Were out of space on the drive that contains our Exchange dBs. I have a new 1 TB drive that I can mount to the Exchange server.
Question: Is it better to move the existing dBs to that new drive or to create new databases then move the mailboxes to the new dBs?
I think the latter requires less downtime, if any. Am I thinking about this correctly?
Hi
When I run this commands in Interactive PS session on Exchange 2016 CU 10:
$Date=(Get-Date).AddMonths(-1)
$FullFilePath=\\...\Serivce.pst
New-MailboxExportRequest -Mailbox Service -FilePath $FullFilePath -ContentFilter {(Received -lt $Date) -and (Sent -lt $Date)}
it works!
When I run these commands in script, mailbox export request end with "Failed" status.
Get-MailboxExportRequest | Get-MailboxExportRequestStatistics -IncludeReport | fl * I get:
...
Report: ...
...
24.09.2018 14:10:30 [Tos127] Fatal error InvalidContentFilterPermanentException has occurred.
What is the problem? Is it a bug in New-MailboxExportRequest command?
Kind Regards Tomasz
Dear all,
I have exchange 2013 environment, I want to hide the mobile number from the GAL. how can we do that
Hussain Arif(Senior System Administrator)
Hi all,
I hope you can help me wit hthe below seemingly easy problem.
I dug up the forum here but have not yet found a relevant answer.
Basically all I want is to create a script to run via Task Scheduler to delete emails from inbox(es) based on subject.
The command I use is as below
Search-Mailbox -Identity "username" -SearchQuery 'Subject:" ..subject."' -DeleteContent
It works ok when run it in PS but my Task Scheduler does not work.
I set up the task, added the action to open poweshell.exe but not sure of the argument.
Also not sure if pointing the program to powershell.exe would open the exchange management shell, however I think this is accomplished by the arguments field.
Because the script seems to work when run in exchange management shell, therefore my main suspicion is that the Task Scheduler is not pointing to exchange management shell.
Could anyone advise me the steps I need to take to complete the task please?
Many thanks
Gabor
Hi Team,
I have imported the ECC TLS cert with 384 Bits algorithm which was created from a third party security company via either EAC cert import wizard or EMS but nothing shows after the import based on the below link:
https://docs.microsoft.com/en-gb/exchange/architecture/client-access/import-certificates
If I used mmc to import, it would crash all certificates that I could not log into EAC or could not launch EMS anymore. Then, I needed to revert the VM snapshot. Anyone knows ECC TLS cert with 384 Bits algorithm is compatible with Exchange 2013? But Exchange works for RSATLS cert with 384 Bits algorithm via mmc though! Any thought? Please advise.
Many Thanks
Angus
Hello,
i have two certificates which are expired and ecp always prompt the invalid certificate. is it safe to remove outdated invalid certificates from exchange 2013 ecp and will not effect anything.
Thanks
Hello,
Is it possible to run a report in 'Exchange 2013' that will list the usage size of each mailbox and export the results to a TXT or CSV file?
Kind regards,
Glen
Hi,
I have Exchange 2013 Standard. If i need CALs for device to send from PC via server (SMTP port 25) email from Powershell ?
Example:
Send-MailMessage -From "not_exist_mailbox@on.net" -To "exist_mailbox@on.net" -Subject "Test email" -Body "This is a test email"
THX
HI,
Some users are getting below error when sending mails to external accounts. we have exchnage 2010 and issue occurs only when sending mails outside the org.
The following recipient(s) cannot be reached:
'abc@xyz.com' on 6/7/2013 11:20 AM
This message could not be sent. Try sending the message again later, or contact your network administrator. Error is [0x80004005-00000000-00000000].
Some articles i found were pointing to max. recipients limits issue. But the issue happens even when sending mail to a single recipient ( SO i guess this is not the issue here ). Also mails are going out fine when sent throught through OWA.
Recreation of outlook cache profile also seems to resolve the issue.
Exchange Admin
Hi,
We have an issue where a new users email was created, deleted and recreated. For some internal users it works because they never emailed her but other had a bad cached copy of her email it seemed.
Diagnostic information for administrators:
Generating server: ERA-EX1.server.net
IMCEAEX-_o=EMMS_ou=Exchange+20Administrative+20Group+20+28FYDIBOHF23SPDLT+29_cn=Recipients_cn=233bfde1c7c947dea874b9070b1653cc-Melissa+20Burciaga@server.net Remote Server returned '550 5.1.1 RESOLVER.ADR.ExRecipNotFound; not found'
However, some users are still having the issue after we cleared their cache in Outlook.
From the server I ran a couple shell commands to update the address book and some users still get a bounceback.
Get-AddressList | Update-AddressList
Get-GlobalAddressList | Update-GlobalAddressList
Are there any commands I'm missing that would force an update on the database so that the SID of the first email would be cleared and users emailing her going forward get the correct email address?
Any help or even opinions on the issue would be appreciated.
Currently around 50% of the time our users are unable to access the GAL from Outlook. Users with Outlook cached mode cannot download the OAB (event 27 OAB download failed). Users on Citrix without cached mode get an error "The operation failed" when they try to access the address book. If a user closes and opens Outlook the GAL will either work or not work until they next close and open Outlook. The failures do not seem to be affected by who the user is or what database they are on. This has only started happening recently, shortly after we introduced some Server 2016 DCs but I don't know if this is just a coincidence.
Our Exchange environment consists of two CAS servers and two DAG members all running Exchange 2013 CU21
So far we have tried -
Restarting Exchange mailbox assistants service and BITS service
Restarting both CAS servers
Updating Offline address book
Activating database containing OAB generating arbitration mailbox on the other DAG member
Create new Offline address book
Create new arbitration mailbox for OAB generation
Checked autoconfiguration OAB URL
Checked permissions on OAB website in IIS
We are starting to run out of ideas. Any assistance would be greatly appreciated.
The error when not using cached mode is:
Log Name: OAlerts
Source: Microsoft Office 15 Alerts
Date: 03/10/2018 09:38:19
Event ID: 300
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: computername
Description:
Microsoft Outlook
The operation failed.
P1: 350569
P2: 15.0.5049.1000
P3: 6xk3P4:
Hi Everyone,
I'm having some trouble understanding what maintenance mode on a Exch2013/2016 CAS server does.
Once I place a server into maintenance mode, I can see all the Component states set to Inactive (RPCProxy, OWAProxy etc), I'm still seeing the CAS server in Maintenance Mode servicing Outlook Anywhere traffic via the IIS logs with RPC_IN_DATA/RPC_OUT_DATA /rpc/rpcproxy.dll entries.
Its not a huge deal as we have a common namespace and a load balancer, but I'm curious to know why you cannot stop all traffic when an Exchange Server is in maintenance mode?
Thanks,
BTL
Hi There,
I've archived some mail to PST but the PST file is 75GB.
I don't want to try and open it in Outlook as I'm concerned that due to the 50GB file limit the file may become corrupt in the process.
Is there a way to split this file into two halves safely? or a no-risk way of opening it in Outlook 2013 and moving half the data into another PST?
My organization currently doesn't have any external certificate now i am planning to get a wildcard certificate *.abc.com however my server names are Server1.Corp.abc.com so please suggest how should i purchase the certificate.
As i have seen in other environment if the server name is not included in certificate the users get certificate error in outlook
Since yesterday I've had multiple detections of the malware below - only on Exchange 2013 mailbox database servers. Two CAS servers are not showing anything, nor are any other AD-joined servers (so I don'tthink this is something spreading across the network).
I think these detections may be happenning because somehow a mail message with something bad in it has got past the mail filtering system and into a mailbox. I'm not sure why that would be popping up outside the mailstore DB as discrete files on the C drive. I'm wondering if it's because of some kind of background Exchange optimisation process? As far as I know, no mailbox moves or exports were running at any of the times when this stuff was detected - I've seen references to similar experiences from other people in various forums online, but without any definitive answers.
Antimalware is System Center Endpoint Detection on Server 2012 R2.
Can anyone explain the processes that might be going inside Exchange that would cause stuff to be pulled out of a mailbox and onto the C drive? I need to rule out if these servers are actively being attacked over the network by something.
I have put the (licenced) business version of MalwareBytes onto one of the servers in addition to SCEP and it detected nothing. A full scan from SCEP also detected nothing.
Further, if this is some item with nasty attachments sat in a mailbox, how can I identify and remove it? Can that be found in a log somewhere, or are there commercial products that can scan the contents of the mailstores (as opposed to scanning stuff as it passes into and out of Exchange).
Thanks for any help.
Here's the detail:
Trojan:Win32/Skeeyah.A!rfnSevereTrojan
Detected in:
C:\Windows\Temp\OICE_386F84D7-B003-432B-9DCE-727112BB940F.0\FLT83AE.tmp1
C:\Windows\Temp\OICE_DA89E288-4D74-4F8C-908D-F0A33516684D.0\FLT9C5C.tmp1
C:\Windows\Temp\OICE_DA89E288-4D74-4F8C-908D-F0A33516684D.0\FLTA92E.tmp1
C:\Windows\Temp\OICE_956671F3-3EB5-4819-AB2C-B5D0B4ABF691.0\FLTBDF6.tmp1
C:\Windows\Temp\OICE_956671F3-3EB5-4819-AB2C-B5D0B4ABF691.0\FLTB6A2.tmp1
C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\data\Temp\UnifiedContent\1d9ccefc-e1ff-4f2d-9ff6-ba633871fa2a->Files/Graph1/YNKZJ2~1.EXE1
C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\data\Temp\UnifiedContent\1d9ccefc-e1ff-4f2d-9ff6-ba633871fa2a->Files/Graph1/71912-pcs2r8z8e45tex8850ajzny103irbdko6f_ykxa5jxkfkcuc608onw4xefsfnv_x.exe1
C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\data\Temp\UnifiedContent\1d9ccefc-e1ff-4f2d-9ff6-ba633871fa2a->Files/Graph1/3207-id_N287_wp_enc_x32_2018-09-13_21-37.exe1
C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\data\Temp\UnifiedContent\1d9ccefc-e1ff-4f2d-9ff6-ba633871fa2a->Files/Graph1/1GEJJB~1.EXE1
C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\data\Temp\UnifiedContent\1d9ccefc-e1ff-4f2d-9ff6-ba633871fa2a1
C:\Windows\Temp\OICE_F1ABB43B-924F-460C-864C-D7E960EC16BF.0\FLTEEFA.tmp1
C:\Windows\Temp\OICE_7EDB0BA0-88B2-4EB0-BB39-748E3B7AB6E3.0\FLTFAE1.tmp1
C:\Windows\Temp\OICE_7EDB0BA0-88B2-4EB0-BB39-748E3B7AB6E3.0\FLTEFC4.tmp1
C:\Windows\Temp\OICE_7EDB0BA0-88B2-4EB0-BB39-748E3B7AB6E3.0\FLT4A9.tmp1
C:\Windows\Temp\OICE_727D89F6-5CE5-43D5-89DC-58ED5D39902B.0\FLTCABB.tmp1
C:\Windows\Temp\OICE_727D89F6-5CE5-43D5-89DC-58ED5D39902B.0\FLTC1F0.tmp1
C:\Windows\Temp\OICE_629813AC-0B76-42D3-AC13-2B4CB16FC5D6.0\FLT866E.tmp1
C:\Windows\Temp\OICE_629813AC-0B76-42D3-AC13-2B4CB16FC5D6.0\FLT8360.tmp1
C:\Windows\Temp\OICE_DA89E288-4D74-4F8C-908D-F0A33516684D.0\FLTEC15.tmp1
C:\Windows\Temp\OICE_DA89E288-4D74-4F8C-908D-F0A33516684D.0\FLTF108.tmp1
Trojan:Win32/MereTam.ASevereTrojan
Detected in:
C:\Windows\Temp\OICE_629813AC-0B76-42D3-AC13-2B4CB16FC5D6.0\FLT8AC7.tmp1TrojanDownloader:O97M/Dornoe.A!amsSevereTrojan Downloader
C:\Windows\Temp\OICE_629813AC-0B76-42D3-AC13-2B4CB16FC5D6.0\FLT8AB6.tmp1Hi
I encountered a strange problem when renewing a certificate that was about to expire:
As usual, the CSR was created, the Cert imported from Comodo, services enabled (all via ECP), the key exported, the Cert imported from the second DAG member, checked to see if OWA was delivering the new one - and the old Cert deleted on both DAG member servers.
Which I haven't checked:
What it looks like for Outlook clients on PC and Mac and here it comes:
You still get the old (expired) certificate that no longer exists on both servers:
- local certificate store
- List in /ecp => Certificates
- Get-ExchangeCertificate -Server xxx | Format-List
- IIS Management Console
In all these places I see only the new one with the right bindings and OWA / ECP do deliver this one. Why do Outlook-Clients getting that old one?
What am I missing?
(Of course rebooted both DAG members and clients, too. Just in case there is a cache somewhere...)
Thank you - F.One