Hey Guys

I have a really big problem.

I have add new Exchange 2016 CU3 Version 15.1 ‎(Build 544.27)‎ On Server 2016  to my network but after i have moved Users Mailbox Database to the new server i was need to restart after my restart is finished all services is running no Error in event log my IIS working fine when i try to access my OWA or ECP pages give me error is currently unable to handle this request. HTTP ERROR 503  After login Page.

I have try to google this issue for 3 days but still nothing work with me.

Best Regards.

Environment

• Small business with a single Exchange 2013 server fulfilling all Exchange roles and using self-issued SSL cert
• Outlook 2010/2013/2016
• Exchange is available to Outlook on the LAN at its NetBIOS Name: MyExchange
• Exchange is available to mobile devices at: mail.MyDomain.com, where DNS name mail.MyDomain.com points to the external IP address my firewall/router and is port-forwarded through to the exchange server.

The certificate was issued to MyExchange, not to mail.MyDomain.com. This is no problem for mobile devices once they accept the self-issued certificate. Workstations, though, all initially popped up a Security Alert window indicating that "The name on the security certificate is invalid or does not match the name of the site." I found that by manually installing the certificate on the workstation, I could prevent this error. To simplify things, I copied the certificate to a shared folder on a server and created this script to install it. I run it once on each new workstation after adding the workstation to the domain:

 certutil.exe -addstore -f "Root" \\ServerName\ShareName\MyExchange.cer

This correctly prevents the certificate error popup on Outlook 2010; however, Outlook 2013 & 2016 insist on popping up the certificate error in spite of this certificate. And I have verified that the certificate installs correctly, as I can see it in IE11 → Tools →Internet Options → Content → Trusted Root Certification Authorities

Now, here is a fact that may seem to complicate things, but will undoubtedly shed some light on things for some of you that will immediately understand its meaning better than I do: I have a loopback NAT rule on my (SonicWall) firewall/router that is required to allow mobile devices to access Exchange via the public address of the router (mail.MyDomain.com) whether those devices are outside the office or connected to the WiFi network hosted by that same SonicWall gateway device. When I disable that loopback rule, the workstation 2013/2016 Exchange connection problem disappears; there is no certificate error on opening Outlook 2013/2016. That is, there is no certificate error when there is no routing from the workstation to mail.MyDomain.com, only to MyExchange.

But disabling that loopback rule is not a permanent fix, as this would then prevent mobile devices from reaching Exchange at the same address from inside or outside the LAN. So I am kind of lost. I understand that this is a very common error and involves elements in the Autodiscover service and other places. But the effect of the loopback rule in all of this makes me hesitant to start running the PowerShell commands or changing IIS binding settings I find on MS support/TechNet to modify URLS (e.g.https://support.microsoft.com/en-us/kb/940726). While that might resolve the workstation connection issue, it could create a reverse problem for all those mobile devices or require them all to re-accept a certificate. I don't mind making a change, but I have no room to just start experimenting.

I considered just adding a DNS entry on my DC to point mail.MyDomain.com to my Exchange server LAN IP address; however, I cannot do that because our internal AD domain is MyDomain.local, not MyDomain.com, and mobile devices use mail.MyDomain.com, not mail.MyDomain.local.

So far, my instruction to those users whose workstations are on Outlook 2013/2016 is just to click past the certificate message every time they open Outlook. But that is not only a nuisance for the users; it also makes me look something of an idiot. That is probably true enough, in any case, but solving this problem might just reduce the many proofs of that fact by at least one, and perhaps I can hide the fact for a while longer so I can get on with all my other application development and information system management duties...

Dear All,

       Please let me ask how to deploy public domain in exchange server 2013. When I create mailbox for a new user, it can only create with local domain but not public domain. I want to create with public domain name instead of local domain. Please help me with kindness where I need to do some configuration.

Thanks

I recently deployed 2 new Exchange 2016 servers into an existing Exchange 2010 environment.  I have Exch 2016 setup with a DAG and it is being load balanced with a pair of Kemp loadmaster. I have a test user on 2016, the DB is copied to the second server. The test user is able to login to OWA without issue. However, if I try to login with my user, who is still on 2010 I get the following message.  

Something went wrong
We can't get that information right now. Please try again later.
X-ClientId

Likewise, if I try to login to 2010 with my test user I get:

A server configuration change is temporarily preventing access to your account. Please close all Web browser windows and try again in a few minutes. If the problem continues, contact your helpdesk.

Using my user I can login to the ECP of the 2016 cluster without issue. It's just OWA on the 2016 server or OWA on 2010 with test user.

Note: I did have a failed installation which I was able to resolve and complete installation.

Hi Team,

Could you please help me on below query, Best steps to be followed for a restart of my exchange servers without stopping the mail flow. Based on your experience on Exchange. 

Let explain a my existing infrastructure. We have 2 Mailbox role Servers and 2 HUB CAS roles. Microsoft NLB is configured between two HUBCAS servers. DAG is configured between Mailbox Server, we have around 20 databases mounted.

Could you please provide me any procedure so that I can plan and implement it ?

We have 2 sites, 4 CAS servers and 6 MB server at each site. We are preparing to upgrade from CU9 to CU14. We will be upgrading one site at a time, but within the same site, how critical is it to get all the servers done the same night?

If 1/2 the server get upgraded to CU 14, is it acceptable for the rest of them to be running CU9 for a day or two?

Tom

Hello,

I´m trying to move almos 1,600 mailboxes from two old database to two brand new databases, but I´m getting some issues.

Frist Issue:

I have mailboxes failed on 95% and 10% failed to move with the followiing error:

"Error: MapiExceptionPartialCompletion: Unable to copy to target. (hr=0x40680, ec=0)"

We have more than 1.70 TB of free space for each new database and Unlimited Send and Received during the migration.

Second Issue:

I ran a Powershell cmdlet command to move Database A to Database D like this:

Get-Mailbox -Database "Database A" -resultsize unlimited | New-MoveRequest -TargetDatabase "Database D" -AcceptLargeDataLoss -BadItemLimit 10000

On Database A we have 900 mailboxes, with 3 domains (abc.mydomain.org, xyz.mydomain.org andmydomain.org), but with te powershell command only the mailboxes withmydomain.org have the Move Request, mailboxes of the domain ABC and XYZ does not have a Move Request.

How can I modify the powershell cmdlet to include the mailboxes with sub domains?

Third Issue

Is a very slow migration, because we have all Databases the old ones and new ones on the same Mailbox and none of them are member on a DAG yet.

Is any way to increase speed fo the migration between databases?

I will appreciate any advice about this issues.

Best regards,

Manuel

Manuel´s Microsoft Forums Threads

Hi, I work for a company (200 users) that is splitted in two phsically separated locations. Head office and branch office.

Today I have a 2003 functional level AD domain in a single AD site. One Exchange 2013 server in the head office. Both offices have internet connectivity but I want that internet mail flow continues to go through head office. Offices are connected through VPN. Branch office users use Remote Desktop Services to connect to Outlook, ERP, files, etc.

I would like to create a second AD site for the branch office and deploy to it a CAS/Mailbox Exchange Server and a file server so that Outlook clients can connect to their mailbox locally instead of using Remote Desktop Services and to access locally their files.

First of all: is it a good idea or do I add too much complexity comparing to the pros that this solution would give to my users?

Now, regarding Exchange, techinically speaking, the macro steps involved to make this possible are(?):

- Add a backup solution for the branch office to backup mailbox DB.
- Creating AD site (named Site B) for the branch office and move all its computers and users in it
- Deploy the Exchange CAS/Mailbox server in the Site B
- Move site B user's maiboxes to it
- Make run Outlook locally on PCs in the site B for the users whom mailboxes have been already moved to the second Exchange server. 
- No modifications to DNS configuration. 

Is that all?

Thank you,

Francesco B.

Team,

I have more than 10,000 ou in AD but all are not visible in ECP. After making the changes also i cant able to view all the OU.

Please help to know what is teh maximum value we can set in webconfig file or what is the work arround solution if we want to view all 10,000 + ou in ECP.

Value changed in webconfig file

    <!-- allows the OU picker when placing a new mailbox in its designated organizational unit to retrieve all OUs - default value is 500 -->

    <add key="GetListDefaultResultSize" value="11000" />​

This one is driving me absolutely crazy,  hours and hours spent on this with no luck.  This is 2007/2013 env.  The issue is, if I move a mailbox to 2007 then 2013 OWA is fine, then if I move the mailbox back to 2007 I can't access the mailbox via OWA when going through a 2013 CAS server.  yes I've read the posts about permissions inheritance etc.. yes I've cranked up AD and OWA logging nothing.. yes I've imported the IIS logs into log parser and I'm seeing various errors mostly 302.  Yes, I've ruled out 2007 servers, it's 2013.  If I recreate the mailbox it works then when move back and forth from 2007 to 2013 problem re-appears.  Yes, I have dumped AD attributes and compared them with working and non working mailbox can't find anything.  Yes, I've rebooted servers.  Yes this happens with multiple mailboxes.

In fact I have this example right now makes no sense.  I have two 2013 servers, if I go through the 2013 servers CAS servers to access the mailbox using OWA that resides on the 2007 server, it works through one server and the other it doesn't with the above errors.  I'd love to hear suggestions.. I'm at the end of my rope

Good evening,

Following TechNet closely I'm currently in the process of moving my exchange 2010 environment to 2013.  I have single exchange server on a SBS 2011 box.  Sadly I've failed at the first hurdle installing SP3, the result is that my Exchange 2010 is refusing all client connections.

During the SP3 install I passed all prerequisites but during the actual upgrade it failed at the Hub Transport Role with the following error:

Summary: 8 item(s). 3 succeeded, 1 failed.
Elapsed time: 00:20:46
Language Files
Completed

Elapsed Time: 00:10:25

Restoring services
Completed

Elapsed Time: 00:00:02

Languages
Completed

Elapsed Time: 00:03:32

Hub Transport Role
Failed

Error:
The following error was generated when "$error.Clear();
          Write-ExchangeSetupLog -Info "Creating SBS certificate";

          $thumbprint = [Microsoft.Win32.Registry]::GetValue("HKEY_LOCAL_MACHINE\Software\Microsoft\SmallBusinessServer\Networking", "LeafCertThumbPrint", $null);

          if (![System.String]::IsNullOrEmpty($thumbprint))
          {
            Write-ExchangeSetupLog -Info "Enabling certificate with thumbprint: $thumbprint for SMTP service";
            Enable-ExchangeCertificate -Thumbprint $thumbprint -Services SMTP;
           
            Write-ExchangeSetupLog -Info "Removing default Exchange Certificate";
            Get-ExchangeCertificate | where {$_.FriendlyName.ToString() -eq "Microsoft Exchange"} | Remove-ExchangeCertificate;

            Write-ExchangeSetupLog -Info "Checking if default Exchange Certificate is removed";
            $certs = Get-ExchangeCertificate | where {$_.FriendlyName.ToString() -eq "Microsoft Exchange"};
            if ($certs)
            {
              Write-ExchangeSetupLog -Error "Failed to remove existing exchange certificate"
            }
          }
          else
          {
            Write-ExchangeSetupLog -Warning "Cannot find the SBS certificate";
          }
        " was run: "The certificate with thumbprint 355E62E464DCF42A08BCB7A8CF39C819D42B760E was not found.".

The certificate with thumbprint 355E62E464DCF42A08BCB7A8CF39C819D42B760E was not found.
Click here for help... http://technet.microsoft.com/en-US/library/ms.exch.err.default(EXCHG.141).aspx?v=14.3.123.3&e=ms.exch.err.Ex88D115&l=0&cl=cp

Elapsed Time: 00:06:46

Client Access Role
Cancelled
Mailbox Role
Cancelled
Management Tools
Cancelled
Finalizing Setup
Cancelled

The setup log shows the following details:

Ending processing Get-ExchangeCertificate
[07/31/2013 20:50:46.0516] [1] The following 1 error(s) occurred during task execution:
[07/31/2013 20:50:46.0516] [1] 0.  ErrorRecord: The certificate with thumbprint 355E62E464DCF42A08BCB7A8CF39C819D42B760E was not found.
[07/31/2013 20:50:46.0516] [1] 0.  ErrorRecord: System.InvalidOperationException: The certificate with thumbprint 355E62E464DCF42A08BCB7A8CF39C819D42B760E was not found.
[07/31/2013 20:50:46.0531] [1] [ERROR] The following error was generated when "$error.Clear();
          Write-ExchangeSetupLog -Info "Creating SBS certificate";

          $thumbprint = [Microsoft.Win32.Registry]::GetValue("HKEY_LOCAL_MACHINE\Software\Microsoft\SmallBusinessServer\Networking", "LeafCertThumbPrint", $null);

          if (![System.String]::IsNullOrEmpty($thumbprint))
          {
            Write-ExchangeSetupLog -Info "Enabling certificate with thumbprint: $thumbprint for SMTP service";
            Enable-ExchangeCertificate -Thumbprint $thumbprint -Services SMTP;
           
            Write-ExchangeSetupLog -Info "Removing default Exchange Certificate";
            Get-ExchangeCertificate | where {$_.FriendlyName.ToString() -eq "Microsoft Exchange"} | Remove-ExchangeCertificate;

            Write-ExchangeSetupLog -Info "Checking if default Exchange Certificate is removed";
            $certs = Get-ExchangeCertificate | where {$_.FriendlyName.ToString() -eq "Microsoft Exchange"};
            if ($certs)
            {
              Write-ExchangeSetupLog -Error "Failed to remove existing exchange certificate"
            }
          }
          else
          {
            Write-ExchangeSetupLog -Warning "Cannot find the SBS certificate";
          }
        " was run: "The certificate with thumbprint 355E62E464DCF42A08BCB7A8CF39C819D42B760E was not found.".
[07/31/2013 20:50:46.0531] [1] [ERROR] The certificate with thumbprint 355E62E464DCF42A08BCB7A8CF39C819D42B760E was not found.
[07/31/2013 20:50:46.0531] [1] [ERROR-REFERENCE] Id=SbsBridgeHeadComponent___6464a0ee0fd04f6b893a3c81d7eb3f26 Component=EXCHANGE14:\Current\Release\Shared\Datacenter\Setup\SBS
[07/31/2013 20:50:46.0531] [1] Setup is stopping now because of one or more critical errors.
[07/31/2013 20:50:46.0531] [1] Finished executing component tasks.
[07/31/2013 20:50:46.0594] [1] Ending processing Install-BridgeheadRole

 My application event log is flooded with the following error:

Log Name:      Application
Source:        Microsoft-Windows-IIS-W3SVC-WP
Date:          31/07/2013 21:59:43
Event ID:      2280
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      SRV-SBS.lawrencedavid.local
Description:
The Module DLL C:\Program Files\Microsoft\Exchange Server\V14\ClientAccess\Owa\auth\exppw.dll failed to load.  The data is the error.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-IIS-W3SVC-WP" Guid="{670080D9-742A-4187-8D16-41143D1290BD}" EventSourceName="W3SVC-WP" />
    <EventID Qualifiers="49152">2280</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2013-07-31T20:59:43.000000000Z" />
    <EventRecordID>975085</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>SRV-SBS.lawrencedavid.local</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="ModuleDll">C:\Program Files\Microsoft\Exchange Server\V14\ClientAccess\Owa\auth\exppw.dll</Data>
    <Binary>05000000</Binary>
  </EventData>
</Event>

I've tried to re-register exppw.dll following instructions in the TechNet forums but this hasn't helped to restore functionality or complete the SP3 installation.  Any guidance would be most appreciated.  Thanks in advance!

We have started to migrate our users from Exchange 2010 to Exchange 2013

Exchange 2010 version 14.03.0.266.01 cu11 ( December 2015) 

Exchange 2013 version 15.00.1178.004 cu12 ( due to upgrade to cu13 next week)

When we move users to a Exchange 2013 databases staff who use MS Client Outlook receive multiple pop-ups similar to the below. A reboot of the user's computer, not a restart of the Outlook client , seems to resolves the issue if not creating a user's profile works

Oddly staff who are not having their mailboxes migrated also receive the pop-ups.  The only thing that connects these users is that both users share a calendar of an account that is being moved.

We are running a mailbox repair on accounts before we issue the mailbox move requests and clear the move reuests as soon as they are complete.

Has anyone encountered this issue issue before?

thanks, Rob

We run a single server (all roles) Exchange 2013 instance, this server has 20+ databases. There is no redundancy and we rely on good backups.

With Exchange 2016 being released for awhile, we're looking to upgrade and change some stuff.

• Introduce an Edge server in the DMZ
• Split single Exchange server into two servers to reduce per server load especially during backup time
• We will most likely need a load balancer (KEMP?) if we have 2 Mailbox servers
• We do not run a DAG and do not want to run a DAG (there is simply not enough storage space available for this)
• We are setup Hybrid with Exchange online (we have mailboxes on-prem, on-cloud, and hybrid)

With that in mind and trying to stick with Microsoft Preferred Architecture for Exchange 2016 for our supported environment, I do have a few questions.

To split our existing Exchange 2013 server into two Exchange 2016 servers with each hosting 1/2 the databases we obviously need a load balancer to make this work so that we can keep to a single DNS name. I was looking at the KEMP balancer as there are many tutorials out there for it. 

Can the load balancer be in the DMZ? Or does it need to be on the LAN side where the Exchange CAS/MBX servers are and use a Exchange EDGE server in the DMZ to forward to the load balancer?

Based on this link: Exchange 2016 architecture it appears that the load balancer needs to be in the internal network and the EDGE be used for DMZ; this is the most supported method?

Anyone have any field experience deploying this? Any tips or guidance in going from a single Exchange server to two Exchange servers with EDGE + Layer 7 Load Balancer would be great. We are entering uncharted waters that we don't have much experience with and any guidance is appreciated.

Using a Kemp load balancer seems to be the go to product for Exchange?

Mirza Dedic

Hi

I have a exchange 2013 CU 12 environment in to which i am updating to exchange 2016 CU3. The E2016 mailbox roles have been installed correctly and the CAS function is working correctly. The problem I have is with setting up a new DAG for the new servers.

The commands to enable the DAG have run correctly but when looking at the settings in EAC I get the following error.

"Object reference not set to an instance of an object"

and no DAG settings are displayed. I am also unable to add databases to the DAG.

Looking around the net I have found that I need to move the arbitration mailboxes to the new exchange servers to resolve this issue. Which is were i hit my current problem.

I can find the mailboxes but they refuse to be moved and just queued to be processed. Looking deeper I find that although the mailboxes are located in a active mail store the server name attached to them no longer exists.

Name                 Database   ServerName

SystemMailboxab85}  mbx_store2 xxcxxxbrc003

FederatedEmail.4c1f mbx_store2 xxxxxxbrc003

SystemMailbox{      mbx_store2 xxxxxxbrc003

Migration.8f3e7716- mbx_store2 xxxxxxbrc003

SystemMailbox       mbx_store1 xxxxxxbmc002

Server ending 003 is no longer valid, server ending in 002 is. Both databases exists in a DAG.

I am assuming here that the issue is with server 003 no longer being valid although they all refuse to move to a new store.

Anyone have any ideas how i can resolve this?

thank you in advance.

Hello,

Currently, our's email system is running 02 DAG and have 02 network layer

- DAG01: have 04 exchange server 2013 Cu5 with physical networks is 10.16.xx.xx (first installed)

- DAG02:  have 04 exchange server 2013 Cu15 with physical network is 10.17.xx.xx (second installed)

Now, we are planning to uninstall DAG01 then new setup other DAG that using exchange server 2013 Cu12 on network range 10.17.xx.xx.

Could you have advice about this? What's take note? after removing DAG01 affect to email system?

Regards,

Hello everybody, good afternoon

I have a query regarding best practices configuration, and is as follows:

A customer with 01 forest and 02 domains: abcsite1.com and abcsite2.com has an Exchange 2010 SP3 organization divided between 02 sites.

I started with mail service migration to Exchange 2013 at site 1, and everything was satisfactory. For services it is configured URLmail.publicdomain.com.

Now is the time to start migrating to Exchange 2013 service on site 2. The URL to be set for services iswebmail.publicdomain.com.

As you can see the public domain is the same for the entire organization.

Based on the mentioned my question is:

What is the best way to configure the Autodiscover service for the entire organization?

Can I use the URL autodiscover.publicdomain.com for the 02 sites? each site must manage their own autodiscover?

On the other hand it must also configure OAB for each exchange of each site?

Stay tuned and hope can help me.

Thanks you very much.

Hi!

Can Exchange 2013 be installed on Windows 2016? We are getting a message "

Thanks.

I recently tried to install CU 13. but it failed.  After a reboot the Exchange services were disabled.  I was able to re-enable them and get them started with the exception of the Exchange Service Host service.  It is stuck in a loop of constantly starting and stopping.

Mail is working but I can not get into the ECP or OWA.  Also, the Exchange management shell will not connect and gives this error:

[AuthZRequestId=6a773c7a-a05d-40b2-9133-4e56b8f1ce90][FailureCategory=AuthZ-TypeInitializationException] The type
initializer for 'Microsoft.Exchange.Configuration.Authorization.InitialSessionStateBuilder' threw an exception. For
more information, see the about_Remote_Troubleshooting Help topic.

The ECP returns the follow:

Server Error in '/ecp' Application.

---

Could not load file or assembly 'Microsoft.Exchange.Management, Version=15.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35' or one of its dependencies. The system cannot find the file specified.

I have tried to re-run the update but it fails and I'm afraid to uninstall it as I read that would remove Exchange? I've also tried the updateCAS powershell script but that fails as well, probably because it cannot connect to Exchange.

Any help would be greatly appreciated.