Quantcast
Channel: Exchange Server 2013 - Setup, Deployment, Updates, and Migration 论坛
Viewing all 7008 articles
Browse latest View live

Hybrid Configuration - Email Address Policy

$
0
0

Hi All,

I'm hoping someone could provide some guidance and assistance with the preparation/update of email addresses, email address policies and address books.

Currently we ahvea n on-premise Exchange 2013 server and we are an education institution with staff and students. All staff have their mailboxes in the on-premsies Exchange server (to be migrated later) and students have all of their mailboxes in Office 365 (exchagne online).

Staff email addreses are name@domainname.edu.au
Student email addresses are name@student.domainname.edu.au

As the on-premise server was originalyl configured for staff only, there is just the default address book policy. This policy has the rulesalias@domainname.edu.au as well as alias@domain.mail.onmicrosoft.com

The on-premise Exchange server has been configured in hybrid mode and all student email boxes have been configured as 'remote mailbox'. The target address in active directory for each student points to alias@domain.onmicrosoft.com

What I would like some assistance with is:

1. The default Address Book Policy doesn't have the options to modify which users it applies. Currently it applies to all staff and students, therefore students are incorrectly configured with an email addressname@domainname.edu.au rather than name@student.domainname.edu.au
Do I need to create two new address book polices, one for students, one for staff and then remove the default address book policy?

2. The student's are configured in Active Directory and sync'd to O365 with AAD Connect. The attributes in AD for mail and SMTP: showname@domainname.edu.au. As they only have a remote mailbox in Exchange, I need to edit the attributes within AD to change to the correct email address. I haven't been able to cretate a powershell script to modify all users in the Student OU to either remove the default incorrect email address and then add the correct email as default, or modify the default SMTP with the correct address.

3. I am also looking at sperating users into various Address Book Policies as per the Education example below. I know this references on-premise Exchange server, so I'm not sure if i would run the same commands via Powershell while connected to Exchange Online https://technet.microsoft.com/en-us/library/jj657455(v=exchg.150).aspx


Preparing for CU12 Update From RTM Exchange 2013

$
0
0

So i am currently in the setup of exchange 2013 and exchange 2007 in coexistence . At the moment i have not switched to 2013 as the mains server yet but i have migrated a few users to exchange 2013 and all works fine. Exchange 2007 still handles all external communication as i have not switched my ips/dns etc yet. What i want to do is upgrade exchange 2013 to latest CU12 before finalizing the switch so that i wont have to do it afterwards that EX2013 is going to be the main server .

My question is . I have read that sometimes when installing the CU update from RTM an issue comes up regarding the receive connectors :

During an upgrade of Exchange Server 2013 to a new cumulative update some customers may experience an issue where setup fails, leaving the server in a non-operational state.

The error the setup throws is:

Mailbox role: Transport service FAILED

The following error was generated when “$error.Clear();$connectors = Get-ReceiveConnector

-Server $RoleFqdnOrName;foreach($connector in $connectors) { if($connector.MaxLocalHopCount

-gt 1) { Set-ReceiveConnector -Identity $connector.Identity -MaxLocalHopCount 5 }};” was

run: “Microsoft.Exchange.Management.SystemConfiguration

Tasks.ReceiveConnectorRoleConflictException: The values that you specified for the Bindings

and RemoteIPRanges parameters conflict with the settings on Receive connector

“EX2013SRV2\Test”. Receive connectors assigned to different Transport roles on a

single server must listen on unique local IP address & port bindings.

I have run this script to check my connectors beforehand :

$connectors = Get-ReceiveConnector;
foreach($connector in $connectors)
{
    if($connector.MaxLocalHopCount -gt 1)
    {
        Set-ReceiveConnector -Identity $connector.Identity -MaxLocalHopCount 5 -WhatIf
    }
}

And i got no errors my out put was:

What if: Configuring Receive connector "TTSERVER\Default TTSERVER".
What if: Configuring Receive connector "TTSERVER\Windows SBS Fax Sharepoint Receive TTSERVER".
What if: Configuring Receive connector "TTSERVER\Windows SBS Internet Receive TTSERVER".
What if: Configuring Receive connector "TTSERVER\Enigma".
What if: Configuring Receive connector "TTSERVER\submission".
What if: Configuring Receive connector "EXCH1\Default EXCH1".
What if: Configuring Receive connector "EXCH1\Client Proxy EXCH1".
What if: Configuring Receive connector "EXCH1\Default Frontend EXCH1".
What if: Configuring Receive connector "EXCH1\Outbound Proxy Frontend EXCH1".
What if: Configuring Receive connector "EXCH1\Client Frontend EXCH1".
What if: Configuring Receive connector "TTSERVER\Exchange 2013".

Does that mean i am ok to proceed with the update without any fixes or is there something i must do ?





Password could not migrate after cross forest migration

$
0
0

Hi dear colleagues ,

There is a problem when migrating cross forest exchange platfrom,I try to migrate user account to another forest that has trust relationship with target forest,I made migration process step by step, prepare-mailbox, admt tool with migrate password and sid history,and new-move request for exchange. After migration I tried to login with that migrated user account in to owa than I login with old password, owa wants to change password to new password ? Am i missing a required step ? Thanks in advance

Exchange 2013 hardening

$
0
0

Hi Team,

Is it advisable to install exchange 2013 server on pre deploy windows harden os template. OR to do exchange hardening manually. Also please share standard hardening document for exchange 2013 recommended by microsoft.

Customize NDR for non existent mailbox on exchange server 2013

$
0
0

Dear All,

We are using exchnage 2013 ,whenever an email is sent to an user whose mailbox does not exists and NDR is sent to the sender,we need to customize the NDR, how do i do that please see the current message which goes out i need to change this ,i need to customize the highlighted text.

Regards

JAck


TechGUy,System Administrator.

Exchange 2013 Remove-ADPermission Active directory response: 00000005: SecErr: DSID-03152612

$
0
0

This error occur, when trying to Remove-ADPermission for 'NT Authority\Authenticated Users'

Active Directory operation failed on DC01.domain.com. This error is not retriable. Additional information: Access
is denied.
Active directory response: 00000005: SecErr: DSID-03152612, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
    + CategoryInfo          : WriteError: (0:Int32) [Remove-ADPermission], ADOperationException
    + FullyQualifiedErrorId : [Server=ExchBackend01,RequestId=c3a07fb3-b455-4b0f-b77f-fc17703ce5e6,TimeStamp=7/7/2016 12:28:2
   9 PM] [FailureCategory=Cmdlet-ADOperationException] 38B0AD9C,Microsoft.Exchange.Management.RecipientTasks.RemoveAD
  Permission
    + PSComputerName        : ExchFront01.domain.com

Can anyone help?

Update 2016-08-09
The command i am running is this:

Get-ADPermission"OU=MyOU,DC=domain,DC=com"|Where{($_.User-like'NT Authority\Authenticated Users')-and($_.IsInherited-eq$false)}|Remove-ADPermission

Exchange 2016: System Attendant error in the Public Folder

$
0
0

Hello,

I migrated Exchange 2010 to Exchange 2016 last week. Without almost no problems. I have uninstalled the old Exchange 2010 server yesterday.

Now, some people complaining about a lack to access the Sales Public Folder.

I notice that I was unable to access the Public Folder by myself in the ECP. 


Besides, I find also this error in the eventlog:

Log Name:      Application
Source:        MSExchange Assistants
Date:          9-8-2016 13:02:55
Event ID:      9041
Task Category: Assistants
Level:         Warning
Keywords:      Classic
User:          N/A
Computer:      EXCHANGE2016.contoso.com
Description: Service MSExchangeMailboxAssistants.  An exception has been thrown: Microsoft.Exchange.Assistants.TransientMailboxException ---> Microsoft.Exchange.Data.Storage.StorageTransientException: Cannot open mailbox /o=ATC/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=EXCHANGE2016/cn=Microsoft System Attendant. ---> Microsoft.Mapi.MapiExceptionMailboxQuarantined: MapiExceptionMailboxQuarantined: Unable to open message store. (hr=0x80004005, ec=2611)

And this warning:

Log Name:      Application
Source:        MSExchange Assistants
Date:          9-8-2016 13:02:55
Event ID:      9042
Task Category: Assistants
Level:         Warning
Keywords:      Classic
User:          N/A
Computer:     
EXCHANGE2016.contoso.com 
Description: Service MSExchangeMailboxAssistants. Public Folder Assistant for database PF01-2016 (2a252931-04e5-4b7a-a315-cfb0cbdfb371) is exiting a work cycle. No mailboxes were successfully processed. 1 mailboxes were skipped due to errors. 1 mailboxes were skipped due to failure to open a store session. 0 mailboxes were retried. There are -1 mailboxes in this database remaining to be processed.

What I have check already: Quarantined mailboxes (register shows no quarantined mailboxes) In ADSI edit the homeMTA in the CN=Microsoft System Attendant, the value was empty… So I added manually to:

CN=Microsoft MTA,CN=EXCHANG2016,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=ATC,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=Contoso,DC=com 

I have reboot the server, but without succes....


Setting up Naming Conventions

$
0
0

For the purposes of sorting certain email address, such as conference room, distribution lists, and other resources, what special characters can be used as the first character and what are the rules for alphabetization?  (I'm assuming standard ASCII coding by default)

For example, can I do

_DistributionList1

_DistributionsList2

&ConferenceRoom1

&ConferenceRoom2

Of course, the actual names would be more descriptive.  The goal here is for distro lists and resources to show up at the top of the address book when users need to look through it.


Thanks


Best practice of upgrading from Exchange 2013 SP1 (Version 15.0 (Build 847.32) - no CU's) to CU 13

$
0
0

On MS download page no specific tasks are listed to be performed... but by googling Exchange 2013 best practices, I can find different ideas on how to do it.

One states just to do an AD Scheme update... another one a lot of other steps which includes putting the server in maintenance.

What is MS best practice to go from Version 15.0 (Build 847.32) to CU 13 on a single server setup (hosting all roles)?

Regards, Lars.

Exchange 2013 Cumulative Update 5 Install Issue

$
0
0
I have tried installing Exchange 2013 Cumulative Update 5 on our server but it is failing at the Mailbox role: Transport Service section with the following error. I am running the command prompt as Administrator. Any help would be great. 

Error: The following error was generated when "$error.Clear(); Set-LocalPermissions 

" was run: "System.UnauthorizedAccessException: Attempted to perform an unauthorized operation. at Microsoft.Exchange.Configuration.Tasks.Task.ThrowError(Exception exception, ErrorCategory errorCategory, Object target, String helpUrl) at Microsoft.Exchange.Configuration.Tasks.Task.WriteError(Exception exception, ErrorCategory category, Object target) at Microsoft.Exchange.Management.Deployment.SetLocalPermissions.InternalProcessRecord() at Microsoft.Exchange.Configuration.Tasks.Task.b__b() at Microsoft.Exchange.Configuration.Tasks.Task.InvokeRetryableFunc(String funcName, Action func, Boolean terminatePipelineIfFailed)".

Problem with Mac Book Client in the Co-existance enviroments.

$
0
0

Hi Guys,

I really Need urgent help with my Problem in Co-existence of Exchange 2010 and exchange 2013 Environments. I have established the Co-existance and everything seems to be working fine. except the Mail clients in Macbooks,

In the domain with Outlooks all working fine.

weboutlook working fine,.

active sync working fine.

but when i configure the Email account in the mac, it doesn't work and sometime its connects and after a while it automatically gets disconnected.

there is some problem with the Exchange webservices and i am not understanding, what can be wrong.

this is keep repeating , all the time. sometime its work and sometime it doesnt.

please help me

NSF to PST! Require Information

$
0
0

Upgraded Lotus Notes version into newer 8.5 it has complex functionalities. These functions are not easily graspable and it takes long time to understand, I decide to export my data into another (MS Outlook) platform, is it possible, I want new updates about conversion in cost-effective manner. And if yes then suggests me the way?

Hybrid Deployment / Outbox Issue

$
0
0

Not sure if I should post this in Exchange 2013, Outlook 2016 or Office 365 forum.

We have an Exchange 2013 / Hybrid O365 deployment with Office 2016 Enterprise E3 installed on Server 2012 R2 RDS Servers.

Users who have been migrated are seeing emails stay in their Outlook outbox. They send if the user hits Send/Receive manually.

We have a case open with O365 Support, but they have not been able to help so far.  We have tried all 3 of these proposed solutions with no luck:
https://support.office.com/en-us/article/Fix-messages-that-are-stuck-in-the-Outbox-5116b0ee-a081-43fe-b0a9-978b889b01c7
https://support.microsoft.com/en-us/kb/2663435
https://support.office.com/en-us/article/My-messages-won-t-send-97748418-bbd5-4743-a05b-581f22a466dd?ui=en-US&rs=en-US&ad=US

I have also enabled the Office 2016 Group Policy for Outlook to "send immediately" with no luck.

Any ideas?


Installing second and third Exchange server

$
0
0

Hello All,

I have a question about installing additional Exchange servers after the first server is up and running. We started installing a second Exchange 2013 server into our environment and ran into a slight issue of it working too well. What I mean by that is that the new server started participating in routing email before we could configure it. While this may seem like a good thing, it is not because we didn't have a chance to install and configure antivirus and other protections before it got involved with email. So finally to my question, is there a way to prevent a newly installed or installing Exchange server from being involved in sending email or allowing clients to connect to it before it is ready?

Thank you,


Andy Richards

Security Update For Exchange Server 2013 CU11 (KB3124557)

$
0
0

Hi Support

Will this release, (released date: 1/8/2016) cause exchange services to be disabled as well?  What are the precautions to take when applying this update?

Thank you in advance.

Suriyana


New Exchange 2013 (CU13) Install- failing after prepareschema, preparead and preparealldomains succeeded

$
0
0

Our organization is going to migrate from Exchange 2010 to Exchange 2013 CU13. We are going to change our exchange topology by installing hyper-V virtual 2013 servers at each location and setting up a DAG so the locations can fail over to each other if need be. The first site has no exchange server there any more- there were two 2010 servers (Mailbox and CAS) but they were properly uninstalled and no longer show up in the Exchange organization. I also cleaned up and removed any other extraneous servers that may have previously failed or been uncleanly removed- I was able to do all cleanup using Exchange installation tools and did nothave to use ASDI Edit or Schema Management to accomplish any of these tasks- We have a pristine environment. The first Exchange 2013 server is now ready to install. I ran setup.exe /PrepareSchema, setup.exe /PrepareAD, and Setup.exe /PrepareAllDomains. All completed successfully. Then I went to install Exchange. When it got to Organization Preparation 1/9, it failed. Here is the error:

Error:

The following error was generated when "$error.Clear();

initialize-ExchangeUniversalGroups -DomainController $RoleDomainController -ActiveDirectorySplitPermissions $RoleActiveDirectorySplitPermissions

 

" was run: "Microsoft.Exchange.Data.Directory.ADObjectEntryAlreadyExistsException: Active Directory operation failed on USMDSVRDC2.corp.local. One or more attribute entries of the object 'CN=Organization Management,OU=Microsoft Exchange Security Groups,DC=corp,DC=local' already exists. ---> System.DirectoryServices.Protocols.DirectoryOperationException: The object exists.

   at System.DirectoryServices.Protocols.LdapConnection.ConstructResponse(Int32 messageId, LdapOperation operation, ResultAll resultType, TimeSpan requestTimeOut, Boolean exceptionOnTimeOut)

   at System.DirectoryServices.Protocols.LdapConnection.SendRequest(DirectoryRequest request, TimeSpan requestTimeout)

   at Microsoft.Exchange.Data.Directory.PooledLdapConnection.SendRequest(DirectoryRequest request, LdapOperation ldapOperation, Nullable`1 clientSideSearchTimeout, IActivityScope activityScope, String callerInfo)

   at Microsoft.Exchange.Data.Directory.ADDataSession.ExecuteModificationRequest(ADObject entry, DirectoryRequest request, ADObjectId originalId, Boolean emptyObjectSessionOnException, Boolean isSync)

   --- End of inner exception stack trace ---

   at Microsoft.Exchange.Data.Directory.ADDataSession.AnalyzeDirectoryError(PooledLdapConnection connection, DirectoryRequest request, DirectoryException de, Int32 totalRetries, Int32 retriesOnServer)

   at Microsoft.Exchange.Data.Directory.ADDataSession.ExecuteModificationRequest(ADObject entry, DirectoryRequest request, ADObjectId originalId, Boolean emptyObjectSessionOnException, Boolean isSync)

   at Microsoft.Exchange.Data.Directory.ADDataSession.Save(ADObject instanceToSave, IEnumerable`1 properties, Boolean bypassValidation)

   at Microsoft.Exchange.Data.Directory.Recipient.ADRecipientObjectSession.Save(ADRecipient instanceToSave)

   at Microsoft.Exchange.Management.Tasks.InitializeExchangeUniversalGroups.AddMember(ADObject obj, IRecipientSession session, ADGroup destGroup, WriteVerboseDelegate writeVerbose)

   at Microsoft.Exchange.Management.Tasks.InitializeExchangeUniversalGroups.CreateAndValidateRoleGroups(ADOrganizationalUnit usgContainer, RoleGroupCollection roleGroups)

   at Microsoft.Exchange.Management.Tasks.InitializeExchangeUniversalGroups.InternalProcessRecord()

   at Microsoft.Exchange.Configuration.Tasks.Task.<ProcessRecord>b__b()

   at Microsoft.Exchange.Configuration.Tasks.Task.InvokeRetryableFunc(String funcName, Action func, Boolean terminatePipelineIfFailed)".

 

So to me it looks like Exchange is trying to run the prepare steps again and failing because everything is prepared already. How do I get past this- Is there a switch that tells Setup to skip this step?


Thanks!

Moving of The Public Folder exchange 2010 to Exchange 2013

$
0
0

Hi guys,

I am in the Process for Moving Exchange 2010 Database to Exchange 2013. But Moving all the Mailbox to the Exchange 2013 will take at least 3-4 weeks in my Environment but in meanwhile can i also start the Migration of the Public Folder and Move the Public to the Exchange 2013 or should i wait till all the exchange 2010 Mailbox will be moved to exchange 2013.

and please link me to the right Documentation for Public Folder Move.

Thanks

Exchange server 2013 CU7 - RelinquishedWlmStall While importing PSTs into the mailboxes

$
0
0

Hello,

I'm trying to more than 5 import psts into the mailbox server Exchange server 2013 CU7. Only 1 is active and rest all are in the state of RelinquishedWlmStall.

StatusDetail: RelinquishedWlmStall

Message: Informational: The request has been temporarily postponed due to unfavorable server health or budget limitations. MRS will attempt to continue processing the request again after

I have other two servers exchange 2013 with SP1, there are no issues on those servers. 

All the three servers are in DAG and if the database is active on CU7, i'm facing issues. I guess some changes were done on WLM level.

I have increased the values in the MRS configuration file as below and restarted the service, still facing the issues.

Do we have to change the WLM App settings? Resources are huge: 64GB RAM, octa core processor.

Exchange is limiting it somewhere, how do i change it? Its only on-premises exchange server no hybrid.

MaxActiveMovesPerSourceMDB="50"
    MaxActiveMovesPerTargetMDB="50"
    MaxActiveMovesPerSourceServer="250"
    MaxActiveMovesPerTargetServer="250"
    MaxActiveJobsPerSourceMailbox="50"
    MaxActiveJobsPerTargetMailbox="50"
    MaxTotalRequestsPerMRS="250"

MaxMRSConnections="250"

Default App settings in the same file:-

<appSettings>
    <!-- Mdb latency health threshold values in msec.  Valid range is from 0-1000. -->
    <add key="MdbFairUnhealthyLatencyThreshold" value="20"/>
    <add key="MdbHealthyFairLatencyThreshold" value="10"/>
    <!-- Maximum delay that WLM returns under "Fair" database resource health in msec. Valid range is from 0-60000 -->
    <add key="MdbLatencyMaxDelay" value="60000"/>
    <add key="LogEnabled" value="true" />
    <add key="LogDirectoryPath" value="C:\Program Files\Microsoft\Exchange Server\V15\Logging\MailboxReplicationService\" />
    <add key="LogFileAgeInDays" value="30" />
    <add key="LogDirectorySizeLimit" value="100MB" />
    <add key="LogFileSizeLimit" value="10MB" />
    <add key="LogCacheSizeLimit" value="2MB" />
    <add key="LogFlushIntervalInSeconds" value="60" />
  </appSettings>

-Moin MD

Unable to update Admin Tools to Exchange 2013 CU 10 on Windows 10 machine

$
0
0

We just updated all of our Exchange servers to Exchange 2013 CU 10 (previously on CU7) and I am trying to upgrade my admin tools on my computer (Windows 10). I am doing an unattended install from the command line by running the command "setup.exe /m:upgrade /IAcceptExchangeServerLicenseTerms". The process fails when it tries to disable the services. Essentially it is failing on disabling the "Application Identity" service. When trying to disable that service, I get an Access Denied error no matter what I do. Even booting into Safe Mode to disable the service gives me access denied. Any ideas on how I can get around this?

     The following error was generated when "$error.Clear();
          & $RoleBinPath\ServiceControl.ps1 -Operation:DisableServices -Roles:($RoleRoles.Replace('Role','').Split(',')) -SetupScriptsDirectory:$RoleBinPath;
          & $RoleBinPath\ServiceControl.ps1 Stop $RoleRoles.Replace('Role','').Split(',')
        " was run: "Microsoft.PowerShell.Commands.ServiceCommandException: Service 'Application Identity (AppIDSvc)' cannot be configured due to the following error: Access is denied ---> System.ComponentModel.Win32Exception: Access is denied
   --- End of inner exception stack trace ---".

Unable to install CU8 on Exchange Server 2013

$
0
0

Hi,

For testing purposes I'm setting up an Exchange 2013 environment and now I'm trying to install CU 8 (also for testing purposes) but it's not working. When I just start the executable, I get the following error:

"The upgrade patch cannot be installed by the windows installer service because the program to be upgraded may be missing, or the upgrade patch may update a different version of the program. Verify that the program to be upgraded exists on your computer and that you have the correct upgrade patch."

When I unpack the installer and try to run setup via an elevated command prompt, using:

Setup /m:upgrade /IAcceptExchangeServerLicenseTerms

I get the following error:

"Exchange Server 2013 requires .NET Framework 4.5 or later. Download it from..."

While this Framework is already installed.


I'm currently having Exchange 2013 SP 1 version 15.0.847.32

Thanks already for the help!

Viewing all 7008 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>