Exchange 2010 activity

Hello guys, i want to check inactive Group mailboxes under an Exchange 2010 environment, because i have a auditory going on and i need to know which mailboxes are being used and which are not. Is there any way i can check the Exchange activity in order to
find out the mailboxes that are not receiving or sending e-mails?
Thank you!

Hi,
From your description, you want to get the inactive mailboxes on Exchange server 2010. I recommend you use the following scripts to list inactive mailboxes.
For your convenience:
List Inactive Mailboxes on Exchange 2007/2010/2013
http://gallery.technet.microsoft.com/office/List-Inactive-Mailboxes-on-1ac82ddf
Note: The output may include system mailboxes. If you wish to process further with output, make sure you do not disturb/disable/delete system mailboxes.
Hope it helps.
Best regards,
Amy Wang
TechNet Community Support

Similar Messages

Andrioid 4.4.4 Galaxy S5 and Exchange 2010 / Active Directory issue

I have posted this here because I don't see a category for Exchange 2010 which is what we currently use and I am not sure where else to post it. Please redirect if needed. Thanks in advance.
I am an IT Tech and I am trying to connect my phone to my email using the standard email application on the phone, with no success.
I was convinced for a long while that it was my phone.
I tried everything I could with the phone and restricting background data and everything but nothing worked.
I type in the credentials and it accepts them and shows me the mailbox but then it never loads the mail and folders.
I must have gone through this process 100 times and occasionally I get a message saying the certificate is incorrect do I want to accept it anyway.
I view the certificate and it is for another domain. When that doesn’t happen I just get pushed from checking the server setting and then it moves right to the settings of the mailbox.
However I don’t get the warning like I did when I created a new mailbox and AD account.
Create new exchange mailbox/ AD account – This worked, but ultimately I want my current user name and mailbox to work.
I don’t want to move to a new one if I don’t have to – I created a new mailbox which intern created an AD account.
After this was done I attempted to sync this account with the phone.
It worked first time without a problem. After the phone checked the server settings it gave me the warning that I was going to have to let the server control the device like it always does.
It also made me accept the System Administrator settings.
I sent a test email to and from it with no problem.
There are other people on our server with Galaxy S5’s and other Android based devices and I have added mail to their devices just like I would my device and they have no problems at all.
I have matched up the mailbox settings and AD settings and everything is the same for the most part.
It is bound to be a little different because I am an IT Tech so obviously I have more than the others, but I don’t feel like additional security should not allow me to add to my mailbox to my device
Other things I tried through the process, with no success, in no particular order are:
Tried connecting my account from different devices
Disconnected and recreated mailbox
Deleted and recreated AD account
There is one thing I noticed in the security tab of the AD account, other people using our mail system and Android based devices have something called
Data Sync. That is some sort of contact in AD
I guess. I cannot find any information about it and when I add it to my security tab, it will not stay.
After I close AD and check back 15 minutes late it is gone.
I am trying to describe this the best possible way. Has anyone experienced similar issue?
If there is any further information needed feel free to ask.

Then I would firstly suggest visiting the Remote Connectivity Analyzer Website to check common availability to your mailbox. Just run through the test.
I ran this test as suggested two different ways. With my user name and password and then a second time with the mail server. Both times in failed all tests with the exception of the following three:
Attempting to resolve the host name in DNS.
Testing the TCP port 443 on host to ensure it's listening and open.
The Microsoft Connectivity Analyzer is attempting to obtain the SSL certificate from remote server on port 443.
All three of these passed. I am not sure what most of this means, but we have people in the company a variety of different devices that connect with no problem. For this reason I believe this problem is localized to my AD account or my mailbox,
I have matched up settings with people that I know have the same device and use it on a daily basis with no problem and can not find anything different.

Exchange 2010 Active Sync issues

I know I've posted a lot lately, but the issues keep rolling in with this upgrade. Since upgrading to Exchange 2010, I have 2 users ( that have come forward thus far) saying they are unable to add exchange mail back onto their phones.
When I go into EMC to look at it and right-click on the uses it shows the option to manage mobile device. Usually when there is no device paired, that option doesnt come up. When I go into manage mobile device, it shows that there is no device
listed. If I run Get-ActiveSyncDeviceStatistics -Mailbox:"alias" I get the same result. It shows no device. I think this is locking the user out somehow from being able to add exchange back onto their mobile device.
I have also tried removing their email box from the server, then re-attaching it. I get the same results each time. They can add exchange to their phones, but when it tries to download mail it gets "Cannot get mail. Connection to the
server failed." Even after they were able to add their account into their phone.

Since you had ActiveSync devices on these accounts on the old system, the tools know those devices existed. However, you can't manage them until you connect through the new system. Is your Exchange 2010 system the one that handles the inbound
ActiveSync connections? Downlevel systems can't support any
mailbox connections to newer systems.

Active Directory domain migration with Exchange 2010, System Center 2012 R2 and File Servers

Greeting dear colleagues!
I got a task to migrate existing Active Directory domain to a new froest and a brand new domain.
I have a single domain with Forest/Domain level 2003 and two DC (2008 R2 and 2012 R2). My domain contains Exchange 2010 Organization, some System Center components (SCCM, SCOM, SCSM) and File Servers with mapped "My Documents" user folders. Domain
has about 1500 users/computers.
How do u think, is it realy possible to migrate such a domain to a new one with minimum downtime and user interruption? Maybe someone has already done something like that before? Please, write that here, i promise that i won't ask for instruction from you,
maybe only some small questions :)
Now I'm studying ADMT manual for sure.
Thanks in advance,
Dmitriy Titov
С уважением, Дмитрий Титов

Hi Dmitriy,
I got a task to migrate existing Active Directory domain to a new froest and a brand new domain.
How do u think, is it realy possible to migrate such a domain to a new one with minimum downtime and user interruption?
As far as I know, during inter-forest migration, user and group objects are cloned rather than migrated, which means they can still access resources in the source forest, they can even access resources after the migration is completed. You can ask users
to switch domain as soon as the new domain is ready.
Therefore, there shouldn’t be a huge downtime/interruption.
More information for you:
ADMT Guide: Migrating and Restructuring Active Directory Domains
https://technet.microsoft.com/en-us/library/cc974332(v=ws.10).aspx
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]

Exchange 2010 SP2 : Move calander entries and Task items from Archive mailbox to current active mailbox.

Hi,
After upgrade the exchange 2010 SP1 to SP2, all users calendar and task items entries also moved to archive mailbox from user's active mailboxes.
We like to move 90 days older emails to archive mailbox but not calendar & task items to be moved.
Any solution to move back those older archive calendar and task items to active mailbox users and also any settings to stop further to move calendar & task items to archive mailbox in SP2?
Thanks
MD

Hi,
Exchange 2010 SP2 RU4 added support for Calendar and Task Retiontion polices. For more information about that see the below blog post which also includes a workaround if you don't what these folders to be processed by MRM.
Calendar and Tasks Retention Tag Support in Exchange 2010 SP2 RU4
http://blogs.technet.com/b/exchange/archive/2012/08/14/calendar-and-tasks-retention-tag-support-in-exchange-2010-sp2-ru4.aspx
PS. Exchange 2010 SP2 is no longer supported.
Martina Miskovic

Exchange 2010 - #554 5.2.0 The Active Directory user wasn't found

We have migrated form Exchange 2003 to Exchange 2010 a year ago with no issues. All Exchange legacy servers uninstalled with no issues. We had an issue today were emails sent to mail-enabled public folder was returning NDRs. This happened on two or three
and then trickled down thorugh several public folders. This client has several public folders and uses them for business processes. There have been 100s of incidents now.
Symtoms:
E-mail messages that been sent to mail-enabled public folder in Exchange Server 2010 environment rejected with the following NDR:
#554 5.2.0 STOREDRV.Deliver.Exception:ObjectNotFoundException; Failed to process message due to a permanent exception with message The Active Directory user wasn't found. ObjectNotFoundException: The Active Directory user wasn't found. ##
We are getting the following Event log messages on Hub transport servers.
Log Name:      Application
Source:        MSExchange Store Driver
Date:          5/29/2014 2:45:53 PM
Event ID:      1020
Task Category: MSExchangeStoreDriver
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      xxxxxx
Description:
The store driver couldn't deliver the public folder replication message "Backfill Request (xxxxxxx)" because the following error occurred: The Active Directory user wasn't found..
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
    <Provider Name="MSExchange Store Driver" />
    <EventID Qualifiers="49156">1020</EventID>
    <Level>2</Level>
    <Task>1</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-05-29T18:45:53.000000000Z" />
    <EventRecordID>168407</EventRecordID>
    <Channel>Application</Channel>
    <Computer>xxxxxx</Computer>
    <Security />
</System>
<EventData>
    <Data>"Backfill Request (xxxxxxx)"</Data>
    <Data>The Active Directory user wasn't found.</Data>
</EventData>
</Event>
Actions:
We have executed the following steps.
1. Start the ADSI Edit MMC Snap-in. Click Start, then Run, and type adsiedit.msc, and then click OK.
2.       Connect & Expand the Configuration Container [YourServer.DNSDomainName.com], and then expand CN=Configuration,DC=DNSDomainName,DC=com.
3.       Expand CN=Services, and then CN=Microsoft Exchange, and then expand CN=YourOrganizationName.
4.       You will see an empty Administrative Group. Expand the CN=YourAdministrativeGroupName.
5.       Expand CN=Servers.
6.       Verify there are no server objects listed under the CN=Servers container.
7.       Right click on the empty CN=Servers container and choose Delete.
8.       Verify the modification, and try to send again the E-mail to the mail-enabled public folder.
To no avail the issue still exists.
We have not rebooted the servers and plan to in the early morning.
We have dismounted/mounted public folder DBs
Does anyone have any other suggestions?
Danny Kennedy, MCSE, MCITP

I have already uninstalled legacy servers a year ago.
This was the solution:
I moved the public folder hierarchy to exchange 2010 using ADSIEdit.
                                  If you don't know adsiedit tool that much check this
http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay?javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken&javax.portlet.prp_ba847bafb2a2d782fcbb0710b053ce01=wsrp-navigationalState%3DdocId%253Demr_na-c03067450-1%257CdocLocale%253D%257CcalledBy%253D&javax.portlet.tpst=ba847bafb2a2d782fcbb0710b053ce01&sp4ts.oid=1840527&ac.admitted=1401455429281.876444892.492883150
Danny Kennedy, MCSE, MCITP

Exchange 2003 migrate to Exchange 2010 - single forest multiple domain. Active Sync problem

Hi All,
I have AD single forest and multiple domain. for example, the forest domain is jakarta.co.id, and the other domain is bali.co.id.
Exchange 2003 deployed in jakarta.co.id, User mail enabled in domain jakarta.co.id and bali.co.id.
Then, I upgrade to Exchange 2010 (deploy in jakarta.co.id) and move mailbox from Exchange 2003 to Exchange 2010.
All users in bali.co.id are able to access email from Owa, BlackBerry (BIS), Outlook, but cannot access from Android, Windows Phone. (Active-Sync).
I got error information generated from https://testconnectivity.microsoft.com, as following:
Attempting the FolderSync command on the Exchange ActiveSync session.
The test of the FolderSync command failed.
Tell me more about this issue and how to resolve it
Additional Details
Exchange ActiveSync returned an HTTP 500 response (Internal Server Error).
Active-Sync still not work even I check option "Include inheritable permissions from this object" in security tab.
any idea to fix this issue?
Thanks.
Endrik
Endrik | blog: itendrik.wordpress.com Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading
the thread.

Hi Sathish,
We are planning to migrate Exchange 2003 to Exchange 2013, all user already in Exchange 2010 and Exchange 2003 was decommissioned
Event Viewer log as following:
Log Name: Application
Source: MSExchange ActiveSync
Date: 1/17/2014 10:00:48 PM
Event ID: 1008
Task Category: Requests
Level: Warning
Keywords: Classic
User: N/A
Computer: EXC2010.jakarta.co.id
Description:
An exception occurred and was handled by Exchange ActiveSync. This may have been caused by an outdated or corrupted Exchange ActiveSync device partnership. This can occur if a user tries to modify the same item from multiple computers. If this is the case,
Exchange ActiveSync will re-create the partnership with the device. Items will be updated at the next synchronization.
URL=/Microsoft-Server-ActiveSync/default.eas?Cmd=Sync&User=bali%5Csteveng&DeviceId=SAMSUNG123456789&DeviceType=SAMSUNGGTN7000
--- Exception start ---
Exception type: Microsoft.Exchange.AirSync.AirSyncPermanentException
Exception message: A null value was received for the NTSD security descriptor of container CN=ExchangeActiveSyncDevices,CN=Steven Gerrard,OU=IT,DC=bali,DC=co,DC=id.
Exception level: 0
HttpStatusCode: 500
AirSyncStatusCode: 110
XmlResponse:
This request does not contain a WBXML response.
Exception stack trace: at Microsoft.Exchange.AirSync.ADDeviceManager.SetActiveSyncDeviceContainerPermissions(ActiveSyncDevices container)
at Microsoft.Exchange.AirSync.ADDeviceManager.CreateActiveSyncDeviceContainer(Boolean retryIfFailed)
at Microsoft.Exchange.AirSync.ADDeviceManager.CreateActiveSyncDevice(GlobalInfo globalInfo, ExDateTime syncStorageCreationTime, Boolean retryIfFailed)
at Microsoft.Exchange.AirSync.ADDeviceManager.CreateActiveSyncDevice(GlobalInfo globalInfo, ExDateTime syncStorageCreationTime)
at Microsoft.Exchange.AirSync.Command.UpdateADDevice(GlobalInfo globalInfo)
at Microsoft.Exchange.AirSync.Command.CompleteDeviceAccessProcessing()
at Microsoft.Exchange.AirSync.Command.WorkerThread()
--- Exception end ---.
I think KB817379 is not related because Exchange 2003 was decommissioned.
Regards,
Endrik
Endrik | blog: itendrik.wordpress.com Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading
the thread.

Active Sync Not Working for NEXUS MOBILE in Exchange 2010 SP3 Enivironment..

HI Exchange Techy's.
We have Exchange 2010 SP3 Servers. Now All mobiles are working fine Through Active Sync Except Google Nexus.
Problem: Account has been activated successfully in Mobile, But Mails are not synchronized.
Kindly help fix me out of this problem.
We are welcome & Appreciate who are giving Comments & Solutions for this problem.
Regards,
One of your Exchange Person
B@[email protected]

Hi,
I'd recommend asking your question over here:
https://social.technet.microsoft.com/Forums/en-us/home?forum=exchangesvrmobilitylegacy&filter=alltypes&sort=lastpostdesc
This forum is meant for feedback on the TechNet website/subscriptions, not product support.
Good luck.
Don't retire TechNet! -
(Don't give up yet - 13,085+ strong and growing)

Exchange 2010 and Active Directory connector

Has anyone managed to provision an exchange 2010 mailbox with the dotnet connector bundle in the latest patch OW8.1.1.1/145769-01? ActiveDirectory.Connector-1.0.0.5143.zip and Exchange.Connector-1.0.0.5757.zip.
Provisioning the Active Directory account works fine but as soon as I add an exchange attribute I get an error: java.lang.RuntimeException: The specified directory service attribute or value does not exist. (Exception from HRESULT: 0x8007200A)
I checked everything I could think of. Either I'm missing something obvious or it does not work.
Greetings,
Marijke

Have you had any luck with this?
/hydrazine

Active Sync Issue - Exchange 2010

Hey,
Alright I have had some issues with some iPhones connecting to our Exchange 2010 server. When i run the Testconnectivity test, I receive a timeout error on the last step:
Attempting the FolderSync command on the Exchange ActiveSync session.
The test of the FolderSync command failed.
Additional Details
Exception details:
Message: The operation has timed out
Type: System.Net.WebException
Stack trace:
at System.Net.HttpWebRequest.GetResponse()
at Microsoft.Exchange.Tools.ExRca.Extensions.RcaHttpRequest.GetResponse()
Elapsed Time: 100439 ms.
When I run the Test from Powershell I receive the following message:
[System.Net.WebException]: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. Inner error [System.Security.authentication.AuthenticationException]: The remote certificate is invalid according
to the validation procedure.
I have already taken a number of steps including removing all of the Exchange Certificates that are not current. I have also reassigned them to the correct services. I have recreated the Active Sync Virtual Directory. Among other things.
I can't seem to find anything that points me to the correct direction so if anyone has any ideas on what I can look at, it would be appreciated.
At this point, I can't create the Exchange account on any new Active Sync clients (I have tested from an iPhone and Android phone) however a few people who had the account already setup get random e-mail messages that come through.

I turns out the issue was Trend. I uninstalled this software and everything started working correctly.

Active sync on bionic will not work with exchange 2010

We recently upgraded our corporate email system to exchange 2010. Prior to this, while on exchange 2007 I had no issues with active sync. On the day we upgraded active sync no longer worked for me I have others at work running older Droid OS. 2.2.2 and 2.2.3. They have no issues with the new exchange. I am on 2.3.4. I am able to do the setup and the setup will detect the new server and act as if the account is setup correctly. When it tries to sync I get a "connection error" message.

Hi,
From your description, I recommend you use the following URL to check if you can access EAC. I see it works for several people about this issue.
https://<Exchange 2013 CAS FQDN>/ecp?ExchClientVer=15
Hope it helps.
Best regards,
Amy Wang
TechNet Community Support

DataCenter Activation //Exchange 2010

Hi,
One of my client is activating exchange services from secondary datacenter. Could you expert folks please review this & let me know if you see any issues and help me make this easier to achieve
with little to no interruption.
Some background:
The activation of secondary datacenter is needed because we’ll be migrating the current primary datacenter to new facility which will then become the new primary datacenter. And to support Email services uptime/SLA, we’ll be activating the services
to secondary datacenter meanwhile, post successful datacenter migration we’ll then have to failback the services this new datacenter.
Exchange Environment: We’ve 2 Multirole exchange 2010 SP3 servers at each site. One pair F5 Load balancer (GTM & LTM configuration) at each site. Each site has IronPort
for outgoing email. UM gateways are configured in cluster spanning both sites. Each site has its own CAS array. Webmail & autodiscover records are published to public DNS
Here is a plan.
Route public      traffic from Primary site F5 LoadBalancer pair to Secondary      site F5 LoadBalancer pair. (Change webmail/autodiscover host name to
secondary datacenter & Flush the cache on DNS server)
Change the      internal DNS server record for CAS Array, Webmail, SMTP Relay, Internal      autodiscover etc to point to secondary datacenter
Either rename      the secondary CAS array as Primary CAS array or set the primary CAS array to      secondary site
Change all the      exchange Virtual directory external URL as public webmail mail URL and      internal URL will have local Secondary site CAS array followed by
directory type.
Configure OWA      redirection on IIS
Change Iron      port/HUB server to ensure source transport server is now secondary hub      server and smart host is secondary ironport
Replicate relay      connector to secondary hub transport server so applications can relay      emails via these servers
UM servers      gateway exists at both sites and SIP trunk is configured so I don’t see      any need for change
Move OAB to      secondary exchange server
Login to server      in the Secondary datacenter & run
Stop-DatabaseAvailabilityGroup      -Identity DAG01 -ActiveDirectorySite Primary
Verify StoppedMailboxServer should list all mailbox servers in the primary datacenter and the StartedMailboxServers should list all mailbox servers in the recovery datacenter
Verify that the cluster services on all Exchange servers that were accessible in the primary datacenter were cleaned up & Ensure the startup type for Cluster Service is set to disabled
Stop the Cluster      service on each DAG member in the Secondary datacenter.
Run the restore command from secondary exchange servers as below
Restore-DatabaseAvailabilityGroup      –Identity DAG01 -ActiveDirectorySite Secondary
     -AlternateWitnessDirectory:<AWSPath>      -AlternateWitnessServer:<AWSName>
Verify that the DAG members are up and the Cluster Group is online
Activate/Mount      the databases now
Shut      down primary Datacenter exchange servers, & Necessary SAN backend.      Move the hardware to new datacenter. Plug them in and turn them on &
     if the exchange server/SAN come backup online properly then login to      primary exchange server & run.
Start-DatabaseAvailabilityGroup      –Identity DAG01 -ActiveDirectorySite primary
Ensure DAG members are up and the Cluster Group is online
Set-DatabaseAvailabilityGroup      –Identity DAG01 -WitnessServer <WSName>
     -AlternateWitnessServer <AWSName>
Move active      database copies to primary datacenter.
Repeat step 1 to      9 to turn the things back on primary datacenter.
Let me know if this can be further improved or rather simplified.
Regards, Pushkal MishrA, This posting is provided “AS IS” with no warranties and confers no rights. I request you to test the solution in lab and post successful outcome you should try this on production.

Hi,
To get the traffic to DR site, you need to change the DNS record to point to the VIP of the LB in the second site.
Here is a related thread which may help you to understand this for your reference.
http://social.technet.microsoft.com/forums/exchange/en-US/704695d4-dfb2-40dd-ad58-46b34dc1aa38/exchange-2010-site-resiliency-cas-array-failover
About DAG datacenter failover, the following article can provide us the useful information.
Datacenter Switchovers
http://technet.microsoft.com/en-us/library/dd351049(v=exchg.141).aspx
Hope this helps.
Best regards,
Belinda
Belinda Ma
TechNet Community Support

Removing Exchange 2007 from SBS 2008 (In an Exchange 2010 Coexistance Scenario) - In order to remove 2007 Mailbox Objects from Active Directory and remove the SBS2008 server completely

I'm trying to remove Exchange 2007 from an SBS 2008 server
(Server 2008 Standard FE). My ultimate goal is to completely remove the SBS 2008 Server from the network environment.
We have an Exchange 2010 Coexistence Scenario and Mailboxes/Public Folders/etc have been moved over to the 2010 mail server, on Server 2008 R2.
I have moved all Shares, FSMO roles, DHCP, DNS, etc over to their respective servers. We have two full blown DC's in the environment.
I'm ready to remove Exchange 2007 from SBS 2008 and DCPROMO the server. I can NOT seem to find a TechNet article that shows me how
to proceed in this kind of scenario. I am trying to use the TechNet article:
http://technet.microsoft.com/en-us/library/dd728003(v=ws.10).aspx
This article references Disabling Mailboxes, Removing OAB, Removing Public Folder Databases, then uninstalling Exchange using the Setup Wizard.
When I go to Disable Mailboxes I get the following error:
Microsoft Exchange Error
Action 'Disable' could not be performed on object 'Username (edited)'.
Username (edited)
Failed
Error:
Object cannot be saved because its ExchangeVersion property is 0.10 (14.0.100.0), which is not supported by the current version 0.1 (8.0.535.0). You will need a later version of Exchange.
OK
I really don't see why I need to Disable Mailboxes, Remove OAB and Public Folder Databases since they have been moved to 2010. I just want
to remove Exchange 2007 and DCPROMO this server (actually I just want to remove any lingering Exchange AD Objects referring to the SBS 2008 Server, using the easiest and cleanest method possible).
Can someone point me in the right direction?
Thanks!

Hi,
Based on your description, it seems that you are in a migration process (migrate SBS 2008 to Windows Server
2008 R2). Now, you want to remove Exchange Server and demote server. If anything I misunderstand, please don’t hesitate to let me know.
On current situation, please refer to following articles and check if can help you.
Transition
from Small Business Server to Standard Windows Server
Removing SBS 2008 –
Step 1: Exchange 2007
Removing SBS 2008 – Step 2:
ADCS
Removing
SBS 2008 – Step 3: remove from domain / DCPROMO
Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft
does not guarantee the accuracy of this information.
Hope this helps.
Best regards,
Justin Gu

After Exchange 2010 SP3 upgrade, UAG publised OWA is throwing a "You do not have permissions to view this folder or page" error

Hi,
We have an issue with our OWA page. We are currently publishing OWA via UAG.
We recently upgraded to Exchange 2010 SP3 and then SP3 Rollup7. Since the upgrade, we are keep getting the following error after entering our credentials on the login page. I've tried with every possible browser.
You do not have permissions to view this folder or page
Strangely enough, the mobile phones are sending and receiving emails just fine, the phones use the same OWA link, so it's not an authentication issue, the phones login into the UAG servers with no issues. I can see this on the Active Sessions screen
on Web Monitor.
I've attempted to connect to the OWA by bypassing the UAG server, so putting in the local OWA address of one of my Exchange servers, it works... so the OWA page is up and running.
No error logs get generated on Web Monitor when we receive the permission error, I think this is because it's past authentication, it's on the Exchange layer.
Any insight would be helpful? I'm assuming something changed on the Exchange side after the upgrade.
Just in case, I've upgraded the UAG and TMG servers to the latest SP and Rollup packets.
UAG > SP4
TMG > SP2 Rollup 5

I've found a solution; UAG requires Basic Authentication over OWA. For some reason Integrated Windows Authentication got turned on after the SP3 upgrade.
http://technet.microsoft.com/en-us/library/ee921443.aspx
Turning Integrated Windows Authentication off via the Client Access OWA settings resolved the issue. Though beware, you
have do this on all your Client Access servers.

[SOLVED] Can't add a node to the cluster with error (Exchange 2010 SP3 DAG Windows Server 2012)

Hi there!
I have a problem which makes me very angry already :)
I have two servers Exchange 2010 SP3 with MB role started on Windows Server 2012. I decided to create a DAG.
I have created the prestaged AD object for the cluster called msc-co-exc-01c, assigned necessary permissions and disabled it. Allowed through the Windows Firewall traffic between nodes and prepared the File Share Witness server.
Then I have tried to add nodes. The first node has been added successfully, but the second node doesn't want to be added :). Now I can add only one node to the DAG. I tried to add different servers first, but only the first one was added.
LOGS on the second nodes:
Application Log
"Failed to initialize cluster with error 0x80004005." (MSExchangeIS)
Failover Clustering Diagnostic Log
"[VER] Could not read version data from database for node msc-co-exc-04v (id 1)."
CMDLET Error:
Summary: 1 item(s). 0 succeeded, 1 failed.
Elapsed time: 00:06:21
MSC-CO-EXC-02V
Failed
Error:
A database availability group administrative operation failed. Error: The operation failed. CreateCluster errors may result from incorrectly configured static addresses. Error: An error occurred while attempting a cluster operation. Error: Cluster API '"AddClusterNode()
(MaxPercentage=100) failed with 0x5b4. Error: This operation returned because the timeout period expired"' failed. [Server: msc-co-exc-04v.int.krls.ru]
An Active Manager operation failed. Error An error occurred while attempting a cluster operation. Error: Cluster API '"AddClusterNode() (MaxPercentage=100) failed with 0x5b4. Error: This operation returned because the timeout period expired"' failed..
This operation returned because the timeout period expired
Click here for help... http://technet.microsoft.com/en-US/library/ms.exch.err.default(EXCHG.141).aspx?v=14.3.174.1&t=exchgf1&e=ms.exch.err.ExC9C315
Warning:
Network name 'msc-co-exc-01c' is not online. Please check that the IP address configuration for the database availability group is correct.
Warning:
The operation wasn't successful because an error was encountered. You may find more details in log file "C:\ExchangeSetupLogs\DagTasks\dagtask_2014-11-17_13-54-56.543_add-databaseavailabiltygroupserver.log".
Exchange Management Shell command attempted:
Add-DatabaseAvailabilityGroupServer -MailboxServer 'MSC-CO-EXC-02V' -Identity 'msc-co-exc-01c'
Elapsed Time: 00:06:21
UPD:
when Exchange servers ran on the same Hyper-V node, the DAG is working well, but if I move one of VM to another node, It stops working.
I have installed Wireshark and captured trafic of cluster interface. When DAG members on the same HV-node, there is inbound and outbound traffic on the cluster interface, but if I move one of DAG member to another node, in Wireshark I see only outbound traffic
on both nodes.
It's confused me, because there is normal connectivity between these DAG members through the main interface.
Please, help me if you can.

Hi, Jared! Thank you for the reply.
Of course I did it already :) I have new info:
when Exchange servers ran on the same Hyper-V node, the DAG is working well, but if I move one of VM to another node, It stops working.
I have installed Wireshark and captured trafic of cluster interface. When DAG members on the same HV-node, there is inbound and outbound traffic on the cluster interface, but if I move one of DAG member to another node, in Wireshark I see only outbound traffic
on both nodes.
It's confused me, because there is normal connectivity between these DAG members through the main interface.

Exchange 2010 activity

Similar Messages

Maybe you are looking for