Hi all,

After CU6 update, I've encountered following problem - two admin AD accounts  which were members of Organisational Management group are unable to get full access to ECP. 

After admin logs in to ECP, there are no access to certain functions, menu is incomplete and certain frames show "You don't have permissions to view this page." warnings.

I tried various troubleshooting methods, for example re-adding users to Organization Management group in AD, without any luck.

On top of that, EMC seems not able to recognise any of RoleGroupMember commands at all, all I get is following:

From what I think, there's some error with Organisation Management group - either permissions or something else (it doesn't show being memeber of anything , apart from Administrators group). Is there a way of reseting built-in roles or maybe there is another way of fixing this issue?

Thanks!

Hi All,

At the moment at random times my databases' are failing over to the other server. This appears to be at no specific time or moment and can happen to any database.

I have used the CollectOverMetrics script and cannot see any information and Event Viewer doesn't show much apart from it beginning to failover. No Reasoning as to what triggered it.

Is there any other methods people are aware of I could use to try and work this out?

Regards, Noval

in autodiscover xml file i found

<%@ServiceHost Service="Microsoft.Exchange.Autodiscover.WCF.LegacyAutodiscoverService" %>

i am trying to configure outlook anywhere...

Hi

We have three sites running EX2010 with MBX,Hub and CAS at all three. One site is internet facing via TMG2010.

We have now deployed EX2013 and all appears to be working OK, however we are receiving health report issues with the CAS at all three sites.

The FrontEndTransport reports as failed but I am unable to see why. We also get an error under the InvokeNowResult that implies that the OnPremisesInboundProxyMonitor could not be found.

Any help much appreciated!

DW

Event4 (ManagedAvailability)

HealthSet FrontendTransport
   Subject The client submission probe failed 3 times over 15 minutes.
    Message The client submission probe failed 3 times over 15 minutes. Probe Exception: '' Failure Context: '' Execution Context: '' Probe Result Name: '' Probe Result Type: '' Monitor Total Value: '0' Monitor Total Sample Count: '0' Monitor Total Failed Count: '0' Monitor Poisoned Count: '0' Monitor First Alert Observed Time: '15/04/2015 02:18:36' 
    Monitor OnPremisesSmtpClientSubmissionMonitor
 

Event 2006 (InvokeNowResult)

State None
Result Failed
ErrorMessage
Could not find assembly or object type associated with monitor identity 'FrontEndTransport\OnPremisesInboundProxyMonitor'. Please ensure that the given monitor identity exists on the server.

Hi

We have the following error on a 2013 CAS that I cant seem to find any details on (see below).

CAS is part of a migration from EX2010 and sits behind TMG2010. All systems are working, CAS is passing traffic through to 2010 CAS.

Any help much appreciated.

Dan

ActiveSync is failing on ClientAccess server SERVER1. Incident start time: 26/04/2015 20:01:27 Last failed result: Failing Component - Failure Reason - Exception: System.ArgumentOutOfRangeException: Index was out of range. Must be non-negative and less than the size of the collection. Parameter name: index at System.Collections.Generic.List`1.get_Item(Int32 index) at System.Linq.Enumerable.ElementAt[TSource](IEnumerable`1 source, Int32 index) at Microsoft.Exchange.Monitoring.ActiveMonitoring.ActiveSync.Probes.ActiveSyncCustomerTouchPointProbe.GetMonitoringAccount() at Microsoft.Exchange.Monitoring.ActiveMonitoring.ActiveSync.Probes.ActiveSyncCustomerTouchPointProbe.DoWork(CancellationToken cancellationToken) at Microsoft.Office.Datacenter.WorkerTaskFramework.WorkItem.Execute(CancellationToken joinedToken) at Microsoft.Office.Datacenter.WorkerTaskFramework.WorkItem.<>c__DisplayClass2.<StartExecuting>b__0() at System.Threading.Tasks.Task.Execute() Diagnostic command: Invoke-MonitoringProbe -Identity:"ActiveSync\ActiveSyncCTPProbe" -Server:SERVER1 | fl

Monitor ActiveSyncCTPMonitor/ActiveSync

Hi

i am trying to use the Get-DailyBackupAlerts.ps1to check the exchange database backup state every day by email 

and i am using this scripts its working fine but I have problem with sending email  

here below the Error

04/16/2015 09:46:53 Alert email will be sent
04/16/2015 09:46:53 Report summary: Alerts 23, OK 0
04/16/2015 09:46:53 Sending email report
04/16/2015 09:46:53 Cannot validate argument on parameter 'From'. The argument is null or empty. Supply an argument that is not null or empty and then try the command again.
04/16/2015 09:46:53 Finished.

my setting the in the file Settings.xml as below 

any one can help ?

Mahmoud

Neilesh

I have a small Exchange 2013 (SP1) site with just one CAS.

By accessing of the CAS, OWA runs properly for each user and also the options-page is well available – not so by accessing it as "admin" because of the "error 500". The same occurs by accessing ECP directly viahttps://cas/ecp: after passing of credentials the normal options-page occurs for each user – not so for the admin.

Hi, people.

If you can answer this question, thank you.

I found this error below in an environment that has 10 CAS and Mailbox 6:

*** The specified computer is not a Client Access server. ***

This error occurs only when you run a test command in CAS.

I made some research and only found some similar and others with the same error message and different cause.

Have you seen this error ever in any environment?

Have a nice day.

Reference: https://social.technet.microsoft.com/forums/exchange/en-US/b25b6f21-dd24-41d9-8de4-037be1daed3f/exchange-2013-cannot-login-using-imap

http://www.postseek.com/meta/270471fc9f1ef893e73f5cfa37ad7c9e

#Replicating the error:

[PS] C:\>Get-ExchangeServer brphexcas10 | select ServerRole,Edition,AdminDisplayVersion | FL


ServerRole          : ClientAccess
Edition             : Enterprise
AdminDisplayVersion : Version 15.0 (Build 1044.25)



[PS] C:\>Get-ClientAccessServer BRPHEXCAS10 | Test-ActiveSyncConnectivity -Verbose
VERBOSE: [20:35:41.845 GMT] Test-ActiveSyncConnectivity : Runspace context: Executing user: prod.domain.local/PoC
Embratel/Evandro Semedo, Executing user organization: , Current organization: , RBAC-enabled: Enabled.
VERBOSE: [20:35:41.876 GMT] Test-ActiveSyncConnectivity : Active Directory session settings for
'Test-ActiveSyncConnectivity' are: View Entire Forest: 'False', Default Scope: 'prod.domain.local', Configuration
Domain Controller: 'ad01.prod.domain.local', Preferred Global Catalog: 'ad01.prod.domain.local', Preferred Domain
Controllers: '{ ad01.prod.domain.local }'
VERBOSE: [20:35:41.907 GMT] Test-ActiveSyncConnectivity : Beginning processing Test-ActiveSyncConnectivity
VERBOSE: [20:35:41.907 GMT] Test-ActiveSyncConnectivity : Instantiating handler with index 0 for cmdlet extension agent
 "Admin Audit Log Agent".
VERBOSE: [20:35:41.923 GMT] Test-ActiveSyncConnectivity : Current ScopeSet is: { Recipient Read Scope: {{, }},
Recipient Write Scopes: {{, }}, Configuration Read Scope: {{, }}, Configuration Write Scope(s): {{, }, }, Exclusive
Recipient Scope(s): {}, Exclusive Configuration Scope(s): {} }
VERBOSE: [20:35:41.970 GMT] Test-ActiveSyncConnectivity : Admin Audit Log: Entered Handler:OnComplete.
The specified computer isn't a Client Access server.
    + CategoryInfo          : ObjectNotFound: (:) [Test-ActiveSyncConnectivity], LocalizedException
    + FullyQualifiedErrorId : [Server=BRPHEXMBX04,RequestId=c1eb0eee-eea2-43fa-9b3d-0d18a4315878,TimeStamp=4/27/2015 8
   :35:41 PM] [FailureCategory=Cmdlet-LocalizedException] A8F4DD52,Microsoft.Exchange.Monitoring.TestMobileSyncConnec
  tivity
    + PSComputerName        : brphexcas10.prod.domain.local

VERBOSE: [20:35:41.985 GMT] Test-ActiveSyncConnectivity : Ending processing Test-ActiveSyncConnectivity
[PS] C:\>

########################################################################################################################

[PS] C:\>Get-ClientAccessServer | Test-OutlookWebServices -Identity userco1201@testedomain.net -MailboxCredential (Get-Credential)

cmdlet Get-Credential at command pipeline position 1
Supply values for the following parameters:
Credential
Creating a new session for implicit remoting of "Get-ClientAccessServer" command...
The specified server, BRPHEXCAS01, isn't a Client Access server.
    + CategoryInfo          : InvalidArgument: (:) [Test-OutlookWebServices], TestWebServicesTaskException
    + FullyQualifiedErrorId : [Server=BRPHEXMBX02,RequestId=2ddead98-8959-4f6a-bf8e-810027ac4f65,TimeStamp=4/28/2015 1
   2:18:08 PM] [FailureCategory=Cmdlet-TestWebServicesTaskException] 90CBBD16,Microsoft.Exchange.Monitoring.TestOutlo
  okWebServicesTask
    + PSComputerName        : brphexcas10.prod.domain.local

The specified server, BRPHEXCAS04, isn't a Client Access server.
    + CategoryInfo          : InvalidArgument: (:) [Test-OutlookWebServices], TestWebServicesTaskException
    + FullyQualifiedErrorId : [Server=BRPHEXMBX02,RequestId=2ddead98-8959-4f6a-bf8e-810027ac4f65,TimeStamp=4/28/2015 1
   2:18:08 PM] [FailureCategory=Cmdlet-TestWebServicesTaskException] 90CBBD13,Microsoft.Exchange.Monitoring.TestOutlo
  okWebServicesTask
    + PSComputerName        : brphexcas10.prod.domain.local

The specified server, BRPHEXCAS02, isn't a Client Access server.
    + CategoryInfo          : InvalidArgument: (:) [Test-OutlookWebServices], TestWebServicesTaskException
    + FullyQualifiedErrorId : [Server=BRPHEXMBX02,RequestId=2ddead98-8959-4f6a-bf8e-810027ac4f65,TimeStamp=4/28/2015 1
   2:18:08 PM] [FailureCategory=Cmdlet-TestWebServicesTaskException] 90CBBD69,Microsoft.Exchange.Monitoring.TestOutlo
  okWebServicesTask
    + PSComputerName        : brphexcas10.prod.domain.local

The specified server, BRPHEXCAS03, isn't a Client Access server.
    + CategoryInfo          : InvalidArgument: (:) [Test-OutlookWebServices], TestWebServicesTaskException
    + FullyQualifiedErrorId : [Server=BRPHEXMBX02,RequestId=2ddead98-8959-4f6a-bf8e-810027ac4f65,TimeStamp=4/28/2015 1
   2:18:08 PM] [FailureCategory=Cmdlet-TestWebServicesTaskException] 90CBBD68,Microsoft.Exchange.Monitoring.TestOutlo
  okWebServicesTask
    + PSComputerName        : brphexcas10.prod.domain.local

The specified server, BRPHEXCAS07, isn't a Client Access server.
    + CategoryInfo          : InvalidArgument: (:) [Test-OutlookWebServices], TestWebServicesTaskException
    + FullyQualifiedErrorId : [Server=BRPHEXMBX02,RequestId=2ddead98-8959-4f6a-bf8e-810027ac4f65,TimeStamp=4/28/2015 1
   2:18:08 PM] [FailureCategory=Cmdlet-TestWebServicesTaskException] 90CBBD14,Microsoft.Exchange.Monitoring.TestOutlo
  okWebServicesTask
    + PSComputerName        : brphexcas10.prod.domain.local

The specified server, BRPHEXCAS05, isn't a Client Access server.
    + CategoryInfo          : InvalidArgument: (:) [Test-OutlookWebServices], TestWebServicesTaskException
    + FullyQualifiedErrorId : [Server=BRPHEXMBX02,RequestId=2ddead98-8959-4f6a-bf8e-810027ac4f65,TimeStamp=4/28/2015 1
   2:18:08 PM] [FailureCategory=Cmdlet-TestWebServicesTaskException] 90CBBD12,Microsoft.Exchange.Monitoring.TestOutlo
  okWebServicesTask
    + PSComputerName        : brphexcas10.prod.domain.local

The specified server, BRPHEXCAS06, isn't a Client Access server.
    + CategoryInfo          : InvalidArgument: (:) [Test-OutlookWebServices], TestWebServicesTaskException
    + FullyQualifiedErrorId : [Server=BRPHEXMBX02,RequestId=2ddead98-8959-4f6a-bf8e-810027ac4f65,TimeStamp=4/28/2015 1
   2:18:08 PM] [FailureCategory=Cmdlet-TestWebServicesTaskException] 90CBBD15,Microsoft.Exchange.Monitoring.TestOutlo
  okWebServicesTask
    + PSComputerName        : brphexcas10.prod.domain.local

The specified server, BRPHEXCAS08, isn't a Client Access server.
    + CategoryInfo          : InvalidArgument: (:) [Test-OutlookWebServices], TestWebServicesTaskException
    + FullyQualifiedErrorId : [Server=BRPHEXMBX02,RequestId=2ddead98-8959-4f6a-bf8e-810027ac4f65,TimeStamp=4/28/2015 1
   2:18:08 PM] [FailureCategory=Cmdlet-TestWebServicesTaskException] 90CBBD1F,Microsoft.Exchange.Monitoring.TestOutlo
  okWebServicesTask
    + PSComputerName        : brphexcas10.prod.domain.local

The specified server, BRPHEXCAS09, isn't a Client Access server.
    + CategoryInfo          : InvalidArgument: (:) [Test-OutlookWebServices], TestWebServicesTaskException
    + FullyQualifiedErrorId : [Server=BRPHEXMBX02,RequestId=2ddead98-8959-4f6a-bf8e-810027ac4f65,TimeStamp=4/28/2015 1
   2:18:08 PM] [FailureCategory=Cmdlet-TestWebServicesTaskException] 90CBBD1E,Microsoft.Exchange.Monitoring.TestOutlo
  okWebServicesTask
    + PSComputerName        : brphexcas10.prod.domain.local

The specified server, BRPHEXCAS10, isn't a Client Access server.
    + CategoryInfo          : InvalidArgument: (:) [Test-OutlookWebServices], TestWebServicesTaskException
    + FullyQualifiedErrorId : [Server=BRPHEXMBX02,RequestId=2ddead98-8959-4f6a-bf8e-810027ac4f65,TimeStamp=4/28/2015 1
   2:18:08 PM] [FailureCategory=Cmdlet-TestWebServicesTaskException] 359329F2,Microsoft.Exchange.Monitoring.TestOutlo
  okWebServicesTask
    + PSComputerName        : brphexcas10.prod.domain.local

Hi guys,

I have a user and she has multiple users mailboxes setup on her outlook but she does not want to see the users task and only have access to the mailbox and calendar is there any powershell command that I can use to setup these permissions ?

We have exchange 2010 with around 30 mailboxes, we have a requirement to download all the mailboxes to PST.

Is there any option pls.

Kris

Hey guys,

So this is my scenario,

We have a few clients running Exchange 2013 CU7, with these clients we have a global journaling rule configured. The problem is that this is capturing all the heath submission mails as well. Since the health submission mails are run every 5 mins there is a huge number of extra none relevant emails.

We have followed the following articles and created dynamic distribution lists:

https://support.microsoft.com/en-us/kb/2823959

http://www.expta.com/2012/12/exchange-2013-health-check-monitors-and.html

When we select the Distribution list with all our users in under the journal rule, Only the administrator's emails are journaled.

We have a lot of clients using exchange 2013 but not CU7 they don't seem to have this issue. So maybe the bug came back as I know this issues was in the RTM and CU1/2.

When using a static distribution list it does seem to work intermittently. But this is a problem if new users are added. In addition we have found we needed to restart the transport service when new users where added. 

Has anyone got any ideas on this? We are going to try CU8 and see if this has been fixed.

As always thanks for your help in advance :)

Hello,

Since upgrading from SP1 to CU7 I'm noticing periodic crashes when users send large files. This latest time, two 25 to 31 MB messages were sent within 10 minutes. The second 31 mb file caused the server to crash (or in microsofts words delay, in my book no mail flow equals crash.)

Each time I've seen 15004 events stating the following.

The resource pressure increased from Normal to Medium.

The following resources are under pressure:

Version buckets = 132 [Medium] [Normal=80 Medium=120 High=200]

The following components are disabled due to back pressure:

Inbound mail submission from the Internet

Mail submission from Pickup directory

Mail submission from Replay directory

Mail delivery to remote domains

Content aggregation

Mail resubmission from the Message Resubmission component.

Mail resubmission from the Shadow Redundancy Component

The following resources are in normal state:

Queue database and disk space ("C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\data\Queue\mail.que") = 32% [Normal] [Normal=95% Medium=97% High=99%]

Queue database logging disk space ("C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\data\Queue\") = 32% [Normal] [Normal=95% Medium=97% High=99%]

Private bytes = 4% [Normal] [Normal=71% Medium=73% High=75%]

Physical memory load = 82% [limit is 94% to start dehydrating messages.]

Submission Queue = 0 [Normal] [Normal=2000 Medium=4000 High=10000]

Temporary Storage disk space ("C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\data\Temp") = 32% [Normal] [Normal=95% Medium=97% High=99%]

We have had user's size limits set to 30MB. I've re-examined the size settings throughout exchange and made sure they match.

I've read in some places just to increase the threshold, but microsoft says to leave the defaults if you can and find the underlying issue. I've also read on another blog someone was able to fix similar issues by replacing the edgetransport.exe.config.

Here's the blog: https://social.technet.microsoft.com/Forums/en-US/c3d300c5-473f-4ab3-8df2-e85c0ea2ed99/backpressure-activated-after-exchange-cu5-installversion-buckets?forum=exchangesvrsecuremessaging

I'm rather skeptical of replacing the config file.... Anyone have experience changing the version bucket thresholds? 

Hello,

I have a single server environment with Exchange 2013 CU7. I've recently been experiencing both intermittent activesync issues and server crashes whenever receiving 24 MB files from external emailers. Originally, I posted a question here: https://social.technet.microsoft.com/Forums/office/en-US/2e8b2abe-411b-453e-b0f0-cf6b776fdd32/exchange-server-2013-cu7-back-pressure-version-buckets?forum=exchangesvradmin

concerning Back Pressure version buckets. I have since tried to disable shadow redundancy and am still having these issues. I have found some other issues that I think relate to the version buckets problem. I thought I'd start a new post in light of my discovery of these Health issues.

Some more digging to find out what monitors caused the alerts found the following:

OnPremissesInboundProxyMonitor

OnPremisesSmtpClientSubmissionMonitor

ActiveSyncCTPMonitor

ActiveSyncDeepTestMonitor.

Troubleshooting steps here recommend Recycling app pools, IIS and server power. https://technet.microsoft.com/en-us/library/ms.exch.scom.activesync(v=exchg.150).aspx#EXP

None of these has returned the sets to "Healthy."

Their last step is to contact Microsoft. My plan is to run updates this weekend and contact Microsoft to troubleshoot after as I'm sure this will be their first recommendation when I open the case.

I'm also going to install IIS debug diagnostic tool to see if I can get more information from crash dumps if they continue.

Anyone have any other recommendations?

Thanks.

Hello!

I try use group managet service account for run IIS application that should run some scripts. This scripts try open powershell session to exchange server via New-PSSession. Kerberos authentication is OK, but i get error from RBAC:

(Process w3wp.exe, PID 11080) "RBAC authorization returns Access Denied for user DOMAIN\gMSA$ (SID=S-1-5-21-...-8416). Reason: User was not found on Domain Controller dc1.domain.local."

gMSA added to Organization Management and in Domain Admins, Local Admins on Exchange Servers.

Have someone any ideas?

Hello I need some advice on what to do.

I have a two-member Exchange 2010 DAG.  One is an active server where everything is mounted.  The other is simply the passive server.  I will need to power down the passive server in a few days for some extended maintenance.  Roughly several hours.  I know for a fact (because I've been through this before) replication will be cut off during this time and as a result I cannot run a full Exchange backup to flush all the transactions logs and secondly, the copy queues will be very backed up.  Last time they were so backed up all efforts to reseed the passive copy of the mailbox databases failed.  In the end I think I had to delete and copy the active server's databases over.  That took a really really long time.

So to avoid all that headache what should I do for this upcoming maintenance to make life easier?  

- Is there a way I can literally STOP replication or even delete the passive copies of the mailbox databases just so I can run full backups and truncate transaction logs?  

- Otherwise, assuming I have backed up copy queues, should I simply try reseeding or resuming synchronization?  Or should I not even waste time and delete all the passive copies and their files and start fresh with NEW copies?

I'm setting up a new Exchange 2013 org.  Everything is pretty fresh, only a few mailboxes have been added for testing.

I've added this permission, to provide full access to all the mailboxes in the database:

Get-MailboxDatabase -identity “Mailbox Database” | Add-ADPermission -user netadmin -AccessRights GenericAll -ExtendedRights Receive-As, Send-As
.
I've verified the permission in ADSI Edit.

I have verified the permission in the recipient's mailbox delegation properties. 

However, while logged into OWA using the admin account, if I try to open another user's mailbox from OWA, I just get a sad face that says "Something went wrong :( " .

Any ideas? I've tried resetting the owa virtual directory...reset IIS, rebooted several times, no luck.

Thanks