Exchange 2010 - Version of SSL

What version of SSL does Exchange Server 2010 use for its CA root certificate and is it Open SSL? Thanks
Jeanne Bauss

No, Windows and the services running on it (eg Exchange, IIS etc) don't use OpenSSL, they use Microsoft's own implementation called Secure Channel (SChannel).
Presumably your query relates to Heartbleed? MS release this statement on that a little while ago
http://blogs.technet.com/b/erezs_iis_blog/archive/2014/04/09/information-about-heartbleed-and-iis.aspx which confirms they don't use it. The only risk on a Windows system is if you run any 3rd party apps which do use OpenSSL.
If you're after additional info on SChannel there are various bits of info online about it, for instance
http://msdn.microsoft.com/en-gb/library/windows/desktop/aa380123(v=vs.85).aspx

Similar Messages

Frorefront Protection for Exchange 2010 Version Number

Afternoon Community
I am currently research and planning the upgrade of an MS Exchange 2010 Virtual Server. One of the steps requires the upgrade of Forefront Protection for Exchange to be updated to the latest Rollup (KB230203 - Rollup 5). Due to ongoing projects i am aware
that Forefront has never been upgraded by us.
A few weeks ago we noticed our license for the product was due to expire, so we extended the license until Dec 2015. I have noticed that the version number of Forefront is now showing as 11.0.727.0 (Forefront Protection 2010 w Rollup 4). We havent installed
any of the Rollup Hotfixes and i can find no trace of the install under control panel/programs and features.
1. Has anyone recently updated their license and seen that it has changed their version number?
2. How can i confirm that no Rollup Hotfix has been installed?
3. If i go ahead and try to install KB2619883 (Rollup 4), will it cleanly install or will it fail as Forefront thinks the package is already at the correct level?
Any help on this issue would be greatly appreciated.
Barry Fitzpatrick

Hi,
Maybe you can check the Installed Updates in Programs and Features under Control Panel. In addition, if you have Windows PowerShell, you can use Get-Hotfix cmdlet to get the hotfixes that have been applied to the local computer.
Best regards,
Susie

Outlook 2011 for Mac not authenticating with Exchange 2010

Hi,
We have an issue with our Mac Clients authenticating with our Exchange Server. We have Exchange 2010 Version 14.03.0174.001.
Outlook is saying the credentials are incorrect for the user when we know they work fine in OWA and in Outlook 2010.
It seems this is since we re-keyed are SSL certificate. I have changed the EWS directory to Basic Authentication and also re-created the EWS directory. I have also re-ran all the SBS Wizards.
Is there anything else we can do to get this sorted?
Thanks

Hi Robert,
I found a KB for your reference:
Sending email error "Authentication failed. Error 17897" in Outlook 2011 for Mac
http://support.microsoft.com/kb/2492901
If it not matches to yours, please paste the details without sensitive information.
Thanks
Mavis
Mavis Huang
TechNet Community Support

CMD=Ping&log query is taking long time-taken when checked in IIS logs.... Exchange 2010 SP3..

Query regarding the ActiveSync and parameter time-taken from ActiveSync IIS logs.
Here what I see for from the logs.
[email protected] 45.101.90.185 Apple-iPad2C3/1202.410 200 0 0 1501129
443 [email protected] 45.101.90.185 Apple-iPad2C3/1202.410 200
0 0 22105
443 [email protected] 45.101.90.185 Apple-iPad2C3/1202.410 200
0 0 452
443 [email protected] 45.101.90.185 Apple-iPad2C3/1202.410 200
0 0 936
443 [email protected] 45.101.90.185 Apple-iPad2C3/1202.410 200
0 0 656238
In the above log, highlighted are the time-taken and I just want to check what is the ideal time-taken value, some value above should be causing some problem, like the one of the top 1501129 ?
?AND I see its for POST event and CMD=Ping&log query.......
We have Mobile Iron in the environment and we are seeing few timeout errors on MobileIron server and for users intermittently. They usually see below error... However we don't see any end users issues, but just want to get rid of below error. MobileIron guys
are pointing it to time-taken value which is high intermittently.
IOException connection to server [email protected] -- java.io.IOException:
awaitUninterruptibly was stopped by timeout
@BALA

Hi,
To understand more about the issue, I’d like to confirm the following information:
1. What’s your Exchange 2010 version?
http://support.microsoft.com/kb/2536517/en-us
2. Do you install other software, like SQL, on the same Exchange Server?
3. Change another admin account to access EMS.
Thanks,
Angela Shi
TechNet Community Support

Exchange 2010 Receive Connector intermittently getting an SMTP RSET from sending SMTP servers causing missing user email

Users are receiving about 95% of their messages from sending SMTP servers. Intermittently, sending SMTP servers send the Exchange 2010 Server a SMTP RSET command for no apparent reason. The RSET Command (by SMTP specification) causes the Exchange 2010 Server
to drop the message. The sending SMTP servers then do not resend the message after asking the Exchange server to drop the message. This means the message is marked as Sent by the sending servers but the dropped messages never show up in the users' Outlook
inbox.
Exchange 2010 Version 14.3 (Build 123.4)
Roles: Hub Transport, Client Access, Mailbox
What is going on?
Exchange Receive Connector log showing a RSET example:
2014-07-17T12:47:07.370Z,A1-S1\Windows SBS Internet Receive A1-S1,08D16FD38F3D3355,1,10.80.120.15:25,65.99.255.73:53479,*,SMTPSubmit SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender AcceptRoutingHeaders,Set Session Permissions
2014-07-17T12:47:07.370Z,A1-S1\Windows SBS Internet Receive A1-S1,08D16FD38F3D3355,2,10.80.120.15:25,65.99.255.73:53479,>,"220 vpn.a1expediting.com Microsoft ESMTP MAIL Service ready at Thu, 17 Jul 2014 08:47:06 -0400",
2014-07-17T12:47:07.480Z,A1-S1\Windows SBS Internet Receive A1-S1,08D16FD38F3D3355,3,10.80.120.15:25,65.99.255.73:53479,<,EHLO inbound37.exchangedefender.com,
2014-07-17T12:47:07.480Z,A1-S1\Windows SBS Internet Receive A1-S1,08D16FD38F3D3355,4,10.80.120.15:25,65.99.255.73:53479,>,250-vpn.a1expediting.com Hello [65.99.255.73],
2014-07-17T12:47:07.480Z,A1-S1\Windows SBS Internet Receive A1-S1,08D16FD38F3D3355,5,10.80.120.15:25,65.99.255.73:53479,>,250-SIZE 52428800,
2014-07-17T12:47:07.480Z,A1-S1\Windows SBS Internet Receive A1-S1,08D16FD38F3D3355,6,10.80.120.15:25,65.99.255.73:53479,>,250-PIPELINING,
2014-07-17T12:47:07.480Z,A1-S1\Windows SBS Internet Receive A1-S1,08D16FD38F3D3355,7,10.80.120.15:25,65.99.255.73:53479,>,250-DSN,
2014-07-17T12:47:07.480Z,A1-S1\Windows SBS Internet Receive A1-S1,08D16FD38F3D3355,8,10.80.120.15:25,65.99.255.73:53479,>,250-ENHANCEDSTATUSCODES,
2014-07-17T12:47:07.480Z,A1-S1\Windows SBS Internet Receive A1-S1,08D16FD38F3D3355,9,10.80.120.15:25,65.99.255.73:53479,>,250-AUTH,
2014-07-17T12:47:07.480Z,A1-S1\Windows SBS Internet Receive A1-S1,08D16FD38F3D3355,10,10.80.120.15:25,65.99.255.73:53479,>,250-8BITMIME,
2014-07-17T12:47:07.480Z,A1-S1\Windows SBS Internet Receive A1-S1,08D16FD38F3D3355,11,10.80.120.15:25,65.99.255.73:53479,>,250-BINARYMIME,
2014-07-17T12:47:07.480Z,A1-S1\Windows SBS Internet Receive A1-S1,08D16FD38F3D3355,12,10.80.120.15:25,65.99.255.73:53479,>,250 CHUNKING,
2014-07-17T12:47:07.511Z,A1-S1\Windows SBS Internet Receive A1-S1,08D16FD38F3D3355,13,10.80.120.15:25,65.99.255.73:53479,<,MAIL FROM:<[email protected]> SIZE=165270,
2014-07-17T12:47:07.511Z,A1-S1\Windows SBS Internet Receive A1-S1,08D16FD38F3D3355,14,10.80.120.15:25,65.99.255.73:53479,*,08D16FD38F3D3355;2014-07-17T12:47:07.370Z;1,receiving message
2014-07-17T12:47:07.511Z,A1-S1\Windows SBS Internet Receive A1-S1,08D16FD38F3D3355,15,10.80.120.15:25,65.99.255.73:53479,>,250 2.1.0 Sender OK,
2014-07-17T12:47:07.558Z,A1-S1\Windows SBS Internet Receive A1-S1,08D16FD38F3D3355,16,10.80.120.15:25,65.99.255.73:53479,<,RCPT TO:<[email protected]> ORCPT=rfc822;[email protected],
2014-07-17T12:47:07.558Z,A1-S1\Windows SBS Internet Receive A1-S1,08D16FD38F3D3355,17,10.80.120.15:25,65.99.255.73:53479,>,250 2.1.5 Recipient OK,
2014-07-17T12:47:10.496Z,A1-S1\Windows SBS Internet Receive A1-S1,08D16FD38F3D3355,18,10.80.120.15:25,65.99.255.73:53479,<,RSET,
2014-07-17T12:47:10.496Z,A1-S1\Windows SBS Internet Receive A1-S1,08D16FD38F3D3355,19,10.80.120.15:25,65.99.255.73:53479,>,250 2.0.0 Resetting,
2014-07-17T12:47:10.559Z,A1-S1\Windows SBS Internet Receive A1-S1,08D16FD38F3D3355,20,10.80.120.15:25,65.99.255.73:53479,<,QUIT ,
2014-07-17T12:47:10.559Z,A1-S1\Windows SBS Internet Receive A1-S1,08D16FD38F3D3355,21,10.80.120.15:25,65.99.255.73:53479,>,221 2.0.0 Service closing transmission channel,
Daniel

Hi,
According to the receive connector log, your emails were failed to be deliverd with DNR. If I misudnerstand the meaning, please feel free to let me know. If yes, I'd like to confirm the detail information in the DNR to narrow down the
cause.
Additionally, based on my research, the RSET command performs an SMTP reset, and then aborts the message that is currently being sent. Thus, the log didn't provide more information for troubleshooting. Is there any other error in your event log? please check
the event log when the issue happens again.
Thanks,
Angela Shi
TechNet Community Support

Exchange 2010 - All users can delete scheduled and accepted meetings in a room mailbox

Hello Everyone,
     I have a strange situation. I created 4 conference room "room" mailboxes for calendaring of the conference rooms. We tested to see if user A booked a meeting in room 1 - that user B could not go delete or change
that meeting if it was accepted.
     Now - for some reason - user B (or any other user on Exchange) can now go delete any meeting made by anyone and has been accepted on the calendar. I cannot figure out what has happened to my permissions that is letting this
happen. As far as I know - we have not made any changes to these room mailboxes. We are Exchange 2010 version 14.01.0355.002.

Hi
Have a try with the steps on this thread
http://social.technet.microsoft.com/Forums/en-US/exchangesvradmin/thread/ed89d6ac-0c48-43a8-8ed4-3d4f5d441737
1.       Create a test mailbox as a new room mailbox, remove all permission on the Properties of “Mailbox” and “Calendar”
Notes: Confirm the permission under “Default” and “Anonymous” account is “None”
2.       Use “Delegate” function in “Tools” menu to share calendar for “TESTALL” group as “Author”
3.       Go to the Properties of calendar in room mailbox, confirm “Author” permission
4.       In User C’s outlook, see if you still can delete the calendar item that User A created
Cheers
Zi Feng
TechNet Community Support

Duplicate MessageIDs with Exchange 2010

Hi,
A customer was complaining that some mails were not received by them. So I’ve been back and forth with them a couple of times and every time I show them our logs that their server accepts the message and we get an id from them so the message is delivered properly.
Now they dug a little bit deeper and noticed that it seems our Exchange server is handing out duplicate message IDs and the email is flagged as duplicate by their mail system and therefore removed and thus never received by them.
Outlook clients do not have any special plugins installed and are running on our Citrix environment which has Symantec Endpoint Protection as the virusscanner.
Using the Tracking Log Explorer I can see, when entering the MessageID of the message that is giving issues, that there are 3 messages with the same ID. All those emails are sent within 1 hour intervals but I do not think duplicate detection applies here since
it is only for incoming emails.
The message subjects + content is completely different for each of the emails.
Our Exchange 2010 version is: 14.02.0247.005
Does anyone know how we can fix this issue?
Thanks

Hey,
The link you gave me refers to Exchange 2007. Registry keys for Exchange 2007 do not match those of 2010 so I cannot find them on my system. The article also notes that the duplicate message detection cannot be turned off since the time can only be scaled
back to 1 hour minimum. Exchange 2010 does not have ExchangeIS registry keys so I have no idea how to check the current duplicate message detection time.
I have tracked the message back for the SEND event and I can find 3 messages with the same MessageID. This is the ID that the customer is reporting their system rejects because of duplicates.
The internalMessageID is different and everything else about the emails is different (time / subject / content / message size)
I have no idea how the MessageID is calculated but I would assume an ID based on Date/Time/Subject/Message content should never give the same ID for messages.

Exchange 2010 and Powershell v3 Issue

I decided to take the plunge pray and install powershell v3. I like it so far but I am having a few problems. One problem occurs when running the search-mailbox cmdlet. It starts to run and as soon as it seems like it's finished my powershell windows closes
arbitrarily. Event ID 4999 show in the application log. Same with ISE.
Watson report about to be sent for process id: 3480, with parameters: E12, c-buddy-RTL-AMD64, 14.02.0247.005, PowerShell_ISE, unknown, M.E.D.S.N.PropertyDefinitionSets.BuildWellKnownSets, System.TypeInitializationException, b3a, unknown.
ErrorReportingEnabled: False
- System
- Provider
   [ Name] MSExchange Common
- EventID 4999
   [ Qualifiers] 16388
   Level 2
   Task 1
   Keywords 0x80000000000000
- TimeCreated
   [ SystemTime] 2012-10-03T18:07:40.000000000Z
   EventRecordID 31189
   Channel Application
   Computer computer.domain.local
   Security
- EventData
   3480
   E12
   c-buddy-RTL-AMD64
   14.02.0247.005
   PowerShell_ISE
   unknown
   M.E.D.S.N.PropertyDefinitionSets.BuildWellKnownSets
   System.TypeInitializationException
   b3a
   unknown
   False
Another problem im having is warning messages that show when running some cmdlets before they actually run. They are always the same so far.
below is the warning...
WARNING: The cmdlet extension agent with the index 0 has thrown an exception in OnComplete(). The exception is:
System.TypeInitializationException: The type initializer for
'Microsoft.Exchange.Data.Storage.NativeStorePropertyDefinitionDictionary' threw an exception. ---> System.NotSupportedException:
Not supported field(MailEnabled) type(Microsoft.Exchange.Data.Storage.PropertyTagPropertyDefinition).
   at Microsoft.Exchange.Data.Storage.NativeStorePropertyDefinitionDictionary.PropertyDefinitionSets.BuildWellKnownSets()
   at Microsoft.Exchange.Data.Storage.NativeStorePropertyDefinitionDictionary..cctor()
   --- End of inner exception stack trace ---
   at Microsoft.Exchange.Data.Storage.PropertyTagPropertyDefinition.TryFindEquivalentDefinition(PropTagKey key, Boolean
isCustom, PropType type, TypeCheckingFlag typeCheckingFlag, PropertyTagPropertyDefinition& definition, Boolean&
createNewDefinition)
   at Microsoft.Exchange.Data.Storage.PropertyTagPropertyDefinition.InternalCreate(String displayName, PropTag propertyTag,
PropertyFlags flags, TypeCheckingFlag typeCheckingFlag, Boolean isCustom, PropertyDefinitionConstraint[] constraints)
   at Microsoft.Exchange.Data.Storage.PropertyTagCache.InternalPropertyDefinitionsFromPropTags(TypeCheckingFlag
propertyTypeCheckingFlag, MapiProp mapiProp, StoreSession storeSession, PropTag[] propTags, Int32& resolvedPropertyCount)
   at Microsoft.Exchange.Data.Storage.RecipientTable.GetRecipientPropertyDefinitionsFromMapiTable(Boolean&
originalColumnsChanged)
   at Microsoft.Exchange.Data.Storage.RecipientTable.BuildRecipientCollection(Action`2 recipientCollectionBuilder)
   at Microsoft.Exchange.Data.Storage.CoreRecipientCollection..ctor(ICoreItem coreItem)
   at Microsoft.Exchange.Data.Storage.CoreItem.Microsoft.Exchange.Data.Storage.ICoreItem.GetRecipientCollection(Boolean
forceOpen)
   at Microsoft.Exchange.Data.Storage.CoreItem.GetRecipientCharsetDetectionData(StringBuilder stringBuilder, Boolean
isComplete)
   at Microsoft.Exchange.Data.Storage.ItemCharsetDetector.BuildCodePageDetector(MemoryStream& cachedHtmlBody)
   at Microsoft.Exchange.Data.Storage.ItemCharsetDetector.DetectCpidWithOptions(Charset userCharset, MemoryStream&
cachedHtmlBody)
   at Microsoft.Exchange.Data.Storage.ItemCharsetDetector.SetCachedBodyDataAndDetectCharset(Char[] cachedBodyData, Charset
userCharset, BodyCharsetFlags charsetFlags)
   at Microsoft.Exchange.Data.Storage.BodyCharsetDetectionStream.CalculateCharset()
   at Microsoft.Exchange.Data.Storage.BodyCharsetDetectionStream.OnBufferFull()
   at Microsoft.Exchange.Data.Storage.BodyCharsetDetectionStream.CloseDetectorConversionStream()
   at Microsoft.Exchange.Data.Storage.BodyCharsetDetectionStream.Flush()
   at Microsoft.Exchange.Data.TextConverters.ConverterEncodingOutput.Flush()
   at Microsoft.Exchange.Data.TextConverters.Internal.Text.TextCodePageConverter.Run()
   at Microsoft.Exchange.Data.TextConverters.Internal.Text.TextCodePageConverter.Flush()
   at Microsoft.Exchange.Data.TextConverters.ConverterWriter.Flush()
   at Microsoft.Exchange.Data.TextConverters.ConverterWriter.Dispose(Boolean disposing)
   at System.IO.TextWriter.Close()
   at Microsoft.Exchange.Data.Storage.BodyTextWriter.<CloseWriter>b__11()
   at Microsoft.Exchange.Data.Storage.ConvertUtils.CallCts(Trace tracer, String methodName, LocalizedString exceptionString,
CtsCall ctsCall)
   at Microsoft.Exchange.Data.Storage.BodyTextWriter.CloseWriter()
   at Microsoft.Exchange.Data.Storage.BodyTextWriter.Dispose(Boolean disposing)
   at System.IO.TextWriter.Dispose()
   at Microsoft.Exchange.ProvisioningAgent.MailboxLoggerFactory.XsoMailer.Log(AdminLogMessageData data, LogMessageDelegate
logMessage)
   at Microsoft.Exchange.ProvisioningAgent.AdminLogProvisioningHandler.OnComplete(Boolean succeeded, Exception e)
   at Microsoft.Exchange.Provisioning.ProvisioningLayer.OnComplete(Task task, Boolean succeeded, Exception exception)
Exchange 2010 Version 14.02.0318.002
Problems occur on a Win7 client. The only thing that has changed was a powershell v3 install.
current powershell version shows version 3
any ideas?

Powershell v3 is not (yet) supported with Exchange 2010:
http://technet.microsoft.com/en-us/library/ff728623.aspx
Alexei

Exchange 2010: How to renew an SSL certificate?

Hi all. I have done some reading but it seems I can't find just a simple step-by-step on how to renew an SSL certificate issued by a 3rd party CA for Exchange 2010. I really don't want to mess this one up by cobbling together partial answers
from various forums and end up omitting something, then being stuck unable to figure out why I broke email while the CEO flips out.
This is a standard GoDaddy 5-domain UCC certificate. There is only one Exchange server, SP3 (I don't think I have Rollup 6 on yet). The existing certificate expires in a month or so.
I have some specific questions but perhaps these would be answered via what I hope will be a step by step instruction set in your reply :) Sorry to appear lazy by asking for the full instructions just that so far no single forum post nor MS TechNet article
has addressed all my concerns, or in some cases information conflicts. So my concerns for example are: can you do a renewal for a certificate before the old one expires? It is actually a renewal, or are you adding a 2nd certificate?
Do you have to do anything in IIS or does EMC or EMS do all that for you?
Thank you.

-->Can you do a renewal for a certificate before the old one expires?
Yes. Normally 3rd party CA allows you to renew certificate before the current one expires.
-->It is actually a renewal, or are you adding a 2nd certificate?
You have to renew the certificate and a new/second certificate will be added to your server certificate store. Please check below for detailed step of Godaddy renewal. http://stevehardie.com/2013/10/how-to-renew-a-godaddy-exchange-2010-ssl-certificate/
-->Do you have to do anything in IIS or does EMC or EMS do all that for you?
You will have to do it from MMC or EMS. No need to do anything from IIS.
Follow the steps below to make your work easy or follow the video in this site site.http://www.netometer.com/video/tutorials/Exchange-2010-how-to-renew-SSL-certificate/
1. Run this command from EMS to generate CSR. You can see the CSR named "newcsr.txt" in C:\CSR
folder
Set-Content -path "C:\CSR\newcsr.txt" -Value (New-ExchangeCertificate -GenerateRequest -KeySize 2048 -SubjectName "c=US, s=WA, l=Bellavue, o=Contoso, cn=commonname.domain.com" -DomainName autodiscover.domain.com -PrivateKeyExportable $True)
2. Renew the certificate from Godaddy (from Godaddy portal) using the new CSR (i.e. newcsr.txt). Download the certificate from Godaddy after renewal.
3. Open Exchange MMC. Go to Server configuration. Right click on the pending request. Click on complete pending request and browse to the newly downloaded certificate. Make sure you have internet when doing this.
4. Assign services using the steps in the below site. Make sure you have selected the new certificate. You will see the thumbprint just before completion http://exchangeserverpro.com/how-to-assign-an-ssl-certificate-to-exchange-server-2010-services/
5.Delete the old one certificate from MMC.
From EMS use this command
Remove-ExchangeCertificate -Thumbprint <old cert thumprint>
You can see the the certificate thumprints using Get-ExchangeCertificate command
MAS. Please dont forget to mark as answer if it helped.

Exchange 2010 and Synchronizer Version 14.0.7108 (Sync Errors with Outlook and ActiveSync)

I have a user getting multiple emails (10-20) every day pertaining to Synchronizer Version 14.0.6109
Here is a sample:
11:09:31 Synchronizer Version 14.0.7108
11:09:31 Synchronizing Mailbox 'xxxxxxx'
11:09:33 Synchronizing server changes in folder 'zzzzzzz - Calendar'
11:09:34 Downloading from server 'xxxxxxlan.net'
11:09:35 Error synchronizing folder
11:09:35                  [80070005-508-80070005-560]
11:09:35                  You do not have sufficient permission to perform this operation on this object. See the folder contact or
your system administrator.
11:09:35                  Microsoft Exchange Information Store
11:09:35                  For more information on this failure, click the URL below:
11:09:35
http://www.microsoft.com/support/prodredirect/outlook2000_us.asp?err=80070005-508-80070005-560
11:09:35 Done
9:26:06 Synchronizer Version 14.0.7108
9:26:06 Synchronizing Mailbox 'xxxxxx'
9:26:06 Synchronizing local changes in folder 'Drafts'
9:26:06 Uploading to server 'xxxxxx.net'
9:26:06 Synchronization of some deletions failed.
9:26:06           [0-130]
9:26:06     1 item(s) deleted in online folder
9:26:06 Done
14:10:01 Message class: {SU:IPM.Note}
14:10:01 Mail Conflict Resolution
14:10:01 Local subject: {SU:Modification Resolution}
14:10:01 Remote subject: {SU:Modification Resolution}
14:10:01 Local Message Entry ID: {CB:70, LPB:0x000000004C521F45AF387146A60CA3323B67D04707002BE9FDD1BCA97D40BA307827218DB8F000000B31DB240000A7551752DD78844FA0521ED41E1AF099005F6F9512450000}
14:10:01 Remote Message Entry ID: {CB:70, LPB:0x000000004C521F45AF387146A60CA3323B67D04707002BE9FDD1BCA97D40BA307827218DB8F000000B31DB240000A7551752DD78844FA0521ED41E1AF099005F6F9512450000}
14:10:01 Local Message ChgKey: {CB:20, LPB:0x25576F30D487BE419D9C9A7D544A035600003CB6}
14:10:01 Remote Message ChgKey: {CB:20, LPB:0x25576F30D487BE419D9C9A7D544A035600003CB6}
14:10:01 Local Message PCL: {CB:21, LPB:0x1425576F30D487BE419D9C9A7D544A035600003CB6}
14:10:01 Remote Message PCL: {CB:21, LPB:0x1425576F30D487BE419D9C9A7D544A035600003CB6}
14:10:01 Checking local modifications
14:10:01 Overwrite property: 0x10800003
14:10:01 Overwrite property: 0x10810003
14:10:01 Overwrite property: 0x10820040
14:10:01 Compare property: 0x3FDE0003
14:10:01 Getting remote properties
14:10:01 Checking remote modifications
14:10:01 Compare (conflict) property: 0x3FDE0003
14:10:01 Local: {I4:28591}
14:10:01 Remote: {Error (0x8004010F)}
14:10:01 Not equal (conflict) property: 0x3FDE0003
14:10:01 Local modification: {19:09:41.0274 11/11/2014 [DD/MM/YYYY]}
14:10:01 Remote modification: {19:09:41.0274 11/11/2014 [DD/MM/YYYY]}
14:10:01 Forcing Local item to win.
14:10:01 Conflict generated, local item is winner
The server is exchange 2010
The user uses outlook 2007, 2010 and 2013 on multiple work stations and laptops as well as active sync on a mobile device.
Any suggestions on how to start to diagnose exactly what is generating the issue?
networktec

Hi There,
it seems like some permisson issue and some folder/files been deleted already. Please refer to this link below
https://support.microsoft.com/kb/2606009?wa=wsignin1.0
For permission issue, is he using any shared folder on outlook and make sure he has proper access on that one too.
UMESH DEUJA MCP,MCTS,MCSA,CCNA
I saw that article, and I wasn't sure how to proceed as this user has multiple computers they log into, and I don't think it would be possible to apply these "hot fixes' on every device they use...
Outlook 2013
To improve functionality in Outlook 2013, install the Outlook 2013 hotfix package that is dated April 8, 2014. For more information
about this hotfix package, click the following article number to go to the article in the Microsoft Knowledge Base:
2878323 Description of the Outlook 2013 hotfix package (Outlook-x-none.msp): April 8, 2014
Outlook 2010
To improve functionality in Outlook 2010, install the Outlook 2010 hotfix package that is dated April 8, 2014. For more information
about this hotfix package, click the following article number to go to the article in the Microsoft Knowledge Base:
2878254 Description of the Outlook 2010 hotfix package (Outlook-x-none.msp): April 8, 2014
networktec

Best practice SSL End-to-End in Exchange 2010 CAS loadbalancing

Hi,
I was wondering if there is a best practice for deploying SSL End-to-End in Exchange 2010 CAS loadbalancing.
We have ACE modules A5(1.1) and ANM 5.1(0), although there seems to be a template available in ANM it doesn't work. It throws a error when deploying, i believe the template is corrupt.
As I am undersome pressure to deploy this asap I am looking for a sample config. I found one for SSL offloading, but I need one for End-to-End SSL.
Thanks in advance,
Dion

Hi Dion,
You can open up a case with TAC to have that template reviewed and confirm if the problem is at the ACE or ANM side.
In the meantime here is a nice example for End-To-End SSL that can help you to get that working:
http://www.cisco.com/en/US/products/hw/modules/ps2706/products_configuration_example09186a00809c6f37.shtml
For CAS load balancing there's nothing special other than opening the right ports, I'd advise you to get SSL working first and take it from there, if any problem comes up you can post it here and we'll give you a hand.
HTH
Pablo

Exchange 2010 RTM Analyzer giving domain prep error but version number is correct?

I have recently inherited an Exchange 2010 Standard server environment, which appears to be running RTM and unpatched.
Version: 14.0 (Build 639.21)
When I run Best Practice Analyzer, it gives an error message, claiming that an unrecognized Exchange signature for the domain. The signature it detects is 12639, but MS' list of Exchange Signatures for Exchange 2010 appear to be:
Exchange Server 2010: 12769
Exchange Server 2010 SP1: 13040
So I'm not sure why Exchange Best Practice Analyzer is claiming that the signature is unrecognized? Is this a known issue? I am preparing to upgrade the server to Service Pack 3, but I don't want to attempt the upgrade if BPA is still claiming
a critical issue with the domain prep.

Hi,
Based on my knowledge, the above error is a known issue in Exchange 2010 RTM and it won't cause any risk. You can upgrade to Exchange 2010 SP3.
What's more, here is a thread for your reference.
2010 ExBPA
http://social.technet.microsoft.com/Forums/exchange/en-US/0d76559d-946b-4915-a54a-ee3914081f2e/2010-exbpa?forum=exchange2010
Hope my clarification is helpful.
Best regards,
Amy
Amy Wang
TechNet Community Support

How to Get Outlook Client Version for MAC from Exchange 2010

Hi,
I want to know how many users in my organization are using Outlook for MAC or Email for MAC. What is the best way to extract this information from Exchange 2010 server. I can read the RPC Client Access logs by running logparser:
logparser.exe "SELECT distinct extract_suffix(client-name,0,'=') as User,client-software,client-software-version as Versio
n,client-mode,client-ip,protocol from 'D:\RPC\EXTC03\RCA_2014*.log' WHERE (operation='Connect') GROUP BY User,client-software,Version,client-mode,client-ip,protocol ORDER BY User" -nSkipLines:4 -i:CSV -rtp:-1 > D:\RPC\EXTC03\EXT
C03.TXT
How to extract Outlook for MAC clients from this command?
Hasan

Hi Hasan,
As far as I know, Outlook for Mac (Office 2011) uses Microsoft's EWS (Exchange Web Service). So you probably need to collect and focus on EWS logs, not RCA.
Anyway, Karl is right that you'd better post your question in our Exchange forum, where you can get more experienced responses:
https://social.technet.microsoft.com/Forums/exchange/en-US/home?category=exchangeserver
The reason why we recommend posting appropriately is you will get the most qualified pool of respondents, and other partners who read the forums regularly can either share their knowledge or learn from your interaction with us. Thank you for your understanding.
Regards,
Ethan Hua
TechNet Community Support
It's recommended to download and install
Configuration Analyzer Tool (OffCAT), which is developed by Microsoft Support teams. Once the tool is installed, you can run it at any time to scan for hundreds of known issues in Office
programs.

Renew SSL Certificate for for two Exchange 2010 Server and the new rules.

I find DigitCert's website always helpful with cert questions.They've got a pretty helpful page here: https://www.digicert.com/internal-names.htmIt looks like they've got a tool for Exchange, but I've not used it myself, so can't say if it works or how well: https://www.digicert.com/internal-domain-name-tool.htmI bet Microsoft have something on their website too that helps with this sort of question.I'd say you register a completely new domain and use that for public facing and internal servers. Or you could just create a sub domain of an existing one, i.e. subdomain.mydomain.com and use that, i.e. public_exchange.subdomain.mydomain.com and internal_exchange.subdomain.mydomain.com.

Hi there ,
My exchange 2010 Server Certificate is about to expire and i am going to renew it but according to the new rules for SSL Certificate Issuing we can not include our Local Servers Names and Local FQDN such as myserver.contoso.local, my issue is that i have 2 exchange servers one is internet-facing Server (where the certificate is initiated and installed) and one is non-internet-facing Exchange server.
if i am going to renew my certificate with public only name, I have to create a split Domain that reflects my external links to the internal Users, what shall i do for the non-internet-facing server? do i need to create another record in my split DNS Server and add it to my Certificate Request ?
This topic first appeared in the Spiceworks Community

Exchange 2010 SP3 Rollup 7 not showing right version

I have installed Rollup 7. I can see it in programs installed / updates
but when I check the version number via the shell or console it show the number corresponding to sp3 no rollups
tried to re install rollup7, but it fails

There is:
Update Rollup 8 for Exchange Server 2010 SP2,
and Update Rollup 8 for Exchange Server 2010 SP1
But, as far as I know, there is no Update Rollup 8 for Exchange Server 2010
SP3 yet.
Please take a moment to Vote as Helpful and/or Mark as Answer where applicable. Thanks.
That's correct Idan. Exchange 2010 SP3 RU7 is the latest - released in August this year:
http://blogs.technet.com/b/rmilne/archive/2014/08/26/exchange-2010-sp3-ru7-released.aspx
Just like in Exchange 2003 & 2007 only service packs increment the version # you see in the management console and shell. Check the exsetup file as mentioned in the first post Idan linked.
Cheers,
Rhoderick
Microsoft Senior Exchange PFE
Blog:
http://blogs.technet.com/rmilne
Twitter:   LinkedIn:
  Facebook:
  XING:
Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

Exchange 2010 - Version of SSL

Similar Messages

Maybe you are looking for