If you setup a meeting and configure the reminder to none, the recipient will get the meeting with the default configuration for the reminder (15 minutes). in Exchange 2013 

But if we will set it to 0 min or 5 min the recipient will get it same 0 min or 5 min. Please let me know why it is not working for none. Please let me know if there are any steps we can follow.

Can someone tell me the difference between a legacy mailbox and a user mailbox? I have come across the term legacydn but what is a legacy mailbox?

"The search you've attempted to run includes too many mailboxes" 

I have only 1400 mailboxes, running on 1 CAS and 1 Mailbox server, no DAG, on prem.

Throttling policy was default at 5000, and I tried creating a new policy with max limit of 10000, then assigned to my account and re-ran search.

I ran a search to look at all mailboxes, looking for one specific word, over a three day date range.

The discovery mailbox is only at 3GB capacity, and has 50Gb limit.

I get errors 10063 & 10064, but there is no description in event logs - see below.

I am thinking maybe corruption in db / re-indexing issue?  Or maybe need to apply latest CU ( I am currently running Exchange Server 2013 Cumulative Update 19 (CU19)           15.0.1365.1

In event logs on Mailbox server I get the following:

The description for Event ID 10063 from source Exchange Discovery Search cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.If the event originated on another computer, the display information had to be saved with the event.The following information was included with the event: preview4f388a26-d00d-47ff-97a0-78e22a53dcae0ba28d7c-6ff9-4ffb-98ff-f3689ac6a074 5951dd38-c89d-495a-8131-cbba91588881****MBServerName*****Microsoft.Exchange.InfoWorker.Common.MultiMailboxSearch.DiscoverySearchTimedOut: The preview search for query 50 on 5951dd38-c89d-495a-8131-cbba91588881 mailboxes in the database Invoice  kind:email AND (received>="2018-12-10 8:00:00 AM" AND received<="2018-12-12 8:00:59 AM") timed out.the message resource is present but the message is not found in the string/message table

I also get the following in Event log:

A discovery search task failed with error. Details:

OrganizationHint=&Exception=Microsoft.Exchange.EDiscovery.Export.ExportException%3A%20Export%20failed%20with%20error%20type%3A%20'FailedToSearchMailboxes'.%20Message%3A%20ErrorSearchTooManyMailboxes%20%3A%20EDiscoveryError%3AE010%3A%3AToo%20many%20mailboxes%20to%20search.%20Specified%2010002%20mailboxes%20exceeds%20the%20max%20allowed%20value%20of%2010000.%20Endpoint%3A%20https%3A%2F%2Fexch-mb1..%3A444%2Fews%2Fexchange.asmx%20HttpContext%3A%20%0D%0AX-AnchorMailbox%3A-Wearn%40.bc.ca%0D%0Aclient-request-id%3A4f388a26-d00d-47ff-97a0-78e22a53dcae%0D%0ATransfer-Encoding%3A%20chunked%0D%0Arequest-id%3A%20209996c1-c8e2-4798-b4ce-a1473a2e87bc%0D%0Aclient-request-id%3A%204f388a26-d00d-47ff-97a0-78e22a53dcae%0D%0AX-DiscoveryActiveFlight%3A%20SearchScale%0D%0APersistent-Auth%3A%20true%0D%0AX-DiagInfo%3A%20EXCH-MB1%0D%0AX-BEServer%3A%20EXCH-MB1%0D%0ACache-Control%3A%20private%0D%0AContent-Type%3A%20text%2Fxml%3B%20charset%3Dutf-8%0D%0ADate%3A%20Wed%2C%2012%20Dec%202018%2023%3A12%3A39%20GMT%0D%0ASet-Cookie%3A%20exchangecookie%3D2ad9f14e7d7d462e960fe9ba9a537e14%3B%20expires%3DThu%2C%2012-Dec-2019%2023%3A12%3A28%20GMT%3B%20path%3D%2F%3B%20HttpOnly%0D%0AServer%3A%20Microsoft-IIS%2F8.5%0D%0AWWW-Authenticate%3A%20Negotiate%20oRswGaADCgEAoxIEEAEAAACo%2BcGBvjDIzQAAAAA%3D%0D%0AX-AspNet-Version%3A%204.0.30319%0D%0AX-Powered-By%3A%20ASP.NET%0D%0A%0D%0A%20ScenarioData%3A%20Exchange%5C15.00.1365.000%5CEDiscovery%5CEWS%5CS%3DKS%26R%3D0%26BI%3D636802531485241204%26QL%3D103%26SID%3Dffdc5c8a-d6db-415f-b6bc-3661991482f6%26RT%3D636802531485241204%0D%0A%20%20%20at%20Microsoft.Exchange.EDiscovery.Export.EwsClient.%3CSearchMailboxesWithNewSchema%3Eb__10e(Exception%20exception)%0D%0A%20%20%20at%20Microsoft.Exchange.EDiscovery.Export.BaseServiceClient%602.InternalCallService%5BBaseResponseMessageType%5D(Func%601%20delegateServiceCall%2C%20Action%601%20responseProcessor%2C%20Func%602%20exceptionHandler%2C%20Func%601%20authorizationHandler%2C%20Action%601%20urlRedirectionHandler)%0D%0A%20%20%20at%20Microsoft.Exchange.EDiscovery.Export.EwsClient.CallEws(Func%601%20delegateEwsCall%2C%20Func%603%20responseMessageProcessor%2C%20Func%602%20exceptionHandler%2C%20ExchangeVersionType%20requestServerVersion%2C%20String%20mailboxEmailAddress)%0D%0A%20%20%20at%20Microsoft.Exchange.EDiscovery.Export.EwsClient.SearchMailboxesWithNewSchema(SearchMailboxesType%26%20searchMailboxesType%2C%20SearchMailboxesResponseMessageType%26%20responseType%2C%20ExtendedAttributeType%20unsearchableExtendedAttribute%2C%20String%20searchName%2C%20String%20mailboxEmailAddress)%0D%0A%20%20%20at%20Microsoft.Exchange.EDiscovery.Export.EwsClient.GetSearchResultEstimation(String%20mailboxEmailAddress%2C%20String%20query%2C%20String%20language%2C%20IEnumerable%601%20mailboxIds%2C%20Int32%26%20mailboxesSearchedCount%2C%20Boolean%20isUnsearchable%2C%20Int64%26%20itemCount%2C%20Int64%26%20totalSize%2C%20List%601%26%20failedMailboxes%2C%20Boolean%26%20newSchemaSearchSucceeded%2C%20String%20searchConfiguration)%0D%0A%20%20%20at%20Microsoft.Exchange.EDiscovery.MailboxSearch.MailboxSearchTask.GetSearchResultEstimation(String%20query%2C%20List%601%20mailboxIds%2C%20Int32%26%20mailboxesSearchedCount%2C%20Boolean%20isUnsearchable%2C%20Boolean%26%20newSchemaSearchSucceeded%2C%20Int64%26%20totalItemCount%2C%20Int64%26%20totalSize%2C%20List%601%26%20failedMailboxes)%0D%0A%20%20%20at%20Microsoft.Exchange.EDiscovery.MailboxSearch.MailboxSearchTask.%3C%3Ec__DisplayClass5.%3CStart%3Eb__2()

I also get the following error:

The description for Event ID 10064 from source Exchange Discovery Search cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.If the event originated on another computer, the display information had to be saved with the event.The following information was included with the event: 4f388a26-d00d-47ff-97a0-78e22a53dcae ded86b2e-97bb-4c81-8b9d-06b1078dfc7222the message resource is present but the message is not found in the string/message table

Hi,

I have installed Exchange server 2013, i have default domain as xxxx@xxxx.local. now i wanted to add external dns to exchange so that i can comunicate outside world. i have added xxx@xxx.com in accepted domain. so far all good but next step in email address policies i cannot add new email address format( + is not activating to add). i have gone through many articles but not found solution.

i have tried with logging in from different browers but no use. 

please help

thanks

harish 

Every time I am trying to move mailbox (Only one particular mailbox), I am getting below error.

I tried from EMC or EMS but result is same.

Error details:- Mapiexceptionnotenoughmemory :Unable to Synchronize manifest. (hr=0x8007000e, ec=1008)

Please let me know if there is any solution for this.

I know last option is to export and import.

Thanks,

Ashish

Hi all

One of our users is locked every ten minutes in AD.

According to AD logs there are attempts to login to exchange with the wrong password.

I checked the user's devices and the attempts was not from them.

How can I find from where attempts to connect? 

thanks

Rash

Hello

We are using Exchange Server 2013. With outlook anywhere functionality users are able to connect to outlook without VPN.

We want to disable this functionality. We want users to first connect to VPN and they only have access to outlook. Kindly suggest how we do this.

ThankYou

Hi,

I have configure the exchange server 2016, with IIS settings

a. Allow Basic Authentication

b. SSL Setting ignore with uncheck require SSL

WinRM Client Group Policy Change:

a. Allow Basic Authentication

b. Allow Unencrypted Traffic

c. Trusted Host *

Also enabled PSRemoting and remote configuration policy to "remotesigned"

But unable to connect to remote sever.

What's should be Exchange 2016 Power Shell IIS Setting and Group Policy Configuration for Remote Access ? 

Thanks in advance.

Vivek Chauhan

I have to get all appointments of organisation.

Currently, I have only option to loop over the selected items (user,room,equipment) through method FindAppointments.

Is there is any option to get all appointments without calling FindAppointments multiple times ?

Thanks in advance

Vivek Chauhan

Hi guys

Im in the process of trying to restore a user mailbox but im having some issues

ive restored the database from backup and created the recovery database, searching through the database i can see every mailbox except the one i need to restore.

The user in question had archiving enabled which was not disabled before the mailbox was deleted, so this account is still showing in the archive database, could this be the reason why i cant see the main mailbox in my recovery database?

if so how do i remove this mailbox if the main one is gone?

or is there another reason why the mailbox isnt showing up?

help!

Vicky Tofield

IT Technician

Sir Christopher Hatton Academy

Hi 

I'm trying to export a CSV to see all the email addresses and names plus their last active times.

I've tried:

Get-MailBox -ResultSize Unlimited | Get-MailboxStatistics |? {$_.Lastlogontime -lt (get-date).AddDays(-60)}  | Select-Object displayname -expandproperty emailaddresses| Where-Object {$_.smtpaddress -like "*domain.com*"}| Select-Object displayName,SmtpAddress | Export-csv C:\temp\test.csv -nti

and multiple others but can't seem to get it. Does anyone know some code for it?

Hi All

I have been experiencing Outlook client disconnect issues for about 6 months now since expanding my Exchange environment from a single node to 4 nodes in a DAG and CAS array (Kemp LB) over 2 sites and single namespace. Outlook clients are 2016. Everything is up-to-date with patches. There are about 200 mailboxes.

Clients are disconnecting from Exchange with a balloon warning in the system tray. It’s intermittent possibly happening to a user 2/3 times a day – or not at all. Reconnections take 5 seconds and then they are good again. It appears to only affect a single user at a time. Event log show event 25 (Cannot expand the folder. The set of folders cannot be opened. Network problems are preventing connection to Microsoft Exchange.) and 26 (Connection to Microsoft Exchange has been lost. Outlook will restore the connection when possible.)If I enable Outlook logging the dreaded Event Log ID 19 appears:

Rpc call (EcDoRpcExt) on transport (unknown) to server
Or
Rpc call (NspiDNToEPH) on transport (unknown) to server
Or
Rpc call (NspiUnbind)
Or
Rpc call (Unknown) on transport (unknown) to server
Followed by:
(https://domain.co.uk/mapi/nspi/?MailboxId=f52db801-3b4f-4fde-ac85-b254d7d4e3ac@domain.co.uk) failed with error code (80004005) after waiting (47) ms; eeInfo (none).
Or 
failed with error code (800704d3) after waiting (50515) ms; eeInfo (none).

My environment is server2012R2, Exchange 2013 CU21. 

Some troubleshooting I have performed:
1.When I click on the mapi nspi link in the event log and authenticate, the virtual director displays café: (exchange server fqdn) and mailbox (exchange server fqdn. If I check the “Café” exchange server event logs at the time the client gets the eventid 19, and drill down to Exchange-ActiveMonitoring-ProbeResult, here are some of the logs I see:

Probe result (Name=TopoDiscoveryFailedAllServersProbe/HQMAIL.atlgroup.co.uk)
Probe result (Name=DatabaseHealthDbCopySuspendedProbe/17G-DB2)
Probe result (Name=SearchCopyStatusHaImpactingProbe/17G-DB4)
Probe result (Name=MSExchangeInformationStoreCannotContactADProbe/HQMAIL.atlgroup.co.uk)
Probe result (Name=ServiceHealthMSExchangeReplCrashProbe/msexchangerepl)
Probe result (Name=ActiveQueueDrainFailureProbe)
Probe result (Name=DatabaseHealthDbCopyFailedAndSuspendedProbe/17G-DB2)
Probe result (Name=DatabaseHealthDbCopySuspendedProbe/17G-DB4)
Probe result (Name=ThrottlingServiceRunning/msexchangethrottling)
Probe result (Name=ClusterServiceCrashProbe/ClusSvc)
Probe result (Name=ScanningProcessRepeatedlyCrashingProbe/scanningprocess)

None of the events are in an error state

I have recorded this issue with a client connecting to the exchange cas and mailbox server on their local subnet – no vpn, firewall, wan etc. 

2.I have run get-healthreport and everything is healthy except a mailboxspace which is not an issue.
3.I have checked cert bindings for both default and backend sites in IIS and all looks good.
4.I have checked virtual directories including MAPI and all URLs and auth look good
5.I have seen a few posts on OutlookProvider (EXCH, EXPR). This is not set in my environment. Is this something worth looking at?
6.I also wondered if this could be an Exchange throttling issue – so I enabled logging - C:\Program Files\Microsoft\Exchange Server\V15\Logging\RPC Client Access log file doesn’t show any throttling issues. I also created a new throttling policy with -RCAMaxConcurrency 100.
7.There is a corresponding System Event 36887 - A fatal alert was received from the remote endpoint. The TLS protocol defined fatal alert code is 20.
8.I have ruled out a Load balancer issue by using a host file on the clients and connecting direct to CAS/Mailbox servers
9.Clients are RDS 2012R2 RDS session hosts

Not too sure what to do next

Hello,

We are thinking about applying 2 years retention policy to all folders for all users. I would like to estimate how much space we will retrieve after applying that kind of policy.

I know that after applying retention policy database will not shrink, but shortly after setting retention we will upgrade from Exchange 2010 to 2013. After moving mailboxes to new databases old databases could be deleted.

Do you know any Power Shell script which could help me with this?

Best regards,
Daniel

Hello!

I try use group managet service account for run IIS application that should run some scripts. This scripts try open powershell session to exchange server via New-PSSession. Kerberos authentication is OK, but i get error from RBAC:

(Process w3wp.exe, PID 11080) "RBAC authorization returns Access Denied for user DOMAIN\gMSA$ (SID=S-1-5-21-...-8416). Reason: User was not found on Domain Controller dc1.domain.local."

gMSA added to Organization Management and in Domain Admins, Local Admins on Exchange Servers.

Have someone any ideas?

Hi, 

I don't know where to landing my post, but I think Exchange 2016 will be almost same with Exchange 2013.

I have activated Exchange 2016 In-Place archive for some users until they complain me because archived folder in In-Place Archive can't be deleted though I have assign permission to full control, include delete but the folder still there. Is this delete prevention is Exchange feature by design or something else?

Appreciate for your help. Thanks

Here is 
some of the troubleshooting I have done without success:

1. Remove and create new virtual directories on chgcas01 and chgcas02 for ECP and OWA
Remove:
https://docs.microsoft.com/en-us/powershell/module/exchange/client-access-servers/remove-ecpvirtualdirectory?view=exchange-ps

Create New:
https://docs.microsoft.com/en-us/powershell/module/exchange/client-access-servers/new-ecpvirtualdirectory?view=exchange-ps

2. Check certificates in IIS bindings for default and backend:

https://support.microsoft.com/en-us/help/2971270/blank-page-after-login-exchange-eac-owa-ecp
everything lokks correct on our end and we still can't get mail to flow or log into ECP. Any help would be appreciated!

I am getting an error in application log:

An internal transport certificate will expire soon. Thumbprint:66A87AD742470CDC7953619CAA23A9AE2C3E492A, hours remaining: 2052

When these hours are divided by 24 to give days, I'm getting this error message 85 days before actual expiry.

This error comes definitely too early.

This is not acceptable because I and a customer are receiving this error several times per day via SCOM.

How can I reconfigure this so that this error is reported, say, 15 days before expiry and only once, not repeated every several hours?

TIA, Les

Hello

We have 3 CAS servers, 2 mbox in DAG and 1 mbox which work as spam-filter (no active users in bases on this server). All servers have CU21 installed.

On DAG servers mail.que db grows to 60GB per week.

Here is transport settings:

SafetyNetHoldTime
-----------------
2.00:00:00

ShadowMessageAutoDiscardInterval
--------------------------------
2.00:00:00

PipelineTracingEnabled                             : False

Here is send-received emails for the week: 

Date                              Sent         SentSizeMB            Recived      RecivedSizeMB    TotalPerDayInMB   TotalPerDayInGB
----                              ----         ----------            -------      -------------    ---------------   ---------------
10/19/2018 12:00...              12219               9036              46044              14206          23241.92               22.7
10/20/2018 12:00...                648                275              19867                499            773.89               0.76
10/21/2018 12:00...                595                148              19539                803            951.32               0.93
10/22/2018 12:00...              13754              10038              50059              16769          26806.78              26.18
10/23/2018 12:00...              14380              10830              49528              18139          28968.83              28.29
10/24/2018 12:00...              13795              11817              49949              17735          29551.58              28.86
10/25/2018 12:00...              13988              10308              47955              16151          26459.08              25.84

Total sended 51.22 GB
Total received   82.33 GB
Total send and received 133.55 GB

It looks like mail.que never delete emails which exceeded SafetyNetHoldTime limit. I've checked queue and there is no retryable user email. There is shadow queue which can grow up to 70, but then it drops to 0.

The only thing that confused me is that i have 1-4 mails in submission queue in retry status all the time. I've checked one of them:

FromAddress                     : inboundproxy@contoso.com
Status                          : Retry
Size                            : 3.088 KB (3,162 bytes)
MessageSourceName               : SMTP:Default MBOX2
SourceIP                        : 127.0.0.1
SCL                             : 0
DateReceived                    : 10/26/2018 7:54:23 AM
ExpirationTime                  : 10/28/2018 7:54:23 AM
LastError                       : [{LRT=};{LED=420 4.2.0 Recipient deferred because there is no Mdb};{FQDN=};{IP=}]
RetryCount                      : 0
Recipients                      : {HealthMailboxfb1c498ae43145a3b1a86c5fce4a8a53@mbox.ru;3;3;The mailbox recipient does not have a mailbox database;1;<No Home Database>;0}
ComponentLatency                :
MessageLatency                  : 00:29:34.7557615
DeferReason                     : Recipient does not have a mailbox database

But same messages exist on mbox, which is not part of DAG and mail.que  doesnt grow there so fast.

I cant manually recreate mail.que folder every week. Anyone had same problem? Please help.