Reverse proxy in front of Exchang 2013 - what is needed on the Exchange part?

May 13, 2016, 3:17 pm

≪ Previous: Remove Legacy Server After Migration Send Connectors

Running an apache as reverse proxy. It seems to work - in the sense that I can access the apache from a browser, and it proxies me to the Exchange server. (http://url/owa)

But then apparently Exchange redirects me to /owa/auth... and this causes the browser to access the http://exhange/owa/auth url directly... not letting the apache proxy it.

My idea is to have a proxy at https://domain.yup and let it proxy http://exchange.int/owa

I have unticked the "require SSL" in IIS. But as 2013 is new to me, I am a bit unclear of how to do it correctly.

Maybe someone will point me to a how-to page or similar?

Thanks, Lars.

↧

Hide notes attribute in OWA GAL

May 5, 2016, 7:58 pm

≫ Next: Recovery license from Old Server(server not start via GUI)

≪ Previous: Reverse proxy in front of Exchang 2013 - what is needed on the Exchange part?

Hi,

Could you pls help me on how to hide notes attribute in Exchange 2010 OWA GAL.

I was able to do the same for outlook GAL using template editor and it did not effect for OWA GAL.

appreciate your quick support on this.

Regards

Sridhar.

↧

Recovery license from Old Server(server not start via GUI)

May 13, 2016, 2:46 am

≫ Next: Lots of warnings 1035 SmtpReceive

≪ Previous: Hide notes attribute in OWA GAL

I havea server runningExchangeServer 2007that theharddisc isdamagednow, Ialreadyrecoveredemail fromallusersand installedona differentserver,but nowI need to recoverthe ExchangeServer 2007license toputit in anotherserver.

CurrentlyI cannotlogin in the old server, only I canaccessvia UNC(run ->\\ servername \->enter)

Iwouldliketo check the old Exchangelicenseto usethe new. Can you help me with some suggestions

regards

↧

Lots of warnings 1035 SmtpReceive

December 12, 2012, 9:32 am

≫ Next: Exchange 2013 and 2010 Co-coexistence certificate security alert

≪ Previous: Recovery license from Old Server(server not start via GUI)

I get lots of warnings 1035 MSExchangeFrontEndTransport, SmtpReceive. Receiving mail is no problem. Details:

Inbound authentication failed with error LogonDenied for Receive connector Client Frontend ITSPECSRV. The authentication mechanism is Login. The source IP address of the client who tried to authenticate to Microsoft Exchange is [::1].

Leo

↧

Exchange 2013 and 2010 Co-coexistence certificate security alert

May 2, 2016, 12:59 am

≫ Next: OnPremisesSmtpClientSubmissionMonitor Reporting as Unhealthy on CAS servers

≪ Previous: Lots of warnings 1035 SmtpReceive

Our exchange setup is Exchange 2013 and 2010 Co-coexistence as below:

Exchange 2010:

There CAS servers 2010 and one CAS array.
Two MX server 2010 (DAG)

Exchange 2013:

Two exchange servers (MX+CAS)

We are uninstalling exchange 2010 servers, two CAS servers and one mailbox have been removed, we still have CAS array with one exchange 2010, although if you check the CAS array on exchange 2010 PowerShell (Get-casarray) we noticed that exchange 2013 servers are included.

The problem is after two CAS servers uninstallation some users randomly start receiving security certificate alert from many exchange servers in organization (from any AD site) and from any version (2010 and 2013). If he press yes the message will never pop up again unless he reopen the outlook.

In spite of receiving this message the outlook will be connected.

My question is, why outlook (2010 and 2013) checks the certificates for random servers although outlook connect auto discover automatically and successfully.

Also, Can I delete the CAS array since I have one CAS server?

Thanks

Best Regards, Fadi.F.Haddad

↧

OnPremisesSmtpClientSubmissionMonitor Reporting as Unhealthy on CAS servers

August 17, 2015, 4:25 am

≫ Next: Unable to reseed failed content indexes

≪ Previous: Exchange 2013 and 2010 Co-coexistence certificate security alert

We recently patched our servers to CU9. The FrontendTransport\OnPremisesSmtpClientSubmissionMonitor now reports it is Unhealthy. In the monitoring logs the following is found:

The client submission probe failed 3 times over 15 minutes.
Server 127.0.0.1 on port 587 did not respond with expected response (OK). The actual response was: 550 5.7.1 Client does not have permissions to send as this sender
.
Probe Exception: 'System.Exception: Server 127.0.0.1 on port 587 did not respond with expected response (OK). The actual response was: 550 5.7.1 Client does not have permissions to send as this sender
.
at Microsoft.Forefront.Monitoring.ActiveMonitoring.Smtp.Probes.SmtpConnectionProbe.AssertExpectedResponse(SmtpExpectedResponse expectedResponse)
at Microsoft.Forefront.Monitoring.ActiveMonitoring.Smtp.Probes.SmtpConnectionProbe.TestConnection()
at Microsoft.Forefront.Monitoring.ActiveMonitoring.Smtp.Probes.SmtpConnectionProbe.DoWork(CancellationToken cancellationToken)
at Microsoft.Office.Datacenter.WorkerTaskFramework.WorkItem.Execute(CancellationToken joinedToken)
at Microsoft.Office.Datacenter.WorkerTaskFramework.WorkItem.<>c__DisplayClass2.<StartExecuting>b__0()
at System.Threading.Tasks.Task.Execute()'
Failure Context: 'Server 127.0.0.1 on port 587 did not respond with expected response (OK). The actual response was: 550 5.7.1 Client does not have permissions to send as this sender
.'
Execution Context: ''
Probe Result Name: 'OnPremisesSmtpClientSubmission'
Probe Result Type: 'Failed'
Monitor Total Value: '3'
Monitor Total Sample Count: '3'
Monitor Total Failed Count: '0'
Monitor Poisoned Count: '0'
Monitor First Alert Observed Time:

How do we resolve this issue?

↧

Unable to reseed failed content indexes

May 11, 2016, 11:27 am

≫ Next: NSF to PST conversion popular Alternatives

≪ Previous: OnPremisesSmtpClientSubmissionMonitor Reporting as Unhealthy on CAS servers

Hello,

I have a two Exchange 2013 mailbox servers running on Server 2012 R2 that are setup in a DAG. They are in two different sites connected by a 500Mbit WAN link. Due to some SAN/host instability at the secondary site the server now holding the passive copy of all 22 of my databases crashed hard a few times when the host lost access to the SAN. It now reportsContent index state: FailedAndSuspendedfor all 22 databases. I have attempted to reseed the indexes from the active copy, which is reporting a Healthy state and searching from OWA works, however after the seeding runs they still report a Failed and Suspended state.

I have completely removed two of the databases from the secondary site, rebooted the server and deleted the database, log and index files, and then reseeded the entire databases however I ended up in the same state after the reseeding.

The event log states the reseed completes successfully:" Automatic Reseed Manager successfully completed repair workflow 'CatalogAutoReseed' for database 'DB08'.

WorkflowLaunchReason: The content index is corrupted."

The results of Get-MailboxDatabaseCopyStatus show the following for indexes:

ContentIndexState           : FailedAndSuspended
ContentIndexErrorMessage      : Reseeding of the index is required.
ContentIndexErrorCode          : 20

I have seen: https://support.microsoft.com/en-us/kb/2807668 and it does not apply as the group exists and the permissions are correct.

Yesterday I installed CU12 on the secondary server as a troubleshooting step as I can not find any documentation on this issue but that did not help. The primary server is running CU7, I would like to update it to CU12 as well but do not want to break searching for the 850 users I have by failing over the databases to the secondary site while it installs on the primary.

Any help would be appreciated.

Thank you,

Dan

↧

NSF to PST conversion popular Alternatives

July 14, 2014, 10:00 am

≫ Next: Cant open Outlook 2013

≪ Previous: Unable to reseed failed content indexes

As per my knowledge we don't have any free NSF to PST conversion tool out in market however i want to know any alternative solution to get the job done by means by scripts or some intelligent mechanism that we as an messaging admin can implement to save cost involved in migrations . Please suggest ?

Aditya Mediratta

↧

Cant open Outlook 2013

August 16, 2015, 11:13 am

≫ Next: "Add group owners as members" option grey in ECP for exchange 2013 but not 2010

≪ Previous: NSF to PST conversion popular Alternatives

I just purchased new computer with windows 10 and office 365. I already have another computer running outlook 365 and that one installed and works fine. I enter my exchange server settings exactly the same way as the other computer, and OUTLOOK doesnt start. i get the message THE CONNECTION TO MICROSOFT EXCHANGE IS UNAVAILABLE. OUTLOOK MUST BE ONLINE or CONNECTED TO COMPLETE THIS ACTION. Then a microsoft screen appears where i can enter my Micrsosoft exchange server and Mailbox info. no matter what i push next (either the CHECK NAME or the OK button), immediately the message appears : THE NAME CANNOT BE RESOLVED. HE CONNECTION TO MICROSOFT EXCHANGE IS UNAVAILABLE. OUTLOOK MUST BE ONLINE or CONNECTED TO COMPLETE THIS ACTION. That message pops up immediately, as if it never actually checks. Then i have to click OK, and immediately the message appears CANNOT START MICROSOFT OUTLOOK. CANNOT OPEN THE OUTLOOK WINDOW. THE SET OF FOLDERS CANNOT BE OPENED. THE FILE C:\USERS\Roman\APPDATA\LOCAL\MICROSOFT\OUTLOOK.OST is not an OUTLOOK DATA FILE (.ost).

I am connected to the internet and i entered the same settings as my other devices that work just fine. HELP!

↧

"Add group owners as members" option grey in ECP for exchange 2013 but not 2010

April 27, 2016, 9:59 am

≫ Next: OWA: Your IP is banned...

≪ Previous: Cant open Outlook 2013

We are currently in a coexistence scenario with exchange 2010 and 2013. I have noticed that some admins who were previously able to select the option to "Add group owners as members" when creating distribution group in 2010 the option is gray in 2013.

If they log into exchange 2010 the option is available. If they log into 2013 the option is gray and it always adds the owners as members.

When I create new users and add them to any group that should have this permission the option is not available in 2010 or 2013.

This includes the built-in Exchange group Organization Management.

↧

OWA: Your IP is banned...

May 17, 2016, 4:19 pm

≫ Next: Column for Mailbox Size

≪ Previous: "Add group owners as members" option grey in ECP for exchange 2013 but not 2010

As an Exchange Server administrator, how can one remove the IP ban when a user visits Outlook Web Access and the following message is displayed..?

Your IP is banned, no further requests will be processed from this IP.

Thanks,

iXneonXi

-There's no place like 127.0.0.1

↧

Column for Mailbox Size

May 20, 2016, 4:36 am

≫ Next: Delegate "room and resource management" on Exchange 2013

≪ Previous: OWA: Your IP is banned...

Hi!

Is it possible to have a column for Mailbox Size under Exchange 2013 Recipients view?

Thanks.

↧

Delegate "room and resource management" on Exchange 2013

May 11, 2016, 3:09 am

≫ Next: Exchange 2010

≪ Previous: Column for Mailbox Size

I want to grant a specific user access to create rooms and resources for Exchange calendar. No admin rights and he should only be able to place objects i a specific OU.

With Exchange 2007 I would simply delegate the user control over that specific OU, but how to accomplish this in Exchange 2013 which is no longer managed through a console/ADUC

Regards, Lars.

↧

Exchange 2010

May 12, 2016, 10:40 pm

≫ Next: Unique Email address Policy

≪ Previous: Delegate "room and resource management" on Exchange 2013

Dear team,

Please suggest any good way command or console through how i am able to update exchange 2010 global address book forcefully

when i create any new user and do some changes in users detail that take long time to update in address book

↧

Unique Email address Policy

May 8, 2016, 11:48 pm

≫ Next: Unable to Stop Spoof Email

≪ Previous: Exchange 2010

Hi Team,

I have got a specific requirement that we need to create an email address that should not be created in future even after employee resignation.

Note:

We should not add emp id in email address.

Any suggestions.

Regards,

↧

Unable to Stop Spoof Email

May 17, 2016, 6:55 am

≫ Next: Move Messages to PSTs through EMC or EMS

≪ Previous: Unique Email address Policy

Dear all,

i am new to exchange server 2013 and Users in our domain are receiving spoof emails.

Someone is using our domain name and sending emails to some users. I have tried the following to stop forge From address being used.

1) Created SPF record with our ISP where our domain and mx record is registered.(even created spf records in our internal domain dns)

2) enable antispam feature inexchange 2013.

3) Setup sender id filter to reject spoof domains.

please advice do i need a strong antispam software solution to prevent users outside my domain who are using our domain name and sending emails to users in my domain.

(Please advice if i need to edit any setting under scoping or security in receive connector)

Example of spoof email:

From address: name@mydomain.com

TO address : name@mydomain.com

↧

Move Messages to PSTs through EMC or EMS

May 23, 2016, 7:28 am

≫ Next: Autodiscover problems in Exchange 2016

≪ Previous: Unable to Stop Spoof Email

Hi!

Is it possible in Exchange 2013 to move a user's emails messages to PSTs through Exchange Management Console or Shell?

Thanks.

↧

Autodiscover problems in Exchange 2016

May 16, 2016, 8:58 pm

≫ Next: Getting an error in powershell

≪ Previous: Move Messages to PSTs through EMC or EMS

Hi,

I have successfully migrated a single node Exchange 2010 to a two-node Exchange 2016 DAG. A quick look of our environment is as below:

We have Different Internal and External Domains
External Domain name: Domain.asn.au
Internal Domain name: Domain.com.au

Servers fully qualified names:
Server1.domain.com.au
Server2.domain.com.au

A wild card certificate contains both domain names and both Server names.

Internal DNS has two entries of Autodiscover:
autodiscover.mail.domain.com.au - pointing to Server 1
autodiscover.mail.domain.com.au - pointing to Server 2

I, however, have some problems with Autodiscover. The Outlook behaves strangely, it sometimes keeps prompting for the password and does not take you anywhere. Other times even a cancel button works fine. The connection status changes from "Need Password" to "Disconnected" and then Connected. Clearing the Credential does not help.

Exchange Connectivity test gets passed with the following errors:

Attempting to test potential Autodiscover URL https://Domain.asn.au:443/Autodiscover/Autodiscover.xml
Testing of this potential Autodiscover URL failed.

Attempting to send an Autodiscover POST request to potential Autodiscover URLs.
Autodiscover settings weren't obtained when the Autodiscover POST request was sent.

The Microsoft Connectivity Analyzer is attempting to retrieve an XML Autodiscover response from URL https://Domain.asn.au:443/Autodiscover/Autodiscover.xml for user ..........
The Microsoft Connectivity Analyzer failed to obtain an Autodiscover XML response.

Additional Details

A Web exception occurred because an HTTP 404 - NotFound response was received from IIS7.
HTTP Response Headers:
Content-Length: 4888
Cache-Control: private
Content-Type: text/html; charset=utf-8
Date: Tue, 17 May 2016 00:51:19 GMT
Server: Microsoft-IIS/8.0
X-Powered-By: ASP.NET
Elapsed Time: 617 ms.

Any help shall be greatly appreciated. Thanks

↧

Getting an error in powershell

May 18, 2016, 9:18 pm

≫ Next: Performing Exchange 2013 address book OWA/Outlook search with some Custmised Field / Attribute

≪ Previous: Autodiscover problems in Exchange 2016

Good Morning All,

Apologies to create another account as im unable to login to earlier one. As mentioned in my earlier mail am new to this forum and exchange too. Last time i got an wonderful response for my issue and it worked well too.

Am trying to upload multiple pics in exchange server which will reflect in Outlook. Earlier it worked but some how today am getting below error.

Error:

Cannot bind argument to parameter 'Identity' because it is null. + CategoryInfo : InvalidData: (:) [Import-RecipientDataProperty], ParameterBindingValidationE + FullyQualifiedErrorId : ParameterArgumentValidationErrorNullNotAllowed,Import-RecipientDataProperty

CODE AM USING:

$PhotoPath = "C:\Photos\*.*"
ForEach ($PhotoFile in gci $PhotoPath)
{
$User = '' + $PhotoFile.Name.substring(0, $PhotoFile.Name.Length - 4) + ''
Import-RecipientDataProperty -Identity $User -Picture -FileData ([Byte[]]$(Get-Content -Path $PhotoFile.Fullname -Encoding Byte -ReadCount 0))
}

↧