Exchange 2013 Content filter agent quarantined message: wrong address appears when I click "Send Again"

Hello,
This is a strange one. I have Exchange 2013 and outlook 2013 and I have been using the content filter agent as a layer of spam protection since we were on 2008 and 2007. I redirect all my spam to a quarantine mailbox and examine it daily for false positives.
When I find one I click "Send Again" from the message in the quarantine mailbox to forward it on to the original sender. Normally Oulook automatically populates it with the original recipient. Today I noticed one that, for some reason, inserted "groupwise-"
in the front of the address(so for example "[email protected]:3:1") This concerns me as there is no such address and I have no idea where it is pulling this address from. I don't
use groupwise software. The quarantine mailbox has info in a postmaster and abuse reporting email. It shows the address correctly as "[email protected]" Only when you click "Send Again" does it
insert this groupwise address. Any ideas why?
This has only happened on one email so far.
Thanks.

Hi,
I noticed that the issue happened when you released quarantined messages to their intended recipients by using the Send Again feature in Microsoft Outlook.
Does the issue happen to all quarantined mailboxes. Please confirm if the messages have been sent to the intended recipients successfully or sent failed with NDR returned because of the wrong email address.
Please try to
disable the mailbox quarantine then enable to check whether the issue persists. Also make sure there is no third-party program installed in Exchange server and local machine for quarantine mailboxes.
Regards,
Winnie Liang
TechNet Community Support

Similar Messages

  • Exchange 2013 Issue: Outlook 2010 auto populating the From Tab when forwarding email

    Exchange 2013 Issue: Outlook 2010 auto populating the From Tab when forwarding email        
    I am running Exchange 2013 and I have an end user who connects to it via Outlook 2010. All was going well till he went to forward an email and he noticed that the From button appeared and auto populated the sender's email address.
    I have clicked the Empty Auto Complete List in Outlook's Send messages... still displayed the From tab when forwarding.
    I recreated the profile in outlook... same thing.
    I created the profile with outlook 2013... same thing.
    There is only one user profile setup in Outlook.
    (I know the from tab usually appears when you have multiple profiles setup in Outlook and/or when you configure the "From" tab.)
    I opened the end user's email in Exch 2013's OWA... what was different here was when I clicked on the email and it opened, it did NOT have the Reply or Forward option... and it displayed as a "Draft" email.
    Does anyone have any ideas?

    So are you saying that the from button is filling the option with the original senders address (eg the person who sent the message to your user), or that it's filling in the your users address (in which case I don't understand what the issue is, since
    it IS going from your user)?

  • TS3899 I recently discovered that I can no longer access websites pointed to within the content of an email message on my iPad Air by clicking on the highlighted HTML text or symbols. What should I do to correct this issue?

    I recently discovered that I can no longer access websites pointed to within the content of an email message on my iPad Air by clicking on the highlighted HTML text or symbols. What have I done to create, and what should I now do to correct, this issue?

    Or you could include a width to your body style:
    body {
    background-image: url(Logo/sky1.jpg);
    background-position: center center;
    background-attachment: fixed;
    width: 75%;}
    It might work or not depending on your other color scheme.

  • Portege 2010: message wrong machine appears

    On my Portege 2010 message "wrong machine" appears by using recovery CD for Portege 2000
    Detais are here.
    Portege 2010 > origionaly had chinese version of Win XP home edition >><< i bought it from a person who some how had installed winXP pro and Win 98 on it.
    i tried to format HD to use my own copy of XP pro corp.....this is where my problem began.
    Portege boots up drpm WIn98 CD and boot disk as well ....... after loading diagnostic tools >> i get message "device driver MSCD001 not found and CD-rom driver not found..........
    mY qUESTION :: How can i proceed onward from this Message >>>
    >><< i bought Portege 2000 3 Recovery CDs assuming that it will restore Portege but after running first CD ><> i get a big message Wrong Machine
    mu Question is is it possible to restore Portege 2000 on Portege 2010 that origionally had chinese version of OS...
    what else can i do to Install WinXp on my Portege 2010 ........ and how can i solve the message CD-rom device driver MSCD001 not found

    Hello
    Unfortunately there is nothing to do. The recovery image is created for each notebook model and it can not be used for different notebook models. Can you imagine the situation that you can use every recovery media on every notebook model?
    Every notebook has specific hardware configuration and because of that the recovery medias are specific for particular notebook model.
    By the way: which CD-Rom device you use?

  • My 10.6.8 macbook pro's DVD player won't play a movie from Netflix.  The DVD does play on a 10.5 mb pro.  So DVD is ok.  Message says "not permitted" when I click play.  Is there a compatibility issue? Or something else?

    My 10.6.8 macbook pro's DVD player won't play a movie from Netflix.  The DVD does play on a 10.5 mb pro.  So DVD is ok.  Message says "not permitted" when I click play.  Is there a compatibility issue? Or something else?

    Hello:
    This is not an area I have much experience in......I rarely insert DVDs and I have never had a similar problem.
    When the DVD is in the drive (and DVD players is open) click on File>get disk info.
    Barry

  • How to turn off printing message box that appears every time I send a document to the printer?

    How to turn off printing message box that appears every time I send a document to the printer?  Appears bottom right corner of screen above task bar.  Printer is HP c309a All-in-One PhotoSmart printer.

    I have an Iphone 4s, and every time I receive a call and i dont answer it, the cell shows a black screen with many things to do and automatic messages to send, like "call back, save, remind, call now, call later, etc". If I don´t close it as soon as i receive the call, then the cell gets frozen in that screen and i have to restart it. Sory for my english, i´m from argentina! thaks for your help !!!

  • Exchange server 2013 content filter rejecting all incoming messages as spam.

    Hello All,
    Today out of the blue our Exchange server 2013 install started rejecting any inbound message as spam. It first started with only one user not being able to receive any mail because of this anomaly and
    then after 12 or so hours all users were getting their mail rejected.
    I currently had the threshold set to 5 on external messages only. Internal is disabled.
    I have tried setting the threshold to 8 and 9, and rebooted the server after restarting
    all services just to make sure everything reset. Even dished out a IISRESET just in case. Whatever I tried still does not work.
    The install is a stand alone server facing the outside world (no edge server) living
    in a 2 domain controller environment with a share point farm thrown in (ESXI5.5 environment)
    Everything works just fine and dandy if I disable the content filter all together. Not seeing anything in the application logs out of the ordinary. Everything was working great and the same settings I used on this server worked well for a totally different
    server that runs just fine.
    Any ideas?
    fr0stsp1re

    RunspaceId                            : 87157b62-a061-436b-8fb9-dab446be3473
    Name                                  : ContentFilterConfig
    RejectionResponse                     : Message rejected as spam by Content Filtering.
    OutlookEmailPostmarkValidationEnabled : True
    BypassedRecipients                    : {}
    QuarantineMailbox                     :
    SCLRejectThreshold                    : 6
    SCLRejectEnabled                      : False
    SCLDeleteThreshold                    : 9
    SCLDeleteEnabled                      : False
    SCLQuarantineThreshold                : 9
    SCLQuarantineEnabled                  : False
    BypassedSenders                       : {}
    BypassedSenderDomains                 : {}
    Enabled                               : False
    ExternalMailEnabled                   : True
    InternalMailEnabled                   : False
    AdminDisplayName                      :
    ExchangeVersion                       : 0.1 (8.0.535.0)
    DistinguishedName                     : CN=ContentFilterConfig,CN=Message Hygiene,CN=Transport Settings,CN=Smith And
                                            Smith,CN=Microsoft
                                            Exchange,CN=Services,CN=Configuration,DC=XXXXXXXXXXX,DC=com
    Identity                              : ContentFilterConfig
    Guid                                  : 8f86e0b6-da37-42d3-b7cd-b9635b7db271
    ObjectCategory                        : XXXXXXXXXXXXXXXXXXX/Configuration/Schema/ms-Exch-Message-Hygiene-Conten
                                            t-Filter-Config
    ObjectClass                           : {top, msExchAgent, msExchMessageHygieneContentFilterConfig}
    WhenChanged                           : 5/28/2014 12:15:21 PM
    WhenCreated                           : 5/1/2014 4:17:55 PM
    WhenChangedUTC                        : 5/28/2014 7:15:21 PM
    WhenCreatedUTC                        : 5/1/2014 11:17:55 PM
    OrganizationId                        :
    OriginatingServer                     : XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
    IsValid                               : True
    ObjectState                           : Unchanged
     This is what it is set at now. Completely disabled. It worked fine for quite some time filtering out spam pretty nicely then one day everyone's mail was being rejected as spam by the content filtering agent. I know of someone else who also had this
    issue except their box was running 2008R2 with EX2007. They too disabled the content filter as it was giving them too many problems with mail being rejected.
    fr0stsp1re

  • Exchange 2013 recipient filter working bad

    Hello,
    I have seen, that the recipient filter in Exchange 2013 is working a Little bit different like in the older Versions.
    Here an Example (Exchange 2013):
    <<<220 EX2013.test.local Microsoft ESMTP MAIL Service ready at .....
    >>>helo test
    <<<250 EX2013.test.local Hello [192.168.0.10]
    >>>mail from:[email protected]
    <<<250 2.1.0 Sender OK
    >>>rcpt to:[email protected]
    <<<250 2.1.5 Recipient OK
    >>>data
    <<<354 Start mail input; end with <CRLF>.<CRLF>
    >>>Subject: Test2
    >>>
    >>>Test2
    >>>.
    <<<550 5.1.1 User unknown
    All other pervious Versions of Exchange 2003, 2007, 2010 are working different:
    Look here (Exchange 2010):
    <<<220 ex2010.test.local Microsoft ESMTP MAIL Service ready at ...
    >>>helo helo test
    <<<250 xxxxxxx Hello [192.168.0.20]
    >>>mail from:[email protected]
    <<<250 2.1.0 Sender OK
    >>>rcpt to:<[email protected]>
    <<<250 2.1.5 Recipient OK
    >>>rcpt to:<[email protected]>
    <<<550 5.1.1 Invalid RecipientThis is very simple and more effectiv than the other Strategie, because I won't have data inhouse and then the server decide, if recipient are valid, there is no reason to change this.
    Thank you for a help
    Bernd

    Hi,
    I noticed that the issue happened when you released quarantined messages to their intended recipients by using the Send Again feature in Microsoft Outlook.
    Does the issue happen to all quarantined mailboxes. Please confirm if the messages have been sent to the intended recipients successfully or sent failed with NDR returned because of the wrong email address.
    Please try to
    disable the mailbox quarantine then enable to check whether the issue persists. Also make sure there is no third-party program installed in Exchange server and local machine for quarantine mailboxes.
    Regards,
    Winnie Liang
    TechNet Community Support

  • High Amount of Spam on Exchange 2013 - Content Filtering is Enabled but Pfizer Spam Filling Up Everyone's Mailboxes

    Hello
    Previously I used Exchange 2010 with Forefront Threat Protection installed and this used to do a good job of stopping all the spam.
    However since updating to Exchange 2013 earlier this year and enabling the integrated spam filtering everyone noticed a sudden increase in the amount of spam which was getting through which has been bad for a long time.
    We have been living with it but in the last 3 weeks everyone has started getting about 40 emails a day from Pfizer for Viagra. All these seem to defeat the content filtering as Viagra is spelt with an extra I and the email address is always different.
    Also images in emails are blocked by default but somehow all the images on these spam messages appear for everyone.
    I am not sure the spam filtering is working at all and I'm not sure how to tell as ForeFront gives you a nice graphical dashboard but I can find nothing similar to this in Exchange and PowerShell seems the only way to configure the limited functionality
    of the content filter.
    Is there any way to get rid of these messages as it doesn't look very good when they are constantly popping up for everyone?
    Thanks
    Robin
    Robin Wilson

    Hello ManU
    Thanks for the reply.
    I have checked the logs and see this quite often:
    AcceptMessage,,SCL,not available: policy is disabled
    But other times it says this:
    RejectMessage,550 5.7.1 Message rejected as spam by Content Filtering
    Which seems to indicate it is rejecting some.
    This is what one of the email headers look like:
    Received: from RWS-MAIL.rwsservices.net (192.168.2.151) by
    RWS-MAIL.rwsservices.net (192.168.2.151) with Microsoft SMTP Server (TLS) id
    15.0.775.38 via Mailbox Transport; Sat, 28 Dec 2013 10:59:26 +0000
    Received: from RWS-MAIL.rwsservices.net (192.168.2.151) by
    rws-mail.rwsservices.net (192.168.2.151) with Microsoft SMTP Server (TLS) id
    15.0.775.38; Sat, 28 Dec 2013 10:58:38 +0000
    Received: from [90.169.106.204] (90.169.106.204) by mail.rwsservices.net
    (192.168.2.151) with Microsoft SMTP Server id 15.0.775.38 via Frontend
    Transport; Sat, 28 Dec 2013 10:58:37 +0000
    Date: Sat, 28 Dec 2013 12:05:58 +0200
    From: US.Pfizer eStore <[email protected]>
    To: robin.wilson <[email protected]>
    Message-ID: <[email protected]>
    Subject: Dear robin.wilson up to 65% OFF!
    X-Mailer: Airmail (223)
    MIME-Version: 1.0
    Content-Type: multipart/mixed; boundary="dd2ee3ea_586bb9e4_6f04"
    Return-Path: [email protected]
    X-MS-Exchange-Organization-PRD: 001-taxis.co.uk
    X-MS-Exchange-Organization-SenderIdResult: Neutral
    Received-SPF: Neutral (rws-mail.rwsservices.net: 90.169.106.204 is neither
    permitted nor denied by domain of [email protected])
    X-MS-Exchange-Organization-Network-Message-Id: e8825204-1f32-48be-a331-08d0d1d30209
    X-MS-Exchange-Organization-SCL: 1
    X-MS-Exchange-Organization-PCL: 2
    X-MS-Exchange-Organization-Antispam-Report: DV:3.3.13223.464;SID:SenderIDStatus Neutral;OrigIP:90.169.106.204
    X-EXCLAIMER-MD-CONFIG: 079171ba-394f-46d5-a160-56e416712e8e
    X-MS-Exchange-Organization-AVStamp-Enterprise: 1.0
    X-MS-Exchange-Organization-AuthSource: rws-mail.rwsservices.net
    X-MS-Exchange-Organization-AuthAs: Anonymous
    The emails use a different sender email address every time and there is always a poem in very light grey writing in the body of the email. The drugs are always misspelt as well. Is this why these are getting through?
    Thanks
    Robin
    Robin Wilson

  • Exchange 2013 CAS server returned '500 Message rejected'

    Hi, all.
    Exchange 2013 with CAS server and 2 mailbox servers. Health checks are all 100% healthy.
    One of our users cannot receive email from an external user. Our CAS server keeps rejecting the message. I can trace the message and see that it did indeed hit our servers, and was rejected. But I cannot find out WHY it was rejected.
    Here is the Delivery Report from the EAC:
    Delivery Report for               NAME ‎([email protected])
    Failed
    3/30/2015 1:41 PM <CAS servername>
    The message couldn't be delivered.
    [{LRT=};{LED=500 Message rejected};{FQDN=};{IP=}]
    The external user gets this NDR:
    <our local CAS servername> gave this error:
    Message rejected
    In the Diagnostic information for administrator section:
    <our local CAS servername> returned '500 message rejected'
    followed by the Original message headers. I think I'm looking for some more verbose logging to see what rule or configuration rejected the message. Any help would be greatly appreciated!
    Thanks!
    Dan

    My main question: how can I see what triggered my CAS server to reject this message with error 500?
    Our user can receive email from other external senders ok. It seems to be just this one sender having trouble.
    Our transport rules are not complex, and I see no rules that would block this sender or domain.
    We use Exchange Online Protection. The message gets through EOP and hits our CAS server. The CAS server rejects the message - it never gets to the Client.
    The CAS server gives the error 500 - but that's all I can find. I need a command or somewhere to look to see what triggered the 500 error.
    I've posted the NDR received by the sender and scrubbed our identifying information.
    Rcn.com looks like the sender's online forwarding host - the spf record for senderdomain.net points back to rcn.com. I've run an spf record check and it passes, so I do not believe that is the issue.
    Here is the NDR:
    From: [email protected]
    To: [email protected]
    Sent: Monday, March 30, 2015 1:41 PM
    Subject: Undeliverable: Hello from FirstName
    CAS1.our_internal_domain.local rejected your message to the following email addresses:
    FirstName LastName ([email protected])
    A problem occurred while delivering your message to this email address. Try sending your message again. If the problem continues, please contact your email admin.
    CAS1.our_internal_domain.local gave this error:
    Message rejected
    Diagnostic information for administrators:
    Generating server: BY1PR0501MB1112.namprd05.prod.outlook.com
    [email protected]
    CAS1.our_internal_domain.local
    Remote Server returned '500 Message rejected'
    Original message headers:
    Received: from BLUPR05CA0049.namprd05.prod.outlook.com (10.141.20.19) by
     BY1PR0501MB1112.namprd05.prod.outlook.com (25.160.103.146) with Microsoft
     SMTP Server (TLS) id 15.1.118.21; Mon, 30 Mar 2015 17:40:54 +0000
    Received: from BL2FFO11FD027.protection.gbl (2a01:111:f400:7c09::115) by
     BLUPR05CA0049.outlook.office365.com (2a01:111:e400:855::19) with Microsoft
     SMTP Server (TLS) id 15.1.125.19 via Frontend Transport; Mon, 30 Mar 2015
     17:40:54 +0000
    Received: from smtp.rcn.com (69.168.97.78) by
     BL2FFO11FD027.mail.protection.outlook.com (10.173.161.106) with Microsoft
     SMTP Server (TLS) id 15.1.130.10 via Frontend Transport; Mon, 30 Mar 2015
     17:40:54 +0000
    Return-Path: [email protected]
    X_CMAE_Category: , ,
    X-CNFS-Analysis: v=2.0 cv=PMSNCIWC c=1 sm=1 a=gRQJo8bc1j9+0GSSRogFxg==:17 a=NTyKUL13AAAA:8 a=ML7w5Z3_AAAA:8 a=3H5rcUylbt2uBKgiyYQA:9 a=wPNLvfGTeEIA:10 a=XQfDMMe_SRUA:10 a=SEXQnC1BqQAA:10 a=7ZjHjvgxCjAA:10 a=Wcs1mLwGzyUA:10 a=sBa8ZLUje9YA:10 a=k-GqB2yPh3IA:10
    a=N4kHG9ehtKzd7-3o534A:9 a=_W_S_7VecoQA:10 a=gRQJo8bc1j9+0GSSRogFxg==:117
    X-CM-Score: 0
    X-Scanned-by: Cloudmark Authority Engine
    X-Authed-Username: ZHAtZm1hQHJjbi5jb20=
    Authentication-Results: smtp02.rcn.cmh.synacor.com
     [email protected]; sender-id=neutralourdomain.com; dkim=none
     (message not signed) header.d=none;ourdomain.com; dmarc=pass action=none
     header.from=senderdomain.net;
    Authentication-Results: smtp02.rcn.cmh.synacor.com [email protected]; spf=neutral; sender-id=neutral
    Authentication-Results: smtp02.rcn.cmh.synacor.com smtp.user=sender; auth=pass (LOGIN)
    Received-SPF: neutral (smtp02.rcn.cmh.synacor.com: 69.72.92.252 is neither permitted nor denied by domain of senderdomain.net)
    Received: from [69.72.92.252] ([69.72.92.252:2689] helo=FirstNameLastName)
            by smtp.rcn.com (envelope-from <[email protected]>)
            (ecelerity 3.6.2.43620 r(Platform:3.6.2.0)) with ESMTPA
            id 58/6E-17115-4AA89155; Mon, 30 Mar 2015 13:40:53 -0400
    Message-ID: <011A7DBF0D954F62987032D45778AF29@FirstNameLastName>
    From: FirstName LastName <[email protected]>
    To: FirstName LastName <[email protected]>
    Subject: Hello from FirstName
    Date: Mon, 30 Mar 2015 13:40:49 -0400
    MIME-Version: 1.0
    Content-Type: multipart/alternative;
            boundary="----=_NextPart_000_0007_01D06AEF.223E4A60"
    X-Priority: 3
    X-MSMail-Priority: Normal
    X-Mailer: Microsoft Outlook Express 6.00.2900.5931
    X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.6157
    X-EOPAttributedMessage: 0
    Received-SPF: Pass (protection.outlook.com: domain of senderdomain.net designates
     69.168.97.78 as permitted sender) receiver=protection.outlook.com;
     client-ip=69.168.97.78; helo=smtp.rcn.com;
    Authentication-Results: spf=pass (sender IP is 69.168.97.78)
     [email protected];
    X-Forefront-Antispam-Report:
            CIP:69.168.97.78;CTRY:US;IPV:NLI;EFV:NLI;SFV:SKN;SFS:;DIR:INB;SFP:;SCL:-1;SRVR:BY1PR0501MB1112;H:smtp.rcn.com;FPR:;SPF:None;LANG:en;
    X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY1PR0501MB1112;
    X-Exchange-Antispam-Report-Test: UriScan:;
    X-Exchange-Antispam-Report-CFA-Test:
            BCL:0;PCL:0;RULEID:(601004);SRVR:BY1PR0501MB1112;BCL:0;PCL:0;RULEID:;SRVR:BY1PR0501MB1112;
    X-OriginatorOrg: ourdomain.onmicrosoft.com
    X-MS-Exchange-CrossTenant-OriginalArrivalTime: 30 Mar 2015 17:40:54.1243
     (UTC)
    X-MS-Exchange-CrossTenant-Id: c92ecf05-92f8-42f4-a246-24bee4988793
    X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
    X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY1PR0501MB1112
    Dan

  • Exchange 2013: Content Index State Failed

    I am running two, two node DAG's with Exchange 2013.
    One DAG pair is running 5 databases with Server 2012 Standard and the second DAG pair is running Server 2008 R2 SP1 Standard with a single shared database.
    No matter what I try, ALL 6 databases show "ContentIndexState: Failed" with "ContentIndexErrorMessage: An internal error occurred for the database or its index.".
    I have tried rebuilding the indexes manually, automatically and manually copying the database files between servers.  I also receive errors when trying to failover the databases because the content index state is failed.
    In my test environment I have a very similar setup working fine with no issues.
    Please let me know what I can try to get this resolved.
    The error I receive when running the following set of commands is:
    suspend-MailboxDatabaseCopy dag2db1\mbox1
    update-MailboxDatabaseCopy dag2db1\mbox1 -deleteexistingfiles
    [PS] C:\Windows\system32>update-mailboxdatabasecopy dag2db1\mbox1 -deleteexistingfiles
    Confirm
    Are you sure you want to perform this action?
    Updating database copy DAG2DB1\MBOX1 on server MBOX1
    [Y] Yes  [A] Yes to All  [N] No  [L] No to All  [?] Help (default is "Y"): a
    WARNING: Seeding of content index catalog for database 'DAG2DB1' failed. Please verify that the Microsoft Search (Exchange) and the Host Controller service for Exchange services are running and try the operation again. Error: Therevwas no endpoint listening
    at net.tcp://localhost:17063/Management/SeedingAgent-0A2745DF-4522-42AB-9115-5DDE9EDEF1C612/Single that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details..
    [PS] C:\Windows\system32>

    Hi Folks,
    Here we go;
    "On
    August 14th, we announced the removal of the
    MS13-061 Security Update for Exchange Server 2013 due to an issue where the patch changed settings for the search infrastructure, placing the content index for all databases into a failed state.  As of today, we have released updated security updates
    for both Exchange 2013 RTM CU1 and Exchange 2013 RTM CU2."
    Details below;
    http://blogs.technet.com/b/exchange/archive/2013/08/27/now-available-updated-release-of-ms13-061-security-update-for-exchange-server-2013.aspx
    Yavuz Eren Demir
    After installing this patch (Exchange2013-KB2874216-v2-x64-en.msp) seeding of the databases was impossible.
    Error:
    warning
    Seeding of content index catalog for database 'Database02' failed. Please verify that the Microsoft Search (Exchange) and
    the Host Controller service for Exchange services are running and try the operation again. Error: Could not connect to net.tcp://localhost:3863/Management/SeedingAgent-F293698C-B2D0-40CA-A2C3-FB37982E708712/Single. The connection attempt lasted for a time
    span of 00:00:02.0592000. TCP error code 10061: No connection could be made because the target machine actively refused it 127.0.0.1:3863. .
    Looking at the two services mentioned in this warning I've noticed the Microsoft Exchange Search Host Controller (HostControllerService)
    was disabled
    After Changing it to Automatic and enabling it, the problem was salved

  • Exchange 2007 - cannot filter a spam message encoded in Base64

    Hello to all!
    i'm trying to filter/drop a spam message with a transport rule but I could not be able to do it:
    the source of the message is this one:
    X-sender: <[email protected]> BODY=7BIT
    To: <[email protected]>
    Date: Tue, 10 Mar 2015 02:59:58 +0900
    From: <[email protected]>
    Reply-To: <[email protected]>
    Subject:
    MIME-Version: 1.0
    Content-Type: text/plain; charset="UTF8"
    Content-Transfer-Encoding: base64
    Message-ID: <[email protected]>
    Return-Path: [email protected]
    X-MS-Exchange-Organization-OriginalArrivalTime: 09 Mar 2015 18:00:10.7656
     (UTC)
    X-MS-Exchange-Organization-SCL: 6
    X-MS-Exchange-Organization-AuthAs: Internal
    X-MS-Exchange-Organization-AuthMechanism: 10
    X-MS-Exchange-Organization-Antispam-Report: MessageSecurityAntispamBypass
    X-MS-Exchange-Organization-OriginalSize: 748
    Ci0tLS0tLS0tLS0gRm9yd2FyZGVkIG1lc3NhZ2UgLS0tLS0tLS0tLQpGcm9tOiA8QW5uYTY0QGdt
    YWlsLmNvbT4KU3ViamVjdDpzZWxmaWVzc3ogb2YgbWluZQpUbzogRHVtbWllQGdtYWlsLmNvbQoK
    QW5uYQoKcGVyZmVjdCBzZXh5CgpodHRwOi8vai5tcC8xRnphM2lSCgo=
    Any advice?
    Thanks in advance

    Hi,
    I suspect that this issue is caused by "X-MS-Exchange-Organization-Antispam-Report: MessageSecurityAntispamBypass".
    Based on my knowledge, the "MessageSecurityAntispamBypass" could make the message doesn't be filtered for content, and make the sender who has permission bypass the anti-spam filters.
    More details to see:
    https://technet.microsoft.com/en-us/library/aa996878(v=exchg.141).aspx
    Thanks
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
    Mavis Huang
    TechNet Community Support

  • Exchange 2013 SPAM filter- can wildcards be used for partial word matching?

    We have migrated to Exchange 2013 and have set up the Anti-Spam and Anti-Malware features.  One thing I am trying to figure out is how to setup a wildcard filter for partial words.  For example, I have Viagra listed but it doesn't catch something
    like USviagra.  How would I set a filter for catching anything that ahs the word Viagra buried in it?
    Thanks.

    I have also seem a large increase in spam since upgrading to Exchange 2013.The malware engines are enabled and content filtering is turned on but everyone is getting about 20 emails a day from the Pfizer eStore. ForeFront used to block it all.
    Also images are blocked in standard emails but in these Viagra emails the images all show!
    The title is always a bit different too and it is spelt with extra i's. Surely this shouldn't be too much and defeat the content filter!
    Robin
    Robin Wilson

  • Exchange 2013 Malware Filter and ScanningProcess.exe

    Hi all...
    We have an Exchange 2013 environment with an external Mail Security Appliance (FortiMail),  because of this our Malware Filter was disabled, but the process ScanningProcess.exe (Microsoft Filtering Server Scanning Process) are still running and
    sometimes hangs the CPU for several minutes scanning attachments.
    Is there a method to disable the process and avoid the CPU high use?
    (all servers have Exchange 2013 CU7)

    Hi Nico,
    According to the description, I know it doesn't send to Mailbox-B a Alert Text as expected, just like following problem:
    After the appaling result, i made an additional test. I tested to send internal Malware mails from Mailbox-A to Mailbox-B. The Mail was send from Mailbox-A with no interruption and only on the receive Mailbox-B the attachment was deleted.
    I suggest double check this issue on OWA to verify whether Mailbox-B have received the Alert Text.
    If in OWA everything is OK, it seems an issue on the Outlook client side.
    If this issue exists in OWA, I suggest get the Malware Policy in details to check whethe it specifies some limitation.
    Thanks
    Mavis
    Mavis Huang
    TechNet Community Support

  • Some Outlook clients getting internal FQDN of newly installed Exchange 2013 CAS server as Outlook Anywhere Proxy address

    Hello Folks,
    I have this problem and is making me crazy if anyone have any idea please shed some light on this:-
    1. Working Outlook 2010 and 2013 clients with webmail.xyz.com as Outlook Anywhere proxy address.
    2. Installed new Exchange 2013 server (server02)with CAS and Mailbox role, Exchange install wizard finished and server is rebooted.
    3. Server came up online started changing internal and external FQDN's of Virtual Directories and Outlook Anywhere to webmail.xyz.com
    4. As soon as Fqdn's changed some outlook clients create support request that Outlook suddenly white's out and after reopening it is giving error  cannot connect to exchange. upon checking Clients Exchange Proxy address is set to http://server02.xyz.com,
    even though OA/OWA/ECP/OAB/EWS/Autodiscover/ActiveSync FQDN's Point to webmail.xyz.com, on all servers if i create new outlook profile for same user it picks up correct settings through autodiscover and connects fine, this is happening to about 20% of outlook
    clients every time i am introducing new Exchange 2013 server in Organization. we have around 2000 users and planning on installing 4 exchange servers to distribute load and everytime changing outlook profile of close to 150-200 users is not possible.
    Any help is greatly appreciated.
    Thanks
    Cool

    Here are the EXCRA results
    Here IP (x.x.x.x) returned is my Load Balancer IP (Webmail.xyz.com).    
    Connectivity Test Successful with Warnings
    Test Details
         Testing Outlook connectivity.
         The Outlook connectivity test completed successfully.
              Additional Details
         Elapsed Time: 9881 ms.
              Test Steps
              The Microsoft Connectivity Analyzer is attempting to test Autodiscover for [email protected].
         Autodiscover was tested successfully.
              Additional Details
         Elapsed Time: 2063 ms.
              Test Steps
              Attempting each method of contacting the Autodiscover service.
         The Autodiscover service was tested successfully.
              Additional Details
         Elapsed Time: 2063 ms.
              Test Steps
              Attempting to test potential Autodiscover URL https://xyz.com:443/Autodiscover/Autodiscover.xml
         Testing of this potential Autodiscover URL failed.
              Additional Details
         Elapsed Time: 186 ms.
              Test Steps
              Attempting to resolve the host name xyz.com in DNS.
         The host name couldn't be resolved.
           Tell me more about this issue and how to resolve it
              Additional Details
         Host xyz.com couldn't be resolved in DNS InfoNoRecords.
    Elapsed Time: 186 ms.
         Attempting to test potential Autodiscover URL https://autodiscover.xyz.com:443/Autodiscover/Autodiscover.xml
         Testing of the Autodiscover URL was successful.
              Additional Details
         Elapsed Time: 1876 ms.
              Test Steps
              Attempting to resolve the host name autodiscover.xyz.com in DNS.
         The host name resolved successfully.
              Additional Details
         IP addresses returned: x.x.x.x
    Elapsed Time: 338 ms.
         Testing TCP port 443 on host autodiscover.xyz.com to ensure it's listening and open.
         The port was opened successfully.
              Additional Details
         Elapsed Time: 173 ms.
         Testing the SSL certificate to make sure it's valid.
         The certificate passed all validation requirements.
              Additional Details
         Elapsed Time: 318 ms.
              Test Steps
              The Microsoft Connectivity Analyzer is attempting to obtain the SSL certificate from remote server autodiscover.xyz.com on port 443.
         The Microsoft Connectivity Analyzer successfully obtained the remote SSL certificate.
              Additional Details
         Remote Certificate Subject: CN=webmail.xyz.com, Issuer: CN=VeriSign Class 3 Secure Server CA - G3, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US.
    Elapsed Time: 219 ms.
         Validating the certificate name.
         The certificate name was validated successfully.
              Additional Details
         Host name autodiscover.xyz.com was found in the Certificate Subject Alternative Name entry.
    Elapsed Time: 1 ms.
         Certificate trust is being validated.
         The certificate is trusted and all certificates are present in the chain.
              Test Steps
              The Microsoft Connectivity Analyzer is attempting to build certificate chains for certificate CN=webmail.xyz.com, OU=Terms of use at www.verisign.com/rpa (c)05,.
         One or more certificate chains were constructed successfully.
              Additional Details
         A total of 1 chains were built. The highest quality chain ends in root certificate CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="(c) 2006 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign,
    Inc.", C=US.
    Elapsed Time: 36 ms.
         Analyzing the certificate chains for compatibility problems with versions of Windows.
         Potential compatibility problems were identified with some versions of Windows.
              Additional Details
         The Microsoft Connectivity Analyzer can only validate the certificate chain using the Root Certificate Update functionality from Windows Update. Your certificate may not be trusted on Windows if the "Update Root Certificates" feature
    isn't enabled.
    Elapsed Time: 5 ms.
         Testing the certificate date to confirm the certificate is valid.
         Date validation passed. The certificate hasn't expired.
              Additional Details
         The certificate is valid. NotBefore = 1/3/2013 12:00:00 AM, NotAfter = 11/16/2015 11:59:59 PM
    Elapsed Time: 0 ms.
         Checking the IIS configuration for client certificate authentication.
         Client certificate authentication wasn't detected.
              Additional Details
         Accept/Require Client Certificates isn't configured.
    Elapsed Time: 289 ms.
         Attempting to send an Autodiscover POST request to potential Autodiscover URLs.
         The Microsoft Connectivity Analyzer successfully retrieved Autodiscover settings by sending an Autodiscover POST.
              Additional Details
         Elapsed Time: 756 ms.
              Test Steps
              The Microsoft Connectivity Analyzer is attempting to retrieve an XML Autodiscover response from URL https://autodiscover.xyz.com:443/Autodiscover/Autodiscover.xml for user [email protected].
         The Autodiscover XML response was successfully retrieved.
              Additional Details
         Autodiscover Account Settings
    XML response:
    <?xml version="1.0"?>
    <Autodiscover xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://schemas.microsoft.com/exchange/autodiscover/responseschema/2006">
    <Response xmlns="http://schemas.microsoft.com/exchange/autodiscover/outlook/responseschema/2006a">
    <User>
    <DisplayName>Test Exch1</DisplayName>
    <LegacyDN>/o=DOMAIN/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=add423106fbb47d5bf237462f52b8dab-Test Exch1</LegacyDN>
    <DeploymentId>4ec753c9-60d9-4c05-9451-5b24e2d527a7</DeploymentId>
    </User>
    <Account>
    <AccountType>email</AccountType>
    <Action>settings</Action>
    <Protocol>
    <Type>EXCH</Type>
    <Server>[email protected]</Server>
    <ServerDN>/o=DOMAIN/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/[email protected]</ServerDN>
    <ServerVersion>73C0834F</ServerVersion>
    <MdbDN>/o=DOMAIN/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/[email protected]/cn=Microsoft Private MDB</MdbDN>
    <ASUrl>https://webmail.xyz.com/ews/exchange.asmx</ASUrl>
    <OOFUrl>https://webmail.xyz.com/ews/exchange.asmx</OOFUrl>
    <OABUrl>https://webmail.xyz.com/OAB/6a6a06ad-4717-4636-bd98-0b4fa3aaf4a5/</OABUrl>
    <UMUrl>https://webmail.xyz.com/ews/UM2007Legacy.asmx</UMUrl>
    <Port>0</Port>
    <DirectoryPort>0</DirectoryPort>
    <ReferralPort>0</ReferralPort>
    <PublicFolderServer>webmail.xyz.com</PublicFolderServer>
    <AD>DC-03.domain.xyz.com</AD>
    <EwsUrl>https://webmail.xyz.com/ews/exchange.asmx</EwsUrl>
    <EmwsUrl>https://webmail.xyz.com/ews/exchange.asmx</EmwsUrl>
    <EcpUrl>https://webmail.xyz.com/ecp/</EcpUrl>
    <EcpUrl-um>?rfr=olk&amp;p=customize/voicemail.aspx&amp;exsvurl=1&amp;realm=domain.xyz.com</EcpUrl-um>
    <EcpUrl-aggr>?rfr=olk&amp;p=personalsettings/EmailSubscriptions.slab&amp;exsvurl=1&amp;realm=domain.xyz.com</EcpUrl-aggr>
    <EcpUrl-mt>PersonalSettings/DeliveryReport.aspx?rfr=olk&amp;exsvurl=1&amp;IsOWA=&lt;IsOWA&gt;&amp;MsgID=&lt;MsgID&gt;&amp;Mbx=&lt;Mbx&gt;&amp;realm=domain.xyz.com</EcpUrl-mt>
    <EcpUrl-ret>?rfr=olk&amp;p=organize/retentionpolicytags.slab&amp;exsvurl=1&amp;realm=domain.xyz.com</EcpUrl-ret>
    <EcpUrl-sms>?rfr=olk&amp;p=sms/textmessaging.slab&amp;exsvurl=1&amp;realm=domain.xyz.com</EcpUrl-sms>
    <EcpUrl-photo>PersonalSettings/EditAccount.aspx?rfr=olk&amp;chgPhoto=1&amp;exsvurl=1&amp;realm=domain.xyz.com</EcpUrl-photo>
    <EcpUrl-tm>?rfr=olk&amp;ftr=TeamMailbox&amp;exsvurl=1&amp;realm=domain.xyz.com</EcpUrl-tm>
    <EcpUrl-tmCreating>?rfr=olk&amp;ftr=TeamMailboxCreating&amp;SPUrl=&lt;SPUrl&gt;&amp;Title=&lt;Title&gt;&amp;SPTMAppUrl=&lt;SPTMAppUrl&gt;&amp;exsvurl=1&amp;realm=domain.xyz.com</EcpUrl-tmCreating>
    <EcpUrl-tmEditing>?rfr=olk&amp;ftr=TeamMailboxEditing&amp;Id=&lt;Id&gt;&amp;exsvurl=1&amp;realm=domain.xyz.com</EcpUrl-tmEditing>
    <EcpUrl-extinstall>Extension/InstalledExtensions.slab?rfr=olk&amp;exsvurl=1&amp;realm=domain.xyz.com</EcpUrl-extinstall>
    <ServerExclusiveConnect>off</ServerExclusiveConnect>
    </Protocol>
    <Protocol>
    <Type>EXPR</Type>
    <Server>webmail.xyz.com</Server>
    <ASUrl>https://webmail.xyz.com/ews/exchange.asmx</ASUrl>
    <OOFUrl>https://webmail.xyz.com/ews/exchange.asmx</OOFUrl>
    <OABUrl>https://webmail.xyz.com/OAB/6a6a06ad-4717-4636-bd98-0b4fa3aaf4a5/</OABUrl>
    <UMUrl>https://webmail.xyz.com/ews/UM2007Legacy.asmx</UMUrl>
    <Port>0</Port>
    <DirectoryPort>0</DirectoryPort>
    <ReferralPort>0</ReferralPort>
    <SSL>On</SSL>
    <AuthPackage>Ntlm</AuthPackage>
    <EwsUrl>https://webmail.xyz.com/ews/exchange.asmx</EwsUrl>
    <EmwsUrl>https://webmail.xyz.com/ews/exchange.asmx</EmwsUrl>
    <EcpUrl>https://webmail.xyz.com/ecp/</EcpUrl>
    <EcpUrl-um>?rfr=olk&amp;p=customize/voicemail.aspx&amp;exsvurl=1&amp;realm=domain.xyz.com</EcpUrl-um>
    <EcpUrl-aggr>?rfr=olk&amp;p=personalsettings/EmailSubscriptions.slab&amp;exsvurl=1&amp;realm=domain.xyz.com</EcpUrl-aggr>
    <EcpUrl-mt>PersonalSettings/DeliveryReport.aspx?rfr=olk&amp;exsvurl=1&amp;IsOWA=&lt;IsOWA&gt;&amp;MsgID=&lt;MsgID&gt;&amp;Mbx=&lt;Mbx&gt;&amp;realm=domain.xyz.com</EcpUrl-mt>
    <EcpUrl-ret>?rfr=olk&amp;p=organize/retentionpolicytags.slab&amp;exsvurl=1&amp;realm=domain.xyz.com</EcpUrl-ret>
    <EcpUrl-sms>?rfr=olk&amp;p=sms/textmessaging.slab&amp;exsvurl=1&amp;realm=domain.xyz.com</EcpUrl-sms>
    <EcpUrl-photo>PersonalSettings/EditAccount.aspx?rfr=olk&amp;chgPhoto=1&amp;exsvurl=1&amp;realm=domain.xyz.com</EcpUrl-photo>
    <EcpUrl-tm>?rfr=olk&amp;ftr=TeamMailbox&amp;exsvurl=1&amp;realm=domain.xyz.com</EcpUrl-tm>
    <EcpUrl-tmCreating>?rfr=olk&amp;ftr=TeamMailboxCreating&amp;SPUrl=&lt;SPUrl&gt;&amp;Title=&lt;Title&gt;&amp;SPTMAppUrl=&lt;SPTMAppUrl&gt;&amp;exsvurl=1&amp;realm=domain.xyz.com</EcpUrl-tmCreating>
    <EcpUrl-tmEditing>?rfr=olk&amp;ftr=TeamMailboxEditing&amp;Id=&lt;Id&gt;&amp;exsvurl=1&amp;realm=domain.xyz.com</EcpUrl-tmEditing>
    <EcpUrl-extinstall>Extension/InstalledExtensions.slab?rfr=olk&amp;exsvurl=1&amp;realm=domain.xyz.com</EcpUrl-extinstall>
    <ServerExclusiveConnect>on</ServerExclusiveConnect>
    <EwsPartnerUrl>https://webmail.xyz.com/ews/exchange.asmx</EwsPartnerUrl>
    <GroupingInformation>Default-First-Site-Name</GroupingInformation>
    </Protocol>
    <Protocol>
    <Type>WEB</Type>
    <Port>0</Port>
    <DirectoryPort>0</DirectoryPort>
    <ReferralPort>0</ReferralPort>
    <Internal>
    <OWAUrl AuthenticationMethod="Basic, Fba">https://webmail.xyz.com/owa/</OWAUrl>
    <Protocol>
    <Type>EXCH</Type>
    <ASUrl>https://webmail.xyz.com/ews/exchange.asmx</ASUrl>
    </Protocol>
    </Internal>
    <External>
    <OWAUrl AuthenticationMethod="Fba">https://webmail.xyz.com/owa/</OWAUrl>
    <Protocol>
    <Type>EXPR</Type>
    <ASUrl>https://webmail.xyz.com/ews/exchange.asmx</ASUrl>
    </Protocol>
    </External>
    </Protocol>
    <Protocol>
    <Type>EXHTTP</Type>
    <Server>webmail.xyz.com</Server>
    <ASUrl>https://webmail.xyz.com/ews/exchange.asmx</ASUrl>
    <OOFUrl>https://webmail.xyz.com/ews/exchange.asmx</OOFUrl>
    <OABUrl>https://webmail.xyz.com/OAB/6a6a06ad-4717-4636-bd98-0b4fa3aaf4a5/</OABUrl>
    <UMUrl>https://webmail.xyz.com/ews/UM2007Legacy.asmx</UMUrl>
    <Port>0</Port>
    <DirectoryPort>0</DirectoryPort>
    <ReferralPort>0</ReferralPort>
    <SSL>On</SSL>
    <AuthPackage>Ntlm</AuthPackage>
    <EwsUrl>https://webmail.xyz.com/ews/exchange.asmx</EwsUrl>
    <EmwsUrl>https://webmail.xyz.com/ews/exchange.asmx</EmwsUrl>
    <EcpUrl>https://webmail.xyz.com/ecp/</EcpUrl>
    <EcpUrl-um>?rfr=olk&amp;p=customize/voicemail.aspx&amp;exsvurl=1&amp;realm=domain.xyz.com</EcpUrl-um>
    <EcpUrl-aggr>?rfr=olk&amp;p=personalsettings/EmailSubscriptions.slab&amp;exsvurl=1&amp;realm=domain.xyz.com</EcpUrl-aggr>
    <EcpUrl-mt>PersonalSettings/DeliveryReport.aspx?rfr=olk&amp;exsvurl=1&amp;IsOWA=&lt;IsOWA&gt;&amp;MsgID=&lt;MsgID&gt;&amp;Mbx=&lt;Mbx&gt;&amp;realm=domain.xyz.com</EcpUrl-mt>
    <EcpUrl-ret>?rfr=olk&amp;p=organize/retentionpolicytags.slab&amp;exsvurl=1&amp;realm=domain.xyz.com</EcpUrl-ret>
    <EcpUrl-sms>?rfr=olk&amp;p=sms/textmessaging.slab&amp;exsvurl=1&amp;realm=domain.xyz.com</EcpUrl-sms>
    <EcpUrl-photo>PersonalSettings/EditAccount.aspx?rfr=olk&amp;chgPhoto=1&amp;exsvurl=1&amp;realm=domain.xyz.com</EcpUrl-photo>
    <EcpUrl-tm>?rfr=olk&amp;ftr=TeamMailbox&amp;exsvurl=1&amp;realm=domain.xyz.com</EcpUrl-tm>
    <EcpUrl-tmCreating>?rfr=olk&amp;ftr=TeamMailboxCreating&amp;SPUrl=&lt;SPUrl&gt;&amp;Title=&lt;Title&gt;&amp;SPTMAppUrl=&lt;SPTMAppUrl&gt;&amp;exsvurl=1&amp;realm=domain.xyz.com</EcpUrl-tmCreating>
    <EcpUrl-tmEditing>?rfr=olk&amp;ftr=TeamMailboxEditing&amp;Id=&lt;Id&gt;&amp;exsvurl=1&amp;realm=domain.xyz.com</EcpUrl-tmEditing>
    <EcpUrl-extinstall>Extension/InstalledExtensions.slab?rfr=olk&amp;exsvurl=1&amp;realm=domain.xyz.com</EcpUrl-extinstall>
    <ServerExclusiveConnect>On</ServerExclusiveConnect>
    </Protocol>
    <Protocol>
    <Type>EXHTTP</Type>
    <Server>webmail.xyz.com</Server>
    <ASUrl>https://webmail.xyz.com/ews/exchange.asmx</ASUrl>
    <OOFUrl>https://webmail.xyz.com/ews/exchange.asmx</OOFUrl>
    <OABUrl>https://webmail.xyz.com/OAB/6a6a06ad-4717-4636-bd98-0b4fa3aaf4a5/</OABUrl>
    <UMUrl>https://webmail.xyz.com/ews/UM2007Legacy.asmx</UMUrl>
    <Port>0</Port>
    <DirectoryPort>0</DirectoryPort>
    <ReferralPort>0</ReferralPort>
    <SSL>On</SSL>
    <AuthPackage>Ntlm</AuthPackage>
    <EwsUrl>https://webmail.xyz.com/ews/exchange.asmx</EwsUrl>
    <EmwsUrl>https://webmail.xyz.com/ews/exchange.asmx</EmwsUrl>
    <EcpUrl>https://webmail.xyz.com/ecp/</EcpUrl>
    <EcpUrl-um>?rfr=olk&amp;p=customize/voicemail.aspx&amp;exsvurl=1&amp;realm=domain.xyz.com</EcpUrl-um>
    <EcpUrl-aggr>?rfr=olk&amp;p=personalsettings/EmailSubscriptions.slab&amp;exsvurl=1&amp;realm=domain.xyz.com</EcpUrl-aggr>
    <EcpUrl-mt>PersonalSettings/DeliveryReport.aspx?rfr=olk&amp;exsvurl=1&amp;IsOWA=&lt;IsOWA&gt;&amp;MsgID=&lt;MsgID&gt;&amp;Mbx=&lt;Mbx&gt;&amp;realm=domain.xyz.com</EcpUrl-mt>
    <EcpUrl-ret>?rfr=olk&amp;p=organize/retentionpolicytags.slab&amp;exsvurl=1&amp;realm=domain.xyz.com</EcpUrl-ret>
    <EcpUrl-sms>?rfr=olk&amp;p=sms/textmessaging.slab&amp;exsvurl=1&amp;realm=domain.xyz.com</EcpUrl-sms>
    <EcpUrl-photo>PersonalSettings/EditAccount.aspx?rfr=olk&amp;chgPhoto=1&amp;exsvurl=1&amp;realm=domain.xyz.com</EcpUrl-photo>
    <EcpUrl-tm>?rfr=olk&amp;ftr=TeamMailbox&amp;exsvurl=1&amp;realm=domain.xyz.com</EcpUrl-tm>
    <EcpUrl-tmCreating>?rfr=olk&amp;ftr=TeamMailboxCreating&amp;SPUrl=&lt;SPUrl&gt;&amp;Title=&lt;Title&gt;&amp;SPTMAppUrl=&lt;SPTMAppUrl&gt;&amp;exsvurl=1&amp;realm=domain.xyz.com</EcpUrl-tmCreating>
    <EcpUrl-tmEditing>?rfr=olk&amp;ftr=TeamMailboxEditing&amp;Id=&lt;Id&gt;&amp;exsvurl=1&amp;realm=domain.xyz.com</EcpUrl-tmEditing>
    <EcpUrl-extinstall>Extension/InstalledExtensions.slab?rfr=olk&amp;exsvurl=1&amp;realm=domain.xyz.com</EcpUrl-extinstall>
    <ServerExclusiveConnect>On</ServerExclusiveConnect>
    </Protocol>
    </Account>
    </Response>
    </Autodiscover>HTTP Response Headers:
    request-id: 9d325a80-f1fd-4496-ac48-2be6bb782c28
    X-CalculatedBETarget: Server01.domain.xyz.com
    X-DiagInfo: Server01
    X-BEServer: Server01
    Persistent-Auth: true
    X-FEServer: Server01
    Content-Length: 11756
    Cache-Control: private
    Content-Type: text/xml; charset=utf-8
    Date: Mon, 25 Aug 2014 19:12:25 GMT
    Set-Cookie: X-BackEndCookie=S-1-5-21-1293235207-2459173341-1304346827-14544=u56Lnp2ejJqBypqcnsfJx5nSy8ucnNLLnJzP0sfKz8/Sy5nHmsiamZrMyZrLgYHPxtDNy9DNz87L387Gxc7Nxc3J; expires=Thu, 25-Sep-2014 00:12:26 GMT; path=/Autodiscover; secure; HttpOnly
    Server: Microsoft-IIS/8.5
    X-AspNet-Version: 4.0.30319
    X-Powered-By: ASP.NET
    Elapsed Time: 756 ms.
         Autodiscover settings for Outlook connectivity are being validated.
         The Microsoft Connectivity Analyzer validated the Outlook Autodiscover settings.
              Additional Details
         Elapsed Time: 0 ms.
         Testing RPC over HTTP connectivity to server webmail.xyz.com
         RPC over HTTP connectivity was verified successfully.
              Additional Details
         HTTP Response Headers:
    request-id: 835acf95-78b7-40ae-b232-117318d1577e
    Server: Microsoft-IIS/8.5
    WWW-Authenticate: Basic realm="webmail.xyz.com",Negotiate,NTLM
    X-Powered-By: ASP.NET
    X-FEServer: Server01
    Date: Mon, 25 Aug 2014 19:12:26 GMT
    Content-Length: 0
    Elapsed Time: 7817 ms.
              Test Steps
              Attempting to resolve the host name webmail.xyz.com in DNS.
         The host name resolved successfully.
              Additional Details
         IP addresses returned: x.x.x.x
    Elapsed Time: 107 ms.
         Testing TCP port 443 on host webmail.xyz.com to ensure it's listening and open.
         The port was opened successfully.
              Additional Details
         Elapsed Time: 180 ms.
         Testing the SSL certificate to make sure it's valid.
         The certificate passed all validation requirements.
              Additional Details
         Elapsed Time: 303 ms.
              Test Steps
              The Microsoft Connectivity Analyzer is attempting to obtain the SSL certificate from remote server webmail.xyz.com on port 443.
         The Microsoft Connectivity Analyzer successfully obtained the remote SSL certificate.
              Additional Details
         Remote Certificate Subject: CN=webmail.xyz.com, OU=Terms of use at www.verisign.com/rpa (c)05, Issuer: CN=VeriSign Class 3 Secure Server CA - G3, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign,
    Inc.", C=US.
    Elapsed Time: 224 ms.
         Validating the certificate name.
         The certificate name was validated successfully.
              Additional Details
         Host name webmail.xyz.com was found in the Certificate Subject Common name.
    Elapsed Time: 0 ms.
         Certificate trust is being validated.
         The certificate is trusted and all certificates are present in the chain.
              Test Steps
              The Microsoft Connectivity Analyzer is attempting to build certificate chains for certificate CN=webmail.xyz.com, OU=Terms of use at www.verisign.com/rpa (c)05,
         One or more certificate chains were constructed successfully.
              Additional Details
         A total of 1 chains were built. The highest quality chain ends in root certificate CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="(c) 2006 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign,
    Inc.", C=US.
    Elapsed Time: 34 ms.
         Analyzing the certificate chains for compatibility problems with versions of Windows.
         Potential compatibility problems were identified with some versions of Windows.
              Additional Details
         The Microsoft Connectivity Analyzer can only validate the certificate chain using the Root Certificate Update functionality from Windows Update. Your certificate may not be trusted on Windows if the "Update Root Certificates" feature
    isn't enabled.
    Elapsed Time: 5 ms.
         Testing the certificate date to confirm the certificate is valid.
         Date validation passed. The certificate hasn't expired.
              Additional Details
         The certificate is valid. NotBefore = 1/3/2013 12:00:00 AM, NotAfter = 11/16/2015 11:59:59 PM
    Elapsed Time: 0 ms.
         Checking the IIS configuration for client certificate authentication.
         Client certificate authentication wasn't detected.
              Additional Details
         Accept/Require Client Certificates isn't configured.
    Elapsed Time: 298 ms.
         Testing HTTP Authentication Methods for URL https://webmail.xyz.com/rpc/[email protected]:6002.
         The HTTP authentication methods are correct.
              Additional Details
         The Microsoft Connectivity Analyzer found all expected authentication methods and no disallowed methods. Methods found: Basic, Negotiate, NTLMHTTP Response Headers:
    request-id: 835acf95-78b7-40ae-b232-117318d1577e
    Server: Microsoft-IIS/8.5
    WWW-Authenticate: Basic realm="webmail.xyz.com",Negotiate,NTLM
    X-Powered-By: ASP.NET
    X-FEServer: Server01
    Date: Mon, 25 Aug 2014 19:12:26 GMT
    Content-Length: 0
    Elapsed Time: 296 ms.
         Attempting to ping RPC proxy webmail.xyz.com.
         RPC Proxy was pinged successfully.
              Additional Details
         Elapsed Time: 454 ms.
         Attempting to ping the MAPI Mail Store endpoint with identity: [email protected]:6001.
         The endpoint was pinged successfully.
              Additional Details
         The endpoint responded in 0 ms.
    Elapsed Time: 1007 ms.
         Testing the MAPI Address Book endpoint on the Exchange server.
         The address book endpoint was tested successfully.
              Additional Details
         Elapsed Time: 2177 ms.
              Test Steps
              Attempting to ping the MAPI Address Book endpoint with identity: [email protected]:6004.
         The endpoint was pinged successfully.
              Additional Details
         The endpoint responded in 906 ms.
    Elapsed Time: 918 ms.
         Testing the address book "Check Name" operation for user [email protected] against server [email protected].
         The test passed with some warnings encountered. Please expand the additional details.
           Tell me more about this issue and how to resolve it
              Additional Details
         The address book Bind operation returned ecNotSupported. This typically indicates that your server requires encryption. The Microsoft Connectivity Analyzer will attempt the Address Book test again with encryption.
    NSPI Status: 2147746050
    Elapsed Time: 825 ms.
         Testing the address book "Check Name" operation for user [email protected] against server [email protected].
         Check Name succeeded.
              Additional Details
         DisplayName: Test Exch1, LegDN: /o=DOMAIN/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=add423106fbb47d5bf237462f52b8dab-Test Exch1
    Elapsed Time: 433 ms.
         Testing the MAPI Referral service on the Exchange Server.
         The Referral service was tested successfully.
              Additional Details
         Elapsed Time: 1808 ms.
              Test Steps
              Attempting to ping the MAPI Referral Service endpoint with identity: [email protected]:6002.
         The endpoint was pinged successfully.
              Additional Details
         The endpoint responded in 953 ms.
    Elapsed Time: 949 ms.
         Attempting to perform referral for user /o=DOMAIN/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=add423106fbb47d5bf237462f52b8dab-Test Exch1 on server [email protected].
         We got the address book server successfully.
              Additional Details
         The server returned by the Referral service: [email protected]
    Elapsed Time: 858 ms.
         Testing the MAPI Address Book endpoint on the Exchange server.
         The address book endpoint was tested successfully.
              Additional Details
         Elapsed Time: 626 ms.
              Test Steps
              Attempting to ping the MAPI Address Book endpoint with identity: [email protected]:6004.
         The endpoint was pinged successfully.
              Additional Details
         The endpoint responded in 156 ms.
    Elapsed Time: 154 ms.
         Testing the address book "Check Name" operation for user [email protected] against server [email protected].
         Check Name succeeded.
              Additional Details
         DisplayName: Test Exch1, LegDN: /o=DOMAIN/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=add423106fbb47d5bf237462f52b8dab-Test Exch1
    Elapsed Time: 472 ms.
         Testing the MAPI Mail Store endpoint on the Exchange server.
         We successfully tested the Mail Store endpoint.
              Additional Details
         Elapsed Time: 555 ms.
              Test Steps
              Attempting to ping the MAPI Mail Store endpoint with identity: [email protected]:6001.
         The endpoint was pinged successfully.
              Additional Details
         The endpoint responded in 234 ms.
    Elapsed Time: 228 ms.
         Attempting to log on to the Mailbox.
         We were able to log on to the Mailbox.
              Additional Details
         Elapsed Time: 326 ms.

Maybe you are looking for

  • Data from a deleted datasource

    Hi guys, I've deleted a datasource and since all data loaded with this datasource seems to be deleted in my cube when I do a report on these. Nevertheless, the requests of these are still in the cube. Who can say me if the data have been really delet

  • Firefox 4 RC - 2nd Tab Group is deleted when closing and restarting

    This seemed to work at first when I first upgraded to Firefox 4 RC. Then later in the day when working with Panorama Groups, I found that the 2nd tab groups disappeared that I created once I quit my browser and reloaded it. This happen each time I do

  • The volume for "documents" cannot be found.

    i restarted my laptop today after getting the newest security update and found that every icon on my screen is gone except the "Macintosh HD" icon. i opened up the HD icon and tried to click on the Documents folder on the left, but the message "the v

  • Error deploying webService in 7.0, 'jarName is NULL'

    While trying to deploy a webservice in 7.0, I am getting the error: Application is not configured properly {jarName is NULL} I have used servicegen ant task to build my simple service consisting of two java classes (no EJB). Changed only 1 line from

  • PO not allowed beyond the target value of contract.

    Hi Forum, I have a Contract, when I create a PO with ref to the Contract, it should not allow the PO to be created beyond the target value of the Contract. Where should I make the configuration settings for this. Whenever the PO created beyond the ta