Disaster Recovery: Active/Passive Mail Flow

Hello. I am planning to deploy an active/passive server environment for Exchange 2013. Here's what I plan to achieve:
EXCHANGE-A - on production site, active (all mail flow goes through here), member of DAG
EXCHANGE-B - on disaster recovery site, passive (mail flow goes through here ONLY when activated), member of DAG
I have tried disabling all receive connectors on EXCHANGE-B, however that causes OWA to delay sending messages for around 20 seconds (messages stuck in Drafts folder before being sent out). I have also tried disabling Exchange Transport services on EXCHANGE-B
but to no avail.
Is it possible to achieve active/passive mail flow server environment? What is the best way to achieve this? I appreciate any leads on this matter.

Hi ,
Shadow redundancy configuration is available on the transport config and any change applied on the transport config parameters will get applied to all the transport servers in our organisation and it not specific to the server level.
Command
to disable the shadow redundancy feature :-
set-TransportConfig -shadowredundancyenabled $false
Note : Above command will disable the shadow redundancy feature for your entire organisation.
Thanks & Regards S.Nithyanandham

Similar Messages

Disaster Recovery - Active Directory

Hello!
I have a client, where the server to the
domain controller has totally crashed
The customer does not have backup.
It is now not possible to log into the computers
of employees.
Now I have set up a new domain controller.
How can I log onto the computers
of all employees is and connect them up
to the new domain?
We do not have username
and password to the local users.
(PS: Do you know
any tool that can easily do the job for me?
So I did not have to do it manually
on 50 machines.)

Hopefully you can log on with the old domain Id and Password and the users were local admins. If so cached credentials should let you. Once logged on you should be able to change to the new domain. Otherwise you will need the local administrators
password and log on that way.
Otherwise you can try the below to see if you can reset local admin passwords:
http://www.petri.co.il/forgot_administrator_password.htm#
Paul Bergson
MVP - Directory Services
MCITP: Enterprise Administrator
MCTS, MCT, MCSE, MCSA, Security, BS CSci
2012, 2008, Vista, 2003, 2000 (Early Achiever), NT4
Twitter @pbbergs http://blogs.dirteam.com/blogs/paulbergson
Please no e-mails, any questions should be posted in the NewsGroup.
This posting is provided AS IS with no warranties, and confers no rights.

ACTIVE/ACTIVE Disaster Recovery configuration

If I have two separate 10.2.0 RAC databases in two separate geographical locations and each database is receiving updates and sending the changes to the other database via Streams, how would you configure a disaster recovery solution for this?
In this scenario, each database is intended to be a copy of the other. It is an ACTIVE/ACTIVE type of setup.
Do you need also have a data guard database for each of these databases to support disaster recovery?
Thanks for your feedback.

Hello Sergio,
To get to Ironport Dcoumentation, please do the following:
1) go to www.cisco.com
2) Login with CCO id and password
3) Select support
4) On resulting page, under Prduct Name, select Security
5) You should see "Email Security" and "Web Security" option there, which will bring you to the Documents.
For WSA the doc guides are here http://www.cisco.com/en/US/customer/products/ps10164/products_user_guide_list.html
For The ESA the doc guides are here http://www.cisco.com/en/US/customer/products/ps10154/products_user_guide_list.html
Regards,
Eric

ACTIVE DIRECTORY TRUST CONFLICT AND INTERDOMAIN MAIL FLOW

Old AD Forest: abc.com Win 2003 R2
Existing Exchange: Exch 2007 SP3
Exchange Server contains the domains like aaa.com, bbb.com, ccc.com so on and so forth
Created new AD Domain ccc.com
Deployed Exchange 2013 SP1
Trust created with conflict. the conflicting object is ccc.com in both ADs
I can send emails from new exchange organization to aaa.com, bbb.com, etc except to ccc.com user in abc.com
Kindly suggest how to enable mail flow
Regards

Exchange e-mail domains don't have to be the same as active directory domains. Exchange processes mail based on accepted domains, connector address spaces, and recipient addresses. Just creating a domain doesn't do anything to create recipients
in Exchange with the domain's address. It sounds like you need to add ccc.com as an accepted domain, and maybe create an e-mail address policy for the recipients in that domain and/or manually add ccc.com addresses to recipients.
Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

Disaster Recovery set-up for SharePoint 2013

Hi,
We are migrating our SP2010 application to SP2013. It would be on-premise setup using virtual environment.
To handle disaster recovery situation, it has been planned to have two identical farms (active, passive) hosted in two different datacenters.
I have prior knowledge of disaster recovery only at the content DB level.
My Question is how do we make two farm identical and how do we keep Database of both the farm always in sync.
Also if a custom solution is pushed into one of the farm, how does it replicate to the other farm.
Can someone please help me in understanding this D/R situation.
Thanks,
Rahul

Metalogix Replicator will replicate content, but nothing below the Web Application level (you'd still have to configure the SAs, Central Admin settings, deploy solutions, etc.).
While AlwaysOn is a good choice, do remember that ASync AO is not supported across all of SharePoint's databases (see
http://technet.microsoft.com/en-us/library/jj841106.aspx). LogShipping is a good choice, especially with content databases as they can be placed in a read only mode on the DR farm for an
active crawl to be completed against them.
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

SAP XI 3.0 Disaster recovery procedure

Hi,
Can someone provide me with a disaster recovery procedure for XI 3.0?
I always thought a normal online backup/restore procedure + recovery redologs + file system backup/restore would be sufficient but there's an internal discussion in our team that more is required for a consistent DR procedure.
Eg: what about XI interfaces? How preventing that a processed file is not processed twice? Etc....
We are running on Oracle 10.2.0.4, XI 3.0 SP 21
Thanks for helping me out.
BR
Bert

Hi,
Prepare a list of activities to be performed before and after the DR.
1.Before bringing down the actual system,you may have to stop the related jobs,stop sending Idocs to the XI system,lock the RFC users so that no more Idocs will be sent.Process all the messages and monitor them end to end before bringing down the actual system.Also,check the queues and see if they are all clear.
2.Once the DR system is up,the RFC destinations should be configured correctly to point to the target.You can then do the testing of interfaces in the DR system after activating the Communication channels.
3.Once the testing is complete and the actual system bought up,you will have to do the health check,check the RFC destinations,unlock RFC users and monitor end to end to see if the messages are flowing through successfully.
In order to avoid errors like processing the file twice,you may have to stop all the Communication channels in the Actual system before bringing them down.After the testing in the DR system is complete,you can unlock the RFC users and restart the channels so that the new messages coming in will be processed.
Hope this helps.
Thanks and Regards,
Induja

Disaster Recovery / HA server role count question

We are currently working on a disaster recovery plan for our on-premise Exchange 2010 environment. As of today, have a DR Office 365 site is not an option for us. Our primary datacenter that houses our Exchange 2010 SP3 servers is setup as follows.
North America
4 servers (HUB/CAS)
1 CAS Array (F5 load balanced)
4 servers (mailbox)
1 DAG, public/private networks (2 nics)
2 servers (UM)
====================================
In our secondary datacenter we currently have built out 4 servers, OS Only. My question is which roles should I place on these servers so that we don't take down our production environment if the secondary site goes offline. The secondary site
may go down from time to time for testing and I don't want our production databases to unmount because of quorum and failed votes.
I was thinking installing HUB/CAS/MB on all 4 and UM on only 1 of them. Does this work? I have read through some technet articles about the (n/2) + 1 rule, but need a little more assurance. Thanks everyone!
d

Thanks yea, I used it. I says if I have 4 mailbox servers in the primary then I should have 4 mailbox servers in the secondary. Also, not sure if this matters, but we have an even number of databases. Basically I don't want our pimrary
databases to dismount if we lose the WAN connection, temporarily, to the secondary site. Do I need an odd number of databases/servers or is 4 and 4 could for servers and 12 active/passive in the primary and 12 passive in the secondary good. Thanks
again for the information, much appreciated.
d

Cisco Expressway Core & Edge Cluster, or Disaster Recovery Setup

Hi All,
Dear experts,
I have two sites HQ & Branch.below are my questions for Expressway Core & Edge Cluster
1. Can i create one cluster for 6 sever for Expressway Core and distribute 3 server in HQ & 3 server in Branch for HA
2. Can i create one cluster for 6 sever for Expressway Edge and distribute 3 server in HQ & 3 server in Branch for HA
3. How would be the DNS SRV records and call flow work if the main site Expressway Edge goes down in HQ. How the Branch Side Expressway Edge becomes active for B2B calls.
4. What is the best design to have disaster recovery for Expressway core and Expressway Edge between Sites(HQ & Branch)
Regards,
Irf

Regarding 1 and 2, as long as the round trip delay is no more than 30ms maximum, you should be fine. I presume the HQ Branch offices for the Expressway-Core have a shared internal network, since the Core goes inside the corporate network, while the Edge goes in the DMZ or outside the network for public access.
For 3, as long as you have your SRV records setup correct, you can set the priority of which office gets used first, and then second, in case of a failure.
I don't have an answer for 4 unfortunately.

SharePoint 2013 Search - Disaster Recovery Restore

Hello,
We are setting up a new SharePoint 2013 with a separate Disaster Recovery farm as a hot-standby. In a DR scenario, we want to restore all content and service app databases to the new farm, then fix any configuration issues that might arise due to changes
in server names, etc...
The issue we're running into is the search service components are still pointing to the production servers even though they're in the new farm with completely different server names. This is expected, so we're preparing a PowerShell script to remove
then re-create the search components as needed. The problem is that all the commands used to apply the new search topology won't function because they can't access the administration component (very frustrating). It appears we're in a chicken &
egg scenario - we can't change the search topology because we don't have a working admin component, but we can't fix the admin component because we can't change the search topology.
The scripts below are just some of the things we've tried to fix the issue:
$sa = Get-SPEnterpriseSearchServiceApplication "Search Service Application";
$local = Get-SPEnterpriseSearchServiceInstance -Local;
$topology = New-SPEnterpriseSearchTopology -SearchApplication $sa;
New-SPEnterpriseSearchAdminComponent -SearchTopology $topology -SearchServiceInstance $local;
New-SPEnterpriseSearchQueryProcessingComponent -SearchTopology $topology -SearchServiceInstance $local;
New-SPEnterpriseSearchCrawlComponent -SearchTopology $topology -SearchServiceInstance $local;
New-SPEnterpriseSearchContentProcessingComponent -SearchTopology $topology -SearchServiceInstance $local;
New-SPEnterpriseSearchAnalyticsProcessingComponent -SearchTopology $topology -SearchServiceInstance $local;
New-SPEnterpriseSearchIndexComponent -SearchTopology $topology -SearchServiceInstance $local -IndexPartition 0 -RootDirectory "D:\SP_Index\Index";
$topology.Activate();
We get this message:
Exception calling "Activate" with "0" argument(s): "The search service is not able to connect to the machine that
hosts the administration component. Verify that the administration component '764c17a1-4c29-4393-aacc-de01119aba0a'
in search application 'Search Service Application' is in a good state and try again."
At line:11 char:1
+ $topology.Activate();
+ ~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [], MethodInvocationException
+ FullyQualifiedErrorId : InvalidOperationException
Also, same as above with
$topology.BeginActivate()
We get no errors but the new topology is never activated. Attempting to call $topology.Activate() within the next few minutes will result in an error saying that "No modifications to the search topology can be made because previous changes are
being rolled back due to an error during a previous activation".
Next I found a few methods in the object model that looked like they might do some good:
$sa = Get-SPEnterpriseSearchServiceApplication "Search Service Application";
$topology = Get-SPEnterpriseSearchTopology -SearchApplication $sa -Active;
$admin = $topology.GetComponents() | ? { $_.Name -like "admin*" }
$topology.RecoverAdminComponent($admin,"server1");
This one really looked like it worked. It took a few seconds to run and came back with no errors. I can even get the active list of components and it shows that the Admin component is running on the right server:
Name ServerName
AdminComponent1 server1
ContentProcessingComponent1
QueryProcessingComponent1
IndexComponent1
QueryProcessingComponent3
CrawlComponent0
QueryProcessingComponent2
IndexComponent2
AnalyticsProcessingComponent1
IndexComponent3
However, I'm still unable to make further changes to the topology (getting the same error as above when calling $topology.Activate()), and the service application in central administration shows an error saying it can't connect to the admin component:
The search service is not able to connect to the machine that hosts the administration component. Verify that the administration component '764c17a1-4c29-4393-aacc-de01119aba0a' in search application 'Search Service Application' is in a good state and try again.
Lastly, I tried to move the admin component directly:
$sa.AdminComponent.Move($instance, "d:\sp_index")
But again I get an error:
Exception calling "Move" with "2" argument(s): "Admin component was moved to another server."
At line:1 char:1
+ $sa.AdminComponent.Move($instance, "d:\sp_index")
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [], MethodInvocationException
+ FullyQualifiedErrorId : OperationCanceledException
I've checked all the most common issues - the service instance is online, the search host controller service is running on the machine, etc... but I can't seem to get this database restored to a different farm.
Any help would be appreciated!

Thanks for the response Bhavik,
I did ensure the instance was started:
Get-SPEnterpriseSearchServiceInstance -Local
TypeName : SharePoint Server Search
Description : Index content and serve search queries
Id : e9fd15e5-839a-40bf-9607-6e1779e4d22c
Server : SPServer Name=ROYALS
Service : SearchService Name=OSearch15
Role : None
Status : Online
But after attempting to set the admin component I got the results below.
Before setting the admin component:
Get-SPEnterpriseSearchAdministrationComponent -SearchApplication $sa
IndexLocation : E:\sp_index\Office Server\Applications
Initialized : True
ServerName : prodServer1
Standalone :
After setting the admin component:
Get-SPEnterpriseSearchAdministrationComponent -SearchApplication $sa
IndexLocation :
Initialized : False
ServerName :
Standalone :
It's shown this status for a few hours now so I don't believe it's still provisioning. Also, the search service administration is still showing the same error:
The search service is not able to connect to the machine that hosts the administration component. Verify that the administration
component '764c17a1-4c29-4393-aacc-de01119aba0a' in search application 'Search Service Application' is in a good state and try again.

Datafiles Mismatch in production & disaster recovery server

Datafiles Mismatch in production & disaster recovery server though everything in sync
We performed all the necessary prerequisites & processes related to DRS switchover successfully also our DRS server is constantly updated through logs application in mount state whan we opened DRS database in mount state it opened successfully however when we issued command
Recover database
It dumped with foll errors:
ora-01122 database file 162 failed verification check
ora-01110 data file 162 </oracle/R3P/sapdata7/r3p*****.data>
ora-01251 unknown file header version read for file 162
as I do not remember the exact name now
However upon comparing the same file at production(which was now in shutdown state) the file sizes were mismatching so we went ahead to copy the datafile from production to DRS in database shutdown state at DRS through RCP utitlity of AIX 5.3 since our Operating system is AIX 5.3
Though this remote copy was success
we again started database in mount state & issued command
Recover database
But still it dump the same error but now for another datafile in DRS
I mean I would appreciate if somebody could point out that despite our DRS was constantly being updated through our Production in terms of continuous log application before this activity logs were sync in both the systems also origlos,mirrorlogs & controlfiles were pulled from production system as it is infact the whole structure was as replica of production system , then why did datafile sizes mismatch??
Details
SAP version :- 4.7
WAS :- 620
Database :- Oracle 9.2
Operating system :- AIX 5.3

I am in a process of DR Planning.
My present setup :
O/S : HP-UX 11.31
SAP ECC 6
Oracle 10g Database.
I know about dataguard and i have implemnted same on our other application but not for SAP.
I have ame doubts and I request you to please guide me for the same.
1. SAP License key -- it required hardware key. So will i have to generate license key another hardware key i.e. for machine where standby database.
2. Database on standby site will be in manage recovery mode. Will I have to make any changes or any other file realted to SAP on standby host ? (some i know such as I upgrade SAP kernal, same i have to upgrade at standby host)
Will you give me some link related to document for DR

Exchange 2013 SMTP Mail Flow from external domains

I have query related to mail flow for incoming mails from external domains from Internet facing site. There are two sites - Site A & Site B. Both have Exchange 2013 CAS servers in NLB and Exchange 2013 Mailbox in individual DAG - say DAG1 in Site
A and DAG2 in Site B. Site A is Internet facing site and site B is not Internet facing.
An incoming Internet mail meant for recipient in Site B will land in Exchange 2013 CAS server in Site A. This CAS Server in Site A will look for the recipient in local Domain Controller and get to know the mailbox database of this recipient is in DAG2 (
in site B ) Will the FET service in EX2013 CAS in Site A make a SMTP connection with FET service of EX2013 CAS in site B which will then make SMTP connection to EX2013 Mailbox server in Site B which is holding the recipient mailbox Active copy for delivery.
OR
EX2013 CAS will send this mail to Ex2013 Mailbox server in site A and the Hub Transport service running in in site A will then make SMTP connection with EX2013 Mailbox server in Site B which is holding the recipient mailbox Active copy
Need clarification on above
Thanks
Parveen

Hello,
Come back and mark the replies as answers if they help and unmark them if they provide no help.
I'm marking the reply as answer as there has been no update for a couple of days.
If you come back to find it doesn't work for you, please reply to us and unmark the answer.
Cara Chen
TechNet Community Support

Oracle Application Server 10g Disaster Recovery

Hi all,
This is regarding Disaster Recovery approach for Oracle Application Server 10g. There are two environments Active (DC-PROD) and Stand-By (DR-PROD). Each environment have 2 nodes where OAS Instances are installed in both nodes and each environment has a Virtual Hostname (Virtual IP) used. The 2 nodes hostnames of DC-PROD environment differs from 2 nodes of the other environment DR-PROD.
However the Virtual Hostname is same between two environments.
The env DC-PROD is setup already and is working fine. Now we have to setup DR-PROD env for disaster Recovery purpose. DR-PROD is also setup independently from DC-PROD. Each env has seperate DB servers in RAC mode. We are using EMC SRDF replication technology to do DB replication between DC-PROD and DR-PROD environments.
There is no disk replication between Oracle Application Servers of two environments DC-PROD and DR-PROD. DC-PROD is NOT setup using Oracle AS Guard for some reasons and we are in a situation that DC-PROD should not be touched at all.
So if the Database is replicated from DC-PROD to DR-PROD servers using EMC SRDF replication technology, while bring up OAS Infra services in DR-PROD node, OC4J is failing to come up. After some workarounds, OC4J cameup but we are unable to login to OIDDAS console.
ssoServer.log shows the following: -
Mon May 30 11:01:23 IST 2011 [DEBUG] AJPRequestHandler-ApplicationServerThread-8 DatabaseConfigReadergetting partner apps configs: select site_id, site_token, site_name, home_url, success_url, logout_url, encryption_key, encryption_mask_pre, encryption_mask_post, start_date, end_date, administrator_id, administrator_info from wwsso_papp_configuration_inf_t where site_id = '06B9F06C'
Mon May 30 11:01:23 IST 2011 [DEBUG] AJPRequestHandler-ApplicationServerThread-8 Partner Site ID: 06B9F06C
Mon May 30 11:01:23 IST 2011 [DEBUG] AJPRequestHandler-ApplicationServerThread-8 exception before getAuthLevel
oracle.security.sso.server.conf.ConfigurationException: Partner application configuration not found:06B9F06C
at oracle.security.sso.server.conf.DatabaseConfigReader.getPartnerConfiguration(DatabaseConfigReader.java:143)
Please provide us the inputs to achieve Disaster Recovery for OAS 10g without using Oracle AS Guard.
This is very urgent and your inputs are greatly appreciated.
Regards,
Mahendra.

Another point to add for the environment details. Both DC-PROD and DR-PROD environments does not have connectivity at all. Only the DB connectivity is there for doing DB replication.
EMC SRDF replication technology is a block by block replication i.e., a disk replication. Hope these details are sufficient for environment specifications.

How to implement Disaster Recovery in TimesTen?

hello, chris:
we have a requirement to implement disaster recovery from remote when the master and standby nodes are failover in local. how to implement it in timesten? Can master standby pairs with subscribers mode caryy out it? when the master and standby nodes are fail, can subscriber node take over the application?? thank you.

The best, and recommended, solution for this is to have an active/standby pair located locally as the primary mechanism for high-availability and to configure a remote readonly subscriber datastore. In the event that the primary site completely fails, the remote subscriber can be easily (few seconds) promoted to an active to form the basis of a new active/standby pair at the remote site.
It is not supported to split an active/standby pair across a network connection that is anything less than LAN grade but a remote subscriber can be located across any reasonable network connection (WAN, VPN etc.) as long as there is sufficient bandwidth and the latency is not too high.
Chris

Email utility activity in process flow

Hi.
I am new to environment. I am trying to use email activity in Process flows. I have given the parameters that have to be given like "to-address" etc. Validation, Deployment and start are getting succeeded. But I am unable get a mail. Can anybody suggest me How to use this. And also How can I find the SMTP server in my local machine. Else suggest me any links pls.
Edited by: SwapnaPrerana on Jul 20, 2010 2:19 PM

Hello Swapna,
First of all you want to configure ACL and then do the following steps.
In email properties mention the details are as follows:
PORT = 25
SMTP SERVER = (Get this details from your ITIS Team of Email Server).
Regards,
Ava

Exchange Server 2003/2010 Coexistence Mail-flow Issues

I've installed Exchange 2010 in a 2003 coexistence scenario.
2010 was deployed with CAS,HUB, and Mailbox roles.
The installation went through smoothly, and the default RGC was created.
On the 2010 Server, when I create a new users with mailbox, that user is no able to send or receive mail from anywhere.
2010 user to 2010 user does not work
2003 user to 2010 user does not work
Mail delivery between 2003 users works fine.
The RGC message queue in ESM 2003 shows that the messages are queued and keep retrying.
I have deleted the RGC twice and created new ones, I have un-installed the HUB and CAS roles and re-installed them, and I have also re-run setup /preparead and setup /preparelegacyexchangepermissions
I'm not able to make any sense of the message tracking on the 2010 side. It just shows a bunch of entries:
EventID: NOTIFYMAPI
Source: STOREDRIV
When I use the best practices analyzer to test mailflow to a 2010 user from the outside, the test comes back with a pass even though the message itself isn't delivered to the specified mailbox.
There is no smart host defined on the default SMTP virtual server on 2003.
There is no SMTP Send Connector for External or Internal mail configured on 2003 besides the 2010 RGC
Any ideas?
Here is the mail flow analyzer result:
Testing inbound SMTP mail flow for domain '[email protected]'.
     Inbound SMTP mail flow was verified successfully.
     Additional Details
Elapsed Time: 3437 ms.
     Test Steps
     Attempting to retrieve DNS MX records for domain 'test.com'.
     One or more MX records were successfully retrieved from DNS.
     Additional Details
MX Records Host mail.test.com, Preference 0
, Host test.com, Preference 10
Elapsed Time: 110 ms.
     Testing Mail Exchanger mail.test.com.
     This Mail Exchanger was tested successfully.
     Additional Details
     Test Steps
     Attempting to resolve the host name mail.test.com in DNS.
     The host name resolved successfully.
     Additional Details
     Testing TCP port 25 on host mail.test.com to ensure it's listening and open.
     The port was opened successfully.
     Additional Details
Banner received: 220 EX2K3w2K3.test.net Microsoft ESMTP MAIL Service, Version: 6.0.3790.3959 ready at Wed, 5 Feb 2014 14:40:44 -0500
Elapsed Time: 368 ms.
     Analyzing SMTP Capabilities for server mail.test.com:25
     SMTP Capabilities were analyzed successfuly.
     Additional Details
     Attempting to send a test email message to [email protected] using MX mail.test.com.
     The test email message was delivered successfully.
     Additional Details
Elapsed Time: 621 ms.
     Testing the MX mail.test.com for open relay by trying to relay to user [email protected].
     The Open Relay test passed. This MX isn't an open relay.
     Additional Details
     Testing Mail Exchanger test.com.
     This Mail Exchanger was tested successfully.
     Additional Details
     Test Steps
     Attempting to resolve the host name test.com in DNS.
     The host name resolved successfully.
     Additional Details
     Testing TCP port 25 on host test.com to ensure it's listening and open.
     The port was opened successfully.
     Additional Details
     Analyzing SMTP Capabilities for server test.com:25
     SMTP Capabilities were analyzed successfuly.
     Additional Details
     Attempting to send a test email message to [email protected] using MX test.com.
     The test email message was delivered successfully.
     Additional Details
     Testing the MX test.com for open relay by trying to relay to user [email protected].
     The Open Relay test passed. This MX isn't an open relay.
     Additional Details

No duplicate security groups. I did notice Exchange 2010 is not in the Exchange Domain Servers group, but 2k3 is. Not sure if that matters.
In the Application event log I'm seeing this error a lot.
Log Name: Application
Source: MSExchangeMailSubmission
Date: 05/02/2014 3:02:31 PM
Event ID: 1009
Task Category: MSExchangeMailSubmission
Level: Error
Keywords: Classic
User: N/A
Computer: ex2010w2k8.test.net
Description:
The Microsoft Exchange Mail Submission service is currently unable to contact any Hub Transport servers in the local Active Directory site. The servers may be too busy to accept new connections at this time.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="MSExchangeMailSubmission" />
<EventID Qualifiers="49156">1009</EventID>
<Level>2</Level>
<Task>1</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2014-02-05T20:02:31.000000000Z" />
<EventRecordID>6530</EventRecordID>
<Channel>Application</Channel>
<Computer>ex2010w2k8.test.net</Computer>
<Security />
</System>
<EventData>
<Data>HubTransport</Data>
</EventData>
</Event>
As long as you cannot send email between ex2010 users this has nothing to do with connectors/smtp config..
I had the same issue one year ago and solved adding both sevrers to old/new exchange sevrers security groups.
Looks like for some missing security entry (not sure why) mailbox is unable to conact HUB  (MSExchangeMailSubmission) I expect you seing items stuck in draft for owa (outbok for outlook)
I saw in some blogs similar cases solved by setting static DNS servers for HUB severs config.
Yes that is similar to what I'm experiencing.
When using the Outlook client with a 2010 mailbox the mail leaves the outbox fine. When using OWA new messages just get saved as drafts when I try to send them.
I will try your suggestions. I see two groups. Exchange Domain Servers, and Exchange Enterprise Servers of which Exchange Domain Servers is a member.

Disaster Recovery: Active/Passive Mail Flow

Similar Messages

Maybe you are looking for