Exchange server  2016 running windows server 2008 R2  Customer want to migrate exchange server 2013 with OS 2016 on Vmware esxi  without Downtime. please suggest how to achieve this.

Existing Exchange server  2013 running with OS 2008R2 DC and DR setup.

I was asked to create a new distribution group containing multiple internal addresses and one external address.
Messages sent to this group from internal users present no issues, however, if the owner of the external address emails the group she gets NDR reports. When I look at these NDRs it specifies an address that does not exist and is not part of the group.

On further investigation I found the contact I set up to enable me to add the external address has been assigned alias addresses using our domain name. The contacts primary email address usesfirstname.lastname@externaldomain.com while the alias addresses the system appears to have assigned usefirstname.lastname@internaldomain.com,firstnamelastname@internaldomain.comandfirstname.lastname@office365tenant.onmicrosoft.com

The NDRs are all reporting a permanent error for the first of these alias addresses.

Why have these been created, is it safe to remove them and how do I prevent this happening again in the future?

For information, all members of the group receive emails sent to the group, including the external member

Hi,

We use hybrid solution in the company. We use only ADC (ad connect, and HCW), we do not have ADFS or WAP.The last few days we have a problem with the mail flow , as follow:

CLOUD to/from CLOUD = OK (our slovakrail.sk domain)

CLOUD to EXT.DOMAIN = OK

CLOUD from EXT. DOMAIN = OK

CLOUD from ONPREM = FAIL – email address is no longer valid – NDR 550.5.1.10

ON PREM to/from ON PREM = OK

ON PREM to EXT.DOMAIN = OK

ON PREM from EXT.DOMAIN = FAIL – NDR 550.5.1.10

ON PREM to CLOUD = OK

I noticed that the certificate on the local servers expired(exchange delegation federation).I found thisinstructionshttps://robsteuer.wordpress.com/2017/02/22/renewing-the-exchange-federation-certificate/, but it is obviously a instrucions if the certificate has not yet expired. Is there any possibility to renew the certificate without having to disrupt the federation?
On local servers I see an expired certificate, but at the same time new certificates(on each server different number, I do not know why). But, F flag has only the expired certificate.Is it possible to change F flag to some other valid certificate, or whatis a process renew it. Ideal, without disrup federation.

Here its a state of local servers

Thanks!

Hi

What affect does changing MessageRateLimit for the Default Frontend (587) receive connector have on the server?

Cheers

Dear Experts,

We’re having some errors in Event viewer logs of our Exchange server. Please have a look into it advise us how we can solve it or what we have to do.

EventID - 3018 MSExchangeApplicationLogic

EventID - 3025 MSExchangeApplicationLogic

Vincent Sprague

Hello all,

we migrated our Exchange Environment from Exchange 2010 to 2013 (about 17.000 Mailboxes, 8 DAG Members)

Everything is working fine (Outlook, OWA, EWS, AS, Moverequests etc.)

Mailbox Export Requests are also running fine.

All Servers have the newest Exchange 2013 CU21.

Only one Role is not working: we can't import pst files.

We tried and tested the following

• Full Access for everyone for the import-share and the pst files (so this includes the exchange trusted subsystem)
• Different Import Tests: different pst files to different users (empty pst from outlook, the export from the same user, etc.)
• Restart of the Exchange Mailbox Replication Service
• The administrator has the Mailbox Import Export Role
• Import of a pst file from the server where the mailbox is located -> failed
• adsiedit und looking for orphaned exports/imports -> nothing
• PST Import on the old Exchange 2010 servers is working fine

But every PST Export on the new Exchange 2013 servers is always failing with the following error

Get-MailboxImport Request | Get-MailboxImport RequestStatistics | fl Statusdetail

Statusdetail: FailedMAPI

Get-MailboxImport Request | Get-MailboxImport RequestStatistics -IncludeReport

Message                                : Error: Cannot open mailbox /o=Companyservice/ou=Exchange Administrative Group (F
                                         YDIBOHF23SPDLT)/cn=Recipients/cn=2ddacf17a7de4a92a5367c6c7a0a6540-Userxxx,.
                                         --> MapiExceptionLogonFailed: Unable to open message store. (hr=0x80040111,
                                         ec=-2147221231)
                                         Diagnostic context:
                                             Lid: 55847   EMSMDBPOOL.EcPoolSessionDoRpc called [length=317]
                                             Lid: 43559   EMSMDBPOOL.EcPoolSessionDoRpc returned
                                         [ec=0x0][length=352][latency=31]
                                             Lid: 52176   ClientVersion: 15.0.1395.4
                                             Lid: 50032   ServerVersion: 15.0.1395.6004
                                             Lid: 23226   --- ROP Parse Start ---
                                             Lid: 27962   ROP: ropLogon [254]
                                             Lid: 17082   ROP Error: 0x80040111
                                             Lid: 26937  
                                             Lid: 21921   StoreEc: 0x80040111
                                             Lid: 27962   ROP: ropExtendedError [250]
                                             Lid: 1494    ---- Remote Context Beg ----
                                             Lid: 47536  
                                             Lid: 41232  
                                             Lid: 60208  
                                             Lid: 37136  
                                             Lid: 47920  
                                             Lid: 58951  
                                             Lid: 51472  
                                             Lid: 41232  
                                             Lid: 60208  
                                             Lid: 37136  
                                             Lid: 59184  
                                             Lid: 55056  
                                             Lid: 42768  
                                             Lid: 56319  
                                             Lid: 55336  
                                             Lid: 56296  
                                             Lid: 51944   StoreEc: 0x80040111
                                             Lid: 56872   dwParam: 0xFE
                                             Lid: 42712   StoreEc: 0x80040111
                                             Lid: 10786   dwParam: 0x0        Msg: 15.00.1395.000:e2k13srv002
                                             Lid: 1750    ---- Remote Context End ----
                                             Lid: 26849  
                                             Lid: 21817   ROP Failure: 0x80040111
                                             Lid: 26297  
                                             Lid: 16585   StoreEc: 0x80040111
                                             Lid: 32441  
                                             Lid: 1706    StoreEc: 0x80040111
                                             Lid: 24761  
                                             Lid: 20665   StoreEc: 0x80040111
                                             Lid: 25785  
                                             Lid: 29881   StoreEc: 0x80040111
Report                                 : 12/18/2018 2:25:26 PM [e2k13srv001]
                                         'Companyservice.loc/Benutzerkonten/AdminAccounts/Admin/fsadm' created request.
                                         12/18/2018 2:26:44 PM [e2k13srv002] The Microsoft Exchange Mailbox
                                         Replication service 'e2k13srv002.Companyservice.loc' (15.0.1395.0 caps:1FFF) is
                                         examining the request.
                                         12/18/2018 2:26:44 PM [e2k13srv002] Transient error
                                         ConnectionFailedTransientException has occurred. The system will retry (1/60).
                                         12/18/2018 2:27:19 PM [e2k13srv002] The Microsoft Exchange Mailbox
                                         Replication service 'e2k13srv002.Companyservice.loc' (15.0.1395.0 caps:1FFF) is
                                         examining the request.
                                         12/18/2018 2:27:19 PM [e2k13srv002] Transient error
                                         ConnectionFailedTransientException has occurred. The system will retry (2/60).
                                         12/18/2018 2:27:54 PM [e2k13srv002] The Microsoft Exchange Mailbox
                                         Replication service 'e2k13srv002.Companyservice.loc' (15.0.1395.0 caps:1FFF) is
                                         examining the request.
                                         12/18/2018 2:27:54 PM [e2k13srv002] Transient error
                                         ...
                                        
We have no more idea, what the problem is.

Thankyou in advance for help.

best regards Boris

regards Boris

Hi,

I have a question about uninstalling exchange after an hybrid migration.

I would to know (not able to find any documentation on that), if uninstalling exchange will remove mail attributes, and so loose all of the values of them on AD ?

Thanks at all for your help

Environment: Exchange 2013 hybrid to Exchange Online (5 server DAG including hybrid server). About 40% of our mailboxes are Online, the rest on premise (for now).

New question came to me regarding a shared mailbox. All users of the shared mailbox have been migrated to Online, shared mailbox has been migrated to Online and shared out (Full Access and Send As). Person that requested the new shared mailbox is asking to be able to manage the mailbox themselves, granting permissions and so forth. So, I may have just missed this somewhere, but, can one do that? I know Distribution Groups can be given owners that can manage the membership, but, this is the first time I've been asked about a shared mailbox.

Thanks in advance,

Steven

Dear Experts,

We’re having some errors in Event viewer logs of our Exchange server. Please have a look into it advise us how we can solve it or what we have to do. Will this effect any kind of server issues?

EventID - 1021 MSExchangeDiagnostics

An error occured in IIS log extension while processing an IIS log line: System.FormatException: Index (zero based) must be greater than or equal to zero and less than the size of the argument list.

   at System.Text.StringBuilder.AppendFormatHelper(IFormatProvider provider, String format, ParamsArray args)
   at System.String.FormatHelper(IFormatProvider provider, String format, ParamsArray args)
   at System.String.Format(String format, Object[] args)
   at Microsoft.Exchange.Diagnostics.Service.ExchangeJobs.EventLogger.InternalTrigger(String triggerName, Object[] args)
   at Microsoft.Exchange.LogAnalyzer.Analyzers.IisLog.IisHttpErrorCodeAnalyzerBase.OnHttpErrorResponse(OnEventSource source, OnEventArgs`1 args)
   at Microsoft.Exchange.LogAnalyzer.Extensions.IisLog.IisLogExecutionContext.ForEachIisLogAnalyzer(Action`1 action)
   at Microsoft.Exchange.LogAnalyzer.Extensions.IisLog.IisLogExecutionContext.DispatchEventsForIisLog(IisLogLine line)
   at Microsoft.Exchange.LogAnalyzer.Extensions.IisLog.IisLogExtension.ProcessLine(LogSourceLine line, List`1 logLinesProcessed).

EventID - 1107 MSExchangeDiagnostics

The number of requests for app pool Oab encountering HTTP status code 404 is 7, which exceeds configured acceptable value of 5. Current timestamp: 3/8/2020 8:27:00 AM, Number of errors every minute in the last hour are as follows: 4,2,1,0,0,.

Hi all,

I have a situation that I hope someone can help me with. The setup is with on-premise Exchange Server 2013. Most mailboxes have the archive option active and because of business needs most mailboxes have Litigation Hold active.

The standard archive retention tag is 90 days (moving messages from mailbox to archive). The litigation hold is much longer.

The problem I have is that many messages remain in the DiscoveryHolds folder of RecoverableItems in the main mailbox (not the archive). I assume this is because users are deleting messages of low interest as soon as they get them, without giving a chance to the archive retention tag/policy to move them to the archive. Since controlling this user behavior is impossible in this case, I started looking at options to move all current and future messages that are kept in DiscoveryHolds on the main mailbox, to the archive.

According to the definition of retention tags, you can set a tag on the RecoverableItems folder, for example with:

New-RetentionPolicyTag -Name <Name of RPT> -Type RecoverableItems -AgeLimitForRetention <Number of days> -RetentionAction MoveToArchive 

(source: https://docs.microsoft.com/en-us/microsoft-365/compliance/increase-the-recoverable-quota-for-mailboxes-on-hold?view=o365-worldwide)

I did create this tag and added it to the standard retention policy. I then started the MFA manually for few mailboxes, and also waited for more than a week. But the tag doesn't seem to be working because no messages are moved from the mailbox to the archive.

1. Have I misunderstood how the above tag works?

2. Is there a different way to achieve what we need using retention policies and tags?

Thanks in advance for any ideas/help.

Darko.

Exchange 2010 SP3

How could i create a Inplace archival only for Default Folders Inbox, Sent Items and Exclude Calendar, Inbox Subfolders 

Please advise

Hi,

We are monitoring security event logs on our Exchange 2013 server in terms of any suspicious events. For some time we see every day high load of events like below.

I checked all blocked accounts in AD domain which could cause it, but there isn't any (all users which left company were deleted, also there is no any disconnected mailboxes).

I also tried to corelate security event to IIS logs, and search there for account but I could not find matche.

If there is any way to check what/who is cause such events ?

An account failed to log on.

Subject:
    Security ID:        SYSTEM
    Account Name:        exchange-server$
    Account Domain:        farbic
    Logon ID:        0x3E7

Logon Type:            3

Account For Which Logon Failed:
    Security ID:        NULL SID
    Account Name:        
    Account Domain:        

Failure Information:
    Failure Reason:        Account currently disabled.
    Status:            0xC000006E
    Sub Status:        0xC0000072

Process Information:
    Caller Process ID:    0x1ddc
    Caller Process Name:    C:\Windows\System32\inetsrv\w3wp.exe

Network Information:
    Workstation Name:    exchange-server
    Source Network Address:    -
    Source Port:        -

Detailed Authentication Information:
    Logon Process:        Authz   
    Authentication Package:    Kerberos
    Transited Services:    -
    Package Name (NTLM only):    -
    Key Length:        0

Satish Chaturvedi Mob-9990806001

Hi

Step-by-step guide for migration Exchange Server 2010 to 2016.Please provide

Regards,

Satish

Satish Chaturvedi Mob-9990806001

Hi,

My client is running SBS 2011 (window server 2008 R2 with exchange 2010).

I just renew self-signed certificate using sbs console->fix my network->renew certificate.

The certificate is renew successfully.

Below is the screenshot from sbs console certificate property

below is the screenshot from exchange console when I click on exchange server (Microsoft Exchange On-Premises->server configuration)

II can see that the new certificate is active and assigned to IMAP, POP, IIS, SMTP, but my question is on the self signed column it say False, how do I change it to true?, since it causing problem with client validating the certificate and create SSL/TLS issue with outlook.

I appreciated if you could shed some light on how to fix this issue, previously I did the same thing if you see the certificate that just expire on 13/03/2020, the self signed column it say true, not sure why this time it say false.

NB: I could not find the category for exchange 2010 so I click on 2013

Thank you

Regards

- Haris -

Need help on - a powershell cmdlet that will list all mailboxes and specify the "Outlook Web App" policy for them.

Appreciate your time.

Hi there,

Exchange 2013 CU21 running on Win2012r2 std server, so far so good.

Recently observed that there are a lot of  event 12018 MSExchagneTransport as below screen dump 

After login to EAC also received similar alert as below screen dump 

I've done my research, it seems I just need to click the Renew button to fix it.  

However this is my production email server & I don't have any spare resources for testing, just wondering if such renew process will result in any email service temporary outage?  

Also for such process, typically how long to finish, within a few mins or need some 30 mins or so?

Should you need more info, I'm available to further discuss with you.

Thanks in advance for your help!

I've noticed that there are users in my organization who have permission on their permission "Full Mailbox Access " And some don't.

Is it required? Why are there user differences?