Exchange 2010 AD Site Changes

We have 2 Exchange 2010 servers. Hub Transport/Mailbox server is at our local office. CAS server is at a remote data center. It is all one AD site and all domain controller/DNS servers are in the local office.
We are now adding a domain controller with DNS to the remote data center with the CAS. This new domain controller will also be the DC for the new AD site that will represent the data center location.
What needs to be done to make sure adding a new AD site doesn't negatively affect Exchange?
IP addresses are not changing. Is there any problem with the CAS being in a different AD site than the mailbox/hub transport server?

Hi ,
Thank you for your question.
What needs to be done to make sure adding a new AD site doesn't negatively affect Exchange?
What is a new AD site? A new sub-domain or a new BDC?
If it is a sub-domain, by my understanding, it is important for us to make sure the DNS property of IP address point to local AD on Exchange CAS server. then Exchange CAS server will not communicate with new AD on remote site. If it is a BDC, we could add
the IP into the property of “alternate DNS server” on Exchange CAS server. if i have misunderstanding, please be free to let me know.
IP addresses are not changing. Is there any problem with the CAS being in a different AD site than the mailbox/hub transport server?
A: yes, we could do that, we just make sure all subnets could communicate without ant problem.
If there are any questions regarding this issue, please be free to let me know.
Best Regard,
Jim
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
Jim Xu
TechNet Community Support

Similar Messages

TMG 2010 publishing Exchange 2010 OWA cannot change password if user must change password at first logon is set

Hi,
I have an odd issue whereby if I set "user must change password" on an AD account, the end user cannot logon, they're simply taken back to the OWA login page as if their password is incorrect.
My setup is as follows:
outer TMG -- uses a listener for email.contoso.com and is configured for no authentication.This uses a publishing rule to publish the inner TMG server. This server is not a domain member.
inner TMG - uses a listener for email.contoso.com and is configured for NLTM\kerberos negotiation with forms authentication (Windows Active Directory). This server is a domain member and use a publishing rule to publish the internal CAS. Allow users to change
password is selected in the publishing rules.
Exchange 2010 SP1 - uses integrated windows and basic authentication. Has the appropriate registry key configured to allow users to change their AD password on first logon.
I've registered an snp for "http/email.contoso.com mailserver-dc1", all SSL certificates being used are valid and my configuration used to allow users to login and change their password with "user must change password on first login"
set in AD.
If I launch a web browser on an internal server and point it to email.contoso.com I'm immediately presented with a generic Windows authentication request (similar to what's seen in ADFS) rather than the standard OWA page. No matter what I do, I cannot login
and change my password using the correct URL. However if I point my browser at
http://192.168.4.10/owa I'm prompted to login and I can change my password using the sam credentials.
The only recent changes made are:
- Disabling SSL 3.0 and enabling TLS (http://www.isaserver.org/articles-tutorials/configuration-security/improving-ssl-security-forefront-threat-management-gateway-tmg-2010-published-web-sites.html)
- Replacing the TMG listener certificates so that they now use SHA2 rather than SHA2 (certificates are trusted on each TMG server)
Looking on the outer TMG and the DC logs I can see schannel errors which I believe are related to the problem. TMG monitoring also shows "Failed connection attempt: 1907 The user'spassword must be changed before logging on for the first time"
I've checked that my inner TMG and DC are using the same certificate for server authentication and gone through this guide:
http://blogs.technet.com/b/keithab/archive/2012/02/29/setting-up-and-troubleshooting-ldaps-authentication-in-forefront-tmg-2010.aspx
If I try to use ldp.exe on the inner TMG, I get the error in the pic below
Thanks
IT Support/Everything

Hi,
You could try to analyze the TMG tracing and try the troubleshoot steps in the blog below.
TMG 2010 – FBA, troubleshooting the change password feature
http://blogs.technet.com/b/isablog/archive/2012/05/07/tmg-2010-fba-troubleshooting-the-change-password-feature.aspx
Best Regards,
Joyce

Outlook 2010 SP1 Profile Does Not Update After Moving Mailbox Between Exchange 2010 SP2 Sites

I am working on a large mailbox migration from one AD site to another.
Exchange version at both sites:Exchange 2010 SP2
Two Mailbox Servers: MBX01 in site A / MBX02 in site B
(There is a DAG but keeping this simple)
Two CAS Arrays: CASA.domain.com / CASB.domain.com
The RPCClientAccessServer property is set accordingly. Where MBX01 is set to CASA.domain.com and MBX02 is set to CASB.domain.com
Clients:Outlook 2010 SP1
Scenario: I successfully move a mailbox from Site A to Site B. The Outlook client does not automatically update its server settings to point to the new cas array (CASB.domain.com) and continues to connect to the old CAS server (CASA.domain.com).
I have seen a few articles regarding this pointing to workarounds such as:
- repairing the outlook profile on the client
- delete the existing outlook profile
- run a script to update the prf file (re-cache's email at the client)
I am interested in knowing if anyone else has experienced this, what their solution was for a large migration and if any roll-ups or service packs have possibly fixed this problem.
I would also like to know if you have seen this affect ActiveSync devices. I am getting mixed results in my tests and thought it may be contributed toward different device types, mobile os versions, etc...
I have posted this to the Exchange 2010 forum as well, just wasn't sure where to start.
Thanks.
Mike

Hi,
Seems you got several replies in the thread below that you posted in Exchange forum:
http://social.technet.microsoft.com/Forums/exchange/en-US/68ae67c1-59f5-44bb-aadc-0aea3f72ad2d/outlook-profile-not-updated-to-new-cas-array-after-mailbox-move-between-sites?forum=exchange2010#68ae67c1-59f5-44bb-aadc-0aea3f72ad2d
Please come back to the thread above and check if the replies are helpful.
Since this issue is more related to Exchange, we can provide rarely assistance on this problem. If you need any help on Outlook client side, please don't hesitate to let me know.
I would appreciate it if you could post the solution here when you found it, so that other community members who have same question in this forum will benefit from it.
Best Regards,
Steve Fan
TechNet Community Support

Exchange 2010 users cant change password in OWA when Cas server is Exchange 2013 cu3

Running Exchange 2010 and 2013 in mixed mode. users who is still on Exchange 2010 cant change password in OWA. It worked when it was clean Exchange 2010 installation. Password change is working for users migrated to 2013
LS

Hi
Please follow the below blog which will help you in solving this issue
http://technet.microsoft.com/en-us/library/bb684904.aspx
Note: Be careful while modifying the registry settings.
Please mark as helpful if you find my contribution useful or as an answer if it does answer your question.That will encourage me - and others - to take time out to help you.
Regards,
Sathish

Exchange 2010 Domain Name change in a multitenant (hosted) environment

Is there a way to change a domain name from one of our domains?
We have exchange 2010 SP1 in hosted mode so we have several domains we deliver to our customers.
However, now 1 of our customers would like to change their domain name.
For example abc.com should become 123.com
To make it even a litle bit more complicated, in the first instance they want to add the 123.com domain so they receive emails on both domains. After a month they want to delete the old domain ( abc.com ) and keep on receiving emails on the new domain
( 123.com ).
Please keep in mind that the other domain that we also provide must not be affected.
Any help would be grate as I am stuck on this one.
I simply don't know the correct powershell commands.

Hi Peter,
I read the email and as I was writing a reply I thought by myself, why not share it with the rest.
I am sure other people need this to so I copy paste it in here :-):
===================================
Hi Peter,
If this helps you out, the only thing I want back is for you to help 3 others and share this message so they help out other people aswell. :-D peace
Unfortunately there is no way according to microsoft ( as far as I am aware ) to make a domain change in the hosted edition and for this reason I had to figure it all out myself.
I am no scripter so I didn't build a tool for it, sorry.
I will send you all the information you need.
1- add the accepted domain: New-AcceptedDomain -Name NameOfOrg -Organization ForWhichDomainWillThisBeTheAcceptedDomain -DomainName NewDomain.Eu -DomainType Authoritative
2- to create an alias ( tenant admin )
Import-CSV name-of-textfile.txt | foreach-object {Set-Mailbox $_.alias -EmailAddresses @{add=$_.smtp1}}
The text file has to be in the following format:
alias,smtp1
firstalias,newemailaddress
secondalias,newemailaddress
etc.
3- Make the new alias the primarysmtpaddress ( main exchange admin ):
Import-CSV name-of-textfile.txt | foreach-object {Set-Mailbox $_.alias -primarysmtpaddress $_.smtp1 -emailaddresspolicyenabled $false}
The txt file should be in the following format:
alias,smtp1
domain\alias1,newemailaddress
domain\alias2,newemailaddress
etc.
4- Rename the alias ( tenant admin ):
Import-CSV name-of-textfile.txt | foreach-object {Set-Mailbox $_.alias -alias $_.smtp1}
The txt file should be in the following format:
alias,smtp1
alias1,newalias1
alias2,newalias2
etc.
5- Change UserPrincipalName (main exchange admin ). This is the username to sign in to OWA
Import-CSV name-of-textfile.txt | foreach-object {Set-Mailbox $_.alias -userprincipalname $_.smtp1}
The txt file should be in the following format:
alias,smtp1
domain\alias1,newemailaddress
domain\alias2,newemailaddress
etc.
6- Change displayname (tenant admin ):
Import-CSV name-of-textfile.txt | foreach-object {Set-Mailbox $_.alias -displayname $_.smtp1}
The txt file should be in the following format:
alias,smtp1
alias1,displayname
After a while you might to remove the previous email address ( i waited for this for 3 months! 1 month is way to short for people to communicate it, trust me.. ):
7- Import-CSV name-of-textfile.txt | foreach-object {Set-Mailbox $_.alias -EmailAddresses @{remove=$_.smtp1}}
The txt file should be in the following format:
alias,smtp1
alias1,OldEmailAddress1
alias2,OldEmailAddress2
Andre
Peace

Exchange 2010 user cannot change password from OWA

My users are not able to change their own email password from owa. But we can change the passwords from ECP or from the server without any issue. What could be the issue ?
Biju Rajan

Check the regional date and time is set for user OWA...Follow the below steps
On the Client Access Server (CAS), click Start > Run and type
regedit.exe and click OK.
Navigate to HKLM\SYSTEM\CurrentControlSet\Services\MSExchange OWA.
Right click the MSExchange OWA key and click New >
DWord (32-bit).
The DWORD value name is ChangeExpiredPasswordEnabled and set the value to
1.
Note: The values accepted are 1 (or any non-zero value) for "Enabled" or 0 or blank / not present for "Disabled"
After you configure this DWORD value, you must reset IIS. The recommended method to reset IIS is to use
IISReset /noforce from a command prompt.
Ref:http://blogs.technet.com/b/exchange/archive/2010/10/06/3411240.aspx
Exchange Queries

Exchange 2010 - Multi Site DAG with DAC - Node evicted

I have a 2 site DAG with 4 members, 2 at each site with DAC set.
Primary Site:
EXMB01
EXMB02
FSW
Failover Site:
EXMB03 - PAM
EXMB04
AFSW
After updating and rebooting one of the members in the primary active site (exmb02), it looks like the server was removed from the cluster as it was booting back up:
Event ID: 4621
Source: FailoverClustering
This node was successfully removed from the cluster.
Directly preceding that, in the Failover Cluster Manager events, I can see the following progression:
Event ID: 4620
Task Category: Cluster Evict/Destroy Cleanup
Unloading the cluster service registry hive during cluster node cleanup failed. The error code was '3221225569'. You may be unable to create or join a cluster with this machine until cleanup has been successfully completed. For manual cleanup, execute the
'Clear-ClusterNode' PowerShell cmdlet on this machine.
and then: Cluster node cleanup encounted at least one error. You may be unable to create or join a cluster with this machine until cleanup has been successfully completed. Please review and resolve preceding cluster node cleanup events. For manual cleanup,
execute the 'Clear-ClusterNode' PowerShell cmdlet on this machine.
And then from all three other nodes:
Node MGR: Cluster node USTRYCO01EXMB02 has been evicted from the failover cluster.
I intend to move the PAM role back to the primary sight, I had not noticed it was there.
Curiously, if I run Cluster.exe node, I can see that all 4 nodes are listed as UP.
What do I need to do to recover EXMB02? I've read that sometimes just a reboot will clean up the cluster configuration, but how would I add the node back into the cluster? Why is it still listed as a node if it was evected? Also,
what is the significance of having the PAM role in the primary data center as opposed to the failover data center?

Hi,
From the error message, you need to run the following cmdlet to force the cleanup on server EXMB02.
CLUSTER NODE /FORCECLEANUP
For more details about error 4620 and 4622, you can refer to these two articles: Event ID 4620 — Node Cleanup Success
and
Event ID 4622 — Node Cleanup Success.
About PAM, the PAM role is automatically held by the DAG member that owns the cluster’s core resource group. It doesn't matter what site the PAM is in, if the server that owns the cluster quorum resource fails, the PAM role automatically moves to a surviving
server that takes ownership of the cluster quorum resource.
Best regards,
Belinda
Belinda Ma
TechNet Community Support

Migration Exchange 2010 to Exchange 2013 in a different site

Hi all, I have
an Exchange 2010 with these characteristics
Site A
- 2 Servers DAG for mailboxes
- 2 Servers Client Access and
Hub Transport in Microsoft
NLB
- 2 Domain Controllers Windows
Server 2008 R2
I want to upgrade to Exchange 2013 but in another
Site, Site B. When the migration is complete,
the mail system will only be in Site
B.
The connection between Site A and Site
B is a reliable connection.
Is there any problem to upgrade Exchange 2013
to another Site, other than Site
A?
regards
Microsoft Certified IT Professional Server Administrator

Hi all, I have
an Exchange 2010 with these characteristics
Site A
- 2 Servers DAG for mailboxes
- 2 Servers Client Access and
Hub Transport in Microsoft
NLB
- 2 Domain Controllers Windows
Server 2008 R2
I want to upgrade to Exchange 2013 but in another
Site, Site B. When the migration is complete,
the mail system will only be in Site
B.
The connection between Site A and Site
B is a reliable connection.
Is there any problem to upgrade Exchange 2013
to another Site, other than Site
A?
regards
Microsoft Certified IT Professional Server Administrator
It is like any other Migration (Same Forest) You just need to make sure that AD is been replicated from Site A (Exchange 2010) to Site B (Exchange 2013).
No Network or replication issue between the sites. Having more than 1 DC on Site B would be good idea.
Once you have all these set, rest of the things are same.
Extend the AD Schema.
Deploy the Exchange Server 2013 CU6
Create the Cert request for 2013.
Install Cert on Exchange 2013.
Configure the Virtual Directories for Exchange 2013.
Test the Coexistence between 2010 and 2013.
Perform the Cutover from 2010 to 2013.
Test the Cutover and start the Test migration phase.
Once the test phase is fine, start the full fledge migration.
Move Mailbox and Public Folder Database.
Cheers,
Cheers,
Gulab Prasad
Technology Consultant
Blog:
http://www.exchangeranger.com    Twitter:
  LinkedIn:
   Check out CodeTwo’s tools for Exchange admins
Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

Exchange 2010 OWA [Change Number of items to display per page]

Hi Sir,
I have some problem and question ?
I has migrate from exchange 2007 to exchange 2010.
Exchange 2010 OWA cannot Change Number of items to display per page
Exchange 2007 can change number of items to display per page
Exchange 2010 OWA cannot Change Number of items to display per page
You can help me to solved problem and customization?
Thank you.
Boongerd

Hi,
This feature has been moved in Exchange 2010 OWA. However this feature is available in OWA light version. Here are steps to change the settings in OWA light version.
Log in to OWA, click the Use the light version of Outlook Web App
check box on the login page.
Select Options in the upper right hand corner of the screen.
Select Messaging from the left navigation panel.
In the section for "Message Options", change the "Number of items to display per page", select the desired number of messages.
Exchange 2010: OWA versus OWA light.
http://blogs.technet.com/b/ilvancri/archive/2010/04/07/exchange-2010-owa-versus-owa-light.aspx
New Features in Exchange 2010 OWA.
http://technet.microsoft.com/en-us/library/aa998629(v=exchg.141).aspx
Best Regards.

Exchange 2010 to Exchange 2013 mail flow?

We are planning to migrate Exchange 2010 to Exchange 2013.
I understand that we need to upgrade the CAS to 2013 for Internet Facing.
What about mail flow. Currently, Internet mail flows to Exchange 2010 (single site). Can I keep it for sometime after introducing 2013 and do the cutover of HUB once all the mailboxes are moved to 2013? Or I have to get the mail flow to 2013 first.
Also, how does HUB 2010 transfer mail or receive mail from 2013? Does it get from the CAS proxy in 2013 or from HUB?
Thanks!!!

Yes, you can. But my preference is to move the mail routing early in the migration, usually even before moving mailboxes, because I believe it reduces the risk of a service interruption.
I believe it goes through the front-end transport on the CAS, since that is the TCP port 25 service.
Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

Exchange 2010 OWA : TMG Error 12302 The server denied the specified Uniform Resource Locator (URL).

Hello All,
We are using TMG2010 (SP2, rollup4) for publishing Exchange 2010 OWA sites. The issue is that after every 10-24 hrs , the TMG server stops logging in OWA sites and start giving below error. Then we have to restart the server one two times or the problem
solves by itself.
I have also install a new server and it is also giving same behavior. On TMG server the exchange edge server and Forefront Protection for exchange is also installed.
Please help to solve this issue.
Denied Connection
-TMG05 5/21/2014 11:44:39 PM
Log type:
Web Proxy (Reverse)
Status: 12302 The server denied the specified Uniform Resource Locator (URL). Contact the server administrator.
Rule:
PRC-OWA
Source:
119.157.175.238:56971
Destination:
111.68.105.121:443
Request:
GET http://mail.parc.gov.pk/owa
Filter information:
Req ID: 0e947d98; Compression: client=Yes, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=yes, valid=yes, updated=no, logged off=no, client type=public, user activity=yes
Protocol:
https
User:
anonymous
Additional information
Client agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)
Object source: (No source information is available.)
Cache info: 0x0
Processing time: 125 MIME type:

Hi,
A similar thread:
http://social.technet.microsoft.com/Forums/forefront/en-US/e8fdc1bd-f023-4804-ad02-67899d8c7347/the-server-denied-the-specified-uniform-resource-locator-errors12302-ashttp-error-code-of-500?forum=Forefrontedgegeneral
Best Regards,
Joyce
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Disater Recovery for exchange 2010 plan in Cloud computing

Hi
We are using exchange 2010 for our messaging solutions. Please find below our current setup.
mainsite: MBX Server --- 1no --> Hyper V host
                Hub&Cas ----- 1No --> Hyper V Host
                Edge ---- 1NO --> Physical
DR site : MBX,Hub&CAS -- 1No --> Physical
               Edge   --- 1no --> physical
we enabled the DAG for our Mail box server and its replicating through a point to point link between our main site with DR site.
Now we are interested to enable   our DR (disaster recovery) in MS cloud. Please let me know the process to go further .
how will the DAG or DB replicate to DR Site in cloud?. how its works?
much appreciated if any body have this setup .
Best Regards
Jagadeesan.S
O
Jags

Hello,
Kindly find the 3 types of plan for Exchange 2010 DR site. You can check all 3 plans and select as per your requirement.
1. Rebuild an Entire Database Availability Group plan
http://technet.microsoft.com/en-us/library/gg513521.aspx
2. Site Resiliency in Exchange 2010
http://www.msexchange.org/articles-tutorials/exchange-server-2010/management-administration/planning-deploying-testing-exchange-2010-site-resilient-solution-sized-medium-organization-part1.html
3. Exchange 2010 Cross Site DAG Disaster Recovery: Data Center/AD Site failure Part 1
http://msexchangeguru.com/2012/10/25/exchange-2010-dag-dr/
Deepak Kotian. MCP, MCTS, MCITP Exchange 2010 Ent. Administrator

Disater Recovery for exchange 2010 plan.

Hi All,
Happy New year 2014 ....
we have running with exchange 2010 R1 with DAG enabled. we have below mentioned setup in our exchange server.
Main site.
Active directory server ( Primary DC, additional DC in our main site) installed in Hyper V host. installed exchange 2010 mail box role in another Hyper V host. installed the CAS& Hub role in another virtual host and installed the Exchange
edge role in another physical server.
DR Site
Active director server( ADC) installed in Hyper V host. installed the Exchange 2010 mailbox,Hub,Cas server role in a physical server. installed the Edge Server in another physical server.
At present we have enabled the failover DAG for both our Mail box servers and its working perfectly when the primay mail box server down. we have run some commands to transfer all my exchange 2010 to point through our DR Site. so its take
some of the minutes of down time happened in our mail flow. we are planning to avoid that downtime. we are find for the solutions like if the primary site down the DR will need to automatically up. it will be appreciate that any
one provide your suggestion to achieve this without affecting the our current setup.
Jags

Hello,
Kindly find the 3 types of plan for Exchange 2010 DR site. You can check all 3 plans and select as per your requirement.
1. Rebuild an Entire Database Availability Group plan
http://technet.microsoft.com/en-us/library/gg513521.aspx
2. Site Resiliency in Exchange 2010
http://www.msexchange.org/articles-tutorials/exchange-server-2010/management-administration/planning-deploying-testing-exchange-2010-site-resilient-solution-sized-medium-organization-part1.html
3. Exchange 2010 Cross Site DAG Disaster Recovery: Data Center/AD Site failure Part 1
http://msexchangeguru.com/2012/10/25/exchange-2010-dag-dr/
Deepak Kotian. MCP, MCTS, MCITP Exchange 2010 Ent. Administrator

Exchange 2010 ambiguous URL'S issue while coexist with exchange 2013

Hi ,
Please correct me if i am wrong and also all of you tell me your valuable suggestions.
Like as said in the below article we are having an exchange 2010 ambiguous url's in place.
Referred
article :
http://blogs.technet.com/b/exchange/archive/2013/05/23/ambiguous-urls-and-their-effect-on-exchange-2010-to-exchange-2013-migrations.aspx
As said in this article, if we have exchange 2010 ambiguous url's in place we will face issues during exchange 2013 coexistence.I agree with that point .
Question : On such case why don't we use a separate namespace for internal and external outlook anywhere settings in exchange 2013 which is different from cas array name and also there is no need to disturb the existing exchange 2010
environment by changing the rpc client access attribute in exchange 2010 databases or by forcing the exchange 2010 internal outlook clients to connect via OA. Please clarify my doubt and say whether the mentioned scenario is possible or not ?
Note : Same time please consider the new namespace which is going to be utilized on exchange 2013 outlook anywhere settings is available on SAN certificate.
Regards
S.Nithyanandham

Hi ,
Please someone shed light on this case.
Regards
S.Nithyanandham
Thanks & Regards S.Nithyanandham

Change name of AD site hosting Exchange 2010 server

We want to change the name of an AD site which currently hosts an Exchange 2010 server. Is this possible? Are there specific steps we need to follow to keep Exchange up & running?
Thanks

Hi Sneaky,
As Vincez mentioned, it is possible to change the name of the AD site with Exchange 2010 is hosted,you just need to restart the AD topology service after changing.
You can also refer to the following threads:
Changing AD Site name in Exchange 2010
SiteName is hard-coded
Best regards,
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
Niko Cheng
TechNet Community Support

Exchange 2010 AD Site Changes

Similar Messages

Maybe you are looking for