Hi all,

Before you start pointing me at X.500 addresses and legacy exchange DN's, save your breathe, it will not help.

We are about to start migrating from corporate google apps through to a locally hosted Exchange 2013 environment and as a first try i am trying to migrate my mailbox.  Well i thought it would just be a case of taking the PST that the google sync app creates and a bit of dragging and dropping and voila! well no such luck.

When I reply to any emails that are pre-migration (i.e from the gamil PST) I get an NDR straight away which is below

Well as you can see it is treating anthonys address as a local one when the original email has it as something completely different being an external address at one of our vendors (Anthony@SomeExternalVendor.com.au for example)

.  So the question is

1) why is this happening? Is it something google are doing to the PST?

2) Without having to download all my email again... is there a way to 'santise' the PST to make the addresses 'repliable' again?  And I really dont fancy having to type out the SMTP addresses for the first time I uses them.. they are all sitting there in the PST, so why have a dog and bark too hey?  Also, can you imagine getting 500 users in 3 countries to accurately be able to do that?  I don't think it is going to happen.  Also, I don't think it looks good for an IT department to tell users that they have to type all their email addresses out again, makes us look kinda silly :)

This has to have come up before but I could not find a reference to it that did not send people diving down the legacy exchangedn and x.500 rabbit holes. of which i do not believe this is one.

And to cover of the absolute basics, yes I have tried re-creating profiles, tried different machines and what not :)

Hi All,

I have 3 servers ( Exchange1.mydomain.com, exchange2.mydomain.com and exchangedr.mydomain.com) with the same public SSL certificate

Mail.mydomain.com

Its stored in the Personnel cert store and has both Server Auth and Client Auth enabled, it was created using the exchange 2010 wizard and requested from a certificate authority.  

The fact that it has client auth enabled it has been causing problems with SCCM 2012 SP1 due to the fact that SCCM is using the mail.mydomain.com certificate for all three servers.  

My question is, if i untick the client Authentication option in MMC will this affect anything in our exchange setup? 

Server to server or client to server connectivity for example

Thanks David

We getting ready to deploy Exchange 2010 SP3 in a new environment, but i have i problem:

We ran SBS2003 with a logon script to make the auto-archive to PST possible. The PST files where located on a local disk wich was shared for the users. So they can access it over the network but not from home.

Because of Exchange 2010 give us the possibility to use the Online Archive function, i want to use it! We made a new partition and configured a new exchange database named MAILARCHIVE.

We reinstall the client computers (XP with Office2003) at the end of 2013 because off the impact of this project, I know Online Archive is not compatible with Office 2003 so we can access it in the Outlook Web App.

I want to use an automatic archive option for the whole company. I wanna do this with a group policy or in Exchange 2010. I have tested with the retention policy tags but this will not work. We also want  to use the auto-archive for folders like "Inbox, deleted items, sent items".

Is this possible? Can anyone tell me how i can make this possible. I have allready read the technet Retention Policy settings and information about it but it won't work for the folders i want.

When i make a new Retention Policy Tag for "Inbox" or "Sent Items" i get the error: Unable to execute the task, reason: MoveToArchive can only be appolied to tags of default ('All') or Personal.

Thanks! Raymond

I just recently implemented EX2013 in an existing organization with EX2010.  Client access has been repointed to the EX2013 server, and Outlook, ActiveSync, OWA, etc. for user mailboxes on both EX2013 and EX2010.  I have a TMG proxying external connections to EX2013.

I am currently finishing up the implementation, and in testing the Apps for Office, I am running into authentication issues.  In OWA, I can use the Apps without issue (such as Bing Maps) from both internal and external clients.  But in Outlook 2013, I am receiving prompts for credentials when trying to open the Apps from within a message (both internally and externally).

When trying to use an App in a message, I am first prompted for credentials as in the screenshot below:

After entering in my credentials and clicking OK, I am then prompted again for credentials.  This time I noticed the credential prompt indicates IE requesting them.

I get the prompt from IE about 10 times, but if I keep hitting OK, the App finally loads as you would expect.  I have referenced the blog regarding publishing EX2013 through TMG and specifically addressing the authentication for Apps for Office (http://blogs.technet.com/b/exchange/archive/2012/11/21/publishing-exchange-server-2013-using-tmg.aspx), but still no luck.  This actually happens both internally as well as externally, and when watching the TMG server, I can see the traffic to the Exchange Server pass through unhindered.

OWA is published using FBA on the TMG and delegating Basic back to EX2013.

OA is published using Basic on the TMG and delegating Basic back to EX2013.

On EX2013, running Get-OwaVirtualDirectory -Server EX2013 | fl *auth* I get the following:

ClientAuthCleanupLevel              : High
InternalAuthenticationMethods    : {Basic}
BasicAuthentication                   : True
WindowsAuthentication              : False
DigestAuthentication                 : False
FormsAuthentication                 : False
LiveIdAuthentication                 : False
AdfsAuthentication                   : False
OAuthAuthentication                : False
ExternalAuthenticationMethods : {Fba}

Running Get-WebServicesVirtualDirectory -Server EX2013 | fl *auth* I get the following:

CertificateAuthentication     :
InternalAuthenticationMethods : {Basic, Ntlm, WindowsIntegrated, WSSecurity, OAuth}
ExternalAuthenticationMethods : {Basic, Ntlm, WindowsIntegrated, WSSecurity, OAuth}
LiveIdNegotiateAuthentication :
WSSecurityAuthentication      : True
LiveIdBasicAuthentication     : False
BasicAuthentication           : True
DigestAuthentication          : False
WindowsAuthentication         : True
OAuthAuthentication           : True
AdfsAuthentication            : False

I have double and triple checked the TMG rule for Apps for Office, and the rule is configured correctly per the TechNet blog post referenced above.  No other authentication issues are being experienced for any other access.

Any thoughts or ideas would be appreciated.

Hi all

I encountered a weird issue when migrating Public Folders from Exchange 2010 to 2013. I follow part 2 of the tutorial from msexchange.org, and came as far as the command

[PS] C:\PB-Migration>New-PublicFolderMigrationRequest -SourceDatabase (Get-PublicFolderDatabase -server EXCH.domain.com) -CSVData (Get-Content .\PB-Folder-Mailbox-Map-Final.csv -Encoding Byte)

When then running Get-PublicFolderMigrationRequest | Get-PublicFolderMigrationRequestStatistics, I got the following error:

Cannot process argument transformation on parameter 'Identity'. Object reference not set to an instance of an object.
    + CategoryInfo          : InvalidData: (\:PSObject) [Get-PublicFolde...questStatistics], ParameterBindin...mationE
   xception
    + FullyQualifiedErrorId : ParameterArgumentTransformationError,Get-PublicFolderMigrationRequestStatistics
    + PSComputerName        : exch2013.domain.com

Having a closer look at the migration request, it struck me that the name column was empty:

[PS] C:\PB-Migration>Get-PublicFolderMigrationRequest

Name                                           SourceDatabase                                 Status
----                                           --------------                                 ------
                                               CompanyPublicFolders                         InProgress

The identity of the migration request is reported as 00000000-0000-0000-0000-000000000000, but also here something seems to go bad:

[PS] C:\PB-Migration>Get-PublicFolderMigrationRequestStatistics -Identity "00000000-0000-0000-0000-00000000000"

After a while, the status of the migration request changed from "In Progress" to "Failed".

How can I get a "handle" on this migration request, for either canceling/removing it or finding the reason for failure?

Thanks for reading and regards
/Maurice

I know there isn't a migration path for Exchange 2003 but has anyone tried any type of work around?  I'm thinking about moving one of my customers users mailboxes to PST files and them importing them into Exchange 2013 on a 2012 server.  Has anyone had any experience doing this?  Below are the details of what I have and what I was thinking about doing:

Small Network - approx. 10 users

Server 2003 Sp3 standalone AD DC with Exchange 2003

Would like to move straight to Server 2012 with Exchange 2013

If I export the mailboxes and uninstall Exchange from the 2003 server will Server 2012 join the domain and upgrade the existing AD schema (forest and domain)?  If it would, could I then install Exchange 2013 on that server, create the mailboxes for the users and import the PST files?

Just wondering if anyone has tried this, or something similar.  They don't have an extra server to move everything to 2010 first so it's either a workaround or move them to Exchange 2010 (which Microsoft has quit selling).  I'm sure this will put a lot of small business VARs in a bad situation. 

(Just as a side note) Is it true that Dell and HP have quit selling Windows 7 Pro? My vendor still sells it and will for 18 more months.

Hi All,

We recently migrate all the e-mail services from exchange 2003 to 2010. All the services running pretty well for months and we now decide to remove the old exchange 2003 servers. I’ve read some of the doc from Microsoft such as:

http://technet.microsoft.com/en-us/library/gg576862(v=exchg.141).aspx

http://technet.microsoft.com/en-us/library/bb125110(v=EXCHG.65).aspx

But I still got some confusing about it.

We have a root domain and its child domain. We deployed exchange 2003 in both domains and the exchange servers are configured in front end/back end in multi sites.

My question are:

1. Is there any recommended order to remove exchange 2003 server such as for example: remove back end first, then front end?
2. When remove an exchange 2003 server which currently holding RUS, can I move it to a front end server or it has to be held by the back end server?
3. When the uninstallation task comes to the final exchange 2003 server, how can I deal with the administrative group?

Any advices are welcome.

Exchange Lync Sharepoint

Exit from email hosting service for 1500 users, to on-premise Ex2013.

AD already local and users all have accounts.

Have a CSV with all data for each user.

Anyone care to share their favorite PowerShell to bulk create mailboxes, plus will populate the GAL with:

FirstName, LastName, HomePhone, MobilePhone, Phone, Company, Title, Department, Office

...and add an archive DB to the mbx.

I have several variations i'm trying such as:

$mailbox=import-csv C:\<filename>.CSV
ForEach ($mailbox in $mailbox) {Enable-Mailbox -Identity $Mailbox.Identity -Database $Mailbox.Database | Enable-Mailbox –Archive -ArchiveDatabase "<enter archive db name here>"}<o:p></o:p>

However want to do this all in one pass if possible, so need to finetune the PS.

(Also had a look at http://www.telnetport25.com/2012/11/ebuctexchange-2013-bulk-user-creation-tool/ which looks quite cool, but only creates a blank mbx).

adsnow

We have configured local AD domain similar to external domain name.
In all we have 5 accepted domains in exchange 2013. The external domain name similar to internal domain is not yet active in public record (MX Record). When we configure certificate name with one of the accepted domain, internal domain users does not get authenticated on local domain. Where as when we use same domain name within certificate local users are authenticated but Outlook anywhere users are not authenticated.

Any help from anyone will highly appreciated. Our project is stuck because of this.

Regards,

Santosh Dave Head of Infrastructure Technology & Services Elite Technologies Middle East Kingdom of Bahrain, Manama.

Hi,

Is any way to create trusted certificate request, and purchase it in GoDaddy without exchange server installed in the network and then after a while install it?

I realize it may seems ridiculous but I have reason to do this way.

Thank you for your help.

KB Article Number(s): 982720

Language: All (Global)

Platform: x64

Location: (http://hotfixv4.microsoft.com/Windows%207/WindowsServer%202008%20R2/sp1/Fix320582/7600/free/413062_intl_x64_zip.exe)

am not able to extract it, getting error.  seems like there is an issue, hence can anyone assist me in getting the above update to move ahead with my installation of Exchange 2007.

Thanks,

Vinod

I need help uninstalling Exchange 2013. The uninstaller fails with these 2 errors:

This computer is responsible for expanding the membership of 1 distribution groups. These groups must be reassigned to another server before Setup can continue.
This computer is responsible for expanding the membership of 1 dynamic distribution groups. These groups must be reassigned to another server before Setup can continue.

I've gone so far as to disabling all distribution groups which removes its email properties and the uninstaller still fails.
This is what happens in the eventlog:

System.Management.Automation.ParseException: At line:1 char:67
+ Get-DynamicDistributionGroup | where {$_.ExpansionServer -eq '/o='s-Hertogenbosc ...
+                                                                   ~~~~~~~~~~~~~
Unexpected token 's-Hertogenbosch/ou=Exchange' in expression or statement.
At line:1 char:175
+ ... s/cn=CADEXCDB13'}
+                    ~~
The string is missing the terminator: '.

At line:1 char:38
+ Get-DynamicDistributionGroup | where {$_.ExpansionServer -eq '/o='s-Hertogenbosc ...
+                                      ~
Missing closing '}' in statement block.
   at System.Management.Automation.PowerShell.EndInvoke(IAsyncResult asyncResult)
   at Microsoft.Exchange.Configuration.MonadDataProvider.MonadPipelineProxy.ClosePipeline(MonadAsyncResult asyncResult)
] [ParentValue:"<NULL>"] [Thread:11] [Duration:00:00:00.0156248]

I'm sure what happens here is the powershell commands looking at the distribution groups fail, because of our city name ('s-Hertogenbosch). Because of the apostrophe, the parameter is not passed successfully of this legacyExchangeDN. As this check fails, I believe the readiness check fails on these steps.

This legacy administrative group name is still left from a 2003 -> 2010 -> 2013 migration.

I've opened a Microsoft support request for this last week, but I thought someone might have dealt with this? I want to do a clean uninstall if possible.

All  --

I have a large scale Exchange Migration occuring with over 4000 users between 2 completely seperate active directory forest.  Due to the large amount of data i'd like to do a pull of all data 2 weeks prior,and then during the cutover do just a delta.  The email tool that I am using requires me to have staged on my side the proper SMTP address of the user that's migrating in.  The issue: If I stage an account on my side, and one of my internal users sends and email to that staged email address, my exchange enviornment will send it to the mailbox in my enviornment.  This is not desirable as I'd like mail flow for that domain to continue to go the clients mailbox until I take over the MX record.

So the question is, how can I have email mailboxes @whatever.com in my exchange enviornment, without intecepting internal email from @whatever.com. This is for my internal users only, I'm aware that I don't own the MX record yet so I won't be getting mail from the outside world at this address space.

I do not have this domain as an accepted domain, but i tested by adding an additional email address to my mailbox,test@whatever.com, and my Exchange enviornment still delivered me the messege. 

Running Exchange 2010 SP1.  Any help would be appreciated.

George Talbert

I have two Exchange 2010 servers in a CAS array (single site) The FQDN for the CAS Array is cas.mydomain.com. Users get to OWA using mail.mydomain.com

I'm using a third party UCC cert and on that cert, I have autodiscover.mydomain.com, mail.mydomain.com, legacy.mydomain.com.  I do not have the CAS Array name on the certificate, nor do I have the server hostnames on the cert.

For DNS:
external DNS, mail.mydomain.com points to our public IP

Internal DNS, mail.mydomain.com points to the VIP of my hardware load balancer

For Set-ClientAccessServer, I have this

AutoDiscoverServiceInternalUri : https://mail.mydomain.com/autodiscover/autodiscover.xml

For OWA, ECP, ActiveSync, EWS and OAB....I have the internal URLs set to mail.mydomain.com

Is this incorrect? I did it this way since I do not have the cas array fqdn on my UCC cert.

Thanks,

Hi

I am now looking forward to setup my first Exchange Server 2013 in the company. I don't really have much experience on Exchange as i'm currently using IBM Domino for our company's corporate mail; same thing goes to most of our IT personnel, we are a bit lack of experience with Exchange Server after so many years supporting IBM Domino.

After doing some homework and research, I was happily confident with the migrating project until someone highlighted to me that "the cost might be higher comparing to IBM Domino as there will also be apaid yearly subscription comes with it."

My question is :

Do i need to subscribe anything on top of my licence and CAL to install my very first Exchange Server 2013? As far as i'm concern, Only software licence and CAL are required. Please anyone.

Is there any compulsary component that i have to install together with the Exchange Server that i need to pay as a annual subscription?

I'm having 10 remote branch. Each branches running Win2K8 domain controller with Domain and Forest functionality set to Win2K3. There's still few branches running Win2K3.

Advise are highly appreciated.

Cheers, Sparcx [MCTS,MCITP-EA]

Hello,

I'm starting a large scale upgrade of Exchange 2007 SP2 to Exchange 2013.

So I first need to upgrade to Exchange 2007 SP3 and CU 11.

Can I slipstream the CU11 with the install of SP3?  If possible how do I do this?

If not, can I install SP3, reboot, install CU11 on the internet-facing CAS servers, moving with SP3+CU11 to the downlevel CAS servers, then to HUB and MBX.     OR do I need to upgrade all exchange servers to SP3 before upgrading to CU11?

Thnx for your answer!

Regards

Frederik

Hi,

Regarding upgrade from 2007 to 2013.

Earlier the proxy and redirect functinality with the "legacy concept" did not work if the CAS was on a multi-role server. Is this the same thing with 2013/2007 or will this work now also when 2007 and 2013 is on each multi-role sever?

/J

I have domain with company.local name and I’m using for public company.com. I’m going to install Exchange 2013 in my organization but I’m not able to buy ssl certificate for my internal DNS anymore from GoDaddy and as far as I know it is still required.

How deal with this? I don’t want to do any major changes in my organization like domain name change and I still want to use trusted domain authority.