I have to imagine I'm not the first person to have this problem.  Basically i have a user thats account keeps getting locked and the lock is coming from the CAS servers.  My assumption here is that someone is trying to brute force is password using the a CAS login. 

The question is, is there a way to make the CAS server a little smarter so that it blocks IPs that request x number of password requests x number of times within x number of seconds?  How else could you stop bots brute forcing AD users that they have harvested at some point?  Is there something simple i'm overlooking?

Hi,

I have Exchange 2013 Hybrid, mail flow is working fine with no issues, but when my application trying to send email to office 365 users it is blocked. these application has permission to send emails internal only not to outside.

is this mean that all office 365 migrated users are considered as external users even with hybrid? how to fix this. 

Greetings all

We are merging 2 companies (forest A source, Forest B target) and migrating all the mailboxes from Exchange 2013 in forest A to Exchange 2016 in forest B (Exch A will be decomissioned). A Two way trust has been established. The Prepare-moverequest script is issued correctly and the New Move is initiated using the ECP "migrate to this forest" from the target forest B Exchange 2016. The mailbox is eventually synched. Until this point access to the mailbox using OWA in Exch A is still functional. However when we finalize/complete the migration and it is definitely removed from Exch A, OWA in Exch A says "something went wrong" when trying to access the mailbox reporting it cannot locate it instead of proxying. Usually (at least between same domain migration) you get redirected or proxied to the target Exchange which has the mailbox. However the Outlook client from the source domain A does update itself and connects to the new Exch Server in forest B correctly so the mailbox is available and online. After the mailbox move we use ADMT to migrate the user from A to B with SID history but filtering MSExch attributes retaining the original user in the source AD. This should not however change the behavior of the source OWA after the mbox has been migrated. Additionally, the source Exch server converts the user mbox into a contact which is the correct behavior so I don't know why from the source OWA it does not proxy correctly towards the target Exch B (maybe some incorrect attribute?). Any pointers are appreciated - thanks!

--- Luca Forattini

Good evening,

Following TechNet closely I'm currently in the process of moving my exchange 2010 environment to 2013.  I have single exchange server on a SBS 2011 box.  Sadly I've failed at the first hurdle installing SP3, the result is that my Exchange 2010 is refusing all client connections.

During the SP3 install I passed all prerequisites but during the actual upgrade it failed at the Hub Transport Role with the following error:

Summary: 8 item(s). 3 succeeded, 1 failed.
Elapsed time: 00:20:46
Language Files
Completed

Elapsed Time: 00:10:25

Restoring services
Completed

Elapsed Time: 00:00:02

Languages
Completed

Elapsed Time: 00:03:32

Hub Transport Role
Failed

Error:
The following error was generated when "$error.Clear();
          Write-ExchangeSetupLog -Info "Creating SBS certificate";

          $thumbprint = [Microsoft.Win32.Registry]::GetValue("HKEY_LOCAL_MACHINE\Software\Microsoft\SmallBusinessServer\Networking", "LeafCertThumbPrint", $null);

          if (![System.String]::IsNullOrEmpty($thumbprint))
          {
            Write-ExchangeSetupLog -Info "Enabling certificate with thumbprint: $thumbprint for SMTP service";
            Enable-ExchangeCertificate -Thumbprint $thumbprint -Services SMTP;
           
            Write-ExchangeSetupLog -Info "Removing default Exchange Certificate";
            Get-ExchangeCertificate | where {$_.FriendlyName.ToString() -eq "Microsoft Exchange"} | Remove-ExchangeCertificate;

            Write-ExchangeSetupLog -Info "Checking if default Exchange Certificate is removed";
            $certs = Get-ExchangeCertificate | where {$_.FriendlyName.ToString() -eq "Microsoft Exchange"};
            if ($certs)
            {
              Write-ExchangeSetupLog -Error "Failed to remove existing exchange certificate"
            }
          }
          else
          {
            Write-ExchangeSetupLog -Warning "Cannot find the SBS certificate";
          }
        " was run: "The certificate with thumbprint 355E62E464DCF42A08BCB7A8CF39C819D42B760E was not found.".

The certificate with thumbprint 355E62E464DCF42A08BCB7A8CF39C819D42B760E was not found.
Click here for help... http://technet.microsoft.com/en-US/library/ms.exch.err.default(EXCHG.141).aspx?v=14.3.123.3&e=ms.exch.err.Ex88D115&l=0&cl=cp

Elapsed Time: 00:06:46

Client Access Role
Cancelled
Mailbox Role
Cancelled
Management Tools
Cancelled
Finalizing Setup
Cancelled

The setup log shows the following details:

Ending processing Get-ExchangeCertificate
[07/31/2013 20:50:46.0516] [1] The following 1 error(s) occurred during task execution:
[07/31/2013 20:50:46.0516] [1] 0.  ErrorRecord: The certificate with thumbprint 355E62E464DCF42A08BCB7A8CF39C819D42B760E was not found.
[07/31/2013 20:50:46.0516] [1] 0.  ErrorRecord: System.InvalidOperationException: The certificate with thumbprint 355E62E464DCF42A08BCB7A8CF39C819D42B760E was not found.
[07/31/2013 20:50:46.0531] [1] [ERROR] The following error was generated when "$error.Clear();
          Write-ExchangeSetupLog -Info "Creating SBS certificate";

          $thumbprint = [Microsoft.Win32.Registry]::GetValue("HKEY_LOCAL_MACHINE\Software\Microsoft\SmallBusinessServer\Networking", "LeafCertThumbPrint", $null);

          if (![System.String]::IsNullOrEmpty($thumbprint))
          {
            Write-ExchangeSetupLog -Info "Enabling certificate with thumbprint: $thumbprint for SMTP service";
            Enable-ExchangeCertificate -Thumbprint $thumbprint -Services SMTP;
           
            Write-ExchangeSetupLog -Info "Removing default Exchange Certificate";
            Get-ExchangeCertificate | where {$_.FriendlyName.ToString() -eq "Microsoft Exchange"} | Remove-ExchangeCertificate;

            Write-ExchangeSetupLog -Info "Checking if default Exchange Certificate is removed";
            $certs = Get-ExchangeCertificate | where {$_.FriendlyName.ToString() -eq "Microsoft Exchange"};
            if ($certs)
            {
              Write-ExchangeSetupLog -Error "Failed to remove existing exchange certificate"
            }
          }
          else
          {
            Write-ExchangeSetupLog -Warning "Cannot find the SBS certificate";
          }
        " was run: "The certificate with thumbprint 355E62E464DCF42A08BCB7A8CF39C819D42B760E was not found.".
[07/31/2013 20:50:46.0531] [1] [ERROR] The certificate with thumbprint 355E62E464DCF42A08BCB7A8CF39C819D42B760E was not found.
[07/31/2013 20:50:46.0531] [1] [ERROR-REFERENCE] Id=SbsBridgeHeadComponent___6464a0ee0fd04f6b893a3c81d7eb3f26 Component=EXCHANGE14:\Current\Release\Shared\Datacenter\Setup\SBS
[07/31/2013 20:50:46.0531] [1] Setup is stopping now because of one or more critical errors.
[07/31/2013 20:50:46.0531] [1] Finished executing component tasks.
[07/31/2013 20:50:46.0594] [1] Ending processing Install-BridgeheadRole

 My application event log is flooded with the following error:

Log Name:      Application
Source:        Microsoft-Windows-IIS-W3SVC-WP
Date:          31/07/2013 21:59:43
Event ID:      2280
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      SRV-SBS.lawrencedavid.local
Description:
The Module DLL C:\Program Files\Microsoft\Exchange Server\V14\ClientAccess\Owa\auth\exppw.dll failed to load.  The data is the error.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-IIS-W3SVC-WP" Guid="{670080D9-742A-4187-8D16-41143D1290BD}" EventSourceName="W3SVC-WP" />
    <EventID Qualifiers="49152">2280</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2013-07-31T20:59:43.000000000Z" />
    <EventRecordID>975085</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>SRV-SBS.lawrencedavid.local</Computer>
    <Security />
  </System>
  <EventData>
    <Data Name="ModuleDll">C:\Program Files\Microsoft\Exchange Server\V14\ClientAccess\Owa\auth\exppw.dll</Data>
    <Binary>05000000</Binary>
  </EventData>
</Event>

I've tried to re-register exppw.dll following instructions in the TechNet forums but this hasn't helped to restore functionality or complete the SP3 installation.  Any guidance would be most appreciated.  Thanks in advance!

Hi Team,

Getting following error when installing another node in existing Exchange environment:

Error:
Setup can't use the domain controller 'String' because it belongs to Active Directory site ''. Setup must use a domain controller in the same site as this computer (DCName.domain.com).

this server and Domain controller are in the same AD Site.There are already three exchange servers running successfully.

any help is greatly appreciated.

Muhammad Nadeem Ahmed Sr System Support Engineer Premier Systems (Pvt) Ltd T. +9221-2429051 Ext-226 F. +9221-2428777 M. +92300-8262627 Web. www.premier.com.pk

Hi, We would like to upgrade our Exchange 2013 to Exchange 2016 Environment and configure DAG/HA. Could anyone help me with upgrade path and steps.

Current environment specs

Exchange Server 2013 Standard SP1 (CU4) Build No: 15.00.0847.032 - One CAS and One MBX

OS - Windows Server 2012 R2

.Net framework version is 4.5.1

To upgrade, we have to upgrade the current Exchange to CU10 right.

What is the installation order? which server has to install first? for this any schema update required?



Dear All,

I'm new towards exchange 2016 with transport edge.Trying to setup whole server but face some issue.

Mail is not able to sent out.

MX setting in the Public domain complete setup.

When sent in mail, it prompt,

Remote Server returned '554 5.4.108 SMTPSEND.DNS.MxLoopback; DNS records for the next hop domain are configured in a loop -> DnsDomainIsInvalid: InfoMxLoopback'

can anyone advise for this?

We currently use zimbra 8 and are looking to move to exchange 2013 since the future of zimbra looks to be bleek. Currently we have about 20 users. I would like to get mail, calendar, contacts and notes. I have read other threads like:

http://social.technet.microsoft.com/Forums/exchange/en-US/e94a8bb6-06df-44fa-bbff-0ecdea9dbf4d/migrate-from-zimbra-to-exchange-2010?forum=exchange2010

Is this the best way? This procedure appears to get only mail. Is there a way to get calendar, contacts and such? I really don't want to have to export to pst and then import as this would cause hours of email downtime (zimbra server up while i export. Then configuring the router for the exchange server to accept connections then import). About half the users are connecting from the internet and therefore have to come in through the router. How do you gurus handle going from 1 email platform to another?

Here is my Scenario:  I inherited an exchange setup where Exchange 2007 was migrated to 2013 and the 2007 server was turned off and scrapped.  The 2013 machine is now in hybrid with 0365.

I've got an orphan 2007 exchange server records and transport rules, etc in Exchange 2013.  I'm wanting to get rid of all these references to the old Exchange 2007 environment to prevent any headaches in the future.  Luckily the computer object was still left in AD.

My understand is the proper way to do this is to spin up the exact version of server software (win2003 SP2), Make sure it has the same drives for install and DB...and install the same build of Exchange 2007 and put it in recoverserver mode.  I get an error: "Cannot find at least one domain controller running Windows Server 2003 Service Pack 1 or later in domain"

Functional Level is 2008 R2

I'm kind of at my whits end because from what i can see, there is no problems AD wise.  There are 3 DC's and all 3 are GC.  I'm specifying the DC when beginning installation.

Any ideas on where next to look???

Hello,

I have a simple deployment with 3 servers.  I have a Mail/Hub Transport/Client Access server in Site A and another Mail/Hub Transport/Client Access server in Site B (2 different subnets). I then have a third server in the DMZ that I want to work as Edge Transport.

My question is; while I'm on the Site A server, creating a new Edge Subscription I am prompted to select an AD Site - do I choose the site in which my Edge Transport server resides (DMZ) or do I select the AD Site where Site A server resides?  

And that brings me to my next question. Assuming it's the latter of the options above, after creating the New Edge Subscription on Site A server, do I go to Site B server and do the same thing?  Is this a supported model?  Two Mail servers subscribed to the same Edge server?

Thank you all for your help in advance,

LJ

Hi Everyone,

we had successfully migrated all our mailboxes from exchange server 2010 to exchange server 2013.

Now we want to decommission exchange 2010, however we cannot remove the mailbox database and it throws error:

Error:
This mailbox database contains one or more mailboxes, mailbox plans, archive mailboxes, or arbitration mailboxes. To get a list of all mailboxes in this database, run the command Get-Mailbox -Database <Database ID>. To get a list of all mailbox plans in this database, run the command Get-MailboxPlan. To get a list of archive mailboxes in this database, run the command Get-Mailbox -Database <Database ID> -Archive. To get a list of all arbitration mailboxes in this database, run the command Get-Mailbox -Database <Database ID> -Arbitration. To disable a non-arbitration mailbox so that you can delete the mailbox database, run the command Disable-Mailbox<Mailbox ID>. To disable an archive mailbox so you can delete the mailbox database, run the command Disable-Mailbox <Mailbox ID> -Archive. Arbitration mailboxes should be moved to another server; to do this, run the command New-MoveRequest <parameters>. If this is the last server in the organization, run the command Disable-Mailbox <Mailbox ID> -Arbitration -DisableLastArbitrationMailboxAllowed to disable the arbitration mailbox. Mailbox plans should be moved to another server; to do this, run the command Set-MailboxPlan <MailboxPlan ID> -Database <Database ID>.

however when we run the command we found that only discovery search mailbox was found in exchange 2010 database.

We tried moving the discovery search mailbox with below command:

Get-Mailbox -Database "Mailbox Database 1746187967"| New-MoveRequest -TargetDatabase DB01

However it says this command works for ex2010, ex2007 & ex2003.

Is there any other command to remove the discovery search mailbox and decommission the ex2010 server.

Hello Everyone,
I hope you are having a great day today!

How to add a new 2016 sub-domain to existing Exchange 2013 CU 09?

Currently I add it a new 2016 sub-domain (Tree domain) to an existing 2008 R2 forest. The forest already includes 3 2008 R2 sub-domains with forest level Exchange 2013 CU09.      

Existing 2008 R2 domain:

Site1.com (Root domain)
Site2.com
Site3.com

New 2016 domain:

Site4.com

Email environment is hybrid (Exchange 2013 - Office 365)

The forest schema level is 2016: Version number 87Operating System level 2016

The users in the new domain will be using the same federated domain name (public domain name)  for their email address as users in site1.com

What are the steps to integrate the new 2016 domain to the organization Exchange 2013?

Would implementing the steps below complete my objective?

Thank You for your help and have a blessed weekend.

Raed

Dear IT experts,

I'm new to this forum and would need your help to installing Exchange Server 2010 on Windows Server 2012R2.  Kindly see the error received while executing the Powershell command.

Need your valuable advice to resolve this!

Add-WindowsFeature : The request to add or remove features on the specified server failed.

Hello,

I need the migration procedure from Lotus Notes to Exchange 2013.

1. How can i migrate Lotus Notes mail data to Exchange server 2013?

2. Is there any direct migration available?

3. for Mail data how can i migrate to exchange?

4. If any tools required please give suggest.

Please suggest.

Thanks

Hello,

I have tried to update one of our Exchange 2013CU21 Servers with CU22, but in step 10 of 18 "Mailbox role: Transport service" I get the following exception. Does anybody know what could cause this?

Hello All,

I am receiving the following error when trying to Prep AD and failing with the following error:

Error:
The following error was generated when "$error.Clear(); 
initialize-ExchangeUniversalGroups -DomainController $RoleDomainController -ActiveDirectorySplitPermissions $RoleActiveDirectorySplitPermissions

" was run: "System.NullReferenceException: Object reference not set to an instance of an object.
   at Microsoft.Exchange.Management.Tasks.InitializeExchangeUniversalGroups.CreateOrMoveEWPGroup(ADGroup ewp, ADOrganizationalUnit usgContainer)
   at Microsoft.Exchange.Management.Tasks.InitializeExchangeUniversalGroups.InternalProcessRecord()
   at Microsoft.Exchange.Configuration.Tasks.Task.<ProcessRecord>b__b()
   at Microsoft.Exchange.Configuration.Tasks.Task.InvokeRetryableFunc(String funcName, Action func, Boolean terminatePipelineIfFailed)
   at Microsoft.Exchange.Configuration.Tasks.Task.ProcessTaskStage(TaskStage taskStage, Action initFunc, Action mainFunc, Action completeFunc)
   at Microsoft.Exchange.Configuration.Tasks.Task.ProcessRecord()
   at System.Management.Automation.CommandProcessor.ProcessRecord()".

Any assistance would greatly appreciative.

Thank you :)

Hello,

I have tried to update one of our Exchange 2013CU21 Servers with CU22, but in step 10 of 18 "Mailbox role: Transport service" I get the following exception. Does anybody know what could cause this?