Exchange Server 2010 usage monitoring

Dears
   How we can monitor Exchange server 2010 usage like owa usage, mail sending, contact Adding and editing ...etc.
is exchange has tools to do that or i have to use system center if yes what version of system center is Enterprise or Standard?

Hi ,
Please check the below mentioned points
1.) For owa and rpc connections usage , you can make use of the mentioned script on below link.
http://mikepfeiffer.net/2011/04/determine-the-number-of-active-users-on-exchange-2010-client-access-servers-with-powershell/
2.)For tracing the total mails send and received by the individual users (i.e internal /external)you can make use of the below mentioned script 
https://gallery.technet.microsoft.com/scriptcenter/bb94b422-eb9e-4c53-a454-f7da6ddfb5d6
3.For contact adding and editing.I mean to track administrator related activities on exchange recipients ,You can make use of Exchange admin audit logging to track such kind of activities.But that will not tell you the count of total contacts that are in
exchange and it exposes only the changes which is done by administrator on the recipients available in exchange. 
http://www.msexchange.org/articles-tutorials/exchange-server-2010/compliance-policies-archiving/administrator-audit-logging-part1.html
Below is the link which will help you to get the Admin audit report via emails in HTML format.
http://mikepfeiffer.net/2010/08/administrator-audit-log-reports-in-html-format-exchange-2010-sp1/
Please feel free to reply me if anything is unclear
Thanks & Regards S.Nithyanandham

Similar Messages

  • SCOM 2012 R2 & Exchange Server 2010 SP3 - Mailbox services not monitored

    Having done everything depicted in Exchange Server 2010 MP I still have trouble with some Exchange services - they are in not monitored state (five days passed):
    Mailbox All Database Services - Default-First-Site-Name
    Mailbox Database Service - Management - test.local
    Mailbox Database Service - PublicFolders - test.local
    Mailbox Database Service - Users - test.local
    Mailbox Many Database Service - Default-First-Site-Name
    OfflineAddressBook Service - Default-First-Site-Name
    Why is this happening? Since monitoring exchange mailbox databases is one of the most important tasks SCOM should be doing I assume something wrong is going on here. However there are no errors or alerts in SCOM console nor in OpsMgr
    log on Exchange server itself.

    Hi There,
    Did you install the Microsoft Exchange monitoring correletion service while importing the Exchange 2010 management pack ?
    Does your MS have RMS Emulator role ? As many alerts in the Exchange 2010 MP are targetted to Root management server class.
    Also did you configure Test mailboxex and stuff post Exchange 2010 Import ?
    Did you analyse the Ops manager Event logs in the MS and Agent ? Can you post the critical and Warnign events here.
    Also is Agent proxy enabled ?
    Also is the Action account of the Agents System or Domain account ?
    Also refer: http://blogs.catapultsystems.com/jcowan/archive/2013/03/26/opsmgr-2012-and-2007-exchange-server-2010-monitoring-management-pack-how-to-perform-the-optional-configurations-for-synthetic-transactions-and-kerberos-authentication.aspx
    Gautam.75801

  • Exchange Server 2010 mailflow reporting using SCOM 2007

    Hi,
    We are using SCOM 2007R2 in our Organization and we are Monitoring Exchange server 2010.
    We are in need of reports for Mailflow statistics (send and receive)from Exchange server 2010 using SCOM 2007R2.
    Eg: Microsoft Exchange 2010 Server Reports Transport Platform Hourly server Statistics.
    By default reports available in SCOM for Exchange server will not fulfill our requirement.
    Earlier for Exchange server 2007 we are able to fetch the desired reports which is available by default.
    Eg:  Exchange 2007 SMTP Message Received
           Exchange 2007 SMTP Message Sent
    Is there any way to fetch the reports for Exchange server 2010 same as Exchange 2007 reports.
    Thanks

    Hi SonarPal,
    Please look at this post, hope it helps:
    https://social.technet.microsoft.com/Forums/en-US/ffdb8883-226f-410f-abde-bd75c4c88c4a/exchange-transport-reports-no-data?forum=operationsmanagerreporting
    Natalya
    ### If my post helped you, please take a moment to Vote as Helpful and\or Mark as an Answer

  • Free Busy takes over 30 seconds to retrieve on Outlook 2010 using Exchange Server 2010

    We have a small 100 user domain running Exchange server 2010 and outlook 2010 clients.  The issue is that Retrieving Free/Busy takes over 30 seconds.  
    So someone is trying to schedule a meeting has to wait Minutes see the Free/busy time for many users..  I have checked and all the users in question have published at least one month free busy time.
    It seems it would be much faster.  Anyone have this same experience and know of a way to speed it up?
    thanks in Advance
    David 

    Hi David,
    Does the issue happen in OWA? In Exchange 2010, the free/busy information is retreved by using Availability service (EWS url). Generally, if a user wants to view free/busy information when create a meeting, the http Availability service request
    would send to CAS server.
    Please check whether the usage in Exchange server is high when the slow free/busy information occurs. This reflect time would also be related to the network in your environment.
    Regards,
    Winnie Liang
    TechNet Community Support

  • Regarding MSExchange Active Manager perfmon counter for exchange server 2010 sp1

    Hi
    Instance for MSExchange Active Manager perfmon counter is not created on Exchange Server 2010 SP1 but for MSExchange Active Manager Client and MSExchange  Active Manager Server instances are created.
    Will any can tell me why i am not getting any instance for MSExchange  Active Manager  on Exchange Server 2010 SP1.
    Thanks
    Sandeep Gupta
    Sandeep Gupta

    We are getting the below error on HUB/CAS server past 4 days continuosly.
    Event ID- 106
    Source - MSExchange Common
    Description -
    Performance counter updating error. Counter name is Unique servers queried, category name is MSExchange Active Manager Client. Optional code: 3. Exception: The exception thrown is : System.InvalidOperationException: The requested Performance Counter is not
    a custom counter, it has to be initialized as ReadOnly. at System.Diagnostics.PerformanceCounter.Initialize() at System.Diagnostics.PerformanceCounter.set_RawValue(Int64 value) at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.set_RawValue(Int64 value)
    Last worker process info : System.ArgumentException: Process with an Id of 5264 is not running. at System.Diagnostics.Process.GetProcessById(Int32 processId, String machineName) at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.GetLastWorkerProcessInfo()
    Processes running while Performance counter failed to update: 984 svchost 2952 rotatelogs 2360 conhost 6296 WmiPrvSE 1372 NSClient++ 564 lsass 8036 powershell 2944 cmd 2352 cmd 1896 exfba 25748 conhost 7076 store 2936 rotatelogs 372 csrss 10024 fscvsswriter
    1552 rotatelogs 8436 MSExchangeTransport 2928 cmd 4304 msexchangerepl 1544 FSCMonitor 164 svchost 556 services 6264 beremote 2524 Exclaimer.Connectors.MailRules.ExchangeUpdateService 1108 bedbg 4492 FSCController 748 svchost 4964 WmiPrvSE 9972 svchost 4484
    MSExchangeMailboxReplication 1724 inetinfo 5872 MSExchangeTransportLogSearch 2116 cpqnimgt 34620 conhost 5660 MSExchangeThrottling 7432 FSCScheduledScanner 4720 WmiPrvSE 928 svchost 1852 WmiPrvSE 1516 FSCEventing 1980 SMSvcHost 11804 svchost 3876 Microsoft.Exchange.EdgeSyncSvc
    5252 Microsoft.Exchange.Search.ExSearch 10176 w3wp 1704 hpwmistor 9764 svchost 2684 Microsoft.Exchange.AntispamUpdateSvc 516 winlogon 10956 MonitoringHost 2088 svchost 2480 conhost 9852 FSEMailPickup 2280 cqmgstor 1884 cmd 1684 sysdown 1288 vcagent 672 svchost
    1088 svchost 8572 FSCTransportScanner 6404 w3wp 4236 FSCTransportScanner 11936 MonitoringHost 8568 conhost 2460 rotatelogs 4428 Microsoft.Exchange.RpcClientAccess.Service 880 svchost 4716 Microsoft.Exchange.Pop3 7376 FSCRealtimeScanner 480 svchost 8556 EdgeTransport
    4024 MsExchangeFDS 2248 cqmgserv 840 svchost 276 smss 1260 w3wp 9728 svchost 7328 FSCRealtimeScanner 3028 hpsmhd 4080 FSCConfigurationServer 34088 TrustedInstaller 8088 w3wp 1052 spoolsv 1248 cpqrcmc 4836 conhost 9320 w3wp 7544 taskeng 5376 Microsoft.Exchange.ServiceHost
    1632 svchost 1628 snmp 7536 FSCRealtimeScanner 836 FSCTransportScanner 1032 conhost 1228 cissesrv 8712 FSCTransportScanner 15700 cmd 436 wininit 828 LogonUI 1812 smhstart 2400 hpsmhd 428 csrss 21176 w3wp 13032 Microsoft.Exchange.Monitoring 6520 mad 4800 MSExchangeMailSubmission
    4360 Microsoft.Exchange.Pop3Service 8944 FSEContentScanner64 1932 msftesql 6324 w3wp 4216 cqmghost 572 lsm 8764 powershell 1592 HealthService 4152 MSExchangeMailboxAssistants 2304 Exclaimer.PolicyProcessingEngine.RemoteDeploymentService 9944 svchost 2572 Microsoft.Exchange.AddressBook.Service
    2492 cmd 1388 Exclaimer.PolicyProcessingEngine.ConfigurationService 1780 MSExchangeADTopologyService 4536 Microsoft.Exchange.ProtectedServiceHost 4 System 11844 msdtc 7488 FSCRealtimeScanner 7520 WmiPrvSE 0 Idle Performance Counters Layout information: FileMappingNotFoundException
    for category MSExchange Active Manager Client : Microsoft.Exchange.Diagnostics.FileMappingNotFoundException: Cound not open File mapping for name : Global\netfxcustomperfcounters.1.0msexchange active manager client at Microsoft.Exchange.Diagnostics.FileMapping.OpenFileMapping(String
    name, Boolean writable) at Microsoft.Exchange.Diagnostics.FileMapping..ctor(String name, Boolean writable) at Microsoft.Exchange.Diagnostics.PerformanceCounterMemoryMappedFile.Initialize(String fileMappingName, Boolean writable) at Microsoft.Exchange.Diagnostics.ExPerformanceCounter.GetAllInstancesLayout(String
    categoryName)
    Same error is coming for diffrent performance counter as well like ..MSExchange Throttling, MSExchange Middle-Tier Storage, MSExchange ResourceHealth.
    Could some one help me on the same.
    Above steps can be follow to avoid this error???
    Thanks in Advance.

  • Windows Server 2008 R2 Standard "Certificate Authority Service" / Exchange Server 2010 EMC not starting and no AD connectivity for authentication.

    Hello,
    I am a new IT Manager at this company and need assistance big time. Their environment looks as follows:
    Server 1. Domain Controller Server (Windows Server 2008 R2 Standard) running active directory.
    Server 2. Email Server (Windows Server 2008 R2 Standard) running Exchange Server 2010 .
    * Note. No back ups to work with aside from whats mentioned below.
    DC had a virus infection causing a lot of issues on the shared network drives 2 days ago locking up all the files with a crypto ransom virus. Running Avast suppressed the infection. Had to recover the file shares which luckily had a back up. 
    The issue is that the Exchange Server 2 post this lost connectivity with the AD Server 1. Exchange Server 2 when launching EMC could not launch the console stating the following:
    "No Exchange servers are available in any Active Directory sites. You can’t connect to remote
    Powershell on a computer that only has the Management Tools role installed."
    Shortly after I found that it is possible the EMC launcher was corrupt and needed to be reinstalled following another blog post. I deleted the exchange management console.msc  per instructions only to discover I couldnt relaunch it because there was
    no way how. So I copied another msc file that happened to be on the DC Server 1  back to Exchange Server 2 and got it to launch again. 
    Another post said that it might be an issue with the Domain Account for the Computer, so to delete it in the AD Server 1 only to find that rejoining it from Exchange Server 2 using Computer>Properties> Chage Settings > Change is greyed out because
    it is using the Certificate Authority Service.
    I tried manually re-adding the computer in AD and modeling permissions after another server in group settings but no go. After this I was unable to login to the Exchange Server 2 with domain accounts but only local admin, receiving the following Alert:
    "The Trust Relationship between this workstation and primary domain failed."
    I tried running the Power Shell tools on Exchange Server 2 to rejoing and to reset passwords for domain accounts as noted in some other blogs but no luck as the Server 2 could not make the connection with Server1 or other errors it kept spitting out.
    I also during the investigation found the DNS settings were all altered on both the Server 1 and Server 2 which I luckily was able to change back to original because of inventorying it in the beginning when I started. 
    I need help figuring out if I need to rejoin the Exchange Server 2 manually by disabling the Certificate Authority Service (or removing the CA as listed here:
    https://social.technet.microsoft.com/Forums/exchange/en-US/fb23deab-0a12-410d-946c-517d5aea7fae/windows-server-2008-r2-with-certificate-authority-service-to-rejoin-domain?forum=winserversecurity
    and getting exchange server to launch again. (Mind you I am relatively fresh to server managing) Please help E-Mail has been down for a whole day now!
    Marty

    I recommend that you open a ticket with Microsoft Support before you break things more.
    Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

  • All sub-folders in Mac Mail cannot synchronize with Exchange Server 2010

    Hi all,
    All sub-folders under Inbox in Mac Mail cannot be synchronized with Exchange Server 2010. There are 2GB messages size in Inbox folder and 500MB messages size under Inbox's sub-folders. All messages can be sent out and received and it can work in Outlook 2007 and Outlook 2010 normally. However, all messages in sub-folders cannot be synchronized (empty sub-folders).
    Does this problem relate to message synchronization order of Mac Mail with Exchange Server? Do all sub-folders messages be synchronized after synchronization complete of Inbox? The synchronization of sub-folders will not happen if the synchronization of Inbox does not complete, doesn't it?
    All messages synchronization is over internet. Can anybody help?
    Thanks a lot
    DT1640759

    Hi,
    1.please check the mailbox send and receive quota for exchange 2013 migrated mailbox.
    2.Please check the email attributes of the exchange 2013 migrated mailbox because it seems to be a problem with that particular mailbox.
    3.Then do the message tracking and that would be the only way to find the where the send messages has gone.
    4.Please check and confirm you have an enough space on the disk where exchange queue database is residing.
    I think I need to create a receive connector in the 2013 to receive from 2010 ?
    No need ,by design  exchange 2013 cas server default frontend receive connector will be having an
    entire ipv4 and ipv6 segment and anonymous connection is checked by default.
    I think I also need to create a send and receive connector for 2013 users to each other?
    No need , an intra organisation send connector and the default receive connectors in exchange will be used
    for internal mail flow between the exchange 2013 users.
    Please reply me if you have any queries .
    Regards
    S.Nithyanandham
    Thanks S.Nithyanandham

  • SBS 2003 to 2011 Migration - Exchange Server 2010 cannot be installed

    Hello,
    We have a Small Business Server 2003 server that we are trying to migrate to SBS 2011 using the out of the box migration process. After the install, the SBS console showed a couple installation issues - the big one turned out to be "Exchange Server
    2010 cannot be installed".
    Here is the end of 'ExchangeSetup.log' showing various error messages:
    [11/29/2014 23:00:07.0489] [2] Active Directory session settings for 'Get-ExchangeServer' are: View Entire Forest: 'True', Configuration Domain Controller: 'MB-MAINSERVER04.Contoso.local', Preferred Global Catalog: 'MB-MAINSERVER04.Contoso.local', Preferred Domain Controllers: '{ MB-MAINSERVER04.Contoso.local }'
    [11/29/2014 23:00:07.0490] [2] Beginning processing get-exchangeserver -Identity:'MB-MAINSERVER04' -DomainController:'MB-MAINSERVER04.Contoso.local' -ErrorAction:'SilentlyContinue'
    [11/29/2014 23:00:07.0506] [2] Searching objects "MB-MAINSERVER04" of type "Server" under the root "$null".
    [11/29/2014 23:00:07.0518] [2] Previous operation run on domain controller 'MB-MAINSERVER04.Contoso.local'.
    [11/29/2014 23:00:07.0518] [2] Previous operation run on domain controller 'MB-MAINSERVER04.Contoso.local'.
    [11/29/2014 23:00:07.0518] [2] Preparing to output objects. The maximum size of the result set is "unlimited".
    [11/29/2014 23:00:07.0522] [2] Unexpected Error
    [11/29/2014 23:00:07.0522] [2] The operation couldn't be performed because object 'MB-MAINSERVER04' couldn't be found on 'MB-MAINSERVER04.Contoso.local'.
    [11/29/2014 23:00:07.0523] [2] Ending processing get-exchangeserver
    [11/29/2014 23:00:07.0523] [1] Executing:
    if ($server -eq $null)
    new-exchangeserver -DomainController $RoleDomainController -Name $RoleNetBIOSName
    [11/29/2014 23:00:07.0545] [2] Active Directory session settings for 'New-ExchangeServer' are: View Entire Forest: 'True', Configuration Domain Controller: 'MB-MAINSERVER04.Contoso.local', Preferred Global Catalog: 'MB-MAINSERVER04.Contoso.local', Preferred Domain Controllers: '{ MB-MAINSERVER04.Contoso.local }'
    [11/29/2014 23:00:07.0545] [2] Beginning processing new-exchangeserver -DomainController:'MB-MAINSERVER04.Contoso.local' -Name:'MB-MAINSERVER04'
    [11/29/2014 23:00:07.0599] [2] [ERROR] Could not find the default Administrative Group 'Exchange Administrative Group (FYDIBOHF23SPDLT)'.
    [11/29/2014 23:00:07.0600] [2] Ending processing new-exchangeserver
    [11/29/2014 23:00:07.0607] [1] The following 1 error(s) occurred during task execution:
    [11/29/2014 23:00:07.0607] [1] 0. ErrorRecord: Could not find the default Administrative Group 'Exchange Administrative Group (FYDIBOHF23SPDLT)'.
    [11/29/2014 23:00:07.0607] [1] 0. ErrorRecord: Microsoft.Exchange.Data.Directory.SystemConfiguration.DefaultAdministrativeGroupNotFoundException: Could not find the default Administrative Group 'Exchange Administrative Group (FYDIBOHF23SPDLT)'.
    at Microsoft.Exchange.Data.Directory.SystemConfiguration.ADSystemConfigurationSession.GetAdministrativeGroup()
    at Microsoft.Exchange.Data.Directory.SystemConfiguration.ADSystemConfigurationSession.GetAdministrativeGroupId()
    at Microsoft.Exchange.Management.SystemConfigurationTasks.NewExchangeServer.PrepareDataObject()
    at Microsoft.Exchange.Configuration.Tasks.SetTaskBase`1.InternalValidate()
    at Microsoft.Exchange.Configuration.Tasks.Task.ProcessRecord()
    [11/29/2014 23:00:07.0609] [1] [ERROR] The following error was generated when "$error.Clear();
    if ($server -eq $null)
    new-exchangeserver -DomainController $RoleDomainController -Name $RoleNetBIOSName
    " was run: "Could not find the default Administrative Group 'Exchange Administrative Group (FYDIBOHF23SPDLT)'.".
    [11/29/2014 23:00:07.0609] [1] [ERROR] Could not find the default Administrative Group 'Exchange Administrative Group (FYDIBOHF23SPDLT)'.
    [11/29/2014 23:00:07.0609] [1] [ERROR-REFERENCE] Id=ProvisionServerComponent___84489810458648f5ac6e47811394a284 Component=EXCHANGE14:\Current\Release\Shared\Datacenter\Setup
    [11/29/2014 23:00:07.0610] [1] Setup is stopping now because of one or more critical errors.
    [11/29/2014 23:00:07.0610] [1] Finished executing component tasks.
    [11/29/2014 23:00:07.0618] [1] Ending processing Install-BridgeheadRole
    [11/29/2014 23:00:07.0626] [0] The Exchange Server setup operation didn't complete. More details can be found in ExchangeSetup.log located in the <SystemDrive>:\ExchangeSetupLogs folder.
    [11/29/2014 23:00:07.0633] [0] End of Setup
    [11/29/2014 23:00:07.0633] [0] **********************************************
    [11/29/2014 23:39:03.0429] [0] **********************************************
    [11/29/2014 23:39:03.0435] [0] Starting Microsoft Exchange Server 2010 Setup
    [11/29/2014 23:39:03.0435] [0] **********************************************
    [11/29/2014 23:39:03.0456] [0] Local Time Zone: (UTC-08:00) Pacific Time (US & Canada).
    [11/29/2014 23:39:03.0457] [0] Operating System version: Microsoft Windows NT 6.1.7600.0.
    [11/29/2014 23:39:03.0469] [0] Setup version: 14.1.438.0.
    [11/29/2014 23:39:03.0473] [0] Logged on user: Contoso2K3\Administrator.
    [11/29/2014 23:39:06.0763] [0] Command Line Parameter Name='mode', Value='Install'.
    [11/29/2014 23:39:06.0776] [0] ExSetupUI was started with the following command: '-mode:install'.
    [11/29/2014 23:39:07.0413] [0] Setup is choosing the domain controller to use
    [11/29/2014 23:39:07.0730] [0] Setup is choosing a local domain controller...
    [11/29/2014 23:39:08.0459] [0] Setup has chosen the local domain controller MB-MAINSERVER04.Contoso.local for initial queries
    [11/29/2014 23:39:08.0747] [0] PrepareAD has been run, and has replicated to this domain controller; so setup will use MB-MAINSERVER04.Contoso.local
    [11/29/2014 23:39:08.0748] [0] Setup is choosing a global catalog...
    [11/29/2014 23:39:08.0758] [0] Setup has chosen the global catalog server MB-MAINSERVER04.Contoso.local.
    [11/29/2014 23:39:08.0819] [0] Setup will use the domain controller 'MB-MAINSERVER04.Contoso.local'.
    [11/29/2014 23:39:08.0820] [0] Setup will use the global catalog 'MB-MAINSERVER04.Contoso.local'.
    [11/29/2014 23:39:08.0823] [0] Exchange configuration container for the organization is 'CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=Contoso,DC=local'.
    [11/29/2014 23:39:08.0830] [0] Exchange organization container for the organization is 'CN=Contoso2K3,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=Contoso,DC=local'.
    [11/29/2014 23:39:08.0867] [0] Setup will search for an Exchange Server object for the local machine with name 'MB-MAINSERVER04'.
    [11/29/2014 23:39:08.0914] [0] No Exchange Server with identity 'MB-MAINSERVER04' was found.
    [11/29/2014 23:39:09.0061] [0] The following roles have been unpacked: BridgeheadRole ClientAccessRole MailboxRole AdminToolsRole
    [11/29/2014 23:39:09.0062] [0] The following datacenter roles are unpacked:
    [11/29/2014 23:39:09.0064] [0] The following roles are installed: AdminToolsRole
    [11/29/2014 23:39:09.0066] [0] The local server has some Exchange files installed.
    [11/29/2014 23:39:09.0320] [0] Setup will use the path 'C:\Program Files\Windows Small Business Server\Bin\CMPNENTS\EXCHANGE14_SP1' for installing Exchange.
    [11/29/2014 23:39:09.0332] [0] The installation mode is set to: 'Install'.
    [11/29/2014 23:39:13.0558] [0] An Exchange organization with name 'Contoso2K3' was found in this forest.
    [11/29/2014 23:39:13.0560] [0] Active Directory Initialization status : 'True'.
    [11/29/2014 23:39:13.0561] [0] Schema Update Required Status : 'False'.
    [11/29/2014 23:39:13.0562] [0] Organization Configuration Update Required Status : 'False'.
    [11/29/2014 23:39:13.0563] [0] Domain Configuration Update Required Status : 'False'.
    [11/29/2014 23:39:13.0564] [0] The locally installed version is 14.1.218.15.
    [11/29/2014 23:39:13.0565] [0] Exchange Installation Directory : 'C:\Program Files\Microsoft\Exchange Server\V14'.
    [11/29/2014 23:39:13.0920] [0] Applying default role selection state
    [11/29/2014 23:39:13.0961] [0] Setup is determining what organization-level operations to perform.
    [11/29/2014 23:39:13.0962] [0] Because the value was specified, setup is setting the argument OrganizationName to the value Contoso2K3.
    [11/29/2014 23:39:13.0963] [0] Setup will run from path 'C:\Program Files\Microsoft\Exchange Server\V14\'.
    [11/29/2014 23:39:13.0972] [0] InstallModeDataHandler has 0 DataHandlers
    [11/29/2014 23:39:13.0972] [0] RootDataHandler has 1 DataHandlers
    [11/29/2014 23:39:15.0491] [0] Setup encountered an exception when trying to access the setup state file: Could not find file 'C:\ExchangeSetupLogs\exchangeInstallState.xml'.
    [11/29/2014 23:39:26.0117] [0] End of Setup
    [11/29/2014 23:39:26.0117] [0] **********************************************
    I should add that the source server's AD configuration might not be perfect due to this being the second attempt at a SBS 2011 migration install.
    I'd be grateful for any help I can get on this as SBS migration has been plauged with multiple setbacks already. I really need to get this done! ;)
    Thanks,
    Voon

    Thank you Larry and Al for your replies.
    I used the 'official' migration
    guide plus this page (http://www.techieshelp.com/step-by-step-guide-to-migrating-to-sbs-2011/)
    as my migration references. The SBS migration prep tool gave no errors on the source server when I ran it.
    I have a full system drive image plus a a system state backup from before migration. Though I am very loathed to rollback the migration and attempt a new one - again. I will do some searching to see if I can resolve the Exchange server problem and continue
    the migration/installation. If not, then its a system state restore for me. One of Al's links had a resource for doing a thorough check of AD - which something I'd run if I have to another migration attempt.
    I am also really tempted to open up a paid MS support ticket for them to help me fix this problem. :)

  • How to configure Mailbox Read-Only access for Mailbox's owner on Exchange Server 2010?

    I have to configure the Exchange Server 2010's mailbox to only grant Read-Only Access on the mailbox's owners.  So they can only allowed to read their messages and cannot modify or remove them.  Are there any references or methods to do?

    Hi,alexchy8
    We can make use of 2 PowerShell commands to achieve this goal.
    Add-MailboxPermission and Add-MailboxFolderPermission.
    Execute the Add-MailboxPermission command to delegate the read permission at mailbox level.
    Execute the Add-MailboxFolderPermission command to delegate the required permissions on specific folders inside the mailbox.
    You can read the following article as reference:
    http://www.exchangedictionary.com/articles/assign-read-only-mailbox-permission-on-exchange-2010-2013-powershell
    Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety,
    or suitability of any software or information found there. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.
    Best Regards.

  • When sending e-mail messages to a mail-enabled public folder that have been replicated from old Exchange Server 2000/2003/2007, Exchange Server 2010 environment mails are rejected with NDR.

    Hi, I would like to share with you issue that I’ve solved regarding mail-enabled PF that migrated from Exchange 2000/2003/2007 to 2010, I’ve searched & contacted my MVP leader – there’s no official KB regarding this issue right
    now, so I’m posting here in order to share this among others.
    Note: There’s article(s) that talked about PF replication from Exch2000/2003/2007 to 2010 – this is the same issue as well.
    Symptoms
    E-mail messages that been sent to mail-enabled public folder in Exchange Server 2010 environment rejected with the following NDR:
    “#< #5.2.0 smtp;554 5.2.0 STOREDRV.Deliver.Exception:ObjectNotFoundException; Failed to process message due to a permanent exception with message The Active Directory user wasn’t found. ObjectNotFoundException: The Active Directory
    user wasn’t found.> #SMTP#”
    Sometimes Exchange Server 2010 is documented as well Event ID 1020 on the Event Viewer with this information:
    “Log Name: Application
    Source: MSExchange Store Driver
    Event ID: 1020
    Level: Error
    Description:
    The store driver couldn’t deliver the public folder replication message "Hierarchy ([email protected])" because the following error occurred: The Active Directory user wasn't found.”
    Cause
    In an environment where Microsoft Exchange Server 2000 or Microsoft Exchange Server 2003 previously existed, and all those servers have been removed, there is a chance that an Administrative Group (First Administrative Group or another custom Administrative
    Group) remains with a Servers container, but no servers inside it.
    During replication, when the Exchange 2010 Store Driver sees the empty Servers container in Active Directory, it's expecting a System Attendant object inside the container and when it is not found the error occurs.
    Resolution
    To work around the issue, delete the empty Servers container. This can't be done through Exchange System Manager. Use the ADSI Edit tool to remove it using the following steps:
    Warning If you use the ADSI Edit snap-in, the LDP utility, or any other LDAP version 3 client, and you incorrectly modify the attributes of Active Directory objects, you can cause serious problems. These problems may require you to reinstall Microsoft Windows
    2003 Server, Microsoft Windows Server 2008, Microsoft Exchange 2010 Server or both Windows and Exchange. Microsoft cannot guarantee that problems that occur if you incorrectly modify Active Directory object attributes can be solved. Modify these attributes
    at your own risk.
    1.      
    Start the ADSI Edit MMC Snap-in. Click Start, then
    Run, and type adsiedit.msc, and then click OK.
    2.      
    Connect & Expand the Configuration Container [YourServer.DNSDomainName.com], and then expand
    CN=Configuration,DC=DNSDomainName,DC=com.
    3.      
    Expand CN=Services, and then CN=Microsoft Exchange, and then expand
    CN=YourOrganizationName.
    4.      
    You will see an empty Administrative Group. Expand the
    CN=YourAdministrativeGroupName.
    5.      
    Expand CN=Servers.
    6.      
    Verify there are no server objects listed under the
    CN=Servers container.
    7.      
    Right click on the empty CN=Servers container and choose
    Delete.
    8.      
    Verify the modification, and try to send again the E-mail to the mail-enabled public folder.
    Applies to
    Exchange Server 2010, Standard Edition
    Exchange Server 2010, Enterprise Edition
    Netanel Ben-Shushan, MCSA/E, MCTS, MCITP, Windows Expert-IT Pro MVP. IT Consultant & Trainer | Website (Hebrew): http://www.ben-shushan.net | IT Services: http://www.ben-shushan.net/services | Weblog (Hebrew): http://blogs.microsoft.co.il/blogs/netanelb
    | E-mail: [email protected]

    Sounds like you are looking in the wrong Administrative Group container which is why you are seeing your Exchange 2010 servers in there.
    When you install Exchange 2003 only you will see a container named by default as "CN=First Administrative Group" container. But this could be named anything if you changed the Organization Name on the installation when you installed the first
    Exchange 2003 server into the domain/forest. 
    You will notice that when you install Exchange 2010 part of the AD setup is to create a new configuration container and is named by default "CN=First Administrative Group (FYDIBOHF23SPDLT)".
    So it sounds like you are not looking in the right location within ADSIEdit. 
    You may find the following article also helpful for this issue which is the same resolution:
    http://blogs.technet.com/b/sbs/archive/2012/05/17/empty-cn-servers-container-causing-issues-with-public-folders-on-small-business-server-2011.aspx
    I recommend though that you ensure your Exchange 2003 servers are fully uninstalled or no longer present in your environment before you go deleting the Servers container though.. The following Microsoft article will help with this:
    http://technet.microsoft.com/en-gb/library/gg576862(v=exchg.141).aspx

  • How to install Exchange Server 2010 with the name of my existing Domain Controller.

    I have my Primary domain Controller as abc.com in 2008 r2 standard. abc.com is registered. I want to set up Fresh Exchange Server 2010 sp2 with the name of the same
    abc.com domain name. Please guide me the steps how to do that. Waiting for your kind response. :)

    Hi,
    From you description, you want to install an Exchange server 2010 in the abc.com. When you set up your Exchange, Exchange need to join in a domain. You just need to specify the domain to abc.com.
    What's more, here is a helpful blog about Exchange 2010 installation for your reference.
    HOWTO Install Exchange 2010 - Step by Step
    http://blogs.technet.com/b/ferris/archive/2010/03/05/howto-install-exchange-2010-step-by-step.aspx
    Hope it helps.
    Best regards,
    Amy
    Amy Wang
    TechNet Community Support

  • Cannot install exchange server 2010 without small business server 2011

    we purchased Windows Small Business server 2011 for one of our servers and installed the software and setup exchange server for the office.   We had some 3rd party software that would not work with small business server so we had to install windows
    2008 r2 server.  we still need exchange server 2010.  Is there anyway to install without small business server?  When I entered the key in exchange server for the small business server it is saying that it is an invalid key.  We have a
    genuine version of windows small business server.  is it all or nothing for the software.  Thanks 

    SBS is indeed all or nothing. Breaking apart the individual components is not allowed. That includes exchange. If you want exchange without SBS, you'll need to buy exchange separately and exchange CALs. If you only have SBS CALs and aren't going to run
    SBS, you'll need Windows CALs as well.

  • How do I setup Address Book to view shared contacts on Exchange Server 2010?

    At work we have MS Exchange Server 2010.  I recently switched from Entourage to native OSX Lion apps Mail, iCal and Address Book.  Mail and iCal work fine so far with Exchange (IE. I can add delegates, see their calendars, etc.) but when using Address Book, I can only see my contacts.  In Entourage I was able to search other user's contacts and copy them to mine if I desired.  Is this not possible with Address Book?

    Are you sure you did that right ... because I did a File/Backup Address Book, and the file named included the date. I then copied the file through our Airport network from the Powerbook to a new iMac. The opening Address Book on the iMac, I did a File/Revert to Address Book Backup, which allows you to choose the file. Now the iMac had the same Address Book file as the Powerbook. This looks to me to be the same thing you are trying to do.

  • Send As, Send on Behalf and Full Access for Exchange server 2010/2013

    [This FAQ contains 2 parts]
    Testing and watching the behavior of Send As, Send On Behalf and Full Access permission.
    Common issue and Troubleshooting on the three permission.
    [Testing and Watching]
    Based on following blog, I decide to test on my lab:
    Full Mailbox Access Rights + Send On Behalf = Send As ?
    http://blogs.technet.com/b/ehlro/archive/2012/04/06/full-mailbox-access-rights-send-on-behalf-send-as.aspx
    Description on my lab and test:
    Exchange 2010 + Outlook 2010
    Exchange 2013 + Outlook 2013
    Senders: A01, A02, … , A07, A08
    Recipient: A09
    A01 grand permission to other senders.
    Two methods:
    a. Use A0x’s credential configure A01’s profile, then send From both A01 and A0x via Outlook. Watching result in A09’s Inbox and Sent Items which has message copy left.
    b. Use A0x’s credential configure A0x’s profile, then send From both A01 and A0x via Outlook. Watching result in A09’s Inbox and Sent Items which has message copy left.
    Result as following forms:
    1. Exchange 2010 + Outlook 2010 / Exchange 2013 + Outlook 2013
    Using A0x’s credential configure A01’s mailbox, then send From both A01 and A0x
    To A09.
    2. Exchange 2010 + Outlook 2010 / Exchange 2013 + Outlook 2013
    Using A0x’s credential configure A0x’s mailbox, then send From both A01 and A0x
    To A09.
    [Common Issue]
    1. [Issue]
    Exchange 2010 + Outlook 2010. A01 grand A03 Send As permission. However A03 can’t send as A01 to A09 and get NDR:
    You can’t send a message on behalf of this user unless you have permission to do so. Please make sure you’re sending on behalf of the correct sender, or request the necessary permission. If the problem continues, please contact your helpdesk.
    Details as following pic:
    [Troubleshooting]
    1) Based on the NDR, it seems a permission issue. Check Send As permission, however the Send As permission configured correctly. Pic as below:
    2) ince the Send As permission configured correctly, it seems the permission hasn’t been replicated. Try to restart Microsoft Exchange Information Store service. It works.
    Note: The Send As permission isn’t granted until after replication has occurred. Replication times depend on your Exchange and network configuration. To grant the permission immediately, stop and then restart the Microsoft Exchange Information
    Store service.
    2. [Issue]
    Exchange 2013 + Outlook 2013. A01 grand A03 Send As permission. However A03 can’t send as A01 to A09 and get NDR:
    Your message did not reach some or all of the intended recipients.
    Subject: xxx
    Sent: xx/xx/2014 8:20 AM
    The following recipient(s) cannot be reached: A09
    This message could not be sent. Try sending the message again later, or contact your network administrator. Error is [0x80070005-00000000-00000000].
    Details as below:
    [Troubleshooting]
    1) Also check the Send As permission configuration first.
    2) Then try to use A03 send as A01 to A09 via OWA. If OWA works well, it seems and issue on the Outlook client side.
    3) This behavior may occur if the OAB in Outlook isn’t updated. Try to download OAB manually.
    4) If doesn’t work, please close Outlook and try to delete all the OAB folder on your computer. The path of OAB folder in Win7, Win8 as below:
    \Users\<UserName>\AppData\Local\Microsoft\Outlook\Offline Address Books
    5) Restart Outlook.
    Note: Be aware that you cannot send e-mail messages on behalf of a mailbox if the mailbox is hidden from address list. When sending a message, Exchange requires that e-mail address is resolved in the
    From field.
    3. [Issue]
    Exchange 2010. A01 grant A0x “Send As” or “Send on Behalf” permission. A0x send as/ send on behalf of A01. The message is only copied to the Sent Items folder in A0x’s mailbox (same as the result of my test). Also cannot configure Exchange 2010 so that the
    message is copied to the Sent Items folder of both A01 and A0x.
    [Troubleshooting]
    This issue occurs because Exchange server 2010 was designed to copy message to the Sent Items folder of the sender only. This issue can be solved by installing Exchange 2010 SP2 UR4. More details in the following KB:
    Messages that are sent by using the "Send As" and "Send on behalf" permissions are copied only to the Sent Items folder of the sender in an Exchange Server 2010 environment
    http://support.microsoft.com/kb/2632409/en-us
    Please click to vote if the post helps you. This can be beneficial to other community members reading the thread.

    Nice guide Mavis, I recently explored the same topic. Few things you might want to add is the type of connectivity (Cached vs Online will produce different results) and to expand further on the methods of adding the other mailbox in Outlook (additional mailbox
    vs additional account defaults to different methods). Check the screenshot:
    And please post this somewhere more visible, like blog/wiki page.

  • Exchange Server 2010: Undeliverable Message

    Dear All,
    We are using exchange server 2010 to send a email to a client, however, we got this message back. How can i solve this problem?
    Thanks for your attention and help!
    次の受信者またはグループへの配信に失敗しました:
    [email protected] 受信者の電子メール プロバイダーによって拒否されたため、メッセージを配信できませんでした。
    メッセージは次の組織に拒否されました。BL2FFO11FD039.mail.protection.outlook.com。
    管理者向けの診断情報:
    生成サーバー: xxxx.com
    [email protected] BL2FFO11FD039.mail.protection.outlook.com #<BL2FFO11FD039.mail.protection.outlook.com #5.7.0 smtp;550 5.7.0 Relay Access Denied> #SMTP#
    元のメッセージ ヘッダー:
    Received: from na01-by2-obe.outbound.protection.outlook.com (207.46.163.241)
     by exch.xxxx.com (192.168.10.32) with Microsoft SMTP Server (TLS)
     id 14.3.210.2; Sun, 19 Oct 2014 22:36:47 -0700
    Received: from BN1AFFO11FD049.protection.gbl (10.58.52.31) by
     BN1AFFO11HUB044.protection.gbl (10.58.52.155) with Microsoft SMTP Server
     (TLS) id 15.0.1049.20; Mon, 20 Oct 2014 05:36:44 +0000
    Received: from mgcserv4.magsaysay.com.ph (203.167.92.249) by
     BN1AFFO11FD049.mail.protection.outlook.com (10.58.53.64) with Microsoft SMTP
     Server id 15.0.1049.20 via Frontend Transport; Mon, 20 Oct 2014 05:36:43
     +0000
    Received: from Crystal ([203.167.92.232])          by
     mgcserv4.magsaysay.com.ph (Lotus Domino Release 8.5.3)          with ESMTP id
     2014102013364607-10992 ;          Mon, 20 Oct 2014 13:36:46 +0800 
    X-TM-IMSS-Message-ID: <[email protected]>
    Received: from na01-bl2-obe.outbound.protection.outlook.com ([65.55.169.54])
     by magsaysay.com.ph ([203.167.92.232]) with ESMTP (TREND IMSS SMTP Service
     7.0; TLS: TLSv1/SSLv3,256bits,AES256-SHA) id 26975997000186d5 ; Mon, 20 Oct
     2014 13:40:58 +0800
    Received: from BL2FFO11FD041.protection.gbl (10.173.160.33) by
     BL2FFO11HUB022.protection.gbl (10.173.161.46) with Microsoft SMTP Server
     (TLS) id 15.0.1049.20; Mon, 20 Oct 2014 05:36:36 +0000
    Received: from mail.xxxx.com (216.81.51.170) by
     BL2FFO11FD041.mail.protection.outlook.com (10.173.161.137) with Microsoft
     SMTP Server (TLS) id 15.0.1039.16 via Frontend Transport; Mon, 20 Oct 2014
     05:36:36 +0000
    Received: from na01-by2-obe.outbound.protection.outlook.com (207.46.163.236)
     by exch.xxxx.com (192.168.10.32) with Microsoft SMTP Server (TLS)
     id 14.3.210.2; Sun, 19 Oct 2014 22:36:28 -0700
    Received: from BY2FFO11FD056.protection.gbl (10.1.14.33) by
     BY2FFO11HUB055.protection.gbl (10.1.14.244) with Microsoft SMTP Server (TLS)
     id 15.0.1039.16; Mon, 20 Oct 2014 05:36:15 +0000
    Received: from mailgate.zzz.com (14.16.28.51) by
     BY2FFO11FD056.mail.protection.outlook.com (10.1.15.193) with Microsoft SMTP
     Server id 15.0.1049.20 via Frontend Transport; Mon, 20 Oct 2014 05:36:13
     +0000
    X-AuditID: c0a81e07-b7f5e6d000000b4e-4d-54449f4b6588
    Received: from UNER2.zzz.com (unr2.zzz.com
     [192.168.30.13])      by mailgate.zzz.com (Symantec Messaging Gateway) with
     SMTP id CA.40.02894.B4F94445; Mon, 20 Oct 2014 13:36:11 +0800 (HKT)
    Received: from UN2.zzz.com ([::1]) by UNR2.zzz.com
     ([::1]) with mapi id 14.01.0438.000; Mon, 20 Oct 2014 13:36:11 +0800
    From: Yukihiro <[email protected]>
    To: Simonu <[email protected]>, Charles
            <[email protected]>
    CC: Miln <[email protected]>, FSA
            <[email protected]>
    Subject: Re: unia s maual / MV Kett Iand
    Thread-Topic: unaa sh ml / MVlettsland
    Thread-Index: Ac/sEV9D2LsdkU5fRkW0Rd1v4PsvSQAFlzIA
    Date: Mon, 20 Oct 2014 05:36:10 +0000
    Message-ID: <D06AC01C.21F27%[email protected]>
    References: <[email protected]>
    In-Reply-To: <[email protected]>
    Accept-Language: en-US
    X-MS-Has-Attach:
    X-MS-TNEF-Correlator:
    user-agent: Microsoft-MacOutlook/14.4.2.140509
    x-originating-ip: [192.168.30.123]
    MIME-Version: 1.0
    X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprJIsWRmVeSWpSXmKPExsVyYIUcr673fJcQg8bHChbzDrexW/R3vGG2
            OPK31GLjrinMDiwePbO6WAIYo7hsUlJzMstSi/TtErgy/my9w1Zw2LJi74lOxgbGd+ZdjJwc
            EgImEq27r7NA2GISF+6tZ+ti5OIQErjIKHF27jdmCGcCo8SpVw3MIFVsAtoS21rusILYIgKR
            En8nzgKzmQXiJL7sPAc2SVjAWOLni0tsEDUmEvNOdzNC2EYSp55dZgKxWQRUJa5unwBm8wro
            SVzdtgNsvpBAhETH9lawOZxA808+PwxmMwJd9/3UGiaIXeISlyYvYoO4WkBiyZ7zzBC2qMTL
            x//A7hEFmtnc9YYRIq4kcfbZAaA5HEC9wRJ3mzgg1gpKnJz5hGUCo9gsJFNnIVTNQlIFEdaU
            WL9LH6JaUWJK90N2CFtDonXOXCjbWuJq40IWZDULGDlWMQrlJmbmGOqV5mXqJhZnJuol5+du
            YoREJ/sOxg9NlocYBTgYlXh4pzi5hAixJpYVV+YeYpTgYFYS4f2XARTiTUmsrEotyo8vKs1J
            LT7EyMTBKdXAKPV7/zEX5dgtO6cd8N8764+UCO+vDPaVj5LWF051+GIx3/pf/dHiA0Gn+Lia
            by2Se/tyVqhMYGzs1CpNAcut2bfuLIhUOqbbIDv7buL74s/XWGIu27vcYoi+dJ9BSzA9WNnH
            h1NVbn+SgEDAhsL6Cyvs48Ja+1InV76xt515//fJOSLapX/uKbEUZyQaajEXFScCAFed/I2s
            AgAA
    Return-Path: [email protected]
    X-EOPAttributedMessage: 2
    X-Forefront-Antispam-Report-Untrusted: CIP:14.1.28.51;CTRY:HK;IPV:NLI;EFV:NLI;SFV:NSPM;SFS:(428002)(189002)(66654002)(199003)(252514010)(76176999)(21056001)(71186001)(31966008)(106466001)(81156004)(77096002)(95666004)(54356999)(105586002)(4396001)(50986999)(15975445006)(86362001)(83506001)(107046002)(84326002)(19617315012)(36756003)(85852003)(53416004)(92726001)(15974865002)(19580395003)(19580405001)(44976005)(101416001)(16236675004)(92566001)(87836001)(85306004)(99396003)(2656002)(46102003)(120916001)(15202345003)(20776003)(30436002)(512874002);DIR:INB;SFP:;SCL:1;SRVR:BY2FFO11HUB055;H:mailgate.zzzz.com;FPR:;MLV:sfv;PTR:014168051.static.ctinets.com;MX:1;A:0;LANG:en;
    X-Exchange-Antispam-Report-Test: UriScan:;UriScan:;UriScan:;
    Received-SPF: None (protection.outlook.com: zzz.com does not designate
     permitted sender hosts)
    Authentication-Results: spf=none (sender IP is 203.167.92.249)
     [email protected]
    X-Auto-Response-Suppress: DR, OOF, AutoReply
    X-Matching-Connectors: 130582569966280204;(42405700-fa69-4020-a9c4-08d0e394d333);()
    X-Forefront-Antispam-Report-Untrusted: CIP:216.81.51.170;CTRY:CA;IPV:NLI;EFV:NLI;SFV:NSPM;SFS:(10009020)(428002)(199003)(66654002)(252514010)(189002)(81156004)(106466001)(76176999)(54356999)(36756003)(77096002)(101416001)(53416004)(50986999)(105586002)(95666004)(31966008)(46102003)(20776003)(30436002)(19580395003)(4396001)(44976005)(19580405001)(16236675004)(6806004)(21056001)(71186001)(15974865002)(15202345003)(99396003)(84326002)(120916001)(15975445006)(83506001)(92726001)(92566001)(85852003)(86362001)(2656002)(87936001)(85306004)(107046002)(512874002)(19617315012);DIR:OUT;SFP:1101;SCL:1;SRVR:BL2FFO11HUB022;H:mail.xxx.com;FPR:;MLV:sfv;PTR:216.81.51.170.epikip.net;A:0;MX:1;LANG:en;
    X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:;SRVR:BL2FFO11HUB022;UriScan:;
    X-Forefront-PRVS: 03706074BC
    X-MIMETrack: Itemize by SMTP Server on mgcserv4/mgc(Release 8.5.3|September 15, 2011) at
     10/20/2014 01:36:46 PM,
            Serialize by Router on mgcserv4/mgc(Release 8.5.3|September 15, 2011) at 10/20/2014
     01:36:47 PM,
            Serialize complete at 10/20/2014 01:36:47 PM
    X-TNEFEvaluated: 1
    Content-Type: multipart/alternative;
            boundary="_000_D06AC01C21F27hzzzcom_"
    Content-Language: ja-JP
    X-Forefront-Antispam-Report: CIP:203.167.92.249;CTRY:PH;IPV:NLI;EFV:NLI;SFV:NSPM;SFS:(428002)(252514010)(189002)(66654002)(199003)(76176999)(54356999)(86362001)(15974865002)(50986999)(85852003)(92566001)(92726001)(19617315012)(512874002)(46102003)(85306004)(97736003)(99396003)(120916001)(33186001)(53416004)(44976005)(105586002)(19580405001)(106466001)(16236675004)(77096002)(81156004)(19580395003)(95666004)(31966008)(71186001)(107046002)(21056001)(101416001)(15202345003)(84676001)(68736004)(30436002)(87836001)(2656002)(20776003)(4396001)(6806004)(84326002)(83506001)(15975445006)(36756003)(72026002);DIR:INB;SFP:;SCL:1;SRVR:BN1AFFO11HUB044;H:mgcserv4.magsaysay.com.ph;FPR:;MLV:sfv;PTR:ErrorRetry;MX:1;A:0;LANG:en;
    X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:;SRVR:BN1AFFO11HUB044;

    Hi Shiloh,
    According to your description, my understanding is that you send a message to external user(@xxx.com) fail. 
    Before going further, I'd like to ask the following question to narrow down the issue:
    1. Could you send message to any other external user except xxx.com? like google.com,outlook.com.
    2. Try to disable or bypass Transport Scanning in Forefront Protection 2010 and check if any helps.
    You can refer to the following article to disable or bypass FPE:
    http://social.technet.microsoft.com/wiki/contents/articles/407.how-to-disable-or-bypass-transport-scanning-in-forefront-protection-2010-for-exchange-server-fpe.aspx
    Best regards,
    Niko Cheng
    TechNet Community Support

Maybe you are looking for