Hello,

we've currently got a rather odd problem with our Exchange 2010 Server (Sp3 RU8):

During business hours, the RPC Client Access Process (Microsoft.Exchange.RpcClientAccess.Service) hits 100% CPU load on the Exchange Server. No matter what we have tried, the problem has so far refused to go away.

Additional symptoms:

• The load is caused by few (3-5) Mailboxes at a given time
• The Mailboxes causing this vary each day, can hit any Mailbox with no pattern discernible

What we've tried so far without success:

• Stop/Rebuild Searchindex
• Move all Mailboxes, dropping bad items
• Move (sole) public folder database
• Migrate Public folder database
• Stop other client access methods (Active Sync)
• Ensure throttling is in place
• Ensure Public Folders are configured properly and that the current database is accepted as the default database
• Throw excessive hardware at it
• Build a new Exchange Server and move content over
• Rebuild Virtual Directories
• Maximized logging of all kind (logs say everything is great)

In the RPC Access logs, virtually all errors are generic as expected during daily operations:

AccessDenied, Collision, Object Changed, ...

The only clue I have left - but cannot find any information on - is this:

There is one kind of Operation that takes an incredible amount of time:
Disconnect
We have clients (All of them using Outlook 2010) that spend literally days disconnecting.

But what does that tell me? How can I dig deeper into this?
If that's not it: What else can I try?

Cheers and thanks in advance for any insights,
Fred

There's no place like 127.0.0.1

Hello all,

Very simple problem : A user has a shared mailbox (shared@mbx.com) connected on his outlook and he wants the sent items he sent with the shared mailbox to be in his OWN sent items folder (user@mbx.com).

I saw that the cmdlet Set-MailboxSentItemsConfiguration was not able anymore in Exchange 2013 so it's a problem for me.

I also tried the registry key settings :

HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Outlook\Preferences

Value name: DelegateSentItemsStyle 
Value Type: REG_DWORD 
Value: 0

It didn't worked at all for me. So I decided to ask you, what could I do to fix this ?

Thanks,

Dear friends,

we have an Exch2007 on Win2008R2, Exch2013, now CU8 is installed on Win2012R2 for testing purposes.
PublicFolders and mailboxes still are settled on Exch2007, I still can create and delete mailboxes or move to another database on this server.

On both servers I can see mailboxes on all Servers, I cannot see the respective others servers database - which seems to be normal...

I even can create and change properties of a new mailbox on Ex2013 on new Server, but I neither can delete nor move this Mailbox via emc on Exch2013 server. Trying this I get an AD error insufficient rights, AD-Answer 00000005 SecErr DSID-03152501. Problem 4003


BUT: I can delete or move a mailbox on new server via management shell! So it seems to be a hidden browser problem...
I checked ad permissions (what are probably not the reason due to shell functioning well), IE permissions are set to use integrated logon.
I also granted full access rights on databases and mailboxes via shell.

Did I miss anything of prerequisites concerning IE or IIS?? I also cannot import a certificate from an UNC path on another server, I have to use a local unc path...

So any idea would be great, because working on some items in shell is not very comfy!! :-)

Thanks and regards.

McButtonn

I'm going through my Exchange Server's logs and checking out warnings and errors, and I haven't been able to find anything helpful on this one in the application log of the Windows Server 2012 R2 virtual machine running Exchange Server 2013 SP1 only:

Event ID 3154 error, source MSExchangeRepl:

Active Manager failed to mount database Mailbox Database 0738684499 on server <Server.Name.com>. Error: An Active Manager operation failed with a transient error. Please retry the operation. Error: Database action failed with transient error. Error: A transient error occurred during a database operation. Error: MapiExceptionNetworkError: Unable to make admin interface connection to server. (hr=0x80040115, ec=-2147221227)

Apparently the error really is "transient" and the server retries the operation successfully, because everything seems to be working OK, but I'd still like to know why this error appears every time the server starts up, and what I can do to prevent the error from occurring.  Thanks!

I am trying to remove 2 rights to a mailbox via powershell.  the command I am running doesn't seem to work though.

There are 2 service accounts that seem to have a deny setting on the mailbox; as shown in the screenshot.  user column is inDomain\User format.

I am trying to remove these because I believe it is causing an integration issue between Cisco Unified messaging and outlook. (New voicemails do not show up in the inbox for this one user, even though tests from Cisco UM are ok.)

Running this command doesn't seem to remove the entries I need:

remove-MailboxPermission -Identity <USER ALIAS> -User<SERVICE ACCOUNT> -AccessRights FullAccess -InheritanceType all

Trying to setup transport rule to prevent outgoing emails but allow internal emails.

The following doesn't seem to work, no NDR, and no blocking:

--------------------------------------------------------------------------------------------------------

from joe@contoso.com

  and sent to user that are 'Outside the Organization'

send 'Email outside of Company is not allowed' to sender with '5.7.1'

--------------------------------------------------------------------------------------------------------

If I add 'Delete the message without notifying anyone' it is not allowed.

Error:
An action to reject the message was specified, but there is more than one action.
When this action is used, it must be the only action in the rule.

Hello All,

After enabling inplace-hold on about 500 mailboxes,  we've been getting Managed Availability unhealthy alerts on ELCPermanentMonitor/Compliance "ELC has hit the threshold for the number of Permanent exceptions"  At the moment, there's not much Technet documentation out there that have details on this monitor.  Here is what I've found so far:  The probe is ComplianceOutlookLogonToArchiveRPCCTPProbe; the monitor is ELCPermanentMonitor, the responder is ELCPermanentEscalateResponder and lastly the healthset name is Compliance.

Does any know on how I can disable or override this probe?   Anyone know or have documentation on this monitor/healthset?

Thank You

R

Hello,

we changed settings as suggested here, however, mail sent via OWA or Outlook are always QP.

For our business purposes we need to have all mails encoded in UTF-8 format.

We use Exchange 2013 fully patched. 

Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable 

If anyone can suggest some solution, i would be thankfull, as at this point i don't know where to look for setting to force owa to use UTF-8.

Thanks in advance,

Ivica

I changed the email address and domain.

Summary: 1 item(s). 0 succeeded, 1 failed.
Elapsed time: 00:00:00

Set-FederatedOrganizationIdentifier
Failed

Error:
Federation certificate with the thumbprint "407F611D511999B118D8534D45EB92F49A87648E" cannot be found.
Click here for help... http://technet.microsoft.com/en-US/library/ms.exch.err.default(EXCHG.141).aspx?v=14.2.318.0&t=exchgf1&e=ms.exch.err.ExFF0307

Exchange Management Shell command attempted:
Set-FederatedOrganizationIdentifier -DelegationFederationTrust 'Microsoft Federation Gateway' -AccountNamespace 'myemail.com' -OrganizationContact'pxxxxs@myemail.com' -Enabled $true

Elapsed Time: 00:00:00

How do I fix this?????????????????

I will explain my environment and maybe someone can give me a good answer to my questions.

I'm currently running Exchange 2007/2013 co-existence and slowly migrating my users to over to Exchange 2013.  However, I noticed transport errors in the event log on the Exchange 2007 server

Recently, I added additional CPU's to the CAS servers, and in general, CPU utilization has been lowered which is great.  But in our environment, we have a handful of 3rd party service accounts that has to access the Exchange system.  When running the Exchange Troubleshooting tool, it's always a combination of service accounts and random mailboxes that have MAPI/RPC issues.

Since I added additional CPU's on the CAS servers and even on mailbox servers, is it possible to configure MAPI/RPC operations to take advantage of the additional CPU's?

As a side note, we are 99% Outlook online mode vs cache mode since our desktops VDI images. 

Thanks

Ron

Hello,

I am looking to see who has gone over the default RCAMaxConcurrency value of 20. 

For a single user, I can use get-logonstatistics -identity "user" | fl applicationid  This script will return multiple occurrences of applicationid which assists in understanding what the single user is using in terms of RCA connections.  

How do I search all of the mailboxes and only output those users with applicationid occurrences greater than 20?

Once I identify the users over 20, I can add them to a new throttling policy.

Thanks

Ron

Hi, I try to connect from local PS in domain to Exchange server (i login as a domain admin)

$exch= New-PSSession -ComputerName Exch1 -credential Administrator@test.local

 Enter-PSSession $exch

Add-PSSnapin Microsoft.Exchange.Management.Powershell.E2010

RemoteExchange.ps1

try run simple cmdlets Get-ServerComponentState and got a error

Active Directory operation failed on . The supplied credential for 'Test\Administrator' is invalid.
    + CategoryInfo          : NotSpecified: (:) [], ADInvalidCredentialException
    + FullyQualifiedErrorId : [Server=Exch1,RequestId=6aa66c9b-077d-4496-ba26-a29414a03ffb,TimeStamp=24.04.2015 18:31:06] [FailureCategory 
   =Cmdlet-ADInvalidCredentialException] B91C65D4

Classic way -

$session=New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri http://YourMailServer/powershell -Credential (Get-Credential)

and Import-PSSession $session

all works properly.  Does it mean, that such "hard" connection as i tried  is unsupported?

Hi Guys,

When I try to add a new mail user in O365 Exchange, one strange error is thrown.

Are any guys  kind enough to help me ?

Here is the script and the error.

PS C:\Users\o365-user>             $cred = New-Object -TypeName System.Management.Automation.PSCredential -ArgumentList
'smokeazurebeta5@smokeazurebeta5.onmicrosoft.com', $(ConvertTo-SecureString -String '*******' -AsPlainText -Force)
PS C:\Users\o365-user>             $session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri 'https:
//ps.outlook.com/powershell/' -Credential $cred -Authentication Basic -AllowRedirection
WARNING: Your connection has been redirected to the following URI:"https://pod51053psh.outlook.com/powershell-liveid?PSVersion=4.0 "
PS C:\Users\o365-user>             Import-PSSession $session
WARNING: The names of some imported commands from the module 'tmp_zkc5sid4.gpq' include unapproved verbs that might
make them less discoverable. To find the commands with unapproved verbs, run the Import-Module command again with the
Verbose parameter. For a list of approved verbs, type Get-Verb.

ModuleType Version    Name                                ExportedCommands
---------- -------    ----                                ----------------
Script     1.0        tmp_zkc5sid4.gpq                    {Add-AvailabilityAddressSpace, Add-DistributionGroupMember...


PS C:\Users\o365-user>             $users=Get-MailUser
PS C:\Users\o365-user>             New-MailUser -Name 'test1_1@smokeazurebeta5.onmicrosoft.com' -DisplayName 'Test LIU'
-MicrosoftOnlineServicesID  'test1_1@smokeazurebeta5.onmicrosoft.com' -Password $(ConvertTo-SecureString -String '*****' -AsPlainText -Force)
Unknown Error while communicating with O365 BEC Web Service (Exception type"Microsoft.Exchange.Management.BecWebService.CouldNotCreateBecSyncServiceException", message="Microsoft.Exchange.Management.BecWebService.CouldNotCreateBecSyncServiceException: Couldn't create BEC Web Service:
The matching certificate for certificateSubject CN=ExoProvToO365.outlook.com, OU=Microsoft Corporation, O=Microsoft
Corporation, L=Redmond, S=WA, C=US couldn't be found.
Parameter name: certificateSubject ---> System.ArgumentException: The matching certificate for certificateSubject
CN=ExoProvToO365.outlook.com, OU=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=WA, C=US couldn't be
found.
Parameter name: certificateSubject
   at Microsoft.Exchange.Security.Cryptography.X509Certificates.TlsCertificateInfo.FindFirstCertWithSubjectDistinguishe
dName(String certificateSubject, Boolean checkForValid)
   at Microsoft.Exchange.Management.BecWebService.BecWebServiceHelper.CreateService(Uri url)
   --- End of inner exception stack trace ---
   at Microsoft.Exchange.Management.BecWebService.BecWebServiceHelper.InvokeWithRetry[TResponse](Action operation)
   at Microsoft.Exchange.Management.BecWebService.BecWebServiceHelper.GetUserByUpn(GetUserByUpnRequest request)
   at Microsoft.Exchange.ProvisioningAgent.BecWebServiceLiveIdManager.GetMemberType(SmtpAddress memberName)", inner
message "System.ArgumentException: The matching certificate for certificateSubject CN=ExoProvToO365.outlook.com,
OU=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=WA, C=US couldn't be found.
Parameter name: certificateSubject
   at Microsoft.Exchange.Security.Cryptography.X509Certificates.TlsCertificateInfo.FindFirstCertWithSubjectDistinguishe
dName(String certificateSubject, Boolean checkForValid)
   at Microsoft.Exchange.Management.BecWebService.BecWebServiceHelper.CreateService(Uri url)")+ CategoryInfo          : NotSpecified: (0:Int32) [New-MailUser], RecipientTaskException+ FullyQualifiedErrorId : [Server=SG2PR01MB0540,RequestId=d97a193e-91a7-4430-ac64-6b7003f5b9b0,TimeStamp=4/23/2015
    9:37:58 AM] [FailureCategory=Cmdlet-RecipientTaskException] 3F9FDA25,Microsoft.Exchange.Management.RecipientTasks
  .NewMailUser+ PSComputerName        : pod51053psh.outlook.com

PS C:\Users\o365-user>             New-ManagementRoleAssignment -Role 'ApplicationImpersonation' -User 'test1_1@smokeazu
rebeta5.onmicrosoft.com'
Couldn't find a user with the identity "test1_1@smokeazurebeta5.onmicrosoft.com".+ CategoryInfo          : NotSpecified: (:) [New-ManagementRoleAssignment], ManagementObjectNotFoundException+ FullyQualifiedErrorId : [Server=SG2PR01MB0540,RequestId=88777637-298d-4bb1-972f-b61161566a57,TimeStamp=4/23/2015
    9:37:59 AM] [FailureCategory=Cmdlet-ManagementObjectNotFoundException] 921A76AD,Microsoft.Exchange.Management.Rba
  cTasks.NewManagementRoleAssignment+ PSComputerName        : pod51053psh.outlook.com

PS C:\Users\o365-user>             New-ManagementRoleAssignment -Role 'Mailbox Search' -User 'test1_1@smokeazurebeta5.on
microsoft.com'
Couldn't find a user with the identity "test1_1@smokeazurebeta5.onmicrosoft.com".+ CategoryInfo          : NotSpecified: (:) [New-ManagementRoleAssignment], ManagementObjectNotFoundException+ FullyQualifiedErrorId : [Server=SG2PR01MB0540,RequestId=2b64d3a2-97da-4de5-be8c-00ad73452456,TimeStamp=4/23/2015
    9:38:00 AM] [FailureCategory=Cmdlet-ManagementObjectNotFoundException] 921A76AD,Microsoft.Exchange.Management.Rba
  cTasks.NewManagementRoleAssignment+ PSComputerName        : pod51053psh.outlook.com

PS C:\Users\o365-user>             Remove-PSSession $session
PS C:\Users\o365-user>

Thanks

Budlion LIU

Hi, 

I need to check the permission at mailbox folder levels (e.g inbox, sent items, custom created folders etc...) for all our mailboxes. How can I achieve same without running Get-FolderPermission for each folder of each mailbox?

Thanks.

Irfan Goolab SALES ENGINEER (Microsoft UC) MCP, MCSA, MCTS, MCITP, MCT

Hello.

I have a mailbox that is moved from exchange 2010 to Exchange 2013 using Cmdlet Move-mailbox. After moving the mailbox is not visible in the EMC in Exchange 2013. However, it appears using Get-Mailbox cmdlet.
Any ideas on why it does not appear in EMC?

Thanks.

Running Exchange 2013 CU7, we've got an issue with thousands (50000+) entries in hive:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ExchangeServer\v15\WorkerTaskFramework\IdStore\MonitorDefinition

FfoDeployment~DiscoveryErrorReportMonitor.1922092919~~~~
FfoDeployment~DiscoveryErrorReportMonitor.19470422~~~~
FfoDeployment~DiscoveryErrorReportMonitor.446630880~~~~
...infinite...

That causes ExchangeHM service delays and broke monitoring after two weeks.

Does anyone experience the same issue?

Any ideas what is "FFODeployment" and how to disable the monitor?

Monitor definition in Microsoft-Exchange-ActiveMonitoring/MonitorDefinition Eventlog has XML exception:

MCTS

Hello

I have few questions about how exchange server 2013 is managing mailbox quota messages/notyfications.

I am kind of used to users receiving emails every night saying that their mailbox is getting full. I have just realized that this is no longer the case. We had exchange 2013 for a while now, but with other projects going on there was not much time to have a look at this, till now.

I have users complaining that they are hitting their limits without any warning. I had a look and done few tests on a mailbox and nothing.

We are still on office 2007 with plans to upgrade later on to 2010.

I had a read and it it mentioned a lot about flags on mailboxes and that they are reponsible for managing and issuing warnings on quotas.

Is there an option i am missing or is it simply not possible for that kind of email behaviour to email users when they hit the Warning stage?

Thank you kindly all for your feedback.

Regards,
M

Hello,

We upgraded from Exhchange 2007 to Exchange 2013 SP1 with no issues.  We applied CU8 and noticed the health status for ActiveSyncCTPMonitor report unhealthy.  We followed the TechNet article "Troubleshooting ActiveSync Health Set" but when running Invoke-MonitoringProbe ActiveSync\ActiveSyncCTPProbe we receive the Warning "Index was out of range. Must be non-negative and less than the size of the collection."

ActiveSync is working as expected.  I've searched the web and seen others had this issue with CU7 with no resolve.  I did verify this worked prior to applying CU8. 

I really appreciate any help you can provide..

Thanks,

Steve