How to prevent user select [From] pick random user, and send fake email to other user?

February 18, 2016, 10:51 pm

≫ Next: A list of all calendars a user has access to

≪ Previous: Exchange Migration within site

dear Sirs,

In our organization we have setup 03 mail server Microsoft Exchange 2010 SP3: 01 for Client Access and Hub transport, 02 Mailbox database. All email client using Outlook 2010 or Outlook 2013.

We have one issue about user fake the sender to send violent email to other. The scenario as follow: User A create New Email, and select [From] button, and then select user B, send to user C. User C receive the email with header is from User B. But exactly, this email send from User A.

Anybody have ever seen this situation, please teach me how to deal with it.

Thanks for read.

↧

A list of all calendars a user has access to

May 7, 2014, 10:28 am

≫ Next: get-mailbox does not show all mailboxes

≪ Previous: How to prevent user select [From] pick random user, and send fake email to other user?

Hi All,

My situation is as follows, I would like to create a report that will provide me with a list of mailbox calendars where a specific user has permissions and what permissions they have. A simple task, but one that keeps delivering me a roadblock. I haven't started the second part as I keep hitting this wall.

Heres what I've come up with so far:
get-mailbox -resultsize unlimited | get-mailboxfolderpermission "${$_.Name}:\Calendar" | Where {$_.User -like "Some User Name"}

For each mailbox in $mailboxes it spits out the following error:
The input object cannot be bound to any parameters for the command either because the command does not take pipeline input or the input and its properties do not match any of the parameters that take pipeline input.
+ CategoryInfo : InvalidArgument: (MailboxName:PSObject) [Get-MailboxFolderPermission], ParameterBindingException
+ FullyQualifiedErrorId : InputObjectNotBound,Get-MailboxFolderPermission

What am I doing wrong?

Running this on Exchange 2010 SP3 / Powershell Version 2.0

Thanks

↧

get-mailbox does not show all mailboxes

May 12, 2015, 2:19 am

≫ Next: Is DAG can have 2 IP online at the same time?

≪ Previous: A list of all calendars a user has access to

Hi,

i have test of Exchange 2013 SP1 CU7. Seems, that all works good. Users can login over OWA, send emails each other.

In ECP i see all 50 mailboxes. In powershell - only one! Why? how i can fix it?

[PS] C:\>get-mailbox -Identity "*"

Name                      Alias                ServerName       ProhibitSendQuota
----                      -----                ----------       -----------------
User 1                     User 1                 ex1              Unlimited

[PS] C:\>Get-Mailboxdatabase

Name                           Server          Recovery        ReplicationType
----                           ------          --------        ---------------
Mailbox Database 1363112588    EX1             False           None
base1                          EX1             False           None
all                            EX1             False           None

User 1 belong to base1, but into this base there are more mailboxes.

Thank you!

↧

Is DAG can have 2 IP online at the same time?

February 21, 2016, 4:12 pm

≫ Next: Allowing Free/Busy Time for a Group

≪ Previous: get-mailbox does not show all mailboxes

Is Exchange DAG can have 2 IP online at the same time?

↧

Allowing Free/Busy Time for a Group

February 14, 2016, 3:51 pm

≫ Next: Meeting Room (Resources) Booking in Exchange 2013

≪ Previous: Is DAG can have 2 IP online at the same time?

Hi,

I have an Exchange 2013 Multi-tenant environment with several customers. Linked mailboxes are used in most cases (the obvious exception is for equipment mailboxes, etc).

As per Microsoft's guidance, all 'default' permissions on mailbox calendars have been removed, and a group is added (different group for each customer) with the 'AvailabilityOnly' permission.

The problem is that when scheduling a meeting in Outlook, the free/busy time is not available. If I change the 'default' permission to 'AvailabilityOnly', free/busy information is available.

I have tried creating the group in EAC and PowerShell. eg:

New-DistributionGroup -Name "CUSTOMER-NAME" -OrganizationalUnit "OU" -SamAccountName "CUSTOMER-NAME" -PrimarySMTPAddress CUSTOMER-NAME@EMAIL-DOMAIN -Type Security

I apply the permissions to the mailbox like this:

Add-MailboxFolderPermission LINKED-MAILBOX:\calendar -User GROUP -AccessRights AvailabilityOnly

I have confirmed that this is a universal mail-enabled group, but still no access. Is there something I'm missing? Is there a special requirement for linked-mailboxes?

Thanks

↧

Meeting Room (Resources) Booking in Exchange 2013

February 22, 2016, 1:10 am

≫ Next: Event ID 4625 - unknown username or bad password

≪ Previous: Allowing Free/Busy Time for a Group

Our meeting room is limited to 8 people.

How can we force reserving meeting room if the total number of attendees exceed more than 8 ?

is this possible to restrict the number of invitation sent?

hussain

↧

Event ID 4625 - unknown username or bad password

March 20, 2014, 10:43 am

≫ Next: Hide a user in GAL and show in Specific Address List

≪ Previous: Meeting Room (Resources) Booking in Exchange 2013

The Security Log on my Exchange 2013 server is loaded up with Event ID 4625 Audit Failures. I get the following every couple seconds:

An account failed to log on.

Subject:

Security ID: NULL SID

Account Name: -

Account Domain: -

Logon ID: 0x0

Logon Type: 3

Account For Which Logon Failed:

Security ID: NULL SID

Account Name: HealthMailbox538adf120d884da3a932f7bc3b22a320@**********.com

Account Domain:

Failure Information:

Failure Reason: Unknown user name or bad password.

Status: 0xC000006D

Sub Status: 0xC0000064

Process Information:

Caller Process ID: 0x0

Caller Process Name: -

Network Information:

Workstation Name: *****

Source Network Address: ::1

Source Port: 60354

Detailed Authentication Information:

Logon Process: NtLmSsp

Authentication Package: NTLM

Transited Services: -

Package Name (NTLM only): -

Key Length: 0

This event is generated when a logon request fails. It is generated on the computer where access was attempted.

The Subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.

The Logon Type field indicates the kind of logon that was requested. The most common types are 2 (interactive) and 3 (network).

The Process Information fields indicate which account and process on the system requested the logon.

The Network Information fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.

The authentication information fields provide detailed information about this specific logon request.

- Transited services indicate which intermediate services have participated in this logon request.

- Package name indicates which sub-protocol was used among the NTLM protocols.

- Key length indicates the length of the generated session key. This will be 0 if no session key was requested.

The account name is sometimes listed as "HealthMailbox" followed by a long string of characters @domain.com. Other times there won't be anything listed for the Account name. I can't figure out what is causing this?

Nate

↧

Hide a user in GAL and show in Specific Address List

February 19, 2016, 11:18 am

≫ Next: MSExchange Front End HTTP Proxy Event ID 2002

≪ Previous: Event ID 4625 - unknown username or bad password

Hi,

I need to hide a user in GAL and this user should only visible in a specific Address List. Is it possible?

Regards,

Anees

↧

MSExchange Front End HTTP Proxy Event ID 2002

March 9, 2015, 2:04 pm

≫ Next: EBD file size issue (Reduce)

≪ Previous: Hide a user in GAL and show in Specific Address List

Since we upgraded to Echange 2013 CU7 we have been seeing this in the CAS server event logs

Source: MSExchange Front End HTTP Proxy

Date: 3/9/2015 2:41:41 PM

Event ID: 2002

Task Category: Core

Level: Warning

Keywords: Classic

User: N/A

Computer: Exchangeserver.domain.com

Description:

[Eas] The number of outstanding requests for guard TargetBackend("vpw1202exch01.bellevue.edu") has exceeded the max limit 150. Current request will be rejected.

I saw someone else had reported this on TechNet, going back to July last year and it looked like it may be something triggered when they upgraded to SP1 but no answer was provided. Does anyone know what causes this and how I can resolve it?

↧

EBD file size issue (Reduce)

February 11, 2015, 8:40 pm

≫ Next: Reset "from" address in messages sent to spam mailbox

≪ Previous: MSExchange Front End HTTP Proxy Event ID 2002

I need to know what is the procedure to reduce the .edb file size for exchange 2013 and exchange 2010. I delete lots of mailbox from database but still .edb size not decrease.

Please suggest step by step.

↧

Reset "from" address in messages sent to spam mailbox

February 23, 2016, 8:10 am

≫ Next: Exchange 2010 Resource Mailbox Minor Configuration

≪ Previous: EBD file size issue (Reduce)

Can someone tell me how to reset the "from" address which appears messages redirected to the spam mailbox.

I have filtering setup and working fine, just that the "from" address is wrong.

CarolChi

↧

Exchange 2010 Resource Mailbox Minor Configuration

February 23, 2016, 9:00 pm

≫ Next: Changing Master account of linked mail box in Exchange Server 2013

≪ Previous: Reset "from" address in messages sent to spam mailbox

Hi Guys,

Small buy annoying one I'm hoping to get some assistance with...We have a 2010 environment all working correctly however we've recently discovered that when users are booking reoccurring meetings the alert sent to them from the meeting room actually shows a US formatted date (See below for example) All other settings are shown in the correct format and all servers show the correct region... Any ideas?

Your request was accepted.

Your request was accepted through 3/4/2016. #Meant to be 4/3/2016#

All times listed are in the following time zone: (UTC+10:00) Canberra, Melbourne, Sydney

Sent by Microsoft Exchange Server 2010

↧

Changing Master account of linked mail box in Exchange Server 2013

February 2, 2016, 9:07 pm

≫ Next: Exchange 2013 logon storm. Outlook "retry work offline cancel"

≪ Previous: Exchange 2010 Resource Mailbox Minor Configuration

in our DC we have 2 exchange servers 2013

we have 2 exchange servers.

while creating Linked Mail box in the Exchange1 Web interface, I select the same exchange for mail box creation site. Then it works fine, I can later change master account in Exchange1 Maangement Shell.

Issue will be in the following scenario

I create linked mail box in the exchange1 server Web interface, while creating I select other exchange2 server as mail box creation target(I mean it creates mailbox in another exchange2 server).

After this I try to change Master account in the management shell of exchange server 1. It throws error

-----------------------------

$secpasswd=ConvertTo-SecureString "P@ssw0rd1" -AsPlainText -Force
$mycreds = New-Object System.Management.Automation.PSCredential("TESTUSER\Administrator",$secpasswd)

Set-Mailbox -Identity:'testexch.local/CountyIssue/lmb2' -DomainController:'DC1.testexch.local' -LinkedDomainController:'Account.testuser.local' -LinkedCredential:$mycreds -LinkedMasterAccount:'testuser\MA54' -Confirm:$False -Force:$True

---------
Set-Mailbox
{Identity=testexch.local/lmb_OU/lmb2, DomainController=DC1.testexch.local, LinkedDomainController=Account.testuser.local, LinkedCredential=System.Management.Automation.PSCredential, LinkedMasterAccount=testuser.local/CountyIssue/MA54, Confirm=False, Force=True}
testexch.local/Users/Administrator
S-1-5-21-4234369167-21792470-2810238229-500
S-1-5-21-4234369167-21792470-2810238229-500
Remote-PowerShell-Unknown
7968 w3wp#MSExchangePowerShellAppPool

3
00:00:00.3906164
View Entire Forest: 'False', Default Scope: 'testexch.local', Configuration Domain Controller: 'DC1.testexch.local', Preferred Global Catalog: 'DC1.testexch.local', Preferred Domain Controllers: '{ DC1.testexch.local }'
Microsoft.Exchange.Configuration.CmdletProxyException: Error on proxy command 'Set-Mailbox -Identity:'testexch.local/lmb_OU/lmb2' -DomainController:'DC1.testexch.local' -LinkedDomainController:'Account.testuser.local' -LinkedCredential:'System.Management.Automation.PSCredential' -LinkedMasterAccount:'testuser.local/CountyIssue/MA54' -Confirm:$False -Force:$True' to server WIN-AG2MPTI7C3D.testexch.local: Server version 15.00.0847, Proxy method RPS: Cannot process argument transformation on parameter 'LinkedCredential'. Cannot convert the "System.Management.Automation.PSCredential" value of type "System.String" to type "System.Management.Automation.PSCredential".. at Microsoft.Exchange.Configuration.Tasks.Task.ThrowError(Exception exception, ErrorCategory errorCategory, Object target, String helpUrl) at Microsoft.Exchange.Configuration.Tasks.Task.WriteError(Exception exception, ErrorCategory category, Object target, Boolean reThrow) at Microsoft.Exchange.Configuration.Tasks.Task.WriteError(LocalizedException exception, ExchangeErrorCategory category, Object target) at Microsoft.Exchange.Configuration.Tasks.ProxyModule.ProxyCmdletExecution(CmdletProxyInfo cmdletProxyInfo) at Microsoft.Exchange.Configuration.Tasks.ProxyModule.ProxyCmdlet(CmdletProxyInfo cmdletProxyInfo) at Microsoft.Exchange.Configuration.Tasks.ProxyModule.ProxyCmdletOnException(Object sender, GenericEventArg`1 e) at Microsoft.Exchange.Configuration.Tasks.CriticalFeatureHelper.Execute(ICriticalFeature feature, Action action, TaskContext taskContext, String methodNameInLog) at Microsoft.Exchange.Configuration.Tasks.TaskEvent.ExecuteEventHandler[T](T e, Delegate handler) at Microsoft.Exchange.Configuration.Tasks.TaskEvent.TriggerEvent[T](EventHandler`1 eventHandler, T e, Boolean inReversedOrder) at Microsoft.Exchange.Configuration.Tasks.Task.ProcessError(Exception exception, Boolean terminating) at Microsoft.Exchange.Configuration.Tasks.Task.ProcessRecord() at System.Management.Automation.CommandProcessor.ProcessRecord()
ServerOperation

False

1 objects execution has been proxied to remote server.

0
ActivityId: 962a00e2-96a3-4d9a-bc35-02a9ae3cd51b
ServicePlan:;IsAdmin:True;

en-US

-----------------------------

Thanks, Harish

↧

Exchange 2013 logon storm. Outlook "retry work offline cancel"

January 28, 2016, 4:35 am

≫ Next: Windows XP Machines Always Prompt for Credentials (Exchange 2013, Outlook 2010)

≪ Previous: Changing Master account of linked mail box in Exchange Server 2013

We have 5 virtual server high performance Exchange 2013 (CU 11)
Every morning, users are experiencing problems with the input "retry work offline cancel". This "logon storm" continued for 2 hours.
For the same number of users with lower performance servers Exchange 2010 such problems did not arise.
Wireshark shows the network traffic delay authorization by more than 20 seconds.

Guys, tell me what you can improve performance and fix errors in the configuration, so that such problems do not arise?

↧

Windows XP Machines Always Prompt for Credentials (Exchange 2013, Outlook 2010)

November 19, 2012, 2:24 pm

≫ Next: Lock down Exchange 2013 ECP to internal access only

≪ Previous: Exchange 2013 logon storm. Outlook "retry work offline cancel"

I am running Exchange 2013 on Server 2012 Datacenter (VM). Windows 7 clients with Outlook 2010 work fine. Windows XP clients with Outlook 2010 prompt for credentials (user name and password) each time Outlook is started, and checking the "Remember my password" box does not prevent this from happening the next time. The "Always prompt for logon credentials" checkbox on the "Security" tab of the "More Settings" section of the Exchange account is not checked. I have found a myriad of posts with similar issues, but they all seem to have to do with SBS/Exchange 2007, and I haven't come across something that works as a solution for me. One suggested certificate issues, and I was having certificate security warnings, but I got that resolved. I am hopefuly that the fact that this only happens on Windows XP will be telling.

↧

Lock down Exchange 2013 ECP to internal access only

April 4, 2013, 6:05 am

≫ Next: Exchange error id 74 Connection leak detected for key

≪ Previous: Windows XP Machines Always Prompt for Credentials (Exchange 2013, Outlook 2010)

I'm concerned about the ECP on Exchange 2013 being accessible from the outside world. Is there a preferred method of disabling access to ECP from the outside while still allowing OWA and everything else?

Vincent Sprague

↧

Exchange error id 74 Connection leak detected for key

March 31, 2014, 2:29 am

≫ Next: Configure "Save As"

≪ Previous: Lock down Exchange 2013 ECP to internal access only

I found error on my Mailbox server and can't find any description for this error:

(Process w3wp.exe, PID 3728) Connection leak detected for key contoso.ua/Enterprise Administrators/Exch_administrator in Microsoft.Exchange.Configuration.Authorization.WSManBudgetManager class. Leaked Value 2.

Source:MSExchange RBAC

Event ID:74

Task Category:RBAC

Level: Error

Log Name: Application

Exch_administrator - this is my user account. Any suggestion what it is can be?

↧

Configure "Save As"

February 21, 2016, 6:27 am

≫ Next: Deleting specific email in all mailboxes of Exchange ask for confirmation

≪ Previous: Exchange error id 74 Connection leak detected for key

I'm having problem configure "Save As" in exchange 2010/

I'm giving the permission, but still I got error massage when trying to send the mail.

↧

Deleting specific email in all mailboxes of Exchange ask for confirmation

February 25, 2016, 8:16 pm

≫ Next: OAB.xml is throwing 404 (although it is there)

≪ Previous: Configure "Save As"

When I run this cmd why I have a msg to confirm deletion in mailboxes that I'm sure they don't contain the email from the sender? Is it normal?

Get-mailbox -resultSize unlimited | search-mailbox –searchquery "From:senderXYZ@.domain.com -deletecontent

Confirm
Deleting content from mailboxes DOMAIN/User
[Y] Yes [A] Yes to All [N] No [L] No to All [?] Help (default is "Y"):

↧