DAG Member Reboot & Outlook Connectivity

Hello. I Have two Exchange 2013 CU3 Standard servers in a DAG. 
The servers are running Server 2012 Standard.
We’ve had a few users report that they sometimes encounter an error when trying to attach an Outlook item (e-mail message) to an existing item in a public folder calendar.
 The users can attach the item, but when they click on Save, a message stating that “Changes made to the item were lost due to a reconnect with the server.” appears.
  The clients are all running Outlook 2010 SP2.
I have determined that in at least one case, and probably a few more, this happened during or shortly after, I was rebooting our passive DAG member as part of the process of installing Microsoft updates on it. 
I use round robin DNS to achieve the load balancing needed to provide high availability. 
A check on the connectivity status of an Outlook client shows the name of the DNS record associated with this as the proxy server. 
 The name is essentially “serverLB”.  Since I have DNS records for serverLB that point to the IP address of each DAG members, is it possible that some clients are connecting to the passive node, and, therefore, affected
by it being rebooted?    I’d like to understand how rebooting the passive server causes the problem encountered by the Outlook users. 
If you have any insights into that, please share them with me. 
Thanks.

Hi. Thank you for the response.
I have two nodes in the DAG.
 The passive server is completely passive - it has no mounted databases.
Please clarify your comment about checking "server health” on the active node when the passive node is rebooting. 
What exactly do I look for, and what is the best method of doing this? 
As far as checking replication health when the passive node is rebooting, I would expect Test-ReplicationHealth to indicate that replication is failing because one of the servers is rebooting and, therefore, unavailable. 
With regards to database copy status, I would also expect that get-mailboxdatabasecopystatus * would report failures since the passive node is unavailable due to the reboot.
Accessing the user mailbox through OWA rather than Outlook is a good idea. I'll try that during our next scheduled reboot. That, however, may not happen for about a week.
I don’t have the money for a hardware load balancing solution, and network load balancing is incompatible with a DAG. 
Consequently, round robin DNS is the only option for me.
Please clarify your comment about adding HOST file entries. 
Do you mean that if I add two entries for serverLB and the IP address of each server to the HOST file on each client, I could avoid the issue I have asked about?

Similar Messages

  • SGE2010: stack member reboots with 'Lost connection with unit x reason 0x20097'

    Hi All,
    Over the last 2 months we've had repeated issues with SGE2010 units in a stacking configuration rebooting randomly.
    Prior to a member reboot occuring we see the following logging message via SNMP Trap on on the unit's internal logging via the GUI:
    'Lost connection with unit x reason 0x20097'
    We've made attempts at consulting Linksys/Cisco support regarding this 'feature' but aren't really getting anywhere with 1st level support who don't seem to understand much about supporting the device.
    The layout is thus:
    * 3 x SGE2010 units all of the same firmware version (3.0.1.0)
    * Stack configured in a ring topology
    * Cat6 cabling used on the stacking ports
    * 7 VLAN's
    * Mixture of trunking + VLAN tagging & standard ports configured
    We've tried the following:
    * Swapping out the member that reboots with another, but we get the same behaviour even with a new unit after about three weeks of running
    * Changing the cabling between the members, same behaviour
    * Upgrading the firmware from a previous version to the current 3.0.1.0
    I'm not really keen on factory resetting the whole show & reconfiguring 144 ports by hand (the downtime will cost my users dearly, not to mention carpal tunnel from overuse of the web GUI)
    Is anyone able to clarify what a reason code of 0x20097 is?
    At least understanding what the error is may allow us to better understand the condition in which the switch decides it must reboot.

    Hi Lee,
    The small Business support center (SBSC) is the place to get this problem resolved.  If the technician needs to get the error code looked at by a Product Engineer, then they have to escalate your call into the bowels of Cisco development.
    Please call into  the SBSC again,  and try to reopen or open a new case.  This call has to be resolved or escalated.
    You have the ability to say to the technician ,
    1.  "I want this call escalated"  or
    2.  " I want to speak to the Manager On Duty to esclatate the call"
    If you have any issues, please  let me know.
    My email address is   dhornste  at  cisco.com    (remove the spaces and replace at with @)
    here is a link to get hopefully a local number to call into the SBSC.
    http://www.cisco.com/en/US/support/tsd_cisco_small_business_support_center_contacts.html
    regards Dave

  • Outlook connection status window explained

    (this may be an already discussed topic, in that case feel free to answer with a hyperlink to another technet forum topic)
    Dear all,
    I am looking for a technet blog post, that explains all the tiny little details of the "Connection status" window, that is accessible if I CTRL+right click on the Outlook 2010 tray bar. I would like to receive some very professional and at
    least Level 300 explanation of all the possible information visible in this troubleshooting window. Unfortunately there are hundreds of hits for this search term, I find it nearly impossible to find that single article that is right for me.
    Richard
    PS: I think my question wasnt posted in the best topic, I would like to ask an admin to move it into the proper category under Exchange server

    Servername: pretty obvious :)
    Type:
    Directory => what is the server providding the answer to DSQUERY command / rpc proxy for authentification (therefore it is normal to see your exchange server when using outlook anywhere if you would use a direct mapi connection the "real"
    DC/GC name would show). This one is normally there twice , once for GC once for DC.
    Mail => you mailbox store server
    Public folder => if you still have a public folder store, that will identify what is the PF you are connected to.
    Interface: the local network interface used for the connection so either your wired connection or the wireless card
    Conn: HTTPS or MAPI, if you are using Exchange 2013 you will always see HTTPS. for older version, MAPI can only be on the local network.
    Status: current status of the connection type, you will see that changing if you start outlook /rpcdiag from at home.
    req/fail: number of current request/number of current request failed
    Avg Resp: delay of response (in ms) can be usefull to troubleshoot for long request (with exmon) or network bottleneck
    Authn: NTLM, KERBEROS, certificate etc...
    from the complet article about the change of outlook connectivity, here is also the explanation to the field that were not in previous outlook version (http://blogs.technet.com/b/exchange/archive/2014/05/09/outlook-connectivity-with-mapi-over-http.aspx):
    Field
    Value
    Protocol
    HTTP (v/s RPC/HTTP for Outlook Anywhere)
    Proxy Server
    Empty
    Server name
    Actual server name (v/s GUID for Outlook Anywhere connections)
    I hope that answer your question, however nowadays aside to check the current connection status of the client, you will get more usefull troubleshooting info from the exchange logs.
    Regards,
    Eric
    Please“Vote As Helpful”if you find my contribution useful or “MarkAs Answer” if it does answer your question.
    That will encourage me - and others - to take time out to help you.

  • Microsoft Test Agent appears to be blocking Outlook connectivity to Exchange

    Core Problem
    The problem I am having is that connectivity to Exchange from Outlook is blocked while executing an integration test through the Microsoft Test Agent (i.e. Outlook
    is in the disconnected state). The test is launched through Microsoft Test Manager.
    Below is the code for the integration test I am having problems with and I simplified the code as much as possible to rule out code within the integration test
    causing the problem. I also eliminated all other tests from running.
    [TestMethod]
    public void LaunchOutlook()
    Process.Start(new ProcessStartInfo(@"C:\Program Files (x86)\Microsoft Office\Office14\Outlook.exe"));
    Thread.Sleep(120000);
    I can change how long Outlook is blocked by changing the Thread.Sleep timeout. While the test is running, I can restart Outlook and Outlook is still blocked.
    After the test ends while Outlook is still running, connectivity to Exchange is restored. This happens for Outlook 2010 and Outlook 2013. If I run the integration test within a console app, Outlook connectivity is not blocked. If I run the test code manually
    through MSTest.exe, Outlook connectivity is not blocked.  The only way it’s blocked is if the integration test is executed by the Microsoft Test Agent which is the required approach for integration testing.
    More details on the problem
    Outlook is running on a machine that is part of a Hyper-V Lab with network isolation enabled. There are other machines within the same lab that have Outlook
    instances pointed against the same Exchange server. Executing the test on one machine causes Outlook connectivity issues with other machines within the same lab where the Outlook instances are pointed at the same Exchange server.
    I have small Hyper-V lab with network isolation enabled which is very similar to the lab mentioned above. The major difference is that it only has one machine
    with Outlook installed. This Outlook is able to connect to Exchange while executing the test above through Microsoft Test Manager. It is very clear that this is an environmental issue since it works in one lab and not the other. Both labs have the same Exchange
    server installed, and the same Microsoft Test Agent installed on all machines within the lab.
    I have ruled out the Outlook version as being the issue since the larger lab contains the same Outlook version as the Outlook version in the smaller lab.
    During test run
    Notice that Outlook is in the disconnected state.
    After test run.
    Notice that Outlook is not connected to Exchange.
    Environment Information
    Outlook 2010 Version: (14.0.7113.5000) SP2 (14.0.1740.5002) 64-bit or 32-bit Outlook 2013 Version: (15.0.4667.1000) MSO (15.0.4675.1002) 64-bit or 32-bit Windows
    7 Version: 6.1 (Build 7601: Service Pack 1)
    Exchange 2013 Version: 15.0 ‎(Build 847.32)‎ Windows Server 2008 R2 Version: 6.1 (Build 7601: Service Pack 1) Microsoft Test Manager 2013 Version: 12.0.31101.0
    TFS 2013 Update 4 Version: 12.0.31101.0 Microsoft Test Agent Version: 12.0.31101.0 Update 4
    Troubleshooting Steps
    I launched procmon and looked for failed TCP and UDP operations for indication of network failures and found none.
    I turned on enable troubleshooting logging in Outlook and nothing within the logs looks obvious.
    Pinging the Exchange server while the test is running still works.
    I ran the integration test through the command line using MSTest.exe and outlook connectivity is not blocked.
    Requesting Help
    Can you please help me troubleshoot this problem? I see two approaches to identifying the problem.
    Looking for differences between the two environments
    Obtaining logs or other information that would expose the core problem.
    I am open to suggestions or ideas especially if you have a different approach to solving the problem. Feel free to ask for other information related to the problem
    like logs, PowerShell commands, and registry values.
    If you are short on time, can you at least post some suggestions or ideas related to resolving this problem?
    Thanks, Keith

    After installing fiddler I figured out what the problem was. The Microsoft Test Agent was activating a proxy server which was blocking connectivity to exchange. The proxy server was activated due to having the ASP.Net Client Proxy for IntelliTrace and Test
    Impact turned on. 
    Below is a link to the article with the exact same problem.
    https://social.msdn.microsoft.com/Forums/vstudio/en-US/ecc0b342-8e4d-436c-90c2-5f11bce1e9d8/proxy-server-settings-being-set-automatically-which-is-causing-me-not-to-be-able-to-run-manual-test?forum=vsmantest

  • DAG member, PF database host, and hub maintenance (6hr power-off)

    Hello, 
    We have an EPO test coming up in one of our data centers that requires me to power off 2 of our 4 DAG members. In preparation for this I’ve been reading up on DAG member maintenance best practice as well as deconstructing the Start[Stop]DagServerMaintenance.ps1
    script. After testing in my lab I noticed that the iteration of Suspend-MailboxDatabaseCopy is followed by the parameter -ActivationOnly and sets ActivationSuspended to True. Why only suspend copy activation and not database copy processes? Does the script
    assume that DAG member maintenance does not include server shutdown or is suspending database copy processes not actually necessary? 
    Also, one of the DAG members I have to power off serves 1 of 3 of our PF databases. I’ve noticed that the Start[Stop]DagServerMaintenance.ps1 scripts do nothing for PF databases. Should I just unmount it and rely on standard PF replication to update it when
    I mount it back? Do I need to change my databases over to use a different PF database?
    The power-off duration is 6 hours so I'm not too worried about log build up. Our CAS servers are VMs and will be “motioned” to our other data center. We have two Hub Transport servers, I plan to simply power one of them off. Am I missing anything?
    Thanks!

    Belinda, 
    Your understanding and the article you provided on Managing Database Availability Groups seems to be inline with what I've described. However,
    just our of curiosity can you or anyone else explain why the script StartDagServerMaintenance.ps1
    only runs Suspend-MailboxDatabaseCopy -ActivationOnly? In other words, why does the script only suspend copy activation and not the copy process? 
    "Did the two Hub Transport servers locate in the same AD site?", yes they are in the same
    AD site but different physical locations. The article on HSS helped explain HT HA. 
    Thanks again! 

  • My Mac Book Pro is slow and at times I have to reboot to connect to the net

    My Mac Book Pro is slow and at times I have to reboot to connect the net.  Also wondering how do I check if my software is up to date?  Thank you.

    To check to see if your software is up to date, go to >Software Update and you can check for updates.
    No idea why your Mac is slow--there could be a variety of things that could cause slowness. A good start would be to see if all your RAM is recognized. >About this Mac will show you how much RAM you have. You can also open Activity Monitor and check your RAM usage.
    Also, how full is your hard drive? You should have a minimum of 10% free space for the OS to operate properly, and 15% to 20% is better.
    No idea why you have to reboot to connect to the internet, but it could be related to the slowness. Rebooting will free up RAM among other things.
    Which MBP do you have and which version of the OS are you running?

  • Server and mailbox name check popup when opening Outlook connecting to Exchange 2010

    Everytime our users open Outlook 2007 or 2010
    this box pops up asking to verify the Microsoft Exchange server name and mailbox name. The user's information is automatically filled in and clicking ok makes the box go away but it will eventually pop up again or when outlook is closed and re-opened. 
    When "cached mode" is disabled the problem goes away (but "cached mode" is necessary for our users).
    The problem began when we deleted an old Exchange 2003 server (we are now using only Exchange Server 2010). 
    Outlook user's profile has been recreated : does not fix.  Users having that problem with Outlook 2010 dot not experience it with the OWA interface.
    How to fix that problem ?
    sti_cartem

    Hello,
    The issue seems related to the oab.
    I suggest you use EXRCA to test outlook connectivity.
    https://www.testexchangeconnectivity.com/ 
    If you have any feedback on our support, please click
    here
    Cara Chen
    TechNet Community Support

  • Exchange msstd: setting in outlook connection for Outlook Anywhere

    I currently have the Exchange Provider for EXPR set to $null, however I still seem to get msstd:mail.mydomain.com set in my Outlook connection string setting on all machines. Where is this setting coming from? We do push the Outlook Anywhere settings
    via GPO and have the ProxyServer string defined set to mail.mydomain.com. The flags are set to ensure SSL is defined on the connection.
    We are in the process of moving from Exchange 2007 to Echange 2013. Will it be a problem moving from a UCC cert with a friendly name of mail.mydomain.com to a wild card SSL cert on the 2013 servers with *.mydomain.com set, if the
    "connect to proxy servers that have this principal name in their certificate is selected? I'm concerned that msstd:mail.mydomain.com  does not match msstd:*.mydomain.com?
    Thanks in advance

    Hi,
    We can run the following command to set with Ed’s suggestion:
    Set-OutlookProvider -Identity EXPR -CertPrincipalName msstd:*.mydomain.com
    Regards,
    Winnie Liang
    TechNet Community Support

  • Outlook connection question

    Currently we are running Outlook 2007 with Exchange 2010, I am about to install Exchange 2013 and we are not going to upgrade Office 2007 yet. So my question is can I still use a MAPI connection to exchange 2013 and NTLM? If so how would I go about that,
    Thanks.
    MSB

    Hi,
    From your description, I would like to clarify the following thing:
    RPC over HTTP Proxy component, which Outlook Anywhere clients use to connect, wraps remote procedure calls (RPCs) with an HTTP layer. In Exchange 2013, Outlook Anywhere is enabled by default, because all Outlook connectivity takes place via Outlook Anywhere.
    The only post-deployment task you need to perform to successfully use Outlook Anywhere is to install a valid SSL certificate on your Client Access server. Mailbox servers in your organization only require the default self-signed SSL certificate.
    For your reference:
    Outlook Anywhere
    https://technet.microsoft.com/en-us/library/bb123741(v=exchg.150).aspx
    Hope this can be helpful to you.
    Best regards,
    Amy Wang
    TechNet Community Support

  • Exchange 2013 SP1 - Unable to test Mapi-over-HTTP Outlook Connectivity

    I've configured MAPI over HTTP in my testing environment. It is working fine. But i'm unable to test this configuration using the Powershell Test-OutlookConnectivity CMDlet.
    Outlook is working fine and is using MAPI over HTTP, so i'm pretty sure there are no configuration problems. But the CMD-let gives me the following output:
    [PS] C:\Windows\system32>Test-OutlookConnectivity -RunFromServerId <myserver> -ProbeIdentity OutlookMapiHttpSelfTestProbe
    WARNING: An unexpected error has occurred and a Watson dump is being generated: Failed to find the probe result for
    invoke now request id 1ad0cb55e6cc45c791194b34641fe3c2 and probe workdefinition id 241.
    Failed to find the probe result for invoke now request id 1ad0cb55e6cc45c791194b34641fe3c2 and probe workdefinition id
    241.
        + CategoryInfo          : NotSpecified: (:) [Test-OutlookConnectivity], InvalidOperationException
        + FullyQualifiedErrorId : System.InvalidOperationException,Microsoft.Exchange.Management.Tasks.TestOutlookConnecti
       vity
        + PSComputerName        : <fqdn of my serer>
    Does anyone have a sollution for this?

    Hello @all,
    I got the same issue. The configuration is functional (Outlook connects over http). But the test-cmdlet raises this error. Is there any solution?
    Greetings from Germany

  • Outlook Connectivity Question

    Hello  All:
          In our client case they have Outlook installed in laptops, etc. But their exchange server is outside of the company. So they connect to it through some proxy using HTTP. Does it have any problem working with SBO outlook addon? My understand of it always is that outlook addon only look at outlooks, wether how outlooks connect to it's server or other servers is not a concern! Is that true? Thank You!
    Sincerely Yours

    Bo,
    You can start with this link ... https://websmp205.sap-ag.de/~sapidb/011000358700007392752004E.
    Once you are here, you will need to click on SAP Business One Products > Updates > SAP Business One 2005A > SAP Business One 2005A > Entry by Component, then either SAP B1 - SP00 Patches or SAP B1 - SP01 Patches, the appropriate B1 add-on.
    Sorry .. there is not a direct link to it and you will need your "S" number to log into the portal.
    HTH,
    Eddy

  • Group owner distribution list cant add/remove member via outlook but via ecp work fine

    Hi all,
    i user exchange server 2013 sp1 with domain contoler windows server 2008 R2.
    my end user have problem. When group owner want to add/remove member via outlook cant but via ecp work fine ?
    i try to folowing this article http://theucguy.net/group-owners-cannot-manage-distribution/ but not work.
    any ideas? please help
    thanks,

    Hi,
    Please share me the error message which is occurring when the group owner try to add or remove members.
    Note : Group owners cannot be as a group and it should be an individual member.
    Please execute the below mentioned command and let me know the status .
    Get-DistributionGroup –ID “DistributionGroupName”
    | Set-DistributionGroup –ForceUpgrade
    Execute the above mentioned command and check.
    Regards
    S.Nithyanandham
    Thanks & Regards S.Nithyanandham

  • MSI MS-6390LE-L reboots when connecting the internet

    Built a new system with the MSI  MS-6390LE-L motherboard based on the KM266 chipset and Athlon CPU. It is rebooting when connecting to the internet (installed a SonicBlue Supra PCI modem). Now I read the small print burried in the specs that states: Must use proprietary PCI Modem card with PCTEL solution.
    However there is no listing of modems on your site that will work! Does any  brand and model PC-Tel chipset modem work, if not then do any CNR modems work?  

    Quote
    Originally posted by Richard T
    FYI,
    I'm using an AOpen FM56-PV with my 6390L with no problems at all.
    What about with AOL? Which OS do you run? Have tried 4 different modems and Win XP will not connect up to AOL at all.

  • Outlook connectivity and mail flow issue on Exchange 2010 3 node DAG

    Hi,
    I have 3 node DAG, 2 (NODE A, NODE B) in Production site and 1(NODE C) in DR site. but just 1 AD Site.
    when I have the active databases on NODE B, everything works fine. no issues to report.
    but when I move the databases on NODE A, outlook gets connected with trying to update folders. Furhter, emails will be in outbox and no new emails will be delivered to the users. After an hour or so emails get delivered from outbox.
    Even after supplying the credentials OWA doesnt login. just tries to load.
    No issues when I move the servcies on NODE C.
    ANy idea what could be the issue?
    Thanks,
    Vinod

    Hi Vinod,
    According to your description, there is one-hour delay in the process of sending and receiving emails.
    To check if it’s caused by Autodiscover service, we can use the tool Test Email AutoConfiguration:
    1. Hold CTRL and Click the outlook Icon in the system tray and select “Test Email Auto Configuration”.
    2. Deselect the “Use Guessmart” and “Secure Guessmart Authentication” and click Test.
    3. Check SCP value returned
    For more information, please refer to the following article:
    http://blogs.technet.com/b/exchdxb/archive/2012/05/10/troublshooting-autodiscover-exchange-2007-2010.aspx
    http://support.microsoft.com/kb/2663435
    http://support.microsoft.com/kb/262052
    If connectivity is well, the issue is mostly likely caused by the Exchange mail submission service.
    We can check if the service work properly. And the issue may be not related to the Hardware Load Balancer. Because the emails are stuck in the client side.
    Thanks,
    Angela Shi
    TechNet Community Support

  • Outlook not switched over to active DAG member after failover

    I have a 2 server DAG stretched across sites for DR.  Both of these servers are multi-role and have the HT, CAS, and MBOX roles.  Everything with the DAG seems to be working fine, as does what turned out to be an accidental failover to the remote
    site.  A fail back also went fairly smoothly.
    However, I've now discovered that some Outlook clients switched over to the DR server automatically and now they will not switch back.  I will come out right away and say that I do not have a CAS array.  I just learned about the CAS array while
    researching the problem.  After refreshing my own mailbox profile, everything swapped back, but obviously I don't want to go around everywhere making that change.  I don't even know how many people are still connecting to the DR server.  In
    fact, the only problem with the people that are connecting to the DR server is a little extra latency.
    Obviously, I would like this to work better, and would like a good way to get the outlook users swapped back to where they should be right now.

    There is a public folder and it is on the same server as the mailboxes.
    2014-05-05T19:58:17.555Z,239,0,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,10.1.1.32,fe80::45df:6c5e:aec6:fad1%14,ncacn_ip_tcp,,Connect,0,00:00:00.0312510,"SID=S-1-5-21-2073836326-1490033320-1384523041-3159, Flags=None",
    2014-05-05T19:58:17.571Z,239,1,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,,,ncacn_ip_tcp,,OwnerLogon,1144 (rop::WrongServer),00:00:00,"Logon: Owner, /O=Company/OU=domain/cn=Recipients/cn=user in database Mailbox Database 2063624589 last mounted on Server1.Company.com at 5/2/2014 4:36:10 AM, currently Mounted; Redirected: this server is not in a preferred site for the database, suggested new server: /o=Company/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=Server1",RopHandler: Logon:
    2014-05-05T19:58:17.602Z,239,2,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,,,ncacn_ip_tcp,,Disconnect,0,00:00:00.0781275,,
    2014-05-05T20:22:59.321Z,217,222,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,,,ncacn_ip_tcp,,DelegateLogoff,0,00:00:00,LogonId: 0,
    2014-05-05T20:22:59.337Z,217,222,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,,,ncacn_ip_tcp,,DelegateLogoff,0,00:00:00.0156255,LogonId: 1,
    2014-05-05T20:22:59.368Z,217,222,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,,,ncacn_ip_tcp,,DelegateLogoff,0,00:00:00.0468765,LogonId: 2,
    2014-05-05T20:22:59.400Z,217,222,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,,,ncacn_ip_tcp,,Disconnect,0,07:43:06.1863315,,
    2014-05-05T20:28:35.067Z,240,0,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,10.1.1.32,fe80::45df:6c5e:aec6:fad1%14,ncacn_ip_tcp,,Connect,0,00:00:00.0156255,"SID=S-1-5-21-2073836326-1490033320-1384523041-3159, Flags=None",
    2014-05-05T20:28:35.098Z,240,1,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,,,ncacn_ip_tcp,,OwnerLogon,1144 (rop::WrongServer),00:00:00,"Logon: Owner, /O=Company/OU=domain/cn=Recipients/cn=user in database Mailbox Database 2063624589 last mounted on Server1.Company.com at 5/2/2014 4:36:10 AM, currently Mounted; Redirected: this server is not in a preferred site for the database, suggested new server: /o=Company/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=Server1",RopHandler: Logon:
    2014-05-05T20:28:35.113Z,240,2,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,,,ncacn_ip_tcp,,Disconnect,0,00:00:00.0625020,,
    2014-05-05T20:28:35.348Z,241,0,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,10.1.1.32,fe80::45df:6c5e:aec6:fad1%14,ncacn_ip_tcp,,Connect,0,00:00:00,"SID=S-1-5-21-2073836326-1490033320-1384523041-3159, Flags=None",
    2014-05-05T20:28:35.379Z,241,1,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,,,ncacn_ip_tcp,,OwnerLogon,1144 (rop::WrongServer),00:00:00.0156255,"Logon: Owner, /O=Company/OU=domain/cn=Recipients/cn=user in database Mailbox Database 2063624589 last mounted on Server1.Company.com at 5/2/2014 4:36:10 AM, currently Mounted; Redirected: this server is not in a preferred site for the database, suggested new server: /o=Company/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=Server1",RopHandler: Logon:
    2014-05-05T20:28:35.395Z,241,2,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,,,ncacn_ip_tcp,,Disconnect,0,00:00:00.0468765,,
    2014-05-05T20:28:42.411Z,242,0,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,10.1.1.32,fe80::45df:6c5e:aec6:fad1%14,ncacn_ip_tcp,,Connect,0,00:00:00,"SID=S-1-5-21-2073836326-1490033320-1384523041-3159, Flags=None",
    2014-05-05T20:28:42.442Z,242,1,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,,,ncacn_ip_tcp,,OwnerLogon,1144 (rop::WrongServer),00:00:00.0156255,"Logon: Owner, /O=Company/OU=domain/cn=Recipients/cn=user in database Mailbox Database 2063624589 last mounted on Server1.Company.com at 5/2/2014 4:36:10 AM, currently Mounted; Redirected: this server is not in a preferred site for the database, suggested new server: /o=Company/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=Server1",RopHandler: Logon:
    2014-05-05T20:28:42.457Z,242,2,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,,,ncacn_ip_tcp,,Disconnect,0,00:00:00.0468765,,
    2014-05-05T20:28:57.708Z,243,0,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,10.1.1.32,fe80::45df:6c5e:aec6:fad1%14,ncacn_ip_tcp,,Connect,0,00:00:00,"SID=S-1-5-21-2073836326-1490033320-1384523041-3159, Flags=None",
    2014-05-05T20:28:58.005Z,244,0,/O=Company/OU=domain/cn=Recipients/cn=user,,SearchProtocolHost.exe,12.0.6672.5000,Cached,10.1.1.32,fe80::45df:6c5e:aec6:fad1%14,ncacn_ip_tcp,,Connect,0,00:00:00,"SID=S-1-5-21-2073836326-1490033320-1384523041-3159, Flags=None",
    2014-05-05T20:28:58.020Z,244,1,/O=Company/OU=domain/cn=Recipients/cn=user,,SearchProtocolHost.exe,12.0.6672.5000,Cached,,,ncacn_ip_tcp,,OwnerLogon,1144 (rop::WrongServer),00:00:00,"Logon: Owner, /O=Company/OU=domain/cn=Recipients/cn=user in database Mailbox Database 2063624589 last mounted on Server1.Company.com at 5/2/2014 4:36:10 AM, currently Mounted; Redirected: this server is not in a preferred site for the database, suggested new server: /o=Company/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=Server1",RopHandler: Logon:
    2014-05-05T20:28:58.052Z,244,2,/O=Company/OU=domain/cn=Recipients/cn=user,,SearchProtocolHost.exe,12.0.6672.5000,Cached,,,ncacn_ip_tcp,,Disconnect,0,00:00:00.0468765,,
    2014-05-05T20:28:58.677Z,243,1,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,,,ncacn_ip_tcp,,DelegateLogon,0,00:00:00.9531555,"Logon: Delegate, /o=Company/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=other user in database Mailbox Database 2063624589 last mounted on Server1.Company.com at 5/2/2014 4:36:10 AM, currently Mounted; LogonId: 0",
    2014-05-05T20:29:05.286Z,243,7,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,,,ncacn_ip_tcp,,DelegateLogon,0,00:00:01.0469085,"Logon: Delegate, /O=Company/OU=domain/cn=Recipients/cn=cjoynt in database Mailbox Database 2063624589 last mounted on Server1.Company.com at 5/2/2014 4:36:10 AM, currently Mounted; LogonId: 1",
    2014-05-05T20:29:06.552Z,243,27,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,,,ncacn_ip_tcp,,DelegateLogon,0,00:00:00.6718965,"Logon: Delegate, /O=Company/OU=domain/cn=Recipients/cn=cjoynt in database Mailbox Database 2063624589 last mounted on Server1.Company.com at 5/2/2014 4:36:10 AM, currently Mounted; LogonId: 2",
    2014-05-05T20:33:09.013Z,243,36,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,,,ncacn_ip_tcp,,DelegateLogoff,0,00:00:00,LogonId: 0,
    2014-05-05T20:33:09.028Z,243,36,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,,,ncacn_ip_tcp,,DelegateLogoff,0,00:00:00.0156255,LogonId: 1,
    2014-05-05T20:33:09.060Z,243,36,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,,,ncacn_ip_tcp,,DelegateLogoff,0,00:00:00.0468765,LogonId: 2,
    2014-05-05T20:33:09.091Z,243,36,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,,,ncacn_ip_tcp,,Disconnect,0,00:04:11.3830440,,
    2014-05-05T20:33:15.435Z,245,0,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,10.1.1.32,fe80::45df:6c5e:aec6:fad1%14,ncacn_ip_tcp,,Connect,0,00:00:00,"SID=S-1-5-21-2073836326-1490033320-1384523041-3159, Flags=None",
    2014-05-05T20:33:15.482Z,245,1,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,,,ncacn_ip_tcp,,OwnerLogon,1144 (rop::WrongServer),00:00:00,"Logon: Owner, /O=Company/OU=domain/cn=Recipients/cn=user in database Mailbox Database 2063624589 last mounted on Server1.Company.com at 5/2/2014 4:36:10 AM, currently Mounted; Redirected: this server is not in a preferred site for the database, suggested new server: /o=Company/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=Server1",RopHandler: Logon:
    2014-05-05T20:33:15.497Z,245,2,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,,,ncacn_ip_tcp,,Disconnect,0,00:00:00.0625020,,
    2014-05-05T20:33:15.763Z,246,0,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,10.1.1.32,fe80::45df:6c5e:aec6:fad1%14,ncacn_ip_tcp,,Connect,0,00:00:00,"SID=S-1-5-21-2073836326-1490033320-1384523041-3159, Flags=None",
    2014-05-05T20:33:15.779Z,246,1,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,,,ncacn_ip_tcp,,OwnerLogon,1144 (rop::WrongServer),00:00:00,"Logon: Owner, /O=Company/OU=domain/cn=Recipients/cn=user in database Mailbox Database 2063624589 last mounted on Server1.Company.com at 5/2/2014 4:36:10 AM, currently Mounted; Redirected: this server is not in a preferred site for the database, suggested new server: /o=Company/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=Server1",RopHandler: Logon:
    2014-05-05T20:33:15.810Z,246,2,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,,,ncacn_ip_tcp,,Disconnect,0,00:00:00.0468765,,
    2014-05-05T20:33:15.810Z,247,0,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,10.1.1.32,fe80::45df:6c5e:aec6:fad1%14,ncacn_ip_tcp,,Connect,0,00:00:00,"SID=S-1-5-21-2073836326-1490033320-1384523041-3159, Flags=None",
    2014-05-05T20:33:15.841Z,247,1,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,,,ncacn_ip_tcp,,OwnerLogon,1144 (rop::WrongServer),00:00:00,"Logon: Owner, /O=Company/OU=domain/cn=Recipients/cn=user in database Mailbox Database 2063624589 last mounted on Server1.Company.com at 5/2/2014 4:36:10 AM, currently Mounted; Redirected: this server is not in a preferred site for the database, suggested new server: /o=Company/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=Server1",RopHandler: Logon:
    2014-05-05T20:33:15.857Z,247,2,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,,,ncacn_ip_tcp,,Disconnect,0,00:00:00.0468765,,
    2014-05-05T20:34:26.375Z,248,0,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,10.1.1.32,fe80::45df:6c5e:aec6:fad1%14,ncacn_ip_tcp,,Connect,0,00:00:00.0156255,"SID=S-1-5-21-2073836326-1490033320-1384523041-3159, Flags=None",
    2014-05-05T20:34:26.390Z,248,1,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,,,ncacn_ip_tcp,,OwnerLogon,1144 (rop::WrongServer),00:00:00,"Logon: Owner, /O=Company/OU=domain/cn=Recipients/cn=user in database Mailbox Database 2063624589 last mounted on Server1.Company.com at 5/2/2014 4:36:10 AM, currently Mounted; Redirected: this server is not in a preferred site for the database, suggested new server: /o=Company/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=Server1",RopHandler: Logon:
    2014-05-05T20:34:26.422Z,248,2,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,,,ncacn_ip_tcp,,Disconnect,0,00:00:00.0625020,,
    2014-05-05T20:34:26.937Z,249,0,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,10.1.1.32,fe80::45df:6c5e:aec6:fad1%14,ncacn_ip_tcp,,Connect,0,00:00:00,"SID=S-1-5-21-2073836326-1490033320-1384523041-3159, Flags=None",
    2014-05-05T20:34:26.953Z,249,1,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,,,ncacn_ip_tcp,,OwnerLogon,1144 (rop::WrongServer),00:00:00,"Logon: Owner, /O=Company/OU=domain/cn=Recipients/cn=user in database Mailbox Database 2063624589 last mounted on Server1.Company.com at 5/2/2014 4:36:10 AM, currently Mounted; Redirected: this server is not in a preferred site for the database, suggested new server: /o=Company/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=Server1",RopHandler: Logon:
    2014-05-05T20:34:26.984Z,249,2,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,,,ncacn_ip_tcp,,Disconnect,0,00:00:00.0468765,,
    2014-05-05T20:34:27.234Z,250,0,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,10.1.1.32,fe80::45df:6c5e:aec6:fad1%14,ncacn_ip_tcp,,Connect,0,00:00:00,"SID=S-1-5-21-2073836326-1490033320-1384523041-3159, Flags=None",
    2014-05-05T20:34:27.250Z,250,1,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,,,ncacn_ip_tcp,,OwnerLogon,1144 (rop::WrongServer),00:00:00,"Logon: Owner, /O=Company/OU=domain/cn=Recipients/cn=user in database Mailbox Database 2063624589 last mounted on Server1.Company.com at 5/2/2014 4:36:10 AM, currently Mounted; Redirected: this server is not in a preferred site for the database, suggested new server: /o=Company/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=Server1",RopHandler: Logon:
    2014-05-05T20:34:27.281Z,250,2,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,,,ncacn_ip_tcp,,Disconnect,0,00:00:00.0468765,,
    2014-05-05T20:34:28.234Z,251,0,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,10.1.1.32,fe80::45df:6c5e:aec6:fad1%14,ncacn_ip_tcp,,Connect,0,00:00:00.0156255,"SID=S-1-5-21-2073836326-1490033320-1384523041-3159, Flags=None",
    2014-05-05T20:34:29.219Z,251,1,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,,,ncacn_ip_tcp,,DelegateLogon,0,00:00:00.9687810,"Logon: Delegate, /o=Company/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=other user in database Mailbox Database 2063624589 last mounted on Server1.Company.com at 5/2/2014 4:36:10 AM, currently Mounted; LogonId: 0",
    2014-05-05T20:34:30.250Z,251,2,/O=Company/OU=domain/cn=Recipients/cn=user,,OUTLOOK.EXE,12.0.6672.5000,Cached,,,ncacn_ip_tcp,,DelegateLogon,0,00:00:01.0312830,"Logon: Delegate, /O=Company/OU=domain/cn=Recipients/cn=cjoynt in database Mailbox Database 2063624589 last mounted on Server1.Company.com at 5/2/2014 4:36:10 AM, currently Mounted; LogonId: 1",
    2014-05-05T20:36:00.971Z,252,0,/O=Company/OU=domain/cn=Recipients/cn=user,,SearchProtocolHost.exe,12.0.6672.5000,Cached,10.1.1.32,fe80::45df:6c5e:aec6:fad1%14,ncacn_ip_tcp,,Connect,0,00:00:00,"SID=S-1-5-21-2073836326-1490033320-1384523041-3159, Flags=None",
    2014-05-05T20:36:00.987Z,252,1,/O=Company/OU=domain/cn=Recipients/cn=user,,SearchProtocolHost.exe,12.0.6672.5000,Cached,,,ncacn_ip_tcp,,OwnerLogon,1144 (rop::WrongServer),00:00:00,"Logon: Owner, /O=Company/OU=domain/cn=Recipients/cn=user in database Mailbox Database 2063624589 last mounted on Server1.Company.com at 5/2/2014 4:36:10 AM, currently Mounted; Redirected: this server is not in a preferred site for the database, suggested new server: /o=Company/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=Server1",RopHandler: Logon:
    2014-05-05T20:36:01.003Z,252,2,/O=Company/OU=domain/cn=Recipients/cn=user,,SearchProtocolHost.exe,12.0.6672.5000,Cached,,,ncacn_ip_tcp,,Disconnect,0,00:00:00.0312510,,
    2014-05-05T20:36:07.909Z,253,0,/O=Company/OU=domain/cn=Recipients/cn=user,,SearchProtocolHost.exe,12.0.6672.5000,Cached,10.1.1.32,fe80::45df:6c5e:aec6:fad1%14,ncacn_ip_tcp,,Connect,0,00:00:00.0156255,"SID=S-1-5-21-2073836326-1490033320-1384523041-3159, Flags=None",
    2014-05-05T20:36:07.925Z,253,1,/O=Company/OU=domain/cn=Recipients/cn=user,,SearchProtocolHost.exe,12.0.6672.5000,Cached,,,ncacn_ip_tcp,,OwnerLogon,1144 (rop::WrongServer),00:00:00,"Logon: Owner, /O=Company/OU=domain/cn=Recipients/cn=user in database Mailbox Database 2063624589 last mounted on Server1.Company.com at 5/2/2014 4:36:10 AM, currently Mounted; Redirected: this server is not in a preferred site for the database, suggested new server: /o=Company/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=Server1",RopHandler: Logon:
    2014-05-05T20:36:07.940Z,253,2,/O=Company/OU=domain/cn=Recipients/cn=user,,SearchProtocolHost.exe,12.0.6672.5000,Cached,,,ncacn_ip_tcp,,Disconnect,0,00:00:00.0312510,,

Maybe you are looking for