I'm running exchange 2013 and it seems to have problems with health mailboxes (monitoring mailboxes). I have 5 mailbox databases on this server, DB1, DB2, DB3, DB4 and DB5.

I know there are 2 health mailboxes per mailbox database.

The command `Get-Mailbox -monitoring | Get-MailBoxStatistics` shows that several of these have not been accessed since December, even though they are in mounted Databases and powershell shows they are healthy.

There is also 2 health mailboxes that are missing from the below output because I got warninings saying these mailboxes have not been logged into yet.

-----

[PS] C:\windows\system32> Get-Mailbox -monitoring | Get-MailBoxStatistics

DisplayName   : HealthMailbox98fb2dc7692341ad8a3325ea2b14bbcc
ItemCount     : 17426
LastLogonTime : 12/8/2012 3:28:04 PM
Database      :  DB1

DisplayName   : HealthMailboxe27d88df28ae4d53af620604a83aca4d
ItemCount     : 12386
LastLogonTime : 2/4/2013 3:29:46 PM
Database      : DB1

DisplayName   : HealthMailbox815f0ff077a342f7889a53ef38e40256
ItemCount     : 291
LastLogonTime : 12/8/2012 3:26:43 PM
Database      : DB3

DisplayName   : HealthMailboxbca2f3409f1d4ae99098f48b574fc36d
ItemCount     : 579
LastLogonTime : 12/8/2012 3:26:05 PM
Database      : DB2

DisplayName   : HealthMailbox2412e1a0e5d9415b8328f653b2e42efe
ItemCount     : 209
LastLogonTime : 2/3/2013 6:08:41 PM
Database      : DB3

DisplayName   : HealthMailbox594b739a129941e688eafee6bbdfece6
ItemCount     : 209
LastLogonTime : 2/3/2013 6:09:52 PM
Database      : DB2

DisplayName   : HealthMailboxc401cae2a70d4d659f5758908582406e
ItemCount     : 210
LastLogonTime : 2/4/2013 3:28:59 PM
Database      : DB4

DisplayName   : HealthMailbox4b81211d555c4accad1f61a98700382e
ItemCount     : 212
LastLogonTime : 2/3/2013 6:09:46 PM
Database      : DB5

Warning: The user hasn't logged onto mailbox `<AD Domain>/users/HealthMailbox2c62876ca1bb45849c0daf2ecee6d715`, so there is no data to return. After the user logs on, this warning will no longer appear.

Warning: The user hasn't logged onto mailbox `<AD Domain>/users/HealthMailbox4399c592609a464d95c993ecee46f671`, so there is no data to return. After the user logs on, this warning will no longer appear.

-----

I am also getting a lot of queued messages in the inboundproxy.com queue that have the subject line "Undelieverable: Inbound Proxy Probe". I dont know how to get these to stop. I just have to clean out the queue once a day to prevent it from getting to large.

The last thing I notice is that I get a lot of audit errors in the event log when the system is trying to login to these mailboxes. That might be what is causing the issue. Here is one of the messages:

-----

An account failed to log on.
Subject:
Security ID:SYSTEM
Account Name:<computer name here>$
Account Domain:<AD DOMAIN>
Logon ID:0x3E7

Logon Type:8
Account For Which Logon Failed:
Security ID:NULL SID
Account Name:HealthMailboxbca2f3409f1d4ae99098f48b574fc36d@<domain.tld>
Account Domain:

Failure Information:
Failure Reason:Unknown user name or bad password.
Status:0xC000006D
Sub Status:0xC0000064

Process Information:
Caller Process ID:0x1265c
Caller Process Name:C:\Windows\System32\inetsrv\w3wp.exe

Network Information:
Workstation Name:<computer name here>
Source Network Address:::1
Source Port:34602

Detailed Authentication Information:
Logon Process:Advapi  
Authentication Package:Negotiate
Transited Services:-
Package Name (NTLM only):-
Key Length:0

This event is generated when a logon request fails. It is generated on the computer where access was attempted.

The Subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.

The Logon Type field indicates the kind of logon that was requested. The most common types are 2 (interactive) and 3 (network).

The Process Information fields indicate which account and process on the system requested the logon.

The Network Information fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.

The authentication information fields provide detailed information about this specific logon request.
- Transited services indicate which intermediate services have participated in this logon request.
- Package name indicates which sub-protocol was used among the NTLM protocols.
- Key length indicates the length of the generated session key. This will be 0 if no session key was requested.

-----

As you can see, the system can not login to to this health mailbox account. The one in my example one of the mailboxes that has not been logged into since december.

Is there anywhere to troubleshoot these? or possibly rebuild them? The is a huge lack of documentation on these mailboxes from microsoft, I  can not find any commands to interact with these other then 'get-mailbox -monitoring'

When updating Exchange 2013 to CU11 got an error in the stage of 9[Mailbox:Transport Service] and completed with error.

After reboot found that ECP console and Exchange mgmt shell does not working properly , getting an error.

Can any 1 please help me out , Now how to resolve this issue and bring the server to normal?

In EV - Event ID 6 triggers .

Cmdlet failed. Cmdlet Install-BridgeheadRole, parameters -DomainController "" -LanguagePacksPath "F:\Exchange2013-x64-cu11\" -UpdatesDir $null.

I'm trying to figure out why the Details option is missing for admins in our Exchange 2013 deployment.  I see the button and the option works as expected, but I installed Exchange with this account so it may have some extra permissions.

I tried adding accounts to different groups based off this article: 

David Jenkins

Hey there,

there must be some tuning out there...

We have 2 Exchange Servers DAG with 20 Mailboxes. Holding 750+ Users.

Today the search indexer thought it would be nice to index all the mailboxes. One Noderunner.exe holds 20GB RAM and uses 40-60% (sometimes 100%) CPU.

Any possible solution how to solve this? If i stop the service and restart it - it will continue to crawl. 

Isn't there a switch like in Sharepoint to set the search to Reduced? Or if there are "bad" indexes to built them in the maintenance time in the evening?

Best regards

Stephan

Regards Stephan

OneDrive / Sharepoint Blog

I'd like to create an "All employees" dynamic distribution list based off of our "CompanyInitials-Users" OU, that excludes any subOUs it has, RecipientTypeDetails = usermailbox, and is stored in the "Dynamic" OU.

I've used this powershell code; it ends up including Room/Shared mailboxes, and also includes mailboxes OUTSIDE of the specified OU.

New-DynamicDistributionGroup -name "@CompName-All-Employees" -alias CompNameAllEmployees `
-recipientcontainer "CompName-Users" -organizationalunit "Dynamic" -includedrecipients mailboxusers

I've found a bunch of data that either explains how i can remove my auto mapping for one mailbox.

Add-MailboxPermission -Identity JeroenC -User 'Mark Steele' -AccessRight FullAccess -InheritanceType All -Automapping $false

or to do it for all users who have full access rights, for all mailboxes.

I don't want to do that, I just want to remove myself from all mailboxes in my Exchange organization.  So I guess I want to use something else in the "-identity" portion of that command?

Any help is greatly appreciated.

Hello!

I enabled audit to shared mailboxes, but Search-MailboxAuditLog is nothing

$a = Get-Mailbox -RecipientTypeDetails SharedMailbox

foreach ($b in $a)

{Search-MailboxAuditLog -Identity $b -LogonTypes Delegate,admin,owner  -ShowDetails}

... nothing ...

$a | select AuditEnabled, AuditAdmin, AuditDelegate, AuditOwner

AuditEnabled  : True
AuditAdmin    : {Update, Move, MoveToDeletedItems, SoftDelete, HardDelete, FolderBind, SendAs, SendOnBehalf, Create}
AuditDelegate : {Update, SoftDelete, HardDelete, SendAs, Create}
AuditOwner    : {Update, Move, MoveToDeletedItems, SoftDelete, HardDelete, Create}

AuditEnabled  : True
AuditAdmin    : {Update, Move, MoveToDeletedItems, SoftDelete, HardDelete, FolderBind, SendAs, SendOnBehalf, Create}
AuditDelegate : {Update, SoftDelete, HardDelete, SendAs, Create}
AuditOwner    : {Update, Move, MoveToDeletedItems, SoftDelete, HardDelete, Create}

...

Folder audit is nothing

foreach ($b in $a)

{get-mailboxfolderstatistics -identity $b | select name, folderpath}

Корневой уровень хранилища                                  /Корневой уровень хранилища
Conversation Action Settings                                /Conversation Action Settings
Working Set                                                 /Working Set
Входящие                                                    /Входящие
Журнал                                                      /Журнал
Задачи                                                      /Задачи
Заметки                                                     /Заметки
Исходящие                                                   /Исходящие
Календарь                                                   /Календарь
Контакты                                                    /Контакты
GAL Contacts                                                /Контакты/GAL Contacts
Recipient Cache                                             /Контакты/Recipient Cache
Нежелательная почта                                         /Нежелательная почта
Отправленные                                                /Отправленные
Удаленные                                                   /Удаленные
Черновики                                                   /Черновики
Recoverable Items                                           /Recoverable Items
Calendar Logging                                            /Calendar Logging
Deletions                                                   /Deletions
Purges                                                      /Purges
Versions                                                    /Versions

...

Why the audit does not work?

Exchange was CU11. I upgraded to CU12 andnothing has changed

Add:

For one folder i see folder audit

[PS] C:\>Get-MailboxFolderStatistics -Identity test | fl -Property * | more

Name                              : Audits
FolderPath                        : /Audits
FolderId                          : LgAAAAAtV0dG+SJMQKm9fgfPmcEhAQCyiEj1s57HSq+W+Pu+ws9PAAA6aPG9AAAB
FolderType                        : Audits
ItemsInFolder                     : 3
DeletedItemsInFolder              : 0
FolderSize                        : 8.519 KB (8,723 bytes)
ItemsInFolderAndSubfolders        : 3
DeletedItemsInFolderAndSubfolders : 0
FolderAndSubfolderSize            : 8.519 KB (8,723 bytes)

but

[PS] C:\>Search-MailboxAuditLog -Identity test -LogonTypes admin,delegate,owner -ShowDetails
[PS] C:\>

Hi a

As we know ,in OWA user can update their information by  Default Role Assignment Policy.

When i try to update ,there show error as follow:

we have trouble processing your request right now. please try again later

I have check the default role assignment policy, it seems good.

In owa some setting can be done such as  email signature..

how can i solve it ? many thanks!

Refer:

http://eightwone.com/2011/03/31/disabling-editing-account-information-in-owa/

As follow website :
http://www.experts-exchange.com/questions/28418203/Cannot-save-changes-to-OWA-settings-Sorry-We're-having-trouble-processing-your-request-at-the-moment.html

my IIS were used .NET2.0 at all. 

We are doing a cross forest migration from a windows 8 server running exchange 2010 to a windows 2012 server running exchange 2013.

When I attempt to add an Exchange Forest to the Exchange Management Console. I get the following error:

Initialization Failed

The following occurred while attempting to connect to the specified Exchange Server
Due to potential compatibility problems, can't connect to version 15.0.1156.8 server using version 14.3.294.0.

To resolve this issue, please remove this sub-node from the console tree and add it again specifying  a server with a matching version.

Click here to retry - generates the same error.

All I can find online is to install all the patches and updates which has been done on both source and target servers.

Any suggestions?

Hi guys.
Exchange 2013 and Sharepoint 2013.

Primary.domain.local

child.sub.domain.local

Primary domain and child domain are in seperated sites.

there's a site-to-site-vpn between this two AD sites.

Users in primary domain where exchange2013 and SharePoint2013 is standing have no difficulites to configure site mailboxes being showed in Outlook 2013 client.

We have problems with users in child domain unable to achieve that.

The error message that appears is:

Please help

bostjanc

Up until yesterday my emails server was working fine Exchange 2013.

I then stopped getting emails from any domain that is not accepted.

Now accepted domains means that the email must be addressed to an accepted domain, but I can only get mail from a accepted domain. Why?

I can send am email from outlook.com using an email address that belongs to an accepted domain, but I cant send one from outlook.com that does not have an address that is in the accepted domains.

I don't think I have changed anything so I am confused. thanks

Alan Mosley - ThatsIT Solutions

Ok Folks,

Originally I was getting access to the http://localhost/ecp page but now when I type this URL I get the OWA page and only after flushing the cache on the browser I can see the Exchange Admin login page. But then I try logging in and I get a Page Not Found error!!

Is there a way to reset the IIS ecp virtual directory or perhaps when I set the Application Pool items to ApllicationPoolIdentity which BPA was compalining about it broke then. To be honest I think it may also be a certificate problem, Im kinda grasping at straws here and need to know how to reinstall the ECP component??

Ill stop my rambling and let an expert hold my hand please!!

Jim

Jim

Our Exchange 2013 message logs do not include all the data. The only data that is in the logs are timestamp, message subject, totalbytes, messageID. All other data is blank. We have tried using the EAC Mail Flow delivery report but it errors out or states there is nothing to show. Using PowerShell we can get the above data but nothing else. We have stopped the message logging and restated using a different location to see if it will help. We don't see anywhere to select what data is recorded i n the log.

Any help or ideas would be appreciated.

Thanks

I am in the middle of migrating from Exchange 2010 to 2013. I created the requests via EAC. It seemed slow, so I poked around here and there and eventually figured out that there was an inordinate amount of TotalStalledDueToWriteCpu time. This, of course, turned out to be my own fault for allocating only a single process to the Exchange 2013 VM (when I had 32 cores available!).

I stopped (paused) the current batches, waited until they all came back with Suspended, the shut down both the Exchange 2010 & 2013 servers, increased cores, started up, waited until everything was fully loaded, and blithely went back to the EAC and clicked Resume on each batch.

Shortly, they call came back Completed with Errors → UserAlreadyBeingMigratedException.

That gave me a rather brief headache, since these batches had already been running for a couple of hours and all must be done by tonight (end of the weekend). However, I turned around and just did this in the EMS:

Get-MoveRequest -MoveStatus Suspended | Resume-MoveRequest

But this all begs the question of what is going on with the EAC. Running Get-MoveRequestStatistics with fl to capture the details reveals that these move requests are, indeed, progressing from the point at which they were suspended (i.e. ItemsTransferred& PercentComplete continue to grow). But the EAC stubbornly insists that they have failed due to the duplicate request--even after I close EAC and re-open.

At this point, it seems that I am on my way to success, but the EAC is doing nothing at the moment to inspire any confidence. Is there some way to force the EAC to refresh its view of the real world on the server? It seems it will be done soon, but perhaps an answer here will spare some other hapless jack-of-all-trades-master-of-none like me an alarming moment or two.

Hi,

I made a 2 way forest trust between 2 domains. when i try to create a linked mail box on exchange 2013 it returned this error message 

"

"

i tested the trust between two connection and it looks good. 

our exchange server version is 2013 CU10

i need for help to solve this problem

thanks

Sameh Ismail System Administrator

Hello,

Could anyone help with the question of whether the global address list view can be modfied for what end-users see in outlook?  I asked the question below to our IT service provider but what told it is all hard-coded and cannot be modified.  I am seeking validation or a second opinion as the "default view" is not so user-friendly.  Thank you very much.

Is it possible to modify the default view as to how all staff view the exchange server global address list when they interact with it in outlook?
If it is possible the desirable modifications would be:
a) Instead of list being sorted by 100% alphabetical can the list be sorted by "type" then by "alphabetical"? (i.e. users, global contacts, distribution groups, and then resources would group together and alphabetical within each group)
b) Remove from view unused Title, Location, Department, and Company field.
c) Add to view field "Mobile Phone" to the right of "Business Phone"

Hi all,

I have 2 Exchange 2013 CU7 servers : EX01 & EX02 in Database Availability Group : DAG01, 1 Mailbox Database : DB01 (about 600GB - mount active on EX01) and I get many problems with Add/Update Mailbox Database Copy.

First, I get error when trying to add a mailbox database passive copy of DB01 on EX02 :

The seeding operation failed. Error: An error occurred while performing the seed operation. Error: Failed to notify source server 'EX01.domain.com' about the local truncation point. Hresult: 0xc8000713. Error: Unable to find the file. [Database: DB01, Server: EX02.domain.com]

After searching I found many topic with solution like this :

1.Please dismount the active database first.

2.Please check the database is in the clean shutdown with the help of eseutil tool by using the parameter eseutil /mh "path of the database"

3.Then move all the log files to the separate location.

4.Then mount the database and it will create the fresh log files.

5.Then try to add the passive copy on anyone of your mailbox server in DAG

But I don't understand step 3, Are log files : E00000xxxx.log in Mailbox Database folder ? and move them to ?
How about other files and folder ? .chk , inspector , incseedInspect , IgnoredLogs , AC9xxxxxxx.2.Single

Secondly, my top priority is minimizing mail server downtime and I also attempt to split DB01 into 2 or 3 Databases in future to decrease mailbox databases size so I think "why don't I create 2 other mailbox database then move mailboxes from DB01 to 2 new ones ?"

After creating "DBTest" active mount on EX01 and add its passive copy in on EX02 :
Get-MailboxDatabaseCopyStatus
Name                 Status        CopyQueueLength      ReplayQueueLength     LastInspectedLogTime       ContentIndexState
DBTest/EX01      Mounted                0                                   0                                                                           Healthy
DBTest/EX02      Healthy                  0                                   0                       3/7/2016 9:21:15 PM                  Unknown

I tried to make "DBTest/EX02" ContentIndexState become Healthy but fail :

Update-MailboxDatabaseCopy -Identity "DBTest\EX02" -CatalogOnly
Confirm
Are you sure you want to perform this action?
Seeding database copy "DBTest\EX02".
[Y] Yes  [A] Yes to All  [N] No  [L] No to All  [?] Help (default is "Y"): Y

Confirm
The mailbox database copy 'DBTest\EX02' has failed to update from server . Do you want to clean up that update request now? Seeding cannot be requested for the same database copy until the failed request has been cleaned up by the server, which should automatically happen within 15 minutes.
[Y] Yes  [A] Yes to All  [N] No  [L] No to All  [?] Help (default is "Y"): Y
WARNING: Seeding of content index catalog for database 'DBTest' failed. Please verify that the Microsoft Search (Exchange) and the Host Controller service for Exchange services are running and try the operation again.
Error: There was no endpoint listening at
net.tcp://localhost:3863/Management/SeedingAgent-170C7D59-F509-4DA5-9488-10BF7D9DA77D12/Single that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more
details..

Then I dismount 'DBTest\EX01' and suspend 'DBTest\EX02' and scan them with eseutil.exe :
'DBTest\EX01' state : Clean Shutdown
'DBTest\EX02' state : Dirty Shutdown (Why ? It has just created :( )
I repaired 'DBTest\EX02' with eseutil ==> its state become "Clean Shutdown" ==> Resume 'DBTest\EX02' ==> I still cannot make "DBTest/EX02" ContentIndexState become Healthy ==> I suspend 'DBTest\EX02' again and check it with eseutil ==> Dirty Shutdown again

'DBTest\EX01' state is always Clean Shutdown how many times I dismount and check it with eseutil.

Summary :

1. I need exist DB01 is replicated between EX01 & EX02 but Add/Update Mailbox Database copy fail with error 0xc8000713 so I attempt to fix it and I need to know steps exactly.

2. Adding new mailbox database copy for testing doesn't work correctly since passive copy has ContentIndexState Unknown and .edb file state Dirty Shutdown.

Please give me some advice, thank you very much.

I have a mailbox that has the field "Last logged on by" with a different username than the real user. 

I have checked, that other user has no access rights to that mailbox, and never had. Also, i know he saw the content of this mailbox because he provided information that could only be containt from this mailbox. 

There are no sharing rights on the mailbox, a folder and / or the agenda. 

What would it take, or is needed, for him to gain access rights to this other mailbox anyway? e.g. certain groupmemberships or something else?

Help would be most appreciated since this is a violation against privacy, and thus a security threat to the integrety of the organisation.

Thanks!