Quantcast
Channel: Exchange Server 2013 - Administration, Monitoring, and Performance 论坛
Viewing all 3457 articles
Browse latest View live

diskspace events Exchange 2013 CU2v2 (1006)

$
0
0
Hi,

We recently configured several Exchange 2013 CU2v2 servers, and receive this event constantly :

source : MSExchangeDiagnostics
eventid : 1006

The performance counter '\\servername\LogicalDisk(HarddiskVolume1)\Free Megabytes' sustained a value of '107,00', for the '15' minute(s) interval starting at '7/08/2013 8:11:00'. Additional information: None. Trigger Name:DatabaseDriveSpaceTrigger. Instance:harddiskvolume1

The performance counter '\\servername\LogicalDisk(D:)\Free Megabytes' sustained a value of '9 052,00', for the '15' minute(s) interval starting at '7/08/2013 8:11:00'. Additional information: None. Trigger Name:DatabaseDriveSpaceTrigger. Instance:d:

Actually there's no diskspace problem on these servers, and I don't get where it get this value.

The performance counter '\\servername\LogicalDisk(C:)\Free Megabytes' sustained a value of '7 002,00', for the '15' minute(s) interval starting at '7/08/2013 8:11:00'. Additional information: None. Trigger Name:DatabaseDriveSpaceTrigger. 
Instance:c:

Is there a place where I find the default settings, and lower the tresholds a little?
I don't want to ignore the events in the monitoring, since the counter itself is quite important.
The 2 last ones seem to be correct, but I also don't get where it gets the first one from.

SPF record and blackberry

$
0
0

Dear all,

We have SPF record for our outgoing mail server. The problem is when a user sends test mail from blackberry handset to his own company id, mails are going to Junk folder.

I checked the Internet message header in owa. it is showing following message.

X-MS-Exchange-Organization-Antispam-Report: DV:3.3.5705.600;SID:SenderIDStatus SoftFail;OrigIP:178.239.85.10
X-MS-Exchange-Organization-SCL: 6

smtp05.bis7.eu.blackberry.com (178.239.85.10)

do I need to add something to our spf record?

Please help

Anish

 

The Exchange 2013 problems just continue.. :-( HTTP 500 error when accessing ECP on the server using https://localhost using FQDN is ok

$
0
0

So here is the next Exchange 2013 problem.. really starting to hate Exchange 2013..

If I'm logged directly on the server, and I try to access ECP, owa by using the icon created by exchange usinghttp://localhost  I get an http 500 error after I try to authenticate why? Exchange 2013 SP1 CU5 on windows 2008 R2.  If I usehttps://127.0.0.1/ecp all is good, if I use https://fqdn/ecp or owa all is good,  but not https://localhost.  Has to do something with the IIS binding right? When I try the  *.443 binding using IIS manager bingo same issue so has something to do I think with the *:443 binding.  I check my other lab 2013 server and check bindings they look the same, so what gives?   I take the IIS logs into log parser to analyze but nothing sticks out at me.. I see http 500 errors like these.  Any suggestions?

 

cs-uri-query

 

&CorrelationID=<empty>;&cafeReqId=bf948ca5-8d67-4772-85cd-02c5e51e5e02;

FQDN of SERVER:6001&CorrelationID=<empty>;&RequestId=191bad18-4a70-4af5-93dd-4fe85968997c&cafeReqId=191bad18-4a70-4af5-93dd-4fe85968997c;

Http 503 errors.

/rpc/rpcproxy.dll    SERVERNAME:6001&CorrelationID=<empty>;&RequestId=b5cfde55-5552-415a-9dac-239c025aef73&cafeReqId=b5cfde55-5552-415a-9dac-239c025aef73;

Server Health

$
0
0
Good day , 

Running Get-ServerHealth on Exchange 2013 Version 15.0 (Build 775.38) mailbox server show the following "Unhealthy" healthsets 

Name AlertValue 
---- ---------- 
MaintenanceFailureMonitor.FEP Unhealthy 
OutlookRpcDeepTestMonitor Unhealthy 
MicrosoftFailedUpdatesMonitor Unhealthy 
OutlookRpcSelfTestMonitor Unhealthy 

I've tried tracing the source and searching the internet with no luck ! 

any idea ? 

regards 

Best Regards Bisher Shbib

Restricting owa 2013 from internet for group users using ARR

Exchange 2013 Help with the Warning 2601 MSExchange ADAccess

$
0
0

Hello all,

I am having some issues with my Exchange server 2013 that keeps restarting at random points of the day, so I though I would try to get some of these errors/warning cleared up and see if that doesnt fix the problem so here it goes 


2601WarningMSExchange ADAccessApplication6/12/2014 2:58:25 PM

Process Microsoft.Exchange.Directory.TopologyService.exe (PID=2556). When initializing the Microsoft Exchange Active Directory Topology service, Exchange could not retrieve the SID for account <WKGUID=1A9E39D35ABE5747B979FFC0C6E5EA26,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=rwday,DC=com>. Error Message Failed to create a connection to any of the servers in the topology provider..  
 The Microsoft Exchange Active Directory Topology service will continue with limited permissions. 

This email server is running in a virtual environment not sure if that helps just thought I would throw it out there any guidance would be appreciated 


distribution lists containing external email addresses (mailing list)

$
0
0

Our it department wants users (about 1%) to maintain their own external (not part of company) email contacts. This contact list is an external mailing list. 

We know the it department can create mail contacts in the GAL however the internal user community (99%) would not know these external email as they would be visible in the GAL, if we were to hide them from the GAL, we would not be able to add them to a distribution group

Is there a way users can maintain their own external email contact groups without creating them in the GAL?  The advice I have been reading is all directed to RBAC, mail contacts, distribution list

Can a user who has over 100 external email addresses import them to a Group Contact? If so, how? 8  (users using Outlook 2010)

Need Help getting rid of these errors

$
0
0

So I look at my exchange server today and see this in the server manager dashboard



click on AD DS and I get this



I'm sure its its something I can find out by looking at the error log but Im just not really sure what I am looking for just trying to get rid of the red highlights on Performance


Error is [0x80004005-00000000-00000000]

$
0
0

HI,

Some users are getting below error when sending mails to external accounts. we have exchnage 2010 and issue occurs only when sending mails outside the org.

The following recipient(s) cannot be reached:

      'abc@xyz.com' on 6/7/2013 11:20 AM
            This message could not be sent. Try sending the message again later, or contact your network administrator.  Error is [0x80004005-00000000-00000000].

Some articles i found were pointing to max. recipients limits issue. But the issue happens even when sending mail to a single recipient ( SO i guess this is not the issue here ). Also mails are going out fine when sent throught through OWA.
Recreation of outlook cache profile also seems to resolve the issue.


Exchange Admin

Exchange 2013 - Custom E-mail address policy

$
0
0

Hi,

I want to create a custom smtp policy; firstname.firslettermiddlename.surname@domain.local

Example user: Peter Martin Johnson

I want the result to be: Peter.M.Johnson@domain.local

Can you please help me with the syntax for this?



How to restore a specific disabled mailbox

$
0
0

Hi,

Could anyone please tell how to restore an individual mailbox in the  Exchange Server which was disabled at particular date and time.

We have mistakenly disabled an account say xyz at 12:30 PM then created a new mailbox for the same account i.e  xyz again at 1:00 PM , now we want to restore the mailbox of this account which was disabled at 12:30 PM.

We have tried the following command on Management Shell but it is restoring the Mailbox which was created at 1:00 PM

"'abc.local/Service Accounts/Sharepoint users/xyz' | Enable-Mailbox -IgnoreDefaultScope"

I would appreciated I anyone help us to restore the Mailbox disabled at 12:30 PM

Best Regards,

Asif.

Get-mailbox -RecipientTypeDetails sharedmailbox -Resultsize unlimited

$
0
0

Hi all,

IM running this command but it fails at Totalitemsize.

Get-mailbox -RecipientTypeDetails sharedmailbox -Resultsize unlimited | select DisplayName, TotalItemSize, Database, DeliverToMailboxAndForward, ExchangeGuid, ForwardingAddress, SamAccountName, ServerName, UseDatabaseQuotaDefaults, WhenMailboxCreated, Alias, EmailAddressPolicyEnabled, PrimarySmtpAddress, WhenChanged, WhenCreated, WhenChangedUTC, WhenCreatedUTC, OriginatingServer| export-csv C:\output.csv

Everything else is showing fine,but itemsize is blank.Any idea why?

If all this is to much,which command to export all shared mailbox with displayname,totalitemsize,database and servername?

thanks! 


Please mark as helpful if you find my contribution useful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you. Thank you! Off2work

Exchange error id 74 Connection leak detected for key

$
0
0

I found error on my Mailbox server and can't find any description for this error:

(Process w3wp.exe, PID 3728) Connection leak detected for key contoso.ua/Enterprise Administrators/Exch_administrator in Microsoft.Exchange.Configuration.Authorization.WSManBudgetManager class. Leaked Value 2.

Source:MSExchange RBAC

Event ID:74

Task Category:RBAC

Level: Error

Log Name: Application

Exch_administrator - this is my user account. Any suggestion what it is can be?

Exchange 2010 Federation with Local CA Certificates

$
0
0

Hi, We have two AD domains using .local, which isn't supported by external CA's from next year. Is it possible to use internal trusted CA certificates between forests. Will the Microsoft trust broker work ?

Thanks

Get List of the top attachments in Exchange org databases by size

$
0
0

Hi,

Does anyone know of a script that can go through all the databases in Exchange and list the top attachments and sizes that are being stored. We are trying to clear out the largest attachments to give us more space.

Thanks


Exchange 2013: Event ID 2937 - MSExchangeSubmission.exe - edgetransport.exe - MSExchangeDelivery.exe - MSExchangeFrontendTransport.exe

$
0
0

Hi

I realise that there are a few threads about this specific ID, but all the solutions are unique to the particular occurrence. Could any of you gentleman or ladies have a look and tell me how to fix it please. Thanks in Advance

Process MSExchangeFrontendTransport.exe (PID=6120). Object [CN=VSAT-PM Group,OU=Users,OU=Connecting Africa,DC=connectingafrica,DC=local]. Property [ArbitrationMailbox] is set to value [connectingafrica.local/Deleted Objects/SystemMailbox{1f05a927-9036-4018-a6c3-5c29c152f5ac}
DEL:f068d90d-28c9-4eea-9e5b-e786bb7ff87d], it is pointing to the Deleted Objects container in Active Directory. This property should be fixed as soon as possible.

Process MSExchangeDelivery.exe (PID=5532). Object [CN=VSAT-PM Group,OU=Users,OU=Connecting Africa,DC=connectingafrica,DC=local]. Property [ArbitrationMailbox] is set to value [connectingafrica.local/Deleted Objects/SystemMailbox{1f05a927-9036-4018-a6c3-5c29c152f5ac}
DEL:f068d90d-28c9-4eea-9e5b-e786bb7ff87d], it is pointing to the Deleted Objects container in Active Directory. This property should be fixed as soon as possible.

Process edgetransport.exe (Transport) (PID=15260). Object [CN=VSAT-PM Group,OU=Users,OU=Connecting Africa,DC=connectingafrica,DC=local]. Property [ArbitrationMailbox] is set to value [connectingafrica.local/Deleted Objects/SystemMailbox{1f05a927-9036-4018-a6c3-5c29c152f5ac}
DEL:f068d90d-28c9-4eea-9e5b-e786bb7ff87d], it is pointing to the Deleted Objects container in Active Directory. This property should be fixed as soon as possible.

Process MSExchangeSubmission.exe (PID=3888). Object [CN=VSAT-PM Group,OU=Users,OU=Connecting Africa,DC=connectingafrica,DC=local]. Property [ArbitrationMailbox] is set to value [connectingafrica.local/Deleted Objects/SystemMailbox{1f05a927-9036-4018-a6c3-5c29c152f5ac}
DEL:f068d90d-28c9-4eea-9e5b-e786bb7ff87d], it is pointing to the Deleted Objects container in Active Directory. This property should be fixed as soon as possible.


Exchange 2013 Performance Monitor Data Collector Sets

$
0
0

I've noticed that the Exchange 2013 install created two data collector sets within Performance Monitor:

  • ExchangeDiagnosticsDailyPerformanceLog
  • ExchangeDiagnosticsPerformanceLog

These sets are creating daily log files saved in C:\Program Files\Microsoft\Exchange Server\V15\Logging\Diagnostics\DailyPerformanceLogs that are about 500MB in size, which are filling up our system volume.

I've tried stopping them, but they get restarted automatically. I also tried deleting them, but they get recreated automatically. Is there a way to disable these? We have a 3rd party tool that we use for performance monitoring and would like to avoid having to delete these log files on a regular basis to keep our system volume from filling up.

As a workaround, I've changed the path where the log files get saved to a non existent drive letter, but would still like to disable the Data Collector Sets completely.

Thanks,

-Cory

Exchange Server 2013 POP3 Service on CAS cannot after Upgrade to SP1

$
0
0

Exchange Server 2013 POP3 Service on CAS cannot after Upgrade to SP1

When I manual start MSExchangepop3 Service on CAS It show "The Microsoft Exchange POP3 Service on Local Computer started and then stopped. Some services stop automatically if they are not in use by other services or programs."
In event log show POP3 EventID 1018 , 1019 , 1036
It said like this blinding already use (0.0.0.0)

The point is "IF I SET BINDING FOR 995 , MSEXCHANGE POP3 Service will automatic stop"
Does anyone face this issue please?

Thank you


exchange auditing

$
0
0
I have a request for custom auditing on the exchange server.  Can you audit if a mailbox has been given rights to another mailbox in exchange 2013.  In exchange 2010 you would access user properties and choose full access permissions and assign permissions of one mailbox to another.  Is there a way to audit that same activity in exchange 2013?  To output to a log or to generate an smtp mail alert?  

Exchange 2013 Monitoring Mailboxes

$
0
0

I'm running exchange 2013 and it seems to have problems with health mailboxes (monitoring mailboxes). I have 5 mailbox databases on this server, DB1, DB2, DB3, DB4 and DB5.

I know there are 2 health mailboxes per mailbox database.

The command `Get-Mailbox -monitoring | Get-MailBoxStatistics` shows that several of these have not been accessed since December, even though they are in mounted Databases and powershell shows they are healthy.

There is also 2 health mailboxes that are missing from the below output because I got warninings saying these mailboxes have not been logged into yet.

-----

[PS] C:\windows\system32> Get-Mailbox -monitoring | Get-MailBoxStatistics

DisplayName   : HealthMailbox98fb2dc7692341ad8a3325ea2b14bbcc
ItemCount     : 17426
LastLogonTime : 12/8/2012 3:28:04 PM
Database      :  DB1

DisplayName   : HealthMailboxe27d88df28ae4d53af620604a83aca4d
ItemCount     : 12386
LastLogonTime : 2/4/2013 3:29:46 PM
Database      : DB1

DisplayName   : HealthMailbox815f0ff077a342f7889a53ef38e40256
ItemCount     : 291
LastLogonTime : 12/8/2012 3:26:43 PM
Database      : DB3

DisplayName   : HealthMailboxbca2f3409f1d4ae99098f48b574fc36d
ItemCount     : 579
LastLogonTime : 12/8/2012 3:26:05 PM
Database      : DB2

DisplayName   : HealthMailbox2412e1a0e5d9415b8328f653b2e42efe
ItemCount     : 209
LastLogonTime : 2/3/2013 6:08:41 PM
Database      : DB3

DisplayName   : HealthMailbox594b739a129941e688eafee6bbdfece6
ItemCount     : 209
LastLogonTime : 2/3/2013 6:09:52 PM
Database      : DB2

DisplayName   : HealthMailboxc401cae2a70d4d659f5758908582406e
ItemCount     : 210
LastLogonTime : 2/4/2013 3:28:59 PM
Database      : DB4

DisplayName   : HealthMailbox4b81211d555c4accad1f61a98700382e
ItemCount     : 212
LastLogonTime : 2/3/2013 6:09:46 PM
Database      : DB5

Warning: The user hasn't logged onto mailbox `<AD Domain>/users/HealthMailbox2c62876ca1bb45849c0daf2ecee6d715`, so there is no data to return. After the user logs on, this warning will no longer appear.

Warning: The user hasn't logged onto mailbox `<AD Domain>/users/HealthMailbox4399c592609a464d95c993ecee46f671`, so there is no data to return. After the user logs on, this warning will no longer appear.

-----

I am also getting a lot of queued messages in the inboundproxy.com queue that have the subject line "Undelieverable: Inbound Proxy Probe". I dont know how to get these to stop. I just have to clean out the queue once a day to prevent it from getting to large.

The last thing I notice is that I get a lot of audit errors in the event log when the system is trying to login to these mailboxes. That might be what is causing the issue. Here is one of the messages:

-----

An account failed to log on.
Subject:
Security ID:SYSTEM
Account Name:<computer name here>$
Account Domain:<AD DOMAIN>
Logon ID:0x3E7

Logon Type:8
Account For Which Logon Failed:
Security ID:NULL SID
Account Name:HealthMailboxbca2f3409f1d4ae99098f48b574fc36d@<domain.tld>
Account Domain:

Failure Information:
Failure Reason:Unknown user name or bad password.
Status:0xC000006D
Sub Status:0xC0000064

Process Information:
Caller Process ID:0x1265c
Caller Process Name:C:\Windows\System32\inetsrv\w3wp.exe

Network Information:
Workstation Name:<computer name here>
Source Network Address:::1
Source Port:34602

Detailed Authentication Information:
Logon Process:Advapi  
Authentication Package:Negotiate
Transited Services:-
Package Name (NTLM only):-
Key Length:0

This event is generated when a logon request fails. It is generated on the computer where access was attempted.

The Subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.

The Logon Type field indicates the kind of logon that was requested. The most common types are 2 (interactive) and 3 (network).

The Process Information fields indicate which account and process on the system requested the logon.

The Network Information fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.

The authentication information fields provide detailed information about this specific logon request.
- Transited services indicate which intermediate services have participated in this logon request.
- Package name indicates which sub-protocol was used among the NTLM protocols.
- Key length indicates the length of the generated session key. This will be 0 if no session key was requested.

-----

As you can see, the system can not login to to this health mailbox account. The one in my example one of the mailboxes that has not been logged into since december.

Is there anywhere to troubleshoot these? or possibly rebuild them? The is a huge lack of documentation on these mailboxes from microsoft, I  can not find any commands to interact with these other then 'get-mailbox -monitoring'


Viewing all 3457 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>