RE: Store brought down by a user today
Mailbox Quotas, active monitoring and proper amount of disk capacity for overhead is a good start.
Re: Store brought down by a user today
Quota was 75/125/200 This happened in 2 hours. Documented 19GB white space then. We will be implementing new storage in the next 6 weeks. On Thu, Jun 17, 2010 at 5:18 PM, Robinson, Chuck wrote: > Mailbox Quotas, active monitoring and proper amount of disk capacity for > overhead is a good start. > >
RE: Store brought down by a user today
I vote for the "throwing them off the roof". However, a good monitoring solution would've alerted you to what is going on. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: sms adm [mailto:sms...@gmail.com] Sent: Thursday, June 17, 2010 5:12 PM To: MS-Exchange Admin Issues Subject: Store brought down by a user today This ever happen to anyone ... Had a user send a number of individual large emails (5MB+) to hundreds of people, then after sending each one, deleted his Sent folder, increasing his Deleted Items to 4GB. We were a bit lean with 8GB available to the store (file system), but we had 19GB of white space available. We lost all the space and had the store dismount. How would I stop this, other than throwing the offender off the roof :) Been quite the afternoon. Thx in advance
Re: Store brought down by a user today
Monitoring for sure before bad things happens, and take a look at the good side of the story, you have no white space now on that DB (-: Cheers, Ocd On 6/17/10, Robinson, Chuck wrote: > Mailbox Quotas, active monitoring and proper amount of disk capacity for > overhead is a good start. > > > -- Sent from my mobile device Oz Casey Dedeal Systems Engineer MVP (exchange) MCITP (EMA), MCITP (EA), MCITP (SA), MCSE 2003| M+| S+ | MCDST | Security+|Project+| Server+| http://smtp25.blogspot.com (Blog) http://telnet25.wordpress.com (Blog) http://telnet25.spaces.live.com (Blog) telne...@gmail.com https://www.mcpvirtualbusinesscard.com/VBCServer/Odedeal/interactivecard
Re: Store brought down by a user today
The "powers that be" will need more incidents like this before they are convinced to pay for MOM ... unfortunately. Should the user have been able to grow their Deleted Items to that point without problem? Thx On Thu, Jun 17, 2010 at 5:35 PM, Michael B. Smith wrote: > I vote for the “throwing them off the roof”. > > > > However, a good monitoring solution would’ve alerted you to what is going > on. > > > > Regards, > > > > Michael B. Smith > > Consultant and Exchange MVP > > http://TheEssentialExchange.com > > > > *From:* sms adm [mailto:sms...@gmail.com] > *Sent:* Thursday, June 17, 2010 5:12 PM > *To:* MS-Exchange Admin Issues > *Subject:* Store brought down by a user today > > > > This ever happen to anyone ... > > Had a user send a number of individual large emails (5MB+) to hundreds of > people, then after sending each one, deleted his Sent folder, increasing his > Deleted Items to 4GB. > We were a bit lean with 8GB available to the store (file system), but we > had 19GB of white space available. > We lost all the space and had the store dismount. > > How would I stop this, other than throwing the offender off the roof :) > > Been quite the afternoon. > > Thx in advance > -- smsadm
Re: Store brought down by a user today
There are other monitoring applications that would not cost you anything. On Thu, Jun 17, 2010 at 4:47 PM, sms adm wrote: > The "powers that be" will need more incidents like this before they are > convinced to pay for MOM ... unfortunately. > > Should the user have been able to grow their Deleted Items to that point > without problem? > > Thx > > > On Thu, Jun 17, 2010 at 5:35 PM, Michael B. Smith > wrote: > >> I vote for the “throwing them off the roof”. >> >> >> >> However, a good monitoring solution would’ve alerted you to what is going >> on. >> >> >> >> Regards, >> >> >> >> Michael B. Smith >> >> Consultant and Exchange MVP >> >> http://TheEssentialExchange.com >> >> >> >> *From:* sms adm [mailto:sms...@gmail.com] >> *Sent:* Thursday, June 17, 2010 5:12 PM >> *To:* MS-Exchange Admin Issues >> *Subject:* Store brought down by a user today >> >> >> >> This ever happen to anyone ... >> >> Had a user send a number of individual large emails (5MB+) to hundreds of >> people, then after sending each one, deleted his Sent folder, increasing his >> Deleted Items to 4GB. >> We were a bit lean with 8GB available to the store (file system), but we >> had 19GB of white space available. >> We lost all the space and had the store dismount. >> >> How would I stop this, other than throwing the offender off the roof :) >> >> Been quite the afternoon. >> >> Thx in advance >> > > > > -- > smsadm > -- Sherry Abercrombie "Any sufficiently advanced technology is indistinguishable from magic." Arthur C. Clarke
RE: Store brought down by a user today
"should" is an interesting question. I've had this discussion with the Exchange team before (because this isn't the first time I've seen this happen - probably the third time in 15 years). But in comparison to lots of other issues - it's rare. There are some changes and additional controls in this area in Exchange 2010 - but the reality is - nothing can completely protect you from "stupid user tricks". And while MOM/OpsMgr has over 800 touch-points - there are others that could've helped you here. Nagios, WhatsUp, PolyMonetc. (Note: I can no longer recommend ServersAlive, despite having used it for OVER a decade, because it doesn't support Server 2008, much less Server 2008 R2.) Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: sms adm [mailto:sms...@gmail.com] Sent: Thursday, June 17, 2010 5:48 PM To: MS-Exchange Admin Issues Subject: Re: Store brought down by a user today The "powers that be" will need more incidents like this before they are convinced to pay for MOM ... unfortunately. Should the user have been able to grow their Deleted Items to that point without problem? Thx On Thu, Jun 17, 2010 at 5:35 PM, Michael B. Smith mailto:mich...@smithcons.com>> wrote: I vote for the "throwing them off the roof". However, a good monitoring solution would've alerted you to what is going on. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: sms adm [mailto:sms...@gmail.com<mailto:sms...@gmail.com>] Sent: Thursday, June 17, 2010 5:12 PM To: MS-Exchange Admin Issues Subject: Store brought down by a user today This ever happen to anyone ... Had a user send a number of individual large emails (5MB+) to hundreds of people, then after sending each one, deleted his Sent folder, increasing his Deleted Items to 4GB. We were a bit lean with 8GB available to the store (file system), but we had 19GB of white space available. We lost all the space and had the store dismount. How would I stop this, other than throwing the offender off the roof :) Been quite the afternoon. Thx in advance -- smsadm
Re: Store brought down by a user today
On Thu, Jun 17, 2010 at 15:21, Michael B. Smith wrote: > (Note: I can no longer recommend ServersAlive, despite having used it for > OVER a decade, because it doesn’t support Server 2008, much less Server 2008 > R2.) Well that's not happy. I was thinking about upgrading, because I'm just not finding the time to put into nagios, but if that's the case, I may have to reconsider. Kurt
RE: Store brought down by a user today
For my clients that can't afford third party monitoring environments/tools, I'm using PolyMon. It works very well, and does 95% of what ServersAlive did for me. And it's "free". Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Thursday, June 17, 2010 6:38 PM To: MS-Exchange Admin Issues Subject: Re: Store brought down by a user today On Thu, Jun 17, 2010 at 15:21, Michael B. Smith wrote: > (Note: I can no longer recommend ServersAlive, despite having used it > for OVER a decade, because it doesn’t support Server 2008, much less > Server 2008 > R2.) Well that's not happy. I was thinking about upgrading, because I'm just not finding the time to put into nagios, but if that's the case, I may have to reconsider. Kurt
Re: Store brought down by a user today
I've never heard of PolyMon so thanks for the heads up, I'll check it out myself since free is good :) On Thu, Jun 17, 2010 at 3:45 PM, Michael B. Smith wrote: > For my clients that can't afford third party monitoring environments/tools, > I'm using PolyMon. It works very well, and does 95% of what ServersAlive did > for me. And it's "free". > > Regards, > > Michael B. Smith > Consultant and Exchange MVP > http://TheEssentialExchange.com > > > -Original Message- > From: Kurt Buff [mailto:kurt.b...@gmail.com] > Sent: Thursday, June 17, 2010 6:38 PM > To: MS-Exchange Admin Issues > Subject: Re: Store brought down by a user today > > On Thu, Jun 17, 2010 at 15:21, Michael B. Smith > wrote: > > > (Note: I can no longer recommend ServersAlive, despite having used it > > for OVER a decade, because it doesn’t support Server 2008, much less > > Server 2008 > > R2.) > > Well that's not happy. > > I was thinking about upgrading, because I'm just not finding the time to > put into nagios, but if that's the case, I may have to reconsider. > > Kurt > > >
Re: Store brought down by a user today
I'm curious, wouldn't mailbox limits with suitably low prohibit send thresholds have prevented this problem? Bill On Thu, Jun 17, 2010 at 4:17 PM, Eric wrote: > I've never heard of PolyMon so thanks for the heads up, I'll check it out > myself since free is good :) > > > On Thu, Jun 17, 2010 at 3:45 PM, Michael B. Smith > wrote: > >> For my clients that can't afford third party monitoring >> environments/tools, I'm using PolyMon. It works very well, and does 95% of >> what ServersAlive did for me. And it's "free". >> >> Regards, >> >> Michael B. Smith >> Consultant and Exchange MVP >> http://TheEssentialExchange.com <http://theessentialexchange.com/> >> >> >> -Original Message- >> From: Kurt Buff [mailto:kurt.b...@gmail.com] >> Sent: Thursday, June 17, 2010 6:38 PM >> To: MS-Exchange Admin Issues >> Subject: Re: Store brought down by a user today >> >> On Thu, Jun 17, 2010 at 15:21, Michael B. Smith >> wrote: >> >> > (Note: I can no longer recommend ServersAlive, despite having used it >> > for OVER a decade, because it doesn’t support Server 2008, much less >> > Server 2008 >> > R2.) >> >> Well that's not happy. >> >> I was thinking about upgrading, because I'm just not finding the time to >> put into nagios, but if that's the case, I may have to reconsider. >> >> Kurt >> >> >> >
RE: Store brought down by a user today
I have used this product for years in many different companies i have worked for http://www.ks-soft.net/hostmon.eng/regmon.htm Jean-Paul Natola > From: mich...@smithcons.com > To: exchangelist@lyris.sunbelt-software.com > Subject: RE: Store brought down by a user today > Date: Thu, 17 Jun 2010 22:45:07 + > > For my clients that can't afford third party monitoring environments/tools, > I'm using PolyMon. It works very well, and does 95% of what ServersAlive did > for me. And it's "free". > > Regards, > > Michael B. Smith > Consultant and Exchange MVP > http://TheEssentialExchange.com > > > -Original Message- > From: Kurt Buff [mailto:kurt.b...@gmail.com] > Sent: Thursday, June 17, 2010 6:38 PM > To: MS-Exchange Admin Issues > Subject: Re: Store brought down by a user today > > On Thu, Jun 17, 2010 at 15:21, Michael B. Smith wrote: > >> (Note: I can no longer recommend ServersAlive, despite having used it >> for OVER a decade, because it doesn’t support Server 2008, much less >> Server 2008 >> R2.) > > Well that's not happy. > > I was thinking about upgrading, because I'm just not finding the time to put > into nagios, but if that's the case, I may have to reconsider. > > Kurt > > _ The New Busy is not the too busy. Combine all your e-mail accounts with Hotmail. http://www.windowslive.com/campaign/thenewbusy?tile=multiaccount&ocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_4
RE: Store brought down by a user today
If nothing else, a simple sAlive! setup to monitor disk space on data drives would alert you based on thresholds you set. Erik Goldoff IT Consultant Systems, Networks, & Security ' Security is an ongoing process, not a one time event ! ' From: sms adm [mailto:sms...@gmail.com] Sent: Thursday, June 17, 2010 5:12 PM To: MS-Exchange Admin Issues Subject: Store brought down by a user today This ever happen to anyone ... Had a user send a number of individual large emails (5MB+) to hundreds of people, then after sending each one, deleted his Sent folder, increasing his Deleted Items to 4GB. We were a bit lean with 8GB available to the store (file system), but we had 19GB of white space available. We lost all the space and had the store dismount. How would I stop this, other than throwing the offender off the roof :) Been quite the afternoon. Thx in advance
RE: Store brought down by a user today
Damn, that's news to me ... I'll have to check that out Erik Goldoff IT Consultant Systems, Networks, & Security ' Security is an ongoing process, not a one time event ! ' -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com] Sent: Thursday, June 17, 2010 6:38 PM To: MS-Exchange Admin Issues Subject: Re: Store brought down by a user today On Thu, Jun 17, 2010 at 15:21, Michael B. Smith wrote: > (Note: I can no longer recommend ServersAlive, despite having used it for > OVER a decade, because it doesnt support Server 2008, much less Server 2008 > R2.) Well that's not happy. I was thinking about upgrading, because I'm just not finding the time to put into nagios, but if that's the case, I may have to reconsider. Kurt
RE: Store brought down by a user today
No one mentioned Max Recipients yet? I limit emails to 50 recipients. It helps, on top of the other ideas. From: sms adm [mailto:sms...@gmail.com] Sent: Thursday, June 17, 2010 4:12 PM To: MS-Exchange Admin Issues Subject: Store brought down by a user today This ever happen to anyone ... Had a user send a number of individual large emails (5MB+) to hundreds of people, then after sending each one, deleted his Sent folder, increasing his Deleted Items to 4GB. We were a bit lean with 8GB available to the store (file system), but we had 19GB of white space available. We lost all the space and had the store dismount. How would I stop this, other than throwing the offender off the roof :) Been quite the afternoon. Thx in advance
Re: Store brought down by a user today
Hi sms, Now that the dust has hopefully settled and you (and we) are looking into the various suggestions for preventing this in future, I just wondered if you or someone at your organization has spoken to the user involved and asked them why they did what they did and if they realized that it was a bad thing to do and to try to ascertain whether it was in fact a deliberate act. I'd be interested to hear feedback about that if at all possible, no need to go into minute detail. Thanks in advance, Andrew On 18 June 2010 12:33, Sam Cayze wrote: > No one mentioned Max Recipients yet? I limit emails to 50 recipients. > > It helps, on top of the other ideas. > > > > > > *From:* sms adm [mailto:sms...@gmail.com] > *Sent:* Thursday, June 17, 2010 4:12 PM > > *To:* MS-Exchange Admin Issues > *Subject:* Store brought down by a user today > > > > This ever happen to anyone ... > > Had a user send a number of individual large emails (5MB+) to hundreds of > people, then after sending each one, deleted his Sent folder, increasing his > Deleted Items to 4GB. > We were a bit lean with 8GB available to the store (file system), but we > had 19GB of white space available. > We lost all the space and had the store dismount. > > How would I stop this, other than throwing the offender off the roof :) > > Been quite the afternoon. > > Thx in advance > -- Kind regards, Andrew Levicki MCITP:EDST7/EMA/EA,MCSE,MCSA,MCP,CCNA,ITIL
RE: Store brought down by a user today
No. Once something has left a user's "Deleted Items" folder, it no longer counts against their quota. But it's still in the database until (at the very least) online maintenance the next morning; and depending on the settings of Deleted Item Recovery, perhaps for much longer. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Bill Songstad [mailto:bsongs...@gmail.com] Sent: Thursday, June 17, 2010 7:29 PM To: MS-Exchange Admin Issues Subject: Re: Store brought down by a user today I'm curious, wouldn't mailbox limits with suitably low prohibit send thresholds have prevented this problem? Bill On Thu, Jun 17, 2010 at 4:17 PM, Eric mailto:seag...@gmail.com>> wrote: I've never heard of PolyMon so thanks for the heads up, I'll check it out myself since free is good :) On Thu, Jun 17, 2010 at 3:45 PM, Michael B. Smith mailto:mich...@smithcons.com>> wrote: For my clients that can't afford third party monitoring environments/tools, I'm using PolyMon. It works very well, and does 95% of what ServersAlive did for me. And it's "free". Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com<http://theessentialexchange.com/> -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com<mailto:kurt.b...@gmail.com>] Sent: Thursday, June 17, 2010 6:38 PM To: MS-Exchange Admin Issues Subject: Re: Store brought down by a user today On Thu, Jun 17, 2010 at 15:21, Michael B. Smith mailto:mich...@smithcons.com>> wrote: > (Note: I can no longer recommend ServersAlive, despite having used it > for OVER a decade, because it doesn't support Server 2008, much less > Server 2008 > R2.) Well that's not happy. I was thinking about upgrading, because I'm just not finding the time to put into nagios, but if that's the case, I may have to reconsider. Kurt
RE: Store brought down by a user today
I went back and read the original post - and yes, if the items were still in the sender's Deleted Items folder, appropriate limits would've ameliorated the problem if not completely eliminated it. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Bill Songstad [mailto:bsongs...@gmail.com] Sent: Thursday, June 17, 2010 7:29 PM To: MS-Exchange Admin Issues Subject: Re: Store brought down by a user today I'm curious, wouldn't mailbox limits with suitably low prohibit send thresholds have prevented this problem? Bill On Thu, Jun 17, 2010 at 4:17 PM, Eric mailto:seag...@gmail.com>> wrote: I've never heard of PolyMon so thanks for the heads up, I'll check it out myself since free is good :) On Thu, Jun 17, 2010 at 3:45 PM, Michael B. Smith mailto:mich...@smithcons.com>> wrote: For my clients that can't afford third party monitoring environments/tools, I'm using PolyMon. It works very well, and does 95% of what ServersAlive did for me. And it's "free". Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com<http://theessentialexchange.com/> -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com<mailto:kurt.b...@gmail.com>] Sent: Thursday, June 17, 2010 6:38 PM To: MS-Exchange Admin Issues Subject: Re: Store brought down by a user today On Thu, Jun 17, 2010 at 15:21, Michael B. Smith mailto:mich...@smithcons.com>> wrote: > (Note: I can no longer recommend ServersAlive, despite having used it > for OVER a decade, because it doesn't support Server 2008, much less > Server 2008 > R2.) Well that's not happy. I was thinking about upgrading, because I'm just not finding the time to put into nagios, but if that's the case, I may have to reconsider. Kurt
Re: Store brought down by a user today
This genius user :) sent them 1 at a time, then deleted his Sent Mail and then Trash folders each time and we approximate he did this >250 times. Marketing department ... shocking On Thu, Jun 17, 2010 at 11:33 PM, Sam Cayze wrote: > No one mentioned Max Recipients yet? I limit emails to 50 recipients. > > It helps, on top of the other ideas. > > > > > > *From:* sms adm [mailto:sms...@gmail.com] > *Sent:* Thursday, June 17, 2010 4:12 PM > > *To:* MS-Exchange Admin Issues > *Subject:* Store brought down by a user today > > > > This ever happen to anyone ... > > Had a user send a number of individual large emails (5MB+) to hundreds of > people, then after sending each one, deleted his Sent folder, increasing his > Deleted Items to 4GB. > We were a bit lean with 8GB available to the store (file system), but we > had 19GB of white space available. > We lost all the space and had the store dismount. > > How would I stop this, other than throwing the offender off the roof :) > > Been quite the afternoon. > > Thx in advance > -- smsadm
Re: Store brought down by a user today
Going to give him a ring today. I was too upset to talk to him yesterday. On Thu, Jun 17, 2010 at 11:39 PM, Andrew Levicki wrote: > Hi sms, > > Now that the dust has hopefully settled and you (and we) are looking into > the various suggestions for preventing this in future, I just wondered if > you or someone at your organization has spoken to the user involved and > asked them why they did what they did and if they realized that it was a bad > thing to do and to try to ascertain whether it was in fact a deliberate act. > > I'd be interested to hear feedback about that if at all possible, no need > to go into minute detail. > > Thanks in advance, > > Andrew > > > On 18 June 2010 12:33, Sam Cayze wrote: > >> No one mentioned Max Recipients yet? I limit emails to 50 recipients. >> >> It helps, on top of the other ideas. >> >> >> >> >> >> *From:* sms adm [mailto:sms...@gmail.com] >> *Sent:* Thursday, June 17, 2010 4:12 PM >> >> *To:* MS-Exchange Admin Issues >> *Subject:* Store brought down by a user today >> >> >> >> This ever happen to anyone ... >> >> Had a user send a number of individual large emails (5MB+) to hundreds of >> people, then after sending each one, deleted his Sent folder, increasing his >> Deleted Items to 4GB. >> We were a bit lean with 8GB available to the store (file system), but we >> had 19GB of white space available. >> We lost all the space and had the store dismount. >> >> How would I stop this, other than throwing the offender off the roof :) >> >> Been quite the afternoon. >> >> Thx in advance >> > > > > -- > Kind regards, > > Andrew Levicki > MCITP:EDST7/EMA/EA,MCSE,MCSA,MCP,CCNA,ITIL > -- smsadm
RE: Store brought down by a user today
I'm curious, but what monitoring would alert you to all your whitespace getting eaten during the course of a few hours? We've got physical space free monitoring, but am not aware of proactive whitespace monitoring! Cheers Richard From: bounce-8975292-8066...@lyris.sunbelt-software.com [mailto:bounce-8975292-8066...@lyris.sunbelt-software.com] On Behalf Of Michael B. Smith Sent: 17 June 2010 22:36 To: MS-Exchange Admin Issues Subject: RE: Store brought down by a user today I vote for the "throwing them off the roof". However, a good monitoring solution would've alerted you to what is going on. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: sms adm [mailto:sms...@gmail.com] Sent: Thursday, June 17, 2010 5:12 PM To: MS-Exchange Admin Issues Subject: Store brought down by a user today This ever happen to anyone ... Had a user send a number of individual large emails (5MB+) to hundreds of people, then after sending each one, deleted his Sent folder, increasing his Deleted Items to 4GB. We were a bit lean with 8GB available to the store (file system), but we had 19GB of white space available. We lost all the space and had the store dismount. How would I stop this, other than throwing the offender off the roof :) Been quite the afternoon. Thx in advance
RE: Store brought down by a user today
Nothing that I'm aware of can monitor available whitespace, even with Squeaky Lobster turned on. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Sobey, Richard A [mailto:r.so...@imperial.ac.uk] Sent: Friday, June 18, 2010 9:11 AM To: MS-Exchange Admin Issues Subject: RE: Store brought down by a user today I'm curious, but what monitoring would alert you to all your whitespace getting eaten during the course of a few hours? We've got physical space free monitoring, but am not aware of proactive whitespace monitoring! Cheers Richard From: bounce-8975292-8066...@lyris.sunbelt-software.com [mailto:bounce-8975292-8066...@lyris.sunbelt-software.com] On Behalf Of Michael B. Smith Sent: 17 June 2010 22:36 To: MS-Exchange Admin Issues Subject: RE: Store brought down by a user today I vote for the "throwing them off the roof". However, a good monitoring solution would've alerted you to what is going on. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: sms adm [mailto:sms...@gmail.com] Sent: Thursday, June 17, 2010 5:12 PM To: MS-Exchange Admin Issues Subject: Store brought down by a user today This ever happen to anyone ... Had a user send a number of individual large emails (5MB+) to hundreds of people, then after sending each one, deleted his Sent folder, increasing his Deleted Items to 4GB. We were a bit lean with 8GB available to the store (file system), but we had 19GB of white space available. We lost all the space and had the store dismount. How would I stop this, other than throwing the offender off the roof :) Been quite the afternoon. Thx in advance
RE: Store brought down by a user today
Mailbox size limitations? From: Sam Cayze [mailto:sam.ca...@rollouts.com] Sent: Thursday, June 17, 2010 10:34 PM To: MS-Exchange Admin Issues Subject: RE: Store brought down by a user today No one mentioned Max Recipients yet? I limit emails to 50 recipients. It helps, on top of the other ideas. From: sms adm [mailto:sms...@gmail.com] Sent: Thursday, June 17, 2010 4:12 PM To: MS-Exchange Admin Issues Subject: Store brought down by a user today This ever happen to anyone ... Had a user send a number of individual large emails (5MB+) to hundreds of people, then after sending each one, deleted his Sent folder, increasing his Deleted Items to 4GB. We were a bit lean with 8GB available to the store (file system), but we had 19GB of white space available. We lost all the space and had the store dismount. How would I stop this, other than throwing the offender off the roof :) Been quite the afternoon. Thx in advance
Re: Store brought down by a user today
I have to ask ... Squeaky Lobster??? On Fri, Jun 18, 2010 at 9:21 AM, Michael B. Smith wrote: > Nothing that I’m aware of can monitor available whitespace, even with > Squeaky Lobster turned on. > > > > Regards, > > > > Michael B. Smith > > Consultant and Exchange MVP > > http://TheEssentialExchange.com > > > > *From:* Sobey, Richard A [mailto:r.so...@imperial.ac.uk] > *Sent:* Friday, June 18, 2010 9:11 AM > > *To:* MS-Exchange Admin Issues > *Subject:* RE: Store brought down by a user today > > > > I’m curious, but what monitoring would alert you to all your whitespace > getting eaten during the course of a few hours? We’ve got physical space > free monitoring, but am not aware of proactive whitespace monitoring! > > > > Cheers > > > > Richard > > > > *From:* bounce-8975292-8066...@lyris.sunbelt-software.com [mailto: > bounce-8975292-8066...@lyris.sunbelt-software.com] *On Behalf Of *Michael > B. Smith > *Sent:* 17 June 2010 22:36 > *To:* MS-Exchange Admin Issues > *Subject:* RE: Store brought down by a user today > > > > I vote for the “throwing them off the roof”. > > > > However, a good monitoring solution would’ve alerted you to what is going > on. > > > > Regards, > > > > Michael B. Smith > > Consultant and Exchange MVP > > http://TheEssentialExchange.com > > > > *From:* sms adm [mailto:sms...@gmail.com] > *Sent:* Thursday, June 17, 2010 5:12 PM > *To:* MS-Exchange Admin Issues > *Subject:* Store brought down by a user today > > > > This ever happen to anyone ... > > Had a user send a number of individual large emails (5MB+) to hundreds of > people, then after sending each one, deleted his Sent folder, increasing his > Deleted Items to 4GB. > We were a bit lean with 8GB available to the store (file system), but we > had 19GB of white space available. > We lost all the space and had the store dismount. > > How would I stop this, other than throwing the offender off the roof :) > > Been quite the afternoon. > > Thx in advance > -- smsadm
RE: Store brought down by a user today
http://msexchangeteam.com/archive/2006/06/15/427966.aspx Jim Holmgren Manager of Server Engineering XLHealth Corporation The Warehouse at Camden Yards 351 West Camden Street, Suite 100 Baltimore, MD 21201 410.625.2200 (main) 443.524.8573 (direct) 443-506.2400 (cell) www.xlhealth.com From: sms adm [mailto:sms...@gmail.com] Sent: Friday, June 18, 2010 9:24 AM To: MS-Exchange Admin Issues Subject: Re: Store brought down by a user today I have to ask ... Squeaky Lobster??? On Fri, Jun 18, 2010 at 9:21 AM, Michael B. Smith wrote: Nothing that I'm aware of can monitor available whitespace, even with Squeaky Lobster turned on. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Sobey, Richard A [mailto:r.so...@imperial.ac.uk] Sent: Friday, June 18, 2010 9:11 AM To: MS-Exchange Admin Issues Subject: RE: Store brought down by a user today I'm curious, but what monitoring would alert you to all your whitespace getting eaten during the course of a few hours? We've got physical space free monitoring, but am not aware of proactive whitespace monitoring! Cheers Richard From: bounce-8975292-8066...@lyris.sunbelt-software.com [mailto:bounce-8975292-8066...@lyris.sunbelt-software.com] On Behalf Of Michael B. Smith Sent: 17 June 2010 22:36 To: MS-Exchange Admin Issues Subject: RE: Store brought down by a user today I vote for the "throwing them off the roof". However, a good monitoring solution would've alerted you to what is going on. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: sms adm [mailto:sms...@gmail.com] Sent: Thursday, June 17, 2010 5:12 PM To: MS-Exchange Admin Issues Subject: Store brought down by a user today This ever happen to anyone ... Had a user send a number of individual large emails (5MB+) to hundreds of people, then after sending each one, deleted his Sent folder, increasing his Deleted Items to 4GB. We were a bit lean with 8GB available to the store (file system), but we had 19GB of white space available. We lost all the space and had the store dismount. How would I stop this, other than throwing the offender off the roof :) Been quite the afternoon. Thx in advance -- smsadm CONFIDENTIALITY NOTICE: This email, including attachments, is for the sole use of the intended recipient(s) and may contain confidential and/or protected health information. Under the Federal Law (HIPAA), the intended recipient is obligated to keep this information secure and confidential. Any disclosure to third parties without authorization from the member of as permitted by law is prohibited and punishable under Federal Law. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. NOTA DE CONFIDENCIALIDAD: Este facsímile, incluyendo lo adjunto, es para el uso exclusivo del destinatario(s) y puede contener información confidencial y/o información protegida de salud. En virtud de la Ley Federal (HIPAA), el destinatario tiene la obligación de mantener esta información segura y confidencial. Cualquier divulgación a terceros sin la autorización de los miembros de lo permitido por la ley está prohibido y penado en virtud de la Ley Federal. Si usted no es el destinatario, por favor, póngase en contacto con el remitente por teléfono y destruir todas las copias del mensaje original
RE: Store brought down by a user today
http://msexchangeteam.com/archive/2006/06/15/427966.aspx Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: sms adm [mailto:sms...@gmail.com] Sent: Friday, June 18, 2010 9:24 AM To: MS-Exchange Admin Issues Subject: Re: Store brought down by a user today I have to ask ... Squeaky Lobster??? On Fri, Jun 18, 2010 at 9:21 AM, Michael B. Smith mailto:mich...@smithcons.com>> wrote: Nothing that I'm aware of can monitor available whitespace, even with Squeaky Lobster turned on. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Sobey, Richard A [mailto:r.so...@imperial.ac.uk<mailto:r.so...@imperial.ac.uk>] Sent: Friday, June 18, 2010 9:11 AM To: MS-Exchange Admin Issues Subject: RE: Store brought down by a user today I'm curious, but what monitoring would alert you to all your whitespace getting eaten during the course of a few hours? We've got physical space free monitoring, but am not aware of proactive whitespace monitoring! Cheers Richard From: bounce-8975292-8066...@lyris.sunbelt-software.com<mailto:bounce-8975292-8066...@lyris.sunbelt-software.com> [mailto:bounce-8975292-8066...@lyris.sunbelt-software.com<mailto:bounce-8975292-8066...@lyris.sunbelt-software.com>] On Behalf Of Michael B. Smith Sent: 17 June 2010 22:36 To: MS-Exchange Admin Issues Subject: RE: Store brought down by a user today I vote for the "throwing them off the roof". However, a good monitoring solution would've alerted you to what is going on. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: sms adm [mailto:sms...@gmail.com<mailto:sms...@gmail.com>] Sent: Thursday, June 17, 2010 5:12 PM To: MS-Exchange Admin Issues Subject: Store brought down by a user today This ever happen to anyone ... Had a user send a number of individual large emails (5MB+) to hundreds of people, then after sending each one, deleted his Sent folder, increasing his Deleted Items to 4GB. We were a bit lean with 8GB available to the store (file system), but we had 19GB of white space available. We lost all the space and had the store dismount. How would I stop this, other than throwing the offender off the roof :) Been quite the afternoon. Thx in advance -- smsadm
RE: Store brought down by a user today
Yeh, I had someone trying to send a 1GB+ file though Outlook. A few years ago the bug existed where Outlook wouldn't refuse to send a message that breached limits until it had submitted the entire thing to the store. Anyway, this guy was also in cached exchange mode, and the sheer amount of work Outlook was trying to do to sync this item, send it, whatever, caused it to eat almost 150GB of transaction log space, and kill a storage kill dead. Good times :) From: bounce-8975271-8066...@lyris.sunbelt-software.com [mailto:bounce-8975271-8066...@lyris.sunbelt-software.com] On Behalf Of sms adm Sent: 17 June 2010 22:12 To: MS-Exchange Admin Issues Subject: Store brought down by a user today This ever happen to anyone ... Had a user send a number of individual large emails (5MB+) to hundreds of people, then after sending each one, deleted his Sent folder, increasing his Deleted Items to 4GB. We were a bit lean with 8GB available to the store (file system), but we had 19GB of white space available. We lost all the space and had the store dismount. How would I stop this, other than throwing the offender off the roof :) Been quite the afternoon. Thx in advance
RE: Store brought down by a user today
I've often thought about the time someone discovers this workaround to get an effectively unlimited mailbox size. I'd have to feed them to the pigs, of course. From: bounce-8976468-8066...@lyris.sunbelt-software.com [mailto:bounce-8976468-8066...@lyris.sunbelt-software.com] On Behalf Of Michael B. Smith Sent: 18 June 2010 12:56 To: MS-Exchange Admin Issues Subject: RE: Store brought down by a user today No. Once something has left a user's "Deleted Items" folder, it no longer counts against their quota. But it's still in the database until (at the very least) online maintenance the next morning; and depending on the settings of Deleted Item Recovery, perhaps for much longer. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Bill Songstad [mailto:bsongs...@gmail.com] Sent: Thursday, June 17, 2010 7:29 PM To: MS-Exchange Admin Issues Subject: Re: Store brought down by a user today I'm curious, wouldn't mailbox limits with suitably low prohibit send thresholds have prevented this problem? Bill On Thu, Jun 17, 2010 at 4:17 PM, Eric mailto:seag...@gmail.com>> wrote: I've never heard of PolyMon so thanks for the heads up, I'll check it out myself since free is good :) On Thu, Jun 17, 2010 at 3:45 PM, Michael B. Smith mailto:mich...@smithcons.com>> wrote: For my clients that can't afford third party monitoring environments/tools, I'm using PolyMon. It works very well, and does 95% of what ServersAlive did for me. And it's "free". Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com<http://theessentialexchange.com/> -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com<mailto:kurt.b...@gmail.com>] Sent: Thursday, June 17, 2010 6:38 PM To: MS-Exchange Admin Issues Subject: Re: Store brought down by a user today On Thu, Jun 17, 2010 at 15:21, Michael B. Smith mailto:mich...@smithcons.com>> wrote: > (Note: I can no longer recommend ServersAlive, despite having used it > for OVER a decade, because it doesn't support Server 2008, much less > Server 2008 > R2.) Well that's not happy. I was thinking about upgrading, because I'm just not finding the time to put into nagios, but if that's the case, I may have to reconsider. Kurt
RE: Store brought down by a user today
Yep. Some work was done in this area with Exchange 2010's "Dumpster 2.0" if you enable SingleItemRecovery on a mailbox. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Sobey, Richard A [mailto:r.so...@imperial.ac.uk] Sent: Friday, June 18, 2010 9:42 AM To: MS-Exchange Admin Issues Subject: RE: Store brought down by a user today I've often thought about the time someone discovers this workaround to get an effectively unlimited mailbox size. I'd have to feed them to the pigs, of course. From: bounce-8976468-8066...@lyris.sunbelt-software.com [mailto:bounce-8976468-8066...@lyris.sunbelt-software.com] On Behalf Of Michael B. Smith Sent: 18 June 2010 12:56 To: MS-Exchange Admin Issues Subject: RE: Store brought down by a user today No. Once something has left a user's "Deleted Items" folder, it no longer counts against their quota. But it's still in the database until (at the very least) online maintenance the next morning; and depending on the settings of Deleted Item Recovery, perhaps for much longer. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Bill Songstad [mailto:bsongs...@gmail.com] Sent: Thursday, June 17, 2010 7:29 PM To: MS-Exchange Admin Issues Subject: Re: Store brought down by a user today I'm curious, wouldn't mailbox limits with suitably low prohibit send thresholds have prevented this problem? Bill On Thu, Jun 17, 2010 at 4:17 PM, Eric mailto:seag...@gmail.com>> wrote: I've never heard of PolyMon so thanks for the heads up, I'll check it out myself since free is good :) On Thu, Jun 17, 2010 at 3:45 PM, Michael B. Smith mailto:mich...@smithcons.com>> wrote: For my clients that can't afford third party monitoring environments/tools, I'm using PolyMon. It works very well, and does 95% of what ServersAlive did for me. And it's "free". Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com<http://theessentialexchange.com/> -Original Message- From: Kurt Buff [mailto:kurt.b...@gmail.com<mailto:kurt.b...@gmail.com>] Sent: Thursday, June 17, 2010 6:38 PM To: MS-Exchange Admin Issues Subject: Re: Store brought down by a user today On Thu, Jun 17, 2010 at 15:21, Michael B. Smith mailto:mich...@smithcons.com>> wrote: > (Note: I can no longer recommend ServersAlive, despite having used it > for OVER a decade, because it doesn't support Server 2008, much less > Server 2008 > R2.) Well that's not happy. I was thinking about upgrading, because I'm just not finding the time to put into nagios, but if that's the case, I may have to reconsider. Kurt
Re: Store brought down by a user today
DID Andrew get the girl? :) On Fri, Jun 18, 2010 at 9:26 AM, Jim Holmgren wrote: > http://msexchangeteam.com/archive/2006/06/15/427966.aspx > > > > > > Jim Holmgren > > Manager of Server Engineering > > XLHealth Corporation > > The Warehouse at Camden Yards > > 351 West Camden Street, Suite 100 > > Baltimore, MD 21201 > > 410.625.2200 (main) > > 443.524.8573 (direct) > > 443-506.2400 (cell) > > www.xlhealth.com > > > > > > > > *From:* sms adm [mailto:sms...@gmail.com] > *Sent:* Friday, June 18, 2010 9:24 AM > > *To:* MS-Exchange Admin Issues > *Subject:* Re: Store brought down by a user today > > > > I have to ask ... Squeaky Lobster??? > > On Fri, Jun 18, 2010 at 9:21 AM, Michael B. Smith > wrote: > > Nothing that I’m aware of can monitor available whitespace, even with > Squeaky Lobster turned on. > > > > Regards, > > > > Michael B. Smith > > Consultant and Exchange MVP > > http://TheEssentialExchange.com > > > > *From:* Sobey, Richard A [mailto:r.so...@imperial.ac.uk] > *Sent:* Friday, June 18, 2010 9:11 AM > > > *To:* MS-Exchange Admin Issues > *Subject:* RE: Store brought down by a user today > > > > I’m curious, but what monitoring would alert you to all your whitespace > getting eaten during the course of a few hours? We’ve got physical space > free monitoring, but am not aware of proactive whitespace monitoring! > > > > Cheers > > > > Richard > > > > *From:* bounce-8975292-8066...@lyris.sunbelt-software.com [mailto: > bounce-8975292-8066...@lyris.sunbelt-software.com] *On Behalf Of *Michael > B. Smith > *Sent:* 17 June 2010 22:36 > *To:* MS-Exchange Admin Issues > *Subject:* RE: Store brought down by a user today > > > > I vote for the “throwing them off the roof”. > > > > However, a good monitoring solution would’ve alerted you to what is going > on. > > > > Regards, > > > > Michael B. Smith > > Consultant and Exchange MVP > > http://TheEssentialExchange.com > > > > *From:* sms adm [mailto:sms...@gmail.com] > *Sent:* Thursday, June 17, 2010 5:12 PM > *To:* MS-Exchange Admin Issues > *Subject:* Store brought down by a user today > > > > This ever happen to anyone ... > > Had a user send a number of individual large emails (5MB+) to hundreds of > people, then after sending each one, deleted his Sent folder, increasing his > Deleted Items to 4GB. > We were a bit lean with 8GB available to the store (file system), but we > had 19GB of white space available. > We lost all the space and had the store dismount. > > How would I stop this, other than throwing the offender off the roof :) > > Been quite the afternoon. > > Thx in advance > > > > > -- > smsadm > > CONFIDENTIALITY NOTICE: This email, including attachments, is for the sole > use of the intended recipient(s) and may contain confidential and/or > protected health information. Under the Federal Law (HIPAA), the intended > recipient is obligated to keep this information secure and confidential. Any > disclosure to third parties without authorization from the member of as > permitted by law is prohibited and punishable under Federal Law. If you are > not the intended recipient, please contact the sender by reply e-mail and > destroy all copies of the original message. > > NOTA DE CONFIDENCIALIDAD: Este mensaje incluyendo cualquier anejo es para > uso exclusivo del (los) destinatario (s) y puede incluir información > confidencial y/o información de salud protegida. La Ley Federal (HIPAA) > establece que el destinatario está obligado a mantener la información > confidencial y sequra. HIPAA prohíbe y castiga cualquier divulgación a > terceras personas sin autorización del afiliado o permitido por ley. Si > usted no es el destinatario, redirija esta mensaje al remitente, y destruye > cualquier copia existente del mensaje original. -- smsadm
RE: Store brought down by a user today
Probably, I'm sure he's rich LOL > Date: Fri, 18 Jun 2010 09:46:34 -0400 > Subject: Re: Store brought down by a user today > From: sms...@gmail.com > To: exchangelist@lyris.sunbelt-software.com > > DID Andrew get the girl? :) > > On Fri, Jun 18, 2010 at 9:26 AM, Jim Holmgren> wrote: > > > > > > > > > > > > > > > > http://msexchangeteam.com/archive/2006/06/15/427966.aspx > > > > > > > > > > > > > Jim Holmgren > > > > Manager of Server Engineering > > > > XLHealth Corporation > > > > The Warehouse at Camden Yards > > > > 351 West Camden Street, Suite 100 > > > > Baltimore, MD 21201 > > > > 410.625.2200 (main) > > > > 443.524.8573 (direct) > > > > 443-506.2400 (cell) > > > > www.xlhealth.com > > > > > > > > > > > > > > > > > > From: sms adm > [mailto:sms...@gmail.com] > > Sent: Friday, June 18, 2010 9:24 AM > > > To: MS-Exchange Admin Issues > > Subject: Re: Store brought down by a user today > > > > > > > > > > I have to ask ... Squeaky > Lobster??? > > > > > > On Fri, Jun 18, 2010 at 9:21 AM, Michael B. Smith> wrote: > > > > > > > > Nothing > that I’m aware of can monitor available whitespace, even with Squeaky Lobster > turned on. > > > > > > > > > > > > Regards, > > > > > > > > Michael > B. Smith > > > > Consultant > and Exchange MVP > > > > http://TheEssentialExchange.com > > > > > > > > > > > > > > > > From: Sobey, Richard A > [mailto:r.so...@imperial.ac.uk] > > > Sent: Friday, June 18, 2010 9:11 AM > > > > > > > > > To: MS-Exchange Admin Issues > > Subject: RE: Store brought down by a user today > > > > > > > > > > > > > > > > > > > > I’m curious, but what monitoring would alert you to all your > whitespace getting eaten during the course of a few hours? We’ve got physical > space free monitoring, but am not aware of proactive whitespace monitoring! > > > > > > > > Cheers > > > > > > > > Richard > > > > > > > > > > > > From: bounce-8975292-8066...@lyris.sunbelt-software.com > [mailto:bounce-8975292-8066...@lyris.sunbelt-software.com] On > Behalf Of Michael B. Smith > > Sent: 17 June 2010 22:36 > > To: MS-Exchange Admin Issues > > Subject: RE: Store brought down by a user today > > > > > > > > > > > > I > vote for the “throwing them off the roof”. > > > > > > > > However, > a good monitoring solution would’ve alerted you to what is going on. > > > > > > > > Regards, > > > > > > > > Michael > B. Smith > > > > Consultant > and Exchange MVP > > > > http://TheEssentialExchange.com > > > > > > > > From: sms adm [mailto:sms...@gmail.com] > > Sent: Thursday, June 17, 2010 5:12 PM > > To: MS-Exchange Admin Issues > > Subject: Store brought down by a user today > > > > > > > > This > ever happen to anyone ... > > > > Had a user send a number of individual large emails (5MB+) to hundreds of > people, then after sending each one, deleted his Sent folder, increasing his > Deleted Items to 4GB. > > We were a bit lean with 8GB available to the store (file system), but we had > 19GB of white space available. > > We lost all the space and had the store dismount. > > > > How would I stop this, other than throwing the offender off the roof :) > > > > Been quite the afternoon. > > > > Thx in advance > > > > > > > > > > > > > > > > > > > -- > > smsadm > > > > > > > > > > > > > CONFIDENTIALITY NOTICE: This email, including attachments, is for the sole > use of the intended recipient(s) and may contain confidential and/or > protected health information. Under the Federal Law (HIPAA), the intended > recipient is obligated to keep this information secure and confidential. Any > disclosure to third parties without authorization from the member of as > permitted by law is prohibited and punishable under Federal Law. If you are > not the intended recipient, please contact the sender by reply e-mail and > destroy all copies of the original message. > > > > NOTA DE CONFIDENCIALIDAD: Este mensaje incluyendo cualquier anejo es para uso > exclusivo del (los) destinatario (s) y puede incluir información confidencial > y/o información de salud protegida. La Ley Federal (HIPAA) establece que el > destinatario está obligado a mantener la información confidencial y sequra. > HIPAA prohíbe y castiga cualquier divulgación a terceras personas sin > autorización del afiliado o permitido por ley. Si usted no es el > destinatario, redirija esta mensaje al remitente, y destruye cualquier copia > existente del mensaje original. > > > > > > -- > smsadm _ The New Busy think 9 to 5 is a cute idea. Combine multiple calendars with Hotmail. http://www.windowslive.com/campaign/thenewbusy?tile=multicalendar&ocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_5
Re: Store brought down by a user today
Sounds like a user with too much time on their hands. On Fri, Jun 18, 2010 at 8:40 AM, sms adm wrote: > This genius user :) sent them 1 at a time, then deleted his Sent Mail and > then Trash folders each time and we approximate he did this >250 times. > Marketing department ... shocking > > On Thu, Jun 17, 2010 at 11:33 PM, Sam Cayze wrote: > >> No one mentioned Max Recipients yet? I limit emails to 50 recipients. >> >> >> It helps, on top of the other ideas. >> >> >> >> >> >> *From:* sms adm [mailto:sms...@gmail.com] >> *Sent:* Thursday, June 17, 2010 4:12 PM >> >> *To:* MS-Exchange Admin Issues >> *Subject:* Store brought down by a user today >> >> >> >> This ever happen to anyone ... >> >> Had a user send a number of individual large emails (5MB+) to hundreds of >> people, then after sending each one, deleted his Sent folder, increasing his >> Deleted Items to 4GB. >> We were a bit lean with 8GB available to the store (file system), but we >> had 19GB of white space available. >> We lost all the space and had the store dismount. >> >> How would I stop this, other than throwing the offender off the roof :) >> >> Been quite the afternoon. >> >> Thx in advance >> > > > > -- > smsadm >
