[Exchange] RE: SBS2011 Exchange 2010 databases not showing MOVE LOCAL ability

2017-11-29 Thread Orlebeck, Geoffrey
2010 databases not showing MOVE LOCAL ability It reclaims whitespace just fine. It doesn't RELEASE whitespace. :-) -Original Message- From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Orlebeck, Geoffrey Sent: Wednesday, November 29, 2017 3:55

[Exchange] RE: SBS2011 Exchange 2010 databases not showing MOVE LOCAL ability

2017-11-29 Thread Orlebeck, Geoffrey
Remember Exchange doesn't reclaim whitespace on the underlying disk. If you have a 100GB database file (MBD1), move 50GB to another database file (MBD2), the original (MBD1) will not shrink on the disk. It just won't claim anymore disk space until it's utilized all the available whitespace withi

[Exchange] RE: Security Groups and '-Automapping'

2017-08-17 Thread Orlebeck, Geoffrey
method to selectively disable automapping. If you do not want this behavior, then use something like: https://gallery.technet.microsoft.com/office/Granting-Mailbox-Full-02566894 From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com]

[Exchange] Security Groups and '-Automapping'

2017-08-17 Thread Orlebeck, Geoffrey
We're running Exchange 2010, and from my research neither Exchange 2010 nor 2013 support automapping when granting a security group 'FullAccess' access rights. I cannot find anything about Exchange 2016. Can anyone confirm if Exchange 2016 supports this? Or is the only way to iterate over the g

[Exchange] Cross-Forest Calendar Access:

2017-07-25 Thread Orlebeck, Geoffrey
Environment: We have 2 AD Forests (FFL: 2008 R2) with a two-way transitive trust running Exchange 2010 SP3 UR15. Our standard for room mailboxes is to create universal groups for the various calendar roles (Reviewer, Editor, etc.). These are Universal scoped groups so they cannot contain object

[Exchange] RE: Potentially OT: Exchange Objects in AD

2017-04-13 Thread Orlebeck, Geoffrey
So *under* our 'System Public Folders'... Thanks, Geoff From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Orlebeck, Geoffrey Sent: Thursday, April 13, 2017 1:00 PM To: 'exchange@lists.myitforum.com' Subject: [Exchange] RE: Pote

[Exchange] RE: Potentially OT: Exchange Objects in AD

2017-04-13 Thread Orlebeck, Geoffrey
can suggest is to move a couple of PF objects and see what happens over a couple of days. If there is a problem, those particular PFs should break fairly quickly. From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com] On Behalf O

[Exchange] RE: Potentially OT: Exchange Objects in AD

2017-04-13 Thread Orlebeck, Geoffrey
Don't want to be a pest, just curious if anyone can comment on the below scenario. It boils down to: Can I move the AD objects without impacting the underlying services? Do Public Folders or any of the other Exchange resources care about where the objects exist in AD? Thanks, Geoff ---

[Exchange] Potentially OT: Exchange Objects in AD

2017-04-12 Thread Orlebeck, Geoffrey
This is more of an Active Directory question, but it relates directly to the Exchange objects. For whatever reason, we have two 'Microsoft Exchange System Objects' containers. One in the root of the domain, another one level down in another Organizational Unit, for example 'LegacyStuff'. CN=Mi

[Exchange] RE: Removing Self-Issued Cert:

2017-03-31 Thread Orlebeck, Geoffrey
hange] RE: Removing Self-Issued Cert: Use openssl to determine what cert is actually being presented. Or turn up logging on the relevant receive and send connectors and examine those logs for the third-party. The LAST certificate set for use by SMTP should be the one that is used, except interna

[Exchange] RE: Removing Self-Issued Cert:

2017-03-29 Thread Orlebeck, Geoffrey
hich should use the internal default certificate. From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com] On Behalf Of Orlebeck, Geoffrey Sent: Tuesday, March 28, 2017 10:24 AM To: 'exchange@lists.myitforum.com' Subject: [Exchange] Remo

[Exchange] Removing Self-Issued Cert:

2017-03-28 Thread Orlebeck, Geoffrey
We run Exchange 2010 in a two-node DAG. There is a third-party hosted product that we have an IPsec VPN with, but they fail to send email as they do not trust the certificate being presented to them. On each node, there is a self-signed certificate each server has issued to itself (EXSRVR1/EXSRV

[Exchange] Auto-Forward Question:

2016-10-12 Thread Orlebeck, Geoffrey
Running Exchange 2010 SP3. We setup a generic shared mailbox "sha...@domain.com". A select few of the users also want a copy of messages sent to that mailbox. I created a Distribution Group and setup forwarding via the Delivery Options in Mail Flow Settings. However, I wanted to hide the Distri

[Exchange] Exchange Federation Gateway:

2016-10-06 Thread Orlebeck, Geoffrey
We are running Exchange 2010 SP3. We have federation working for our primary email domain (montagehealth.org). We added a second email domain (example.org), however if a user only has the "example.org" smtp address, federation fails. If we add a "montagehealth.org" address then everything federa

[Exchange] Cross-Forest RBAC:

2016-09-20 Thread Orlebeck, Geoffrey
We have two separate forests with two-way transitive trusts between them. We are working on consolidating them down to a single forest single domain. However, in the interim we want to allow Helpdesk staff from one forest (Forest A) to create/manage mailboxes in the other forest (Forest B). From

[Exchange] LegacyExchangeDN set to ADCDisabledMail

2015-02-10 Thread Orlebeck, Geoffrey
We are seeing EventID 9217 on our CAS servers about more than one AD object having "imceaex-adcdisabledm...@domain.com". It's alerting in our SCOM environment now. I have gone through and was able to find the entry, but there are hundreds (we disable users but rarely delete them out of AD). I'm

[Exchange] Outlook/Exchange 2010 Encryption:

2015-02-05 Thread Orlebeck, Geoffrey
Just a quick question, I am referencing here (https://technet.microsoft.com/en-us/library/ee332317(v=exchg.141).aspx) and I see it says in Exchange 2010 RTM default behavior was to encrypt RPC endpoint by default, but in SP1, it is no longer the case. We are discussing our internal email commun

[Exchange] Monitor Ex2010:

2014-12-01 Thread Orlebeck, Geoffrey
Just had an issue over the weekend where two separate environments running on top of our DMZ cluster stopped receiving external email after a networking change on the ESX hosts. Both environments are setup with one edge server and one HUB/CAS server (Ex2010 SP3 UR4 across all VMs). Emails were t

RE: [Exchange] Jounaling

2014-11-13 Thread Orlebeck, Geoffrey
Exchange will store everything, searching it is another matter. EMC SourceOne has been a solid product for our archival needs. Thanks, Geoff From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Michael B. Smith Sent: Thursday, November 13, 2014 3:43 PM To: e

[Exchange] RE: otp: Lync 2013 compliance logging

2014-11-06 Thread Orlebeck, Geoffrey
Lync has an archiving piece that allows you to offload to a separate SQL DB and you can use SSRS to report against it. That's how we do it here. Thanks, Geoff From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Senter, John Sent: Thursday, November 06, 2014

[Exchange] RE: Reset Default permissions

2014-11-06 Thread Orlebeck, Geoffrey
If there are only particular bad addresses, you could also use NK2 Edit to backup and then migrate addresses to the new AutoStream file that will get created. Even though it's called "NK2 Edit" it will work on AutoStream.dat files. http://www.nirsoft.net/utils/outlook_nk2_edit.html Just a t

[Exchange] RE: DNS external records and Testconnectivity

2014-10-22 Thread Orlebeck, Geoffrey
s of folks with Windows Essentials are doing it also. I admit that I had forgotten about that. From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com] On Behalf Of Orlebeck, Geoffrey Sent: Wednesday, October 22, 2014

[Exchange] RE: DNS external records and Testconnectivity

2014-10-22 Thread Orlebeck, Geoffrey
ts and it is failing. So since I don't test daily I am not sure when it broke. I will look at the TMG but I believe I have a rule there already. From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com] On Behalf Of Orlebec

[Exchange] RE: DNS external records and Testconnectivity

2014-10-22 Thread Orlebeck, Geoffrey
nnectivity _autodiscover._tcp IN SRV 0 0 443 autodiscover.imcu.com Would the above be correct to ask my DNS authority to add? From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com] On Behalf Of Orlebeck, Geoffrey Sent: Wednesday, October 22,

[Exchange] RE: DNS external records and Testconnectivity

2014-10-22 Thread Orlebeck, Geoffrey
et my certs straight. Geez Thanks all From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com] On Behalf Of Orlebeck, Geoffrey Sent: Wednesday, October 22, 2014 2:02 PM To: 'exchange@lists.myitforum.com' Subject: [Ex

[Exchange] RE: DNS external records and Testconnectivity

2014-10-22 Thread Orlebeck, Geoffrey
Sorry, to answer the question, you want the SRV record on your external DNS. Thanks, Geoff From: Orlebeck, Geoffrey Sent: Wednesday, October 22, 2014 11:02 AM To: 'exchange@lists.myitforum.com' Subject: RE: DNS external records and Testconnectivity Well (someone can jump in and cor

[Exchange] RE: DNS external records and Testconnectivity

2014-10-22 Thread Orlebeck, Geoffrey
: [Exchange] RE: DNS external records and Testconnectivity That is internal? Or both? From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com] On Behalf Of Orlebeck, Geoffrey Sent: Wednesday, October 22, 2014 1:51 PM To: 'exchan

[Exchange] RE: DNS external records and Testconnectivity

2014-10-22 Thread Orlebeck, Geoffrey
m.com> [mailto:listsad...@lists.myitforum.com] On Behalf Of Orlebeck, Geoffrey Sent: Wednesday, October 22, 2014 1:38 PM To: 'exchange@lists.myitforum.com' Subject: [Exchange] RE: DNS external records and Testconnectivity I ran into this a couple months back. IIRC the /Autodis

[Exchange] RE: DNS external records and Testconnectivity

2014-10-22 Thread Orlebeck, Geoffrey
.@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com] On Behalf Of Orlebeck, Geoffrey Sent: Wednesday, October 22, 2014 1:38 PM To: 'exchange@lists.myitforum.com' Subject: [Exchange] RE: DNS external records and Testconnectivity I ran int

[Exchange] RE: DNS external records and Testconnectivity

2014-10-22 Thread Orlebeck, Geoffrey
I ran into this a couple months back. IIRC the /Autodiscover/* path had to be added to the publishing rule in TMG. I may have created a separate rule strictly for Autodiscover, though I am not sure if that was necessary or I did it to isolate the changes being made. From: listsad...@lists.myitf

RE: [Exchange] Server Migration: Quick Contacts Failing

2014-09-16 Thread Orlebeck, Geoffrey
iling You should be able to add contract records for them, and then add X500 address objects to the contacts. From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com] On Behalf Of Orlebeck, Geoffrey Sent: Tuesday, September 16, 2

RE: [Exchange] Server Migration: Quick Contacts Failing

2014-09-16 Thread Orlebeck, Geoffrey
sad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com] On Behalf Of Orlebeck, Geoffrey Sent: Tuesday, September 16, 2014 10:05 AM To: 'exchange@lists.myitforum.com' Subject: RE: [Exchange] Server Migration: Quick Contacts Failing Excuse my lack of clarity, I misused so

RE: [Exchange] Server Migration: Quick Contacts Failing

2014-09-16 Thread Orlebeck, Geoffrey
e this address. Outlook contacts are locally-managed only; no server-side fix. Since there are so few re-create them properly on the server and continue to have users delete them as the problem comes up. On Sep 15, 2014, at 14:11, "Orlebeck, Geoffrey" mailto:geoffrey.orleb...@chomp.

[Exchange] Server Migration: Quick Contacts Failing

2014-09-15 Thread Orlebeck, Geoffrey
All: We performed a migration where we took a domain that was previously hosted on our company's Exchange server (Company1.com) and migrated them to their own AD/Exchange environment (company2.com). We migrated the x500 addresses from when Company 2 was on our network so company2.com so users

RE: [Exchange] Exchange 2010 Federation

2014-07-23 Thread Orlebeck, Geoffrey
: Orlebeck, Geoffrey Sent: Wednesday, July 23, 2014 11:36 AM To: 'exchange@lists.myitforum.com' Subject: RE: [Exchange] Exchange 2010 Federation That sounded confusing, I meant to say “With the guide you shared, I have already been able to setup federation trusts between two domains”. Thanks, G

RE: [Exchange] Exchange 2010 Federation

2014-07-23 Thread Orlebeck, Geoffrey
That sounded confusing, I meant to say “With the guide you shared, I have already been able to setup federation trusts between two domains”. Thanks, Geoff From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Orlebeck, Geoffrey Sent: Wednesday, July 23, 2014

RE: [Exchange] Exchange 2010 Federation

2014-07-23 Thread Orlebeck, Geoffrey
: exchange@lists.myitforum.com Subject: Re: [Exchange] Exchange 2010 Federation always welcome. good luck! On Wed, Jul 23, 2014 at 11:06 AM, Orlebeck, Geoffrey mailto:geoff.orleb...@chomp.org>> wrote: This guide is much clearer than the others I had come across. Thank you for sharing! Geoff

RE: [Exchange] Exchange 2010 Federation

2014-07-23 Thread Orlebeck, Geoffrey
up the Microsoft Federation trust; and then you add your sister companies as organization relationships. It has to be set up in both domains, and then (usually) it just works. On Tue, Jul 22, 2014 at 4:39 PM, Orlebeck, Geoffrey mailto:geoff.orleb...@chomp.org>> wrote: Hello group! We have a couple

[Exchange] Exchange 2010 Federation

2014-07-22 Thread Orlebeck, Geoffrey
Hello group! We have a couple sister companies with their own AD/Exchange environments that we manage. It's come to a point where the main campus and the sister companies want to share calendar information for scheduling meetings/resources between their domains. This will be my first time sett

[Exchange] RE: OWA with TMG 2010

2014-06-19 Thread Orlebeck, Geoffrey
ge with login sending users directly to inbox instead of a second OWA login page. From: Orlebeck, Geoffrey Sent: Thursday, June 19, 2014 9:11 AM To: 'exchange@lists.myitforum.com' Subject: RE: OWA with TMG 2010 I'll do a check against those as well. I may have mucked up the info by

[Exchange] RE: OWA with TMG 2010

2014-06-19 Thread Orlebeck, Geoffrey
y way. http://www.scorpionsoft.com/docs/authanvil/owatmg/ From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com] On Behalf Of Orlebeck, Geoffrey Sent: Thursday, June 19, 2014 11:33 AM To: exchange@lists.myitforum.com<mailto:exchange

[Exchange] RE: OWA with TMG 2010

2014-06-19 Thread Orlebeck, Geoffrey
I'm still hitting my head against this one, so I'm just asking one more time if anyone may have some ideas out there. I modified the post a little to hopefully offer some clarity. Thanks. Previous Post: I have an Exchange 2010 SP3 CAS that is protected by an Ex2010 Edge Transport server with T

[Exchange] OWA with TMG 2010

2014-06-17 Thread Orlebeck, Geoffrey
Hello group, have an issue that I've been troubleshooting this week and am turning here for some help. I have an Exchange 2010 SP3 CAS w/ Edge Transport and TMG 2010 sitting in a DMZ on the perimeter. This Exchange server belongs to Company B and is being hosted in our environment (Company A). W

[Exchange] RE: Rejoin Exchange to New Domain?

2014-06-09 Thread Orlebeck, Geoffrey
o New Domain? Exchange will not work in that scenario. Period. Nor will SCCM. From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com] On Behalf Of Orlebeck, Geoffrey Sent: Monday, June 9, 2014 5:33 PM To: exchange@lists.my

[Exchange] RE: Rejoin Exchange to New Domain?

2014-06-09 Thread Orlebeck, Geoffrey
For clarity, the Exchange server is dedicated to Exchange and the SCCM server is dedicated to SCCM. Didn't mean for that to look like they were living on the same box. Thanks, Geoff From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Orlebeck, Geo

[Exchange] Rejoin Exchange to New Domain?

2014-06-09 Thread Orlebeck, Geoffrey
I was instructed to build out an Exchange server on a domain provided to me. Performed the initial install (along with SCCM), but then it was discovered the internal domain and the registered web domain are different. Because of SSL certificate implications and some other non-Exchange domain imp

[Exchange] RE: Setting up a test server

2014-05-28 Thread Orlebeck, Geoffrey
What do you need to do with the PST file? If it's just mounting/browsing the PST, you can create a second Outlook profile on a local workstation and open the PST file from there without any need for Exchange. If you must perform an action that requires the EMC/EMS/Mgmt tools from Exchange itself

RE: [Exchange] CAS exposure - Exchange 2013 SP1

2014-05-09 Thread Orlebeck, Geoffrey
I'm curious if the below methodology applies to Exchange 2010 as well (removing OWA/ECP/EWS directories so external CAS is ActiveSync only)? Thanks. From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of ccollins9 Sent: Friday, May 09, 2014 8:34 AM To: exchang

[Exchange] Exchange TMG Config Export/Import

2014-05-07 Thread Orlebeck, Geoffrey
I'm not sure if this is the best/proper place to ask this question, so if I should be looking elsewhere, just let me know and I'll be on my way with apologies. We are going to be onboarding a few sister companies and hosting their separate Exchange boxes in our datacenters. We are separating ev