Can I move the 'Microsoft Exchange Security Groups' OU?

 Can I move the 'Microsoft Exchange Security Groups' OU?

OK for Exchange 2007 this is apparently supported
Q: Can I move the default Exchange security groups to another container or domain in the forest?
A: Exchange 2007 uses a new set of security groups to manage the permission model and to maintain coexistence. These groups are as follows:
Exchange Server
Exchange View-Only Administrators
Exchange Public Folder Administrators (New in Exchange 2007 Service Pack 1)
Exchange Recipient Administrators
Exchange Organization Administrators
ExchangeLegacyInterop
By default, these security groups are located in the root domain in the Microsoft Exchange Security Groups organizational unit. They can be moved to different organizational units and also to other domains in the forest. Moving the groups in the forest is supported because these groups have two unique properties: a well-known GUID and a distinguished name that can change. By using these two properties and adding them to the forest’s otherWellKnownObjects attribute during the Setup /PrepareAD task, Exchange can find the security group anywhere in the forest. The directory service will handle updating the distinguished name (DN) of the object when it is moved. In this manner, Exchange does not require a fixed location in the directory.
http://technet.microsoft.com/en-us/library/bb310792.aspx
http://www.pro-exchange.be/modules.php?name=News&file=article&sid=418Deli

Similar Messages

  • TCP packet out of state: First packet isn't SYN & Outlook is trying to retrieve data from the Microsoft Exchange Server [CAS-ARray]

    We are transitioning from Exchange 2003 to Exchange 2010.  We found Outlook online mode (non-cached mode) have many warning "Outlook is trying to retrieve data from the Microsoft Exchange Server [CAS-ARray]", usually happen when users tried to open
    address book but sometimes even normal operation like click the Send button.  The problem does not affect OWA and extremely rare when Outlook is running in cached mode.  Check the firewall logs, we notice a lot of "TCP Packet Out of State" drops.
    We have a lot from the CAS/HT to DC/GC on TCP_3268 and LDAP.  And the errors are "TCP packet out of state: First packet isn't SYN" with tcp_flags FIN-ACK, PUSH-ACK.
    We also have a lot from CAS/HT to the Outlook Clients on the static RPC port (TCP_59933).   And the errors are "TCP packet out of state: First packet isn't SYN" with tcp_flags FIN-ACK, PUSH-ACK and RST-ACK, ACK.
    This happens even on Outlook 2010 which I though it has TCP Keep Alive implmented to keep the session active within 1 hour. 
    Can somebody tell me if these out-of-state are the cause of our problem?  And how to fix it?
    THANK 1,000,000

    Hello AndyHWC,
    I did some consulting with our CAS team and received the following feedback to your post:
    It is difficult to determine what is causing resets without seeing the captures first hand however, the concern is that you are seeing dropped packets on the firewall logs.  Where is this firewall located?
    Based on the description "Check the firewall logs, we notice a lot of "TCP Packet Out of State" drops." and "We have a lot from the CAS/HT to DC/GC on TCP_3268 and
    LDAP." indicates to me that the firewall is between CAS and GC.  This not supported under any circumstances and would explain the issue they are seeing with clients trying to "retrieve data from the GC".
    If there is not a firewall between the GC and CAS then a Microsoft support engineer would need to have concurrent Netmon Captures from client, CAS, GC during the
    issue to analyze.  If only one GC exists consider adding another GC to handle the client requests and for fault tolerance.
    Also verify that all NIC card drivers are updated to the latest driver version
    More information about firewalls with Exchange 2007/2010
    http://msexchangeteam.com/archive/2009/10/21/452929.aspx
    http://technet.microsoft.com/en-us/library/bb232184(EXCHG.80).aspx
    You can install the Client Access server role on an Exchange 2007 computer that is running any other server roles except for the Edge Transport server role. You
    cannot install the Client Access server role on a computer that is installed in a cluster. Installation of a Client Access server in a perimeter network is not supported.
    http://technet.microsoft.com/en-us/library/dd577077(EXCHG.80).aspx
    “The Installation of a Client Access Server in a Perimeter Network Is Not Supported
    Issue You may want to install an Exchange 2007 Client Access server in a perimeter network. However, this type of installation is not supported in Exchange
    2007.
    Cause The Exchange 2007 Client Access server role is not supported in any configuration in which a firewall is located between the Client Access server
    and a Mailbox server or a domain controller. This includes firewall devices, firewall programs, or any program or device that is designed to restrict traffic between two network locations.
    For correct operation, Client Access servers require typical domain connectivity to domain controllers and global catalog servers. Because any devices
    or programs that restrict or reduce access to domain controllers or global catalog servers may affect the correct operation of the Client Access server, we do not support this type of configuration.
    Resolution To resolve this issue, move the Client Access servers to the internal network. For more information about the ports that Exchange 2007 uses
    for various services, see Data Path Security Reference.”
    Thanks,
    Kevin Ca - MSFT
    Kevin Ca - MSFT

  • "The Microsoft Exchange Administrator has made a change that requires you quit and restart Outlook" in Exchange 2013

    In Exchange 2013, Outlook finds a new connection point made up of the user’s mailbox GUID + @ + the domain portion of the user’s primary SMTP address. This change makes
    it much less likely that users will see the dreaded message “Your administrator has made a change to your mailbox.”
    http://technet.microsoft.com/en-us/library/dd298114(v=exchg.150).aspx
    Although the error message in the topic has been already improved a lot in Exchange 2013, the users may still encounter them in some specific scenarios. We have collected them and let’s discuss them in this thread.
    Symptom
    =======================================
    Consider the following scenario:
    Exchange 2013 was installed for a migration from Exchange 2007/2010.
    The legacy Exchange server is removed after successful migration.
    Exchange 2013 may be updated to Exchange 2013 SP1.
    Some users were being randomly prompted with a popup in their outlook client with the following message when connecting with Exchange 2013 server:
    “The Microsoft Exchange Administrator has made a change that requires you quit and restart Outlook”
    Cause
    =======================================
    The issue may be caused due to Public Folders.
    The msExchHomePublicMDB attribute on Exchange 2013 databases was set to deleted legacy public folder object.
    Solution
    =======================================
    Removed the Public Folder from all the Exchange
    2013 Databases. To do it, we can use ADSIedit.msc and remove the arrtibute - msExchHomePublicMDB from all the Databases:
    1. Open ADSIEdit.
    2. Connect to the Configuration container.3.
    Expand Configuration, expand CN=Configuration,DC=Domain,DC=com.4. Expand CN=Services -> CN=Microsoft Exchange -> CN=Domain -> CN=Administrative Groups -> CN=Exchange
    Administrative Group -> CN=Databases.5. In the right hand pane you will see a list of databases.6.
    Right-click the listed database object -> Properties.7. Check whether the msExchHomePublicMDB value is set to an unavailable value. If you see reference to the old database,
    please clear the value.8. Click OK.9. Check the rest of the databases to make sure
    that they are not populated in the same way.
    References:
    https://social.technet.microsoft.com/Forums/en-US/2f736bdd-1c00-4a22-97a5-95faeadf1495/exchange-2013-sp1-users-randomly-prompted-with-the-microsoft-exchange-administrator-has-made-a?forum=exchange2010
    https://social.technet.microsoft.com/Forums/lync/en-US/7a7b3cf8-8761-421c-9d55-6c84e05531c0/the-administrator-has-made-a-change?forum=exchangesvrclients
    https://social.technet.microsoft.com/Forums/en-US/0d71c843-b662-493c-ab6e-30708929ef18/2013-sp1-problem-the-microsoft-exchange-administrator-has-made-a-change-that-requires-you-quit-and?forum=exchangesvrdeploy
    Please click to vote if the post helps you. This can be beneficial to other community members reading the thread.

    This one? http://support.microsoft.com/kb/2934750

  • The Microsoft Exchange Mailbox Replication service was unable to process a request due to an unexpected error. Event 1121

    Hello all,
    We migrated our Exchange server from 2003 to 2010. After the mailbox move requests were finished we had one that was stuck. We basically skipped it as we had a lot of other things to finish over the weekend. Here we are a year later, the old exchange server
    is gone and so is an old DC. I am receiving an error every four minutes in event viewer.
    The Microsoft Exchange Mailbox Replication service was unable to process a request due to an unexpected error.
    Request GUID: '3e46b7cb-2ac0-42c1-98e8-57517a19ee40' 
    Database GUID: '5c6c573b-4f45-4ce3-b296-11cf69c2e2b6'
    Error: Unable to find 'OLD Domain Controller' computer information in domain controller 'OLD Domain Controller' to perform the suitability check. Verify the fully qualified domain name..
    I have checked in EMC for move requests. None are listed. I have checked the DCs listed in EMC properties. Old DC is not listed.
    I also ran these commands in shell to attempt to cancel the stuck request.
    Get-MoveRequest -MoveStatus Completed;Pending;InProgress;Failed;CompletedWithWarning;Suspended;Queued;CompletionWithProgress : Remove-MoveRequest
    NO changes. Still throwing error. Any suggestions? I also tried using the guid and shell to look at the move request. Systems replies no such request.

    Hello,
    Please try to restart iis services to check the result.
    If the issue persists, I recommend you ping you DC server on your exchange server to check if your exchange server can communicate with your DC server.
    If there are other DCs, please try to use set-adserversettings cmdlet to specify a DC for your exchange server.
    Set-AdServerSettings
    http://technet.microsoft.com/en-us/library/dd298063(v=exchg.150).aspx
    Besides, please install the lasted rollup to check the result.
    Cara Chen
    TechNet Community Support

  • #550 5.2.0 STOREDRV.Deliver: The Microsoft Exchange Information Store service reported an error.

    Hi, 
    I created a mailbox few days before, everythign was working fine and suddenly when some one tried to send email on that mailbox it bounced back with following error:
    There's a problem with the recipient's mailbox. Microsoft Exchange will not try to redeliver this message for you. Please try resending this message, or provide the following diagnostic text to your system administrator.
    Sent by Microsoft Exchange Server 2007 
    Diagnostic information for administrators:
    Generating server: Mail01.abc.com
    [email protected]
    #550 5.2.0 STOREDRV.Deliver: The Microsoft Exchange Information Store service reported an error. The following information should help identify the cause of this error: "MapiExceptionNotFound:16.18969:9A000000, 17.27161:00000000CC000000000000000600000000000000,
    255.23226:00000000, 255.27962:FE000000, 255.17082:0F010480, 0.26937:94000000, 4.21921:0F010480, 255.27962:FA000000, 255.1494:00000000, 255.26426:FE000000, 4.7588:0F010480, 4.6564:0F010480, 2.17597:00000000, 2.25805:00000000, 4.8936:0F010480, 4.14312:0F010480,
    4.2199:0F010480, 2.25805:00000000, 4.8936:0F010480, 2.22957:00000000, 2.19693:00000000, 2.17917:00000000, 2.27341:00000000, 4.8936:0F010480, 4.17097:0F010480, 4.8620:0F010480, 255.1750:0F010480, 0.26849:0F010480, 255.21817:0F010480, 0.26297:0F010480, 4.16585:0F010480,
    0.32441:0F010480, 4.1706:0F010480, 0.24761:0F010480, 4.20665:0F010480, 0.25785:EC030000, 4.29881:0F010480". ##
    Original message headers:
    Received: from Mailbox.abc.com ([fe80::892d:93d6:b1ac:b70a]) by mail01
     ([10.72.0.95]) with mapi; Fri, 11 Jan 2013 14:04:55 +0500
    Content-Type: application/ms-tnef; name="winmail.dat"
    Content-Transfer-Encoding: binary
    From: Anwar Amjad <[email protected]>
    To: All-HEC <[email protected]>
    Date: Fri, 11 Jan 2013 14:04:53 +0500
    Subject: FW: Suggestions & New Arrival in HEC Library
    Thread-Topic: Suggestions & New Arrival in HEC Library
    Thread-Index: Ac3vHgwR50OLs2BnQuOzo9jWg4e1gQAvJtUw
    Message-ID: <[email protected]>
    References: <[email protected]>
    In-Reply-To: <[email protected]>
    Accept-Language: en-US
    Content-Language: en-US
    X-MS-Has-Attach: yes
    X-MS-TNEF-Correlator: <[email protected]>
    MIME-Version: 1.0
    X-Auto-Response-Suppress: DR, OOF, AutoReply
    After this error, i treid to send email again and there is no error and email was delivered. What was the cause of this error?
    Hasan

    Hi,
    I tried to start seeding again but it is at same status. I will try again and hopefully it will get resolved.
    But, yesterday i ran in to the most complex issue i have ever seen with Exchange.
    There was a unexpected power cut at our datacentre due to which both the nodes went down.
    After that both the nodes came up. But the all 3 databases were dismounted.
    Therefore, i ran Eseutil /mh resulting dirty shutdown.
    I was able to repair 2 databases.
    But the 3rd one was not mounting with below error.
    Microsoft Exchange Error
    Failed to mount database 'Mailbox Database'.
    Mailbox Database
    Failed
    Error:
    Exchange is unable to mount the database that you specified. Specified database: XXXXX\First Storage Group\Mailbox Database; Error code: MapiExceptionJetErrorAttachedDatabaseMismatch: Unable to mount database. (hr=0x80004005, ec=-1216).
    I was able to mount database somehow. There are 7 User mailboxes (Tier 1) on this database.
    All emails sent to the users in this database are bouncing back with the below error.
    This storage groups holds the mailboxes of my Senior Managements. And their mailboxes are down for almost 20 Hrs. I am spinning my head since yesterday but not able to find any fix. Can you please guide me in this concern.
    Best Regards
    K2
    Kapil Kashyap

  • Office365 Exchange Security Group not updating in Sharepoint Online

    We have created a new Office365 Exchange Security Group that contains several other Exchange Security Groups.  This group will not show up in either the SharePoint Web admin or SharePoint Designer views.
    How can I force SharePoint to re-synchronize the Office365 Tenant users/groups?

    Hi,
    According to your post, my understanding is that Office365 Exchange Security Group does not updating in Sharepoint Online.
    How long did you wait after creating the Group to see if they show up in SharePoint Online? The back-end replication can take some time, even days from my experience.
    Here is a similar thread for your reference:
    http://community.office365.com/en-us/f/156/t/173994.aspx
    More information:
    CIAOPS: Using Office 365 security groups with SharePoint Online
    Regarding SharePoint Online, for quick and accurate answers to your questions, it is recommended that you initial a new thread in Office 365 forum.
    Office 365 forum
    http://community.office365.com/en-us/forums/default.aspx
    Best Regards,
    Linda Li
    Linda Li
    TechNet Community Support

  • Using domain security groups in exchange security groups for Office 365

    Hi
    Is there a way to use O365 domain security groups in O365 exchange security groups. This can be done between O365 domain security groups and O365 SharePoint groups.
    BR // Ille

    Sorry I missed your reply.
    I don't believe there is a way to do this yet, security groups used within exchange need to be mail-enabled security groups, these can't then be edited from the office365 portal, just the Exchange administrative centre portal.
    It looks like you currently still need to keep these separate.
    If you use DirSync and sync from your own domain then it is possible, since you manage the groups from your AD rather than Offfice365, but currently just in o365 there doesn't appear to be a way to do this.
    Regards,
    Denis Cooper
    MCITP EA - MCT
    Help keep the forums tidy, if this has helped please mark it as an answer
    Blog: http://www.windows-support.co.uk 
    Twitter:   LinkedIn:

  • PST Import to archive mailbox - Stays in queue until i restart the microsoft exchange mailbox replication service

    Good Day all,
    Stretched dag between site a and site b.  Cas array at each site.  Mailboxes primarily are located in site a unless there is a major outage then the dag flips to site b.  setup two archive databases, one in site A on a non replicated partition
    of the dag server and one in site B on a separate mailbox only server.
    All exchange servers are patched to the latest sp and rollup.
    site a has no issues at all, everything i import queues up and processes with no problems
    at site b two imports will process and then stop until i restart the microsoft exchange mailbox replication service on the cas server.  No errors no nothing just lots of move request sitting in the queue.
    considering i have an insane amount of psts to import there does anyone have any suggestions besides setting up a task to restart the imicrosoft exchange mailbox replication service every 15 minutes?
    thanks for your help in advance

    Yeah I know from my research when I was setting up the dag you were not a fan of the stretched DAG but it works for us really well and passed all fail over tests that we ran on it <knocking on wood>.
    Yes its running but it stops working after one session.  I have had success in raising the transfer count from 2 to 5 but I can't really go much higher without taking down the server.  the problem is when I am transferring someone with hundreds
    of PSTs I have to babysit it...which sucks..
    anyway, thanks for your help and have a great day :)

  • DAG - Backup failing on 1 DB only with error - The Microsoft Exchange Replication service VSS Writer instance ID failed with error code 80070020 when preparing for a backup of database 'DB012'

    Hi Board,
    i´ve search across the board, technet and symantec sites but did not found a hint about my problem.
    we drive a 2 node DAG (Location1-Ex1-mb1 
    Location2-exc1-mb1), on SP2 RU4 patchlevel with 40 Databases.
    Since some time the backup of one - and only one DB - is failing with these events, logged on the Mailboxserver on which the passive DB is hosted.
    Log Name:      Application
    Source:        MSExchangeRepl
    Date:          28.09.2012 00:37:17
    Event ID:      2112
    Task Category: Exchange VSS Writer
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      Location1-Exc1-MB1
    Description: The Microsoft Exchange Replication service VSS Writer instance 1ab7d204-609a-4aea-b0a7-70afb0db38de failed with error code 80070020 when preparing for a backup of database 'DB012'.
    Followed by
    Log Name:      Application
    Source:        MSExchangeRepl
    Date:         
    01.10.2012 03:33:06
    Event ID:      2024
    Task Category: Exchange VSS Writer
    Level:         Error
    Keywords:      Classic
    User:         
    N/A
    Computer:      Location1-Exc1-MB1
    Description:
    The Microsoft Exchange Replication service VSS Writer (Instance 42916d80-36c1-4f73-86d0-596d30226349) failed with error 80070020 when preparing for a backup.
    The backup Application - Symantec Backup Exec 2010 R3 – states, this error
    Snapshot provider error (0xE000FED1): A failure occurred querying the Writer status.
    Check the Windows Event Viewer for details.
    Writer Name: Exchange Server, Writer ID: {76FE1AC4-15F7-4BCD-987E-8E1ACB462FB7}, Last error: The VSS Writer failed, but the operation can be retried (0x800423f3), State: Stable (1).
    Symatec suggests within http://www.symantec.com/business/support/index?page=content&id=TECH184095
    to restart the MS Exchange Replication Service – BUT the mentioned eventID
    8229 isn´t present on any of the both Mailboxservers.
    The affected Database is active on Location2-Exc1-Mb1 Server and in an overall healthy state. I found during my research, that below Location2-Exc1-Mb1 Server, there are not removed shadow copies present!
    This confuses me, since all Backups are normally taken from the passive copy of a Database.
    So my questions to the board are:
    * Does anyone is facing similar issues?
    * Can someone explain why snapshots are present on the Mailboxserver hosting the Active Database, whilst the errors are logged on the passive one?
    -          * Does someone know the conditions, why shadows copies remain and
    aren´t removed in a proper manner?
    What can cause the circumstance, that only 1 DB is facing such issues?
    Any suggestion is welcome!
    BR
    Markus

    Hi Lenora,
    I´ve encreases VSS / Exchange Backup Log levels to expert, before starting
    those things i´ve all tried now:
    - Backup from passive DB (forced within Symantec Backup Exec)
    - Backup from active DB (forced within Symantec Backup Exec)
    - Backup from passive DB without GRT enabled (forced within Symantec Backup Exec)
    - Backup from active DB without GRT enabled(forced within Symantec Backup Exec)
    All those attempts failed.
    But brought some more details - the backup against the active DB states, that there is still a backup in progress and therefore this backup is cancelled by VSS.
    The Solution was, that i´ve needed to restart the Exchange Replication Service on the Mailbox Server hosting the passive DB.
    Backups are working again on all DBs!
    THX for your replys.
    Best regards
    Markus

  • I've an apple ID used to buy off iTunes and a mobileme account for the calendars and contacts. How can I move the calendars and contacts to the older apple ID and use it for iCloud?

    I've an apple ID used to buy off iTunes and a mobileme account for the calendars and contacts. How can I move the calendars and contacts to the older apple ID and use it for iCloud?

    If you remeber the password to that Apple ID then follow these steps
    1 - Make sure you have an email address that is NOT an Apple ID
    2 - Go to AppleID.Apple.com
    3 - Where it reads Manage Apple ID - Sign in
    Once you are signed in want to make sure the email address you are wanting to use is NOT set up as a "Recovery/Rescue" email for this account.
    [To check this - Main page where you see Primary ID - below do you see the email address you want to use listed towards the bottom? Yes - Delete / No - Good ./. If made any adjustments "Save" Next on the left select "Password & Security" - Answer your security questions you set up "if you have any" then scroll towards the bottom and check to see if you see the email address you want to use. Yes - Delete / No - Good] <-> Also you can change your password on this page as well. Any adjustments made "Save"
    Once this is done go back to the main page where you should read "Primary ID" and change the email address that is showing to the new email address youo want. "Save" Done
    I learned this not to long ago and worked for me. Hope this helps you!

  • How can you move the objects from one server to another?

    how can you move the objects from one server to another?

    Hi,
    Collecting objects for Transporting
    1. rsa1->transport connection
    2. left panel choose 'object type', middle panel choose 'infocube' and 'select objects'
    3. then choose your infocube and 'transfer'
    4. will go to right panel, choose collection mode 'manual' and grouping only 'necessary objects'
    5. after objects collection finished, create request
    6. If they are $TMP, then change the package.
    7. When you click the Save on the change package, it will prompt for transport. Here you can provide an existing open transport request number, or if you like here itself you can create a new one.
    8. You can check the request in SE09 to confirm.
    Releasing Transport Request  
    Lets say you are transporting from BWD to BWQ
    Step 1: In BWD go to TCode SE10
    Step 2: Find the request and release it (Truck Icon or option can be found by right click on request #)
    Note: First release the child request and then the parent request
    Steps below are to import transport (generally done by basis )
    Step 1: In BWQ go to Tcode STMS
    Step 2: Click on Import queue button
    Step 3: Double Click on the line which says BWQ (or the system into which transport has to be imported)
    Step 4: Click on refresh button
    Step 5: High light the trasnport request and import it (using the truck icon)
    Transport
    http://help.sap.com/saphelp_nw2004s/helpdata/en/b5/1d733b73a8f706e10000000a11402f/frameset.htm
    http://help.sap.com/saphelp_nw70/helpdata/en/0b/5ee7377a98c17fe10000009b38f842/frameset.htm
    https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/media/uuid/224381ad-0701-0010-dcb5-d74236082bff
    Hope this helps.
    thanks,
    JituK

  • I have 528 contacts on my phone, but only 290 on my Icloud how can i move the rest over from my phone to my Icloud nothing is working

    I have 528 contacts on my phone, but only 290 on my Icloud how can i move the rest over from my phone to my Icloud nothing is working

    Go to Settings>iCloud, turn Contacts to Off, choose Delete from My iPhone when prompted (they will still be in iCloud).
    Download the app My Contacts Backup to your phone.  Use this app to backup the remaining contacts on your phone (from your exchange account) as a vCard attachment to an email that you send to yourself.  Confirm that you have received the email on your phone.
    Go to Settings>iCloud and turn Contacts back to On.
    Go to Settings>Mail,Contacts,Calendars>Default Account (in the Contacts section), set this to iCloud.  (This will cause new contacts added to your phone to be added to the iCloud account.)
    Go to Settings>Mail,Contacts,Calendars...tap your exchange account and turn off contacts syncing (otherwise you will end up with duplicates on your phone).
    Open the My Contacts Backup email and tap the attachment to import the contacts from your exchange account back to your phone.  They will be added to iCloud and appear on icloud.com and any other devices syncing contacts with your account.

  • Exchange 2013 - The Microsoft Exchange Transport service is rejecting message submissions because the service continues to consume more memory than the configured threshold

    Noticed at about noon that no emails had been received all day. Began to investigate and found that the MS Exchange Transport service had been set to deny email submission because it was using too much memory on the server (91%). 
    The error message makes me think that we may have been getting used by malware or something similar.“The Microsoft Exchange Transport service is rejecting message submissions because the service continues to consume more memory than the
    configured threshold.” 
    There are also several warning messages that list particular IP addresses and say that a connection from that IP was denied because there were already the maximum number of connections (20). 
    From what I can tell, all of the IP addresses are from Taiwan. 
    The time period for which some emails may be missing is from close of business yesterday ( 4/3/2014) through about 12:45 today (4/4/2014). 
    From the time I spent reading and trying to figure out the error, I think we may need to readjust our throttling policies to prevent this from happening. 
    The exchange server is currently running at 90%+ CPU and 50%+ memory usage the majority of the time, and I’m not sure how to fix it.
    Also, I cannot get into EMS I get a access denied message from the destination computer. (Exchange server) I want to get into there to change the throttling policy back to default, since we disabled it.
    The Error reads:
    The WinRM client cannot process the request. The WinRM client tried to use Kerberos authentication mechanism, but the destination computer <Exchange> returned an 'access denied' error. Change the configuration to allow Kerberos authentication
    mechanism to be used or specify one of the authentication mechanism supported by the server. (How do I do this?) To use Kerberos, specify the local computer name as the remote destination. (I'm trying to use EMS while logged into the local Exchange server)
    Also verify that the client computer and the destination computer are joined to a domain. (Exchange is on our domain, and the computer trying to connect is the same computer) To use basic, specify the local computer name as the remote destination, specify
    Basic authentication and provide user mane and password. Possible authentication mechanisms reported by server.
    At line:1 char:1
    + New-PSSession -ConnectionURI "$connectionUri" -ConfigurationName Microsoft.Excha ...
    + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : OpenError: (System.Manageme....RemoteRunspace:RemoteRunspace) [New-PSSession], PSRemotingTransportException + FullyQualifiedErrorId : AccessDenied,PSSessionOpenFailed
    I assumed control of this exchange system already in place and I do not have much experience with exchange 2013 or server 2012. I do know 2008, but that doesn't help very much in this situation.
    Recent changes to the system:
    About three days ago we switch our sessions policy to allow many more connections, and I believe this caused the issue. This is what I changed it to:
    Made the registry DWORD (32-bit) "Maximum Allowed Sessions Per User" and modified the value to 1000. Location of registry change @ HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSExchangeIS\ParametersSystem
    I just changed it to 10 from the 1000. I'm hoping this solves this. So far no.
    Also, I am not the best in the shell or command line interfaces. Any help would be wonderful!

    Hi,
    Yes, could be hardware performance issue. Try recycle the Transport process and see if the issue persists.
    Thanks,
    Simon Wu
    TechNet Community Support

  • Exchange 2013 The Microsoft Exchange Search Host Controller service terminates

    Hi Folks,
    at our Exchange Server ( Version 15.0 (Build 775.38 / 0.1 (8.0.535.0 ) we found over 200k entrys / day saying that:
    The Microsoft Exchange Search Host Controller service terminated unexpectedly.  It has done this 193270 time(s).  The following corrective action will be taken in 30 milliseconds: Restart the service.
    The Command:
    Get-MailboxDatabaseCopyStatus | fl 'Content*'
    shows the following:
    ContentIndexState            : Failed
    ContentIndexErrorMessage     : An internal error occurred for the database or its index
    ContentIndexVersion          :
    ContentIndexBacklog          :
    ContentIndexRetryQueueSize   :
    ContentIndexMailboxesToCrawl :
    ContentIndexSeedingPercent   :
    ContentIndexSeedingSource    :
    i investigated a bit further:
    RunspaceId                            : 06d7b8f6-969f-47f8-89ba-87b2fed639bb
    Identity                              : db_1\exch1
    Id                                    : db_1\exch1
    Name                                  : db_1\exch1
    DatabaseName                          : db_1
    Status                                : Healthy
    InstanceStartTime                     : 14.10.2014 21:03:38
    LastStatusTransitionTime              : 14.10.2014 21:03:45
    MailboxServer                         : exch1
    ActiveDatabaseCopy                    : exch2
    ActiveCopy                            : False
    ActivationPreference                  : 1
    StatusRetrievedTime                   : 15.10.2014 13:36:52
    WorkerProcessId                       : 2076
    ActivationSuspended                   : False
    ActionInitiator                       : Unknown
    ErrorMessage                          :
    ErrorEventId                          :
    ExtendedErrorInfo                     :
    SuspendComment                        :
    RequiredLogsPresent                   :
    SinglePageRestore                     : 0
    ContentIndexState                     : Failed
    ContentIndexErrorMessage              : An internal error occurred for the database or its index
    ContentIndexVersion                   :
    ContentIndexBacklog                   :
    ContentIndexRetryQueueSize            :
    ContentIndexMailboxesToCrawl          :
    ContentIndexSeedingPercent            :
    ContentIndexSeedingSource             :
    CopyQueueLength                       : 0
    ReplayQueueLength                     : 0
    ReplaySuspended                       : False
    ResumeBlocked                         : False
    ReseedBlocked                         : False
    MinimumSupportedDatabaseSchemaVersion : 0.121
    MaximumSupportedDatabaseSchemaVersion : 0.126
    So i read that the Database is OK, but the Index is broken somewhow ?
    I`ve read somewhere that i should delete the GUID Folder and restart the Hostcontroller service, can somebody explain HOW to do this ? where can i Find the GUID Folder ? Is it the correct way to solve this problem ?
    thx in advance!

    Hi,
    after i removed the suggested Folder, i disabled both "Microsoft Exchange Search service and Microsoft Exchange Search Host Controller service, than i restarted the Exchange Server.
    After that i restarted both services.
    Sadly nothing has changed, hostcontroller.exe is still crashing:
    The Microsoft Exchange Search Host Controller service terminated unexpectedly.  It has done this 153 time(s).  The following corrective action will be taken in 30 milliseconds: Restart the service.
    The sequence is like this:
    First the Search controller starts:
    Search HostController Starts: Service started successfully.
    After that the hostcontroller crashes:
    .NET Runtime: Application: hostcontrollerservice.exe
    Framework Version: v4.0.30319
    Description: The process was terminated due to an unhandled exception.
    Exception Info: Microsoft.Ceres.HostController.Controller.HostControllerException
    Stack:
       at Microsoft.Ceres.HostController.WcfServer.WcfService.StartService()
       at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
       at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
       at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
       at System.Threading.ThreadHelper.ThreadStart()
    Than we get this Application Error:
    Application Error:
    Faulting application name: hostcontrollerservice.exe, version: 16.0.775.0, time stamp: 0x5211bea8
    Faulting module name: KERNELBASE.dll, version: 6.2.9200.16864, time stamp: 0x531d34d8
    Exception code: 0xe0434352
    Fault offset: 0x0000000000047b8c
    Faulting process id: 0x2a08
    Faulting application start time: 0x01cfe90eb249f511
    Faulting application path: C:\Program Files\Microsoft\Exchange Server\V15\Bin\Search\Ceres\HostController\hostcontrollerservice.exe
    Faulting module path: C:\Windows\system32\KERNELBASE.dll
    Report Id: f2351e08-5501-11e4-940b-00155d203202
    Faulting package full name:
    Faulting package-relative application ID:
    So if anybody can help - feel free!

  • The Microsoft Exchange Address Book was unable to log on to Exchange

    I am currently migrating a exchange 2007 to exchange 2013.
    Exchange 2013 is installed on a seperate Windows Server 2012 server.
    Exhange 2007 is installed on a  seperate Windows Server 2003 R2 server.
    I have moved some mailboxes from exchange 2007 to exchange 2013 and also created some new mailboxes on the exchange 2013 server itself. 
    OWA, ActiveSync , IMAP are all working correctly for those mailboxes , but I am not able to connect to outlook with the exchange option (local connection).
    Outlook 2013:
    When I use autodiscover to connect to the exchange server step 1 & 2 are working correctly (establishing network connection & searching for mailbox settings) but on the 3th step (logging on to the mail server) I receive the following error
    The name cannot be resolved. The Microsoft Exchange Address Book was unable to log on to Exchange. Contact you system administrator if the problem persists.
    When I filll in the exchange server manually (using the normal servername server.hq.corp.domain.local not the guid version) the check name resolves correctly and the profile creation is finishing ok. But when I try to open outlook with that profile it gives
    me the following errors :
    with cached exchange mode selected:
    Cannot start Microsoft Outlook. Cannot open the Outlook windows. The set of folders cannot be opened. 
    You must connect to Microsoft Exchange with the current profile before you can synchronize your folders with your Outlook data file (.ost)
    with cached exchange mode deselected:
    Cannot start Microsoft Outlook. Cannot open the Outlook windows. The set of folders cannot be opened. 
    Microsoft Exchange is not available. Either there are network problems or the Exchange server is down for maintenance
    When I use the Microsoft Connectivity Analyzer it fails on the following step:
    Testing the address book "Check Name" operation for user [email protected] against server [email protected]
    An error occured while attempting to resolve the name. Elapsed Milliseconds: 91 Additional Details: The address book bind operation failed with status -2147221231. NSPI Status 2147746065

    Hi,
    Please run the following command in Exchange server to get Exchange GUID:
    Get-Mailbox UserA | FL Identity,ExchangeGuid
    Then open Outlook, click File > Account Settings > Account Settings > Change (If you can’t open Outlook, go to Control Pane > Mail to change it). In Server Settings, import the [email protected] into the Server box and click Check Name
    to have a try.
    If the name is checked successfully but also can’t open the profile, please close Outlook. In the Start menu, Run command (Windows key + R), type or paste
    outlook.exe /resetnavpane  (Note: Make sure there is a space between the words.)
    Then press Enter (or OK button) to restart Outlook
    Regards,
    Winnie Liang
    TechNet Community Support

Maybe you are looking for

  • USB Mass storage device CHAOS test time out.

    OS Platform: Windows v6.3 x86 The RunTest time out fails, but no log files are generated. HCK manager show process exit status:-2113819215. The test item keep running WDTF_SIMPLE_IO test until test timeout. Could anyone tell me the root cause and how

  • How to compile other java files and run them from my own programs?

    I'm developing a unit testing tool for AspectJ, which can originally generate the stubs for aspect unit to be tested. All these stubs are java files. After generation of stubs, how can I program the code to compile this unit together with these stubs

  • Serial Number is already Locked by User

    Hi, We have ISU Material where Serialization Profile is activated system. We create Serial Number Automatically when we do the MIGO. The System is giving me a error that " Serial Number is already locked by User". If I enter quantity say for Example

  • How do i get rid of the Yahoo Virus?

    Everytime i type something in the adress bar and hit enter i get redirected to yahoo search. I KNOW THIS HAS BEEN ASKED MANY DAMN TIMES. But the solutions suggested DO NOT WORK, because the keyword.URL does not exist anymore. I've had the same proble

  • Final payment register does not match with Preliminary register and does

    Final payment register -does not match with Preliminary payment reigster- it should have invoice number and PO Number whereas Preliminary payment register has INvoice but does not have a PO number .Cheques issue they would like to see -against which