Exchange 2010 BCC Transport Rule skipped- Logging required

Hi,
we have some transport rules created on Exchange 2010 SP2 U4 that for each message sent to a specific mailbox the message is bcc'ed to some internal users. The rules work all fine, but we have a case were in some occasions a transport rule is not getting
applied and the message is not delivered to the bcc users but only to the initial recipient mailbox. The transport rule in question has Priority "0" and we have no conflicting trasnport rules
Message tracking log is not so helpful since it just shows that the message delivered successfully, whereas in the case that the rule is being applied message tracking shows the message being deferred to the other recipients as well.
Unfortunately we were not able to reproduce the issue since it occurs in an ad-hoc basis therefore enabling pipeline tracing will not be of much help.
Please advise, what logging shall we enable on what level to be able to identify the cause and the location of the logs generated in each case (Event Viewer or C:\Program Files\Microsoft\Exchange Server\V14\Logging or C:\Program Files\Microsoft\Exchange
Server\V14\TransportRoles\Logs).
Thank you very much in advance.

Hi,
If you want to ensure that the transport agent is doing its job within a message, we can enable
Pipeline tracing feature which allows us to create an exact snapshot of a whole message before and after it encounters each transport agent. Each step of the process is kept in a directory for troubleshooting reasons.
Before you enable pipeline tracing, you need to specify the sender's email address you want to monitor. Pipeline tracing is designed to log messages sent from a specific email address. Then we can use the following command to enable it:
Set-TransportServer Server1 -PipelineTracingEnabled $True -PipelineTracingSenderAddress "<>" -PipelineTracingPath <LocalFilePath>
For more information about pipeline tracing, please refer to:
http://technet.microsoft.com/en-us/library/bb125018(v=exchg.141).aspx
Understanding Transport Agents (Part 2)
http://www.msexchange.org/articles-tutorials/exchange-server-2007/planning-architecture/understanding-transport-agents-part2.html
Hope it helps.
Regards,
Winnie Liang
TechNet Community Support

Similar Messages

"Microsoft.Exchange.2010.Reports.Transport.Platform.TopUsers "Report show no result

hello,
i have an issue in my SCOM 2012 report.when i go to
Reporting --> Exchange Server 2010 Report Library-->and open the report Microsoft.Exchange.2010.Reports.Transport.Platform.Top users.
in my scom 2012 console and execute the report for top users on the basis of Messages Send or Messages Received ,it return zero result.
thank you

Hi,
Blank reports can be a common issue with System Center Operations Manager. These are caused by many different reasons, and for the focus of this article we will discuss the following:
1. The wrong type of entity was selected as the report target.
2. The corresponding performance collection rule or the script that generates the performance data is not enabled for the report target.
3. There is a functional problem with the Health Service on the agent.
4. Management servers are unable to insert data into the OperationsManagerDW database.
5. Data is stuck in the staging tables in the OperationsManagerDW database.
More details:
https://support2.microsoft.com/kb/2573329?wa=wsignin1.0
In addition, it is suggested to configure the Exchange management pack according to the mangement pack guide.
And here are two links that should be helpful for you regarding to this issue, please refer to them:
http://zoomindia111.wordpress.com/configure-exchange-2010-sp1-management-pack-in-scom-2007-r2/
http://blogs.technet.com/b/emreguclu/archive/2011/09/26/empty-exchange-2010-server-statistics-mailflow-reports-if-default-log-directory-has-changed.aspx
Regards,
Yan Li
Regards, Yan Li

Exchange server 2010 - Hub Transport rule not working

Hello,
I'm trying to create a hub transport rule that blocks any incoming / outgoing email with attachments larger than 10MB with an exception of a few users.
I've followed this article https://www.simple-talk.com/sysadmin/exchange/increasing-email-size-limits-for-your-high-profile-users-in-exchange-2010/.
The send connector & receive connector is at 30MB right now and the distribution group has been made.
I added myself to the distribution group which allowed me to send a 20MB size email.
If I remove myself from the distribution group, exchange still allowed me to send the 20MB email size.
Any advise is much appreciated.
Thanks,
Daniel

Hi Daniel,
Thanks for your response.
The Hub Transport server is responsible for handling transport rules. The transport rules can't work without a Hub server.
If there are any problems with Exchange, welcome to our forum.
Best regards,
Amy
Amy Wang
TechNet Community Support

HELP - Exchange Server 2007 Transport Rule Issue

Hi all,
sorry if here is not the place to put my question but I did not find another forum, so if anyone can help me I appreciate.
- I have an Exchange Server 2007 SP3 environment with 1 MBX Server and 3 CAS/HUB Servers.
- I have created a Transport Rule that said:
"all emails that have @test.com in BCC field are dropped off except one group can send" .
The issue is the rule doesn´t work.
Anyone can help me, please?
Thanks in advance.
Luiz

The Exchange previous versions forums are here:
http://social.technet.microsoft.com/Forums/en-US/category/exchangeserverlegacy
Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

Exchange 2010 hub-transport server

i have 2 exchange 2010 hubtransport servers.
ideally when i send email my email should be load-balanced but emails send using hubcas1 goes fine and hubcas2 kepts in queues
suppose if i send at a time 5 mail
3 emails go through hubcas1
2 emails stucks in queue in hubcas2

Hi,
As you said you have added both the hub transport servers in the source server option of the send connector.Same time you have mentioned you don't have the smart host to deliver the emails to the internet and also the server hubcas2 can able to resolve the
external domain namespaces .Then do the following .
step 1 :Then please enable the protocol logging on the send connector to see the why the connections from the server hubcas2 is rejected to send emails to internet.
Step 2: Then do the outbound email test from EXRCA tool by using the ip address or name which is mapped on the MX record which belongs to the server hubcas2.
Please feel free to reply me if you have any queries .
Regards
S.Nithyanandham
Thanks & Regards S.Nithyanandham

Exchange 2010 SP3, RU5 - Massive Transaction Log File Generation

Hey All,
I am trying to figure out why 1 of our databases is generating 30k Log Files a day! The other one is generating 20K log files a day. The database does not grow in size as the log files are generated, the problem is log file generation.
I've tried running through some of the various solutions out there, reviewed message tracking logs, rpc client access logs, IIS Logs - all of which show important info, but none of which actually provide the answers.
I Stopped the following services to see if that would affect the log file generation in any way, and it has not!
MS Exchange Transport
Mail Submission
IIS (Site Stopped in IIS)
Mailbox Assistants
Content Indexing Service
With the above services stopped, I still see dozens (or more) log files generated in under 10 minutes, I also checked mailbox size reports (top 10) and found that several users mailboxes were generating item count increases for one user of
about 300, size increases for one user of about 150Mb (over the whole day).
I am not sure what else to check here? Any ideas?
Thanks,
Robert
Robert

Hmm - this sounds like an device is chewing up the logs.
If you use log parser studio, are there any stand out devices in terms of the # of hits?
And for the ExMon was that logged over a period of time? The default 60 second window normally misses a lof of stuff. Just curious!
Cheers,
Rhoderick
Microsoft Senior Exchange PFE
Blog:
http://blogs.technet.com/rmilne
Twitter:   LinkedIn:
  Facebook:
  XING:
Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.
Rhoerick,
Thanks for the response. When checking the logs the highest number of hits were the (Source) Load Balancers, Port 25 VIP. The problem i was experience was the following:
1) I kept expecting the log file generation to drop to an acceptable rate of 10~20 MB Per Minute (Max). We have a large environment and use the exchange sevrers as the mail relays for the hated Nagios monitoring environment
2) We didn't have our enterprise monitoring system watching SMTP traffic, this is being resolved.
3) I needed to look closer at the SMTP transport database counters, logs, log files and focus less on the database log generation, i did do some of that but not enough of that.
4) My troubleshooting kept getting thrown off due to the monitoring notifications seeming to be sent out in batches (or something similar) stopping the transport service for 10 ~ 15 minutes several times seemed to finally "stop the transactions logs
from growing at a psychotic rate".
5) I am re-running my data captures now that i have told the "Nagios Team" to quit killing the exchange servers, with their notifications, sometimes as much as 100+ of the same notifications for the same servers, issues. so far at a quick glance
the log file generation seems to have dropped by about 30%.
Question: What would be the best counters to review in order to "Put it all together"? Also note: our Server roles are split, MBX and CAS/HT.
Robert
Robert

Exchange 2010 Hub Transport

Hi Spiceheads, I thought that with Exchange 2010 mailboxes will always use the local hub transport on that server first but alas I was wrong. We need to migrate an exchange 2010 box to virtual hardware, I setup and configured a new server with the old one still live, as soon as I installed the HT role on the new server mail immediately started flowing out of it first even though every mailbox and DB was still on the old server, of course this ended up causing our mail to get flagged as spam as the spf records didn't match, thankfully this lasted all of 3 minutes while I uninstalled the role from the new server, My question is - is there a way to add the HT role but still have mail flow out of the old HT server vs the new one?
I want to add the role so I can configure all the options first, including some third party software we have...

Hi allAfter a rather heated conversation with our MSP I come to you for guidance.We've recently acquired another business and need to add two new sites plus a butt hosted server to our network. The current layout is as follows (forgive my terrible diagram):Top is our business, bottom is the one we've purchase, red indicates how the VPNs are structured. We have extensive on-premise infrastructure at the Main Office (top left) so we are planning to retire my butt hosting once our systems have been merged but in the meantime we need to be able to access their system and vice versa so I am hoping for the following:In summaryNew link from my butt hosting to the Main OfficeNew link from the alt-main office to Main officeNew link from the new "other site" to Main OfficeNow, our VPNs are controlled by our MSP, after a two week delay waiting...

Exchange 2010 Edge Transport - Not being detected by SCOM agent?

All,
I recently installed the SCOM 2007 R2 agent onto our Edge Transport server for Exchange 2010. Our architecture is pretty simple. We have a DMZ network where I have a SCOM 2007 R2 Gateway server and our Edge Transport server.
Essentially it goes like this:
Edge Transport Server Agent <-> Gateway Server <-> SCOM RMS server
I have the Exchange 2010 and the FOPE for Exchange 2010 MP's loaded on our RMS server. When I loaded the SCOM 2007 R2 agent onto our Edge server, the agent discovered it had FOPE and does reflect as such on the RMS server, but it did not seem to pick
up that it was also the Exchange Edge Transport role.
I looked on the RMS server in the Authoring -> Object Discoveries and the Edge transport is set to discover, so I am a little stumped as to why the agent didn't discover the role.
Any suggestions where to look next?

Just a little more detail on this. I've been working on this exact issue for probably 3 weeks with an engineer.
This issue is actually a bug in the Exchange 2010 MP.
How is it a bug exactly? Well, the MP is looking for the Active Directory site that the Edge Server is a member of... let's think about this, the Edge server is NOT domain joined, and as such, shouldn't have an active directory site.
Additionally, the regkey path referenced above is incorrect, though it seems that numerous others have figured that out on their own as well. The correct regkey path should be:
hklm>system>currentcontrolset >services>netlogon>parameters
So sure, this "fixes" the issue - but the real issue is that the MP is looking for an Active Directory site, on servers that aren't a member of an active directory site. Kind of a BIG oversight by the MP authors in my opinion.
I'm sure there are plenty of orgs relying on SCOM to monitor their Exchange 2010 implementations that don't even realize that their Edge servers aren't being monitored for the Exchange roles.

Exchange 2010 edge transport server, degraded desktop / remote desktop

I have a 2010 edge transport server loaded on windows server 2008 R2 that after about 3 days will no longer allow RDP connections or desktop logons due to a serious performance lag / time out. A reboot clears the performance issue for about another 3 days.
I allowed an RDP connection to stay open for the 3 days and it continues to work however actions like trying to load the task manager, start button, computer or any windows not currently open takes an extremely long time. Task manager and perf mon show very
little processor and memory usage.
Tried the following to resolve:
Replaced hard drives (raid 1)
Replaced server (moved drives from one server to another chassis)
Monitoring iops, memory usage and proc transactions. Nothing shows any unusually high usage.
I tried disabled AV services, log monitoring and backup services both while the issue was happening and as preventative measure before the issue arose.

hi cna you check if by any chance you have bandwidth limitations configured. either on router or on tour switch. i had this kind of issue and it ended with bandwidth issue which was configured wrongly. you said this is happening with RDP. hows the performance
when accesing locally
did you check performance counters and event viewer.. anything there
Mark as useful or answered if my replies helped you solving your query.
Thanks, Happiness Always
Jatin
Skype: jatider2jatin, Email: [email protected]

Outlook 2013, Exchange 2010 error with Rules and Alerts

Hello,
I was recently informed by a user that when they open Outlook 2013 and click Manage Rules and Alerts, they get the following message:
By the way, NO Microsoft, this information is not helpful. Anyways, I found that the same problem is happening in my Outlook as well. I do not believe it is happening to all users' accounts, and I am able to set up Rules within Outlook Web Access,
so it seems to be some local setting. I found a lot of forums suggest running the Outlook /cleanrules switch, and this did not fix the problem. Other suggestions are to delete the profile on the computer and/or uninstall outlook and reinstall it.
I don't like these solutions, as they don't point to the true source of the problem and do nothing to help avoid this problem in the future. Has anybody else had this problem and been able to fix it? We are running Exchange 2010 in our environment,
although not sure if that makes a difference or not. Any answers that do not suggest the things I have already mentioned would be greatly appreciated!

Hi,
For this issue, I recommend you ask in Office forum which is staffed by more experts specializing in this kind of problems. You might get better help there.
http://social.technet.microsoft.com/Forums/office/en-us/home?forum=outlook
Thanks for your understanding.
Best regards,
Belinda Ma
TechNet Community Support

Exchange 2010: Multi-Mailbox Search causes log out

This could well be the freakiest problem I have seen in years, or at least the more unexplainable.
We have the Multi-Mailbox Search feature in place, all things have been configured properly that I know of, and it has been working fine for about a year or two with several past searches done.
So we have a person named Jill. And we have a domain user account named Search. Jill has been asked to be able to do multi-mailbox searches. But it's not always her that does them, sometimes it's other people in legal, so instead of
enabling Jill's Exchange account to have access, we created another generic user called "Search" that anybody with authority can use. "Search" has been given the necessary setup options to enable them to do Multi-Mailbox Search.
The normal process is to go to OWA 2010 as the user "Search", go to Options > View All Options, then instead of Manage Myself, go to My Organization, and then to the Mail Control section. This is where the search gets done. The search
is performed, the completion status shows, and this is normally where the person clicks the little link called Open, which then opens a new tab and displays the contents of the Discovery Search Mailbox 0565406545640 (or whatever it's name is) with the results
displayed. .
The problem is, for Jill whenever she does this on her computer, it opens a new tab but instead of showing the Discovery Search mailbox, it instead just gives her an OWA login screen.
That alone is an odd problem, however here is the big kicker. If I remote into Jill's computer (RDP), taking over her session, if I click that same little Open link, it works properly. To be clear, I am not logging her out and then in, or anything,
I am simply logging in to take over her session.
And further on that, every time I have ever remoted into the computer to test this over the past several days, it works when I'm logged in as her. And if I access OWA from outside the network, that also works fine.
I really have no idea what to say about this. Any ideas?

Hi,
Is there any error event ID in the application log?
Thanks,
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]
Simon Wu
TechNet Community Support

Exchange 2010 personal archive database massive log file generation

Exchange Server 2010 SP3 + Update Rollup 4
Windows Server 2008 R2, all updates
VMware ESXi 5.5
Server config: 2 x Xeon Quad Core 2.20GHz, 16GB RAM
We recently started using personal archives. I created a database for this purpose ("Archive Mailboxes") on the same datastore as our live mailbox database ("Live Mailboxes"). It works great except that the mailbox maintenance generates
massive amounts of log files, over 220GB per day on average. I need to know why. The Live Mailbox database generates around 70GB of log files every day. The database sizes are: Live = 159.9GB, Archive = 196.8GB. Everything appears to be working fine, there
are no Error events related to archiving. There are 10025 MSExchangeMailboxAssistant warning events logged every day. I have moved those mailboxes back-and-forth to temp databases (both Live and Archive mailboxes) and the 10025 events have not stopped so I'm
reasonably certain there is no corruption. Even if there were it still doesn't make sense to me that over 100 log files are generated every single minute of the day for the Archive store. And it's not that the database isn't being fully backed up; it is, every
day.
Do I need to disable the 24x7 option for mailbox maintenance to stop this massive log file generation? Should I disable mailbox maintenance altogether for the Archive store? Should I enable circular logging for the Archive store (would prefer to NOT do this,
though I am 100% certain we have great backups)? It appears to me that mailbox maintenance on the Live store takes around 12 hours to run so I'm not sure it needs the 24x7 option.
This is perplexing. Need to find a solution. Backup storage space is being rapidly consumed.

I'm sure it will be fine for maintenance to run only on weekends so I'll do that.
We use Veeam B&R Enterprise 7.0.0.833. We do not run incremental backups during the day but probably could if necessary. All this is fine and dandy but it still doesn't explain why this process generates so many logs. There are a lot of posts around
the internet from people with the same issue so it would be nice to hear something from Microsoft, even if this is expected behavior.
Thank you for the suggestions!

Exchange 2010 Public Folder Rule

Hi there,
i want my Public Folder called "costumers" to forward a Mail to a subfolder, if the message comes from the domain "example.com". yet i didn't find out how exactly such a rule is created. i tried the following:
But the Public Folder wont forward the Mail to "SPZ" in my case. If i set the "from" parameter to a single Email address like
[email protected] and the public folder receives a mail from this email address, the forwarding to "SPZ" works fine. So my question is, can i even use regular expressions in those Rules?
Thanks for your help!
Regards
Dominic

Hello,
Do you mean a costumer sends message to your employees, when an co-worker moves a costumer mail to the public folder "costumer", and then you use an outlook rule that moves the mail to the correct subfolder? If so, you need to create
multiple outlook rules on different outlook clients.
I want to know why an co-worker doesn't move a costumer mail to the correct subfolder directly.
Based on my known, I'm afraid there is no better way to reach your goal.
If I have any misunderstanding, please free let me know.
If you have any feedback on our support, please click
here
Cara Chen
TechNet Community Support

Is it possible to remove 2010 Hub Transport entirely in an Exchange 2013 environment?

I'm using Exchange 2010 Edge Transport in our organization that I've recently upgraded to Exchange 2013. I like Edge Transport - along with our spam filter it is an effective and simple way to send and receive external e-mail - and I don't want
to get rid of it. But it seems like it needs a 2010 Hub Transport server to interact with.
Right now the only other Exchange 2010 Server I have left running in the organization is the one Hub Transport server that interacts with the Edge Server. Is there a way to undeploy this server too and connect the Edge Server directly to one of the
2013 Mailbox Servers? Or will this need to stay as part of the organization as a pair with Edge Transport?
I noticed mail flow was running just fine while the Hub Transport server was turned off. So it seems like it's possible. But I want to be able to undeploy it safely without hurting mail flow. Are there any links or white papers that show
how best do do this?
----------- Ron E Biggs Chief Tech Officer Entertainment Studios

Before you remove your HUB servers, make sure you re-subscribe the Edge server using the below steps:
On Edge Server:
New-EdgeSubscription -FileName "C:\EdgeSubscription.xml"
copy the file to one of the mailbox servers, and run:
New-EdgeSubscription -FileData ([byte[]]$(Get-Content -Path "C:\EdgeSubscription.xml " -Encoding Byte -ReadCount 0)) -Site
"ADSITENAME"
once completed, most of the tasks to manage/test your Edge sync will be via PowerShell, please see the below link for more details:
http://technet.microsoft.com/en-us/library/aa996865(v=exchg.150).aspx
Mohammad Saeed | MCSE 2003 | MCTS: Lync, OCS, Exchange This posting is provided "AS IS" with no warranties, and confers no rights

How to enable the Exchange 2010 Admin Audit logs in Event Viewer

How to enable the Exchange 2010 Admin Audit(Mailbox Auditing) logs in Event Viewer.
- Sivashankar. Please mark as answer/useful if my contribution is helpful

Hi Siva,
We could execute the command below to view Administrator Audit Logging settings:
Get-AdminAuditLogConfig
If it is not enabled, please run the command below:
Set-AdminAuditLogConfig -AdminAuditLogEnabled $True
In addition, here are some references for you to utilize this feature:
Configure Administrator Audit Logging :
http://technet.microsoft.com/en-us/library/dd335109(v=exchg.141).aspx
Search the Administrator Audit Log :
http://technet.microsoft.com/en-us/library/ff459262(v=exchg.141).aspx
Regards,
Rebecca Tu
TechNet Community Support

Exchange 2010 BCC Transport Rule skipped- Logging required

Similar Messages

Maybe you are looking for