Hi guys.

Migrated PF from 2010 to 2013. At the end we wish to remove PF on legacy server and recieve this error.

Is this normal message and it Will not remove anything of public folders on exchange2013 to?

bostjanc

Got a feeling these are legacy groups from Exchange 2003 days and there is no need for them to be Security groups at all.

We've found an issue where, when mailboxes are migrated to 2013, the manager of the group can edit it if its a distro group but not if its a security group.

OK, appreciate we can probably fix this but it seems to be sensible to convert all these security groups to distribution groups anyway. Whats best way to do this?

EAC/Shell/AD?

Team,

I am having three server one is for database and other two i want to use for scom management deployment for high availability for servers. Please help me the deployment guide which cover how to set up management servers in high availibility.

Team,

We want to migrate our existing exchange  2003 to 2010 . Please help me to know when should i change the link state value of exchange 2003 post exchange installation of primary and secondary server bot or after installation of primary server. Also please let me know the article which guide me how to change the link state value and step by step migration guide. 

The time in mailbox migration statistics shows with not my preferred time zone, any idea?

I am getting error message while deploying exchange 2010 sp3 multiple role (Cas,Hub,mailbox). Attach is the error message and event logs screen shot and logs

[11/21/2015 05:54:47.0611] [0] **********************************************
[11/21/2015 05:54:47.0611] [0] Starting Microsoft Exchange Server 2010 Setup
[11/21/2015 05:54:47.0611] [0] **********************************************
[11/21/2015 05:54:47.0626] [0] Local Time Zone: (UTC+05:30) Chennai, Kolkata, Mumbai, New Delhi.
[11/21/2015 05:54:47.0626] [0] Operating System version: Microsoft Windows NT 6.2.9200.0.
[11/21/2015 05:54:47.0626] [0] Setup version: 14.3.123.4.
[11/21/2015 05:54:47.0626] [0] Logged on user: SPSALWAR\exch.
[11/21/2015 05:54:49.0408] [0] Command Line Parameter Name='mode', Value='Install'.
[11/21/2015 05:54:49.0408] [0] Command Line Parameter Name='sourcedir', Value='C:\Exchange 2010 SP3'.
[11/21/2015 05:54:49.0408] [0] Command Line Parameter Name='fromsetup', Value=''.
[11/21/2015 05:54:49.0408] [0] ExSetupUI was started with the following command: '-mode:install -sourcedir:C:\Exchange 2010 SP3 /FromSetup'.
[11/21/2015 05:54:49.0751] [0] Setup is choosing the domain controller to use
[11/21/2015 05:54:49.0939] [0] Setup is choosing a local domain controller...
[11/21/2015 05:54:52.0037] [0] Setup has chosen the local domain controller NEWTON.sps.co.in for initial queries
[11/21/2015 05:54:52.0350] [0] PrepareAD has been run, and has replicated to this domain controller; so setup will use NEWTON.sps.co.in
[11/21/2015 05:54:52.0350] [0] Setup is choosing a global catalog...
[11/21/2015 05:54:52.0381] [0] Setup has chosen the global catalog server NEWTON.sps.co.in.
[11/21/2015 05:54:52.0396] [0] Setup will use the domain controller 'NEWTON.sps.co.in'.
[11/21/2015 05:54:52.0396] [0] Setup will use the global catalog 'NEWTON.sps.co.in'.
[11/21/2015 05:54:52.0412] [0] Exchange configuration container for the organization is 'CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=sps,DC=co,DC=in'.
[11/21/2015 05:54:52.0412] [0] Exchange organization container for the organization is 'CN=sps,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=sps,DC=co,DC=in'.
[11/21/2015 05:54:52.0443] [0] Setup will search for an Exchange Server object for the local machine with name 'EXCHANGE1'.
[11/21/2015 05:54:52.0506] [0] No Exchange Server with identity 'EXCHANGE1' was found.
[11/21/2015 05:54:52.0584] [0] The following roles have been unpacked: 
[11/21/2015 05:54:52.0584] [0] The following datacenter roles are unpacked: 
[11/21/2015 05:54:52.0584] [0] The following roles are installed: 
[11/21/2015 05:54:52.0600] [0] The local server does not have any Exchange files installed.
[11/21/2015 05:54:52.0709] [0] Setup will use the path 'C:\Exchange 2010 SP3' for installing Exchange.
[11/21/2015 05:54:52.0709] [0] The installation mode is set to: 'Install'.
[11/21/2015 05:54:53.0553] [0] An Exchange organization with name 'sps' was found in this forest.
[11/21/2015 05:54:53.0553] [0] Active Directory Initialization status : 'True'.
[11/21/2015 05:54:53.0553] [0] Schema Update Required Status : 'False'.
[11/21/2015 05:54:53.0553] [0] Organization Configuration Update Required Status : 'False'.
[11/21/2015 05:54:53.0553] [0] Domain Configuration Update Required Status : 'False'.
[11/21/2015 05:54:53.0647] [0] Applying default role selection state
[11/21/2015 05:54:53.0662] [0] Setup is determining what organization-level operations to perform.
[11/21/2015 05:54:53.0662] [0] Because the value was specified, setup is setting the argument OrganizationName to the value sps.
[11/21/2015 05:54:53.0662] [0] Setup will run from path 'C:\Windows\Temp\ExchangeSetup'.
[11/21/2015 05:54:53.0709] [0] InstallModeDataHandler has 9 DataHandlers
[11/21/2015 05:54:53.0709] [0] Setup is determining what organization-level operations to perform.
[11/21/2015 05:54:53.0709] [0] Because the value was specified, setup is setting the argument OrganizationName to the value sps.
[11/21/2015 05:54:53.0709] [0] Setup will run from path 'C:\Windows\Temp\ExchangeSetup'.
[11/21/2015 05:54:53.0709] [0] InstallModeDataHandler has 10 DataHandlers
[11/21/2015 05:54:53.0725] [0] Setup is determining what organization-level operations to perform.
[11/21/2015 05:54:53.0725] [0] Because the value was specified, setup is setting the argument OrganizationName to the value sps.
[11/21/2015 05:54:53.0725] [0] Setup will run from path 'C:\Windows\Temp\ExchangeSetup'.
[11/21/2015 05:54:53.0725] [0] InstallModeDataHandler has 11 DataHandlers
[11/21/2015 05:54:53.0740] [0] Setup is determining what organization-level operations to perform.
[11/21/2015 05:54:53.0740] [0] Because the value was specified, setup is setting the argument OrganizationName to the value sps.
[11/21/2015 05:54:53.0740] [0] Setup will run from path 'C:\Windows\Temp\ExchangeSetup'.
[11/21/2015 05:54:53.0740] [0] InstallModeDataHandler has 11 DataHandlers
[11/21/2015 05:54:53.0756] [0] RootDataHandler has 1 DataHandlers
[11/21/2015 05:54:54.0912] [0] Setup encountered an exception when trying to access the setup state file: Could not find file 'C:\ExchangeSetupLogs\exchangeInstallState.xml'.
[11/21/2015 05:56:40.0412] [0] Setup is determining what organization-level operations to perform.
[11/21/2015 05:56:40.0412] [0] Because the value was specified, setup is setting the argument OrganizationName to the value sps.
[11/21/2015 05:56:40.0412] [0] Setup will run from path 'C:\Windows\Temp\ExchangeSetup'.
[11/21/2015 05:56:40.0412] [0] InstallModeDataHandler has 10 DataHandlers
[11/21/2015 05:56:40.0412] [0] Setup is determining what organization-level operations to perform.
[11/21/2015 05:56:40.0412] [0] Because the value was specified, setup is setting the argument OrganizationName to the value sps.
[11/21/2015 05:56:40.0412] [0] Setup will run from path 'C:\Windows\Temp\ExchangeSetup'.
[11/21/2015 05:56:40.0412] [0] InstallModeDataHandler has 9 DataHandlers
[11/21/2015 05:56:40.0412] [0] Setup is determining what organization-level operations to perform.
[11/21/2015 05:56:40.0412] [0] Because the value was specified, setup is setting the argument OrganizationName to the value sps.
[11/21/2015 05:56:40.0412] [0] Setup will run from path 'C:\Windows\Temp\ExchangeSetup'.
[11/21/2015 05:56:40.0412] [0] InstallModeDataHandler has 0 DataHandlers
[11/21/2015 05:56:40.0412] [0] Setup is determining what organization-level operations to perform.
[11/21/2015 05:56:40.0412] [0] Because the value was specified, setup is setting the argument OrganizationName to the value sps.
[11/21/2015 05:56:40.0412] [0] Setup will run from path 'C:\Windows\Temp\ExchangeSetup'.
[11/21/2015 05:56:40.0412] [0] InstallModeDataHandler has 0 DataHandlers
[11/21/2015 05:56:49.0546] [0] Setup is determining what organization-level operations to perform.
[11/21/2015 05:56:49.0546] [0] Because the value was specified, setup is setting the argument OrganizationName to the value sps.
[11/21/2015 05:56:49.0546] [0] Setup will run from path 'C:\Windows\Temp\ExchangeSetup'.
[11/21/2015 05:56:49.0546] [0] InstallModeDataHandler has 9 DataHandlers
[11/21/2015 05:56:50.0436] [0] Setup is determining what organization-level operations to perform.
[11/21/2015 05:56:50.0436] [0] Because the value was specified, setup is setting the argument OrganizationName to the value sps.
[11/21/2015 05:56:50.0436] [0] Setup will run from path 'C:\Windows\Temp\ExchangeSetup'.
[11/21/2015 05:56:50.0436] [0] InstallModeDataHandler has 10 DataHandlers
[11/21/2015 05:56:51.0389] [0] Setup is determining what organization-level operations to perform.
[11/21/2015 05:56:51.0389] [0] Because the value was specified, setup is setting the argument OrganizationName to the value sps.
[11/21/2015 05:56:51.0389] [0] Setup will run from path 'C:\Windows\Temp\ExchangeSetup'.
[11/21/2015 05:56:51.0389] [0] InstallModeDataHandler has 11 DataHandlers
[11/21/2015 05:58:31.0549] [0] Validating options for the 0 requested roles
[11/21/2015 05:58:31.0924] [0] Validating options for the 0 requested roles
[11/21/2015 05:59:36.0175] [0] Validating options for the 0 requested roles
[11/21/2015 05:59:56.0133] [0] Active Directory session settings for 'Get-ExchangeServer' are: View Entire Forest: 'True', Configuration Domain Controller: 'NEWTON.sps.co.in', Preferred Global Catalog: 'NEWTON.sps.co.in', Preferred Domain Controllers: '{ NEWTON.sps.co.in }'
[11/21/2015 05:59:56.0180] [0] Beginning processing Get-ExchangeServer
[11/21/2015 05:59:56.0227] [0] Searching objects of type "Server" with filter "(VersionNumber LessThan 1941995520)", scope "SubTree" under the root "$null".
[11/21/2015 05:59:56.0243] [0] Previous operation run on domain controller 'NEWTON.sps.co.in'.
[11/21/2015 05:59:56.0243] [0] Preparing to output objects. The maximum size of the result set is "unlimited".
[11/21/2015 05:59:56.0417] [0] Ending processing Get-ExchangeServer
[11/21/2015 06:00:53.0814] [0] Active Directory session settings for 'Get-ExchangeServer' are: View Entire Forest: 'True', Configuration Domain Controller: 'NEWTON.sps.co.in', Preferred Global Catalog: 'NEWTON.sps.co.in', Preferred Domain Controllers: '{ NEWTON.sps.co.in }'
[11/21/2015 06:00:53.0814] [0] Beginning processing Get-ExchangeServer
[11/21/2015 06:00:53.0814] [0] Searching objects of type "Server" with filter "(VersionNumber LessThan 1941995520)", scope "SubTree" under the root "$null".
[11/21/2015 06:00:53.0814] [0] Previous operation run on domain controller 'NEWTON.sps.co.in'.
[11/21/2015 06:00:53.0814] [0] Preparing to output objects. The maximum size of the result set is "unlimited".
[11/21/2015 06:00:53.0814] [0] Ending processing Get-ExchangeServer
[11/21/2015 06:01:47.0039] [0] Validating options for the 0 requested roles
[11/21/2015 06:01:47.0993] [0] **************
[11/21/2015 06:01:47.0993] [0] Setup will run the task 'Start-PreConfiguration'
[11/21/2015 06:01:47.0993] [1] Setup launched task 'Start-PreConfiguration -Mode 'Install' -Roles 'LanguagePacks','AdminToolsRole','BridgeheadRole','ClientAccessRole','MailboxRole''  
[11/21/2015 06:01:48.0025] [1] Active Directory session settings for 'Start-PreConfiguration' are: View Entire Forest: 'True', Configuration Domain Controller: 'NEWTON.sps.co.in', Preferred Global Catalog: 'NEWTON.sps.co.in', Preferred Domain Controllers: '{ NEWTON.sps.co.in }'
[11/21/2015 06:01:48.0040] [1] Beginning processing Start-PreConfiguration -Mode:'Install' -Roles:'LanguagePacks','AdminToolsRole','BridgeheadRole','ClientAccessRole','MailboxRole'
[11/21/2015 06:01:48.0134] [1] Loaded component 'Prereq Configuration' with 3 task information blocks from 'res://AdminToolsPreConfig.xml'
[11/21/2015 06:01:48.0134] [1] Loaded component 'Prereq Configuration' with 3 task information blocks from 'res://AllServerRolesPreConfig.xml'
[11/21/2015 06:01:48.0150] [1] Loaded component 'Prereq Configuration' with 1 task information blocks from 'res://AllADRolesPreConfig.xml'
[11/21/2015 06:01:48.0150] [1] Loaded component 'Prereq Configuration' with 1 task information blocks from 'res://BridgeheadPreConfig.xml'
[11/21/2015 06:01:48.0150] [1] Loaded component 'Prereq Configuration' with 5 task information blocks from 'res://ClientAccessPreConfig.xml'
[11/21/2015 06:01:48.0165] [1] Loaded component 'Prereq Configuration' with 2 task information blocks from 'res://MailboxPreConfig.xml'
[11/21/2015 06:01:48.0165] [1] Loaded component 'Prereq Configuration' with 1 task information blocks from 'res://LanguagePacksPreConfig.xml'
[11/21/2015 06:01:48.0384] [1] Loaded 7 parameters from the configuration file "C:\Windows\Temp\ExchangeSetup\bin\EnterpriseServiceEndpointsConfig.xml".
[11/21/2015 06:01:48.0384] [1] Writing informational script to 'C:\ExchangeSetupLogs\Start-PreConfiguration-20151121-1131480196761600013.ps1'
[11/21/2015 06:01:48.0400] [1] Executing: $RoleADToolsNeeded = $False
[11/21/2015 06:01:48.0400] [1] Executing: $RoleBinPath = 'C:\Windows\Temp\ExchangeSetup'
[11/21/2015 06:01:48.0400] [1] Executing: $RoleDatacenterPath = 'C:\Windows\Temp\ExchangeSetup\Datacenter'
[11/21/2015 06:01:48.0400] [1] Executing: $RoleDatacenterServiceEndpointABCHContactService = '<ServiceEndpoint><Url>http://pvt-contacts.msn.com/abservice/abservice.asmx</Url></ServiceEndpoint>'
[11/21/2015 06:01:48.0400] [1] Executing: $RoleDatacenterServiceEndpointDomainPartnerManageDelegation = '<ServiceEndpoint><Url>https://domains.live.com/service/managedelegation.asmx</Url></ServiceEndpoint>'
[11/21/2015 06:01:48.0400] [1] Executing: $RoleDatacenterServiceEndpointDomainPartnerManageDelegation2 = '<ServiceEndpoint><Url>https://domains.live.com/service/managedelegation2.asmx</Url></ServiceEndpoint>'
[11/21/2015 06:01:48.0400] [1] Executing: $RoleDatacenterServiceEndpointLiveFederationMetadata = '<ServiceEndpoint><Url>https://nexus.passport.com/FederationMetadata/2006-12/FederationMetadata.xml</Url></ServiceEndpoint>'
[11/21/2015 06:01:48.0400] [1] Executing: $RoleDatacenterServiceEndpointLiveGetUserRealm = '<ServiceEndpoint><Url>https://login.live.com/GetUserRealm.srf</Url></ServiceEndpoint>'
[11/21/2015 06:01:48.0400] [1] Executing: $RoleDatacenterServiceEndpointLiveServiceLogin2 = '<ServiceEndpoint><Url>https://login.live.com/RST2.srf</Url></ServiceEndpoint>'
[11/21/2015 06:01:48.0400] [1] Executing: $RoleDatacenterServiceEndpointMsoFederationMetadata = '<ServiceEndpoint><Url>https://nexus.microsoftonline-p.com/FederationMetadata/2006-12/FederationMetadata.xml</Url></ServiceEndpoint>'
[11/21/2015 06:01:48.0400] [1] Executing: $RoleInstallationMode = 'Install'
[11/21/2015 06:01:48.0400] [1] Executing: $RoleInstallPath = 'C:\Windows\Temp\ExchangeSetup'
[11/21/2015 06:01:48.0400] [1] Executing: $RoleInstallWindowsComponents = $False
[11/21/2015 06:01:48.0400] [1] Executing: $RoleInvocationID = '20151121-1131480196761600013'
[11/21/2015 06:01:48.0400] [1] Executing: $RoleIsDatacenter = $False
[11/21/2015 06:01:48.0400] [1] Executing: $RoleIsPartnerHosted = $False
[11/21/2015 06:01:48.0400] [1] Executing: $RoleIsServerSbs = $False
[11/21/2015 06:01:48.0415] [1] Executing: $RoleIsWindows8OrHigher = $True
[11/21/2015 06:01:48.0415] [1] Executing: $RoleLoggingPath = 'C:\Windows\Temp\ExchangeSetup\Logging'
[11/21/2015 06:01:48.0415] [1] Executing: $RoleProductPlatform = 'amd64'
[11/21/2015 06:01:48.0415] [1] Executing: $RoleRoles = 'LanguagePacks,AdminToolsRole,BridgeheadRole,ClientAccessRole,MailboxRole'
[11/21/2015 06:01:48.0415] [1] Executing: $RoleSetupLoggingPath = 'C:\ExchangeSetupLogs'
[11/21/2015 06:01:48.0415] [1] Executing: $RoleTargetVersion = '14.03.0123.004'
[11/21/2015 06:01:48.0415] [1] 15 tasks were found to execute.
[11/21/2015 06:01:48.0415] [1] Processing component 'Prereq Configuration' (Configuring the server.).
[11/21/2015 06:01:48.0431] [1] Executing: 
          if($RoleInstallWindowsComponents)
          {
            # Install any Windows Roles or Features required for the Management Tools role
            if ($RoleIsWindows8OrHigher)
            {
              if($RoleADToolsNeeded)
              {

Hi guys.

1 Active directory SITE with 2 domains

1 Exchange organization with each exchange2013 server in each domain.

We have a user JOHN in domain1 (SITE1): DOMAIN1\JOHN

We have a user JOHN in domain2 (SITE2): DOMAIN2\JOHN

The current situation is that a domain user located in domain1/site1 has mailbox on SITE2.

We would like to move this mailbox to user JOHN in domain2/site2.

How can we achieve that?

I've heard about exporting e-mails to pst, but how do you track changes durring the export process (new e-mail messages that came durring the export/import process?)?

Any other sugestions?

bostjanc

Hi,

We had a 3-node DAG cluster that was going fine, but then- after our primary WSUS server ground to a halt- had a raft of updates to catch up on, which seem to have ground Exchange 2013 to a halt.

Here's the scenario now: Exchange is running from 2 of the original 3 DAG nodes, and it's.. ok, providing we don't touch it.

The third node has been completely rebuilt from the OS up: so, that's Server 2012 R2, Dell HITKit (we run EqualLogic storage), patch Windows, install Exchange pre-req's, then install Exchange 2013 CU10. At this point, this 3rd node isn't doing anything- it's not part of the DAG yet, has no mailboxes, nothing. But it takes forever to boot, and numerous- random- Exchange services fail to start.

I've "fixed" this by putting all the Exchange services to a delayed start... has anyone else (a) experienced this and (b) fixed it properly? With the delayed start, Exchange comes up nice and cleanly but I don't understand they this server is so slow: it has 20GB of RAM with 8 processors. The Hyper-V host is nearing the end of its RAM- 16GB left or so- but the CPUs never go much beyond 35%, and that's a spike; normally they do nothing much (2 x 6 core).

I'd be really grateful for any help on this as it's just weird.

Many thanks,

Rhidian

Hi guys.

Does this service (which is by default set tu MANUAL) need to be switched to automatic and turned on if you wish to use WINDOWS SERVER BACKUP for backup exchange?

Microsoft Exchange Server Extension for Windows Server backup

bostjanc

I'm well into moving my mailboxes from server 2010 to 2013 (CU8).  I noticed that most if not all of the users who are migrated seem to have a second "Contacts" folder after the migration completes.  This new folder is blank and the option to delete the folder is grayed out.  The original folder contains all contacts created while on 2010 and while the option to delete it is available, it warns the user that they don't have permission to delete the folder.

I've read that CU9 should prevent this problem from occurring during future migrations so I will be halting my migrations until I can update my environment to CU10.

However, does anyone know how I can resolve my problem with mailboxes who already have the duplicate "Contacts" folders?  I doubt applying CU9 will retroactively resolve this so I'm hoping somebody has a script or other resource that will simplify the process. Otherwise I believe my only solution is to log on to every mailbox with a full access account, copy the contacts from the original folder to the new one, and delete the original folder.

Hi guys.

Two EXCHANGE 2013 servers in different sites.

Active Directory has.

PRIMARYDOMAIN (site1)

CHILDDOMAIN (site2)

FQDN of exchange2013 server in site1: EXCHANGE.DOMAIN.LOCAL

FQDN of exchange 2013 server in site2: EXCHANGE.CHILD.DOMAIN.LOCAL

After adding second exchange server (from site2) to DAG, we recieve an error:

A server-side database availability group administrative operation failed. Error The operation failed. CreateCluster errors may result from incorrectly configured static addresses. Error: Windows Failover Clustering timed out while trying to validate server EXCHANGE.CHILD.DOMAIN.LOCAL'. If this is in a disjoint DNS namespace, the DNS suffixes for all servers in the database availability group must be present on every server.. [Server: EXCHANGE.DOMAIN.LOCAL]

We have tried adding 2nd Exchange server into DAG on both sides thru Administrative Exchange Control WEB, but the error remains the same.
Any hints what to do?

bostjanc

Hi There,

Last night i installed Exchange Server 2013 in my virtual LAB on server 2012.

I setup Exc. and it work perfectly.

I want to enable sending emails from my Lab domain and also receive emails from internet.

I have .info domain registered and i forwarder to my PC and i opened pop3 and imap ports and also 80-443.

By microsoft manual about creating Send connector is written:

6. Under Address space, click Add +. In theAdd domain window, make sure SMTP is selected in theType field. In the Fully Qualified Domain Name (FQDN) field, enter*. Click Save

But when i enter *. i got error message:

The SMTP domain "*." isn't valid.

Dear Microsoft... what a ghell? :)

I also try to put on this field FQDN smtp server of my internet provider smtp.domainname.com but emails cannot be send out...

Here is an print srcee of the error...

http://snag.gy/zEhqC.jpg

How to solve this problem?

Thanks

Team,

I want to create server signature on exchange 2013 for internal as well as external. Requesting to please guide implementation steps to be taken for configuring.

Hi,

I am getting the following error when running New-MoveRequest against a user to migrate them:-

Multiple objects with Guid <guid> were found.
    + CategoryInfo          : NotSpecified: (:) [New-MoveRequest], RemotePermanentException

I get the same error whether using the user SAM account name, e-mail or guid to start the move. Doing a get-mailbox on the guid only brings back the user who we are trying to move, no others.

Anyone have any idea how we can fix this issue or find the erroneous GUID?

The migration is going from on Premise Exchange 2007 to on Premise Exchange 2013, there is no Exchange Online in the environment at all. The source and destination databases are within the same site, domain and forest so there should be no issue with that either. Multiple other users are migrating fine (over a thousand so far), just this user we are having issues with.

Any help would be appreciated.

Regards

Tony

Hi guys.

We have Lync users who Will be enabled for IP TELEPHONY.

We Will enable them unified messaging.

The thing is that by default those users have due to Lync DEFAULT settings "redirection to VOICE MAIL after 15seconds" after you enable them unified messaging.Is there a way to avoid this?

For example that default setting would be to forward their "unavailability" to a phone number?

I know that they can do this in lync settings but we would like to achieve this before they are being enabled for VOICE MAIL.

We would like to do it on "central admin-way" ?

with best regards

bostjanc

We are currently in co-existence with Ex2013 and Ex2010 and when using hosts file to test pointing CAS, OWA and AutoDiscover URLs to Ex2013 we are getting password prompts when starting Outlook at the Loading Profile stage.  I have tried everything I can find in the forums, and as far as I can tell, the Auth Methods look good.

Get-OutlookAnywhere |fl *servername*,*auth*

ServerName                         : EX10CAS01
ExternalClientAuthenticationMethod : Ntlm
InternalClientAuthenticationMethod : Ntlm
IISAuthenticationMethods           : {Basic, Ntlm, Negotiate}

ServerName                         : EX10CAS02
ExternalClientAuthenticationMethod : Ntlm
InternalClientAuthenticationMethod : Ntlm
IISAuthenticationMethods           : {Basic, Ntlm, Negotiate}

ServerName                         : EX13CAS01
ExternalClientAuthenticationMethod : Ntlm
InternalClientAuthenticationMethod : Ntlm
IISAuthenticationMethods           : {Basic, Ntlm, Negotiate}

ServerName                         : EX13CAS02
ExternalClientAuthenticationMethod : Ntlm
InternalClientAuthenticationMethod : Ntlm
IISAuthenticationMethods           : {Basic, Ntlm, Negotiate}

I have also tried setting ExternalClientAuthenticationMethod to Basic, but that hasn't helped so far.  Outlook clients connect fine when going through 2010 CAS, the issue is only when testing 2013 CAS with hosts file.

I have something of a conundrum with our company's Exchange environment.  The current issues are not pressing, but at some point they will have to be dealt with and I want to get input on possible plans to deal with it.

Our situation is that two years ago, we made a determination to host our email in house with Exchange 2013.  At the time, we did not have sufficient budget to purchase two servers, so Exchange and our DC went in on the same box.  Yes, I understand this is not recommended, but we did not have a choice at the time.  Our topology also forced us into a configuration I've never been happy with.  Specifically, our DC / Exchange is multihomed because it has one public facing IP address (I've managed to deal with this issue by not allowing the public IP address to register in DNS).  Despite these issues, we've had minimal problems once we understood what the challenges were and took steps to mitigate them.

Budgets have gotten better over the past two years, however, and I have more options at my disposal.  We still have Server A, the Exchange 2013 / DC machine.  We also now have Server B and Server C, both of which takes care of some other functions for us.  Server A is a 2012R2 machine acting as a file server, Server C is a 2008R2 machine acting as an application server.  Life would be easy if I could simply promote Server B or C to be a DC, transfer the FSMO roles to it, then demote Server A as a DC.  Unfortunately, this is not supported by Microsoft: https://technet.microsoft.com/en-us/library/ms.exch.setupreadiness.warninginstallexchangerolesondomaincontroller%28v=exchg.150%29.aspx

"Demoting a domain controller to a member server isn’t supported."

I admit that it is irritating that Microsoft tells us that this is not supported, but then doesn't even bother to say why, but that's a discussion for a different thread.

So, to recap, the current environment: Server A hosts Exchange and DC, and has a private LAN address and a public facing IP address for mail flow.  Server B is a file server only, and has only a private LAN address.  Server C hosts a custom application that we are retiring within the next year and also has only a private lan IP address.

My goal is to separate Exchange from the DC.  Here's my current thought:

Step 1: Promote Server C to be a DC and transfer FSMO roles to it (our domain and forest function levels are already at 2008R2 levels.  This should not cause a problem).

Step 2: Spin up a hyper-v VM on Server B and join it to the domain, then install Exchange 2013 on the VM as part of the already existing Exchange organization.  The VM will initially have only a private lan IP address.

At this point is where I get fuzzy.  I search for information on what configurations you can use when running two Exchange servers in one organization, and I'm not getting clear answers.  So if what I say from here is wrong, don't be shocked :)

Step 3: Bring down mail flow entirely.  We have a smart host that hands off incoming email to Exchange and I can make it hold incoming email in its queue for as long as needed.

Step 4: Move all mailboxes from Server A to Exchange on Server B.  Move all public folders (we don't actually have any right now) to Server B.  Move offline address book to Server B.  Change URLs for OWA, ActiveSync, ECP to point to Server B.

Step 5: Make whatever changes needed to receive and send connectors so that the new Exchange server can handle mail flow in the same fashion as the original Exchange installation on Server A.

Step 6: Modify internal DNS to point clients to new Exchange installation on Server B.  Shutdown Server A.  Test mail flow internally for functionality.

Step 7: Assign the public facing IP address of Server A to the new Exchange installation on Server B.

Step 8: Test mail flow from external sources, inbound and outbound.

Step 9: Up until this point, I should be able to roll back to my original configuration without much difficulty if something goes wrong.  After this step, changes occur that can't be undone.

Step 10: Boot up Server A.  Uninstall Exchange 2013 from Server A.

Step 11: Test mail flow again for thoroughness.

Step 12: Demote Server A to member server.  Remove Server A from the domain.

Step 13 (maybe...I don't know if this is necessary or not.  Input would be appreciated): Reinstall a fresh copy of Windows Server 2012 on Server A.

Step 14: Join Server A to domain as a member server.

Step 15: Install Exchange Server 2013 on Server A.

Step 16: Repeat the migration steps.  Move all mailboxes back to Exchange on Server A, move offline address book, change URLs for appropriate virtual directories, reconfigure connectors, modify internal DNS to point to Server A, shutdown Exchange VM on Server B, test internal mail flow, assign public facing IP address to Server A, test external mail flow.

Step 17: Boot up Exchange VM on Server B.  Uninstall Exchange 2013 from hyper-v VM on Server B.

Step 18: Remove hyper-v VM on Server B from domain.

Step 19: Kill hyper-v VM on Server B.

Naturally, this is a long arduous process, fraught with the possibility of failures.  Many mailbox database backups will be made along the way, undoubtedly.  If there is an easier way that I'm missing, I'm open to it.  One other idea I considered was setting up High Availability for both Exchange servers, on the idea that all data would replicate between them, then bringing down Exchange on Server A, leaving the VM on server B to handle everything.

Exchange Trusted Subsystem is a part of SERVER's local Administrator's group
I am not sure why I am getting this error.

Log Name:      Application
Source:        MSExchangeSetup
Date:          11/24/2015 11:12:44 PM
Event ID:      1002
Task Category: Microsoft Exchange Setup
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      
Description:
Exchange Server component Mailbox role: Transport service failed.
Error: Error:
The following error was generated when "$error.Clear();
          if (![String]::IsNullOrEmpty($RoleDomainController))
          {
              $masSid = add-ManagedAvailabilityServerGroupMember -DomainController $RoleDomainController -ServerName $RoleNetBIOSName
          }
        " was run: "Microsoft.Exchange.Data.Directory.ADOperationException: Active Directory operation failed on . This error is not retriable. Additional information: Insufficient access rights to perform the operation.
Active directory response: 00002098: SecErr: DSID-03150BB9, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
 ---> System.DirectoryServices.Protocols.DirectoryOperationException: The user has insufficient access rights.

IBM Microsoft Exchange Server Support Group

Is the new Microsoft Identity Manager 2016 product supported to perform GAL Sync between two forests in an Exchange 2007 to 2013 migration scenario?