[Exchange] RE: Moving the file share witness

[Miller Bonnie L.]

Looks like it worked correctly, thanks!  It didn't stamp the DAG computer 
account at the highest level of the NTFS permissions (it was on the created 
subfolder), and I'm not sure if it was needed so I put it on manually just from 
comparing to what is on the old server.

The only other annoyance is that it also didn't rename the cluster core 
resources in failover cluster manager, but I could see it is pointing to the 
new server in the quorum configuration, so I updated that name field manually 
under the properties.  I really only even go in there when I'm checking to see 
if a server is back up (cluster health) after restarting for any reason.

-Bonnie

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Miller Bonnie L.
Sent: Friday, July 21, 2017 4:53 AM
To: exchange@lists.myitforum.com
Subject: [Exchange] RE: Moving the file share witness

Thanks Michael-our network admin just verified the network rules are in place, 
so I'm going to give it a go.

-Bonnie

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Michael B. Smith
Sent: Thursday, July 20, 2017 3:06 PM
To: exchange@lists.myitforum.com<mailto:exchange@lists.myitforum.com>
Subject: [Exchange] RE: Moving the file share witness

It really is that simple.

Permissions can sometimes be a weird thing. I've had to fix those manually from 
time-to-time, but it really isn't a big deal.

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Miller Bonnie L.
Sent: Thursday, July 20, 2017 4:12 PM
To: exchange@lists.myitforum.com<mailto:exchange@lists.myitforum.com>
Subject: [Exchange] Moving the file share witness

Exchange 2013 DAG, we are migrating the file server that currently acts as the 
file share witness.  Is moving it really as simple as it seems?  Here is what I 
have pieced together:


1)  Add the "Exchange Trusted Subsystem" group to the local admins group of 
the new domain member file server and restart.

2)  Open needed ports between the new file server and exchange, both on the 
network gear and windows firewall

3)  In EAC under Servers/Database Availability groups, edit the DAG 
properties and change the witness server name (and path if needed).
(Then would be remove share from old server except in our case we are 
decommissioning).

Is that the right way to do it and am I missing anything?  It looks like the 
last step is going to create the share and assign the correct permissions for 
the DAG "computer" account.  Seems too easy.

Thanks,
Bonnie

[Exchange] Moving the file share witness

[Miller Bonnie L.]

Exchange 2013 DAG, we are migrating the file server that currently acts as the 
file share witness.  Is moving it really as simple as it seems?  Here is what I 
have pieced together:


1)  Add the "Exchange Trusted Subsystem" group to the local admins group of 
the new domain member file server and restart.

2)  Open needed ports between the new file server and exchange, both on the 
network gear and windows firewall

3)  In EAC under Servers/Database Availability groups, edit the DAG 
properties and change the witness server name (and path if needed).
(Then would be remove share from old server except in our case we are 
decommissioning).

Is that the right way to do it and am I missing anything?  It looks like the 
last step is going to create the share and assign the correct permissions for 
the DAG "computer" account.  Seems too easy.

Thanks,
Bonnie

[Exchange] RE: Reporting on who has rules

[Miller Bonnie L.]

Thanks Michael, I'd forgotten about that one but checked and we do have that 
option disabled in our default owa policy.  Thanks to John too for posting the 
scripts, looks like we're in the clear.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Michael B. Smith
Sent: Thursday, June 15, 2017 10:29 AM
To: exchange@lists.myitforum.com
Subject: [Exchange] RE: Reporting on who has rules

Also be aware that, by default, via OWA Options, people can set their 
ForwardingSmtpAddress.

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Miller Bonnie L.
Sent: Thursday, June 15, 2017 11:59 AM
To: exchange@lists.myitforum.com<mailto:exchange@lists.myitforum.com>
Subject: [Exchange] RE: Reporting on who has rules

Thanks so much John, I'll give this a go!

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Senter, John
Sent: Thursday, June 15, 2017 8:33 AM
To: exchange@lists.myitforum.com<mailto:exchange@lists.myitforum.com>
Subject: [Exchange] RE: Reporting on who has rules

=== Find forward rules ===
$mydata = @()
foreach ($i in (Get-Mailbox -ResultSize unlimited)) {
$Result = Get-InboxRule -Mailbox $i.DistinguishedName | where {($_.ForwardTo) 
-and ($_.ForwardTo -like "*smtp:*")}
$mydata += ($Result |  select-object -property 
@{Name="UserName";Expression={(get-user -Identity 
$_.MailboxOwnerID).displayname}},
@{Name="Rule Enabled";Expression={$_.Enabled}},
@{Name="Rule Name";Expression={$_.Name}},
@{Name="Forward To";Expression={$_.ForwardTo}},
@{Name="Description";Expression={$_.Description}})
}
$mydata | export-csv e:\Scripts\FwdRuleOutput.csv -NoTypeInformation -Force


===Find redirect rules ===
$mydata = @()
foreach ($i in (Get-Mailbox -ResultSize unlimited)) {
$Result = Get-InboxRule -Mailbox $i.DistinguishedName | where {($_.ReDirectTo) 
-and ($_.ReDirectTo -like "*smtp:*")}
$mydata += ($Result |  select-object -property 
@{Name="UserName";Expression={(get-user -Identity 
$_.MailboxOwnerID).displayname}},
@{Name="Rule Enabled";Expression={$_.Enabled}},
@{Name="Rule Name";Expression={$_.Name}},
@{Name="Redirect To";Expression={$_.ReDirectTo}},
@{Name="Description";Expression={$_.Description}})
}
$mydata | export-csv e:\Scripts\RedirRuleOutput.csv -NoTypeInformation -Force



===Remove Inbox Rules===
Remove-InboxRule -Mailbox  -identity "" 
-force -confirm:$false

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Miller Bonnie L.
Sent: Thursday, June 15, 2017 11:16 AM
To: exchange@lists.myitforum.com<mailto:exchange@lists.myitforum.com>
Subject: [Exchange] Reporting on who has rules

Exchange 2013, I've been asked to create a report on who has mailbox rules 
enabled that might do a redirect to an external e-mail account (due to a 
targeted phishing attack, to make sure something isn't in place that we don't 
know about).  I've never had to do anything like this before, anyone know the 
best way to go about this or what to search on to get started?

-Bonnie

[Exchange] RE: Reporting on who has rules

[Miller Bonnie L.]

Thanks so much John, I'll give this a go!

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Senter, John
Sent: Thursday, June 15, 2017 8:33 AM
To: exchange@lists.myitforum.com
Subject: [Exchange] RE: Reporting on who has rules

=== Find forward rules ===
$mydata = @()
foreach ($i in (Get-Mailbox -ResultSize unlimited)) {
$Result = Get-InboxRule -Mailbox $i.DistinguishedName | where {($_.ForwardTo) 
-and ($_.ForwardTo -like "*smtp:*")}
$mydata += ($Result |  select-object -property 
@{Name="UserName";Expression={(get-user -Identity 
$_.MailboxOwnerID).displayname}},
@{Name="Rule Enabled";Expression={$_.Enabled}},
@{Name="Rule Name";Expression={$_.Name}},
@{Name="Forward To";Expression={$_.ForwardTo}},
@{Name="Description";Expression={$_.Description}})
}
$mydata | export-csv e:\Scripts\FwdRuleOutput.csv -NoTypeInformation -Force


===Find redirect rules ===
$mydata = @()
foreach ($i in (Get-Mailbox -ResultSize unlimited)) {
$Result = Get-InboxRule -Mailbox $i.DistinguishedName | where {($_.ReDirectTo) 
-and ($_.ReDirectTo -like "*smtp:*")}
$mydata += ($Result |  select-object -property 
@{Name="UserName";Expression={(get-user -Identity 
$_.MailboxOwnerID).displayname}},
@{Name="Rule Enabled";Expression={$_.Enabled}},
@{Name="Rule Name";Expression={$_.Name}},
@{Name="Redirect To";Expression={$_.ReDirectTo}},
@{Name="Description";Expression={$_.Description}})
}
$mydata | export-csv e:\Scripts\RedirRuleOutput.csv -NoTypeInformation -Force



===Remove Inbox Rules===
Remove-InboxRule -Mailbox  -identity "" 
-force -confirm:$false

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Miller Bonnie L.
Sent: Thursday, June 15, 2017 11:16 AM
To: exchange@lists.myitforum.com<mailto:exchange@lists.myitforum.com>
Subject: [Exchange] Reporting on who has rules

Exchange 2013, I've been asked to create a report on who has mailbox rules 
enabled that might do a redirect to an external e-mail account (due to a 
targeted phishing attack, to make sure something isn't in place that we don't 
know about).  I've never had to do anything like this before, anyone know the 
best way to go about this or what to search on to get started?

-Bonnie

[Exchange] Reporting on who has rules

[Miller Bonnie L.]

Exchange 2013, I've been asked to create a report on who has mailbox rules 
enabled that might do a redirect to an external e-mail account (due to a 
targeted phishing attack, to make sure something isn't in place that we don't 
know about).  I've never had to do anything like this before, anyone know the 
best way to go about this or what to search on to get started?

-Bonnie

RE: [Exchange] Exchange Releases

[Miller Bonnie L.]

Thanks Micheal!  I’ve been on Ex 2013 cu15 and finally got my .net up to 4.6.2 
this week without issues (had to fix general 2012 server patching issues prior 
to making that jump).  Will have to go look at cu16 now as we are hybrid (if I 
don’t look now, we’ll end up behind by 2 before we know it…)

-Bonnie

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Michael B. Smith
Sent: Tuesday, March 21, 2017 3:26 PM
To: exchange@lists.myitforum.com
Subject: RE: [Exchange] Exchange Releases

Steve and I are both on TAP. I’ve been running it also, for quite a while. ☺

From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Steve Ens
Sent: Tuesday, March 21, 2017 2:32 PM
To: Exchange
Subject: Re: [Exchange] Exchange Releases

Installed it just yesterday...works like a charm!

On Tue, Mar 21, 2017 at 12:16 PM Andrew S. Baker 
> wrote:
Awesome.

Thanks, MBS


Regards,

 ASB
 http://XeeMe.com/AndrewBaker

 Providing Expert Technology Consulting Services for the SMB market…

 GPG: 860D 40A1 4DA5 3AE1 B052 8F9F 07A1 F9D6 A549 8842



On Tue, Mar 21, 2017 at 12:49 PM, Michael B. Smith 
> wrote:
Exchange 2016 CU5, Exchange 2013 CU16, Exchange 2010 SP3 UR17, and Exchange 
2007 SP3 UR23 all release today.

This is the very last release for Exchange 2007.

Exchange 2016 CU5 fixes several problems that I have personally seen with my 
customers. I recommend you install it.

Exchange 2016 CU5 and Exchange 2013 CU16 require .NET 4.6.2. If you are 
upgrading from anything older than Exchange 2016 CU4 (or Exchange 2013 CU15), 
you are recommended to do a two-phase upgrade.

https://blogs.technet.microsoft.com/exchange/

At this writing, the blog post isn’t yet available everywhere. It should be 
within a couple of hours.

RE: [Exchange] Exchange 2013 cu15

[Miller Bonnie L.]

Thanks for the feedback—it’s always good to hear the success stories =)

-Bonnie

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of ccollins9
Sent: Thursday, February 9, 2017 9:22 PM
To: exchange <exchange@lists.myitforum.com>
Subject: Re: [Exchange] Exchange 2013 cu15

I upgraded to Exchange 2013 CU15 today and put NET 4.6.2 on after. Everything 
is good.

On Wed, Feb 8, 2017 at 5:57 PM, Michael B. Smith 
<mich...@smithcons.com<mailto:mich...@smithcons.com>> wrote:
Sorry. can be difficult to keep up with what is what these days.

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>] 
On Behalf Of Miller Bonnie L.
Sent: Wednesday, February 8, 2017 11:49 AM
To: exchange@lists.myitforum.com<mailto:exchange@lists.myitforum.com>
Subject: RE: [Exchange] Exchange 2013 cu15

Thanks everyone—yes, they did note in the blog that it will be required with 
the next update after this one.  Sounds like nothing to worry about then.

-Bonnie

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Michael B. Smith
Sent: Wednesday, February 8, 2017 8:04 AM
To: exchange@lists.myitforum.com<mailto:exchange@lists.myitforum.com>
Subject: RE: [Exchange] Exchange 2013 cu15

I didn’t say this --- it’s not yet required, but will be soon enough. Get it on 
there!

(Note this only applies to current CUs of 2013 and 2016- 2010 and 2007 will 
never be supported with 4.6.x.)

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Steve Ens
Sent: Wednesday, February 8, 2017 10:40 AM
To: exchange@lists.myitforum.com<mailto:exchange@lists.myitforum.com>
Subject: Re: [Exchange] Exchange 2013 cu15

Hi Bonnie
Yes, we are using the 4.6.2 with 2016.  No issues.  You should be good with 
2013 and CU15,
Steve

On Wed, Feb 8, 2017 at 9:34 AM Miller Bonnie L. 
<mille...@mukilteo.wednet.edu<mailto:mille...@mukilteo.wednet.edu>> wrote:
I was just reading on the latest cu 15 for Exchange 2013 from December to prep 
for install, and noticed support for .net 4.6.2.  Has anyone successfully 
updated their .net on Exchange 2013 to this version yet (or 4.6.1)?  I’m not 
sure if I should skip it for now since it’s not required until the next update 
or if it’s not a big deal as long as I install cu 15 first.

https://blogs.technet.microsoft.com/exchange/2016/12/13/released-december-2016-quarterly-exchange-updates/

Support for .Net 4.6.2
Exchange Server 2013 and Exchange Server 2016 now fully support .Net 4.6.2 on 
all supported operating systems. Customers who have already updated their 
Exchange servers to .Net 4.6.1 can proceed with the upgrade to 4.6.2 before or 
after installing the cumulative updates released today. Customers who are still 
running .Net 4.5.2 are advised to deploy Cumulative Update 4 or Cumulative 
Update 15 prior to upgrading to .Net 4.6.2.
The upgrade to .Net 4.6.2, while strongly encouraged, is optional with these 
releases. As previously disclosed, the cumulative updates released in our March 
2017 quarterly updates will require .Net 4.6.2.

-Bonnie

RE: [Exchange] Exchange 2013 cu15

[Miller Bonnie L.]

Thanks everyone—yes, they did note in the blog that it will be required with 
the next update after this one.  Sounds like nothing to worry about then.

-Bonnie

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Michael B. Smith
Sent: Wednesday, February 8, 2017 8:04 AM
To: exchange@lists.myitforum.com
Subject: RE: [Exchange] Exchange 2013 cu15

I didn’t say this --- it’s not yet required, but will be soon enough. Get it on 
there!

(Note this only applies to current CUs of 2013 and 2016- 2010 and 2007 will 
never be supported with 4.6.x.)

From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Steve Ens
Sent: Wednesday, February 8, 2017 10:40 AM
To: exchange@lists.myitforum.com<mailto:exchange@lists.myitforum.com>
Subject: Re: [Exchange] Exchange 2013 cu15

Hi Bonnie
Yes, we are using the 4.6.2 with 2016.  No issues.  You should be good with 
2013 and CU15,
Steve

On Wed, Feb 8, 2017 at 9:34 AM Miller Bonnie L. 
<mille...@mukilteo.wednet.edu<mailto:mille...@mukilteo.wednet.edu>> wrote:
I was just reading on the latest cu 15 for Exchange 2013 from December to prep 
for install, and noticed support for .net 4.6.2.  Has anyone successfully 
updated their .net on Exchange 2013 to this version yet (or 4.6.1)?  I’m not 
sure if I should skip it for now since it’s not required until the next update 
or if it’s not a big deal as long as I install cu 15 first.

https://blogs.technet.microsoft.com/exchange/2016/12/13/released-december-2016-quarterly-exchange-updates/

Support for .Net 4.6.2
Exchange Server 2013 and Exchange Server 2016 now fully support .Net 4.6.2 on 
all supported operating systems. Customers who have already updated their 
Exchange servers to .Net 4.6.1 can proceed with the upgrade to 4.6.2 before or 
after installing the cumulative updates released today. Customers who are still 
running .Net 4.5.2 are advised to deploy Cumulative Update 4 or Cumulative 
Update 15 prior to upgrading to .Net 4.6.2.
The upgrade to .Net 4.6.2, while strongly encouraged, is optional with these 
releases. As previously disclosed, the cumulative updates released in our March 
2017 quarterly updates will require .Net 4.6.2.

-Bonnie

[Exchange] Exchange 2013 cu15

[Miller Bonnie L.]

I was just reading on the latest cu 15 for Exchange 2013 from December to prep 
for install, and noticed support for .net 4.6.2.  Has anyone successfully 
updated their .net on Exchange 2013 to this version yet (or 4.6.1)?  I'm not 
sure if I should skip it for now since it's not required until the next update 
or if it's not a big deal as long as I install cu 15 first.

https://blogs.technet.microsoft.com/exchange/2016/12/13/released-december-2016-quarterly-exchange-updates/

Support for .Net 4.6.2
Exchange Server 2013 and Exchange Server 2016 now fully support .Net 4.6.2 on 
all supported operating systems. Customers who have already updated their 
Exchange servers to .Net 4.6.1 can proceed with the upgrade to 4.6.2 before or 
after installing the cumulative updates released today. Customers who are still 
running .Net 4.5.2 are advised to deploy Cumulative Update 4 or Cumulative 
Update 15 prior to upgrading to .Net 4.6.2.
The upgrade to .Net 4.6.2, while strongly encouraged, is optional with these 
releases. As previously disclosed, the cumulative updates released in our March 
2017 quarterly updates will require .Net 4.6.2.

-Bonnie

RE: [Exchange] RE: items staying in mailbox folders

[Miller Bonnie L.]

Also try starting outlook with the /safe:3 switch to disable extensions.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Adam Farage
Sent: Wednesday, June 15, 2016 10:15 AM
To: exchange@lists.myitforum.com
Subject: RE: [Exchange] RE: items staying in mailbox folders


If the client is in Online mode the there is no OST file used. I would look at 
third party add-ons and AV exclusions.


Sent from my T-Mobile 4G LTE Device


 Original message 
From: David McSpadden >
Date: 6/15/16 1:12 PM (GMT-05:00)
To: exchange@lists.myitforum.com
Subject: RE: [Exchange] RE: items staying in mailbox folders


OWA works as advertised.

It is the Outlook client 2010.  Group policy sets it to Online mode.  (Grey no 
checkmark in the cached mode box of settings.)

So I guess now I rebuild the OST?







From: listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Adam Farage
Sent: Tuesday, June 14, 2016 4:02 PM
To: exchange@lists.myitforum.com
Subject: RE: [Exchange] RE: items staying in mailbox folders



Can you repro the issue in OWA? If not can you repro the issue while the 
Outlook client is in Online mode (e.g: disabled cached mode)?
If you cannot repro the issue in either situation, I say its the OST file 
corruption or something third party is messing with your OST (e.g: client AV, 
enterprise vault, ect).

Thanks,

Adam F

> From: dav...@imcu.com
> To: exchange@lists.myitforum.com
> Subject: [Exchange] RE: items staying in mailbox folders
> Date: Tue, 14 Jun 2016 19:51:28 +
>
> Send/Receive nothing different
> Deleted/readded profile nothing different
> No rules or filters.
>
>
> -Original Message-
> From: listsad...@lists.myitforum.com 
> [mailto:listsad...@lists.myitforum.com] On Behalf Of Scott Schneider
> Sent: Tuesday, June 14, 2016 2:50 PM
> To: exchange@lists.myitforum.com
> Subject: [Exchange] RE: items staying in mailbox folders
>
> Have you tried scanpst on the ost file or deleting and recreating the ost 
> file?
>
> -Original Message-
> From: listsad...@lists.myitforum.com 
> [mailto:listsad...@lists.myitforum.com] On Behalf Of David McSpadden
> Sent: Tuesday, June 14, 2016 2:33 PM
> To: exchange@lists.myitforum.com
> Subject: [Exchange] items staying in mailbox folders
>
> Have a user on a patched Windows 7 Professional workstation with Office 2010.
> Patched through May 27th.
>
> They have two things going on.
> 1. they delete 6 items and only one disappears immediately. The rest go away 
> after like 15 minutes or when they switch folders back and forth.
> 2. Unread indicator stays lit even after items have been read or deleted.
>
> What could be causing this?
> This e-mail and any files transmitted with it are property of Indiana Members 
> Credit Union, are confidential, and are intended solely for the use of the 
> individual or entity to whom this e-mail is addressed. If you are not one of 
> the named recipient(s) or otherwise have reason to believe that you have 
> received this message in error, please notify the sender and delete this 
> message immediately from your computer. Any other use, retention, 
> dissemination, forwarding, printing, or copying of this email is strictly 
> prohibited.
>
> Please consider the environment before printing this email.
> This e-mail and any files transmitted with it are property of Indiana Members 
> Credit Union, are confidential, and are intended solely for the use of the 
> individual or entity to whom this e-mail is addressed. If you are not one of 
> the named recipient(s) or otherwise have reason to believe that you have 
> received this message in error, please notify the sender and delete this 
> message immediately from your computer. Any other use, retention, 
> dissemination, forwarding, printing, or copying of this email is strictly 
> prohibited.
>
> Please consider the environment before printing this email.

This e-mail and any files transmitted with it are property of Indiana Members 
Credit Union, are confidential, and are intended solely for the use of the 
individual or entity to whom this e-mail is addressed. If you are not one of 
the named recipient(s) or otherwise have reason to believe that you have 
received this message in error, please notify the sender and delete this 
message immediately from your computer. Any other use, retention, 
dissemination, forwarding, printing, or copying of this email is strictly 
prohibited.


Please consider the environment before printing this email.

[Exchange] O365 hybrid and spam

[Miller Bonnie L.]

Setup is Exchange 2013 CU11 DAG, two servers, barracuda LBs in front in Hybrid 
with O365, and a barracuda 400 anti-spam in front doing Spam filtering.

We recently had to re-run our hybrid configuration wizard, like anyone else in 
this setup, due to changes by Microsoft 
(https://community.office365.com/en-us/b/office_365_buzz/archive/2016/02/19/important-notice-about-certificate-expiration-for-exchange-2013-hybrid-customers).

During this setup several weeks ago, it appears we could no longer route mail 
inbound through our on-prem smarthost (barracuda 400 antispam), as there 
doesn't seem to be any connector option for it now.  So, previously all mail 
from O365 inbound would come in through the barracuda 400 to get filtered, then 
went over to Exchange.  Outbound went straight out from the backend servers.

Because there appears to be no connector option, we finally opened up the 
backend servers directly to the O365 mail IPs, which is what a Microsoft PFE 
had told us should be the configuration in the first place sometime last year, 
but our network admin (and myself if I had another option) didn't want to do if 
we didn't have to.

Ever since opening this up several weeks ago, we are now getting a ton of spam 
and junk messages, and when I check the delivery info, I can see they are 
coming straight in from O365 IPs, which now bypass our barracuda 400 filtering.

So, does anyone know what our options really are?  Is there a smarthost 
connector and I'm just not seeing it, or it has to be set up via powershell 
somehow?  If there is no connector, what are the filtering options in this 
scenario?  I don't mind installing or enabling something on the backend servers 
if we need to, but it's going to be confusing to our end users to have to deal 
with two different filtering mechanisms, as we don't use the "Junk" folder now, 
but have the barracuda plugin.

E-mailing every domain that the messages come from is not an option, which is 
what MS says to do when you get spam from their outbound IPs (e-mail the domain 
owner).  We've had our Barracuda in place and working for so long now, this is 
all new territory for me.

Thanks for ideas and pointers,

Bonnie

RE: [Exchange] unable to add second profile account

[Miller Bonnie L .]

That's exactly what I get if I try that way myself since 2013, which is how I 
always connected as an admin on 2007.  I even get that if I manually fill in 
all of the values just like what autodiscover would do (since you're manually 
creating a profile and not using autodiscover in this case).  For admin tasks, 
I've had to create a default profile connected to the admin account and then 
change the connected username in the profile when I need to access various 
mailboxes.  I have also had a few little quirks with that under certain 
circumstances.

If you find something to fix, I'd love to know.  For an end user with Outlook, 
the mailbox you've granted them access to should auto-add to their current 
profile.  If they press ctrl + F6 to put their view into folder list view, the 
mailbox should be there.  When you remove access, it will disappear.  If it 
doesn't auto-add, you can have them add it to their profile as an additional 
mailbox under properties, e-mail accounts, change, more settings, advanced tab 
(add mailbox here).

-Bonnie

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of J- P
Sent: Monday, February 09, 2015 8:00 PM
To: exchange@lists.myitforum.com
Subject: RE: [Exchange] unable to add second profile  account

Great question, didn't dawn on me since there has never been any problems for 
anyone connecting -(i guess no one has ever tried to add another outlook 
profile/account )

guess i'll look at that next

Jean-Paul Natola



From: dani...@hotmail.commailto:dani...@hotmail.com
Subject: Re: [Exchange] unable to add second profile  account
Date: Mon, 9 Feb 2015 19:23:25 -0800
To: exchange@lists.myitforum.commailto:exchange@lists.myitforum.com
Autodiscover works the same as before. Has the internal autodiscover been 
verified in this environment?

On Feb 9, 2015, at 19:18, J- P 
jnat...@hotmail.commailto:jnat...@hotmail.com wrote:
I appreciate the workaround, however, I can always get access by logging into 
the computer as that user and launching outlook and let it autoconfigure,  what 
I really want to know is why it's not working logged in with my credetnials 
(which I granted full access to over the mailbox)

This has always worked in the past against EX 2003/07/10, I'm wondering if this 
is specific to this network or is it because EX2013 has something different  
going on in the background that I'm not aware of.


Jean-Paul Natola



Subject: Re: [Exchange] unable to add second profile  account
From: dani...@hotmail.commailto:dani...@hotmail.com
Date: Mon, 9 Feb 2015 18:57:56 -0800
To: exchange@lists.myitforum.commailto:exchange@lists.myitforum.com
Https://owaHttps://%3cowa URL/SMTP address of termed user
Login with new user's creds.
That will not only give him access while you hash this out but verify 
permissions and basic functionality.

On Feb 9, 2015, at 18:46, J- P 
jnat...@hotmail.commailto:jnat...@hotmail.com wrote:
Nope, the user's last day was Friday, and the mailbox is still active.



Subject: Re: [Exchange] unable to add second profile  account
From: dani...@hotmail.commailto:dani...@hotmail.com
Date: Mon, 9 Feb 2015 18:22:41 -0800
To: exchange@lists.myitforum.commailto:exchange@lists.myitforum.com
Is the termed user hidden from the GAL?

On Feb 9, 2015, at 17:53, J- P 
jnat...@hotmail.commailto:jnat...@hotmail.com wrote:
Hi all

So i get an email today to allow someone to login into a former employees 
outlook,

So i  grant the user full access to the former users mailbox , then I send them 
a template email that Ive had for years that  details the following;

open control panel, go to mail, add  profile, enter the server, user etc..

They come back and say it doesn't work yes I know , so I figure let me do it,

and sure enough I cannot connect, it returns the following;

Outlook cannot  log you on, verify you are connected to the network, and are 
using the proper server and mailbox name etc

Also tried the exchange IP, the internal name, the fqdn no differnece


Ex2013 cu8
outlook 2010
and connecting from within the lan

[Exchange] RE: View other appontments

[Miller Bonnie L .]

I had an opposite issue recently where people couldn't see free/busy info for 
one admin.  Someone had changed the permission level in the mailbox  calendar 
for free/busy to none, so setting it back fixed it for her.

In your case, if the person really doesn't want to mark everything private and 
wants nobody to see anything, they could do that in their mailbox, but I'm not 
sure what other things it could affect/break.

-Original Message-
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Joseph L. Casale
Sent: Thursday, January 08, 2015 6:30 AM
To: 'exchange@lists.myitforum.com'
Subject: [Exchange] RE: View other appontments

Ehh, super bad choice in acronym. I meant a group collaboration application 
like exchange.
My personal calendar works this way for example, people in our org can see my 
schedule otherwise how would they invite me to a meeting and check (as Michael 
says) a persons free busy...

jlc

-Original Message-
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of David McSpadden
Sent: Thursday, January 8, 2015 6:38 AM
To: 'exchange@lists.myitforum.com'
Subject: [Exchange] RE: View other appontments

Wasn't a group calendar though.
User A says it is her personal calendar?


-Original Message-
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Joseph L. Casale
Sent: Thursday, January 08, 2015 8:27 AM
To: 'exchange@lists.myitforum.com'
Subject: [Exchange] RE: View other appontments

Mark it as private otherwise that is what a group calendar is designed to 
do...

jlc

-Original Message-
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of David McSpadden
Sent: Thursday, January 8, 2015 5:22 AM
To: exchange@lists.myitforum.com
Subject: [Exchange] View other appontments

Outlook 2010
On exchange 2010
What permissions are needed to see another users appointments?
Had a user call another user and tell her when she was done with appointment to 
see her.
When asked about how she knew about appt she stated she tried to send a meeting 
request and the info displayed for her?
Where do I look?

Sent from my iPhone
This e-mail and any files transmitted with it are property of Indiana Members 
Credit Union, are confidential, and are intended solely for the use of the 
individual or entity to whom this e-mail is addressed. If you are not one of 
the named recipient(s) or otherwise have reason to believe that you have 
received this message in error, please notify the sender and delete this 
message immediately from your computer. Any other use, retention, 
dissemination, forwarding, printing, or copying of this email is strictly 
prohibited.

Please consider the environment before printing this email.





This e-mail and any files transmitted with it are property of Indiana Members 
Credit Union, are confidential, and are intended solely for the use of the 
individual or entity to whom this e-mail is addressed. If you are not one of 
the named recipient(s) or otherwise have reason to believe that you have 
received this message in error, please notify the sender and delete this 
message immediately from your computer. Any other use, retention, 
dissemination, forwarding, printing, or copying of this email is strictly 
prohibited.

Please consider the environment before printing this email.

FW: [Exchange] Inbox refresh issues

[Miller Bonnie L .]

Again, replying to a really old thread with some follow up.  I had opened a PSS 
case on this last January, and after 50 hours of premier time, by September It 
was declared a bug and the fix would potentially be in CU7 and to wait for that 
(yes, we recouped our hours).

With backups ready and fingers tightly crossed, I installed CU7 on my servers, 
and the issue with Outlook 2010 group by views is now resolved.  From the 
conversations I had with support I believe there was a similar bug identified 
in Exchange 2010, and so that rollup may also contain the fix.

Outlook 2013 has not had the issue.

-Bonnie

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Miller Bonnie L.
Sent: Friday, January 17, 2014 1:04 PM
To: exchange@lists.myitforum.com
Subject: RE: [Exchange] Inbox refresh issues

Thanks Michael-I'll check out the yahoo group and if it's still not resolvable, 
we do have hours available still.  If it really is a bug, we usually get them 
back, and if not, I get the problem resolved-that's what we reserve them for.  
I might have to go get Outlook 2013 and see if it does the same thing-we 
haven't really looked at it yet, but are volume licensed.

-Bonnie

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Michael B. Smith
Sent: Friday, January 17, 2014 12:48 PM
To: exchange@lists.myitforum.commailto:exchange@lists.myitforum.com
Subject: RE: [Exchange] Inbox refresh issues

Unfortunately, I don't think any Outlook MVPs made the transition to the new 
lists on myITForum. We used to have two that were on this list, but I haven't 
seen them post in a long time. There is a very active Outlook list on yahoo 
groups where a few hang out. You might try posting the question there,  unless 
you just have premiere cases/hours to burn...

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Miller Bonnie L.
Sent: Friday, January 17, 2014 3:35 PM
To: exchange@lists.myitforum.commailto:exchange@lists.myitforum.com
Subject: RE: [Exchange] Inbox refresh issues

So, she isn't in the office today, but I started changing the views around on 
my own inbox, and voila, caused it to happen.  I changed a lot of things around 
and have it narrowed down to the cause, but not sure how to fix it, other than 
telling someone not to use a view they've always used.

To reproduce the issue, I can start by setting the view back to defaults on my 
inbox with the Reset current view button while on Compact, and it works 
normally.  If I then edit my view with View settings, then add a group by, it 
starts to have the problem.  I've reproduced it both with Name Ascending (what 
she is using), and with subject.  I also see that the Group by function is 
where you can set how the groupings expand, collapse, or stay as last viewed, 
which is also not working right.  I've tried both with the Automatically group 
by.. box checked and with it not checked.  It also doesn't matter if I have a 
reading pane or not.

I also found that once I've deleted a message and the view doesn't refresh (if 
you click away and back the reading pane changes to This item cannot be 
displayed...), if I use one of the expand or collapse arrows on a grouping, 
that seems to be the only thing that will force a refresh.  F5 doesn't work, 
send/receive doesn't help-the only other thing to do is close Outlook and 
reopen, or use ctrl-right-click on the Outlook tray icon, connection status, 
and reconnect.

I found a few articles listing out Outlook 2010 Post SP2 hotfixes, but nothing 
that seems to address this issue, and we're running in ONLINE mode, so no OST 
involved here (nor psts).  We're on the current RU (3) for Exchange 2013.

Unless someone has another idea of a setting to check, I'm thinking about 
opening a Premier case.  I'm pretty certain  this started sometime after 
migrating her mailbox to Exchange 2013, but it took a while to get to me.  Or, 
it could have started after RU3 was applied.  I don't normally run in a group 
by view, so haven't seen it myself until today.

Thanks,
Bonnie

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Miller Bonnie L.
Sent: Friday, January 17, 2014 6:52 AM
To: exchange@lists.myitforum.commailto:exchange@lists.myitforum.com
Subject: RE: [Exchange] Inbox refresh issues

Good idea-I'll see if I can have them try another system, even just for a few 
minutes.  She's a pretty busy administrator, so I'm not sure if it's something 
they can try today, but the problem shows up pretty quickly.

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Candee
Sent: Friday, January 17, 2014 4:50 AM
To: exchange@lists.myitforum.commailto:exchange@lists.myitforum.com
Subject: Re: [Exchange

RE: FW: [Exchange] Inbox refresh issues

[Miller Bonnie L .]

Yes, and honestly it only took so long as they simply could not repro the issue 
on their end (even though I could repro every time).  They ended up with a 
second customer reporting the same issue by May.  Sent off a LOT of trace files 
from Outlook and Exchange and by September they said we're pretty sure it's 
the same cause as this other bug we know about to be fixed in CU7.  I guess it 
was a pretty intricate fix, requiring a lot of regression testing.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Andrew S. Baker
Sent: Friday, December 12, 2014 10:24 AM
To: exchange@lists.myitforum.com
Subject: Re: FW: [Exchange] Inbox refresh issues

Thanks for the follow-up, Bonnie

What a fun adventure (almost a year, end-to-end)







ASB
http://XeeMe.com/AndrewBakerhttp://xeeme.com/AndrewBaker
Providing Virtual CIO Services (IT Operations  Information Security) for the 
SMB market...




On Fri, Dec 12, 2014 at 1:14 PM, Miller Bonnie L. 
mille...@mukilteo.wednet.edumailto:mille...@mukilteo.wednet.edu wrote:
Again, replying to a really old thread with some follow up.  I had opened a PSS 
case on this last January, and after 50 hours of premier time, by September It 
was declared a bug and the fix would potentially be in CU7 and to wait for that 
(yes, we recouped our hours).

With backups ready and fingers tightly crossed, I installed CU7 on my servers, 
and the issue with Outlook 2010 group by views is now resolved.  From the 
conversations I had with support I believe there was a similar bug identified 
in Exchange 2010, and so that rollup may also contain the fix.

Outlook 2013 has not had the issue.

-Bonnie

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com] 
On Behalf Of Miller Bonnie L.
Sent: Friday, January 17, 2014 1:04 PM

To: exchange@lists.myitforum.commailto:exchange@lists.myitforum.com
Subject: RE: [Exchange] Inbox refresh issues

Thanks Michael-I'll check out the yahoo group and if it's still not resolvable, 
we do have hours available still.  If it really is a bug, we usually get them 
back, and if not, I get the problem resolved-that's what we reserve them for.  
I might have to go get Outlook 2013 and see if it does the same thing-we 
haven't really looked at it yet, but are volume licensed.

-Bonnie

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Michael B. Smith
Sent: Friday, January 17, 2014 12:48 PM
To: exchange@lists.myitforum.commailto:exchange@lists.myitforum.com
Subject: RE: [Exchange] Inbox refresh issues

Unfortunately, I don't think any Outlook MVPs made the transition to the new 
lists on myITForum. We used to have two that were on this list, but I haven't 
seen them post in a long time. There is a very active Outlook list on yahoo 
groups where a few hang out. You might try posting the question there,  unless 
you just have premiere cases/hours to burn...

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Miller Bonnie L.
Sent: Friday, January 17, 2014 3:35 PM
To: exchange@lists.myitforum.commailto:exchange@lists.myitforum.com
Subject: RE: [Exchange] Inbox refresh issues

So, she isn't in the office today, but I started changing the views around on 
my own inbox, and voila, caused it to happen.  I changed a lot of things around 
and have it narrowed down to the cause, but not sure how to fix it, other than 
telling someone not to use a view they've always used.

To reproduce the issue, I can start by setting the view back to defaults on my 
inbox with the Reset current view button while on Compact, and it works 
normally.  If I then edit my view with View settings, then add a group by, it 
starts to have the problem.  I've reproduced it both with Name Ascending (what 
she is using), and with subject.  I also see that the Group by function is 
where you can set how the groupings expand, collapse, or stay as last viewed, 
which is also not working right.  I've tried both with the Automatically group 
by.. box checked and with it not checked.  It also doesn't matter if I have a 
reading pane or not.

I also found that once I've deleted a message and the view doesn't refresh (if 
you click away and back the reading pane changes to This item cannot be 
displayed...), if I use one of the expand or collapse arrows on a grouping, 
that seems to be the only thing that will force a refresh.  F5 doesn't work, 
send/receive doesn't help-the only other thing to do is close Outlook and 
reopen, or use ctrl-right-click on the Outlook tray icon, connection status, 
and reconnect.

I found a few articles listing out Outlook 2010 Post SP2 hotfixes, but nothing 
that seems to address this issue, and we're running in ONLINE mode, so no OST 
involved here (nor psts).  We're on the current RU (3

RE: [Exchange] Exchange user mailbox auto-declining meeting requests

[Miller Bonnie L .]

I know this thread is old, but as a quick follow up, I ended up trying 
everything suggested to no avail (except for recreate AD user).

Thought about opening a PSS case, but as I couldn’t reproduce on another old or 
new mailbox, I ended up scheduling with the person to recreate her mailbox.  
Did that right before the Thanksgiving break, exporting and importing PST data, 
and the problem has not reoccurred.

She still hasn’t hooked her phone back up with activesync, but if it shows up 
again after that, then at least we’ll have a root cause.

-Bonnie

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Michael B. Smith
Sent: Thursday, October 16, 2014 6:33 PM
To: exchange@lists.myitforum.com
Subject: RE: [Exchange] Exchange user mailbox auto-declining meeting requests

I agree with all of this except the new AD account step. That can be a bad 
thing. (Although, when worse comes to worst… it may be the requirement. But I 
doubt it.)

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Daniel Chenault
Sent: Thursday, October 16, 2014 9:18 PM
To: exchange@lists.myitforum.commailto:exchange@lists.myitforum.com
Subject: Re: [Exchange] Exchange user mailbox auto-declining meeting requests

I don't know Android but I do remember algebra; simplify the equation. While 
the user may see it as an inconvenience I would delete the account from the 
phone. Since you can reproduce at will it's a short inconvenience.
If it clears, great, at least you know where to focus. If not my steps would be 
(testing after each one)
Turn on the calendar assistant and force it to run with set-calendar 
processing -identity upn -automateprocessing autoupdate Test that it is 
working. Then turn it off with the same line except -automateprocessing:none. 
Note the lack of a colon for the last command in the first line. Perhaps that 
will clear/overwrite the wart.
New profile
Move the mailbox (creates a new mailbox and imports data with practically zero 
user experience. Maybe it'll filter the wart)
New AD account (disconnect the mailbox, connect to new account)
New mailbox, export to PST, import to new mailbox.
One of those has to get it. You could spend some quality time with AdSIEdit but 
my suspicion is the wart is invalid data imported from 2007 in the mailbox that 
is not exposed in the UI but is read by the code.


On Oct 16, 2014, at 14:06, Miller Bonnie L. 
mille...@mukilteo.wednet.edumailto:mille...@mukilteo.wednet.edu wrote:
This is really strange and I’m not sure where to look at this point.  Exchange 
2013 CU6, two servers in a DAG with both roles behind Barracuda LBs.

I have a user mailbox (not a shared/resource mailbox) that is automatically 
declining meeting requests when there is already a duplicate on her calendar.  
She discovered the problem when a higher up called to ask why she had declined 
her meeting, so I’m not sure how long it’s actually been happening for, but I 
can reproduce the issue with her account.  Her mailbox, like most others (and 
mine) was migrated from Exchange 2007, which was decommissioned in March.

From what I’ve been reading, the booking agent shouldn’t even be running on a 
user mailbox—is that true?  I have also checked and she doesn’t have any rules 
that I can see that are affecting her mailbox.  I also ran

Get-calendarprocessing username | fl

And all of her settings look exactly like mine, which does not auto-decline 
duplicates.  Calendar options for configuring booking in Outlook are not 
available in her Outlook settings (users are running in online mode).

She DOES have an Android phone using activesync and I’m wondering if there 
could be a setting in there causing this, but I’m not even sure what exactly to 
look for.  Ideas are welcome.

Thanks,
Bonnie

[Exchange] RE: Reset Default permissions

[Miller Bonnie L .]

So, I moved her mailbox this am-no improvement.  Then, I ran through the four 
documented new-mailboxrepairrequest options and two undocumented ones 
(FolderACL, MissingSpecialFolders)-no improvements there either.  Not sure if 
any of the other undocumented options could help, but as it's not obvious what 
they do, I'm not going down that path alone.

I started looking at some of the e-mail addresses and found if I type them in 
cleanly, I can access the option to Save as Outlook Contact.  Even though they 
look okay, this points back to likely corruption in the nickname cache.

It won't go over well, but I think the only option left is to have her save out 
what she needs and then to purge the autocomplete cache.  The saving part is 
difficult when you can't just save to contacts.  This actually came up because 
she couldn't do that and had found if she clicks to open the contact using 
the pop-up menus over the address, she was able to add information and choose 
save.  But, when she went to use those newly saved contacts by adding them to a 
local contact group, those contacts wouldn't appear.  The reason is because it 
saved the data back to the suggested contact and not to her main contacts 
folder-already had to copy those over for her to get them in the correct 
location.

Thanks for all the ideas-at least I learned some more useful troubleshooting 
options.

-Bonnie

From: Miller Bonnie L.
Sent: Wednesday, November 05, 2014 12:09 PM
To: 'exchange@lists.myitforum.com'
Subject: RE: Reset Default permissions

FYI, EXFolders wants .net 3.5 installed, which I don't plan on adding that to 
my Exchange servers just to run this tool.  Will try the next option when I can 
have her mailbox offline.

From: Miller Bonnie L.
Sent: Wednesday, November 05, 2014 11:58 AM
To: 'exchange@lists.myitforum.com'
Subject: RE: Reset Default permissions

Thanks for all of the responses-I will check EXFolders first, then if I need to 
try the move mailbox and mailboxrepairrequest options when I can have her 
offline.

This does appear to be the only thing broken (yes, she can create contacts 
manually), new profile or other computer doesn't help, and I am starting to 
suspect the addresses themselves in her suggested contacts, which is where most 
of these are coming from (autocomplete).

-Bonnie

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Kennedy, Jim
Sent: Wednesday, November 05, 2014 11:48 AM
To: 'exchange@lists.myitforum.com'
Subject: [Exchange] RE: Reset Default permissions

Don't know for sure but I would bet it still does take it offline.

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Miller Bonnie L.
Sent: Wednesday, November 5, 2014 2:45 PM
To: 'exchange@lists.myitforum.com'
Cc: Miller Bonnie L.
Subject: [Exchange] RE: Reset Default permissions

Haven't used that one before either.  Does it still interrupt the mailbox use 
if you only run with the -DetectOnly switch?  I might have to wait to run it 
until off hours.

-Bonnie

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Kennedy, Jim
Sent: Wednesday, November 05, 2014 11:24 AM
To: exchange@lists.myitforum.commailto:exchange@lists.myitforum.com
Subject: [Exchange] RE: Reset Default permissions

For grins, what about a MailboxRepairRequest.

http://www.msexchangeblog.nl/2010/10/20/mailbox-repair-exchange-server-2010-sp1/


From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Miller Bonnie L.
Sent: Wednesday, November 5, 2014 2:18 PM
To: exchange@lists.myitforum.commailto:exchange@lists.myitforum.com
Cc: Miller Bonnie L.
Subject: [Exchange] RE: Reset Default permissions

So, I found the PS command to fix the permissions, but still have the error 
happening on her mailbox.  I actually went through and fixed numerous folders 
that were wrong-probably from way back in the day (Contacts, Inbox, Calendar, 
Journal, Notes,  Tasks all missing anonymous and had an unknown SID that had 
been delegated at one time).  Any other ideas?

Command used:

Add-mailboxfolderpermission -identity Username:\Contacts -AccessRights None 
-User Anonymous

-Bonnie

From: Miller Bonnie L.
Sent: Wednesday, November 05, 2014 9:20 AM
To: exchange@lists.myitforum.commailto:exchange@lists.myitforum.com
Cc: Miller Bonnie L.
Subject: Reset Default permissions

Outlook 2010 SP2 online mode, Exchange 2013 cu6 two servers in a DAG with 
Barracuda LBs.

I have a user who can't save any contact when right-clicking an external 
address and choosing to Save as Outlook Contact-don't know how long it's been 
broken, but I'm guessing this isn't new.  Here is the error message generated:
[cid:image001.png@01CFF98D.CC9BEEF0]

I've narrowed it to her mailbox (same error on another computer

[Exchange] RE: Reset Default permissions

[Miller Bonnie L .]

I didn't realize that doesn't also reset/clear the suggested contacts 
folder-just doing some testing on mine and looked it up, and I see what you're 
talking about.  I was under the impression the autocomplete cache populated 
suggested contacts, and that they were more permanently linked, but see that 
isn't the case at all.

So, is it true that suggested contacts are gone with Office 2013?

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Michael B. Smith
Sent: Thursday, November 06, 2014 7:00 AM
To: exchange@lists.myitforum.com
Subject: [Exchange] RE: Reset Default permissions

You could, potentially, try to dump her nickname cache first.

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Miller Bonnie L.
Sent: Thursday, November 6, 2014 9:55 AM
To: 'exchange@lists.myitforum.com'
Cc: Miller Bonnie L.
Subject: [Exchange] RE: Reset Default permissions

So, I moved her mailbox this am-no improvement.  Then, I ran through the four 
documented new-mailboxrepairrequest options and two undocumented ones 
(FolderACL, MissingSpecialFolders)-no improvements there either.  Not sure if 
any of the other undocumented options could help, but as it's not obvious what 
they do, I'm not going down that path alone.

I started looking at some of the e-mail addresses and found if I type them in 
cleanly, I can access the option to Save as Outlook Contact.  Even though they 
look okay, this points back to likely corruption in the nickname cache.

It won't go over well, but I think the only option left is to have her save out 
what she needs and then to purge the autocomplete cache.  The saving part is 
difficult when you can't just save to contacts.  This actually came up because 
she couldn't do that and had found if she clicks to open the contact using 
the pop-up menus over the address, she was able to add information and choose 
save.  But, when she went to use those newly saved contacts by adding them to a 
local contact group, those contacts wouldn't appear.  The reason is because it 
saved the data back to the suggested contact and not to her main contacts 
folder-already had to copy those over for her to get them in the correct 
location.

Thanks for all the ideas-at least I learned some more useful troubleshooting 
options.

-Bonnie

From: Miller Bonnie L.
Sent: Wednesday, November 05, 2014 12:09 PM
To: 'exchange@lists.myitforum.com'
Subject: RE: Reset Default permissions

FYI, EXFolders wants .net 3.5 installed, which I don't plan on adding that to 
my Exchange servers just to run this tool.  Will try the next option when I can 
have her mailbox offline.

From: Miller Bonnie L.
Sent: Wednesday, November 05, 2014 11:58 AM
To: 'exchange@lists.myitforum.com'
Subject: RE: Reset Default permissions

Thanks for all of the responses-I will check EXFolders first, then if I need to 
try the move mailbox and mailboxrepairrequest options when I can have her 
offline.

This does appear to be the only thing broken (yes, she can create contacts 
manually), new profile or other computer doesn't help, and I am starting to 
suspect the addresses themselves in her suggested contacts, which is where most 
of these are coming from (autocomplete).

-Bonnie

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Kennedy, Jim
Sent: Wednesday, November 05, 2014 11:48 AM
To: 'exchange@lists.myitforum.com'
Subject: [Exchange] RE: Reset Default permissions

Don't know for sure but I would bet it still does take it offline.

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Miller Bonnie L.
Sent: Wednesday, November 5, 2014 2:45 PM
To: 'exchange@lists.myitforum.com'
Cc: Miller Bonnie L.
Subject: [Exchange] RE: Reset Default permissions

Haven't used that one before either.  Does it still interrupt the mailbox use 
if you only run with the -DetectOnly switch?  I might have to wait to run it 
until off hours.

-Bonnie

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Kennedy, Jim
Sent: Wednesday, November 05, 2014 11:24 AM
To: exchange@lists.myitforum.commailto:exchange@lists.myitforum.com
Subject: [Exchange] RE: Reset Default permissions

For grins, what about a MailboxRepairRequest.

http://www.msexchangeblog.nl/2010/10/20/mailbox-repair-exchange-server-2010-sp1/


From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Miller Bonnie L.
Sent: Wednesday, November 5, 2014 2:18 PM
To: exchange@lists.myitforum.commailto:exchange@lists.myitforum.com
Cc: Miller Bonnie L.
Subject: [Exchange] RE: Reset Default permissions

So, I found the PS command to fix the permissions, but still have the error 
happening on her mailbox.  I

[Exchange] RE: Reset Default permissions

[Miller Bonnie L .]

Thanks Damien--I did see a reference to that utility, but can't tell if it's 
supported for Exchange 2013, as I saw someone mention it can't be used on 2013 
PFs.  But, I'm sure with mailboxes.  Have you used it with 2013?

-Bonnie

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Damien Solodow
Sent: Wednesday, November 05, 2014 11:23 AM
To: exchange@lists.myitforum.com
Subject: [Exchange] RE: Reset Default permissions

Have you taken a look at the mailbox in ExFolders? It's pretty handy for 
shining a light on oddballs like that.

DAMIEN SOLODOW
Systems Engineer
317.447.6033 (office)
317.447.6014 (fax)
HARRISON COLLEGE

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Miller Bonnie L.
Sent: Wednesday, November 5, 2014 2:18 PM
To: exchange@lists.myitforum.commailto:exchange@lists.myitforum.com
Cc: Miller Bonnie L.
Subject: [Exchange] RE: Reset Default permissions

So, I found the PS command to fix the permissions, but still have the error 
happening on her mailbox.  I actually went through and fixed numerous folders 
that were wrong-probably from way back in the day (Contacts, Inbox, Calendar, 
Journal, Notes,  Tasks all missing anonymous and had an unknown SID that had 
been delegated at one time).  Any other ideas?

Command used:

Add-mailboxfolderpermission -identity Username:\Contacts -AccessRights None 
-User Anonymous

-Bonnie

From: Miller Bonnie L.
Sent: Wednesday, November 05, 2014 9:20 AM
To: exchange@lists.myitforum.commailto:exchange@lists.myitforum.com
Cc: Miller Bonnie L.
Subject: Reset Default permissions

Outlook 2010 SP2 online mode, Exchange 2013 cu6 two servers in a DAG with 
Barracuda LBs.

I have a user who can't save any contact when right-clicking an external 
address and choosing to Save as Outlook Contact-don't know how long it's been 
broken, but I'm guessing this isn't new.  Here is the error message generated:
[cid:image001.png@01CFF8ED.09E69E00]

I've narrowed it to her mailbox (same error on another computer with my admin 
account connected, other users don't have the issue) and I'm not finding much 
love on this searching google (a lot of dead-end threads).  She doesn't have a 
pst nor oab, and wasn't migrated from Google.  Some of these addresses are 
actually already saved as contacts, so it should just link and open them up.  
Internal addresses seem to open up the tool.

So I started looking at permissions, and I think it may be because her Contacts 
subfolder is missing the anonymous user, which shows up on other 
mailboxes/folders, albeit with None on viewable permission levels.  Top-level 
mailbox permissions look normal.

So, is there a tool or utility I can use to either reset permissions on her 
Contact subfolder to default, or to add the anonymous user account back?  The 
Outlook GUI only allows me to browse existing users-can't type in Anonymous.  
Still searching around for a tool or ps command, but would appreciate if 
someone knows what I should be looking for.

I didn't try the /resetfolders switch, but I think that will just recreate if 
the default folders are missing.

Thanks,
Bonnie

RE: [Exchange] Exchange user mailbox auto-declining meeting requests

[Miller Bonnie L .]

Thanks to both of you—Just checked a new user account created yesterday and the 
value is false.  So, it sounds like not allowing conflicts  auto-declining is 
actually the default setting, which is among one of the many things I didn’t 
know, and would explain why I’m not finding info searching on this as a bug.  
It could be that in combination with her phone, that setting is being honored 
by the phone and it processes the declination.

I’ve changed her AllowConflicts setting to $True and so far have not received 
any declines to my test meetings—hopefully this will be what she needs and if 
not, I can start down the next path of troubleshooting.

-Bonnie

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Michael B. Smith
Sent: Thursday, October 16, 2014 6:33 PM
To: exchange@lists.myitforum.com
Subject: RE: [Exchange] Exchange user mailbox auto-declining meeting requests

I agree with all of this except the new AD account step. That can be a bad 
thing. (Although, when worse comes to worst… it may be the requirement. But I 
doubt it.)

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Daniel Chenault
Sent: Thursday, October 16, 2014 9:18 PM
To: exchange@lists.myitforum.commailto:exchange@lists.myitforum.com
Subject: Re: [Exchange] Exchange user mailbox auto-declining meeting requests

I don't know Android but I do remember algebra; simplify the equation. While 
the user may see it as an inconvenience I would delete the account from the 
phone. Since you can reproduce at will it's a short inconvenience.
If it clears, great, at least you know where to focus. If not my steps would be 
(testing after each one)
Turn on the calendar assistant and force it to run with set-calendar 
processing -identity upn -automateprocessing autoupdate Test that it is 
working. Then turn it off with the same line except -automateprocessing:none. 
Note the lack of a colon for the last command in the first line. Perhaps that 
will clear/overwrite the wart.
New profile
Move the mailbox (creates a new mailbox and imports data with practically zero 
user experience. Maybe it'll filter the wart)
New AD account (disconnect the mailbox, connect to new account)
New mailbox, export to PST, import to new mailbox.
One of those has to get it. You could spend some quality time with AdSIEdit but 
my suspicion is the wart is invalid data imported from 2007 in the mailbox that 
is not exposed in the UI but is read by the code.


On Oct 16, 2014, at 14:06, Miller Bonnie L. 
mille...@mukilteo.wednet.edumailto:mille...@mukilteo.wednet.edu wrote:
This is really strange and I’m not sure where to look at this point.  Exchange 
2013 CU6, two servers in a DAG with both roles behind Barracuda LBs.

I have a user mailbox (not a shared/resource mailbox) that is automatically 
declining meeting requests when there is already a duplicate on her calendar.  
She discovered the problem when a higher up called to ask why she had declined 
her meeting, so I’m not sure how long it’s actually been happening for, but I 
can reproduce the issue with her account.  Her mailbox, like most others (and 
mine) was migrated from Exchange 2007, which was decommissioned in March.

From what I’ve been reading, the booking agent shouldn’t even be running on a 
user mailbox—is that true?  I have also checked and she doesn’t have any rules 
that I can see that are affecting her mailbox.  I also ran

Get-calendarprocessing username | fl

And all of her settings look exactly like mine, which does not auto-decline 
duplicates.  Calendar options for configuring booking in Outlook are not 
available in her Outlook settings (users are running in online mode).

She DOES have an Android phone using activesync and I’m wondering if there 
could be a setting in there causing this, but I’m not even sure what exactly to 
look for.  Ideas are welcome.

Thanks,
Bonnie

[Exchange] Exchange user mailbox auto-declining meeting requests

[Miller Bonnie L .]

This is really strange and I'm not sure where to look at this point.  Exchange 
2013 CU6, two servers in a DAG with both roles behind Barracuda LBs.

I have a user mailbox (not a shared/resource mailbox) that is automatically 
declining meeting requests when there is already a duplicate on her calendar.  
She discovered the problem when a higher up called to ask why she had declined 
her meeting, so I'm not sure how long it's actually been happening for, but I 
can reproduce the issue with her account.  Her mailbox, like most others (and 
mine) was migrated from Exchange 2007, which was decommissioned in March.

From what I've been reading, the booking agent shouldn't even be running on a 
user mailbox-is that true?  I have also checked and she doesn't have any rules 
that I can see that are affecting her mailbox.  I also ran

Get-calendarprocessing username | fl

And all of her settings look exactly like mine, which does not auto-decline 
duplicates.  Calendar options for configuring booking in Outlook are not 
available in her Outlook settings (users are running in online mode).

She DOES have an Android phone using activesync and I'm wondering if there 
could be a setting in there causing this, but I'm not even sure what exactly to 
look for.  Ideas are welcome.

Thanks,
Bonnie

[Exchange] RE: Exchange user mailbox auto-declining meeting requests

[Miller Bonnie L .]

Thanks Michael--I will try changing that for her tomorrow.  Now I'm wondering 
if it's actually just her mailbox, or if it's happening to more people.  As I 
said before, her setting matches mine, as well as a few others I've checked.  
Is that the new default, or maybe something leftover from migration?



-Bonnie


From: listsad...@lists.myitforum.com listsad...@lists.myitforum.com on behalf 
of Michael B. Smith mich...@smithcons.com
Sent: Thursday, October 16, 2014 3:39 PM
To: exchange@lists.myitforum.com
Subject: [Exchange] RE: Exchange user mailbox auto-declining meeting requests

Correct. You need to set AllowConflicts to $true.

And if higher ups are sending recurring meetings that have been declined, you 
may want to fiddle with MaximumConflictInstances and/or 
ConflictPercentageAllowed.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Miller Bonnie L.
Sent: Thursday, October 16, 2014 5:48 PM
To: exchange@lists.myitforum.com
Subject: [Exchange] RE: Exchange user mailbox auto-declining meeting requests

Thanks Michael-there actually isn't any error that I can see, it just 
automatically declines if there is a duplicate.  Here is the command results 
from her mailbox, and all the seemingly relevant settings match up with mine.  
Are you saying I should change the AllowConflicts value to True?  Or, is there 
another command I should/can run to see the values in question?

[cid:image001.png@01CFE970.83D4E410]

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Michael B. Smith
Sent: Thursday, October 16, 2014 2:29 PM
To: exchange@lists.myitforum.commailto:exchange@lists.myitforum.com
Subject: [Exchange] RE: Exchange user mailbox auto-declining meeting requests

The Calendar Attendant and the Resource Booking Attendant are not (quite) the 
same thing. Resource Booking is a superset of Calendar processing.

The Resource Booking Attendant is controlled by the value of 
AutomateProcessing. On a user mailbox, it is always AutoUpdate, and it cannot 
be changed. On a resource mailbox, it is (by default) AutoAccept. On a resource 
mailbox it can be set to any valid value.

Without seeing the actual error, I would guess that either AllowConflicts = 
$false or TentativePendingApproval = $false.

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Miller Bonnie L.
Sent: Thursday, October 16, 2014 5:05 PM
To: 'exchange@lists.myitforum.com'
Subject: [Exchange] Exchange user mailbox auto-declining meeting requests

This is really strange and I'm not sure where to look at this point.  Exchange 
2013 CU6, two servers in a DAG with both roles behind Barracuda LBs.

I have a user mailbox (not a shared/resource mailbox) that is automatically 
declining meeting requests when there is already a duplicate on her calendar.  
She discovered the problem when a higher up called to ask why she had declined 
her meeting, so I'm not sure how long it's actually been happening for, but I 
can reproduce the issue with her account.  Her mailbox, like most others (and 
mine) was migrated from Exchange 2007, which was decommissioned in March.

From what I've been reading, the booking agent shouldn't even be running on a 
user mailbox-is that true?  I have also checked and she doesn't have any rules 
that I can see that are affecting her mailbox.  I also ran

Get-calendarprocessing username | fl

And all of her settings look exactly like mine, which does not auto-decline 
duplicates.  Calendar options for configuring booking in Outlook are not 
available in her Outlook settings (users are running in online mode).

She DOES have an Android phone using activesync and I'm wondering if there 
could be a setting in there causing this, but I'm not even sure what exactly to 
look for.  Ideas are welcome.

Thanks,
Bonnie

RE: [Exchange] RE: Change username at top of Outlook 2010 nit

[Miller Bonnie L .]

Did you verify the UPN version of the account name was also changed?

-Bonnie

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Maglinger, Paul
Sent: Monday, October 13, 2014 1:39 PM
To: 'exchange@lists.myitforum.com'
Subject: RE: [Exchange] RE: Change username at top of Outlook 2010 nit

Sorry for the ambiguity.  SOP is to change all the other stuff when they have a 
name change which we already did.  My Google-Fu only brought up info on how to 
change the account name. when I was looking on how to change the info at the 
top.



From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Michael B. Smith
Sent: Monday, October 13, 2014 3:33 PM
To: exchange@lists.myitforum.commailto:exchange@lists.myitforum.com
Subject: RE: [Exchange] RE: Change username at top of Outlook 2010 nit

The OP said the only thing he changed was the account name.

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Ramatowski, Paul M..
Sent: Monday, October 13, 2014 4:29 PM
To: exchange@lists.myitforum.commailto:exchange@lists.myitforum.com
Subject: Re: [Exchange] RE: Change username at top of Outlook 2010 nit

As was I

On Oct 13, 2014, at 4:27 PM, Richard Stovall 
rich...@gmail.commailto:rich...@gmail.com wrote:
Sorry.  I was assuming those have already been changed.

On Mon, Oct 13, 2014 at 4:21 PM, Michael B. Smith 
mich...@smithcons.commailto:mich...@smithcons.com wrote:
Change the displayName and alias as well.

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com] 
On Behalf Of Richard Stovall
Sent: Monday, October 13, 2014 4:18 PM
To: exchange@lists.myitforum.commailto:exchange@lists.myitforum.com
Subject: Re: [Exchange] RE: Change username at top of Outlook 2010 nit

Agreed.  Totally.

But in those unique instances where no isn't an option, can't you blow away the 
user's Outlook profile and recreate?  Won't that change that one innocuous 
little display item that no one except the user can ever see?

On Mon, Oct 13, 2014 at 4:07 PM, Michael B. Smith 
mich...@smithcons.commailto:mich...@smithcons.com wrote:
just say no.

-Original Message-
From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com] 
On Behalf Of Maglinger, Paul
Sent: Monday, October 13, 2014 4:04 PM
To: New Exchange List 
(exchange@lists.myITforum.commailto:exchange@lists.myITforum.com)
Subject: [Exchange] Change username at top of Outlook 2010 nit

 We're using Outlook 2010 and have a user that got married.  At the top of the 
Outlook 2010 client it says, Inbox - 
usern...@domain.commailto:usern...@domain.com - Microsoft Outlook.  She 
wants that changed.  My Googling is just coming up with how to change the 
account name (File, Account Settings, Account Settings, double-click on the 
account name, More Settings..., and then change Type the name by which you 
would like to refer to this account.  That's not working.  I'm sure there's a 
way to do this, but I'm not finding it.  Can somebody throw me a suggestion?

-Paul

[Exchange] Hyperlink on an attachment

[Miller Bonnie L .]

Sorry about the bad image-I was having trouble capturing, but hopefully you get 
the idea from this of what I'm looking at.  In Outlook 2010 SP2 + hotfixes, I 
have someone who is receiving attachments from a few end-users that have 
hyperlinks on them, so when she clicks to open the attachment, it gets sent to 
the hyperlink instead, which may or may not open.  The hyperlinks I've seen so 
far all look similar to the one below with a google redirect.  These are 
internal users and we are on Exchange 2013 (RTM) CU3.

It's two people so far, and I suspect they may be doing something on the 
sending end for it to come out this way, but wondered if anyone else has seen 
this before I go that route?  I'm not finding what I'm looking for readily when 
searching online.  I've seen it with both pdf and pub files, and when the same 
message is forwarded to me, it includes this hyperlinked information and acts 
the same way.

If you right-click and choose save-as, you can save the attached file and open 
it correctly, so it's not just a picture but an actual attachment.

The person receiving the messages thought it was part of their signature at the 
bottom that is coming up on the screen above the attachment, but on a 
forward, I can right-click the attached files and choose to remove 
hyperlink to fix the issue.

[cid:image001.png@01CF8572.CBBB7620]

Thanks for ideas, or knowledge of how this might get like this,

Bonnie

[Exchange] RE: Public Folders in Exchange 2013?

[Miller Bonnie L .]

Rami-which adsiedit steps did you do?  There were additional adsiedit steps we 
had to do to remove the references on the DBs themselves that I didn't find 
online-I had called Premier/PSS on this one.

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Rami SIK
Sent: Monday, June 09, 2014 4:18 PM
To: exchange@lists.myitforum.com
Subject: [Exchange] RE: Public Folders in Exchange 2013?

Not yet since I am not sure if I should do this or do something with outlook 
clients first!


Rami




From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Michael B. Smith
Sent: Monday, June 09, 2014 4:13 PM
To: exchange@lists.myitforum.commailto:exchange@lists.myitforum.com
Subject: [Exchange] RE: Public Folders in Exchange 2013?

Have you removed all PF databases from all your mailbox databases?

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Rami SIK
Sent: Monday, June 9, 2014 6:57 PM
To: exchange@lists.myitforum.commailto:exchange@lists.myitforum.com
Subject: [Exchange] RE: Public Folders in Exchange 2013?

I finally managed to decommission one of my Exchange 2007 servers: it did not 
go through smoothly because of the infamous Public Folders issue. I ended up 
using ADSIEdit to remove the PF entry for that server, and only then I was able 
to uninstall the product.

Now, I have the last Exchange 2007 server to decommission. I can now follow the 
same process and use ADSIEdit to uninstall that, but I am worried about the 
Outlook 2010 clients that still show a connection to that Exchange 2007 server 
for Public Folders when I do CTRL+Click and select Connection Status.

So, more specifically, I wonder what happens to Outlook 2010 clients connecting 
to that old server for PFs when I uninstall the server. Is there anything I 
need to do for preventing Outlook clients from looking up for PF server?

The other day, I just shutdown Exchange 2007 server to see what would happen, 
and all Outlook 2010 clients got connection errors and stop working until I 
brought that server backup again.

Basically, I do not want to keep PFs anymore on my Exchange 2013 servers.

Rami


From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Miller Bonnie L.
Sent: Friday, June 06, 2014 10:24 AM
To: exchange@lists.myitforum.commailto:exchange@lists.myitforum.com
Subject: [Exchange] RE: Public Folders in Exchange 2013?

We finally migrated the last of our PFs when going from 2007 to 2013.  You 
don't want to just drop or block them-if they really aren't in use and you 
don't want to migrate, then there is a procedure for removing them you'll want 
to follow through with.  We did have trouble with the very last step and had to 
open a Premier case with Microsoft to remove via adsiedit-from what I was 
seeing online, it's a problem quite a few people have run into.

If you haven't already, give this a read:
http://technet.microsoft.com/en-us/library/cc164367(v=exchg.80).aspx

I don't have any experience with migrating them to 2013, so can't speak to that.

-Bonnie

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Rami SIK
Sent: Friday, June 06, 2014 9:34 AM
To: exchange@lists.myitforum.commailto:exchange@lists.myitforum.com
Subject: [Exchange] Public Folders in Exchange 2013?

Hi All,

I would like to get some feedback about dropping Public Folders (PFs) as part 
of a migration from Exchange 2007 to 2013. Although we are not using PFs on 
Exchange 2007, Outlook 2010s are still pointing to 2007 server. So, there are 
two options: (1) migrate the PFs and let Outlook point to 2013 servers so that 
I can take 2007 ones offline, (2) Disable/prevent Outlook 2010 from using PFs 
say through GPO if this is ever possible, and then just drop 2007 servers 
without enabling any PFs on 2013 servers.

Any idea appreciated.


Rami





If this message is not meant for you, do not use it - please let us know, and 
then delete it. We try hard to keep our messages and attachments free of 
viruses and other malicious programs, but are not liable if our precautions 
don't prevent their spread.

[Exchange] RE: Public Folders in Exchange 2013?

[Miller Bonnie L .]

We finally migrated the last of our PFs when going from 2007 to 2013.  You 
don't want to just drop or block them-if they really aren't in use and you 
don't want to migrate, then there is a procedure for removing them you'll want 
to follow through with.  We did have trouble with the very last step and had to 
open a Premier case with Microsoft to remove via adsiedit-from what I was 
seeing online, it's a problem quite a few people have run into.

If you haven't already, give this a read:
http://technet.microsoft.com/en-us/library/cc164367(v=exchg.80).aspx

I don't have any experience with migrating them to 2013, so can't speak to that.

-Bonnie

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Rami SIK
Sent: Friday, June 06, 2014 9:34 AM
To: exchange@lists.myitforum.com
Subject: [Exchange] Public Folders in Exchange 2013?

Hi All,

I would like to get some feedback about dropping Public Folders (PFs) as part 
of a migration from Exchange 2007 to 2013. Although we are not using PFs on 
Exchange 2007, Outlook 2010s are still pointing to 2007 server. So, there are 
two options: (1) migrate the PFs and let Outlook point to 2013 servers so that 
I can take 2007 ones offline, (2) Disable/prevent Outlook 2010 from using PFs 
say through GPO if this is ever possible, and then just drop 2007 servers 
without enabling any PFs on 2013 servers.

Any idea appreciated.


Rami





If this message is not meant for you, do not use it - please let us know, and 
then delete it. We try hard to keep our messages and attachments free of 
viruses and other malicious programs, but are not liable if our precautions 
don't prevent their spread.

[Exchange] RE: Managing DLs with Groups

[Miller Bonnie L .]

1.)Yes, adding the individual admin users in our case (not a domain 
group-not sure if that would work, see below).



2.)Just the managed by permission itself-the checkbox has no effect and 
isn't necessary


3.)Yes, only mail-enabled objects will show in EAC (groups and users).  Not 
sure if you can add non-mail-enabled via powershell, but it might work.  I say 
that because one of our exchange admin user accounts is a non-mail-enabled 
user, but as a member of the mail-enabled DL group that is the primary owner 
group assigned on all DL groups, that account can manage these groups via EAC.


4.)I also created the special RBAC role to limit what the DL owners can do 
as per the following (still applies to 2013).  You will have to see if you want 
this one or not, but in our case it was the only way to limit down the access 
so they can't create/remove DLs in addition to managing memberships:

http://blogs.technet.com/b/exchange/archive/2009/11/18/how-to-manage-groups-that-i-already-own-in-exchange-2010.aspx

Good luck!
-Bonnie

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Aakash Shah
Sent: Wednesday, May 07, 2014 2:06 PM
To: exchange@lists.myitforum.com
Subject: [Exchange] RE: Managing DLs with Groups

Bonnie:

Thanks for the information!  We don't have Exchange 2013 yet (but we should 
shortly), so I'll try this out then.  To clarify, is this what you did to be 
able to use groups in Exchange 2013:

1.   Create a new global Security group called something like Exchange All 
DL Admins and add Exchange Admins into this group.

2.   Assign Exchange All DL Admins to have Managed By permission and 
Manager can update membership list permission.

3.   Log into EAC using one of the users that is now a member of Exchange 
All DL Admins and then add an existing group as an Owner.  Can you specify non 
mail enabled security groups, or can you only choose DL groups?

Thanks,

-Aakash Shah

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Miller Bonnie L.
Sent: Wednesday, May 7, 2014 12:50 PM
To: exchange@lists.myitforum.commailto:exchange@lists.myitforum.com
Subject: [Exchange] RE: Managing DLs with Groups

I ran across this during our 2007 to 2013 migration, and thankfully this is not 
accurate for 2013-you can use groups.

For ours, I first added a new global dl managers group via AD as the manager, 
and then within EAC, using an account that is a member of the global dl 
managers group, I was able to add additional groups for those DLs that are 
delegated for management (previously done via direct AD permissions).

As far as auditing, I'm not sure how they are stored, but you would probably 
have to use PS to get information from the DLs via Exchange, as when viewing 
the managedby attribute in AD, it only shows the first one applied.

-Bonnie

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Aakash Shah
Sent: Wednesday, May 07, 2014 12:32 PM
To: exchange@lists.myitforum.commailto:exchange@lists.myitforum.com
Subject: [Exchange] Managing DLs with Groups

I just learned that with Exchange 2010 and Exchange 2013, you can no longer 
manage DLs with groups as per 
http://blogs.technet.com/b/exchange/archive/2011/05/04/how-to-manage-groups-with-groups-in-exchange-2010.aspx.

Besides the workarounds mentioned on the blog above, are there any other 
workarounds/solutions that people have used to address this problem?  My goal 
primarily is to be able to quickly audit a user's permission to identify what 
access permissions they have, ideally through the Member Of tab along with the 
rest of the user's permissions.

Thanks,

-Aakash Shah

[Exchange] OWA Cannot download attachments - This content is blocked

[Miller Bonnie L .]

Exchange 2013 cu3 (not SP1), I have one user reporting this issue with a file 
that is *.xlsb.  I have not heard of this, so connected remotely to verify the 
issue and take screenshots:
[cid:image001.png@01CF69D9.F73DDCC0]
[cid:image002.png@01CF69D9.F73DDCC0]

If I use an admin account to open her mailbox via OWA from another machine, I 
do not have this problem with the attachment.  I also had the original sender 
forward the same message (with attachment) to my test account and don't have 
problems there either.

Doing some reading, I verified that her OWA mailbox policy is set to our 
Default (the only one defined, so same as my test account).  I also can see 
that *.xlsb is allowed via these PS commands:
Get-OwaMailboxPolicy Default | select -ExpandProperty BlockedFileTypes 
(is not listed)
And
Get-OwaMailboxPolicy Default | select -ExpandProperty AllowedFileTypes 
(is listed)

Office 2010 appears to be correctly installed and otherwise working on the 
Windows 7 SP1 workstation.

I checked both the OWA policy and individual server virtual directory file 
access settings via EAC and boxes are correctly checked to allow Direct File 
access from both public and private devices.

I'm trying to get the person to test on another machine under her account and 
get access to that machine to log on my test account, but is there anything 
else I can be looking at?  Could *.xlsb be blocked on her account individually 
somewhere (and where to look for that)?

Thanks,
Bonnie

RE: [Exchange] OWA Cannot download attachments - This content is blocked

[Miller Bonnie L .]

Sorry-I didn't mention this is two servers in a DAG, all roles, with Barracuda 
hardware LBs in front.

I hadn't checked that-can see her mailbox database is on the other server.  I'm 
moving my test account to her DB right now to try.

Still haven't heard back from her just yet to check some other things.  She's a 
librarian, so pretty busy during the school day, and the workstation is also 
used for checking out books (hence the OWA logon as she needs it).

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of ccollins9
Sent: Wednesday, May 07, 2014 10:09 AM
To: exchange@lists.myitforum.com
Subject: Re: [Exchange] OWA Cannot download attachments - This content is 
blocked

Are your test account and the user account on the same mailbox server and 
database?  Just for SG, have you tried temporarily disabling the built-in 
Exchange malware detection and tried it?  This is a per-server setting on 
Mailbox servers.

On Wed, May 7, 2014 at 12:59 PM, Miller Bonnie L. 
mille...@mukilteo.wednet.edumailto:mille...@mukilteo.wednet.edu wrote:
Exchange 2013 cu3 (not SP1), I have one user reporting this issue with a file 
that is *.xlsb.  I have not heard of this, so connected remotely to verify the 
issue and take screenshots:
[cid:image001.png@01CF69E1.F75318D0]
[cid:image002.png@01CF69E1.F75318D0]

If I use an admin account to open her mailbox via OWA from another machine, I 
do not have this problem with the attachment.  I also had the original sender 
forward the same message (with attachment) to my test account and don't have 
problems there either.

Doing some reading, I verified that her OWA mailbox policy is set to our 
Default (the only one defined, so same as my test account).  I also can see 
that *.xlsb is allowed via these PS commands:
Get-OwaMailboxPolicy Default | select -ExpandProperty BlockedFileTypes 
(is not listed)
And
Get-OwaMailboxPolicy Default | select -ExpandProperty AllowedFileTypes 
(is listed)

Office 2010 appears to be correctly installed and otherwise working on the 
Windows 7 SP1 workstation.

I checked both the OWA policy and individual server virtual directory file 
access settings via EAC and boxes are correctly checked to allow Direct File 
access from both public and private devices.

I'm trying to get the person to test on another machine under her account and 
get access to that machine to log on my test account, but is there anything 
else I can be looking at?  Could *.xlsb be blocked on her account individually 
somewhere (and where to look for that)?

Thanks,
Bonnie

RE: [Exchange] new Exchange server

[Miller Bonnie L .]

Maybe I'm misunderstanding, but are you actually using xxx.local for internal 
e-mail addresses, or do all of your users have external addresses assigned that 
have the xxx.ca domain name attached somewhere?  If the latter, just use the 
external name only and publish that name to all internal users and 
locations--no domain rename required.

-Original Message-
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Craig Wardlaw
Sent: Wednesday, May 07, 2014 10:11 AM
To: exchange@lists.myitforum.com
Subject: [Exchange] new Exchange server

I am currently setting up a single exchange server to replace hosted email and 
after doing some reading it looks like getting the appropriate cert for it may 
cause more issues. I have the internal domain xxx.local and the external domain 
xxx.ca.

From Google I see that I will no longer be able to get the internal and 
external domains on the cert and there are a couple of ways to mitigate the 
problem, I'm not a fan of migrating the domain considering I'm pretty much the 
only IT person.

Just wondering how some of the list people are or have dealt with this 


Thanks Craig

RE: [Exchange] OWA Cannot download attachments - This content is blocked

[Miller Bonnie L .]

No problems with my test account on the same server and DB from here, and there 
is only one Malware filter defined, so it should now be using the same one that 
she has.  Honestly, it feels more like a public/private computer issue as the 
malware filter is actually set to delete infected messages, and this is just 
blocking from opening (but not under my admin account from here)-nothing is 
removed.

Unless there are additional ideas, I'll probably have to wait until I can have 
more time with her machine/account.

Thanks,
Bonnie

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Miller Bonnie L.
Sent: Wednesday, May 07, 2014 10:53 AM
To: exchange@lists.myitforum.com
Subject: RE: [Exchange] OWA Cannot download attachments - This content is 
blocked

Sorry-I didn't mention this is two servers in a DAG, all roles, with Barracuda 
hardware LBs in front.

I hadn't checked that-can see her mailbox database is on the other server.  I'm 
moving my test account to her DB right now to try.

Still haven't heard back from her just yet to check some other things.  She's a 
librarian, so pretty busy during the school day, and the workstation is also 
used for checking out books (hence the OWA logon as she needs it).

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of ccollins9
Sent: Wednesday, May 07, 2014 10:09 AM
To: exchange@lists.myitforum.commailto:exchange@lists.myitforum.com
Subject: Re: [Exchange] OWA Cannot download attachments - This content is 
blocked

Are your test account and the user account on the same mailbox server and 
database?  Just for SG, have you tried temporarily disabling the built-in 
Exchange malware detection and tried it?  This is a per-server setting on 
Mailbox servers.

On Wed, May 7, 2014 at 12:59 PM, Miller Bonnie L. 
mille...@mukilteo.wednet.edumailto:mille...@mukilteo.wednet.edu wrote:
Exchange 2013 cu3 (not SP1), I have one user reporting this issue with a file 
that is *.xlsb.  I have not heard of this, so connected remotely to verify the 
issue and take screenshots:
[cid:image001.png@01CF69E4.DABAF820]
[cid:image002.png@01CF69E4.DABAF820]

If I use an admin account to open her mailbox via OWA from another machine, I 
do not have this problem with the attachment.  I also had the original sender 
forward the same message (with attachment) to my test account and don't have 
problems there either.

Doing some reading, I verified that her OWA mailbox policy is set to our 
Default (the only one defined, so same as my test account).  I also can see 
that *.xlsb is allowed via these PS commands:
Get-OwaMailboxPolicy Default | select -ExpandProperty BlockedFileTypes 
(is not listed)
And
Get-OwaMailboxPolicy Default | select -ExpandProperty AllowedFileTypes 
(is listed)

Office 2010 appears to be correctly installed and otherwise working on the 
Windows 7 SP1 workstation.

I checked both the OWA policy and individual server virtual directory file 
access settings via EAC and boxes are correctly checked to allow Direct File 
access from both public and private devices.

I'm trying to get the person to test on another machine under her account and 
get access to that machine to log on my test account, but is there anything 
else I can be looking at?  Could *.xlsb be blocked on her account individually 
somewhere (and where to look for that)?

Thanks,
Bonnie

RE: [Exchange] OWA Cannot download attachments - This content is blocked

[Miller Bonnie L .]

Yep, she reported back that it works from another machine, so I'm having her 
leave this machine on/logged off after leaving today so I can have a couple of 
hours with it as needed, early in the AM before the kids arrive.  It's an 
internal domain-joined desktop machine, there is likely something wrong with it 
or her cached roaming profile copy.

We did roll out IE 10 and the GPP settings to switch from 9 to 10 in the last 2 
to 3 months, so it might be that it's not getting new policies updated/applied 
successfully or some such issue (which could affect IE security settings/zones).

-Bonnie

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of ccollins9
Sent: Wednesday, May 07, 2014 11:15 AM
To: exchange@lists.myitforum.com
Subject: Re: [Exchange] OWA Cannot download attachments - This content is 
blocked

Yeah I would definitely have her try from another computer. Is she on a 
corporate or personal computer?  It could be something as simple as IE security 
settings or a 3rd party security product running on that computer.  I think 
you've successfully ruled out an issue with the server/OWA site.  I would focus 
on her profile and/or computer maybe.

On Wed, May 7, 2014 at 2:09 PM, Miller Bonnie L. 
mille...@mukilteo.wednet.edumailto:mille...@mukilteo.wednet.edu wrote:
No problems with my test account on the same server and DB from here, and there 
is only one Malware filter defined, so it should now be using the same one that 
she has.  Honestly, it feels more like a public/private computer issue as the 
malware filter is actually set to delete infected messages, and this is just 
blocking from opening (but not under my admin account from here)-nothing is 
removed.

Unless there are additional ideas, I'll probably have to wait until I can have 
more time with her machine/account.

Thanks,
Bonnie

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com] 
On Behalf Of Miller Bonnie L.
Sent: Wednesday, May 07, 2014 10:53 AM
To: exchange@lists.myitforum.commailto:exchange@lists.myitforum.com
Subject: RE: [Exchange] OWA Cannot download attachments - This content is 
blocked

Sorry-I didn't mention this is two servers in a DAG, all roles, with Barracuda 
hardware LBs in front.

I hadn't checked that-can see her mailbox database is on the other server.  I'm 
moving my test account to her DB right now to try.

Still haven't heard back from her just yet to check some other things.  She's a 
librarian, so pretty busy during the school day, and the workstation is also 
used for checking out books (hence the OWA logon as she needs it).

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of ccollins9
Sent: Wednesday, May 07, 2014 10:09 AM
To: exchange@lists.myitforum.commailto:exchange@lists.myitforum.com
Subject: Re: [Exchange] OWA Cannot download attachments - This content is 
blocked

Are your test account and the user account on the same mailbox server and 
database?  Just for SG, have you tried temporarily disabling the built-in 
Exchange malware detection and tried it?  This is a per-server setting on 
Mailbox servers.

On Wed, May 7, 2014 at 12:59 PM, Miller Bonnie L. 
mille...@mukilteo.wednet.edumailto:mille...@mukilteo.wednet.edu wrote:
Exchange 2013 cu3 (not SP1), I have one user reporting this issue with a file 
that is *.xlsb.  I have not heard of this, so connected remotely to verify the 
issue and take screenshots:
[cid:image001.png@01CF69EF.7BA64C30]
[cid:image002.png@01CF69EF.7BA64C30]

If I use an admin account to open her mailbox via OWA from another machine, I 
do not have this problem with the attachment.  I also had the original sender 
forward the same message (with attachment) to my test account and don't have 
problems there either.

Doing some reading, I verified that her OWA mailbox policy is set to our 
Default (the only one defined, so same as my test account).  I also can see 
that *.xlsb is allowed via these PS commands:
Get-OwaMailboxPolicy Default | select -ExpandProperty BlockedFileTypes 
(is not listed)
And
Get-OwaMailboxPolicy Default | select -ExpandProperty AllowedFileTypes 
(is listed)

Office 2010 appears to be correctly installed and otherwise working on the 
Windows 7 SP1 workstation.

I checked both the OWA policy and individual server virtual directory file 
access settings via EAC and boxes are correctly checked to allow Direct File 
access from both public and private devices.

I'm trying to get the person to test on another machine under her account and 
get access to that machine to log on my test account, but is there anything 
else I can be looking at?  Could *.xlsb be blocked on her account individually 
somewhere (and where to look for that)?

Thanks,
Bonnie

RE: [Exchange] OWA Cannot download attachments - This content is blocked

[Miller Bonnie L .]

If you mean on the client, I'll check that tomorrow when I get the machine-We 
have SCEP, but I've not seen anything like this (yet).

Just curious, but if she hadn't tested yet from another machine, would you see 
a reason to try disabling AV/malware filtering on the server if it's just the 
one person's mailbox not working in the same database as working mailboxes, 
same e-mail sent to both?

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Michael B. Smith
Sent: Wednesday, May 07, 2014 11:19 AM
To: exchange@lists.myitforum.com
Subject: RE: [Exchange] OWA Cannot download attachments - This content is 
blocked

What about AV?

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Miller Bonnie L.
Sent: Wednesday, May 7, 2014 2:10 PM
To: exchange@lists.myitforum.commailto:exchange@lists.myitforum.com
Subject: RE: [Exchange] OWA Cannot download attachments - This content is 
blocked

No problems with my test account on the same server and DB from here, and there 
is only one Malware filter defined, so it should now be using the same one that 
she has.  Honestly, it feels more like a public/private computer issue as the 
malware filter is actually set to delete infected messages, and this is just 
blocking from opening (but not under my admin account from here)-nothing is 
removed.

Unless there are additional ideas, I'll probably have to wait until I can have 
more time with her machine/account.

Thanks,
Bonnie

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Miller Bonnie L.
Sent: Wednesday, May 07, 2014 10:53 AM
To: exchange@lists.myitforum.commailto:exchange@lists.myitforum.com
Subject: RE: [Exchange] OWA Cannot download attachments - This content is 
blocked

Sorry-I didn't mention this is two servers in a DAG, all roles, with Barracuda 
hardware LBs in front.

I hadn't checked that-can see her mailbox database is on the other server.  I'm 
moving my test account to her DB right now to try.

Still haven't heard back from her just yet to check some other things.  She's a 
librarian, so pretty busy during the school day, and the workstation is also 
used for checking out books (hence the OWA logon as she needs it).

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of ccollins9
Sent: Wednesday, May 07, 2014 10:09 AM
To: exchange@lists.myitforum.commailto:exchange@lists.myitforum.com
Subject: Re: [Exchange] OWA Cannot download attachments - This content is 
blocked

Are your test account and the user account on the same mailbox server and 
database?  Just for SG, have you tried temporarily disabling the built-in 
Exchange malware detection and tried it?  This is a per-server setting on 
Mailbox servers.

On Wed, May 7, 2014 at 12:59 PM, Miller Bonnie L. 
mille...@mukilteo.wednet.edumailto:mille...@mukilteo.wednet.edu wrote:
Exchange 2013 cu3 (not SP1), I have one user reporting this issue with a file 
that is *.xlsb.  I have not heard of this, so connected remotely to verify the 
issue and take screenshots:
[cid:image001.png@01CF69F0.1FDEDB00]
[cid:image002.png@01CF69F0.1FDEDB00]

If I use an admin account to open her mailbox via OWA from another machine, I 
do not have this problem with the attachment.  I also had the original sender 
forward the same message (with attachment) to my test account and don't have 
problems there either.

Doing some reading, I verified that her OWA mailbox policy is set to our 
Default (the only one defined, so same as my test account).  I also can see 
that *.xlsb is allowed via these PS commands:
Get-OwaMailboxPolicy Default | select -ExpandProperty BlockedFileTypes 
(is not listed)
And
Get-OwaMailboxPolicy Default | select -ExpandProperty AllowedFileTypes 
(is listed)

Office 2010 appears to be correctly installed and otherwise working on the 
Windows 7 SP1 workstation.

I checked both the OWA policy and individual server virtual directory file 
access settings via EAC and boxes are correctly checked to allow Direct File 
access from both public and private devices.

I'm trying to get the person to test on another machine under her account and 
get access to that machine to log on my test account, but is there anything 
else I can be looking at?  Could *.xlsb be blocked on her account individually 
somewhere (and where to look for that)?

Thanks,
Bonnie

RE: [Exchange] new Exchange server

[Miller Bonnie L .]

It sounds like you're actually involved in a mail migration/cutover then from 
hosted to on-premise, but I think you're on the right track with this.  Yes, 
you do need DNS resolution internally somehow to resolve xxx.ca, which it 
sounds like you also need to migrate from hosted to on-premise at the same time 
as your mail migration?  

If you're not migrating DNS, then you likely already have resolution from 
internal, or your machines wouldn't be getting their mail now.  In that case, 
just point your internal autodiscover to the external name via a cname and you 
should be set for resolution.  The rest of it is all in the Exchange 
configuration of internal/external urls.

Check this out:
http://blogs.technet.com/b/exchange/archive/2014/02/28/namespace-planning-in-exchange-2013.aspx

-Bonnie

-Original Message-
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Craig Wardlaw
Sent: Wednesday, May 07, 2014 12:12 PM
To: exchange@lists.myitforum.com
Subject: RE: [Exchange] new Exchange server

I don't think I explained what I see as a problem. Right now all users have 
u...@xxx.ca via hosted email . I have added the xxx.ca to the accepted domains 
on the exchange, added a rule to the firewall to direct any email sent to the 
xxx.ca domain to the exchange box but I read that the certificate issuers will 
no longer allow an xxx.local address on the cert.
So I will have devices that will look for the internal autodiscover etc when 
inside the firewall but will need to look for the external when not on the 
network( blackberrys etc, not necessarily domain members) . So if I set up a 
dns zone for the xxx.ca on my internal dns to point to the exchange for 
autodiscover and OWA etc , then I will be able to use only the external url for 
both internal and external.So then can I just get a wildcard cert for the 
external domain name 


Sorry if this is a bit long winded or if I have the completely wrong end of the 
stick on how to accomplish this 

Cheers Craig


-Original Message-
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Kennedy, Jim
Sent: Wednesday, May 07, 2014 2:10 PM
To: exchange@lists.myitforum.com
Subject: RE: [Exchange] new Exchange server

This is what I have been trying to figure out how to say since the OP. Just 
couldn't get the words right.

-Original Message-
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Miller Bonnie L.
Sent: Wednesday, May 7, 2014 1:58 PM
To: exchange@lists.myitforum.com
Subject: RE: [Exchange] new Exchange server

Maybe I'm misunderstanding, but are you actually using xxx.local for internal 
e-mail addresses, or do all of your users have external addresses assigned that 
have the xxx.ca domain name attached somewhere?  If the latter, just use the 
external name only and publish that name to all internal users and 
locations--no domain rename required.

-Original Message-
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Craig Wardlaw
Sent: Wednesday, May 07, 2014 10:11 AM
To: exchange@lists.myitforum.com
Subject: [Exchange] new Exchange server

I am currently setting up a single exchange server to replace hosted email and 
after doing some reading it looks like getting the appropriate cert for it may 
cause more issues. I have the internal domain xxx.local and the external domain 
xxx.ca.

From Google I see that I will no longer be able to get the internal and 
external domains on the cert and there are a couple of ways to mitigate the 
problem, I'm not a fan of migrating the domain considering I'm pretty much the 
only IT person.

Just wondering how some of the list people are or have dealt with this 


Thanks Craig

[Exchange] RE: Managing DLs with Groups

[Miller Bonnie L .]

I ran across this during our 2007 to 2013 migration, and thankfully this is not 
accurate for 2013-you can use groups.

For ours, I first added a new global dl managers group via AD as the manager, 
and then within EAC, using an account that is a member of the global dl 
managers group, I was able to add additional groups for those DLs that are 
delegated for management (previously done via direct AD permissions).

As far as auditing, I'm not sure how they are stored, but you would probably 
have to use PS to get information from the DLs via Exchange, as when viewing 
the managedby attribute in AD, it only shows the first one applied.

-Bonnie

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Aakash Shah
Sent: Wednesday, May 07, 2014 12:32 PM
To: exchange@lists.myitforum.com
Subject: [Exchange] Managing DLs with Groups

I just learned that with Exchange 2010 and Exchange 2013, you can no longer 
manage DLs with groups as per 
http://blogs.technet.com/b/exchange/archive/2011/05/04/how-to-manage-groups-with-groups-in-exchange-2010.aspx.

Besides the workarounds mentioned on the blog above, are there any other 
workarounds/solutions that people have used to address this problem?  My goal 
primarily is to be able to quickly audit a user's permission to identify what 
access permissions they have, ideally through the Member Of tab along with the 
rest of the user's permissions.

Thanks,

-Aakash Shah

[Exchange] RE: Managing DLs with Groups

[Miller Bonnie L .]

Yes, that was also one I didn't know about right away as it appears in 2010 
docs, but wasn't really showing in the 2013 stuff--wasn't hard to find though 
after the EAC/GUI was prompting me to upgrade groups.

While we're sharing, I recall the first error message I got when someone 
couldn't manage their delegated DLs (after upgrading), the errors led me to 
this kb, which I see still lists 2013 as not being able to use groups:
http://support.microsoft.com/kb/2586832

The second resolution link is the post from the OP, but the first link is also 
something we had to do to limit the abilities of DL managers the way we wanted.

-B

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Rami SIK
Sent: Wednesday, May 07, 2014 1:15 PM
To: exchange@lists.myitforum.com
Subject: [Exchange] RE: Managing DLs with Groups

Take a look at here:
http://blogs.technet.com/b/exchange/archive/2009/11/18/3408844.aspx

We also needed to run a PS script to upgrade our DLs during migrating from 
Exchange 2007 to 2013! That script is provided in the Exchange 2013 scripts 
folder - Manage-GroupManagementRole.ps1, you may need to use ForceUpgrade 
switch!

Regards,
Rami


From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Aakash Shah
Sent: Wednesday, May 07, 2014 12:32 PM
To: exchange@lists.myitforum.commailto:exchange@lists.myitforum.com
Subject: [Exchange] Managing DLs with Groups

I just learned that with Exchange 2010 and Exchange 2013, you can no longer 
manage DLs with groups as per 
http://blogs.technet.com/b/exchange/archive/2011/05/04/how-to-manage-groups-with-groups-in-exchange-2010.aspx.

Besides the workarounds mentioned on the blog above, are there any other 
workarounds/solutions that people have used to address this problem?  My goal 
primarily is to be able to quickly audit a user's permission to identify what 
access permissions they have, ideally through the Member Of tab along with the 
rest of the user's permissions.

Thanks,

-Aakash Shah




If this message is not meant for you, do not use it - please let us know, and 
then delete it. We try hard to keep our messages and attachments free of 
viruses and other malicious programs, but are not liable if our precautions 
don't prevent their spread.

[Exchange] RE: Folder view update problems

[Miller Bonnie L .]

Yes, thanks Michael, that is me with Exchange 2013 and Outlook 2010.  I hadn't 
reported back yet as I don't have a resolution, but I've had a premier case 
open with Microsoft since the week of 1/24.

After gathering a lot of data and other testing the previous week, the person 
I've been working with said there was a similar bug identified in Exchange 2010 
(looks like the link you have sent) and they think the code is likely basically 
the same in 2013.  As of yesterday morning, they were waiting for the 
escalation engineer to finish a critsit case so they can do a code review.

I'll let you know if I hear more!

-Bonnie

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Michael B. Smith
Sent: Tuesday, February 04, 2014 4:51 PM
To: exchange@lists.myitforum.com
Subject: [Exchange] Folder view update problems

Didn't someone recently bring up this problem?

http://support.microsoft.com/kb/2925273/en-us
Folder views are not updated when you arrange by categories in Outlook after 
you apply Exchange Server 2010 Service Pack 3 Update Rollup 3 or Update Rollup 4

A workaround exists, a patch is in development.

RE: [Exchange] Inbox refresh issues

[Miller Bonnie L .]

So, she isn't in the office today, but I started changing the views around on 
my own inbox, and voila, caused it to happen.  I changed a lot of things around 
and have it narrowed down to the cause, but not sure how to fix it, other than 
telling someone not to use a view they've always used.

To reproduce the issue, I can start by setting the view back to defaults on my 
inbox with the Reset current view button while on Compact, and it works 
normally.  If I then edit my view with View settings, then add a group by, it 
starts to have the problem.  I've reproduced it both with Name Ascending (what 
she is using), and with subject.  I also see that the Group by function is 
where you can set how the groupings expand, collapse, or stay as last viewed, 
which is also not working right.  I've tried both with the Automatically group 
by.. box checked and with it not checked.  It also doesn't matter if I have a 
reading pane or not.

I also found that once I've deleted a message and the view doesn't refresh (if 
you click away and back the reading pane changes to This item cannot be 
displayed...), if I use one of the expand or collapse arrows on a grouping, 
that seems to be the only thing that will force a refresh.  F5 doesn't work, 
send/receive doesn't help-the only other thing to do is close Outlook and 
reopen, or use ctrl-right-click on the Outlook tray icon, connection status, 
and reconnect.

I found a few articles listing out Outlook 2010 Post SP2 hotfixes, but nothing 
that seems to address this issue, and we're running in ONLINE mode, so no OST 
involved here (nor psts).  We're on the current RU (3) for Exchange 2013.

Unless someone has another idea of a setting to check, I'm thinking about 
opening a Premier case.  I'm pretty certain  this started sometime after 
migrating her mailbox to Exchange 2013, but it took a while to get to me.  Or, 
it could have started after RU3 was applied.  I don't normally run in a group 
by view, so haven't seen it myself until today.

Thanks,
Bonnie

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Miller Bonnie L.
Sent: Friday, January 17, 2014 6:52 AM
To: exchange@lists.myitforum.com
Subject: RE: [Exchange] Inbox refresh issues

Good idea-I'll see if I can have them try another system, even just for a few 
minutes.  She's a pretty busy administrator, so I'm not sure if it's something 
they can try today, but the problem shows up pretty quickly.

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Candee
Sent: Friday, January 17, 2014 4:50 AM
To: exchange@lists.myitforum.commailto:exchange@lists.myitforum.com
Subject: Re: [Exchange] Inbox refresh issues

Hi Bonnie,

If she opens Outlook on a different machine does she have the same issues?
That would answer the Windows profile question.




On Thu, Jan 16, 2014 at 4:32 PM, Miller Bonnie L. 
mille...@mukilteo.wednet.edumailto:mille...@mukilteo.wednet.edu wrote:
My google-fu is really off today-just not finding anything helpful on this one. 
 Looks like there were old problems with this back with Outlook 2003 and 
Exchange 2010, but that's not what we're on.  Client is Windows 7 SP1+patches, 
Outlook 2010 SP2+ patches in ONLINE mode, Servers are WS12, Exchange 2013 RU3 
(DAG+Lbs).  Her mailbox was migrated from E2k7SP3 RU12.

I have a user who is having a problem where she is in her Outlook inbox, sorted 
by name, preview pane on the left side, no conversation view.  When she uses 
either the X on the ribbon or taps the delete key on the keyboard, the message 
actually deletes, but the screen does not refresh to show that it happened.  We 
know it's gone because if you try to actually open the message, you get the 
error that it's gone.  When she first opens her inbox, and at other times, she 
is also seeing the cursor jump to the top, with all items expanded.  If you 
close and re-open Outlook, it seems to work for a few minutes, but then reverts 
to the failing to refresh state.

I've tried modifying the view on the problem inbox, which didn't help.  I then 
ran the /cleanviews switch with Outlook-that worked, but didn't help.  Today, 
I've given her a new Outlook profile, but that also didn't help.  Haven't tried 
deleting her Windows roaming profile yet, but I don't know what would be stored 
there that the new Outlook profile wouldn't fix.

All of our accounts have been migrated for a while, and others (running similar 
configuration) are not reporting this type of issue.  I'm also not seeing 
anything wrong on the workstation.

Ideas?

Thanks in advance,
-Bonnie

[Exchange] set-casmailbox

[Miller Bonnie L .]

Exchange 2013, just figured out that the changes I've made to my Default OWA 
policy aren't applying to users, even after both servers have been power-cycled 
(restarting all services).  So, after a little digging, I see there is an 
attribute on each account that isn't populated, maybe because accounts are 
being migrated from 2007.  If I run:

Get-casmailbox Last First M. | fl

I'm looking at OWAMailboxPolicy.  For most accounts it's blank, unless I 
assign it using EAC on the user to the new Default policy (we only have the 
one right now).

Two questions:


1)  If I pre-assign the value to all users, will there be any negative 
impact to 2007 accounts, which don't have it set to any value?

2)  Looking to script this one of two ways, depending on the answer to #1.  
If it doesn't matter if I set this for 2007 accounts, I think I could just run:

Get-casmailbox -resultsize -unlimited | set-casmailbox -owamailboxpolicy 
Default

   But, if it really should only be assigned to 2013 users, I'd 
like to add some kind of parameter that says if the ServerName attribute 
equals YYY or ZZZ in the get-casmailbox command.  How to do that part with PS?  
Then I could just script it to run daily until migration is complete (or 
forever, if it doesn't set for any new users either).

Thanks,
Bonnie

[Exchange] RE: set-casmailbox

[Miller Bonnie L .]

The easy way-nice.  Thanks Michael!

-B

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On 
Behalf Of Michael B. Smith
Sent: Monday, October 28, 2013 1:11 PM
To: exchange@lists.myitforum.com
Subject: [Exchange] RE: set-casmailbox

Just set the policy on everyone.

From: listsad...@lists.myitforum.commailto:listsad...@lists.myitforum.com 
[mailto:listsad...@lists.myitforum.com] On Behalf Of Miller Bonnie L.
Sent: Monday, October 28, 2013 3:49 PM
To: exchange@lists.myitforum.commailto:exchange@lists.myitforum.com
Subject: [Exchange] set-casmailbox

Exchange 2013, just figured out that the changes I've made to my Default OWA 
policy aren't applying to users, even after both servers have been power-cycled 
(restarting all services).  So, after a little digging, I see there is an 
attribute on each account that isn't populated, maybe because accounts are 
being migrated from 2007.  If I run:

Get-casmailbox Last First M. | fl

I'm looking at OWAMailboxPolicy.  For most accounts it's blank, unless I 
assign it using EAC on the user to the new Default policy (we only have the 
one right now).

Two questions:


1)  If I pre-assign the value to all users, will there be any negative 
impact to 2007 accounts, which don't have it set to any value?

2)  Looking to script this one of two ways, depending on the answer to #1.  
If it doesn't matter if I set this for 2007 accounts, I think I could just run:

Get-casmailbox -resultsize -unlimited | set-casmailbox -owamailboxpolicy 
Default

   But, if it really should only be assigned to 2013 users, I'd 
like to add some kind of parameter that says if the ServerName attribute 
equals YYY or ZZZ in the get-casmailbox command.  How to do that part with PS?  
Then I could just script it to run daily until migration is complete (or 
forever, if it doesn't set for any new users either).

Thanks,
Bonnie

RE: [Exchange] LinkedIn Intro

[Miller Bonnie L .]

The boss asked this question today too, and here is something our network admin 
found:

http://threatpost.com/linkedin-intro-app-equivalent-to-man-in-the-middle-attack-experts/102683


-B


From: listsad...@lists.myitforum.com listsad...@lists.myitforum.com on behalf 
of Micheal Espinola Jr michealespin...@gmail.com
Sent: Friday, October 25, 2013 2:03 PM
To: exchange@lists.myitforum.com
Subject: Re: [Exchange] LinkedIn Intro

Blocking the LinkedIn website, or is LinkedIn Intro something different?

--
Espi



On Fri, Oct 25, 2013 at 10:07 AM, Adm 
sms...@gmail.commailto:sms...@gmail.com wrote:
Anyone blocking this app on iPhones in their organization?
We're about to do this.

Opinions?

Thx

[Exchange] Exchange 2013 touch-narrow toolbar disappearing using OWA in Safari on IOS7

[Miller Bonnie L .]

I've done a little searching, but can't find anything on this.  Can anyone else 
confirm or deny this is an issue?

2xExchange 2013 CU2, DAG, on WS12 servers, both roles, with Barracuda hardware 
LBs on the front.  Most mailboxes are not migrated yet from 2007 (SP3 RU10), 
but all mail is routing in/out using the new servers and my mailboxes are on 
there for dog food and configuration.

I've been using OWA on my phone for the last few days as I'm at a class with no 
other Internet access during the day, but am having an issue.  This worked fine 
when I last used it heavily in early September, and the only thing I can think 
of besides server-side patches would be the big update to IOS7, now 7.0.2.  
When I use Safari to open OWA (it is using default touch-narrow mode) I briefly 
get the blue toolbar to pop up (not sure if that is what it is actually 
called), and then the bar disappears.  This would be the important bar that has 
things like the Send and Forward buttons-basically any action you can take 
based on the context/screen you are in at the time.

If I rotate my phone sideways, I can tap on the toolbar briefly to get one 
command before it disappears again. Then, have to rotate twice for it to 
reappear to then click once, disappear, rotate twice, click once, ad. naseaum.  
When it disappears, I can see a small blue line, like maybe the bar is getting 
moved behind the new Safari toolbar at the bottom of the screen, but that is 
just a guess.

If I load up Chrome on IOS7, I don't have the issue.

Thanks,
Bonnie