Quantcast
Channel: Exchange Server 2013 - Setup, Deployment, Updates, and Migration forum
Viewing all 7129 articles
Browse latest View live

Moving Databases from one server to another

$
0
0

Hello,

Here's the set up:

2 Servers:  2008 R2 Sp1.    One active one passive. These are the servers that contain DB's that need to be moved

2 Servers:  2012 R2 Stnd    Want same set up one active one passive, These are the destination of DB's from above

All are part of same domain.

Are there any step by step guides out there for this?

Thanks for any and all information!



Setting up AnywhereAccess behind ARR IIS Server

$
0
0

I have an IIS ARR server which points back to my exchange server. OWA and ECP work perfectly fine.


I have set it up with the following guide:

http://blogs.technet.com/b/exchange/archive/2013/07/19/reverse-proxy-for-exchange-server-2013-using-iis-arr-part-1.aspx


The only thing that is not working is Outlook connectivity (both internally and externally).

I get the following error message on the MS connectivity test:

--------------

RPC Proxy can't be pinged.
     
Additional Details
An unexpected network-level exception was encountered. Exception details:
Message: The remote server returned an error: (401) Unauthorized.Type: Microsoft.Exchange.Tools.ExRca.Extensions.MapiTransportException

--------------

I tested the exchange server direct (i.e. without ARR) and it works as expected. I think it has something to do with the credentials not being passed between ARR and the exchange server because if I am on the local network, I can go straight to the exchange server / rpc (via https://servername/rpc) and it prompts for credentials once and gives me a blank page (expected) whereas if I go via ARR it prompts for credentials but doesn't accept them (just prompts again and again and again).

Anyone manage to fix this issue?

Thanks.

migrating users from LotusNotes to Exchange 2010 between 2 diff orgs

$
0
0

Exchange Server 2013 ECP Login

$
0
0

I am bit puzzled and frustrated with this issue I have in my lab.  I have exported my test mailboxes from my 2010 environment (other settings are minor and easily reproduced), and uninstalled 2010.  Next I went and installed 2013 RTM from TechNet.

The first time I installed 2013 the install was successful, but when the ECP came up it was just a empty browser window - it would never display.  So I thought, maybe there was something left over from the previous 2010 server.  I blew away the OS (was 2008 R2) and built a clean 2012 server.  Installed all the Exchange 2013 prerequisites, extended the Schema and installed 2013 using all the defaults in the wizard.

This time the the ECP login came up, but here is where it gets puzzling and frustrating.  I put my Admin credentials in (this account has all proper group membership that I'm aware of) and the screen goes blank for a second and then the OWA login is displayed.  The ECP never comes up again, just goes straight to the OWA login.  If I enter my credentials in the OWA login, the screen just flashes and the password field clears but doesn't login.

I have tried uninstalling and cleaning up AD and reinstalling, but the same thing keeps happening.  I can't help but think it has something to do with permissions, but I'm not sure what that would be.

Unable to access ECP/OWA

$
0
0

I installed Exchange 2013 on 2 brand new Server 2012 virtual machines, one with the mailbox role and another with the CAS roles. The installation completed without errors but I cannot log on to the ECP (or OWA for that matter). As I enter my user/pass, the password field goes blank and a number of event log entries are added (see below).

I'm using the default administrator account (also Enterprise Admin, Domain Admin and member of the Organization Management security groups). I mail-enabled the account with enable-mailuser + enable-mailbox. I can execute Exchange Powershell cmdlets when logged on with this account, so security looks good.

The problem is OWA/ECP which consistenly logs the following errors when I attempt to access the OWA:

[Ecp] An internal server error occurred. The unhandled exception was: System.Security.Cryptography.CryptographicException: Invalid provider type specified.

   at System.Security.Cryptography.Utils.CreateProvHandle(CspParameters parameters, Boolean randomKeyContainer)

   at System.Security.Cryptography.Utils.GetKeyPairHelper(CspAlgorithmType keyType, CspParameters parameters, Boolean randomKeyContainer, Int32 dwKeySize, SafeProvHandle& safeProvHandle, SafeKeyHandle& safeKeyHandle)

   at System.Security.Cryptography.RSACryptoServiceProvider.GetKeyPair()

   at System.Security.Cryptography.X509Certificates.X509Certificate2.get_PrivateKey()

   at Microsoft.Exchange.HttpProxy.FbaModule.ParseCadataCookies(HttpApplication httpApplication)

   at Microsoft.Exchange.HttpProxy.FbaModule.OnBeginRequestInternal(HttpApplication httpApplication)

   at Microsoft.Exchange.HttpProxy.ProxyModule.<>c__DisplayClassa.<OnBeginRequest>b__9()

   at Microsoft.Exchange.Common.IL.ILUtil.DoTryFilterCatch(TryDelegate tryDelegate, FilterDelegate filterDelegate, CatchDelegate catchDelegate)

---------------------------------------------------------------------

[Owa] An internal server error occurred. The unhandled exception was: System.Security.Cryptography.CryptographicException: Invalid provider type specified.

   at System.Security.Cryptography.Utils.CreateProvHandle(CspParameters parameters, Boolean randomKeyContainer)

   at System.Security.Cryptography.Utils.GetKeyPairHelper(CspAlgorithmType keyType, CspParameters parameters, Boolean randomKeyContainer, Int32 dwKeySize, SafeProvHandle& safeProvHandle, SafeKeyHandle& safeKeyHandle)

   at System.Security.Cryptography.RSACryptoServiceProvider.GetKeyPair()

   at System.Security.Cryptography.X509Certificates.X509Certificate2.get_PrivateKey()

   at Microsoft.Exchange.HttpProxy.FbaModule.ParseCadataCookies(HttpApplication httpApplication)

   at Microsoft.Exchange.HttpProxy.FbaModule.OnBeginRequestInternal(HttpApplication httpApplication)

   at Microsoft.Exchange.HttpProxy.ProxyModule.<>c__DisplayClassa.<OnBeginRequest>b__9()

   at Microsoft.Exchange.Common.IL.ILUtil.DoTryFilterCatch(TryDelegate tryDelegate, FilterDelegate filterDelegate, CatchDelegate catchDelegate)

---------------------------------------------------------------------------

Event code: 3005

Event message: An unhandled exception has occurred.

Event time: 28/11/2012 0:47:38

Event time (UTC): 27/11/2012 23:47:38

Event ID: 12c0aac14e0c45b093e860f6699b0d76

Event sequence: 4

Event occurrence: 3

Event detail code: 0

Application information:

    Application domain: /LM/W3SVC/1/ROOT/Rpc-2-129985330412727995

    Trust level: Full

    Application Virtual Path: /Rpc

    Application Path: C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\rpc\

    Machine name: <cleaned up>

Process information:

    Process ID: 4848

    Process name: w3wp.exe

    Account name: NT AUTHORITY\SYSTEM

Exception information:

    Exception type: HttpException

    Exception message: The client disconnected.

   at Microsoft.Exchange.HttpProxy.ProxyRequestHandler.EndProcessRequest(IAsyncResult result)

   at System.Web.HttpApplication.CallHandlerExecutionStep.OnAsyncHandlerCompletion(IAsyncResult ar)

Request information:

    Request URL: http://<cleaned up>/rpc/rpcproxy.dll?688b9c54-fc83-47a6-bf82-343799d288d5@falcora.net:6001

    Request path: /rpc/rpcproxy.dll

User host address: fe80::d58e:d780:34ed:af68C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\rpc\

    User: FALCORA\SM_29bd07d0480e4b41a

    Is authenticated: True

    Authentication Type: NTLM

    Thread account name: NT AUTHORITY\SYSTEM

Thread information:

    Thread ID: 18

    Thread account name: NT AUTHORITY\SYSTEM

    Is impersonating: False

    Stack trace:    at Microsoft.Exchange.HttpProxy.ProxyRequestHandler.EndProcessRequest(IAsyncResult result)

   at System.Web.HttpApplication.CallHandlerExecutionStep.OnAsyncHandlerCompletion(IAsyncResult ar)

 

I have spent hours wading through log files and posts, and cannot get my head around this one. 

Unable to access Exchange 2013 EAC/ECP webpage

$
0
0

Hi All,

Getting extremely frustrated now with a new Exchange 2013 installation on a Windows Server 2012 VM...

After having a lot of problems with the installation (didn't uninstall visual c++ which caused failure, then needed to delete the AD Microsoft Exchange System Objects group due to permission failures, etc) I've now got a fully installed Exchange server. Still, now I cannot figure out how to fix my next problem - Accessing the EAC/ECP.

I've searched every possible web guide/forum thread and the only one which is the same issue I'm having is this one: http://social.technet.microsoft.com/Forums/en-US/exchangesvradmin/thread/89c42771-78c9-4d94-88e5-557320eccc71 

Unfortunately, as you can see in that thread, it is still unresolved. 

Current Issue: trying to access https://localhost/ecp (or any other variation) returns a 404 Not Found.

The error page points the physical path to c:\inetpub\wwwroot\ecp however that folder does not exist. I have tried manually changing the IIS site (Exchange Back End) to point its physical path to C:\Program Files\Microsoft\Exchange Server\V15\ClientAccess\ecp which seems to be valid, however it doesn't work...

Not sure what else to do... HELP!

Oli

Step 10 of 14 Mailbox Role Error

$
0
0

I keep getting the following error:

Error:
The following error was generated when "$error.Clear();
          if (!$RoleIsDatacenter)
          {
            $arbUsers = @(get-user -Filter {lastname -eq "MSExchApproval 1f05a927-3be2-4fb9-aa03-b59fe3b56f4c"} -IgnoreDefaultScope -ResultSize 1);
            if ($arbUsers.Length -ne 0)
            {
              $mbxname = $arbUsers[0].name;
              $mbxs = @( get-mailbox -arbitration -Filter {name -eq $mbxname} -IgnoreDefaultScope -resultSize 1 );
              if ( $mbxs.length -eq 0)
              {
                $dbs = @(get-MailboxDatabase -Server:$RoleFqdnOrName -DomainController $RoleDomainController);
                if ($dbs.Length -ne 0)
                {
                  enable-mailbox -Arbitration -identity $arbUsers[0] -database $dbs[0].Identity;
                }
              }
            }
          }" was run: "Active Directory operation failed on servername.domain.com. This error is not retriable. Additional information: An attempt was made to modify an object to include an attribute that is not legal for its class.
Active directory response: 0000207D: UpdErr: DSID-03151222, problem 6002 (OBJ_CLASS_VIOLATION), data -1814126740".

When I go into ADSI Edit:

Configuration > CN Services > Microsoft Exchange > OrganizationName >  Administrative Groups > Exchange Administrative Groups > Databases

I have 3 Mailbox Databases listed. Should I delete 1 or all of them?

Exchange 2010 CAS proxy to Exchange 2013 CAS: Use the following link to open this mailbox with the best performance:

$
0
0

Hello,

I've installed Exchange 2013 into Exchange 2010 infrastructure
[ single Exchange 2010 server; single AD site; AD = 2003 ],
and moved one mailbox [ Test user ] to Exchange 2013.

When I login internally through 2013 OWA to access mailboxes on 2010, then proxy works fine.
When I login internally through 2010 OWA to access mailboxes on 2013, then a message appears:
    Use the following link to open this mailbox with the best performance: with link to 2013 OWA...

What is wrong ?
I've checked and changed settings by:
Get-OwaVirtualDirectory, Set-OwaVirtualDirectory

[PS] C:\work>Get-OwaVirtualDirectory -Identity 'ex10\owa (Default Web Site)' | fl server,name, *auth*,*redir*,*url*

Server                        : EX10
Name                          : owa (Default Web Site)
ClientAuthCleanupLevel        : High
InternalAuthenticationMethods : {Basic, Fba, Ntlm, WindowsIntegrated}
BasicAuthentication           : True
WindowsAuthentication         : True
DigestAuthentication          : False
FormsAuthentication           : True
LiveIdAuthentication          : False
AdfsAuthentication            : False
OAuthAuthentication           : False
ExternalAuthenticationMethods : {Fba}
RedirectToOptimalOWAServer    : True
LegacyRedirectType            : Silent
Url                           : {}
SetPhotoURL                   :
Exchange2003Url               :
FailbackUrl                   :
InternalUrl                   : https://ex10.contoso.com/owa
ExternalUrl                   : https://ex10.contoso.com/owa

[PS] C:\work>Get-OwaVirtualDirectory -Identity 'ex13\owa (Default Web Site)' | fl server,name, *auth*,*redir*,*url*

Server                        : EX13
Name                          : owa (Default Web Site)
ClientAuthCleanupLevel        : High
InternalAuthenticationMethods : {Basic, Ntlm, WindowsIntegrated}
BasicAuthentication           : True
WindowsAuthentication         : True
DigestAuthentication          : False
FormsAuthentication           : False
LiveIdAuthentication          : False
AdfsAuthentication            : False
OAuthAuthentication           : False
ExternalAuthenticationMethods : {Fba}
RedirectToOptimalOWAServer    : True
LegacyRedirectType            : Silent
Url                           : {}
SetPhotoURL                   :
Exchange2003Url               :
FailbackUrl                   :
InternalUrl                   : https://ex13.contoso.com/owa
ExternalUrl                   :


best regards Janusz Such


Migrate Exchange 2013 organization into current exchange 2010 sp3 hybrid environment

$
0
0

We are an organization running a hybrid environment exchange 2010 sp3 RU5 with an Office 365 tenancy

We acquired a company running exchange 2013.  Our usual process is to setup visibility both ways and do cross org mailbox moves into our hybrid environment and move their accounts to the cloud from there.  

When I run the new-moverequest from the ex 2010 CAS server to pull the mailbox from ex2013 into our org I get this error:


The remote server doesn't support client 'CAS server FQDN' version (14.3.178.0 caps:05FEFF). Missing functionali

ty: 'TenantHint'.

    + CategoryInfo          : NotSpecified: (0:Int32) [New-MoveRequest], RemotePermanentException

    + FullyQualifiedErrorId : 7D20C51B,Microsoft.Exchange.Management.RecipientTasks.NewMoveRequest

Can you not pull a mailbox from 2013 back into 2010?

Mailbox cross forest request is not finalizing older mailboxes correctly

$
0
0

Hi all,

I am in the testing stages of a cross-forest mail migration (2008 SP2 forest with exchange 2010 SP3 to 2012R2 with 2013 Sp1)

The account is prepared with the Prepare-MoveRequest.ps1, mailbox is moved (either with new-moverequest or new-migrationbatch OR from the ECP portal) user account moves without issue, no failed items. user is prompted to restart outlook, the expectation is that when the user re-opens outlook it should be pointing to their new moved mailbox. for older mailboxes this does not work. I have to go in and manually create a new profile and search for their account.

Now the interesting part. I create a new user in the new forest, user our create user script (from the mailbox forest it finds the user, creates the local user then adds mailbox and links to the user account in the new forest) once this is done,  I can wait for replication then prepare the new forest account to migration (mail enable and run Prepare-Moverquest) once I move the mailbox and reclogged in, the mailbox was pointing properly to the new exchange environment!

Any thoughts on why any older (longer then a couple days) would fail out?

any thoughts or suggestions would be appreciated!

No Access to modern Public Folders (Exchange 2013) from Windows XP

$
0
0

Hi there,

i tried a lot and did a lot of research so i just want to share that information. When you try to open the Public Folders from XP Client you receive:

Windows 7 works fine.

The Mailbox it self works fine, Outlook 2007 or 2010 (patched) makes no difference, Autodisdover works fine.

Regkey for XP is allready set:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"lmcompatibilitylevel"=dword:00000003

Auth is set to NTLM.

We found this:

  1. Critical: 12/4 Outlook (all version) on Windows XP cannot access Exchange 2013 CU3 modern Public Folders, when their mailbox is on 2013 CU3 server
    • Only critical if you have Windows XP clients, which many organizations still do
    • Workaround: Have users use OWA or W7+ workstation

http://blog.jasonsherry.net/2013/11/25/exchange-2010-sp3-ru3-2013-cu3-released/

-> We have a Support-Case running and ill update you.

CU7 and Public Folders broken again for Windows XP users?

$
0
0
Went from SP1 -> CU7 and now XP users are getting the same error they had with CU3. Anyone else having the issue?

namespace migration concerns

$
0
0

I am about to migrate a Windows Server 2003r2 Active Directory that has an Exchange 2003 server. This domain started as an NT4 domain and has been upgraded to its current level and is working well.

I plan to migrate to Server 2012R2 and Exchange 2013.

The domain is relatively small. I can migrate (I think, with an intermediary ‘08R2 server), or I can start a fresh ‘12R2 Forest/Domain and fresh Exchange.

I would prefer to migrate, but I am worried about namespace issues.

Current namespace is      internaldomain.loc    and machines are  servername.internaldomain.loc   .

NetBIOS domain name is        internaldomain    

Users are identified as   internaldomain\username   or    internaldomain.loc\username

The Active Directory DNS server is set with forwards to our ISPs DNS servers.

We have real world      externaldomain.com   MX record forwarded through our firewall to port 25 on our Exchange server.

Is it still a supported practice in Server 2012R2 to keep internal DNS  internaldomain.loc    and the external reference  externaldomain.com    ?

One of my SSL SAN certificate vendors mentioned something about  .loc   and   .local   suffixes being disallowed on new certificates. We do not use any web interfaces to Exchange internally, and if we did for any reason, I do not mind the warning message about the certificate not being trusted (internally).

All our internal access to the Exchange server 2013 will be from Outlook 2010 or Outlook 2013.

I think all the external services such as Active Sync, Outlook Anywhere, or Outlook Web Access, or the AutoDiscover service can be referenced to the  externaldomain.com     name and internally to the Exchange Server’s external facing interface just like I do in Windows Server 2008R2 and Exchange 2010, but I am not completely sure.

I have done a certain amount of research and think I can just migrate with my current namespace, but I would like to make sure I don’t create issues.

Can I migrate with my current namespace?

I think this is straightforward, but I would like some expert opinions and advice please.

I will post this in the Windows Server and Exchange server forums.

Thank you.

Exchange 2010 Rollup 2 SP3 update cannot find installation package exchangeserver.msi file on SBS 2011... NEED HELP!!!

$
0
0

Hello,

I am running a windows SBS 2011 standard system and there was currently an update for Exchange 2010 Rollup 2 Service Pack 3 and it keeps failing.  It says that it cannot find the installation package (exchangeserver.msi) and it is looking for it in E:\Software\Exchange2010-SP3-x64\ folder but there never was this folder.  There is only an Exchange2010-SP3-x64.exe file.

The only exchangeserver.msi file that I find on the server any where is in C:\ProgramFiles\Windows Small Business Server\Bin\CMPNENTS\EXCHANGE14_SP1 but it won't accept it (says not authorized for this update or something alike).

Please help.  It is currently causing issues with email.  Some of the features are not working because it says exchange is currently under maintenance.

Any suggestions would be greatly appreciated.  Thank you.

The Microsoft Exchange Migration Workflow service terminated unexpectedly.

$
0
0

Hi Guys,

I got this error message keeps popping up in the event viewer like every minute.. i have no clue what is this error message is for. can anyone give me some idea or point me to the right direction

Exchange 2013 running 2 node DAG. the error message is found on the passive node.

"The Microsoft Exchange Migration Workflow service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 5000 milliseconds: Restart the service."

Thanks


Security Update for exchange server 2013SP1 KB3011140 Stops all services and failes to install

$
0
0

Hi All,

Over the past 2 days this update has tried to run on the server in the evening but ends up failing. When it fails it is causing all of our exchange services to stop working and when we try to check e-mails the following day we find out the e-mail service has been offline since the update.

Is there anything specific we need to do before running this update?

Cheers,

Exchange 2013 Outlook Anywhere connection issues when using F5 VIP

$
0
0

Hello, 

We are in the process of deploying Exchange 2013 into our Exchange 2010 Org.  We are using an F5 to load balance all services. We are doing some initial testing and have not cut over autodiscover or other URLs yet to 2013.  We are using host files on the local testing machines to point the URLs to 2013.    OWA, Activesync, ecp work with no issue through the F5 VIP.   However, we are having issues with Outlook.  If our host file entries point to a single server, Outlook functions normally.  If the host file entries point to the F5 VIP, it keeps prompting for creds and will never connect.

Just wondering if anybody has run into this or has any guidance as far as OA and F5 deployment.

Thanks


Exchange 2013 Update from SP1 to CU5 failed

$
0
0

Hello, guys!

I need your help. I've just tried to make an update my Exchange Server with CU5 and get an error:

"$error.Clear(); 
          Uninstall-CrimsonManifest -DefinitionXml "bin\ActiveMonitoringEvents.man";

          Install-CrimsonManifest `
            -DefinitionXml "bin\ActiveMonitoringEvents.man" `
            -MessageDll "bin\ActiveMonitoringEventMsg.dll" `
            -ProviderName "Microsoft-Exchange-ActiveMonitoring"
        "The following error occurred: "System.InvalidOperationException:Failed to perform event manifest action (manifest = C:\Program Files\Microsoft\Exchange Server\V15\bin\ActiveMonitoringEvents.man, event = install-manifest,exitcode   = 5, errors = The publishers and channels are installed successfully. However, we can't enable one or more publishers and channels. Access is denied.
)
   in Microsoft.Exchange.Configuration.Tasks.Task.WriteError(Exception exception, ErrorCategory category, Object target, Boolean reThrow, String helpUrl)
   in Microsoft.Exchange.Configuration.Tasks.Task.WriteError(Exception exception, ErrorCategory category, Object target)
   in Microsoft.Exchange.Management.SystemConfigurationTasks.InstallCrimsonManifest.InternalProcessRecord()
   in Microsoft.Exchange.Configuration.Tasks.Task.<ProcessRecord>b__b()
   in Microsoft.Exchange.Configuration.Tasks.Task.InvokeRetryableFunc(String funcName, Action func, Boolean terminatePipelineIfFailed)".

Help me, please!!!

What should i do to resolve this problem???




Coexistence Exchange 2010 and Exchange 2013

$
0
0

Hi all, I have an Exchange 2010 With These características

AD Site A
---------
2 DAG Servers for mailboxes
2 Servers Client Access and Hub Transport in Microsoft NLB
2 Domain Controllers Windows Server 2008 R2

I want to upgrade to Exchange 2013 but in another Site, Site B. When the migration is complete, the mail system will only be in Site B.

The connection Between Site A and Site B is a reliable connection.


-----------------

My my question is how to make the coexistence between the two systems, while all mailboxes are migrated.

1. where users who are still in Exchange 2010 connect? How to configure redirection
2. Mail flow as configured between Exchange 2010 and Exchange 2013 servers?

There are some guides the detail of how to do the coexistence?



regards


Microsoft Certified IT Professional Server Administrator

Migrating Exchange 2007 to Exchange 2013

$
0
0
Hello I have an Exchange 2007 server (CAS (HUB (MBX) on Windows 2008 with this infrastructure:

Site A
--------
- Exchange Server 2007
- Email Users

Site B
--------
- Exchange Server 2013 Backend and Frontend

Other Sites
-------------
- Email Users

Users now have access to sitema current email (Exchange 2007) by mail.contoso.com.

My idea is to add a name to the certificate and more users access the system will migrate Exchange 2013 email online (OWA, Outlook Anywhere, AS ...) by mail2.contoso.com.


Does this method is correct? something that has to be considered?

regards

Microsoft Certified IT Professional Server Administrator

Viewing all 7129 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>