I am planning an upgrade from Exchange 2007 to Exchange 2013 and I have some OWA and Activesync questions.  First, I've done quite a bit of research reading thru the Technet guides, Exchange Deployment Assistant and also going thru the book Mastering Exchange Server 2013. 

Once I install the first Exchange 2013 CAS server, I'm not really sure what happens next or what I should expect. 

1) Exchange Deployment assistant says "As part of the upgrade process, this FQDN will be moved from your Exchange 2007
server to the new Exchange 2013 server. Your Exchange 2007 server will be assigned a new FQDN, such as legacy.contoso.com."

It looks like this is a manual step, not something that happens automatically.  Is this correct?

2) Just because the first 2013 CAS server is installed, this does not affect any clients (OWA and Activesync) that are still on the 2007 server until I change DNS or firewall settings to go to the new Exchange 2013 CAS.

Is this a correct understanding?

3)  If I'm understanding how this works correctly (question 1 and 2), then at what point do I change the virtual directories in Exchange 2007 to "legacy.domain.com"?  My concern is that as soon as I change the VDirs, then all the clients may not be able to access the servers or they'll get an SSL cert error.  I'm assuming I would want to do this at the same time that I'm changing DNS and firewall settings to point to the new Exchange 2013 CAS server. 

Current Setting     webmail.domain.com --> Public IP 1.1.1.1 (NAT) --> internal IP 172.30.8.12  (Exchange 2007 CAS)

Changes to be made (at the same time):

a) Change firewall NAT to point to new internal IP 172.30.8.13  (Exchange 2013 CAS)

b) Change Vdirs in Exchange 2007 CAS server

Is this correct?

4) Once I make the necessary DNS and firewall changes to point OWA and Activesync clients to the new Exchange 2013 CAS servers, (assuming the client mailboxes are still on 2007 servers) will these clients get an SSL cert error when they get redirected to the legacy servers (i.e. "legacy.domain.com") ?

Per Exchange Deployment Assistant:Your end users will not see or use the legacy host name. It will be used by Autodiscover and Client Access servers when redirecting legacy users to a legacy server.

5) Do I need to create an external DNS record and a public IP address for "legacy.domain.com" ? 

Exchange Server Deployment assistant says: You might need to make changes to your firewall to support this new legacy host name. You might need to add new firewall rules, add an external IP address for your Exchange 2007 server, or make other configuration changes.

I am thinking, if the client never sees that name "legacy.domain.com", why do I need to create a DNS record and external IP?

During the configuring prerequisites I receive the below error and can not proceed:

Error:

THe Following error was generated when "$error.clear();

   $keyPath = "hklm:\software\Microsoft\webmanagement\server";

There is more but I can not paste in this forum for some reason.

How can I proceed as the only option on the screen is retry. I had to red x to close out.



Kelly Sietmann

Is there any solid documentation around this?  The below URL is the closest I got and did implement the suggestions but free/busy is still an issue.  This is 2 different domains/forests but using the same email domain in Exchange 2010 and 2013.

http://port25guy.com/2014/11/05/configuring-cross-organization-free-busy-information-in-exchange-2013/

Hello everyone,

I need a help on below scenario where I want to migrate exchange and Lync from Resource forest to user account forest.

Scenario.

I have a forest named xyz.abc.com where I have one domain controller as DC1.xyz.abc.com and all my user account are created here.

I have another forest named gws.abc.com where I have one domain controller as DC1.gws.abc.com and which has two way active directory forest trust with xyz.abc.com

Now in gws.abc.com I have below configured servers.

10 exchange 2013 servers installed (CAS+MBX role) in one AD site.

4 exchange 2010 servers installed (CAS+HUB+MBX role) in another AD site.

All user have linked mailboxes with master account configured in xyz.abc.com

i also have 1 Lync site named Site1 with one pool named pool1.gws.abc.com installed with 3 frontend server, 2 SQL Server in Mirrored configuration and 2 access edge server in HLB.

i have Another Lync site named site2 configured with another pool named pool2.gws.abc.com installed with 3 frontend server and 2 SQL server in mirrored configuration. The frontend server pool in this site is associated with the access edge pool of site1 for external access.

My external domain is abc.com with below configuration.

All records configured in abc.com is pointing to exchange server and Lync server installed in gws.abc.com forest.

My user’s email address & sip domain is configured to follow firstname.lastname@abc.com.

What is the best possible way to migrate complete exchange and Lync environment from GWS.abc.com forest to xyz.abc.com forest?

Any help is greatly appreciated.

Hi All, I would appreciate your advice regarding my new Exchange 2013 server.

Our company IT department decided it was time for a new domain.
Our existing domain is 12 years old, has an incorrect suffix, and had many administrators that did who knows what to it.
We have an existing 2013 Std Exchange server with about 100 mailboxes, I will refer to as ExchangeA.

So last summer we built a new 2012 domain in a new forest and I built a new 2013 Std Exchange server.. I will refer to as ExchangeB.
The two exchange servers were then configured to relay and the test mailboxes on ExchangeB work just fine.
No regular user mailboxes have been migrated to ExchangeB yet.

Our domain migration got delayed and now ExchangeB tells me I have 17 days left in the trial.

So my questions are:

1) can I use the license from ExchangeA to activate ExchangeB, without breaking anything? (I suspect this is a no)

2) can I acquire a temporary license to extend my trial period another say 30 days?

3) what may be my other options outside of spending Christmas and New Years migrating mailboxes to ExchangeB and pulling the license over to this new server?

4) Boss is checking out how much an Exchange Std license would cost...if it is just a couple grand we may simply purchase another one

5) I can let the Exchange trial pass and rebuild the server from scratch.... I really dislike duplicating such efforts...especially when due to my own poor planning.

Many many thanks

Andy

Hi,

I'm trying to apply CU10 to my Exchange 2013 SP1 but i'm getting these errors:

Error:
The Mailbox server role isn't installed on this computer.
For more information, visit: http://technet.microsoft.com/library(EXCHG.150)/ms.exch.setupreadiness.UnifiedMessagingRoleNotInstalled.aspx

Error:
The Mailbox server role isn't installed on this computer.
For more information, visit: http://technet.microsoft.com/library(EXCHG.150)/ms.exch.setupreadiness.BridgeheadRoleNotInstalled.aspx

I have tried this also for CU9 and even for the latest CU11.

i already prepared Schema and AD and using admin user with all access required.

The errors in my setup logs file are:

[12/18/2015 10:22:41.0297] [1] Failed [Rule:UnifiedMessagingRoleNotInstalled] [Message:The Mailbox server role isn't installed on this computer.]
[12/18/2015 10:22:41.0297] [1] Failed [Rule:BridgeheadRoleNotInstalled] [Message:The Mailbox server role isn't installed on this computer.]
[12/18/2015 10:22:41.0312] [1] [REQUIRED] The Mailbox server role isn't installed on this computer.
[12/18/2015 10:22:41.0312] [1] Help URL: http://technet.microsoft.com/library(EXCHG.150)/ms.exch.setupreadiness.UnifiedMessagingRoleNotInstalled.aspx
[12/18/2015 10:22:41.0312] [1] [REQUIRED] The Mailbox server role isn't installed on this computer.
[12/18/2015 10:22:41.0312] [1] Help URL: http://technet.microsoft.com/library(EXCHG.150)/ms.exch.setupreadiness.BridgeheadRoleNotInstalled.aspx
[12/18/2015 10:22:41.0375] [1] Ending processing test-SetupPrerequisites
[12/18/2015 10:22:41.0375] [0] Exchange Server installation failed during prereq check. Trying to restore the server state back to active.
[12/18/2015 10:22:41.0375] [0] RestoreServer Script Path: C:\Windows\Temp\ExchangeSetup\RestoreServerOnPrereqFailure.ps1

could you please help me on this.

Thanks

Alaa

alaaabdou

Hi,

Currently I'm running Exchange 2007 SP3 and I'm getting things ready to move to Exchange 2013.  I've been reading all the steps and things seem somewhat straight forward for setting up the Co-existence with Exchange 2007 and Exchange 2013.

I know one of the steps involves creating an external DNS entry "legacy.mydomain.com" and pointing it to the same IP address as my current owa.mydomain.com address. 

I currently don't have an external autodiscover.mydomain.com DNS entry setup so I was going to have my ISP set that up for me and was wondering if there is any issue with having my ISP also create the legacy.mydomain.com at the same time?

Or do I need to wait until after I've gotten further along with the setup of Exchange 2013 before creating this external DNS entry? 

The main issue is that it takes some time once our ISP creates a DNS entry for it to get published and I'm worried that I might be in a broken or non-functioning state, while I'm waiting for the external legacy.mydomain.com name to get published.

Thanks in advance

Nick

I have a question about the VIPs required to load balance Exchange 2013 client access. How would you typically configure a load balancer to handle both internal and external clients?

It seems to me that you would want want a one-arm configuration for internal clients but two-arm for external. Is that true and, if so, how would that work. Would the internal and external clients connect to different VIPS and rely on split-brain DNS to route them to the correct one?

I'm new to load balancing and would appreciate any guidance on this topic.

Thank you.

Kenny

Salam..

Hy..

Respected Sir/mam/Team..

                                          im trying to install Exchange server 2013 On my Microsoft server 2012, but can't install successfully.it gives me An error at the End. please give me brief Answer and Explain it in Detail i need to teach ECP and OWA to my Students in exchange class.. i will be very thankfull to you for your this act of kindness.

                                                                     hazrat Usman Barki 

                                                                      hazratusmanbarki10@gmail.com

Error:
The following error was generated when "$error.Clear(); 
          $maxWait = New-TimeSpan -Minutes 8
          $timeout = Get-Date;
          $timeout = $timeout.Add($maxWait);
          $currTime = Get-Date;
          $successfullySetConfigDC = $false;

          while($currTime -le $timeout)
          {
            $setSharedCDCErrors = @();
            try
            {
              Set-SharedConfigDC -DomainController $RoleDomainController -ErrorVariable setSharedCDCErrors -ErrorAction SilentlyContinue;
              $successfullySetConfigDC = ($setSharedCDCErrors.Count -eq 0);

              if($successfullySetConfigDC)
              {
                break;
              }
              Write-ExchangeSetupLog -Info ("An error ocurred while setting shared config DC. Error: " + $setSharedCDCErrors[0]);
            }
            catch
            {
              Write-ExchangeSetupLog -Info ("An exception ocurred while setting shared config DC. Exception: " + $_.Exception.Message);
            }

            Write-ExchangeSetupLog -Info ("Waiting 30 seconds before attempting again.");
            Start-Sleep -Seconds 30;
            $currTime = Get-Date;
          }

          if( -not $successfullySetConfigDC)
          {
            Write-ExchangeSetupLog -Error "Unable to set shared config DC.";
          }
        " was run: "Unable to set shared config DC.".

Hello,

When Installing Exchange 2013 on server 2012 I get the following error during Step 1 of 8 of Transport Service. I have installed and unistalled Exchange a few times, restarted the machine manually and removed exchange from AD, etc. to no avail.

Any suggestions will be very much appreciated.

Thank You.

VK

Team,

We have Exchange 2010 setup. If i try sending mail of Forward mail to external users. My internal server ip  and server name all get appear in my Header. Please help me so i can stop blocking header to external mails. Below is the example.

Hi

I have exchange 2013 and tend Micro antivirus version 11.0.2995 installed on it 

I want to verify that this antivirus version is compatible with the exchange 2013

Mahmoud

Hi there,

I'm trying to automate powershell commands which will add different GAL's to my Exchange.

But i'm having the following issue:

Import-CSV AddGAL.csv | foreach {New-GlobalAddressList -Name "$_.GAL – GAL" -ConditionalCustomAttribute1 $_.GAL -IncludedRecipients MailboxUsers -RecipientContainer "domain.local/Email/$_.GAL"}

It does not accept the $_.GAL between qoutes ("")

Any idea how i can fix this?

It will be great to know if Exchange 2013 can be deployed as one of the DAGs on a Exchange 2010 farm. Is there any best practice and recommendations to achieve this?

Our current setup:

Server 1: Exchange 2010 sp3 / Server 2008 R2 - CAS

Server 2: Exchange 2010 Sp3 / Server 2008 R2 - DAG

Our plan is to:

Server 3: Exchange 2013 /Server 2012 R2 - DAG

Shankar

Hi, running into an issue that has had me totally stumped for over a week now. See this in NodeRunner.log file ...

Caught exception while starting node: System.Configuration.ConfigurationErrorsException: No node activator found in scanned assemblies.
   at Microsoft.Ceres.CoreServices.NodeRunner.NodeActivatorReflector.ScanAssemblies(Boolean entryPointOverridden)
   at Microsoft.Ceres.CoreServices.NodeRunner.NodeActivatorReflector.ScanAssemblies(Boolean entryPointOverridden)
   at Microsoft.Ceres.CoreServices.NodeRunner.NodeActivatorReflector.FindNodeActivator(String rootPath, String applicationPaths, String nodeActivator, Boolean entryPointOverridden)
   at Microsoft.Ceres.CoreServices.NodeRunner.Runner.Start()

All the Google search 'fixes' have not worked at all - yeah - I've tried them all I'm pretty sure - when Search Host Controller service starts it tries to kick off the 4 noderunner.exe processes, first one comes up for a second, but then dies right away, no others of course.  DNS resolves everything fine. Is this a .net problem? have all the .net's frameworks installed & they seem to be correct.

Here's what happens when I try & run installconfig.ps1 manually:

PS C:\Program Files\Microsoft\Exchange Server\V15\Bin\Search\Ceres\Installer> .\installconfig.ps1 -action i -datafolder
"c:\program files\microsoft\exchange server\v15\bin\search\ceres\hostcontroller\data"
Configuring Search Foundation for Exchange....
Script execution failed. Please inspect the log file "C:\Program Files\Microsoft\Exchange Server\V15\Bin\Search\Ceres\In
staller\log\PostSetup_install_20151220214725.log" for more details.
Error occurred while configuring Search Foundation for Exchange.System.TimeoutException: Timed out waiting for Admin
node to be up and running
   at Microsoft.Ceres.Exchange.PostSetup.DeploymentManager.WaitForAdminNode(String hostControllerNetTcpWcfUrl)
   at Microsoft.Ceres.Exchange.PostSetup.DeploymentManager.Install(String installDirectory, String dataDirectoryPath,
Int32 basePort, String logFile, Boolean singleNode, String systemName, Boolean attachedMode)
   at CallSite.Target(Closure , CallSite , Type , Object , Object , Object , Object , Object , Object , Boolean )
At C:\Program Files\Microsoft\Exchange Server\V15\Bin\Search\Ceres\Installer\installconfig.ps1:189 char:5
+     throw $_.Exception

Any help much appreciated!

I currently have an Exchange 2010 server running in hybrid mode. Recently I am unable to open the emc or connect by powershell. I spent a considerable amount of time with MSS support troublshooting the issue with no luck. Finally they recommended a reinstall. Since the 2010 hardware is older  I would like to upgrade to Exchange 2013 stay in  hybrid enviroment and decommission the 2010 server. I am running into the following error when running setup for exchange 2013.

Hi all,

Due to the POODLE vulnerability and TLS 1.0 showing as enabled on one of our external scans, we were informed that we would need to disable SSL 3.0 and TLS 1.0 on our Exchange server.

Apparently, this wouldn't even be possible until Update Rollup 9 was released on 3/16/15:

Rollup resolves:

KB 3029667 SMTP is not transported over TLS 1.1 or TLS 1.2 protocol in an Exchange Server 2010 environment

After installing this update, SSL 3.0 and TLS 1.0 were disabled and the servers rebooted (cross site, same domain, two Exchange servers).  After resolving some issues with certificates that apparently broke as a result of the changes, we found that EWS was not working - the log full of these errors:

Just set up a test environment for MS Exchange as follows:
1 x AD Server, Windows 2012 R2
1 x Exchange 2010 SP3 RU 10 on Windows 2008 R2
1 x Exchange 2013 CU 10 on Windows 2012 R2
I can connect with Outlook on a Windows 7 client with Outlook 2013
I can connect with Outlook on Windows 8 client with Outlook 2013
I can not connect with Outlook on Windows 10 client with Outlook 2013
Get the error “The connection to microsoft exchange is unavailable. Outlook must be online or connected exchange” during the startup wizard for the Windows 10 client. I have stopped all firewalls on client and servers but no change.
Do I have to set up any additional configuration in AD/Exchange to connect with Windows 10 clients?
Thanks for any suggestions/comments.
/M

I got a question from our security department that asked me why they could login to their OWA using the autodiscover address?

We have published OWA on the adress https://mail.ourdomain.com/owa and there our reverse Proxy gives the user a OTP challenge on top of the username and password. Now somebody have found out that by usinghttps://autodiscover.ourdomain.com/owa they get access without getting the challenge because it's not applied for autodiscover.

Is there a way in Exchange to prevent the users from doing this? Or is this something that has to be done in the reverseproxy? Tha reverse Proxy solution by the way is F5.

Happy holidays!

Micke