Stats for inbound domains not src domains.

Is there a way to display stats for inbound domains and not from the src domains? We filter mail for a couple different domains and I want to know which domain is getting how much email, I mean with out having to goto the trouble of setting up sawmill or something, I have 2xC350's and an M160.
Thanks.

The only way I've found is via a report only available on the M series called Domain-Based Executive Summary. It allows you to specify the domains and produce reports that look just like the Overview page, but filtered by the domain or domains. We run those reports for each of our customers so they have specifics on their domains. I wish this was available as a live report page as well.
Vance

Similar Messages

Exit Class for Inbound Mail not getting triggered

Hi Gurus,
I have created an exit class for processing the Inbound Mail that comes to SAP Inbox (SOIN).
I have set up the Inbound processing rule in transaction SO50 and set it to all recipients.
If i send a mail from any external id to the id configured in SAP then it is coming in SAP Inbox (SOIN) but the exit class for processing the email is not getting triggered.
I have made all the settings for SMTP.
Kindly guide me with the steps needed to be followed for triggering the Exit Class.

Hi
Check u have maintained ur outgoing mail server IP in SCOT transation.
Check link step to configure PO mail.
http://architectsap.com/blog/sap/sap-mm-purchasing-send-purchase-order-by-mail-to-vendor-in-sap/

Version number for GPO's not in sync with the version number for GPO's on the Baseline domain controller

Hi
I accidentally removed one of our domain controller's hyper-v image (DC-02) from the hyper-v manager and to bring it back online launched a new virtual machine using the same virtual hard drive. This brought back the domain controller machine and I set the
original IP address to the same assuming that everything would just working fine.
Sadly, that wasn't the case as when I tried to open the group policy manager on that machine I started getting "Access is denied" error. I was then presented with an option to open the group policy manager with the first available DC which I did
and was able to open it with showing the same machine as the baseline domain controller under the status tab (DC-01 is actually the baseline DC). I then clicked Detect now and noticed it was showing 1 DC under replication in progress with problems in GPO version.
I then did the same thing on the primary DC (DC-01) and even there it was showing this only (images attached).
So I started exploring over the internet going through various articles but couldn't find a solution which I could apply without worrying about corrupting something somewhere. I also went to the SYSVOL folder on both the DC's to check the version number
in GPT.ini files which are mentioned below:
\\CC-DC01\sysvol\cloudchowk.lab\Policies\{6AC1786C-016F-11D2-945F-00C04fB984F9}
[General]
Version=3
\\CC-DC01\sysvol\cloudchowk.lab\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}
[General]
Version=5439513
\\cc-dc02\SYSVOL\cloudchowk.lab\Policies\{6AC1786C-016F-11D2-945F-00C04fB984F9}
[General]
Version=3
\\cc-dc02\SYSVOL\cloudchowk.lab\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}
[General]
Version=5308439
Could anyone please help me sort this out? I am no system admin and whatever knowledge I have of setting up DC, AD etc is from following one article or the other over the internet.
Regards
Sajat Jain

Hi
Apologies for responding late. I followed through all the points mentioned by Frank and even did a non-authoritative restore synchronization but still no luck.
I am attaching the output from the dcdiag /q and the from the event viewer after doing to non-authoritative restore synchronization.
DCDIAG /Q
There are warning or error events within the last 24 hours after the
SYSVOL has been shared. Failing SYSVOL replication problems may cause
Group Policy problems.
......................... CC-DC03 failed test DFSREvent
Unable to connect to the NETLOGON share! (\\CC-DC03\netlogon)
[CC-DC03] An net use or LsaPolicy operation failed with error 67,
The network name cannot be found..
......................... CC-DC03 failed test NetLogons
An error event occurred. EventID: 0x0000164A
Time Generated: 01/18/2015 17:52:17
Event String:
The Netlogon service could not create server share C:\Windows\SYSVOL\sysvol\cloudchowk.lab\SCRIPTS. The following error occurred:
An error event occurred. EventID: 0x0000164A
Time Generated: 01/18/2015 17:54:12
Event String:
The Netlogon service could not create server share C:\Windows\SYSVOL\sysvol\cloudchowk.lab\SCRIPTS. The following error occurred:
An error event occurred. EventID: 0x00000422
Time Generated: 01/18/2015 17:54:41
Event String:
The processing of Group Policy failed. Windows attempted to read the file \\cloudchowk.lab\sysvol\cloudchowk.lab\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
An error event occurred. EventID: 0x00000422
Time Generated: 01/18/2015 17:55:42
Event String:
The processing of Group Policy failed. Windows attempted to read the file \\cloudchowk.lab\sysvol\cloudchowk.lab\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
An error event occurred. EventID: 0x00000422
Time Generated: 01/18/2015 17:59:41
Event String:
The processing of Group Policy failed. Windows attempted to read the file \\cloudchowk.lab\sysvol\cloudchowk.lab\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
An error event occurred. EventID: 0x00000422
Time Generated: 01/18/2015 18:04:42
Event String:
The processing of Group Policy failed. Windows attempted to read the file \\cloudchowk.lab\sysvol\cloudchowk.lab\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
An error event occurred. EventID: 0x0000164A
Time Generated: 01/18/2015 18:05:10
Event String:
The Netlogon service could not create server share C:\Windows\SYSVOL\sysvol\cloudchowk.lab\SCRIPTS. The following error occurred:
An error event occurred. EventID: 0x00000422
Time Generated: 01/18/2015 18:09:42
Event String:
The processing of Group Policy failed. Windows attempted to read the file \\cloudchowk.lab\sysvol\cloudchowk.lab\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
An error event occurred. EventID: 0x00000422
Time Generated: 01/18/2015 18:14:42
Event String:
The processing of Group Policy failed. Windows attempted to read the file \\cloudchowk.lab\sysvol\cloudchowk.lab\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
An error event occurred. EventID: 0x00000422
Time Generated: 01/18/2015 18:19:43
Event String:
The processing of Group Policy failed. Windows attempted to read the file \\cloudchowk.lab\sysvol\cloudchowk.lab\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
An error event occurred. EventID: 0x00000422
Time Generated: 01/18/2015 18:24:43
Event String:
The processing of Group Policy failed. Windows attempted to read the file \\cloudchowk.lab\sysvol\cloudchowk.lab\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
......................... CC-DC03 failed test SystemLog
EVENT VIEWER LOGS
The DFS Replication service initialized SYSVOL at local path C:\Windows\SYSVOL\domain and is waiting to perform initial replication. The replicated folder will remain in the initial synchronization state until it has replicated with its partner CC-DC01.cloudchowk.lab. If the server was in the process of being promoted to a domain controller, the domain controller will not advertize and function as a domain controller until this issue is resolved. This can occur if the specified partner is also in the initial synchronization state, or if sharing violations are encountered on this server or the synchronization partner. If this event occurred during the migration of SYSVOL from File Replication service (FRS) to DFS Replication, changes will not replicate out until this issue is resolved. This can cause the SYSVOL folder on this server to become out of sync with other domain controllers.
Additional Information:
Replicated Folder Name: SYSVOL Share
Replicated Folder ID: 4689406D-D6D8-49E0-8079-2B1D4AE61BC6
Replication Group Name: Domain System Volume
Replication Group ID: 6B162096-2EFA-4D4C-BF13-62CC5B112B97
Member ID: 566943F9-D2FB-4304-823D-10DC972F831A
Read-Only: 0
Should I just start over again by removing DC03 and setting up another DC?
Regards
Sajat Jain

Windows 8.1 will not allow me to join a domain Setting up a new 2012 server, and am trying to join laptops running Windows 8.1 to this new domain. When I go to properties for This Computer, Join a domain wizard is greyed out. Can I join a Windows 8.1 com

Windows 8.1 will not allow me to join a domain
I am trying to join laptops running Windows 8.1 to domain. When I go to properties for This Computer, Join a domain wizard is greyed out. Can I join a Windows 8.1 computer to a domain?

Have you verified that your Windows 8.1 is a Pro or Enterprise edition? The Basic edition cannot join a domain.

How to block domains not for all mailboxes in our organization?

Hello everybody! Need some advice - I have a script to block some domains ("black domains list") - I am using this command: Set-SenderFilterConfig -BlockedDomains:$list But now I need to block these domains not for all mailboxes in our organization,
for example: somebody is sending a message from "black" domain company.com and there is a mailbox [email protected] - so only this user should receive message from "black" domain. Any others should receive nothing even their addresses
are in copy. Is it possible? Thanks.

Hi,
When we use Set-SenderFilterConfig –BlockedDomains to block domain, exchange will block any messages from that domain without any exception.
The only thing I can think of is transport rule, so please try to create this transport rule to have a test:
If this transport rule doesn't work, then there is no way to block domain not for all mailboxes in organization based on my knowledge.
Best Regards.

Tip for Mail certificates not being honored for parked domains

I was having trouble with certificates not being honored, such that when my imap mail was being checked I constantly had the warning box come up to tell me the certificate was not valid. I would show the certificate, tell it to be trusted always, and yet I'd still see the triangle warning next to my inbox, and have trouble connecting. Then I saw a post about having multiple domains pointed to the same server, so I forwarded from one domain to the other and now the certificate is honored.
The other domain I had was parked at the same domain by my host, so the underlying imap server domain was the same for both. That must have caused a conflict in having both certificates be honored, and indeed only one of them at a time would work. Deleting one of the accounts solved the problem, though I had to set up forwarding to bring all my mail from one to the other.
While the problem is solved, it seems like there ought to be a way that I can have mail to my main domain and parked domain using the same underlying domain imap server not cause this conflict, but in the meantime I'll just have to forward from the parked to the main domain.
Just wanted to share the solution here.

Alex Thanks for the reply
my entry in amavisd.conf reads as follows:
@localdomainsmaps = ( [".$mydomain"] ); # list of all local domains
I thought this was supposed to pick up all the local aliases?
What does changing to ( 1 ); do differently to above??
TIA
Tony

When using Craigslist I keep getting this error: Warning! Domain mapping upgrade for this domain not found. Nothing I do works to fix this.

When I use Craigslist, my personal list of things being sold, and I try and renew my listings, I periodically get this: "Warning! Domain mapping upgrade for this domain not found. Please log in and go to the Domains Upgrades page of your blog to use this domain." Usually rebooting my computer makes it go away for a short time, but today that isn't working and following the commands on the warning doesn't work either...is this truly a firefox issue? How do I fix it.

Clear the cache and the cookies from websites that cause problems.
"Clear the Cache":
*Firefox/Tools > Options > Advanced > Network > Cached Web Content: "Clear Now"
"Remove Cookies" from sites causing problems:
*Firefox/Tools > Options > Privacy > Cookies: "Show Cookies"

Ldapsearch for default domain not returned after AM install

I have sucessfully installed JES2005Q4 (ds, mail, cal, uwc, ldap, am, da, web) many times before with Solaris 10 zones, but this problem is a first. Basically, after installing Access Manager in a seperate zone under the web server, I can not get the "o=<defaultdomain>" entry back when using ldapsearch.
Steps taken
1. Install DS in a zone (base DN: o=isp)
2. run idsconfig (default domain/DN: o=school.k12.ia.us,o=isp)
3. Install web server and then AM in a zone
4. Restart web server
5. Restart the directory server
I can run the {ldapsearch -D "cn=Directory Manager" -w password -b "o=isp" "o=*"} after each step above and get the default domain in the search results except after the last step. No indication of errors in logs or during the installs.
Is the longer domain name the problem? I have used the longer domain name "school.k12.mn.us" with preivous version w/o problems. I have also used this version of JES with my current flash archive (Solaris 10 1/06, recommed ~ 1/15/06).
Thoughts anyone?
Phillip

Your info is somewhat strange - you told us that the DN of the default domain is o=school.k12.ia.us,o=isp, but the ldapsearch shows something totally different. At least the DN must include o=internet,o=isp.
It could be that for some reason that after one of the steps a presence index for the attribute "o" has been configured at the DS. If you haven�t reindexed your database yet searches for o=* will not give you back any result.
Can you try to reindex the database (either using db2index or db2index.pl) - see DS admin-guide.
-Bernhard

No proxy but pc still keeps settings from wsus gpo even now it is not in domain

the situation
I deployed a new image the computer was not a domain member. Before connecting to domain I connected the machine to
dedicated Internet connection (no corporate proxy) for making full updated from Microsoft site. Because I want to capture it back for future domain deployments and have maximum updates to date in the image.
Update failed. Checked Direct Access (NO PROXY). Refreshed Software Updates folder.
Windows update always showed the name of previous proxy server with the error. Local GPO were not configured.
Found one entry with the name of proxy in the registry. Tried different things. still not works. No name in Windows update log but deffinetely Windows Update agent still keeps some settings from previous GPO.
Before I wipe this thing, please
see the last WindowsUpdate. May be there is a solution...
Thanks.
2014-08-26 12:41:44:098 484 820 Service *************
2014-08-26 12:41:44:113 484 820 Service ** START ** Service: Service startup
2014-08-26 12:41:44:129 484 820 Service *********
2014-08-26 12:41:44:285 484 820 Agent   * WU client version 7.6.7600.256
2014-08-26 12:41:44:285 484 820 Agent   * Base directory: C:\windows\SoftwareDistribution
2014-08-26 12:41:44:285 484 820 Agent   * Access type: No proxy
2014-08-26 12:41:44:285 484 820 Agent   * Network state: Connected
2014-08-26 12:42:30:118 484 820 Report CWERReporter::Init succeeded
2014-08-26 12:42:30:118 484 820 Agent *********** Agent: Initializing Windows Update Agent ***********
2014-08-26 12:42:30:118 484 820 Agent *********** Agent: Initializing global settings cache ***********
2014-08-26 12:42:30:118 484 820 Agent   * WSUS server:
2014-08-26 12:42:30:118 484 820 Agent   * WSUS status server:
2014-08-26 12:42:30:118 484 820 Agent   * Target group: (Unassigned Computers)
2014-08-26 12:42:30:118 484 820 Agent   * Windows Update access disabled: No
2014-08-26 12:42:30:149 484 820 DnldMgr Download manager restoring 0 downloads
2014-08-26 12:42:30:165 484 820 AU ########### AU: Initializing Automatic Updates ###########
2014-08-26 12:42:30:165 484 820 AU   # WSUS server:
2014-08-26 12:42:30:165 484 820 AU   # Detection frequency: 22
2014-08-26 12:42:30:165 484 820 AU   # Approval type: Pre-install notify (User preference)
2014-08-26 12:42:30:165 484 820 AU   # Auto-install minor updates: No (User preference)
2014-08-26 12:42:30:165 484 820 AU   # Will interact with non-admins (Non-admins are elevated (User preference))
2014-08-26 12:42:30:165 484 820 Report *********** Report: Initializing static reporting data ***********
2014-08-26 12:42:30:165 484 820 Report   * OS Version = 6.1.7601.1.0.65792
2014-08-26 12:42:30:165 484 820 Report   * OS Product Type = 0x00000030
2014-08-26 12:42:30:492 484 820 Report   * Computer Brand = Hewlett-Packard
2014-08-26 12:42:30:492 484 820 Report   * Computer Model = HP EliteDesk 800 G1 SFF
2014-08-26 12:42:30:508 484 820 Report   * Bios Revision = L01 v02.30
2014-08-26 12:42:30:508 484 820 Report   * Bios Name = Default System BIOS
2014-08-26 12:42:30:508 484 820 Report   * Bios Release Date = 2014-04-22T00:00:00
2014-08-26 12:42:30:508 484 820 Report   * Locale ID = 3084
2014-08-26 12:42:30:570 484 820 AU Successfully wrote event for AU health state:0
2014-08-26 12:42:30:570 484 820 AU Initializing featured updates
2014-08-26 12:42:30:570 484 820 AU Found 0 cached featured updates
2014-08-26 12:42:30:570 484 820 AU Successfully wrote event for AU health state:0
2014-08-26 12:42:30:570 484 820 AU Successfully wrote event for AU health state:0
2014-08-26 12:42:30:570 484 820 AU AU finished delayed initialization
2014-08-26 12:42:30:617 484 528 PT WARNING: PTError: 0x80072ee6
2014-08-26 12:42:30:617 484 528 PT WARNING: Initialization failed for Protocol Talker Context: 0x80072ee6
2014-08-26 12:42:30:617 484 528 Report WARNING: Reporter failed to upload events with hr = 80072ee6.
2014-08-26 12:42:30:617 484 528 PT WARNING: PTError: 0x80072ee6
2014-08-26 12:42:30:617 484 528 PT WARNING: Initialization failed for Protocol Talker Context: 0x80072ee6
2014-08-26 12:42:30:617 484 528 Report WARNING: Reporter failed to upload events with hr = 80072ee6.
2014-08-26 12:42:35:609 484 528 Report CWERReporter finishing event handling. (00000000)
2014-08-26 12:53:55:661 484 528 PT WARNING: PTError: 0x80072ee6
2014-08-26 12:53:55:661 484 528 PT WARNING: Initialization failed for Protocol Talker Context: 0x80072ee6
2014-08-26 12:53:55:661 484 528 Report WARNING: Reporter failed to upload events with hr = 80072ee6.
"When you hit a wrong note it's the next note that makes it good or bad". Miles Davis

Hi,
Is this image used to be a WSUS client? According to the logs, the client seems to try to connect a WSUS server.
To remove the WSUS client setting, we have two options:
Set HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU\UseWUServer to 0.
Delete entire HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\
Note: Serious problems might occur if we modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, we can restore the registry if a problem
occurs.
Best Regards.
Steven Lee
TechNet Community Support

Selective IP filtering for multiple servers in a domain?

Is it possible to have IP filtering on for certain servers in a
domain, and not for others?
This is the situation:
I am deploying two servers in mydomain, so let's call it serverA
and serverB. I want serverA to accept all connections while
serverB accepts connections only from certain IPs. I know you
can do IP filtering using SimpleConnectionFilter in the
"Connection Filter" option in Security->General tab of the Admin
console, but this turns on IP filtering for BOTH serverA and
serverB! How do I turn it on for one, and not the other? Any
help would be greatly appreciated. Thank you.
Leon

Hi,
Yes you can have muliple servers in a domain. You can create as many managed
servers as your hardware can handle. When you added the server, did you use the
startManagedWebLogic.sh (or .cmd) script to start the server. Once you do that,
you should see the server as running.
Hope this helps,
pat
"MS" <[email protected]> wrote:
>
Hello All,
Is it possible to have multiple servers in a domain?
When I add a new server, the State is reported in the weblogic console
as "UNKNOWN".
What does this mean?
rgds
MS

Email address domain not found (OWA setup)

We have an in-house exchange server (SBS 2008) and have had 5 users successfully using blackberries for close to a year via setting up the OWA (outlook web access) at nextel.blackberry.com.
2 days ago one of the users upgraded his blackberry and email stopped working (both peronsal POP email as well as exchange email through OWA).
We deleted all the accounts at the nextel.blackberry.com website and tried to re-add them. The personal MSN POP3 email was added successfully and is working great. However when we try to add the account for OWA access, we get the error message "Email address domain not found".
Now I know that message comes up initially if you enter a password on the first screen. But we still get this message on the advanced OWA setup screen. We spent 2 hours on the phone with both nextel AND RIM and all either could tell us is that something must be wrong with our exchange server. (they were not able to add it either).
Well, our exchange server is running strong sending and receiving emails, we have several users throughout the country accessing OWA without ANY problems AND we have 4 blackberry users that are still active and receiving emails from our exchange server without any problem.
Any thoughts? FYI we are running through postini for inbound/outbound email BUT this has never posed an issue previously for all the blackberries setup in the past year.

I was able to resolve this on my own. Apparently Blackberry's website app scans for what it considers to be valid MX records on the domain of the email address you're trying to send. We use postini for inbound/outbound and as a result had no MX records that pointed directly to our server.
When I added an additional MX record pointing directly to our server, blackberry's website was then able to add the account. After the account was added I was then able to remove the MX record and the blackberry continues to function.

Prepare 2003 Forest/Domain for 2008 R2 or 2012 Domain Controllers

Hi,
I would be grateful if you could help me with this:
We have a single Forest/Single Domain structure which is managed by 4 Windows Server 2003 Std Edition. We are now trying to add a Server 2008 R2 as a domain controller. I have followed lots of articles on MS and other website with regards to preparing the
Forest and domain before promoting the new server and here is what I got so far:
Schema master - Windows 2003 SE
FFL/DFL both set to 2003
Run Adprep32.exe (found it on 2008 R2 disc) /forestprep and the outcome was:
lDAPDisplayName "uidNumber" defined for object "CN=VintelauidNumber,CN=Schema,CN=Configuration,DC=Domain,DC=co,DC=uk" conflicts with the schema extensions needed for Windows Server 2008 R2.
[Status/Consequence]
Adprep will not extend your existing schema.
[User Action]
Contact the vendor of the application that extended the schema with the lDAPDisplayName value uidNumber and resolve this inconsistency. Then run adprep again.
==============================================================================
OID "1.3.6.1.1.1.1.0" defined for object CN=Vintela-uidNumber,CN=Schema,CN=Configuration,DC=Domain,DC=co,DC=uk conflicts with the schema extensions needed for Windows Server 2008 R2.
[Status/Consequence]
Adprep will not extend your existing schema.
[User Action]
Contact the vendor of the application that extended the schema with the OID value "1.3.6.1.1.1.1.0" and resolve this inconsistency. Then run adprep again.
==============================================================================
lDAPDisplayName "gidNumber" defined for object "CN=Vintela-gidNumber,CN=Schema,CN=Configuration,DC=Domain,DC=co,DC=uk" conflicts with the schema extensions needed for Windows Server 2008 R2.
[Status/Consequence]
Adprep will not extend your existing schema.
[User Action]
Contact the vendor of the application that extended the schema with the lDAPDisplayName value gidNumber and resolve this inconsistency. Then run adprep again.
==============================================================================
OID "1.3.6.1.1.1.1.1" defined for object CN=Vintela-gidNumber,CN=Schema,CN=Configuration,DC=Domain,DC=co,DC=uk conflicts with the schema extensions needed for Windows Server 2008 R2.
[Status/Consequence]
Adprep will not extend your existing schema.
[User Action]
Contact the vendor of the application that extended the schema with the OID value "1.3.6.1.1.1.1.1" and resolve this inconsistency. Then run adprep again.
==============================================================================
lDAPDisplayName "gecos" defined for object "CN=Vintela-gecos,CN=Schema,CN=Configuration,DC=Domain,DC=co,DC=uk" conflicts with the schema extensions needed for Windows Server 2008 R2.
[Status/Consequence]
Adprep will not extend your existing schema.
[User Action]
Contact the vendor of the application that extended the schema with the lDAPDisplayName value gecos and resolve this inconsistency. Then run adprep again.
==============================================================================
OID "1.3.6.1.1.1.1.2" defined for object CN=Vintela-gecos,CN=Schema,CN=Configuration,DC=Domain,DC=co,DC=uk conflicts with the schema extensions needed for Windows Server 2008 R2.
[Status/Consequence]
Adprep will not extend your existing schema.
[User Action]
Contact the vendor of the application that extended the schema with the OID value "1.3.6.1.1.1.1.2" and resolve this inconsistency. Then run adprep again.
==============================================================================
lDAPDisplayName "unixHomeDirectory" defined for object "CN=Vintela-homeDirectory,CN=Schema,CN=Configuration,DC=Domain,DC=co,DC=uk" conflicts with the schema extensions needed for Windows Server 2008 R2.
[Status/Consequence]
Adprep will not extend your existing schema.
[User Action]
Contact the vendor of the application that extended the schema with the lDAPDisplayName value unixHomeDirectory and resolve this inconsistency. Then run adprep again.
==============================================================================
OID "1.3.6.1.1.1.1.3" defined for object CN=Vintela-homeDirectory,CN=Schema,CN=Configuration,DC=Domain,DC=co,DC=uk conflicts with the schema extensions needed for Windows Server 2008 R2.
[Status/Consequence]
Adprep will not extend your existing schema.
[User Action]
Contact the vendor of the application that extended the schema with the OID value "1.3.6.1.1.1.1.3" and resolve this inconsistency. Then run adprep again.
==============================================================================
lDAPDisplayName "loginShell" defined for object "CN=VintelaloginShell,CN=Schema,CN=Configuration,DC=Domain,DC=co,DC=uk" conflicts with the schema extensions needed for Windows Server 2008 R2.
[Status/Consequence]
Adprep will not extend your existing schema.
[User Action]
Contact the vendor of the application that extended the schema with the lDAPDisplayName value loginShell and resolve this inconsistency. Then run adprep again.
==============================================================================
OID "1.3.6.1.1.1.1.4" defined for object CN=Vintela-loginShell,CN=Schema,CN=Configuration,DC=Domain,DC=co,DC=uk conflicts with the schema extensions needed for Windows Server 2008 R2.
[Status/Consequence]
Adprep will not extend your existing schema.
[User Action]
Contact the vendor of the application that extended the schema with the OID value "1.3.6.1.1.1.1.4" and resolve this inconsistency. Then run adprep again.
On the Schema master, run AD Schema, MMC and deactivated the object for Vintela. run the adprep32 /forestprep again and still the same result.
Would you please advise what else can/must be done? anyone knows anything on Vintela (Quest VAS) and how to get rid of it?
thanks for your help in advance.

Hi,
Thanks for your post.
In this case, the most cause may be the OIDS are in conflict with the 2008 /forestprep. Could you please let me know if the forest functional level is 2003? If not, please raise it to 2003.
For the information about how to raise functional level, please refer to the articles as below:
What Are Active Directory Functional Levels?
http://technet.microsoft.com/en-us/library/cc787290(WS.10).aspx
Raise the Domain Functional Level
http://technet.microsoft.com/en-us/library/cc753104.aspx
Raise the Forest Functional Level
http://technet.microsoft.com/en-us/library/cc730985.aspx
What is the Impact of Upgrading the Domain or Forest Functional Level?
http://blogs.technet.com/b/askds/archive/2011/06/14/what-is-the-impact-of-upgrading-the-domain-or-forest-functional-level.aspx
Besides, for the best practice, we can back up all domain controllers’ system state for the unexpected issues. Here is one article related to backup Active Directory.
Backing up Active Directory
http://technet.microsoft.com/en-us/library/cc961924.aspx
I hope this information is helpful for you. If there is anything that requires further clarification, please don’t hesitate to let me know.
Best regards,
Ann
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Mail to a specific domain not being delivered

We are able to send/receive emails to external domains and everything seems to be fine with our exchange server except when we try to send mails to this one domain @ ju.ahg.com.sa
Upon troubleshooting further, we came to know this domain doesn't have a valid MX record.
Yet the mails to this domain get delivered by gmail and other email services.
If we use the SMTPDIAG tool, below is the output.
Note that when its done from our domain, it gives error, when done from gmail ...its success!
How can we fix this issue?
SmtpDiag.exe "[email protected]" "[email protected]"
Searching for Exchange external DNS settings.
Computer name is xxx-exch2010-1.
VSI 1 has the following external DNS servers:
There are no external DNS servers configured.
Checking SOA for ju.ahg.com.sa.
Checking external DNS servers.
Checking internal DNS servers.
SOA serial number match: Passed.
Checking local domain records.
Checking MX records using TCP: xxx.com.sa.
Checking MX records using UDP: xxx.com.sa.
Both TCP and UDP queries succeeded. Local DNS test passed.
Checking remote domain records.
Checking MX records using TCP: ju.ahg.com.sa.
Warning: The TCP DNS query returned no results.
Checking MX records using UDP: ju.ahg.com.sa.
Error: No MX or A records were found for the remote domain. Verify that the
remote domain is valid. Your firewall allows outbound DNS queries (Windows
NT/2000 Server requires TCP), and your DNS server can resolve external domains.
=============================================================================
SmtpDiag.exe "[email protected]" "[email protected]"
Searching for Exchange external DNS settings.
Computer name is xxx-exch2010-1.
VSI 1 has the following external DNS servers:
There are no external DNS servers configured.
Checking SOA for ju.ahg.com.sa.
Checking external DNS servers.
Checking internal DNS servers.
SOA serial number match: Passed.
Checking local domain records.
Checking MX records using TCP: gmail.com.
Checking MX records using UDP: gmail.com.
Both TCP and UDP queries succeeded. Local DNS test passed.
Checking remote domain records.
Checking MX records using TCP: ju.ahg.com.sa.
Warning: The TCP DNS query returned no results.
Checking MX records using UDP: ju.ahg.com.sa.
Checking MX servers listed for [email protected].
Connecting to mail.ju.ahg.com.sa [78.93.11.251] on port 25.
Successfully connected to mail.ju.ahg.com.sa.

You are right, when I looked up using MXTOOLBOX.com ; this domain seems to have a valid MX record, but no valid A record. Would that be the cause?
Also, I tried through the command line, and it seems my DNS server is unable to resolve, so I am not even getting the MX record.
I have 2 DNS servers , how can I try these commands to use the other DNS server ;
as I tried on both servers, It gives the name of the first server only and says it can't find this domain: Non-existent domain.

Unable to open pdf from some particular shared folder which is not in domain

Encountered a strange issue here.
We have copuple of users who login with Citrix session.
They are able to open pdf from all the shared folders but not one which is not in domain.
User are able to open all other files viz. doc, excel, notepad and so from that particular folder.
Issue with all the pdf files and not only one particular file.
Double clicking the pdf file starts the process AcroRd32.exe but the file does not open.
If an already running AcroRd32.exe process is there (means if Adobe Reader is already open), then it's possible to open the pdf files from that folder.
Moreover, came across one strange thing.
I created a shortcut to one of the pdf file from that folder within the same folder.
And it was possible to open pdf file from that shortcut but not directly :S
Gives error: "Acrobat failed to connect DDE server" after about 20 mins if we try to open file directly.
Googled a bit and found that issue can be resolved by navigating to
HKEY_CLASSES_ROOT\acrobat\shell\open\ddeexec\application and changing the Key "AcroviewA10" to "AcroviewR10
But when I navigated to the mentioned registry there was no AcroviewA10 but instead it was just Acroview.
Adobe Reader version: 9.5.5
I will be really grateful if somebody can provide solution for this.

What happens when you open the Adobe app, then tell it to open the file?
How big are the attachments? There are limitations to the size allowed to be sent:
Email Provider
Size Limit
Gmail
25Mb
Outlook
20Mb
Yahoo
25Mb
Are you sending the files to yourself? Not sure how you are emailing files from a website...
Are the PDF's password-protected, or some kind of copyrighted eBook perhaps? Can you email other files successfully, or are PDF's the only files that don't work?
Perhaps using a free Cloud service as an intermediary might work better.
WyreNut
I am a Volunteer here, not employed by HP.
You too can become an HP Expert! Details HERE!
If my post has helped you, click the Kudos Thumbs up!
If it solved your issue, Click the "Accept as Solution" button so others can benefit from the question you asked!

Unable to add account to Outlook 2010 for email address under custom domain

I am unable to add a new account in Outlook 2010 for an email account set up under a custom domain.
Can anyone explain why login credentials that work for outlook.com (successful access to email inbox) return an authentication failure (401 error) when used to test connectivity via https://testconnectivity.microsoft.com?
Details:
I set up a custom domain at https://domains.live.com and did the following DNS configuration steps at my web hosting company following instructions from domains.live.com:
Created custom MX record
Created CNAME record [name:] autodiscover.jrergonomics.com [value:] autodiscover.outlook.com.
I created email addresses at domains.live.com > jrergonomics.com > Member accounts and tested by successfully logging in to outlook.com.
When I try to add either account to Outlook 2010, I get a popup box with this information:
Title: "Windows Security"
Connecting to [email protected]
[[email protected]]
[ ] Remember my credentials
[ OK ] [ Cancel
The credentials that I use successfully to log in to outlook.com don't work here; I get the popup box 3-4 times and then the Outlook 2010 Add New Account dialog displays an error:
"An encrypted connection to your mail server is not available. Click Next to attempt using an unencrypted connection."
Clicking Next results in an error message:
"Problem Connecting to Server"
I have tried verifying the connectivity using https://testconnectivity.microsoft.com:
<?xml version="1.0" encoding="utf-8"?>
<testresult status="FatalError" errorid="734044ef-11c2-4e30-9ee6-450d49e9d92c" contentUrl="" testdescription="The Microsoft Connectivity Analyzer is attempting to test Autodiscover for [email protected]." resultdescription="Testing Autodiscover failed." additionaldetails="" elapsedMilliseconds="40517">
<children>
<testresult status="FatalError" errorid="734044ef-11c2-4e30-9ee6-450d49e9d92c" contentUrl="" testdescription="Attempting each method of contacting the Autodiscover service." resultdescription="The Autodiscover service couldn't be contacted successfully by any method." additionaldetails="" elapsedMilliseconds="40517">
<children>
<testresult status="Error" errorid="734044ef-11c2-4e30-9ee6-450d49e9d92c" contentUrl="" testdescription="Attempting to test potential Autodiscover URL https://jrergonomics.com/AutoDiscover/AutoDiscover.xml" resultdescription="Testing of this potential Autodiscover URL failed." additionaldetails="" elapsedMilliseconds="21181">
<children>
<testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="Attempting to resolve the host name jrergonomics.com in DNS." resultdescription="The host name resolved successfully." additionaldetails="IP addresses returned: 64.90.49.188" elapsedMilliseconds="146">
<children />
</testresult>
<testresult status="Error" errorid="c716c7b4-a473-4ca4-8859-fc9c5bb12ad1" contentUrl="http://go.microsoft.com/fwlink/p/?LinkId=133210&v=ExRCA.1&id=B2E81FE1-5A94-4d07-9D58-AD483268A72A" testdescription="Testing TCP port 443 on host jrergonomics.com to ensure it's listening and open." resultdescription="The specified port is either blocked, not listening, or not producing the expected response." additionaldetails="A network error occurred while communicating with the remote host.
" elapsedMilliseconds="21035">
<children />
</testresult>
</children>
</testresult>
<testresult status="Error" errorid="734044ef-11c2-4e30-9ee6-450d49e9d92c" contentUrl="" testdescription="Attempting to test potential Autodiscover URL https://autodiscover.jrergonomics.com/AutoDiscover/AutoDiscover.xml" resultdescription="Testing of this potential Autodiscover URL failed." additionaldetails="" elapsedMilliseconds="4982">
<children>
<testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="Attempting to resolve the host name autodiscover.jrergonomics.com in DNS." resultdescription="The host name resolved successfully." additionaldetails="IP addresses returned: 157.56.244.217, 157.56.234.137, 157.56.236.89, 157.56.240.137" elapsedMilliseconds="376">
<children />
</testresult>
<testresult status="Error" errorid="c716c7b4-a473-4ca4-8859-fc9c5bb12ad1" contentUrl="http://go.microsoft.com/fwlink/p/?LinkId=133210&v=ExRCA.1&id=B2E81FE1-5A94-4d07-9D58-AD483268A72A" testdescription="Testing TCP port 443 on host autodiscover.jrergonomics.com to ensure it's listening and open." resultdescription="The specified port is either blocked, not listening, or not producing the expected response." additionaldetails="A network error occurred while communicating with the remote host.
" elapsedMilliseconds="4605">
<children />
</testresult>
</children>
</testresult>
<testresult status="FatalError" errorid="734044ef-11c2-4e30-9ee6-450d49e9d92c" contentUrl="" testdescription="Attempting to contact the Autodiscover service using the HTTP redirect method." resultdescription="The attempt to contact Autodiscover using the HTTP Redirect method failed." additionaldetails="" elapsedMilliseconds="14148">
<children>
<testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="Attempting to resolve the host name autodiscover.jrergonomics.com in DNS." resultdescription="The host name resolved successfully." additionaldetails="IP addresses returned: 157.56.244.217, 157.56.234.137, 157.56.236.89, 157.56.240.137" elapsedMilliseconds="21">
<children />
</testresult>
<testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="Testing TCP port 80 on host autodiscover.jrergonomics.com to ensure it's listening and open." resultdescription="The port was opened successfully." additionaldetails="" elapsedMilliseconds="59">
<children />
</testresult>
<testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="The Microsoft Connectivity Analyzer is checking the host autodiscover.jrergonomics.com for an HTTP redirect to the Autodiscover service." resultdescription="The redirect (HTTP 301/302) response was received successfully." additionaldetails="Redirect URL: https://autodiscover-s.outlook.com/Autodiscover/Autodiscover.xml

HTTP Response Headers:
Connection: close
Pragma: no-cache
Cache-Control: no-cache
Location: https://autodiscover-s.outlook.com/Autodiscover/Autodiscover.xml
" elapsedMilliseconds="45">
<children />
</testresult>
<testresult status="FatalError" errorid="734044ef-11c2-4e30-9ee6-450d49e9d92c" contentUrl="" testdescription="Attempting to test potential Autodiscover URL https://autodiscover-s.outlook.com/Autodiscover/Autodiscover.xml" resultdescription="Testing of this potential Autodiscover URL failed." additionaldetails="" elapsedMilliseconds="14021">
<children>
<testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="Attempting to resolve the host name autodiscover-s.outlook.com in DNS." resultdescription="The host name resolved successfully." additionaldetails="IP addresses returned: 157.56.241.102, 157.56.232.166, 157.56.245.70, 157.56.245.166, 157.56.236.214, 157.56.236.6" elapsedMilliseconds="191">
<children />
</testresult>
<testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="Testing TCP port 443 on host autodiscover-s.outlook.com to ensure it's listening and open." resultdescription="The port was opened successfully." additionaldetails="" elapsedMilliseconds="84">
<children />
</testresult>
<testresult status="SuccessWithWarnings" errorid="734044ef-11c2-4e30-9ee6-450d49e9d92c" contentUrl="" testdescription="Testing the SSL certificate to make sure it's valid." resultdescription="The certificate passed all validation requirements." additionaldetails="" elapsedMilliseconds="248">
<children>
<testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="The Microsoft Connectivity Analyzer is attempting to obtain the SSL certificate from remote server autodiscover-s.outlook.com on port 443." resultdescription="The Microsoft Connectivity Analyzer successfully obtained the remote SSL certificate." additionaldetails="Remote Certificate Subject: CN=outlook.com, OU=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=WA, C=US, Issuer: CN=Microsoft IT SSL SHA2, OU=Microsoft IT, O=Microsoft Corporation, L=Redmond, S=Washington, C=US." elapsedMilliseconds="163">
<children />
</testresult>
<testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="Validating the certificate name." resultdescription="The certificate name was validated successfully." additionaldetails="Host name autodiscover-s.outlook.com was found in the Certificate Subject Alternative Name entry." elapsedMilliseconds="1">
<children />
</testresult>
<testresult status="SuccessWithWarnings" errorid="734044ef-11c2-4e30-9ee6-450d49e9d92c" contentUrl="" testdescription="Certificate trust is being validated." resultdescription="The certificate is trusted and all certificates are present in the chain." additionaldetails="">
<children>
<testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="The Microsoft Connectivity Analyzer is attempting to build certificate chains for certificate CN=outlook.com, OU=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=WA, C=US." resultdescription="One or more certificate chains were constructed successfully." additionaldetails="A total of 1 chains were built. The highest quality chain ends in root certificate CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE." elapsedMilliseconds="34">
<children />
</testresult>
<testresult status="Warning" errorid="1339c33a-8f21-427b-a323-4cee1a13f517" contentUrl="" testdescription="Analyzing the certificate chains for compatibility problems with versions of Windows." resultdescription="Potential compatibility problems were identified with some versions of Windows." additionaldetails="The Microsoft Connectivity Analyzer can only validate the certificate chain using the Root Certificate Update functionality from Windows Update. Your certificate may not be trusted on Windows if the "Update Root Certificates" feature isn't enabled." elapsedMilliseconds="4">
<children />
</testresult>
</children>
</testresult>
<testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="Testing the certificate date to confirm the certificate is valid." resultdescription="Date validation passed. The certificate hasn't expired." additionaldetails="The certificate is valid. NotBefore = 2/18/2014 11:41:01 PM, NotAfter = 2/18/2016 11:41:01 PM" elapsedMilliseconds="0">
<children />
</testresult>
</children>
</testresult>
<testresult status="Success" errorid="00000000-0000-0000-0000-000000000000" contentUrl="" testdescription="Checking the IIS configuration for client certificate authentication." resultdescription="Client certificate authentication wasn't detected." additionaldetails="Accept/Require Client Certificates isn't configured." elapsedMilliseconds="804">
<children />
</testresult>
<testresult status="FatalError" errorid="734044ef-11c2-4e30-9ee6-450d49e9d92c" contentUrl="" testdescription="Attempting to send an Autodiscover POST request to potential Autodiscover URLs." resultdescription="Autodiscover settings weren't obtained when the Autodiscover POST request was sent." additionaldetails="" elapsedMilliseconds="12692">
<children>
<testresult status="FatalError" errorid="6c458392-3a8c-4bc2-942e-7ab533744106" contentUrl="" testdescription="The Microsoft Connectivity Analyzer is attempting to retrieve an XML Autodiscover response from URL https://autodiscover-s.outlook.com/Autodiscover/Autodiscover.xml for user [email protected]." resultdescription="The Microsoft Connectivity Analyzer failed to obtain an Autodiscover XML response." additionaldetails="An HTTP 401 Unauthorized response was received from the remote Unknown server. This is usually the result of an incorrect username or password. If you are attempting to log onto an Office 365 service, ensure you are using your full User Principal Name (UPN).
Headers received:
RequestId: 842d50d9-3e33-4627-8804-98fa0b02070c
X-DiagInfo: CH1PRD0910CA013
Content-Length: 0
Cache-Control: private
Date: Mon, 31 Mar 2014 04:57:26 GMT
Server: Microsoft-IIS/7.5
WWW-Authenticate: Basic Realm=""
X-AspNet-Version: 2.0.50727
X-Powered-By: ASP.NET


HTTP Response Headers:
RequestId: 842d50d9-3e33-4627-8804-98fa0b02070c
X-DiagInfo: CH1PRD0910CA013
Content-Length: 0
Cache-Control: private
Date: Mon, 31 Mar 2014 04:57:26 GMT
Server: Microsoft-IIS/7.5
WWW-Authenticate: Basic Realm=""
X-AspNet-Version: 2.0.50727
X-Powered-By: ASP.NET
" elapsedMilliseconds="12691">
<children />
</testresult>
</children>
</testresult>
</children>
</testresult>
</children>
</testresult>
</children>
</testresult>
</children>
</testresult>

Hi,
Since this is an Exchange forum and your issue is related to domain.live.com, I recommend you contact with domain.live.com support to get quicker and more professional help：<cite class="_Vc">https://domains.live.com/support/
</cite>
Thanks for your understanding in advance.
Best regards,
Angela Shi
TechNet Community Support

Stats for inbound domains not src domains.

Similar Messages

Maybe you are looking for