010 Mail Forwarding

2011-07-14 Thread Young, Darren
Beautiful. Thx.

From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Thursday, July 14, 2011 3:43 PM
To: MS-Exchange Admin Issues
Subject: RE: 2010 Mail Forwarding

msExchGenericForwardingAddress

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Young, Darren [mailto:darren.yo...@chicagobooth.edu]
Sent: Thursday, July 14, 2011 4:41 PM
To: MS-Exchange Admin Issues
Subject: RE: 2010 Mail Forwarding

Thanks. Any idea what attribute is used to store that?

From: Michael B. Smith 
[mailto:mich...@smithcons.com]<mailto:[mailto:mich...@smithcons.com]>
Sent: Thursday, July 14, 2011 3:35 PM
To: MS-Exchange Admin Issues
Subject: RE: 2010 Mail Forwarding

You are correct, the example is wrong. I'll report it. You still don't have to 
have a mail contact if you don't want one. You do this instead:

Set-mailbox -ForwardingSMTPAddress 
addr...@example.com<mailto:addr...@example.com>

Note the addition of "smtp" in the parameter.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Young, Darren 
[mailto:darren.yo...@chicagobooth.edu]<mailto:[mailto:darren.yo...@chicagobooth.edu]>
Sent: Thursday, July 14, 2011 4:04 PM
To: MS-Exchange Admin Issues
Subject: RE: 2010 Mail Forwarding

So, I create a new Mail Contact with the external address then use that object 
for the option -ForwardingAddress it works.

In AD altRecipent is in fact set to the DN of the previously created Mail 
Contact object.

And there are several new attributes on that object vs. what we used in 2003.

MS's docs here: http://technet.microsoft.com/en-us/library/dd351134.aspx appear 
to be incorrect, when I try using their example it says there's no such object. 
I didn't think it was as simple as passing the target address.

From: Michael B. Smith 
[mailto:mich...@smithcons.com]<mailto:[mailto:mich...@smithcons.com]>
Sent: Thursday, July 14, 2011 2:23 PM
To: MS-Exchange Admin Issues
Subject: RE: 2010 Mail Forwarding

Set-Mailbox requires a mailbox, which means that it requires a user object. 
That's far different than a contact.

TTBOMK, the actual implementation of forwarding hasn't changed (in terms of the 
attributes used), but Exchange 2010 does stamp objects with more attributes 
than Exchange 2003 or Exchange 2007 did, and if the attribute's versions aren't 
correct then Exchange 2010 complains.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Young, Darren 
[mailto:darren.yo...@chicagobooth.edu]<mailto:[mailto:darren.yo...@chicagobooth.edu]>
Sent: Thursday, July 14, 2011 3:06 PM
To: MS-Exchange Admin Issues
Subject: RE: 2010 Mail Forwarding

What does Exchange do when you set the forwarding via Set-Mailbox? How is that 
forward actually implemented by 2010?

From: Michael B. Smith 
[mailto:mich...@smithcons.com]<mailto:[mailto:mich...@smithcons.com]>
Sent: Thursday, July 14, 2011 12:45 PM
To: MS-Exchange Admin Issues
Subject: RE: 2010 Mail Forwarding

If it's truly a CONTACT then you should be using New-MailContact. You can also 
migrate an AD contact to an Exchange contact by using Enable-MailContact.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Young, Darren 
[mailto:darren.yo...@chicagobooth.edu]<mailto:[mailto:darren.yo...@chicagobooth.edu]>
Sent: Thursday, July 14, 2011 12:34 PM
To: MS-Exchange Admin Issues
Subject: 2010 Mail Forwarding

For mail forwarding, in Exchange 2003 we built a web app that creates a contact 
object with a targetAddress of the external email then "attached" that to the 
altRecipient attribute for the user. This still works after we "upgrade" the 
contact object to work with 2010, however I would like to move this to a more 
native 2010 method. Is it really as simple as Set-Mailbox -Identity <> 
-ForwardingAddress ?

If so, where does Exchange store this forwarded address?

Darren Young
Systems & Security Architect
Computing Services
University of Chicago
Booth School of Business
5807 South Woodlawn Avenue
Chicago, IL 60637
Voice 773.702.0331 | Fax 773.702.0233


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchange

RE: 2010 Mail Forwarding

2011-07-14 Thread Young, Darren
Google on that attribute gets 2 results
  Translate http://www.msxfaq.de/migration/targetaddress.htm to English and 
there's a little info, not much.
MSDN Bings nothing.
Search on our Premier site returns 0 results. TAM didn't find anything either 
so it must be secret even to Microsoft.

So I pulled the schema reference from here 
http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=5401 and 
all it has is that it is for the Mail-Receipient Class and the Change is 
add:mayContain.

Any idea where documentation is on the values for that attribute?

From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Thursday, July 14, 2011 3:43 PM
To: MS-Exchange Admin Issues
Subject: RE: 2010 Mail Forwarding

msExchGenericForwardingAddress

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Young, Darren [mailto:darren.yo...@chicagobooth.edu]
Sent: Thursday, July 14, 2011 4:41 PM
To: MS-Exchange Admin Issues
Subject: RE: 2010 Mail Forwarding

Thanks. Any idea what attribute is used to store that?

From: Michael B. Smith 
[mailto:mich...@smithcons.com]<mailto:[mailto:mich...@smithcons.com]>
Sent: Thursday, July 14, 2011 3:35 PM
To: MS-Exchange Admin Issues
Subject: RE: 2010 Mail Forwarding

You are correct, the example is wrong. I'll report it. You still don't have to 
have a mail contact if you don't want one. You do this instead:

Set-mailbox -ForwardingSMTPAddress 
addr...@example.com<mailto:addr...@example.com>

Note the addition of "smtp" in the parameter.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Young, Darren 
[mailto:darren.yo...@chicagobooth.edu]<mailto:[mailto:darren.yo...@chicagobooth.edu]>
Sent: Thursday, July 14, 2011 4:04 PM
To: MS-Exchange Admin Issues
Subject: RE: 2010 Mail Forwarding

So, I create a new Mail Contact with the external address then use that object 
for the option -ForwardingAddress it works.

In AD altRecipent is in fact set to the DN of the previously created Mail 
Contact object.

And there are several new attributes on that object vs. what we used in 2003.

MS's docs here: http://technet.microsoft.com/en-us/library/dd351134.aspx appear 
to be incorrect, when I try using their example it says there's no such object. 
I didn't think it was as simple as passing the target address.

From: Michael B. Smith 
[mailto:mich...@smithcons.com]<mailto:[mailto:mich...@smithcons.com]>
Sent: Thursday, July 14, 2011 2:23 PM
To: MS-Exchange Admin Issues
Subject: RE: 2010 Mail Forwarding

Set-Mailbox requires a mailbox, which means that it requires a user object. 
That's far different than a contact.

TTBOMK, the actual implementation of forwarding hasn't changed (in terms of the 
attributes used), but Exchange 2010 does stamp objects with more attributes 
than Exchange 2003 or Exchange 2007 did, and if the attribute's versions aren't 
correct then Exchange 2010 complains.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Young, Darren 
[mailto:darren.yo...@chicagobooth.edu]<mailto:[mailto:darren.yo...@chicagobooth.edu]>
Sent: Thursday, July 14, 2011 3:06 PM
To: MS-Exchange Admin Issues
Subject: RE: 2010 Mail Forwarding

What does Exchange do when you set the forwarding via Set-Mailbox? How is that 
forward actually implemented by 2010?

From: Michael B. Smith 
[mailto:mich...@smithcons.com]<mailto:[mailto:mich...@smithcons.com]>
Sent: Thursday, July 14, 2011 12:45 PM
To: MS-Exchange Admin Issues
Subject: RE: 2010 Mail Forwarding

If it's truly a CONTACT then you should be using New-MailContact. You can also 
migrate an AD contact to an Exchange contact by using Enable-MailContact.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Young, Darren 
[mailto:darren.yo...@chicagobooth.edu]<mailto:[mailto:darren.yo...@chicagobooth.edu]>
Sent: Thursday, July 14, 2011 12:34 PM
To: MS-Exchange Admin Issues
Subject: 2010 Mail Forwarding

For mail forwarding, in Exchange 2003 we built a web app that creates a contact 
object with a targetAddress of the external email then "attached" that to the 
altRecipient attribute for the user. This still works after we "upgrade" the 
contact object to work with 2010, however I would like to move this to a more 
native 2010 method. Is it really as simple as Set-Mailbox -Identity <> 
-ForwardingAddress ?

If so, where does Exchange store this forwarded address?

Darren Young
Systems & Security Architect
Computing Services
University of Chicago
Booth School of Business
5807 South Woodlawn Avenue
Chicago, IL 60637
Voice 773.702.0331 | Fax 773.702.0233


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:

RE: 2010 Mail Forwarding

2011-07-14 Thread Young, Darren
That's the way we're moving to; problem right now is that existing upstream 
automation code reads/writes attributes. We're going to have to build a way for 
that automation to execute remote PowerShell for Exchange related tasks. And... 
Don't have enough resources to commit to that much effort.

Thanks, it looks like proxyAddresses which we're used to dealing with via 
managed code.

From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Thursday, July 14, 2011 4:11 PM
To: MS-Exchange Admin Issues
Subject: RE: 2010 Mail Forwarding

I expect that that would be true of many of the new attributes for Exchange 
2007 and Exchange 2010.

Microsoft no longer wants you to touch objects directly. Use the cmdlets. This 
allows them to change details of the implementation without changing the 
administrative interface.

I think the best you are going to be able to do is the data types that the 
cmdlet accepts. Which is close enough, in my opinion.

http://technet.microsoft.com/en-us/library/bb123981.aspx

ForwardingAddress

Optional

Microsoft.Exchange.Configuration.Tasks.RecipientIdParameter

The ForwardingAddress parameter specifies a forwarding address.

ForwardingSmtpAddress

Optional

Microsoft.Exchange.Data.ProxyAddress

The ForwardingSmtpAddress parameter specifies a forwarding SMTP address.


Each of those data types is documented.

http://msdn.microsoft.com/en-us/library/microsoft.exchange.data.proxyaddress(v=exchg.140).aspx
http://msdn.microsoft.com/en-us/library/microsoft.exchange.configuration.tasks.recipientidparameter(v=exchg.140).aspx

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Young, Darren [mailto:darren.yo...@chicagobooth.edu]
Sent: Thursday, July 14, 2011 5:02 PM
To: MS-Exchange Admin Issues
Subject: RE: 2010 Mail Forwarding

Google on that attribute gets 2 results
  Translate http://www.msxfaq.de/migration/targetaddress.htm to English and 
there's a little info, not much.
MSDN Bings nothing.
Search on our Premier site returns 0 results. TAM didn't find anything either 
so it must be secret even to Microsoft.

So I pulled the schema reference from here 
http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=5401 and 
all it has is that it is for the Mail-Receipient Class and the Change is 
add:mayContain.

Any idea where documentation is on the values for that attribute?

From: Michael B. Smith 
[mailto:mich...@smithcons.com]<mailto:[mailto:mich...@smithcons.com]>
Sent: Thursday, July 14, 2011 3:43 PM
To: MS-Exchange Admin Issues
Subject: RE: 2010 Mail Forwarding

msExchGenericForwardingAddress

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Young, Darren 
[mailto:darren.yo...@chicagobooth.edu]<mailto:[mailto:darren.yo...@chicagobooth.edu]>
Sent: Thursday, July 14, 2011 4:41 PM
To: MS-Exchange Admin Issues
Subject: RE: 2010 Mail Forwarding

Thanks. Any idea what attribute is used to store that?

From: Michael B. Smith 
[mailto:mich...@smithcons.com]<mailto:[mailto:mich...@smithcons.com]>
Sent: Thursday, July 14, 2011 3:35 PM
To: MS-Exchange Admin Issues
Subject: RE: 2010 Mail Forwarding

You are correct, the example is wrong. I'll report it. You still don't have to 
have a mail contact if you don't want one. You do this instead:

Set-mailbox -ForwardingSMTPAddress 
addr...@example.com<mailto:addr...@example.com>

Note the addition of "smtp" in the parameter.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Young, Darren 
[mailto:darren.yo...@chicagobooth.edu]<mailto:[mailto:darren.yo...@chicagobooth.edu]>
Sent: Thursday, July 14, 2011 4:04 PM
To: MS-Exchange Admin Issues
Subject: RE: 2010 Mail Forwarding

So, I create a new Mail Contact with the external address then use that object 
for the option -ForwardingAddress it works.

In AD altRecipent is in fact set to the DN of the previously created Mail 
Contact object.

And there are several new attributes on that object vs. what we used in 2003.

MS's docs here: http://technet.microsoft.com/en-us/library/dd351134.aspx appear 
to be incorrect, when I try using their example it says there's no such object. 
I didn't think it was as simple as passing the target address.

From: Michael B. Smith 
[mailto:mich...@smithcons.com]<mailto:[mailto:mich...@smithcons.com]>
Sent: Thursday, July 14, 2011 2:23 PM
To: MS-Exchange Admin Issues
Subject: RE: 2010 Mail Forwarding

Set-Mailbox requires a mailbox, which means that it requires a user object. 
That's far different than a contact.

TTBOMK, the actual implementation of forwarding hasn't changed (in terms of the 
attributes used), but Exchange 2010 does stamp objects with more attributes 
than Exchange 2003 or Exchange 2007 did, and if the attribute's versions aren't 
correct then Exchange 2010 com

RE: targetAddress

2011-07-15 Thread Young, Darren
I'm trying to clean up mail contact objects from address policy accidentally 
being enabled on them. These particular mail contact objects are only used to 
forward email externally, they're in a specific OU.

As I was looking for local addresses that were generated, I found several of 
them have more than one external proxy address and in some cases the SMTP: 
proxy address doesn't match targetAddress. And.. In some cases mail: doesn't 
even match the SMTP: proxy address. At this point I'm trying to determine which 
attribute to use as the source of record to clean them up. I was thinking the 
primary proxy address.

As I troll through them and clean them up (PowerShell) I was guessing that they 
should have the following:

proxyAddresses: SMTP: $forwardingAddress
mail: $forwadingAddress
targetAddress: SMTP: $forwardingAddress

I also need to pass on to our development team which attributes they need to 
write into AD so I need to determine which, if any, Exchange will manage for 
us. My current theory is that the strange data I'm seeing in current objects is 
a problem in upstream code.

By the way, we have no enabled address policies either, proxyAddresses are 
written into AD on account creation.

From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Friday, July 15, 2011 3:31 PM
To: MS-Exchange Admin Issues
Subject: RE: targetAddress

This gets complicated. It's a legacy interface attribute from when there were 
very few attributes in the NT SAM about an Exchange object.

Tell me what your scenario is.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Young, Darren [mailto:darren.yo...@chicagobooth.edu]
Sent: Friday, July 15, 2011 4:25 PM
To: MS-Exchange Admin Issues
Subject: targetAddress

How is targetAddress on a mail contact managed? Does Exchange write that based 
on the primary proxy address?

Darren Young
Systems & Security Architect
Computing Services
University of Chicago
Booth School of Business
5807 South Woodlawn Avenue
Chicago, IL 60637
Voice 773.702.0331 | Fax 773.702.0233


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: targetAddress

2011-07-15 Thread Young, Darren
Yep, they're objectCategory=Person and objectClass=contact.

From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Friday, July 15, 2011 4:07 PM
To: MS-Exchange Admin Issues
Subject: RE: targetAddress

Yes, I agree with your conclusion, GIVEN THE CAVEAT that we are actually 
talking about Contact objects (&(objectClass=Contact)(objectCategory=Person)). 
And not mailuser or mailbox objects that you happen to use as contacts.

After Exchange stamps an object, it doesn't change (nor refer to, TTBOMK) 
either targetAddress or mail again. It uses proxyAddresses (and the shadow 
proxyAddresses in rare circumstances). But lots of other things do use those 
attributes, so they tend to get used and abused for other things.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Young, Darren [mailto:darren.yo...@chicagobooth.edu]
Sent: Friday, July 15, 2011 4:45 PM
To: MS-Exchange Admin Issues
Subject: RE: targetAddress

I'm trying to clean up mail contact objects from address policy accidentally 
being enabled on them. These particular mail contact objects are only used to 
forward email externally, they're in a specific OU.

As I was looking for local addresses that were generated, I found several of 
them have more than one external proxy address and in some cases the SMTP: 
proxy address doesn't match targetAddress. And.. In some cases mail: doesn't 
even match the SMTP: proxy address. At this point I'm trying to determine which 
attribute to use as the source of record to clean them up. I was thinking the 
primary proxy address.

As I troll through them and clean them up (PowerShell) I was guessing that they 
should have the following:

proxyAddresses: SMTP: $forwardingAddress
mail: $forwadingAddress
targetAddress: SMTP: $forwardingAddress

I also need to pass on to our development team which attributes they need to 
write into AD so I need to determine which, if any, Exchange will manage for 
us. My current theory is that the strange data I'm seeing in current objects is 
a problem in upstream code.

By the way, we have no enabled address policies either, proxyAddresses are 
written into AD on account creation.

From: Michael B. Smith 
[mailto:mich...@smithcons.com]<mailto:[mailto:mich...@smithcons.com]>
Sent: Friday, July 15, 2011 3:31 PM
To: MS-Exchange Admin Issues
Subject: RE: targetAddress

This gets complicated. It's a legacy interface attribute from when there were 
very few attributes in the NT SAM about an Exchange object.

Tell me what your scenario is.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Young, Darren 
[mailto:darren.yo...@chicagobooth.edu]<mailto:[mailto:darren.yo...@chicagobooth.edu]>
Sent: Friday, July 15, 2011 4:25 PM
To: MS-Exchange Admin Issues
Subject: targetAddress

How is targetAddress on a mail contact managed? Does Exchange write that based 
on the primary proxy address?

Darren Young
Systems & Security Architect
Computing Services
University of Chicago
Booth School of Business
5807 South Woodlawn Avenue
Chicago, IL 60637
Voice 773.702.0331 | Fax 773.702.0233


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: Sending Large Files

2011-07-19 Thread Young, Darren
We use an Accellion.

From: Daniele Bartoli [mailto:danielebart...@gmail.com]
Sent: Tuesday, July 19, 2011 4:29 PM
To: MS-Exchange Admin Issues
Subject: Sending Large Files

Hi Everyone!

I wanted to see what other folks are doing to solve the issue of emailing large 
files.  We have internal employees that like to email large files along with 
external customers.  Our Exchange servers are set up with an attachment size 
limit of 10 megs.

I am aware of 3rd party optionssuch as yousendit.com, 
wetransfer.com, etc. however I wanted to see if there 
are any other options that someone could recommend.

Are there any options that would allow one to send large files using Outlook, 
however if the file is greater than the attachment size limit it will send a 
link instead of the file.

Any information is greatly appreciated.


Daniele

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: Sending Large Files

2011-07-19 Thread Young, Darren
We have had Accellion here for around 6 years, the first one was their 
dedicated appliance, now we're using the VM version and feeding it ATA disk.

Ours is used a ton and we receive very few complaints. The only recurring one 
is that the login page says "Email Address" and in fact you have to use your 
userid there. I honestly can't remember why that's the case, perhaps because we 
authenticate to AD.

When we migrated from the previous physical hardware to the new VM they made it 
extremely (utterly) easy. I brought up the new VM on a different IP address; 
they handled the data migration then one morning they cut it over for us. 
Reused the IP, moved the SSL cert over, literally everything.

I really can't say anything bad about it; it just sits there and works.


From: Don Andrews [mailto:don.andr...@safeway.com]
Sent: Tuesday, July 19, 2011 5:16 PM
To: MS-Exchange Admin Issues
Subject: RE: Sending Large Files

We don't use a plug-in, nor do we send from Outlook those attachments that 
would otherwise be disallowed by Outlook (over 10 meg, executable, etc) - we 
use the web interface in that case.

We've had it for years (since long before Axway acquired Tumbleweed) - if we 
were looking now, Accellion sounds like it would be worth a look.


From: Daniele Bartoli 
[mailto:danielebart...@gmail.com]<mailto:[mailto:danielebart...@gmail.com]>
Sent: Tuesday, July 19, 2011 3:09 PM
To: MS-Exchange Admin Issues
Subject: Re: Sending Large Files

Thanks Looks like for an Outlook user that Axway would require installing a 
plug-in.  Any options that don't require a plug-in?

Daniele

On Tue, Jul 19, 2011 at 2:38 PM, Don Andrews 
mailto:don.andr...@safeway.com>> wrote:
We use Axway'x Secure Messenger - can demo if you'd like.

From: Young, Darren 
[mailto:darren.yo...@chicagobooth.edu<mailto:darren.yo...@chicagobooth.edu>]
Sent: Tuesday, July 19, 2011 2:34 PM

To: MS-Exchange Admin Issues
Subject: RE: Sending Large Files

We use an Accellion.

From: Daniele Bartoli 
[mailto:danielebart...@gmail.com<mailto:danielebart...@gmail.com>]
Sent: Tuesday, July 19, 2011 4:29 PM
To: MS-Exchange Admin Issues
Subject: Sending Large Files

Hi Everyone!

I wanted to see what other folks are doing to solve the issue of emailing large 
files.  We have internal employees that like to email large files along with 
external customers.  Our Exchange servers are set up with an attachment size 
limit of 10 megs.

I am aware of 3rd party optionssuch as yousendit.com<http://yousendit.com/>, 
wetransfer.com<http://wetransfer.com/>, etc. however I wanted to see if there 
are any other options that someone could recommend.

Are there any options that would allow one to send large files using Outlook, 
however if the file is greater than the attachment size limit it will send a 
link instead of the file.

Any information is greatly appreciated.


Daniele

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: Sending Large Files

2011-07-19 Thread Young, Darren
We have that with faculty all the time, the user here sends an invite to the 
external recipient. A local account is created for that user on the appliance 
that only has the ability to send to the person that sent the invite. I believe 
we have those local guest accounts set to be removed after 30 days.

From: Daniele Bartoli [mailto:danielebart...@gmail.com]
Sent: Tuesday, July 19, 2011 5:30 PM
To: MS-Exchange Admin Issues
Subject: Re: Sending Large Files

How do you deal with external customers who need to send large files to your 
company that run into file size limitations?



On Tue, Jul 19, 2011 at 3:18 PM, Young, Darren 
mailto:darren.yo...@chicagobooth.edu>> wrote:
We have had Accellion here for around 6 years, the first one was their 
dedicated appliance, now we're using the VM version and feeding it ATA disk.

Ours is used a ton and we receive very few complaints. The only recurring one 
is that the login page says "Email Address" and in fact you have to use your 
userid there. I honestly can't remember why that's the case, perhaps because we 
authenticate to AD.

When we migrated from the previous physical hardware to the new VM they made it 
extremely (utterly) easy. I brought up the new VM on a different IP address; 
they handled the data migration then one morning they cut it over for us. 
Reused the IP, moved the SSL cert over, literally everything.

I really can't say anything bad about it; it just sits there and works.


From: Don Andrews 
[mailto:don.andr...@safeway.com<mailto:don.andr...@safeway.com>]
Sent: Tuesday, July 19, 2011 5:16 PM

To: MS-Exchange Admin Issues
Subject: RE: Sending Large Files

We don't use a plug-in, nor do we send from Outlook those attachments that 
would otherwise be disallowed by Outlook (over 10 meg, executable, etc) - we 
use the web interface in that case.

We've had it for years (since long before Axway acquired Tumbleweed) - if we 
were looking now, Accellion sounds like it would be worth a look.


From: Daniele Bartoli 
[mailto:danielebart...@gmail.com]<mailto:[mailto:danielebart...@gmail.com]>
Sent: Tuesday, July 19, 2011 3:09 PM
To: MS-Exchange Admin Issues
Subject: Re: Sending Large Files

Thanks Looks like for an Outlook user that Axway would require installing a 
plug-in.  Any options that don't require a plug-in?

Daniele

On Tue, Jul 19, 2011 at 2:38 PM, Don Andrews 
mailto:don.andr...@safeway.com>> wrote:
We use Axway'x Secure Messenger - can demo if you'd like.

From: Young, Darren 
[mailto:darren.yo...@chicagobooth.edu<mailto:darren.yo...@chicagobooth.edu>]
Sent: Tuesday, July 19, 2011 2:34 PM

To: MS-Exchange Admin Issues
Subject: RE: Sending Large Files

We use an Accellion.

From: Daniele Bartoli 
[mailto:danielebart...@gmail.com<mailto:danielebart...@gmail.com>]
Sent: Tuesday, July 19, 2011 4:29 PM
To: MS-Exchange Admin Issues
Subject: Sending Large Files

Hi Everyone!

I wanted to see what other folks are doing to solve the issue of emailing large 
files.  We have internal employees that like to email large files along with 
external customers.  Our Exchange servers are set up with an attachment size 
limit of 10 megs.

I am aware of 3rd party optionssuch as yousendit.com<http://yousendit.com/>, 
wetransfer.com<http://wetransfer.com/>, etc. however I wanted to see if there 
are any other options that someone could recommend.

Are there any options that would allow one to send large files using Outlook, 
however if the file is greater than the attachment size limit it will send a 
link instead of the file.

Any information is greatly appreciated.


Daniele

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums

RE: Sending Large Files

2011-07-19 Thread Young, Darren
The original driver here was that campus Netsec was outlawing FTP across campus.

From: Martin Blackstone [mailto:mblackst...@gmail.com]
Sent: Tuesday, July 19, 2011 5:44 PM
To: MS-Exchange Admin Issues
Subject: RE: Sending Large Files

Yep. Its all very smooth. Once we finish buying it, our FTP server is going 
away forever.

From: Young, Darren 
[mailto:darren.yo...@chicagobooth.edu]<mailto:[mailto:darren.yo...@chicagobooth.edu]>
Sent: Tuesday, July 19, 2011 3:36 PM
To: MS-Exchange Admin Issues
Subject: RE: Sending Large Files

We have that with faculty all the time, the user here sends an invite to the 
external recipient. A local account is created for that user on the appliance 
that only has the ability to send to the person that sent the invite. I believe 
we have those local guest accounts set to be removed after 30 days.

From: Daniele Bartoli 
[mailto:danielebart...@gmail.com]<mailto:[mailto:danielebart...@gmail.com]>
Sent: Tuesday, July 19, 2011 5:30 PM
To: MS-Exchange Admin Issues
Subject: Re: Sending Large Files

How do you deal with external customers who need to send large files to your 
company that run into file size limitations?



On Tue, Jul 19, 2011 at 3:18 PM, Young, Darren 
mailto:darren.yo...@chicagobooth.edu>> wrote:
We have had Accellion here for around 6 years, the first one was their 
dedicated appliance, now we're using the VM version and feeding it ATA disk.

Ours is used a ton and we receive very few complaints. The only recurring one 
is that the login page says "Email Address" and in fact you have to use your 
userid there. I honestly can't remember why that's the case, perhaps because we 
authenticate to AD.

When we migrated from the previous physical hardware to the new VM they made it 
extremely (utterly) easy. I brought up the new VM on a different IP address; 
they handled the data migration then one morning they cut it over for us. 
Reused the IP, moved the SSL cert over, literally everything.

I really can't say anything bad about it; it just sits there and works.


From: Don Andrews 
[mailto:don.andr...@safeway.com<mailto:don.andr...@safeway.com>]
Sent: Tuesday, July 19, 2011 5:16 PM

To: MS-Exchange Admin Issues
Subject: RE: Sending Large Files

We don't use a plug-in, nor do we send from Outlook those attachments that 
would otherwise be disallowed by Outlook (over 10 meg, executable, etc) - we 
use the web interface in that case.

We've had it for years (since long before Axway acquired Tumbleweed) - if we 
were looking now, Accellion sounds like it would be worth a look.


From: Daniele Bartoli 
[mailto:danielebart...@gmail.com]<mailto:[mailto:danielebart...@gmail.com]>
Sent: Tuesday, July 19, 2011 3:09 PM
To: MS-Exchange Admin Issues
Subject: Re: Sending Large Files

Thanks Looks like for an Outlook user that Axway would require installing a 
plug-in.  Any options that don't require a plug-in?

Daniele

On Tue, Jul 19, 2011 at 2:38 PM, Don Andrews 
mailto:don.andr...@safeway.com>> wrote:
We use Axway'x Secure Messenger - can demo if you'd like.

From: Young, Darren 
[mailto:darren.yo...@chicagobooth.edu<mailto:darren.yo...@chicagobooth.edu>]
Sent: Tuesday, July 19, 2011 2:34 PM

To: MS-Exchange Admin Issues
Subject: RE: Sending Large Files

We use an Accellion.

From: Daniele Bartoli 
[mailto:danielebart...@gmail.com<mailto:danielebart...@gmail.com>]
Sent: Tuesday, July 19, 2011 4:29 PM
To: MS-Exchange Admin Issues
Subject: Sending Large Files

Hi Everyone!

I wanted to see what other folks are doing to solve the issue of emailing large 
files.  We have internal employees that like to email large files along with 
external customers.  Our Exchange servers are set up with an attachment size 
limit of 10 megs.

I am aware of 3rd party optionssuch as yousendit.com<http://yousendit.com/>, 
wetransfer.com<http://wetransfer.com/>, etc. however I wanted to see if there 
are any other options that someone could recommend.

Are there any options that would allow one to send large files using Outlook, 
however if the file is greater than the attachment size limit it will send a 
link instead of the file.

Any information is greatly appreciated.


Daniele

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsu

RE: Sending Large Files

2011-07-20 Thread Young, Darren
The central IT group here uses Xythos, they wanted a software solution as 
opposed to an appliance.

From: Joe Pochedley [mailto:joe.poched...@fivesgroup.com]
Sent: Wednesday, July 20, 2011 4:26 PM
To: MS-Exchange Admin Issues
Subject: RE: Sending Large Files

We use Sharefile here...  Works well for our needs...  Pricing seems pretty 
similar to many of the appliance vendors.   As always, there are pro's and cons 
to hosting with  provider vs hosting something on-site...  For us it was pretty 
much a toss up, so we went with Sharefile.

Joe Pochedley
Network & Telecommunications Manager
Fives North American Combustion, Inc.

From: Kim Longenbaugh 
[mailto:k...@colonialsavings.com]<mailto:[mailto:k...@colonialsavings.com]>
Sent: Wednesday, July 20, 2011 11:47 AM
To: MS-Exchange Admin Issues
Subject: RE: Sending Large Files

>From my skim of the home page, it sure looks like it might, and I'll 
>definitely take a further look at it.  Thanks for the link!

From: Roger Wright [mailto:rhw...@gmail.com]<mailto:[mailto:rhw...@gmail.com]>
Sent: Wednesday, July 20, 2011 9:37 AM
To: MS-Exchange Admin Issues
Subject: Re: Sending Large Files

Would this meet your requirements?

http://www.sharefile.com/try/X/features.aspx




Roger Wright
___
Dr. Seuss is my favorite rapper!  Cat - Hat... sheer genius!

On Wed, Jul 20, 2011 at 10:18 AM, Kim Longenbaugh 
mailto:k...@colonialsavings.com>> wrote:
The biggest need here is to allow outside people, home appraisers, for example, 
send us appraisals.  They currently attach the files to email (encrypted if 
needed).
We want something like you're describing with the Accellion, but the big issue 
has been the hassle of creating accounts for the external users, and for 
internal users as well.  Is there any way to ease that task, for example, an 
appraiser contacts the device, says he wants to send something to our internal 
user, who gets an email, and then somehow authorizes the account setup?
From: Young, Darren 
[mailto:darren.yo...@chicagobooth.edu<mailto:darren.yo...@chicagobooth.edu>]
Sent: Tuesday, July 19, 2011 5:36 PM

To: MS-Exchange Admin Issues
Subject: RE: Sending Large Files

We have that with faculty all the time, the user here sends an invite to the 
external recipient. A local account is created for that user on the appliance 
that only has the ability to send to the person that sent the invite. I believe 
we have those local guest accounts set to be removed after 30 days.

From: Daniele Bartoli 
[mailto:danielebart...@gmail.com<mailto:danielebart...@gmail.com>]
Sent: Tuesday, July 19, 2011 5:30 PM

To: MS-Exchange Admin Issues
Subject: Re: Sending Large Files

How do you deal with external customers who need to send large files to your 
company that run into file size limitations?



On Tue, Jul 19, 2011 at 3:18 PM, Young, Darren 
mailto:darren.yo...@chicagobooth.edu>> wrote:
We have had Accellion here for around 6 years, the first one was their 
dedicated appliance, now we're using the VM version and feeding it ATA disk.

Ours is used a ton and we receive very few complaints. The only recurring one 
is that the login page says "Email Address" and in fact you have to use your 
userid there. I honestly can't remember why that's the case, perhaps because we 
authenticate to AD.

When we migrated from the previous physical hardware to the new VM they made it 
extremely (utterly) easy. I brought up the new VM on a different IP address; 
they handled the data migration then one morning they cut it over for us. 
Reused the IP, moved the SSL cert over, literally everything.

I really can't say anything bad about it; it just sits there and works.


From: Don Andrews 
[mailto:don.andr...@safeway.com<mailto:don.andr...@safeway.com>]
Sent: Tuesday, July 19, 2011 5:16 PM

To: MS-Exchange Admin Issues
Subject: RE: Sending Large Files

We don't use a plug-in, nor do we send from Outlook those attachments that 
would otherwise be disallowed by Outlook (over 10 meg, executable, etc) - we 
use the web interface in that case.

We've had it for years (since long before Axway acquired Tumbleweed) - if we 
were looking now, Accellion sounds like it would be worth a look.


From: Daniele Bartoli 
[mailto:danielebart...@gmail.com]<mailto:[mailto:danielebart...@gmail.com]>
Sent: Tuesday, July 19, 2011 3:09 PM

To: MS-Exchange Admin Issues
Subject: Re: Sending Large Files

Thanks Looks like for an Outlook user that Axway would require installing a 
plug-in.  Any options that don't require a plug-in?

Daniele

On Tue, Jul 19, 2011 at 2:38 PM, Don Andrews 
mailto:don.andr...@safeway.com>> wrote:
We use Axway'x Secure Messenger - can demo if you'd like.

From: Young, Darren 
[mailto:darren.yo...@chicagobooth.edu<mailto:darren.yo...@chicagobooth.edu>]
Sent: Tuesday, July 19, 2011 2:34 PM

To: MS-Exchange Admin Issues
Subject: RE: Sending Large F

RE: Exchange 2010 Receive Connector Permission

2011-07-26 Thread Young, Darren
thx

From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Tuesday, July 26, 2011 2:46 PM
To: MS-Exchange Admin Issues
Subject: RE: Exchange 2010 Receive Connector Permission

This is the short version.

Remove the "anonymous submit" from the connector, and for the user you want to 
be able to use it, add the following extended rights to the connector:

ms-Exch-SMTP-Accept-Any-Recipient
ms-Exch-SMTP-Accept-Any-Sender
ms-Exch-SMTP-Accept-Authentication-Flag
ms-Exch-SMTP-Accept-Authoritative-Domain-Sender
ms-Exch-SMTP-Submit
Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Young, Darren 
[mailto:darren.yo...@chicagobooth.edu]<mailto:[mailto:darren.yo...@chicagobooth.edu]>
Sent: Tuesday, July 26, 2011 3:38 PM
To: MS-Exchange Admin Issues
Subject: Exchange 2010 Receive Connector Permission

I have a separate receive connector for our Crestron devices to send A/V help 
requests. I would like to only allow the service account they use for SMTP auth 
to send through that connector. What permissions would I need to assign to that 
connector to enforce that?

Darren Young
Systems & Security Architect
Computing Services
University of Chicago
Booth School of Business
5807 South Woodlawn Avenue
Chicago, IL 60637
Voice 773.702.0331 | Fax 773.702.0233


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: Exchange 2010 Receive Connector Permission

2011-07-26 Thread Young, Darren
Any idea why the extended rights aren't presented in the management console?

From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Tuesday, July 26, 2011 2:46 PM
To: MS-Exchange Admin Issues
Subject: RE: Exchange 2010 Receive Connector Permission

This is the short version.

Remove the "anonymous submit" from the connector, and for the user you want to 
be able to use it, add the following extended rights to the connector:

ms-Exch-SMTP-Accept-Any-Recipient
ms-Exch-SMTP-Accept-Any-Sender
ms-Exch-SMTP-Accept-Authentication-Flag
ms-Exch-SMTP-Accept-Authoritative-Domain-Sender
ms-Exch-SMTP-Submit
Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Young, Darren 
[mailto:darren.yo...@chicagobooth.edu]<mailto:[mailto:darren.yo...@chicagobooth.edu]>
Sent: Tuesday, July 26, 2011 3:38 PM
To: MS-Exchange Admin Issues
Subject: Exchange 2010 Receive Connector Permission

I have a separate receive connector for our Crestron devices to send A/V help 
requests. I would like to only allow the service account they use for SMTP auth 
to send through that connector. What permissions would I need to assign to that 
connector to enforce that?

Darren Young
Systems & Security Architect
Computing Services
University of Chicago
Booth School of Business
5807 South Woodlawn Avenue
Chicago, IL 60637
Voice 773.702.0331 | Fax 773.702.0233


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: Exchange 2010 Receive Connector Permission

2011-07-26 Thread Young, Darren
I'm guessing that the "Exchange users" Permission Group should not be checked 
via the console.

From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Tuesday, July 26, 2011 2:46 PM
To: MS-Exchange Admin Issues
Subject: RE: Exchange 2010 Receive Connector Permission

This is the short version.

Remove the "anonymous submit" from the connector, and for the user you want to 
be able to use it, add the following extended rights to the connector:

ms-Exch-SMTP-Accept-Any-Recipient
ms-Exch-SMTP-Accept-Any-Sender
ms-Exch-SMTP-Accept-Authentication-Flag
ms-Exch-SMTP-Accept-Authoritative-Domain-Sender
ms-Exch-SMTP-Submit
Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Young, Darren 
[mailto:darren.yo...@chicagobooth.edu]<mailto:[mailto:darren.yo...@chicagobooth.edu]>
Sent: Tuesday, July 26, 2011 3:38 PM
To: MS-Exchange Admin Issues
Subject: Exchange 2010 Receive Connector Permission

I have a separate receive connector for our Crestron devices to send A/V help 
requests. I would like to only allow the service account they use for SMTP auth 
to send through that connector. What permissions would I need to assign to that 
connector to enforce that?

Darren Young
Systems & Security Architect
Computing Services
University of Chicago
Booth School of Business
5807 South Woodlawn Avenue
Chicago, IL 60637
Voice 773.702.0331 | Fax 773.702.0233


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: SMTP Auth

2011-07-27 Thread Young, Darren
If just basic is enabled on the connector does that really mean *must* auth to 
submit? Or is it *may* auth?

From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Wednesday, July 27, 2011 8:54 AM
To: MS-Exchange Admin Issues
Subject: RE: SMTP Auth

No. They are "either/or" not "both/and".

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Young, Darren 
[mailto:darren.yo...@chicagobooth.edu]<mailto:[mailto:darren.yo...@chicagobooth.edu]>
Sent: Wednesday, July 27, 2011 9:13 AM
To: MS-Exchange Admin Issues
Subject: SMTP Auth

MS Exchange 2010 SP1 page 
http://technet.microsoft.com/en-us/library/aa996395.aspx under Authentication 
Settings says for Basic Auth that:

"Basic authentication. Requires an authenticated logon."

Does that actually mean that when set users *must* use basic auth to submit to 
the connector? What if Integrated is enabled on the same connector?

Darren Young
Systems & Security Architect
Computing Services
University of Chicago
Booth School of Business
5807 South Woodlawn Avenue
Chicago, IL 60637
Voice 773.702.0331 | Fax 773.702.0233


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: SMTP Auth

2011-07-27 Thread Young, Darren
Thanks.

From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Wednesday, July 27, 2011 1:18 PM
To: MS-Exchange Admin Issues
Subject: RE: SMTP Auth

Depends on permission groups tab.

If anonymous is checked, it means "may". If not, it means "must".

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Young, Darren 
[mailto:darren.yo...@chicagobooth.edu]<mailto:[mailto:darren.yo...@chicagobooth.edu]>
Sent: Wednesday, July 27, 2011 2:10 PM
To: MS-Exchange Admin Issues
Subject: RE: SMTP Auth

If just basic is enabled on the connector does that really mean *must* auth to 
submit? Or is it *may* auth?

From: Michael B. Smith 
[mailto:mich...@smithcons.com]<mailto:[mailto:mich...@smithcons.com]>
Sent: Wednesday, July 27, 2011 8:54 AM
To: MS-Exchange Admin Issues
Subject: RE: SMTP Auth

No. They are "either/or" not "both/and".

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Young, Darren 
[mailto:darren.yo...@chicagobooth.edu]<mailto:[mailto:darren.yo...@chicagobooth.edu]>
Sent: Wednesday, July 27, 2011 9:13 AM
To: MS-Exchange Admin Issues
Subject: SMTP Auth

MS Exchange 2010 SP1 page 
http://technet.microsoft.com/en-us/library/aa996395.aspx under Authentication 
Settings says for Basic Auth that:

"Basic authentication. Requires an authenticated logon."

Does that actually mean that when set users *must* use basic auth to submit to 
the connector? What if Integrated is enabled on the same connector?

Darren Young
Systems & Security Architect
Computing Services
University of Chicago
Booth School of Business
5807 South Woodlawn Avenue
Chicago, IL 60637
Voice 773.702.0331 | Fax 773.702.0233


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: Outlook Social Connector

2011-08-02 Thread Young, Darren
We've had "strangeness" with Outlook 2010 when it's in cached mode. Seems to 
take days sometimes for the client to get the photo.

From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk]
Sent: Tuesday, August 02, 2011 12:02 PM
To: MS-Exchange Admin Issues
Subject: Outlook Social Connector

I wondered if anyone is using the Outlook Social Connector and if you can share 
any problems/pitfalls/issues to be aware of?

I'm considering installing it simply so that Outlook 2007 will work with GAL 
photos stored in Active Directory.

It looks like Microsoft make a GPO .adm file specifically for it that lets you 
lock it down, but I'd still appreciate any feedback from anyone who may have 
gone down a similar route.

Thanks,
Paul

MIRA Ltd

Watling Street, Nuneaton, Warwickshire, CV10 0TU, England
Registered in England and Wales No. 402570
VAT Registration  GB 100 1464 84

The contents of this e-mail are confidential and are solely for the use of the 
intended recipient.  If you receive this e-mail in error, please delete it and 
notify us either by e-mail, telephone or fax.  You should not copy, forward or 
otherwise disclose the content of the e-mail as this is prohibited.

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: Outlook Social Connector

2011-08-02 Thread Young, Darren
Did that and still have oddness. We've only tested with our IT department at 
the moment.

From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk]
Sent: Tuesday, August 02, 2011 12:14 PM
To: MS-Exchange Admin Issues
Subject: RE: Outlook Social Connector

Interesting.  I thought you had to specifically configure your Exchange server 
to get the photos included in the OAB?  Or you mean you've done that and still 
have the odd issue?
From: Young, Darren 
[mailto:darren.yo...@chicagobooth.edu]<mailto:[mailto:darren.yo...@chicagobooth.edu]>
Sent: 02 August 2011 18:08
To: MS-Exchange Admin Issues
Subject: RE: Outlook Social Connector

We've had "strangeness" with Outlook 2010 when it's in cached mode. Seems to 
take days sometimes for the client to get the photo.

From: Paul Hutchings 
[mailto:paul.hutchi...@mira.co.uk]<mailto:[mailto:paul.hutchi...@mira.co.uk]>
Sent: Tuesday, August 02, 2011 12:02 PM
To: MS-Exchange Admin Issues
Subject: Outlook Social Connector

I wondered if anyone is using the Outlook Social Connector and if you can share 
any problems/pitfalls/issues to be aware of?

I'm considering installing it simply so that Outlook 2007 will work with GAL 
photos stored in Active Directory.

It looks like Microsoft make a GPO .adm file specifically for it that lets you 
lock it down, but I'd still appreciate any feedback from anyone who may have 
gone down a similar route.

Thanks,
Paul

MIRA Ltd

Watling Street, Nuneaton, Warwickshire, CV10 0TU, England
Registered in England and Wales No. 402570
VAT Registration  GB 100 1464 84

The contents of this e-mail are confidential and are solely for the use of the 
intended recipient.  If you receive this e-mail in error, please delete it and 
notify us either by e-mail, telephone or fax.  You should not copy, forward or 
otherwise disclose the content of the e-mail as this is prohibited.

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: Outlook Social Connector

2011-08-02 Thread Young, Darren
I'm personally using it with Facebook and LinkedIn as well in Outlook 2010. We 
have perhaps 30 GAL photos in AD at this point. Overall I like it, the Facebook 
part is so so, it's at least aware of the FB privacy settings. Not 100% sure I 
like seeing some people's faces when they email me though.

Interesting thing I've discovered: there are lots of people that use work email 
addresses on Facebook. Someone outside our department installed the connector 
on 2010 then called us up asking why other people can see their Facebook posts 
from Outlook. Well, YOU'RE the one that used your work email on FB..

Then, like this email list, it's showing Chris M., Systems Analyst at Sam 
Houston State University in the social connector pane via LinkedIn.

There are also times when someone emails me and they have zero FB settings 
Outlook slows down trying to pull in all their wall posts. I'm wondering if we 
should find a way to only allow the connector to show GAL photos and not allow 
connections to FB, LinkedIn, etc.

From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk]
Sent: Tuesday, August 02, 2011 12:33 PM
To: MS-Exchange Admin Issues
Subject: RE: Outlook Social Connector

Doesn't surprise me.  One of my guys called me to say that my photo was showing 
against an email from someone else.  Hooked up to his PC and sure enough it 
was.  Closed Outlook and went back in, right photo displayed.

I think my "concern" with the social connector is that for 2007 it may be a 
sledgehammer to crack a walnut, but I really like the GAL photo concept as it's 
such a simple way to actually know who's emailing you within your business 
(names to faces and all that)
From: Young, Darren 
[mailto:darren.yo...@chicagobooth.edu]<mailto:[mailto:darren.yo...@chicagobooth.edu]>
Sent: 02 August 2011 18:30
To: MS-Exchange Admin Issues
Subject: RE: Outlook Social Connector

Did that and still have oddness. We've only tested with our IT department at 
the moment.

From: Paul Hutchings 
[mailto:paul.hutchi...@mira.co.uk]<mailto:[mailto:paul.hutchi...@mira.co.uk]>
Sent: Tuesday, August 02, 2011 12:14 PM
To: MS-Exchange Admin Issues
Subject: RE: Outlook Social Connector

Interesting.  I thought you had to specifically configure your Exchange server 
to get the photos included in the OAB?  Or you mean you've done that and still 
have the odd issue?
From: Young, Darren 
[mailto:darren.yo...@chicagobooth.edu]<mailto:[mailto:darren.yo...@chicagobooth.edu]>
Sent: 02 August 2011 18:08
To: MS-Exchange Admin Issues
Subject: RE: Outlook Social Connector

We've had "strangeness" with Outlook 2010 when it's in cached mode. Seems to 
take days sometimes for the client to get the photo.

From: Paul Hutchings 
[mailto:paul.hutchi...@mira.co.uk]<mailto:[mailto:paul.hutchi...@mira.co.uk]>
Sent: Tuesday, August 02, 2011 12:02 PM
To: MS-Exchange Admin Issues
Subject: Outlook Social Connector

I wondered if anyone is using the Outlook Social Connector and if you can share 
any problems/pitfalls/issues to be aware of?

I'm considering installing it simply so that Outlook 2007 will work with GAL 
photos stored in Active Directory.

It looks like Microsoft make a GPO .adm file specifically for it that lets you 
lock it down, but I'd still appreciate any feedback from anyone who may have 
gone down a similar route.

Thanks,
Paul

MIRA Ltd

Watling Street, Nuneaton, Warwickshire, CV10 0TU, England
Registered in England and Wales No. 402570
VAT Registration  GB 100 1464 84

The contents of this e-mail are confidential and are solely for the use of the 
intended recipient.  If you receive this e-mail in error, please delete it and 
notify us either by e-mail, telephone or fax.  You should not copy, forward or 
otherwise disclose the content of the e-mail as this is prohibited.

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com

RE: Best Practices for Attachment Size Limits

2011-09-08 Thread Young, Darren
We have a 20MB attachment limit and an Accellion FTA to securely transfer files 
larger than that. Biggest problem: MIME overhead. People say "you said it's 
20MB but it won't go through". So, we have to explain that depending on the 
type of file even an 18MB Excel might surpass 20MB with MIME overhead.

We have 2GB mailbox quota limits.

> -Original Message-
> From: John Hornbuckle [mailto:john.hornbuc...@taylor.k12.fl.us]
> Sent: Thursday, September 08, 2011 11:35 AM
> To: MS-Exchange Admin Issues
> Subject: Best Practices for Attachment Size Limits
> 
> We have the standard 10-meg attachment size limit in place, and I was
> wondering if we should reconsider. It actually doesn't seem to cause much of
> a problem, but periodically we have a situation where someone is trying to
> send/receive a file that's too big.
> 
> There were two main reasons for the limit.
> 
> One is that e-mail isn't a particularly efficient method for transferring 
> files, so
> big files should be transferred some other way. But in this day and age, is 10
> MB considered "big" anymore?
> 
> The second reason is that big files will fill up users' mailboxes quickly, 
> and our
> users have 250 MB quotas. Although the fact that I don't too often hear
> complaints about the 10 MB limit makes me think users aren't
> sending/receiving files of that size very often anyway--so the mailbox size
> may not be a problem if I bump up the attachment size limit.
> 
> I know situations vary from enterprise to enterprise, but I'm looking for
> general best practices and pros/cons to increasing the limit.
> 
> 
> 
> John Hornbuckle, MSMIS, PMP
> MIS Department
> Taylor County School District
> www.taylor.k12.fl.us
> 
> 
> ---
> To manage subscriptions click here: http://lyris.sunbelt-
> software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist



RE: Best Practices for Attachment Size Limits

2011-09-08 Thread Young, Darren
How are you implementing the AD policy that automatically sends through it?

> -Original Message-
> From: Garcia-Moran, Carlos [mailto:cgarciamo...@spragueenergy.com]
> Sent: Thursday, September 08, 2011 11:56 AM
> To: MS-Exchange Admin Issues
> Subject: RE: Best Practices for Attachment Size Limits
> 
> 30MB Limit with a Biscom transfer appliance and AD policies that send
> anything larger through it automatically, no mailbox limits.
> 
> -Original Message-
> From: Young, Darren [mailto:darren.yo...@chicagobooth.edu]
> Sent: Thursday, September 08, 2011 12:40 PM
> To: MS-Exchange Admin Issues
> Subject: RE: Best Practices for Attachment Size Limits
> 
> We have a 20MB attachment limit and an Accellion FTA to securely transfer
> files larger than that. Biggest problem: MIME overhead. People say "you said
> it's 20MB but it won't go through". So, we have to explain that depending on
> the type of file even an 18MB Excel might surpass 20MB with MIME
> overhead.
> 
> We have 2GB mailbox quota limits.
> 
> > -Original Message-
> > From: John Hornbuckle [mailto:john.hornbuc...@taylor.k12.fl.us]
> > Sent: Thursday, September 08, 2011 11:35 AM
> > To: MS-Exchange Admin Issues
> > Subject: Best Practices for Attachment Size Limits
> >
> > We have the standard 10-meg attachment size limit in place, and I was
> > wondering if we should reconsider. It actually doesn't seem to cause
> > much of a problem, but periodically we have a situation where someone
> > is trying to send/receive a file that's too big.
> >
> > There were two main reasons for the limit.
> >
> > One is that e-mail isn't a particularly efficient method for
> > transferring files, so big files should be transferred some other way.
> > But in this day and age, is 10 MB considered "big" anymore?
> >
> > The second reason is that big files will fill up users' mailboxes
> > quickly, and our users have 250 MB quotas. Although the fact that I
> > don't too often hear complaints about the 10 MB limit makes me think
> > users aren't sending/receiving files of that size very often
> > anyway--so the mailbox size may not be a problem if I bump up the
> attachment size limit.
> >
> > I know situations vary from enterprise to enterprise, but I'm looking
> > for general best practices and pros/cons to increasing the limit.
> >
> >
> >
> > John Hornbuckle, MSMIS, PMP
> > MIS Department
> > Taylor County School District
> > www.taylor.k12.fl.us
> >
> >
> > ---
> > To manage subscriptions click here: http://lyris.sunbelt-
> > software.com/read/my_forums/ or send an email to
> > listmana...@lyris.sunbeltsoftware.com
> > with the body: unsubscribe exchangelist
> 
> 
> ---
> To manage subscriptions click here: http://lyris.sunbelt-
> software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe exchangelist
> 
> 
> _
> This e-mail, including attachments, contains information that is confidential
> and may be protected by attorney/client or other privileges.
> This e-mail, including attachments, constitutes non-public information
> intended to be conveyed only to the designated recipient(s). If you are not
> an intended recipient, you are hereby notified that any unauthorized use,
> dissemination, distribution or reproduction of this e-mail, including
> attachments, is strictly prohibited and may be unlawful. If you have received
> this e-mail in error, please notify me by e-mail reply and delete the original
> message and any attachments from your system.
> _
> 
> ---
> To manage subscriptions click here: http://lyris.sunbelt-
> software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist



RE: Message reply for retiring domain

2011-09-30 Thread Young, Darren
.edu can't transfer from EDUCAUSE.

Good general idea though, I know some people there. I'll see if they have any 
options since they're the ones forcing the retirement of the old domain.

From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Friday, September 30, 2011 3:15 PM
To: MS-Exchange Admin Issues
Subject: RE: Message reply for retiring domain

You could write a transport sink to emulate a catchall mailbox; but it isn't 
worth the overhead (IMO).

I realize this isn't an Exchange solution, but it's an EASY solution: transfer 
the domain to GoDaddy and use their built-in catchall solution.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Young, Darren 
[mailto:darren.yo...@chicagobooth.edu]<mailto:[mailto:darren.yo...@chicagobooth.edu]>
Sent: Friday, September 30, 2011 4:10 PM
To: MS-Exchange Admin Issues
Subject: Message reply for retiring domain

Today we have 2 domains coming inbound to Exchange 2010, chicagogsb.edu and 
chicagobooth.edu. The domain chicagogsb.edu is going away in November and 40% 
of inbound mail is still addressed there. We want to send a reply back to 
everyone sending to that domain telling them to update their address books, etc 
with the new domain.

I've researched this and the only way I can come up with is to have a hub 
transport rule that BCC's another mailbox where there's an Outlook reply 
telling them to please send to 
u...@chicagobooth.edu<mailto:u...@chicagobooth.edu> instead of 
u...@chicagogsb.edu<mailto:u...@chicagogsb.edu>. Have the rule delete the 
message but someone would have to log into that mailbox and purge those deleted 
messages.

Thoughts on other ways to accomplish this?

Darren Young
Systems & Security Architect
Computing Services
University of Chicago
Booth School of Business
5807 South Woodlawn Avenue
Chicago, IL 60637
Voice 773.702.0331 | Fax 773.702.0233


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: Message reply for retiring domain

2011-09-30 Thread Young, Darren
Salright.

Their policy is one .edu per organization however there are some grandfathering 
rules prior to 2001 or something. Large donor in 2008 = name change but is 
*after* the single name policy.

I think they allow a 1-2 year transition but somehow we talked them into 3. 
Can't talk them into 4 as of yet.

.edu are their own beasts since they're all run by EDUCAUSE.

From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Friday, September 30, 2011 5:18 PM
To: MS-Exchange Admin Issues
Subject: RE: Message reply for retiring domain

Sorry, I didn't know that fact!

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Young, Darren 
[mailto:darren.yo...@chicagobooth.edu]<mailto:[mailto:darren.yo...@chicagobooth.edu]>
Sent: Friday, September 30, 2011 4:46 PM
To: MS-Exchange Admin Issues
Subject: RE: Message reply for retiring domain

.edu can't transfer from EDUCAUSE.

Good general idea though, I know some people there. I'll see if they have any 
options since they're the ones forcing the retirement of the old domain.

From: Michael B. Smith 
[mailto:mich...@smithcons.com]<mailto:[mailto:mich...@smithcons.com]>
Sent: Friday, September 30, 2011 3:15 PM
To: MS-Exchange Admin Issues
Subject: RE: Message reply for retiring domain

You could write a transport sink to emulate a catchall mailbox; but it isn't 
worth the overhead (IMO).

I realize this isn't an Exchange solution, but it's an EASY solution: transfer 
the domain to GoDaddy and use their built-in catchall solution.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Young, Darren 
[mailto:darren.yo...@chicagobooth.edu]<mailto:[mailto:darren.yo...@chicagobooth.edu]>
Sent: Friday, September 30, 2011 4:10 PM
To: MS-Exchange Admin Issues
Subject: Message reply for retiring domain

Today we have 2 domains coming inbound to Exchange 2010, chicagogsb.edu and 
chicagobooth.edu. The domain chicagogsb.edu is going away in November and 40% 
of inbound mail is still addressed there. We want to send a reply back to 
everyone sending to that domain telling them to update their address books, etc 
with the new domain.

I've researched this and the only way I can come up with is to have a hub 
transport rule that BCC's another mailbox where there's an Outlook reply 
telling them to please send to 
u...@chicagobooth.edu<mailto:u...@chicagobooth.edu> instead of 
u...@chicagogsb.edu<mailto:u...@chicagogsb.edu>. Have the rule delete the 
message but someone would have to log into that mailbox and purge those deleted 
messages.

Thoughts on other ways to accomplish this?

Darren Young
Systems & Security Architect
Computing Services
University of Chicago
Booth School of Business
5807 South Woodlawn Avenue
Chicago, IL 60637
Voice 773.702.0331 | Fax 773.702.0233


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: Exchange 2010 Hardware & Backups

2012-02-16 Thread Young, Darren
We have around 6000 active mailboxes (2GB) and 23,000 small (20MB) alumni 
mailboxes.

All Exchange 2010 is on VMware 4.1i backed by NetApp storage.

Prod is 4 machines, 2x4 CPU's and 96GB RAM. On that we have 4 mailbox hosts 
with 48GB RAM and 4 CAS/HT nodes with 12GB RAM.

DR are the same physical machines, just 2 of them, again, backed by NetApp 
storage.

DR virtuals are the same as prod, just half of them. We only DAG the 6000 
active mailboxes to the DR site.

All the CAS machines are front-ended by F5 LTM's, both prod and DR.

We're currently using IBM TSM with their Exchange TDP to backup the prod 
stores, but we're looking to change that in the future. Idea is to let the DAG 
along with a lagged copy be the primary backup. In the DR site we're looking at 
backing up the standby copy to tape, perhaps monthly.

Exchange usage on that prod cluster is so low on everything that we're looking 
at using it for other purposes. We built overkill.

From: Eric [mailto:seag...@gmail.com]
Sent: Thursday, February 16, 2012 10:41 AM
To: MS-Exchange Admin Issues
Subject: Exchange 2010 Hardware & Backups

We are looking at deploying Exchange 2010.  I am trying to spec out the 
hardware and backup/disaster recovery plan.  We have less than 100 users but 
may increase that slowly to 200.  I've looked at the hardware recommendations 
from Microsoft but thought I'd be peoples "real world" feedback.  Most likely 
we'll be deploying a single server installation, but we'd like to utilize 
virtualization if possible. What are peoples experiences with Hyper-V and or 
VMware ESXi?  What sort of backup solutions are people using?  I looked at a 
product like Symantec Backup Exec System Recovery Server Edition for example.

My initial thoughts for hardware include:

Dual Xeon Procs
RAID 1 - OS
RAID 6 w/ Hot Spare - Exchange
16 GB RAM
Windows 2008 R2 Standard
Hyper-V -> Windows 2008 R2 Standard w/Exchange 2010

Thoughts?  Its been a while since i spec'd out a server for Exchange, and my 
last Exchange box was 2007 at a previous org.

Thanks!!
Eric



---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: Exchange 2010 Hardware & Backups

2012-02-16 Thread Young, Darren
Take a look at Veeam, has some nifty Exchange hooks for backup/restore.

From: Eric [mailto:seag...@gmail.com]
Sent: Thursday, February 16, 2012 12:03 PM
To: MS-Exchange Admin Issues
Subject: Re: Exchange 2010 Hardware & Backups

Thanks for the feedback.  I am looking at a backup solution as well as planning 
for a disaster using something like Symantecs utility which performs an image 
of the system that can be recovered on another Hyper-V or VMware host.  I have 
never used a tool like this for Exchange so thought I'd get a bit of feedback 
:)  We are looking at an affordable option for DR in addition to general 
backups.

Thanks!
Eric
On Thu, Feb 16, 2012 at 9:55 AM, Paul Hutchings 
mailto:paul.hutchi...@mira.co.uk>> wrote:
FOr 100 to 200 users gut reaction is that's absolutely fine.  The Mailbox 
Sizing Spreadsheet will help but you're not likely be taxing any half-decent 
RAID.

I'd probably increase the RAM because it's a cheap win.

Backup?  I'm not sure if you're asking just for Exchange or in general.  You 
can back Exchange up using Windows Backup and then dump the backup file to 
tape/disk with your regular backup software.


From: Eric [seag...@gmail.com]
Sent: 16 February 2012 4:41 PM

To: MS-Exchange Admin Issues
Subject: Exchange 2010 Hardware & Backups

We are looking at deploying Exchange 2010.  I am trying to spec out the 
hardware and backup/disaster recovery plan.  We have less than 100 users but 
may increase that slowly to 200.  I've looked at the hardware recommendations 
from Microsoft but thought I'd be peoples "real world" feedback.  Most likely 
we'll be deploying a single server installation, but we'd like to utilize 
virtualization if possible. What are peoples experiences with Hyper-V and or 
VMware ESXi?  What sort of backup solutions are people using?  I looked at a 
product like Symantec Backup Exec System Recovery Server Edition for example.

My initial thoughts for hardware include:

Dual Xeon Procs
RAID 1 - OS
RAID 6 w/ Hot Spare - Exchange
16 GB RAM
Windows 2008 R2 Standard
Hyper-V -> Windows 2008 R2 Standard w/Exchange 2010

Thoughts?  Its been a while since i spec'd out a server for Exchange, and my 
last Exchange box was 2007 at a previous org.

Thanks!!
Eric



---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist


MIRA Ltd

Watling Street, Nuneaton, Warwickshire, CV10 0TU, England
Registered in England and Wales No. 402570
VAT Registration  GB 100 1464 84

The contents of this e-mail are confidential and are solely for the use of the 
intended recipient.  If you receive this e-mail in error, please delete it and 
notify us either by e-mail, telephone or fax.  You should not copy, forward or 
otherwise disclose the content of the e-mail as this is prohibited.

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: internal spam

2012-02-24 Thread Young, Darren
We're implementing outbound scanning. All the Exchange servers will be sending 
through our Barracuda units.

We rate limit as well and use Return Path to monitor our external MTA addresses.

I don't think there's any way to guarantee stopping it, just mitigate as much 
as possible.

From: Sharp, Kevin 
[mailto:kevin.sh...@usask.ca]
Sent: 24 February 2012 17:20
To: MS-Exchange Admin Issues
Subject: internal spam

I'm wondering how people are dealing with compromised accounts in Exchange 
sending large volumes of email...essentially an internal spam attack.

Occasionally a phishing attempt will make it past our spam software, and of 
course the odd unsuspecting user ends up with a compromised  account which 
makes a connection to the mail system via either a compromised PC or external 
connection.

We notice this when the email starts piling up, and action can be taken 
then..but I'm wondering if there is some software or method that might have 
some more smarts.

We've had numerous incidents but so farnot an easy way to distinguish a 
potential spam attack until after it happens, and the email starts piling up in 
the retry queue.

I've looked at throttling policies and some of the transport filtering, not 
sure if that will help us much.   What are others doing?

Thanks

Kevin Sharp



---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist
"Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Hoople Ltd. You should be aware that 
Hoople Ltd. monitors its email service. This e-mail and any attached files are 
confidential and intended solely for the use of the addressee. This 
communication may contain material protected by law from being passed on. If 
you are not the intended recipient and have received this e-mail in error, you 
are advised that any use, dissemination, forwarding, printing or copying of 
this e-mail is strictly prohibited. If you have received this e-mail in error 
please contact the sender immediately and destroy all copies of it.

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: No tape Exchange 2010

2012-05-24 Thread Young, Darren
In our case right now the premium is time, not $$. We have ample capacity in 
our tape library, it just takes forever to send many many (many) TB to tape 
even over 4GB fiber to LTO-4 drives.

From: Maglinger, Paul [mailto:pmaglin...@scvl.com]
Sent: Thursday, May 24, 2012 9:52 AM
To: MS-Exchange Admin Issues
Subject: RE: No tape Exchange 2010

We were told that if we were running at least a 3 server DAG and that one of 
the databases lagged behind the other two at a DR site, that tape backups 
wouldn't be necessary.  The lagging database was in order to recover in case 
the database became corrupted and replicated.

I'm not that trusting.  I still believe in good ol' fashioned tape backups.  I 
think of it as insurance.  If you think you can get by without maximum coverage 
you can pay less of a premium.

-Paul

From: Young, Darren 
[mailto:darren.yo...@chicagobooth.edu]<mailto:[mailto:darren.yo...@chicagobooth.edu]>
Sent: Thursday, May 24, 2012 9:13 AM
To: MS-Exchange Admin Issues
Subject: No tape Exchange 2010

Is there anyone here running Exchange 2010/DAG and not doing tape backups? In 
our primary site we have 4 mailbox hosts with an active and inactive copy of 
all DB's, DR site has 2 hosts with inactive copies of most DB's. We have about 
8 TB of mail in the primary site and another 6TB in the DR site. 6500 active 
mailboxes, 15% quota at 2GB (faculty & staff) the remainder at 1GB (students). 
We then have an additional 20,000+ 20MB alumni mailboxes that we don't include 
in DR.

Tape backups in the primary site are getting, well, rather unwieldy. We 
currently use TSM with the Exchange TDP to spin copies of the inactive DB's to 
tape at the primary site.

We're considering adding a lag copy in our DR site to cover DB corruption risk. 
As far as we can tell, the only reason we still would need to spin to tape is 
to recover a deleted mailbox. We're currently hanging onto those for 30 days in 
Exchange and in theory could extend that period to cover that risk.

We don't offer item level recovery for users from tape, we hold deleted items 
for 14 days so they can do it themselves.

Looking through our tickets we see that we've only done 3 restores from tape in 
the past 6 months, 2 for "accidentally" deleted mailboxes and 1 from a 
subpoena. All three of them were over the 30 day Exchange deleted mailbox 
policy but within the 90 day window we keep backups in TSM.

Looking for any thoughts from other people not spinning Exchange 2010 to tape 
anymore.
Darren Young
Systems & Security Architect
Computing Services
University of Chicago
Booth School of Business
5807 South Woodlawn Avenue
Chicago, IL 60637
Voice 773.702.0331 | Fax 773.702.0233


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: No tape Exchange 2010

2012-05-24 Thread Young, Darren
Could you elaborate on what the root cause of that one instance was?

From: Rupprecht, James R. [mailto:jimruppre...@ku.edu]
Sent: Thursday, May 24, 2012 11:11 AM
To: MS-Exchange Admin Issues
Subject: RE: No tape Exchange 2010

We currently run a three-replica DAG in Exchange 2010 and had discussed not 
spinning tape when we stood it up. In the end we decided to let DPM 2010 back 
it up and spin tape once a week. Our backup window is only 14 days. Deleted 
item recovery is set to 14 days and deleted mailbox recovery is set to 28 days.

We have encountered one instance where none of the three database copies of a 
particular database was mountable and we had to roll back from DPM in order to 
restore service lossless. Not sure if a lagged copy would have helped in this 
situation.

Jim Rupprecht
University of Kansas

From: Bolser, Scott 
[mailto:scott.bol...@childrens.harvard.edu]<mailto:[mailto:scott.bol...@childrens.harvard.edu]>
Sent: Thursday, May 24, 2012 10:23 AM
To: MS-Exchange Admin Issues
Subject: RE: No tape Exchange 2010

We're currently building out our DB lag environment to complete our tape 
elimination project.  We have a multi-site DAG with single item recovery 
enabled equal to our current tape retention policy.  The DB lag environment 
will provide protection against db corruption.  Deleted mailbox retention will 
be set to equal our current tape retention policy in case a restore is needed 
for a legal or hr investigation.

From: Young, Darren [mailto:darren.yo...@chicagobooth.edu]
Sent: Thursday, May 24, 2012 10:34 AM
To: MS-Exchange Admin Issues
Subject: No tape Exchange 2010

Is there anyone here running Exchange 2010/DAG and not doing tape backups? In 
our primary site we have 4 mailbox hosts with an active and inactive copy of 
all DB's, DR site has 2 hosts with inactive copies of most DB's. We have about 
8 TB of mail in the primary site and another 6TB in the DR site. 6500 active 
mailboxes, 15% quota at 2GB (faculty & staff) the remainder at 1GB (students). 
We then have an additional 20,000+ 20MB alumni mailboxes that we don't include 
in DR.

Tape backups in the primary site are getting, well, rather unwieldy. We 
currently use TSM with the Exchange TDP to spin copies of the inactive DB's to 
tape at the primary site.

We're considering adding a lag copy in our DR site to cover DB corruption risk. 
As far as we can tell, the only reason we still would need to spin to tape is 
to recover a deleted mailbox. We're currently hanging onto those for 30 days in 
Exchange and in theory could extend that period to cover that risk.

We don't offer item level recovery for users from tape, we hold deleted items 
for 14 days so they can do it themselves.

Looking through our tickets we see that we've only done 3 restores from tape in 
the past 6 months, 2 for "accidentally" deleted mailboxes and 1 from a 
subpoena. All three of them were over the 30 day Exchange deleted mailbox 
policy but within the 90 day window we keep backups in TSM.

Looking for any thoughts from other people not spinning Exchange 2010 to tape 
anymore.
Darren Young
Systems & Security Architect
Computing Services
University of Chicago
Booth School of Business
5807 South Woodlawn Avenue
Chicago, IL 60637
Voice 773.702.0331 | Fax 773.702.0233


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: No tape Exchange 2010

2012-05-24 Thread Young, Darren
Thanks, that's fine.

Creepy that a single mailbox can kill an entire store.

From: Rupprecht, James R. [mailto:jimruppre...@ku.edu]
Sent: Thursday, May 24, 2012 1:58 PM
To: MS-Exchange Admin Issues
Subject: RE: No tape Exchange 2010

The real answer is that they could not figure it out (we actually shipped the 
database to Microsoft).

The best guess is that we had a single corrupt mailbox that caused corruption 
in the database indexes.

Prior to the issue one mailbox in the database was generating a warning. When I 
rolled back from tape and replayed logs the database mounted but fell over 
again within a few minutes. I restored/replayed a second time and then 
immediately moved the suspect mailbox. The database was stable after that. We 
did still move all the users out of the database and then delete and recreate 
it just to be safe.

FWIW, here is the error we were seeing when the database failed:


Error
<>
113
ExchangeStoreDB
Database recovery
N/A
At '11/11/2011 12:20:33 AM' database copy '<>' on this server 
appears to have a serious error which is unlikely to be resolved by a failover. 
Consult the Event log on the server for other storage and 'ExchangeStoreDb' 
events  for more specific information about the failure. Service recovery was 
not attempted.

I don't have the event the problem mailbox was throwing immediately available 
right now but I do remember that it was only a 'warning' not an 'error'.

Jim


From: Young, Darren 
[mailto:darren.yo...@chicagobooth.edu]<mailto:[mailto:darren.yo...@chicagobooth.edu]>
Sent: Thursday, May 24, 2012 11:37 AM
To: MS-Exchange Admin Issues
Subject: RE: No tape Exchange 2010

Could you elaborate on what the root cause of that one instance was?

From: Rupprecht, James R. [mailto:jimruppre...@ku.edu]
Sent: Thursday, May 24, 2012 11:11 AM
To: MS-Exchange Admin Issues
Subject: RE: No tape Exchange 2010

We currently run a three-replica DAG in Exchange 2010 and had discussed not 
spinning tape when we stood it up. In the end we decided to let DPM 2010 back 
it up and spin tape once a week. Our backup window is only 14 days. Deleted 
item recovery is set to 14 days and deleted mailbox recovery is set to 28 days.

We have encountered one instance where none of the three database copies of a 
particular database was mountable and we had to roll back from DPM in order to 
restore service lossless. Not sure if a lagged copy would have helped in this 
situation.

Jim Rupprecht
University of Kansas

From: Bolser, Scott 
[mailto:scott.bol...@childrens.harvard.edu]<mailto:[mailto:scott.bol...@childrens.harvard.edu]>
Sent: Thursday, May 24, 2012 10:23 AM
To: MS-Exchange Admin Issues
Subject: RE: No tape Exchange 2010

We're currently building out our DB lag environment to complete our tape 
elimination project.  We have a multi-site DAG with single item recovery 
enabled equal to our current tape retention policy.  The DB lag environment 
will provide protection against db corruption.  Deleted mailbox retention will 
be set to equal our current tape retention policy in case a restore is needed 
for a legal or hr investigation.

From: Young, Darren [mailto:darren.yo...@chicagobooth.edu]
Sent: Thursday, May 24, 2012 10:34 AM
To: MS-Exchange Admin Issues
Subject: No tape Exchange 2010

Is there anyone here running Exchange 2010/DAG and not doing tape backups? In 
our primary site we have 4 mailbox hosts with an active and inactive copy of 
all DB's, DR site has 2 hosts with inactive copies of most DB's. We have about 
8 TB of mail in the primary site and another 6TB in the DR site. 6500 active 
mailboxes, 15% quota at 2GB (faculty & staff) the remainder at 1GB (students). 
We then have an additional 20,000+ 20MB alumni mailboxes that we don't include 
in DR.

Tape backups in the primary site are getting, well, rather unwieldy. We 
currently use TSM with the Exchange TDP to spin copies of the inactive DB's to 
tape at the primary site.

We're considering adding a lag copy in our DR site to cover DB corruption risk. 
As far as we can tell, the only reason we still would need to spin to tape is 
to recover a deleted mailbox. We're currently hanging onto those for 30 days in 
Exchange and in theory could extend that period to cover that risk.

We don't offer item level recovery for users from tape, we hold deleted items 
for 14 days so they can do it themselves.

Looking through our tickets we see that we've only done 3 restores from tape in 
the past 6 months, 2 for "accidentally" deleted mailboxes and 1 from a 
subpoena. All three of them were over the 30 day Exchange deleted mailbox 
policy but within the 90 day window we keep backups in TSM.

Looking for any thoughts from other people not spinning Exchange 2010 to tape 
anymore.
Darren Young
Systems & Security Architect
Computing Services
University of Chicago
Booth Sc

RE: Google apps passwords

2012-07-26 Thread Young, Darren
Long term Shib is my preferred choice however I need a solution in place before 
the start of fall classes. I don't believe I can bring up SSO infrastructure in 
that time.

From: Steve Goodman [mailto:st...@stevieg.org]
Sent: Thursday, July 26, 2012 4:03 AM
To: MS-Exchange Admin Issues
Subject: RE: Google apps passwords

I thought they offered SAML 2.0 / Shib authentication? Would that not be a 
better option than syncing passwords to Google?

Steve

From: Young, Darren 
[mailto:darren.yo...@chicagobooth.edu]<mailto:[mailto:darren.yo...@chicagobooth.edu]>
Sent: 26 July 2012 00:01
To: MS-Exchange Admin Issues
Subject: Google apps passwords

This might not be the perfect place for this question however I think it's a 
close fit.

What are other people with AD internally doing to sync passwords to Google 
apps? The initial password can't be set (subsequent changes can) which seems to 
be less than ideal. I can't see requiring people to change their password to 
get it synced up.

Darren Young
Systems & Security Architect
Information Technology
University of Chicago
Booth School of Business
5807 South Woodlawn Avenue
Chicago, IL 60637
Voice 773.702.0331 | Fax 773.702.0233


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: iOS 6 issues with Exchange ActiveSync

2012-10-03 Thread Young, Darren
Same here, Exchange 2010 with many thousands of devices. I asked around and we 
don't have any reported issues (yet).

From: Mike Sullivan [mailto:neog...@gmail.com]
Sent: Wednesday, October 03, 2012 2:08 PM
To: MS-Exchange Admin Issues
Subject: Re: iOS 6 issues with Exchange ActiveSync

No problems to report here either. I am on an iPhone 4 running iOS 6, I am 
still on Exchange 2003. We do not have any reports of issues from any of our 
other iPhone users.
On Wed, Oct 3, 2012 at 11:13 AM, Michael B. Smith 
mailto:mich...@smithcons.com>> wrote:
Can't confirm or deny these, but to follow on my comments from yesterday and 
Monday:

https://discussions.apple.com/thread/4351951
http://www.engadget.com/2012/10/01/early-ios-6-adopters-report-problems-getting-exchange-push-email/

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist



--
Thank you,
Mike Sullivan


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: Exchange 2010 SP3, SP2 RU6 released...

2013-02-12 Thread Young, Darren
I’m not volunteering.

Is that even messed up/new versions as well then? ☺

From: pramatow...@mediageneral.com [mailto:pramatow...@mediageneral.com]
Sent: Tuesday, February 12, 2013 5:23 PM
To: MS-Exchange Admin Issues
Subject: Re: Exchange 2010 SP3, SP2 RU6 released...

Ah, thanks! So SP3 is good, right?
/still not going first:)

Blackberry

From: Steve Ens [mailto:stevey...@gmail.com]
Sent: Tuesday, February 12, 2013 05:50 PM
To: MS-Exchange Admin Issues 
mailto:exchangelist@lyris.sunbelt-software.com>>
Subject: Re: Exchange 2010 SP3, SP2 RU6 released...

The evens were always the kickers, and the odds fixed them!

On Tue, Feb 12, 2013 at 4:37 PM, 
mailto:pramatow...@mediageneral.com>> wrote:
Who wants to go first?
/not me, I can't remember if it's the odd or even ones you have to look out for.

Blackberry

From: Knoch, James W 
[mailto:james.kn...@intergraph.com]
Sent: Tuesday, February 12, 2013 05:26 PM
To: MS-Exchange Admin Issues 
mailto:exchangelist@lyris.sunbelt-software.com>>
Subject: Exchange 2010 SP3, SP2 RU6 released...

Saw this via their Twitter account (https://twitter.com/MSFTExchange)

Exchange 2010 SP3:  
http://www.microsoft.com/en-us/download/details.aspx?id=36768
KB:  http://support.microsoft.com/kb/2808208 (not published at the time of this 
email)

Exchange 2010 SP2 RU6:  
http://www.microsoft.com/en-us/download/details.aspx?id=36716
KB:  http://support.microsoft.com/kb/2746164

Also Exchange 2007 SP3 RU10:  
http://www.microsoft.com/en-us/download/details.aspx?id=36708
KB:  http://support.microsoft.com/kb/2788321

CDO update as well:  
http://www.microsoft.com/en-us/download/details.aspx?id=36771
Curiously, Exchange 2010 SP2 RU6 contains an ActiveSync loop fix:  
http://support.microsoft.com/kb/2783771

So those iOS6.1 “loop” issues may not be entirely Apple’s fault…


James

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist