Quantcast
Channel: Exchange Server 2013 - Mail Flow and Secure Messaging forum
Viewing all 3168 articles
Browse latest View live

Hybrid Mode issues

$
0
0

Hi,

I've spent the past few days reading up on the Hybrid mode facility and I got the Remote connectivity facility running okay after a few blips. I also managed to get the wizard to run through until I get to the last bit about

HCW8064 -
The HCW has completed, but was not able to perform the OAuth portion of your Hybrid configuration. If you need features that rely on OAuthhttps://technet.microsoft.com/library/dn497703(v=exchg.150).aspx, you can try running the HCW again or manually configure OAuth using these manual stepshttps://technet.microsoft.com/library/dn594521(v=exchg.150).aspx.
https://support.microsoft.com/kb/3089172

It says its not important so I carried on.

I am a bit confused though about what it can and cant do.

I am in a school by the way.

I have Azure syncing with O365 and all the students and staff are listed. When I look at the mailboxes on the O365 tab there aren't any... when I try and logon it doesn't work. I thought the beauty of this was that it offered a single point of access to your mailbox.

I have tried to move a user (I will be keeping the majority on my premises) which comes up with the error.

Data migrated:                        
Migration rate:                        
Error:                        MigrationRecipientNotFoundException: A recipient wasn‎'t found for "boysboarding@*********.co.uk" on the target. Create a recipient of the appropriate type for this migration on the target and try again.

So I tried again but this time I assigned a license in the admin console. This allows me to logon to office 365 but with an empty mailbox?? I know there are mail items in there when I login on my premises. if I try and migrate the users mailbox I get

Migration rate:                        
Error:                        InvalidRecipientTypeException: Unsupported recipient type ‎'Mailbox‎' provided. Only ‎'Mailuser‎' is supported for this migration type.

Its taken me ages to even get to this stage and now I am stuck


Difference RPC Client Access Server & Client Access Server

$
0
0

Hi Guys,

Some confusion in RPC Client Access Server & Client Access Server.

How to Work RPC Client Access Server


Satish Chaturvedi Mob-9990806001

Email cannot send Internal and External After start from power cut off

$
0
0

Dear Forum Users,

I have a problem with Mail server Exchange 2013 that running with both CAS and MB. The power cut off make machine accidentally shutdown, and After starting up machine, Mail server is not able to Send/Received email. not working both internal and external. Please kindly advise me about idea of problem that possible happen, i never meet this problem before. thank you in Advance. 

Regards,

SAM


Sokneang SAM

Autodiscover Vulnerability question - Exchange 2010 SP3 CU13

$
0
0

Hi, please can you let me know how you have protected against the "Autodiscover Enumeration Vulnerability".  My current thoughts are around using an irule on an F5 LTM but am unsure if there is a smarter way?

many thanks

T


Tul Golan

TLS negotiation failed with error BadBindings

$
0
0

Hello,

I changed the ssl ucc cert provider from godaddy to comodo and installed the new cert. All services are asigned to the new cert. Almost all emails on the receive connector work fine.

But the samsung printer and hrs.de seem to have problems negoatiating tls.

Patch level is CU11

checktls.com works with no errors.

Receive connector log shows this:

0:57214,+,,
1:57214,*,SMTPSubmit SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender AcceptRoutingHeaders,Set Session Permissions
2:57214,>,"220 Mail1.XXXXXXXX.com Microsoft ESMTP MAIL Service ready at Sat, 30 Apr 2016 15:18:59 +0200",
3:57214,<,EHLO SEC001599DDC76E,
4:57214,*,SMTPSubmit SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender AcceptRoutingHeaders,Set Session Permissions
5:57214,>,250-Mail1.XXXXXXXX.com Hello [192.168.1.202],
6:57214,>,250-SIZE,
7:57214,>,250-PIPELINING,
8:57214,>,250-DSN,
9:57214,>,250-ENHANCEDSTATUSCODES,
10:57214,>,250-STARTTLS,
11:57214,>,250-X-ANONYMOUSTLS,
12:57214,>,250-X-EXPS GSSAPI NTLM,
13:57214,>,250-8BITMIME,
14:57214,>,250-BINARYMIME,
15:57214,>,250-CHUNKING,
16:57214,>,250-XEXCH50,
17:57214,>,250-XRDST,
18:57214,>,250 XSHADOWREQUEST,
19:57214,<,STARTTLS ,
20:57214,>,220 2.0.0 SMTP server ready,
21:57214,*,,Sending certificate
22:57214,*,"CN=mail.XXXXXXXX.com, OU=PositiveSSL Multi-Domain, OU=Domain Control Validated",Certificate subject
23:57214,*,"CN=COMODO RSA Domain Validation Secure Server CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB",Certificate issuer name
24:57214,*,69BXXXXXXXXDE03,Certificate serial number
25:57214,*,043XXXXXXXX5E1A,Certificate thumbprint
26:57214,*,mail.XXXXXXXX.com;autodiscover.XXXXXXXX.com;mail1.XXXXXXXX.com;mail3.XXXXXXXX.com,Certificate alternate names
27:57214,*,,TLS negotiation failed with error BadBindings
28:57214,-,,Local

Send on behalf and read receipt

$
0
0

Hi all.

I am migrating a customer infrastructure from Exchange 2007 to Exchange 2013. The problem is about read receipts with send on behalf mail, that work differently in Exchange 2007 and Exchange 2013.

Let's suppose that user X sends on behalf of user Y.

In Exchange 2007 the read receipts arrive in user Y mailbox. In Exchange 2013 the read receipts arrive in user X mailbox (and this is a big problem for the customer).

I'm trying to change the Disposition-Notification-To header with a transport rule, but I always receive an error (You cant set header Disposition-Notification-To with value). I cannot create an Outlook rule without adding something specific in the message object or body (and it is not possible for the customer). I have not Transport Edge role in my infrastructure

Has anyone found a solution for this kinf of problems?

Thanks!
Lu

 

Recover mail lost due to distribution list rejecting mail from non-authenticated senders

$
0
0

Hi,

I have a bit of a situation, hoping to reach out as google isn't getting me anywhere on this topic.

We recently gave out a smtp address tied to a distribution group which was accidentally configured to only allow messages if senders were authenticated. A few dozen external customers sent emails which were processed by our email gateway, andsuccessfully delivered to Exchange which was a surprise to me.

Once in the Exchange environment, I can see tracking logs showing its path as below:

RunspaceId              : d6fee167-5fa3-4d58-9354-b10402c9dacf
Timestamp               : 4/29/2016 9:53:34 AM
ClientIp                : 10.10.X.X
ClientHostname          : GATEWAY1
ServerIp                : 10.11.X.X
ServerHostname          : EXCHANGE1
SourceContext           : 08D36FD672846E86;2016-04-29T13:53:34.862Z;0
ConnectorId             : EXCHANGE1\Exchange Connector
Source                  : SMTP
EventId                 : RECEIVE
InternalMessageId       : 13683389
MessageId               : <bb3a65e077043968b99b37d681fc2e48@mail.hotmail.com>
Recipients              : {distribution_list@internal.local}
RecipientStatus         : {}
TotalBytes              : 41037
RecipientCount          : 1
RelatedRecipientAddress :
Reference               :
MessageSubject          : Yadda yadda
Sender                  : externaluser@hotmail.com
ReturnPath              : externaluser@hotmail.com
MessageInfo             : 00A: NTS:
MessageLatency          :
MessageLatencyType      : None
EventData               : {[FirstForestHop, EXCHANGE1.internal.local]}
RunspaceId              : d6fee167-5fa3-4d58-9354-b10402c9dacf


RunspaceId              : d6fee167-5fa3-4d58-9354-b10402c9dacf
Timestamp               : 4/29/2016 9:53:35 AM
ClientIp                :
ClientHostname          : EXCHANGE1
ServerIp                :
ServerHostname          :
SourceContext           :
ConnectorId             :
Source                  : ROUTING
EventId                 : FAIL
InternalMessageId       : 13683389
MessageId               : <bb3a65e077043968b99b37d681fc2e48@mail.hotmail.com>
Recipients              : {distribution_list@internal.local}
RecipientStatus         : {550 5.7.1 RESOLVER.RST.AuthRequired; authentication required}
TotalBytes              : 41037
RecipientCount          : 1
RelatedRecipientAddress :
Reference               : {<34af8566-3405-4204-95d1-b0f0703e8280@internal.local>}
MessageSubject          : Yadda yadda
Sender                  : externaluser@hotmail.com
ReturnPath              : externaluser@hotmail.com
MessageInfo             :
MessageLatency          :
MessageLatencyType      : None
EventData               :

Message tracking doesn't show these items as existing anywhere. I haven't done a discovery search yet, planning on it but not expecting a result. Our gateway doesn't retain mail if it succesfully hands it off to Exchange, which it did.

Have these mails disappeared into thin air? No bounceback went out. No notification to the destination user or receiving user.

If anyone has dealt with anything like this before, please let me know if you found a way to recover these messages.

Thank you,



SPF record optimisation for office 365.

$
0
0

Hi folks  need some assistance optimizing my <g class="gr_ gr_12 gr-alert gr_spell gr_run_anim ContextualSpelling ins-del multiReplace" data-gr-id="12" id="12">spf</g>  record as its failing due to too many DNS lookups

this is the current record.

v=spf1 a mx ptr include:servers.mcsv.net include:spf.mandrillapp.com include:outlook.com include:spf.messaging.microsoft.com include:spf.messagelabs.com -all

And yes <g class="gr_ gr_18 gr-alert gr_tiny gr_spell gr_run_anim ContextualSpelling multiReplace" data-gr-id="18" id="18">i</g> know, a <g class="gr_ gr_21 gr-alert gr_spell gr_run_anim ContextualSpelling ins-del multiReplace" data-gr-id="21" id="21">mx</g> and ptr shouldn't be there.

The problem is outlook.com and messaging.microsoft.com. are there more direct entries <g class="gr_ gr_30 gr-alert gr_tiny gr_spell gr_run_anim ContextualSpelling multiReplace" data-gr-id="30" id="30">i</g>  could use, exmaple _spf-b etc... OR are these two even required if all the company does is use office 365 for Archiving, no mail is sending out through Office365.



Sent Time for user 1 and Sent Time for user 2 are vastly different, But Only Sometimes.

$
0
0

Hello Everybody,

I have a situation where all of the common sense solutions have already been applied and now I need to reach out to the community to see if anybody else has experienced this issue.

I have an Exchange domain and Outlook clients. The messages almost always have the correct Sent times, however like the title sayssometimes but not always the Sent fields are different on two different users computers. This nature of this problem rules out all of the regular culprits like NTP not being enabled and Windows Desktop times being different. 

The one thing that has caused this issue in the past is when Outlook is closed before the messages go out of the Outbox into the Exchange server.  All the employees involved already know that and they don'tdeliberatly close Outlook anymore. 

I'm using Outlook 2010 on all the clients and they are all on the same domain! Reviewing headers show that the messages aren't getting stuck in the mail relay process, which involves going to the Exchange Server and being sent out to the internet to get scanned by MxLogic, AKA McAfee Email Security, AKA Intel Email security. This part of the equation is most likely to be the real problem because it is black box as far as what they do to messages. 

Mailflow on Cross Forest migration

$
0
0

Hi all.  I am working on a cross forest (inter forest) migration project.  Basically I need to migrate all AD user and Exchange 2013 mailboxes from the old AD forest (old.com) to new AD forest (new.com) that is also running on Exchange 2013.  Both the old and new AD forest will be using the same SMTP name space.  This is what I've done:

a) Created the accept domain in new Exchange forest (share.com)
b) Created the shared SMTP name space (share.com) and set it as "Internal Relay"
c) Created the Send and Receive Connector on both old and new Exchange environment
d) Ran the Prepare-MoveRequest.ps1 PowerShell script and set the TargetDevlieryDomain to "new_domain.test"
e) Ran the ADMT User Migration wizard to migrate the SIDHistory (I also excluded all msExch attributes, if I don't exclude them, it will corrupted the account created by the Prepare-MoveRequest PowerShell script)

Checked both the user account attributes, the "TargetAddress" attribute on both of them is set to "xxx@new_domain.test"

This is the result:

  1.      Email send from TEST (brand new user in new forest) to TEST2 (migrated account) is NOT working
  2.      Email send from  TEST2 (migrated account) to TEST (brand new user in new forest) is working
  3.       Email send between TEST (brand new user in new forest) and MYSELF (user in old domain) is working
  4.      Email from TEST2 (migrated account) to MYSELF (user in old domain) is working
  5.      Email from MYSELF (user in old forest) or external emails send to TEST2 (migrated account) IS NOT working. 
  6.       Email from external to TEST (new user in new forest) is working 

So my problem is the migrated user account is not able to accept emails from any body.

 I am seeing this error on the email send from the TEST user in the new forest to this migrated user account (they both reside in the new forest).

You aren't authorized to send to this recipient.<br>For more information about this issue see <a href="http://go.microsoft.com/fwlink/?LinkId=389365">DSN code 5.7.1 in Exchange Online</a>.

Looks like the email is received by the new Exchange server in the new forest, then it got passed over to the old Exchange server in the old forest by using the Send Connector I've configured (there is only one Send Connector in the new Exchange forest, which will pass everything to the old Exchange server).  That seems little bit odd as the recipient is in the same Exchange forest, I don't expect it to send the email out to the old Exchange server 

Then I am seeing this error from the returned email that send from my account (in the old Exchange forest) to this migrated user (in the new Exchange forest)

Remote Server returned '554 5.4.6 Hop count exceeded - possible mail loop'

Any suggestions?  Thanks you. 


IP Block List providers giving false positives

$
0
0

Earlier this week, my Exchange 2013 environment stopped receiving any external email.  This was very confusing as everything appeared to be running, internal mail was flowing OK, and outgoing mail was OK.

I discovered that the Connection Filtering Agent on my Edge Transport Server was rejecting every connection, and dropping it straight away.  After a bit of digging, I found that I was getting a false positive by the IP Block List Providers I have configured.  When I disabled the first provider, the connections were getting blocked by the second provider, and then by the third.  I checked with Spamhaus' utility (https://www.spamhaus.org/lookup/), and the sender IP (in this case, I was using the Microsoft Remote Connectivity Analyser to test) was not in any of their blacklists.  I didn't check the other providers, but I'm sure it's not listed.

I used the Test-IPBlockListProvider cmdlet against all the Providers I have listed, with the following results:

Provider          ProviderResult   Matched
--------          --------------   -------
SpamHaus          {198.101.242.72}    True
Barracuda Central {198.101.242.72}    True
SpamCop           {198.101.242.72}    True

At the moment, I have the Connection Filtering Agent disabled, and email is coming through OK again, but I'd like to figure out what's going on, so I can enable it again.

Does anyone have any idea why it would start returning false positives for everything out of the blue?  Is the fact that the ProviderResult the same (and not the input IP I provided) relevant?


Publish to GAL button not available

$
0
0
Hi I'm trying to assign an email certificate to about 5000 users that have their exchange environment on a different domain to their user accounts. When I try to publish to GAL it works only if the user does not have a resource account attached otherwise the button disappears. We have a lot of users with resource accounts, is there a way to publish to GAL without visiting them all and closing the resource account, publishing to GAL and then re-adding the resource account?

Exchange 2010 The remote pipeline has been stopped. It was running the command

$
0
0

Hello,

Our Exchange 2010 server message queue keeps reporting the following error

 The remote pipeline has been stopped. It was running the command 'get-message -ResultSize '1000' - ReturnPageInfo $True -SortOrder '+FromAddress' -server 'myserver.mydomain.loc' -SearchForward $True - BookmarkObject $null .............

Cannot create transport rules?

$
0
0

Hi all,

I just got exchange 2013 running in co-existence scenario with a a previous exchange 2007 install.  The mail flow is working but I noticed that the Ex2013 server didn't import in the outbound disclaimer message from 2007.  When I attempted to created a new rule under "Mail Flow->rules" I noticed that the "plus symbol" to add new rules was missing. 

I then tried to use powershell to create the rules, but the only cmdlet I had available was "get-transportrules".  Both "new-transportrules" and "set-transportrules" did not exists according to the server.

Any ideas on how to troubleshoot this problem?

New-TransportRule with multiple predicates

$
0
0

Hello,

Is it possible to create a transport rule with multiple predicates using Powershell?

For example, I would like to create a rule that will apply to messages either send by a group or sent to another.

Moreover, I would like to do the same thing with actions, first apply an action to the message and then one more.

Regards,

Chris


A valid Migration mailbox could not be found for this organization

$
0
0

hello, 

I am migrating from Exchange 2010 to 2013, everything went smoothly till migration step.

Anytime I start a new migration batch I get error "A valid Migration mailbox could not be found for this organization".

Tried these workarounds:

-Enable-Mailbox -Arbitration -Identity "Migration.8f3e7716-2011-43e4-96b1-aba62d229136"

 Getting error "The object is read-only because it was created in a version of Exchange later than 1.1 (15.0.0.0)". Current supported version is 1.0 (14.0.0.0)

didn't run : -Set-Mailbox"Migration.8f3e7716-2011-43e4-96b1-aba62d229136" -Arbitration –Management:$true

because of previous error.

Any suggestion would be great

forward message to next mx record prefrences

$
0
0

Dears 

     After reading log files i found the Exchange server delay around 24 hours to forward message to next mx record preferences for many messages what could reason is i can adjust this configuration?

Alerts to Public Distribution List

$
0
0

Hi All,

We have a public distribution list which has individual users and other PDL's added into it(cascading PDL'S)

Ex: - The root PDL is "RootPDL" which has individual users u1,u2,u3,u4 and other PDL's (ChildPDL1 with users c1,c2,c3; ChildPDL2 with users d1,d2,d3; and ChildPDL3 with users e1,e2,e3).

This RootPDL is added to SharePoint 2010 list so that 'Alerts' can be received by the users.

All the PDL's are security groups in AD and below setting is unchecked in Exchange

'Required that all senders are authenticated' 

With above settings, alerts are sent to individual users added to the root PDL which are u1,u2,u3 and u4. But users(c1,c2,c3,d1,d2,d3,e1,e2,e3) inside ChildPDL's still do not receive any alerts.

How does an exchange server can sends email to all user inside all PDLS?

Any inputs/suggestions/information about this issue would be helpful.

Anitha Vyas

incoming & outgoing is not working

$
0
0

I have two exchange server 2010 in cluster 2008r2. Hub, Mailbox & CAS roles install in both  exchange server.  My EX1  working fine but i switch my mail flow to another EX2 then my incoming & outgoing mail not able to sending. & no delivery failed message received.

but my OWA open out side the office & able check email. but i try to send email then it save in draft automatically.

I check all replication & health  passed.

all services of exchange server is running.

no failed delivery message receive in both side.

If i shutdown my EX1 server then no queue show in exchange EX2.

how to set dnslookups through set-transportservice using powershell

$
0
0

Hello guys, 

Is there a way to set dnslookups using set-transportservice using powershell or in anyway we can updatge/set it but through powershell 

thanks in anticipation

Viewing all 3168 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>