Re: [Exchange] OT: Forcing a Server's AD Site

2015-04-29 Thread Kurt Buff
That customer sounds mildly hexed... Kurt On Wed, Apr 29, 2015 at 5:48 PM, Michael B. Smith mich...@smithcons.com wrote: You may find this helpful: New blog post: Forcing a Server’s Active Directory Site http://bit.ly/1OGb4OK

Re: [Exchange] Exchange 2010 search-mailbox problem

2015-06-08 Thread Kurt Buff
thread). I know it's not sexy, but it gets the job done. When setting up the search, the display name for the target mailbox is Discovery Search Mailbox. Don't know if that helps. On Mon, Jun 8, 2015 at 3:21 PM, Kurt Buff kurt.b...@gmail.com wrote: All, Running Exchange 2010 SP3+, and am

Re: [Exchange] Exchange 2010 search-mailbox problem

2015-06-08 Thread Kurt Buff
these searches from the GUI (or on the shiny new archiver mentioned in another thread). I know it's not sexy, but it gets the job done. When setting up the search, the display name for the target mailbox is Discovery Search Mailbox. Don't know if that helps. On Mon, Jun 8, 2015 at 3:21 PM, Kurt

[Exchange] Re: Exchange 2010 search-mailbox problem

2015-06-10 Thread Kurt Buff
OrganizationId : OriginatingServer : dc5.example.com On Mon, Jun 8, 2015 at 12:21 PM, Kurt Buff kurt.b...@gmail.com wrote: All, Running Exchange 2010 SP3+, and am trying to find a couple of emails that seem to have gone missing. I'm running the command below

Re: [Exchange] Reject mail from 'similar' mail domains

2015-07-28 Thread Kurt Buff
If you have an external spam filter, does it have the capability to reject mail from domains that are less than X days old? Kurt On Tue, Jul 28, 2015 at 3:57 AM, Patrick Whiteside patrick.whites...@blue256.co.uk wrote: We have a client who is under a fairly targeted attack and it doesn’t

Re: [Exchange] PS Script to see if specific DL has had members added recently to offset admins adding wrong people

2015-07-31 Thread Kurt Buff
Something like this might work for you: Send an email with Powershell http://powershell.com/cs/media/p/251.aspx Using the data gathered here: PS C:\BatchFiles $Names = Get-ADGroupMember exadmins | select name PS C:\BatchFiles $LastChanged = Get-ADGroup CriticalGroupName -properties WhenChanged

[Exchange] Odd error: Exchange2010, Outlook 2013

2015-08-10 Thread Kurt Buff
Both Exchange and Outlook are patched - though Oulook is a month behind. I have one user who cannot open Outlook. Attempts made on multiple machines, including machines he's never logged into before, always the same message: --- Microsoft Outlook

Re: [Exchange] Odd error: Exchange2010, Outlook 2013

2015-08-10 Thread Kurt Buff
remember that setting being unchecked when I was looking through the GUI for clues. Thanks to Michael, DR and Adam (in reverse order of reply) for the suggestions. Kurt On Mon, Aug 10, 2015 at 4:03 PM, Kurt Buff kurt.b...@gmail.com wrote: Both Exchange and Outlook are patched - though Oulook

Re: [Exchange] Restricting SMTP relay to internal and 1 external domain

2015-07-22 Thread Kurt Buff
be an interesting way of handling this... Kurt On 22 Jul 2015 17:59, Kurt Buff kurt.b...@gmail.com wrote: We have a similar situation here, also using Exchange 2010 - we have two classes of non-human email senders, those that send emails for internal use only and are allowed to send

Re: [Exchange] Restricting SMTP relay to internal and 1 external domain

2015-07-22 Thread Kurt Buff
VMs is out, and we want anything new to be going directly to the 2010 HT/CAS servers, rather than through additional servers. On 22 Jul 2015 19:48, Kurt Buff kurt.b...@gmail.com wrote: On Wed, Jul 22, 2015 at 10:42 AM, Tony Patton apco...@gmail.com wrote: That's what we have here, but the issue

Re: [Exchange] Problem with attachments

2015-10-22 Thread Kurt Buff
, I would have to guess some third party becoming involved, > most likely AV. > > In the blank email, are there message headers? > > Is there some AV configuration difference between en-us and en-gb? > > -Original Message- > From: listsad...@lists.myitforum.com [mailto:l

Re: [Exchange] Missed the Memo on Shared Group Mailboxes

2015-10-27 Thread Kurt Buff
This has not been my experience. We're on the same version of Exchange, and giving staff with O2013 Full Access permission does make the mailbox show up in the lefthand pane - but sometimes it takes a restart of Outlook for it to happen. But, we certainly aren't trying to share mailboxes with

Re: [Exchange] Problem with attachments

2015-10-22 Thread Kurt Buff
One thing I forgot to mention: The UK office uses the US Exchange server - it's not local to them. Kurt On Thu, Oct 22, 2015 at 8:54 AM, Kurt Buff <kurt.b...@gmail.com> wrote: > Exchange 2010, fully patched, and a mix of 2010 and 2013 clients. > > I've had 4 people from our UK

[Exchange] So, how did they plant the malware?

2015-10-07 Thread Kurt Buff
The article is short on details, and so is the security firm's PDF. Very scary, but nothing in the way of actionable intelligence, AFAICT http://arstechnica.com/security/2015/10/new-outlook-mailserver-attack-steals-massive-number-of-passwords/

Re: [Exchange] So, how did they plant the malware?

2015-10-07 Thread Kurt Buff
; > Also, how was the DLL injected? Was the server already compromised? If so, > game over and it isn't OWA's fault. > > -Original Message- > From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] > On Behalf Of Kurt Buff > Sent: Wednesday, Octo

Re: [Exchange] So, how did they plant the malware?

2015-10-07 Thread Kurt Buff
ame over and it isn't OWA's fault. > > -Original Message- > From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] > On Behalf Of Kurt Buff > Sent: Wednesday, October 7, 2015 11:32 AM > To: excha...@lists.myitforum.com; ntsysadm > Subject: [Excha

Re: [NTSysADM] RE: [Exchange] So, how did they plant the malware?

2015-10-07 Thread Kurt Buff
gt; > We've been discussing this on a couple of closed lists. Long-story short - > insufficient data at this time. > > The wording of the story is also of some concern. "Outlook mailserver"? > Not Exchange? > > Also, how was the DLL injected? Was the server already comp

Re: [Exchange] Problem counting/tracking emails - exchange 2010, fully patched

2015-11-17 Thread Kurt Buff
http://exchangepedia.com/2009/02/are-distribution-groups-really-being-used.html > > -Original Message- > From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] > On Behalf Of Kurt Buff > Sent: Tuesday, November 17, 2015 3:21 PM > To: excha...@lists.m

[Exchange] Problem counting/tracking emails - exchange 2010, fully patched

2015-11-17 Thread Kurt Buff
I'm having a wee problem with get-messagetrackinglogs. 2 problems, actually. I'm running the commands below on our combined DB/Hub server... First: I have a DL that I'm trying to track - we want the number of emails it has received. When I use this: Get-MessageTrackingLog -ResultSize

[Exchange] Exchange 2010 and powershell on my workstation

2015-09-08 Thread Kurt Buff
for my own simple-minded purposes, I keep a list of command line invocations for the apps that I have installed on my workstation. The one for the Exchange shell is: runas /netonly /user:kurt-ad...@example.com \ "%windir%\system32\WindowsPowerShell\v1.0\powershell.exe \ -version

Re: [Exchange] Exchange 2010 and powershell on my workstation

2015-09-08 Thread Kurt Buff
Really? That simple? Oy. Kurt On Tue, Sep 8, 2015 at 5:19 PM, Michael B. Smith <mich...@smithcons.com> wrote: > Remove the "-version 2.0". > > -Original Message- > From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] > On Beha

Re: [Exchange] RE: Restrict external OWA access

2015-09-09 Thread Kurt Buff
Do you want to keep internal access to OWA? If not, in Ex2010, you can just turn off access to OWA on individual's accounts, separately from ActiveSync. set-casmailbox can do that, though you'll have to do a bit of scripting to turn it off for everyone, since it looks as if it will only act on a

[Exchange] Outlook rules 'and-ing' on a subject line?

2015-12-11 Thread Kurt Buff
User gets build notifications in email - lots of them. User wishes to discard irrelevant notices, and would like to do so by examining the subject line with a rule. There are emails from multiple build processes, for various iterations of our products. So, he will get notices for, e.g.

Re: [Exchange] Outlook rules 'and-ing' on a subject line?

2015-12-11 Thread Kurt Buff
.2.4.x.x.x" and you can match only on > the first part. I'd check that out. That's the best bet, I think. Thanks, Kurt > -Original Message- > From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] > On Behalf Of Kurt Buff > Se

Re: [Exchange] Exchange 2010, Outlook 2013 - cannot remove delegates

2015-12-22 Thread Kurt Buff
Lost my join.me session, so can't do anything with her client directly ATM, but would still like to hear what I might have missed. Kurt On Tue, Dec 22, 2015 at 10:01 AM, Kurt Buff <kurt.b...@gmail.com> wrote: > All, > > I've got the situation noted in the subject line, be

Re: [Exchange] Exchange 2010, Outlook 2013 - cannot remove delegates

2015-12-22 Thread Kurt Buff
- > *From:* listsad...@lists.myitforum.com [listsad...@lists.myitforum.com] > on behalf of Kurt Buff [kurt.b...@gmail.com] > *Sent:* Tuesday, December 22, 2015 7:27 PM > *To:* excha...@lists.myitforum.com > *Subject:* Re: [Exchange] Exchange 2010, Outlook 2013 - cannot remove > del

Re: [Exchange] Exchange 2010, Outlook 2013 - cannot remove delegates

2015-12-22 Thread Kurt Buff
ks, so maybe checking base permissions in those two > locations of her mailbox and that they haven’t been changed? > > > > -Bonnie > > > > *From:* listsad...@lists.myitforum.com [mailto: > listsad...@lists.myitforum.com] *On Behalf Of *Kurt Buff > *Sent:* Tuesday, December 22, 201

Re: [Exchange] Exchange 2010, Outlook 2013 - cannot remove delegates

2015-12-23 Thread Kurt Buff
> Regards, > > Michael B. Smith > Consultant and Exchange MVP > http://theessentialexchange.com/ > -- > *From:* listsad...@lists.myitforum.com [listsad...@lists.myitforum.com] > on behalf of Kurt Buff [kurt.b...@gmail.com] > *Sent:* Tuesday, Decemb

Re: [Exchange] Pause during SMTP conversation

2015-11-24 Thread Kurt Buff
Any antivirus/antispam software on your Exchange server? Kurt On Tue, Nov 24, 2015 at 12:04 PM, Russ Patterson wrote: > I'm curious, all - if there's a 15-45 second delay between the time you > type > "Enter . Enter" > and the time you see the "Queued for Delivery"

Re: [Exchange] Problem counting/tracking emails - exchange 2010, fully patched

2015-11-17 Thread Kurt Buff
/2009/02/are-distribution-groups-really-being-used.html > > -Original Message- > From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] > On Behalf Of Kurt Buff > Sent: Tuesday, November 17, 2015 3:21 PM > To: excha...@lists.myitforum.com > Subject:

Re: [Exchange] What are O365 folks using for eDiscovery??

2016-01-23 Thread Kurt Buff
That short of a duration for backups always makes me queasy. I wonder if it really provides the kind of legal cover that people think it does, and whether it's been thoroughly tested over several cases in different jurisdictions. After all, my understanding is that many kinds of financial

[Exchange] Exchange 2010 - moving the default database and system mailboxes

2016-01-25 Thread Kurt Buff
All, We've got a 200m default database sitting on a 1tb LUN, and we want to clear the LUN for use - but don't want to cause any outage for the user. I've perused the two following articles:

Re: [Exchange] Exchange 2010 - moving the default database and system mailboxes

2016-01-25 Thread Kurt Buff
.com] > On Behalf Of Kurt Buff > Sent: Monday, January 25, 2016 4:25 PM > To: excha...@lists.myitforum.com > Subject: Re: [Exchange] Exchange 2010 - moving the default database and > system mailboxes > > It's the *system* mailbox - all of the other mailboxes have been moved. >

[Exchange] Jim's email prompted me to ask a question

2016-02-16 Thread Kurt Buff
Much sympathy to Mr. Kennedy. But, I used his travails as a trigger to check on the rollups installed on my Exchange machines. According to https://technet.microsoft.com/en-us/library/hh135098%28v=exchg.150%29.aspx, RU11 for 2010 SP3 should show 14.03.0266.002. That's not what I'm seeing. For

Re: [Exchange] Jim's email prompted me to ask a question

2016-02-16 Thread Kurt Buff
riginal Message- > From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] > On Behalf Of Kurt Buff > Sent: Tuesday, February 16, 2016 4:54 PM > To: excha...@lists.myitforum.com > Subject: [Exchange] Jim's email prompted me to ask a question > > Much sympathy