You could throw an OWA front end server in the DMZ, put certificate on as Ed
suggests, and then wrap everything up in an IPSEC packet that goes between
the front end and backend. Between the client on the net and the front end,
you would use SSL, so just open 443.
-Original Message-
Hi all
I have Power Control which I use to extract mailboxes when necessary.
But my version only works up to 250 mailboxes. What would you recommend
for 250+ mailboxes?
Regards
Aaron Shimmons
Network Administrator
_
List
I did reply to this but am not sure if it came through.
Thanks Tony that was a great help - forgot about the retention time -
d'oh. I did have a bit of trouble doing this tho as when I deleted the
user, there was no red cross against the mailbox so I could not
re-attach. Ran clean-up agent
Vitamin Fortified Power Control ?
- Original Message -
From: Aaron Shimmons [EMAIL PROTECTED]
To: Exchange Discussions [EMAIL PROTECTED]
Sent: Wednesday, September 17, 2003 3:20 AM
Subject: Extracting to pst
Hi all
I have Power Control which I use to extract mailboxes when necessary.
Why not do increments of 250?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Andy David
Sent: Wednesday, September 17, 2003 7:44 AM
To: Exchange Discussions
Subject: Re: Extracting to pst
Vitamin Fortified Power Control ?
- Original Message -
Hi All,
I'm getting about a 10% failure rate on our intrasite mailbox migrations from 5.5 to
E2K. The errors indicate some kind of corruption in the mailbox per Q264119, although
not apparent to the user. Has anyone found a quick fix or workaround for this
particular error. Thanks.
Liz
Hi Ben,
Microsoft Professional Product Services talked me through this. Their
approach allows you to move them back to the correct place if needed.
Have you learned nothing from the replies? Don't manually move the log
files. EVER. The Exchange Optimizer will move them for you. Safely.
It
I have experienced this as well in a pure 5.5 environment. I choose to
stop AV, move the mailboxes, start AV and do an on-demand scan. I also
stopped the flow of incoming internet mail to it (had it caching on
another server).
I suspect this also can happen if a user is accessing the mailbox
I thought the software would only read mailbox stores of up to 250
users!
Regards
Aaron Shimmons
Network Administrator
-Original Message-
From: Woodruff, Michael [mailto:[EMAIL PROTECTED]
Sent: 17 September 2003 12:52
To: Exchange Discussions
Subject: RE: Extracting to pst
Why
What version do you have? We have the latest version which is not
limited to 250 users.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Aaron Shimmons
Sent: Wednesday, September 17, 2003 8:20 AM
To: Exchange Discussions
Subject: RE: Extracting to pst
I
Version 11 Business
-Original Message-
From: Woodruff, Michael [mailto:[EMAIL PROTECTED]
Sent: 17 September 2003 13:27
To: Exchange Discussions
Subject: RE: Extracting to pst
What version do you have? We have the latest version which is not
limited to 250 users.
-Original
THat is the direction I'd prefer to go. However:
We are migrating from a mainframe mail system that has a Bulletin Board
feature. They want me to duplicate the feature.
When you subscribe to their BB, you get any new messages to the BBs that
you subscribed to.
I'm trying to figure out how I
But if you keep on dumping new data into the same PST, eventually it
will grow quite large, even if your online mailbox limit is low.
Sincerely,
Andrey Fyodorov
Systems Engineer
Messaging and Collaboration
Spherion
-Original Message-
From: Ken Cornetet [mailto:[EMAIL PROTECTED]
Sent:
Yeah, but you can easily specify that only the front-end server could
use those ports.
Sincerely,
Andrey Fyodorov
Systems Engineer
Messaging and Collaboration
Spherion
-Original Message-
From: Ed Crowley [mailto:[EMAIL PROTECTED]
Sent: Tuesday, September 16, 2003 7:25 PM
To: Exchange
IPSec is a nice idea too. But you need to test test test.
Sincerely,
Andrey Fyodorov
Systems Engineer
Messaging and Collaboration
Spherion
-Original Message-
From: Leeann McCallum [mailto:[EMAIL PROTECTED]
Sent: Tuesday, September 16, 2003 7:32 PM
To: Exchange Discussions
Subject: RE:
Upgrade to the Enterprise version.
- Original Message -
From: Aaron Shimmons [EMAIL PROTECTED]
To: Exchange Discussions [EMAIL PROTECTED]
Sent: Wednesday, September 17, 2003 3:20 AM
Subject: Extracting to pst
Hi all
I have Power Control which I use to extract mailboxes when necessary.
Don't forget you also have to fully protect the front end server from
all the other servers on the DMZ from which it is not isolated.
Those other systems may have been placed on the DMZ in an insecure state
with the thought that if anyone broke them, they would be isolated from
the internal
Dear all,
We use newprof.exe to automatically create outlook profile for users as
part of the logon script process.
The current version of newprof.exe is 5.0.1457.3.
The version works very well for Outlook 98 but not Outlook 2000 onwards.
It generates error message about Microsoft Exchange
It's called a newsgroup and Outlook Express works great for accessing them.
-Original Message-
From: Ron [mailto:[EMAIL PROTECTED]
Sent: Wednesday, September 17, 2003 5:45 AM
To: Exchange Discussions
Subject: RE: Creating an automated Bulletin Board System HELP
THat is the direction
Exchange servers do all this nice work discovering route failures by
sending linkstate probe messages among themselves. But they keep this
info to themselves. Wouldn't it be nice if this information could be
displayed? Are there any tools out there that do such a visual?
Not sure if this got posted, but...
I did that, is there anything else? Do I need to add that domain into the allow relay?
Users can use their outlook to get the mail, but when they try to send they get the
550 relay denied. These outlook users are in remote locations and are using Outlook
I added that. Anything else I need to do? Users can get their mail via pop, but now
when they try to send they get the 550 error.
-Original Message-
From: Ed Crowley [mailto:[EMAIL PROTECTED]
Sent: Monday, September 15, 2003 6:01 PM
To: Exchange Discussions
Subject: Re: E2k multiple
How about Winroute in the support directory?
- Original Message -
From: Fyodorov, Andrey [EMAIL PROTECTED]
To: Exchange Discussions [EMAIL PROTECTED]
Sent: Wednesday, September 17, 2003 10:39 AM
Subject: is there a way to display LinkState?
Exchange servers do all this nice work
I was just thinking about something that could be displayed on a support
person's (datacenter operator's) screen.
-Original Message-
From: Andy David [mailto:[EMAIL PROTECTED]
Sent: Wednesday, September 17, 2003 10:45 AM
To: Exchange Discussions
Subject: Re: is there a way to display
Winroute
reskit
-Original Message-
From: Fyodorov, Andrey [mailto:[EMAIL PROTECTED]
Sent: Wednesday, September 17, 2003 8:40 AM
To: Exchange Discussions
Subject: is there a way to display LinkState?
Exchange servers do all this nice work discovering route failures by
sending linkstate
Make sure they are authenticating properly and that you have relaying with
authentication turned on.
-Original Message-
From: Steck, Herb [mailto:[EMAIL PROTECTED]
Sent: Tuesday, September 16, 2003 2:00 PM
To: Exchange Discussions
Subject: RE: E2k multiple domains
Not sure if this got
Hello,
I keep looking for the solution to this particular problem, but have found
no success with Microsoft's knowledgebase or any other site I've looked at.
According to all the sources I've read I'm doing it correctly, but here
goes;
Windows 2000 server SP3, Computer GPO software distribution
Argh!
Sorry about this, I meant to send it to the NT list. But, of course, if any
of you can help... ;)
Matt
-Original Message-
From: Matt Hoffman [mailto:[EMAIL PROTECTED]
Sent: Wednesday, September 17, 2003 11:00 AM
To: Exchange Discussions
Subject: Computer GPO software
I'm pretty sure you can access link information via WMI too, so if you
wanted to code something...
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Fyodorov,
Andrey
Sent: Wednesday, September 17, 2003 9:47 AM
To: Exchange Discussions
Subject: RE: is there
Check out the white paper at the attached link, if describes the
different versions of Newprof and may be of value to you.
http://imanami.com/downloadcenter/support/docs/Imanami%20OProfile%20vs%2
0Microsoft%20Resource%20Kit%20Tools.pd
Forgive the promo, but when you get tired of wrestling with
Sorry the correct link is:
http://imanami.com/downloadcenter/support/docs/Imanami%20OProfile%20vs%2
0Microsoft%20Resource%20Kit%20Tools.pdf
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Lalor, Kevin
Sent: Wednesday, September 17, 2003 8:57 AM
To:
We are running exchange 5.5 sp4 on a win2k sp3 server. I have been using
outlook 2003 beta for a long time (I now have the final version installed)
and apparently it has left some garbage in my inbox and the administrators
(which I also open with my profile).
I only found out about this when I
So, the only thing that sees a bad message is the brick level backup? I's just stop
doing it. It's certainly possible that OL2003 has items that BE9.0 doesn't
understand.
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alverson, Tom
Sent: Wednesday,
Nope, I think the number of mailboxes you can read is based on the
licenses you purchased. It is a great piece of software. One of my 5.5
customers does snapshot backups to a NAS and they use it all the time.
- Jim sends
-Original Message-
From: Aaron Shimmons [mailto:[EMAIL
I have a client needing to migrate about 6000 users from one Exchange 2000
Organization to another Exchange 2000 migration (InterOrg)... Does anyone
have any good tools or places to look for resources?
thanks...
_
List posting FAQ:
Windows NT 4.0 SRP
Exchange 5.5 SP4
Outlook 2000
Greetings All.
The Boss's secretary has put a calendar item into his Public Folder calendar
and now cannot edit or delete it. She claims to have entered it just like
all of his other calendar items, however, when I open this one it's listed
as a
In one shot or are the two orgs going to co-exist for a while?
Sincerely,
Andrey Fyodorov
Systems Engineer
Messaging and Collaboration
Spherion
-Original Message-
From: J Martin [mailto:[EMAIL PROTECTED]
Sent: Wednesday, September 17, 2003 2:08 PM
To: Exchange Discussions
Subject:
Quick question.
When restricting RPC to one known port by adding REG_DWORD TCP/IP Port
to HKEY_LOCAL_MACHINE\CurrentControlSet\Services\NTDS\Parameters, does
this need to be done on EVERY Win2k server, or just the ADs, GCs, and
Exchange Back-End Servers?
-Yanek.
just apply the durn patch. Sheesh.
- Original Message -
From: Yanek Korff [EMAIL PROTECTED]
To: Exchange Discussions [EMAIL PROTECTED]
Sent: Wednesday, September 17, 2003 4:07 PM
Subject: Locking down RPC; winexch2k
Quick question.
When restricting RPC to one known port by adding
That is a good possibility. I'll try to exmerge it and see if that
generates any errors. I did download the latest build from Veritas instead
of installing the older build off of the CD.
-Original Message-
From: Webb, Andy [mailto:[EMAIL PROTECTED]
Sent: Wednesday, September 17, 2003
How much $ is this software??
-Original Message-
From: McBee, Jim [mailto:[EMAIL PROTECTED]
Sent: Wednesday, September 17, 2003 1:01 PM
To: Exchange Discussions
Subject: RE: Extracting to pst
Nope, I think the number of mailboxes you can read is based on the licenses
you purchased. It
We use a Network Appliance NetCache in the DMZ as a reverse proxy SSL
front end. Internet OWA users hit the NetCache with HTTPS, and the
NetCache decrypts and forwards HTTP to a front-end server. Works great,
but was a little pricey.
Also, because OWA likes to send out absolute URLs, there is a
Everything will fail on a mailbox that's over two gbytes that pushes the
data to a pst file.
Outlook 11 is supposed to have fixed this, though.
John Matteson
Geac Corporate ISS
(404) 239 - 2981
Atlanta, Georgia, USA.
-Original Message-
From: Alverson, Tom [mailto:[EMAIL PROTECTED]
Shutdown Exchange 5.5 .. Run ESEUTIL and ISINTEG against the
priv.edb/pub.edb as necessary.
Read and heed all documented warnings and have a full backup before you
start.
John Matteson
Geac Corporate ISS
(404) 239 - 2981
Atlanta, Georgia, USA.
-Original Message-
From: Ashraph,
I don't do that. Here's the basics of what I do:
Exmerge (with various command line switches that I'm too lazy to look up
right now).
Cd \exmergedata
Del pst.9.zip
Ren pst.8.zip pst.9.zip
Ren pst.7.zip pst.8.zip
...
Ren pst.zip pst.1.zip
Zip -m -9 pst.zip *.pst
This is in a batch file that gets
Outlook 98 Exchange 5.5 Windows 2000 SP3
We are experiencing problems where Outlook just locks up and needs bounced
to continue. We were looking at the Server Health Monitor and was wondering
about the Store Instance Level should be? We noticed when we are having
problems ours is averaging 235.
I've been thinking a lot about this, and decided to go with another approach. I'm
going to create another network, connected to the Exchange server, and allow clients
to VPN into that network. It doesn't have access to any other resources, and is empty
except for OWA (for now anyway). And no
I have to admit to being a little confused, how would ISA help, aside from being a
proxy? Which isn't nothing, but I'm wondering if I'm missing something else.
Thanks,
Erick
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Webb, Andy
Sent: Wednesday,
Just a thought, but by default, computer accounts are placed in a folder, not in an
OU. GPOs will apply to computers in an OU, but not in a folder.
Erick
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Matt Hoffman
Sent: Wednesday, September 17, 2003
ISA is a better solution in a DMZ because it doesn't
require the plethora of holes in the internal
firewall.
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/isa/deploy/isaexch.asp
Requiring VPN (your other message) is a good idea,
however, you may be coming back to
First, a little background. I installed Exchange 2000 on a new LAN server, which was
the only server in the domain. After some testing, we realized that the server would
become quickly overloaded. So, I moved a new server into the domain, made it a domain
controller, and installed Exchange but
We talked about this exact scenario. We decided that given how easy it is to install a
key logger, and other malware, on public systems we decided it was too risky. We are
planning on using public folders quite heavily with data that we can't risk getting
out. Same with the address books.
We
While going through my event logs, I ran into a series of errors. They are expected,
as detailed in Q322837. However, I am setting up a system where I'll get notified when
an error occurs. Is there any way to suppress these errors, or fix the problem?
Thanks,
Erick
We have set up our OWA to require two-factor authentication (SecurID)
which eliminates any key-logging concerns but this system is not cheap
at approx $300 AU ($160 US) per user.
The upside is that you can use the same system to authenticate all of
your remote access users (dial-up, VPN, etc)
Sorry, I should have said that it eliminates any key-logging concerns
related to authentication - it obviously can't stop the actual recording
of keystrokes by key-logging software.
It will however, basically eliminate the possibility of someone gaining
access to your email system using
I'm surprised how quiet this group is being regarding this issue. This has potentially
enormous ramifications. For one thing, this effectively breaks reverse-DNS lookups
that anti-spam applications use to verify sending domains as being valid.
Come on now, Verisign is masking the difference
Yes, it sucks. Write to ICANN.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jason Clishe
Sent: Wednesday, September 17, 2003 10:22 PM
To: Exchange Discussions
Subject: RE: All .COM / .NET domain names now exist
I'm surprised how quiet this group is
57 matches
Mail list logo