Error "550 5.1.1 ADR.RecipNotFound" for existing user

Hello!
Our Exchange infrastructure description, briefly:
1. Using Exchange 2013 CU7
2. 2 x MBX+CAS servers (EX1, EX2)
3. 2 x Edge servers (mx1, mx2)
4. DAG, 4 DBs
5. Hybrid Configuration: 200 local users, 15 cloud users
Our case: sometimes our users receive NDR while sending messages to existing mailboxes:
"Remote
Server returned '550 5.1.1 RESOLVER.ADR.RecipNotFound; not found'
For example, user sent 2 messages, first caused NDR, second was successfully delivered:
Get-MessageTrackingLog -Sender [email protected] -Recipient [email protected] | fl EventId, Source, TimeStamp, EventData
EventId : HAREDIRECT
Source : SMTP
Timestamp : 15.04.2015 16:58:36
EventData : {[DeliveryPriority, Normal], [AccountForest, local.domain.ru]}
EventId : RECEIVE
Source : SMTP
Timestamp : 15.04.2015 16:58:36
EventData : {[FirstForestHop, EX1.local.domain.ru], [Oorg, domain.ru], [ProxiedClientIPAddress, 10.0.100.21], [Proxie
dClientHostname, mx1.domain.ru], [ProxyHop1, EX1.local.domain.ru(192.168.0.11)], [DeliveryPriority, Normal]
, [AccountForest, local.domain.ru]}
EventId : AGENTINFO
Source : AGENT
Timestamp : 15.04.2015 16:58:36
EventData : {[AMA, SUM|action=st|error=|atch=0], [DeliveryPriority, Normal], [AccountForest, local.domain.ru]}
EventId : FAIL
Source : ROUTING
Timestamp : 15.04.2015 16:58:36
EventData : {[DeliveryPriority, Normal], [Oorg, domain.ru], [AccountForest, local.domain.ru]}
EventId : HAREDIRECT
Source : SMTP
Timestamp : 15.04.2015 18:17:23
EventData : {[DeliveryPriority, Normal], [AccountForest, local.domain.ru]}
EventId : RECEIVE
Source : SMTP
Timestamp : 15.04.2015 18:17:23
EventData : {[FirstForestHop, EX2.local.domain.ru], [ProxiedClientIPAddress, 10.0.100.22], [ProxiedClientHostname,
mx2.domain.ru], [ProxyHop1, EX2.local.domain.ru(192.168.0.12)], [DeliveryPriority, Normal], [AccountForest,
local.domain.ru]}
EventId : AGENTINFO
Source : AGENT
Timestamp : 15.04.2015 18:17:23
EventData : {[AMA, SUM|v=0|action=|error=|atch=0], [AMA, EV|engine=M|v=0|sig=1.195.3371.0|name=|file=], [TRA, ETR|ruleI
d=068e0c20-5de5-48e0-9b53-ea90e5deb5b9|st=12.12.2014 18:27:31|action=SetSCL|sev=1|mode=Enforce], [CompCost
|AMA=0|ETR=0], [DeliveryPriority, Normal], [AccountForest, local.domain.ru]}
EventId : SEND
Source : SMTP
Timestamp : 15.04.2015 18:17:25
EventData : {[E2ELatency, 4.863], [Microsoft.Exchange.Transport.MailRecipient.RequiredTlsAuthLevel, Opportunistic], [
DeliveryPriority, Normal], [AccountForest, local.domain.ru]}
EventId : DELIVER
Source : STOREDRIVER
Timestamp : 15.04.2015 18:17:25
EventData : {[MailboxDatabaseName, IT], [Mailboxes, c1357fa5-52f2-4d16-8c70-09c9f9c4ab0e], [ToEntity, Hosted], [E2ELate
ncy, 4.863], [DeliveryPriority, Normal], [AccountForest, local.domain.ru]}
How can I investigate this issue?

Hi Turboon,
Thank you for your question.
Did this issue occur when mailbox was moved to office 365?
"Remote Server returned '550 5.1.1 RESOLVER.ADR.RecipNotFound; not found'’ could be occurred if the on-premises mail-enabled user who represents the moved mailbox isn't stamped correctly with the target address. The Exchange server generates an NDR
message because the on-premises Active Directory Domain Services (AD DS) can't locate the user in order to route the mail correctly. We could add the target address, also known as the service routing address, to the mail-enabled user in the on-premises environment
by the following steps:
In a web browser on your local Exchange 2013 server, browse to the Exchange Admin Center,
Click Recipients, and then click Mailboxes.
Click the user, and then click Edit.
Click Email Address, and then click Add, .
Under Email Address, click SMTP, and then enter the email address. Use the
<alias>@<domain>.mail.onmicrosoft.com format for the email address.
Click OK, and then click Save.
We could refer to the following link:
https://support.microsoft.com/en-us/kb/2685437
If there are any questions regarding this issue, please be free to let me know.
Best Regard,
Jim
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
Jim Xu
TechNet Community Support

Similar Messages

Access Policy for Existing Users

Hi,
Here is the Scenario:
1. We have AD resource object having "Allow Multiple" Unchecked
2. We have Users who are already provisioned to AD
We are trying to introduce Auto Provisioning into our system for AD, I know new users will be evaluated against Access policies and will be provisioned to the resource and hence groups management will be taken care automatically, Questions:
1. If I disable resources (and not revoke) for these new users what will be the group membership status -will they be removed from group?
2. How to pull existing users under this auto prov umbrella? My thoughts: by writing a custom scheduler that will check resource provisioned and make it as part of the group, but will resource be revoked automatically if group is removed for these users? If not what should be the approach for existing users?
Thanks in advance

I've completed a similar tasks using SQL.Take a look at the following table and you can do these tasks:
UPP, UPD, USG, POG and AD group table 'UD_ADUSRC'

Pb with populating newly added AD fields for existing users

Hello,
Let's say that we have version 10 of the AD process form pushed to production.
Then we decided to push version 11 of the AD process form, which now has 4 more fields, to prod.
For new users, we can see that the new fields are populated and the data flows down to AD.
But, how do things work for existing users with existing AD account?
How can we make the new fields appear in the process form of an existing user with old AD account that did not contain the new 4 fields.
Thanks
Khanh

FVC or Form Version Control Utility is specifically designed for this purpose. Refer OIM documentation & also have a look at the following links:
http://download.oracle.com/docs/cd/E10391_01/doc.910/e10363/appc.htm
http://oim-iam.blogspot.com/2010/04/oim-fvc.html
Thanks
SRS

Create new mailbox for existing users?

Hi All,
I am new to JNDI concepts. I need to create new mailbox for existing users in domino directory. is it possible?
Scenario is : I have some users in domino directory. They dont have mail account now. I want to create it.
Kindly guide me...
Thanks,
Ram

Hi,
You can try LSMW (Direct method) for uploading class values.
Upload file can hae following structure:
OBJEK     |     ATINN     |     KLART     |     ATWRT
Release Grou+Release strategy |     Characteristic name     |     Class type     |     Class Value
e.g. rel grp is PO, rel strategy is 01, characteristic name is EBAN_EKORG, and class value is 1000 then
OBJEK     |     ATINN     |     KLART     |     ATWRT
PO01     |     EBAN_EKORG |     032     |     1000
multiple characterstics can be
OBJEK     |     ATINN     |     KLART     |     ATWRT
PO01     |     EBAN_EKORG |     032     |     1000
PO01     |     EBAN_EKGRP |     032     |     100
Regards,
Yogesh

Error encountered when accessing the HPS Chart for a user

i have a user account created on HPS. when ever i try to see the scorecard " chart" for - Employee, Accountability Element, Strategy Element am receiving the error text :
" Exception
An exception occurred processing your request. Contact your HPS Administrator. [1252904462640] null "
What may be the reason ??? This error is particular for this user only. Not for others. If anyone have experience to solve plz help.
Edited by: PSG on Sep 23, 2009 5:14 AM

Doublechecking. Is that a 42023 rather than a 42032?
If so, perhaps try the "Error -50," "-5000," "8003," "8008," or "-42023" section in the Specific Conditions and Alert Messages: (Mac OS X / Windows) section of the following document:
iTunes: Advanced iTunes Store troubleshooting

Running Enable-Mailbox for existing user error message

Hey guys,
I'm trying to enable an existing users mailbox from a powershell command running from my DC and im getting an error message
Enable-Mailbox is not recognized as a name of a cmdlet.
I have done import-modules activedirectory at the begining of the script to import a use rfrom a csv file and everything is working great except this final step.
am i missing something here ?
Thanks as always
Rich

Duplicate:
http://social.technet.microsoft.com/Forums/windowsserver/en-US/653c0a19-ee93-4662-9084-8676c99f9024/running-the-exchange-management-shell-from-a-powershell-script-on-another-server?forum=winserverpowershell
Microsoft Certified Trainer
MCSE: Desktop, Server, Private Cloud, Messaging
Blog: http://365lab.net

Problems with a certain program for existing users

Hello,
We have problems with a third party software application. We have installed this software program on a terminal server (server 2003 32bit) and when we open this software with a existing user account the application crashes with the following entry in the
eventviewer:
Application Error 100
Faulting application ProTime.exe, version 4.1.0.9, faulting module msvbvm60.dll, version 6.0.97.82, fault address 0x000fd0d9.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
We have checked the eventlog on the server but the only error that we see is the application error 100 when we open the program. Also we checked the rights on the program's database and folders but that doesn't help either.
The last thing we did was;
- Installing the software on a brand new virtual server with server 2003 x86 (no other software installed)
- Installing the software on a new virtual machine with server 2008 r2 x64 (no other software installed)
The strange thing is when we change something in the compatibility mode setting for example run as windows xp then we can run the program just fine but when the user logs off and log on again it doesn't work until you change something at the compatibility
mode setting (doesn't mather which setting)
When we create a new domain user then the software works properly without any settings changed.
Any idea what could cause this problem?
Thanks
With kind regards,
Lars

Hi Jesper,
Sorry for the late response. We think so, atleast the software company says it is.
We should not use the compat. mode because the application is not working on server 2003 x86, server 2003 x64, server 2008 r2.
It is just really strange. Software company has no clue how to fix this problem and they say it is caused by the active directory because when we add a new user then the application starts properly. User accounts created a long time ago are not able to start
the application.

Change display name for existing users

Hi,
We have alot of users in our Active Directory. After an migration our existing users are displaying their name wrong. When we create a new user the display name is set FirstName LastName. But all of our old users have their User logon name as display name.
Is there a way to change the display name of our old users to FirstName LastName instead of the user logon names they are displaying now? Doing this per user is a hell of a job so this really isn't an option.
Example:
Full name: Peter Peterson. User logon name: pepeter. Display name: pepeter. (old user)
Full name: Tom Thompson. User logon name: tothomp. Display name: Tom Thompson. (new user)
Greetz,
Tom

I have found a script for Powershell that may be the answer to my question. There is only one thing that is not in the script. The script runs for all users. The PageSize is set to 2000 so it runs 2000 entries. Is there a way that I can run this script for
all Users in AD that start with the letter "A" or with an other letter. :P
$previewMode = $true #change value to $false ONLY after you have verified the preview!!!
$CurrentDomain = [System.DirectoryServices.ActiveDirectory.Domain]::GetCurrentDomain()
$Domain = [System.DirectoryServices.DirectoryEntry]"LDAP://$CurrentDomain"
$Searcher = New-Object System.DirectoryServices.DirectorySearcher
$Searcher.PageSize = 2000
$Searcher.SearchScope = "Subtree"
$Searcher.Filter = "(&(objectCategory=person)(objectClass=user)(!(objectClass=computer)))"
$Searcher.PropertiesToLoad.Add("userPrincipalName") > $Null
$Searcher.PropertiesToLoad.Add("givenName") > $Null
$Searcher.PropertiesToLoad.Add("sn") > $Null
$Searcher.PropertiesToLoad.Add("distinguishedName") > $Null
$Searcher.SearchRoot = "LDAP://" + $Domain.distinguishedName
$SearchResults = $Searcher.FindAll()
$dnsSuffix = $CurrentDomain.Name
foreach ($Result in $SearchResults){
               $firstName = $Result.Properties.Item("givenName")
               $lastName = $Result.Properties.Item("sn")
               $newLogonName = "$firstName $lastName"
                [System.DirectoryServices.DirectoryEntry]$userObject = $Result.GetDirectoryEntry()
                $oldLogonName = $userObject.sAMAccountName
    Write-Host "Changing $oldLogonName to $newLogonName..."
    try {
        if (!($previewMode)) {
                   $userObject.cn = $newLogonName
           $userObject.CommitChanges()
        Write-Host "$oldLogonName successfully changed to $newLogonName."
    catch{
        Write-Host "Error changing $oldLogonName to $newLogonName."

Have Adobe Standard CS 5 (Student), and would like to upgrade to Creative Cloud (Non-Student) - won't accept my serial number for special pricing for existing users

I currently use Adobe Standard CS 5. It was bought with the Education discount. I would like to upgrade to Creative Cloud and see that they have special pricing for existing customers that use past versions of Creative Suite. I am no longer in Education, so I will have to buy a full version. This is fine, but it won't accept my serial number for the discounted pricing. Is there something else I should be doing?

Hi there
Please contact our Sales team who will assist with your order - 800-585-0774
Thanks
Bev

PF attribute modification in Access Policy for existing users.

Hi Guys,
I have an access policy for provisioning a resource. Suppose if I make some changes for the process form attribute value inside the access policy,How can I have the same attribute value reflected in the process form of users who are already provisioned by the access policy?
Direct database update wont be a good idea here as I am having multiple access policies for the same resource. Is there any table which is having the relation between provisioned resource and curresponding access policy if at all I have to go for a custom scheduled task?
Thanks,

Does this solution also supposed to work in OIM 11g? I Tried it but data on the main form does not get reflected on the process form of existing users. For child data it does work.
Edited by: bsteen on Aug 5, 2011 5:21 AM

Reapply Rules for existing users

Hello All IDMers;
We have a group called Seasonal for which the member access is based on rule that has two fields one is set to true and also based on employee type which is "Seasonal".
There are other users who are of different emp type BUT with the other field set to true.
Now what we decided is to put all those who have field set to true into the this group irrespective of their employee type.
So going forward for new users we can easily implement this because I am going to delete the Emp Type = Seasonal condition from Rule designer.
But Can you please tell me if there is a easy way jus by using design or admin console to apply this condition to all existing users.
I hope i didnt confuse you all.
Regards;
VSN

oh.. my bad. I looked mainly the Subject and was thinking about the rules all the time...
In your case, you can use the following function to add a user to a group. Please check in the Forum, there are lot of sample code for searching a user with a particular attribute value - then if you have the user key and group key, then you can use the below function to
Map usermap = new HashMap();
usermap.put("Users.User ID", User_id );
usermap.put("Users.Status", "Active"); //put only active users in the hashmap
Map grpmap = new HashMap();
grpmap.put("Groups.Group Name", Group_Name);
tcResultSet ts = userClient.findUsers(usermap); //find users - to get the ukey
tcResultSet tg = groupClient.findGroups(grpmap); //find requireq group
long ukey = ts.getLongValue("Users.Key");
long gkey = tg.getLongValue("Groups.Key"); //find group key
System.out.println("User Map: " + ts);
System.out.println("User Key: " + ukey);
System.out.println("Group Key: " + gkey);
int usrNumRec = ts.getRowCount(); //get number of all user records in OIM
System.out.println("There are: " + usrNumRec + " user records in OIM Dev");
//ADD the Member now
groupClient.addMemberUser(gkey,ukey); //add user back to a group
System.out.println("GROUP Added");
Search in google for the OIM functions such as addMemberUser - you will find better code in this forum or somewhere else...
Regards
Vijay Chinnasamy

What does the Mac App store mean for existing users of Aperture?

I was wondering how the Mac App store will affect existing users of the software. I have purchased Aperture and upgrades since its launch but because I've not purchased through the App store, how will I gain access to future upgrades?
When I go to the Aperture app in the store it shows as being installed but as I've not purchased it through the store, will I be eligible for future upgrades or will Apple expect me to purchase again?

There is no way Apple can update Aperture 3 without offering that update to every user, regardless of where the app was purchased. So, expect that Aperture 3.1.2 or whatever will be available to you in some fashion.
When the next paid Upgrade (to Aperture 4?) comes along, then we'll have to see what arrangements the offer.
Regards
TD

New database for existing user?

Hi,
am I right saying that a new schema in Oracle involves a new user to create?
Say I've got my user already and I just want to create a new schema for this user.
How can I do it?

833519 wrote:
wherever I'm looking I can read this:
schema
A named collection of database objects, including logical structures such as tables and indexes. A schema has the name of the database user who owns it.
---I don't particularly like that definition.
A schema can be a logical database - just like a SQL-Server database. For example, the schema HR can be the Human Resources database with tables like employees, departments, payroll and so on.
A schema can be a user account. Let's say John is the head of a department. A schema can be created for John called JOHN. The HR schema (logical database) can grant select privs to the JOHN schema (user account) on tables and views inside the HR database schema.
It can even be setup in such a way that JOHN can only see his department's staff in the employees, and payroll tables, and a single row for his department in the departments table (this feature is called virtual private databases).
The JOHN schema, besides connection to Oracle rights and selection rights on the HR tables, may have no other rights. So no tables, views and other db objects can be created in the JOHN schema.
The HR schema otoh has the rights to create the db objects. And it may for example not have any create session rights, preventing anyone from directly logging into this schema.
There may be a .Net application for HR. It uses an application schema in Oracle called HR_APP. It may have certain db objects (such as application log tables, application audit tables, etc). It also will have access to the HR schema's db objects.
So an Oracle schema can be used in many different ways - providing flexibility way beyond what other database products provide in this regard.
As for how to use a schema (as a user schema, logical database, app schema, library schema, etc) depends entirely on your requirements - and correctly translating these into secure and flexible Oracle schemas that address these requirements.
In my understanding this means that if I wanna create two databases (collection of tables), which are called 'schemas' in Oracle I also have to create 2 database users.Yes. But these will be logical database schemas. Not end user schemas. For example, you can create a HR schema for a Human Resources database. You can create a MARKETING schema for the Marketing database. (yes, you will use the CREATE USER command to create these 2 logical database schemas - and you would use the same command to create a user schema, developer schema, or any other type of schema)
The HR schema can be specifically setup for the HR database requirements. A space quota of 10Gb. The ability to create tables and stored procedures and views.
Likewise, the MARKETING schema can be setup specifically for marketing. They may need a 50Gb space quota. This database may use object relational features and also need the rights to the SQL advance data types. Etc.
If you want to use the HR database, you can logon as the HR schema. If you want to use the marketing database, you can logon as the MARKETING schema.
Or you can create a user schema - and for this schema user to select tables from the HR database, the HR schema needs to grant specific rights (like select, update, delete and insert) to the user schema on those tables.
Do not let this confuse you. A schema can be many different things, depending on WHAT it can do and HOW it is used. And both these you determine when creating the schema and its rights and its contents (if any).
As already suggested - read the Concepts Guide. See http://tahiti.oracle.com (Oracle documentation portal).

Error when trying to give catalog permissions for AD Users

Hi,
I have successfully integrated obiee 11.1.1.6.6 with AD. I have two authenticators default authenticator and AD. All the active directory users and weblogic(default authenticator)can successfully login to analytics. I can search them in console too. Problem is when I am trying to assign a report to a user I am getting the below error.
Error retrieving user/group data from Oracle BI Server's User Population API. Odbc driver returned an error (SQLExecDirectW). State: HY000. Code: 10058. [NQODBC] [SQL_STATE: HY000] [nQSError: 10058] A general error has occurred. [nQSError: 43113] Message returned from OBIS. Error Message From BI Security Service: SecurityService::getUsersWithPropertyListByTenantIdentity store provider error (HY000) SQL Issued: {call NQSSearchIdentities('USERS','NAME_PATTERN=biadmin*')}
I tried refreshing GUID's but no luck..Please let me know how to proceed.
Thanks in advance.

To validate the catalog:
Stop Presentation Services.
Refresh the user GUIDs for the catalog.
Caution:
Ensure that you regenerate the user GUIDs before validating the catalog. Failure to do so can result in the removal of all accounts, permissions, and privileges from the catalog.
Back up the catalog by using the 7-Zip utility to create a compressed file for it.
Create a backup copy of the instanceconfig.xml file.
Edit the instanceconfig.xml file so that it contains the appropriate elements for performing the validation.
Due to the nature of the issue encountered, the following elements were included:
<ServerInstance>
<Catalog>
<Validate>OnStartup</Validate>
<ValidateItems>Clean</ValidateItems>
<ValidateLinks>None</ValidateLinks>
<ValidateAccounts>Clean</ValidateAccounts>
<ValidateHomes>None</ValidateHomes>
</Catalog>
</ServerInstance>
Caution:
Include only one Catalog element in the instanceconfig.xml file or unexpected results might occur. Unless expressly noted, include most nodes in an XML document only once.
Note:
If the Catalog element is already present in the instanceconfig.xml file, add the validate tags to the existing content of the Catalog element.
Start Presentation Services to run the validation according to the values specified in the instanceconfig.xml file.
Stop Presentation Services.
Create a backup copy of the instanceconfig.xml file in which you added the validation elements, renaming the file similar to instanceconfig_validate.xml. In this way, you have a version of the file to use as a starting point for subsequent validations.
Restore the backup version of the instanceconfig.xml that you created earlier to use as the current version.
Start Presentation Services.
Thanks,
RM

Error after migration to Crystal Reports 12 for existing reports

Hi,
We had reports written using Crystal Reports Version 8.5. These reports were not modified for a long time. Recently, we had migrated to Crystal Reports 12 (2008). Some of the these existing reports were modified using the Crystal Reports 2008 designer. After installing our application (we ship Merge Module of Crystal Reports 12 i.e. 2008 which gets installed in GAC)
1) If we create new reports in 2008 designer and try to view these reports, it works as expected without any issue(s).
2 ) However, if these modified reports are tried to be viewed, there is an error which states "Database Logon Failed".
Details:
CrystalDecisions.CrystalReports.Engine.LogOnException     {"Database logon failed."}
ErrorID     CrystalDecisions.CrystalReports.Engine.EngineExceptionErrorID.LogOnFailed
InnerException     {"Database logon failed."}
Message      "Database logon failed."
Source     "CrystalDecisions.ReportAppServer.DataSetConversion"
Stack Trace        at CrystalDecisions.ReportAppServer.ConvertDotNetToErom.ThrowDotNetException(Exception e)
   at CrystalDecisions.ReportSource.EromReportSourceBase.ExportToStream(ExportRequestContext reqContext)
   at CrystalDecisions.CrystalReports.Engine.FormatEngine.ExportToStream(ExportRequestContext reqContext)
   at CrystalDecisions.CrystalReports.Engine.FormatEngine.Export(ExportRequestContext reqContext)
   at CrystalDecisions.CrystalReports.Engine.ReportDocument.ExportToDisk(ExportFormatType formatType, String fileName)
TargetSite     {Boolean ThrowDotNetException(System.Exception)}
Also, it is worth to note that if we try to view these modified reports from any environment which has both Crystal Reports 10 and Crystal Reports 12 in GAC, then these reports work as expected.
P.S. We have mechanism in application's code to reset the database connections when any report is being viewed using ReportDocument class' method.
From the above scenario I believe issue is specific to migration to Crystal Reports 12 (2008). Any help /workaround to solve this problem will be highly appreciated.

Make sure you have the latest SP for CR 2008 installed;
https://smpdl.sap-ag.de/~sapidp/012002523100009038092009E/cr2008win_sp2.exe
Ensure you are deploying SP 2 runtime;
MSM
https://smpdl.sap-ag.de/~sapidp/012002523100009159092009E/cr2008sp2_mm.zip
MSI
https://smpdl.sap-ag.de/~sapidp/012002523100009159002009E/cr2008sp2_redistinstall.zip
If that does not help;
1) Do these reports work in the designer?
2) What database are you using and what is the connection type?
3) Compare the dlls loading on the systems where this app works (environment which has both Crystal Reports 10 and Crystal Reports 12 in GAC) and a system that is giving you the error. Use the [Modules|https://smpdl.sap-ag.de/~sapidp/012002523100006252802008E/modules.zip] utility.
4) Open the reports in the designer and look at the properties in the Database menu -> Set Datasource Location. Check to see if there are any differences between the two reports.
5) If there is a subreport in the report that causes the issue, remove it and see if the report works without the subreport.
Ludek

Error "550 5.1.1 ADR.RecipNotFound" for existing user

Similar Messages

Maybe you are looking for