SMTP Authentication in Exchange 2013 multi tenant

I have configure a multi tenant environment. local domain is scurenet.local and i have host 3 different email domains like
abcd.com efg.com and xyz.com. now how its possible to create 3 mailboxes of same login in 3 different domains like [email protected] [email protected] [email protected] also
want to authenticate with there emailIDs and that is main issue. i can create 3 different logins like john1 john2 and john3 in AD and manually add smtp like [email protected] etc.
but issue is how i authenticate users with SMTP IDs so john1 can login using [email protected] and
password john2 use [email protected] as
login id and so on.

Hi,
I think you can try creating mailboxes for the three users and assign the full access permissions to each other.
Thanks,
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]
Simon Wu
TechNet Community Support

Similar Messages

Exchange 2013 Multi-tenant contact administration

Hi everybody!
Searched high and low, but couldn't find an answer.
I have deployed multi-tenancy Exchange as a service provider, and will look into self service portals later.
I'm currently developing all the powershell scripts needed to manage the multi tenant environment.
Question arrises:
How do you handle contacts in a multi-tenant environment?
Since a SMTP address can only be used once in an Exchange Organization, what if 2 tenants need the same contact?
- Use customattributes and filter on that? Than what if I want to use the multi-tenant AD for different purposes later?
- Use custom DACLs on the OU or contacts?
- Any other ideas?
Of course I started with
http://blogs.technet.com/b/exchange/archive/2013/02/20/hosting-and-multi-tenancy-guidance-for-exchange-server-2013-now-available.aspx but there's no mention of this issue.
Thank you for any input regarding this issue.
There's a new blog in town: http://msfreaks.wordpress.com

I would advise against "sharing" contacts, as each tenants requirements may be different. Meaning each may want to see different values for various attributes. You may want to stand up an ADLDS instance for each tenant which will hold their contacts independently
of your current Active Directory Forest that houses Exchange. This way, your Exchange Organization remains pristine, no never-ending queues/NDRs for ambiguous SMTP addresses, and each tenant can manage their own contacts without interfering with each
other. Also, I would look into Forefront Identity Manager (FIM).
Woody Colling, MCITP Exchange 2010 --The incentive for the experts to answer posts is to get their replies marked as helpful, or as the answer to our questions, help them help us, mark posts accordingly--

Lync 2013 Multi-tenant Hosting Pack third-party solutions available for features listed as "Via Thirdparty"

Hi,
Who are all the third party vendors that can integrate with Lync 2013 Multi-tenant hosting pack V2 features that are supported Via 3rd party.
1) Call park
2) Outgoing DID manipulation
3) E-911
3) Dialplans & Policies
4) Support for Analog devices (e.g. FAX)
5) Response groups
6) Network QoS - DSCP
7) Phone number management
8) IM/P & Voice with Skype.
9)Inteoperability with on-premises video conferencing systems
Regards,
SR

Hi,
Base on my understanding, as it is the Mutli-Tenant environment, in internal DNS server, there is no need to add the DNS A record
lyncdiscoverinternal. However, you can try to add the DNS record in internal DNS server to test the issue as well.
Also, please make sure you have updated both Lync Server 2013 and Exchange 2013 to the latest version. If not, update it and then test again.
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

Basic Authentication in Exchange 2013

Dear All,
I am facing issue regarding basic authentication in exchange 2013 I run all the command and from Server setting I set the outlook anywhere on Basic Authentication but when I configure outlook client after successfully run the wizard the setting
of outlook in Exchange proxy setting its show NTLM. I run all the below commands and done with the srver setting but outlook will configured only on NTLM. Externally and Internally both are same through autodiscover.
Set-OutlookAnywhere -Identity: "servername\rpc (Default Web Site)" -ExternalClientAuthenticationMethod Basic
Set-OutlookAnywhere -Identity "servername\rpc (Default Web Site)" -SSLOffloading $false
Set-OutlookAnywhere -Identity "servername\rpc (Default Web Site)" -IISAuthenticationMethods Basic
Set-OutlookAnywhere -Identity "servername\rpc (Default Web Site)" -IISAuthenticationMethods Basic,NTLM
I just need to confrim that there is no more Basic Authentication support in Exchange 2013 or is there any work around ?
Danish Khan DK

Hi Danish,
Basic authentication is supported on Exchange 2013, you can use the following cmdlet to set it.
Set-OutlookAnywhere -Identity "servername\Rpc (Default Web Site)" -InternalClientAuthenticationMethod Basic
What's more, it is recommended to set the IISAuthenticationMethods to: {Basic, Ntlm, Negotiate}.
For your reference:
Set-OutlookAnywhere
https://technet.microsoft.com/en-us/library/bb123545(v=exchg.150).aspx
Hope this can be helpful to you.
Best regards,
Amy Wang
TechNet Community Support

Lync 2013 Multi Tenant - SIP/2.0 401 Unauthorized

New Lync 2013 Multi Tenant install. Can provision users in the Primary OU. Users in primary OU login without error.
Users provisioned in a sub OU can not login to Lync. Provisioning process completes successfully.
Client prompts for password. Attempts login and fails with:
You didn't get signed in. It might be your sign-in address or logon credentials. (SIP address and UPN are identical)
FE logging:
SIP/2.0 401 Unauthorized
TL_INFO(TF_PROTOCOL) [0]128C.2E1C::04/15/2014-22:28:42.421.00004ea3 (SIPStack,SIPAdminLog::ProtocolRecord::Flush:ProtocolRecord.cpp(265))[212989229] $$begin_recordTrace-Correlation-Id: 212989229
Instance-Id:
3A4
Direction:
outgoing;source="local"
Peer:
edge1.domain.corp:56094
Message-Type:
response
Start-Line:
SIP/2.0 401 Unauthorized
From:
<sip:[email protected]>;tag=57e75cd85f;epid=f7a8f50c07
To:
<sip:[email protected]>;tag=10A7EC7396D5F1EDCEA8D35A0C49F3CB
Call-ID:
8654248b0dd64d519f42617b862e75bc
CSeq:
2 REGISTER
Via:
SIP/2.0/TLS 10.200.10.210:56094;branch=z9hG4bK4B6654F6.FADCC8B2E74B96BA;branched=FALSE;ms-received-port=56094;ms-received-cid=20C00
Via:
SIP/2.0/TLS 172.16.232.59:60361;received=10.200.250.206;ms-received-port=43233;ms-received-cid=1E9D00
Content-Length:
0
Failed to validate user credentials
$$end_record
TL_ERROR(TF_SECURITY) [0]128C.2E1C::04/15/2014-22:28:42.468.0000542a (SIPStack,SIPAdminLog::WriteSecurityEvent:SIPAdminLog.cpp(319))[212989229] $$begin_recordText: Failed to validate user credentials
Result-Code:
0x8009030c SEC_E_LOGON_DENIED
Source:
edge1.domain.internal:56094
SIP-Start-Line:
REGISTER sip:domain.com SIP/2.0
SIP-Call-ID:
8654248b0dd64d519f42617b862e75bc
SIP-CSeq:
3 REGISTER
Data:
gssapi-data="NTLMSSP\x00\x03\x00\x00\x00\x18\x00\x18\x00\xB4\x00\x00\x00D\x01D\x01\xCC\x00\x00\x00 \x00 \x00X\x00\x00\x000\x000\x00x\x00\x00\x00\x0C\x00\x0C\x00\xA8\x00\x00\x00\x10\x00\x10\x00\x10\x02\x00\x00U\x82\x90b\x06\x03\x80%\x00\x00\x00\x0FQ\xC8@\x1E\x1F\xD2\xF9w\x0C!\xF8Y\x84\x84\x06PM\x00i\x00c\x00r\x00o\x00s\x00o\x00f\x00t\x00A\x00c\x00c\x00o\x00u\x00n\x00t\x00r\x00i\x00c\x00h\x00.\x00l\x00i\x00b\x00e\x00r\x00t\x00y\x00@\x00h\x00o\x00t\x00m\x00a\x00i\x00l\x00.\x00c\x00o\x00m\x00L\x00A\x00P\x00T\x00O\x00P\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00+\xD8\x1CE\xFB\\x9E7\xACbc\x17e\xDE\xAC\xFD\x01\x01\x00\x00\x00\x00\x00\x00R\n\x0E\xFAX\xCF\x01\xF2h\xA4\xBE\x8B\xC3w=\x00\x00\x00\x00\x02\x00\x06\x00P\x00P\x00C\x00\x01\x00\x1A\x00P\x00P\x00C\x001\x00L\x00Y\x00N\x00C\x00F\x00E\x000\x000\x001\x00\x04\x00\x10\x00p\x00p\x00c\x00.\x00c\x00o\x00r\x00p\x00\x03\x00,\x00P\x00P\x00C\x001\x00L\x00Y\x00N\x00C\x00F\x00E\x000\x000\x001\x00.\x00p\x00p\x00"
$$end_record

Hi,
Please double check the port between FE server and Edge server.
Please also check if you add the SAN of sub domain in the Edge external certificate with the help of the link below:
http://technet.microsoft.com/en-us/library/gg398409.aspx
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

Exchange 2013 Multi Site Not SR/HA

This is the first time we have deployed a multi site Exchange organization. Here is the scenario and I am wondering if it is the correct one or if I should have done it a different way.
We have a VPN setup between our corporate location and a satellite campus. The satellite campus has it's own namespace and is a tree in our forest. We have Exchange 2013 SP1 setup at the corp location. We installed two Exchange 2013 SP1 servers
at the satellite location in that domain in the same Exchange organization. I was able to create a few linked users mailboxes (newly acquired and in process of user migration into our forest) and mail delivers between the two without issue. But
lately every new user will not receive email and they will be in the queue. Does not matter if the email is from a corp user or a local user on the same mailbox server.
We decided to do this because we want them to have all of their Exchange resources, email, CAS services and UM local to them, but they are still part of our system. I am having a hard time finding why this is happening. I also noticed that the emails
sent from one satellite user to another is actually going through the corp hub transport server and not their local. Sites and Services is setup with the correct subnets for each site. I have verified the send and receive connectors.
Is this scenario the best way to configure our organization or should we simply have created a second organization of their own and tried to share calendars, etc between the two? All of our other services are centrally located so it only made sense that
this should also work but before going live I wanted to see if this was the optimal way. This is not a high availability or site resiliency plan. No DAGs are used. We are just one company with two separate very remote disjoint locations and
even though we have a small VPN for services we would like to keep as much as possible local to that site.
I have not been able to find information on this scenario. Everything seems to point to SR/HA scenarios. Any advice would be greatly appreciated.

You can't create a second organization when the domain is in the same forest, so you shouldn't have done that.
You're saying that SMTP messages are stuck in the queue? That can be caused by any number of problems, but my experience is that it is most likely one of the following. Look at the SMTP queue and see if any error code is listed, and post that
here.
1. In the main site, the site to which the messages are being sent, someone has modified the Default receive connector(s) in a way that the Exchange server can't connect. The most likely issues would be modifying the PermissionGroups or RemoteIPRanges
properties. Best practice is to not modify the Default receive connector (except maybe to add AnonymousUsers to the PermissionGroups to allow inbound mail), and instead create a new connector for the special purpose with the connection limitations supplied.
2. You have a firewall or relay device between the servers that's "helping" your SMTP connections (Cisco PIX firewalls are notorious for this, disable "SMTP Fixup") or breaking authentication. The servers must be able to connect on port 25 without
any molestation of the transactions.
Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

Error 550 5.7.1 unable to relay with SMTP PORT 25 Exchange 2013

Hi All,
I know this issue has been posted for a while, but still can't resolved issue. We've new Exchange 2013 SP1 (CU4) installation, everything is working properly, the OWA, Exchange Client Connection, SMTP/POP with SSL, except with SMTP Using Port 25 Non-Encrypted
Connection.
If I'm using the SMTP Port 25 without TICK "My Outgoing Server (SMTP) Requires authentication", I've got the error: "550 5.7.1 Unable to relay", but if I TICK the option above, my message will be deliver without any error, how do i get
rid this problem, I need to UN-TICK the option above for the time being, since we've hundreds email account, I want to avoid to educate and tell the user and even remote their PC, just to configure this issue, it will drive me crazy, we're going to use the
Exchange Client Connection in the future, If everything is smooth and ok.
I research this problem on the Internet and of course with TECHNET, but still can't, anyone can help me on this?
fyi, I tried so many things, delete the default the Default Front End Transport for Port 25, it also not fix my issue.
Thx
Irwan

Hi
You can paste the output of below result
Get-receiveconnector | fl name,bindings,PermissionGroups
I think your default receive connector should be missing out some permissions.
Also try to see if you get any message on protocol logs and paste them too
Remember to mark as helpful if you find my contribution useful or as an answer if it does answer your question.That will encourage me - and others - to take time out to help you Check out my latest blog posts on http://exchangequery.com Thanks Sathish
(MVP)

SMTP test to Exchange 2013 failing

I have an Exchange 2013 server set up for testing which I am trying to have the internal servers relay off of to EarthLink (My ISP).
The Receive Connector is set up as a FrontEnd Transport, Anonymous and Externally Secured authentication. It accepts all addresses from my internal subnet.
The Send Connector is set up using a Smart connector to smtpauth.earthlink.net. It is set to use port 587 ( which is what EarthLink apparently uses). It uses basic authentication with my credentials to EarthLink. The address space is set
to '*'.
When I am on one of the member servers, I telnet 25 to the Exchange 2013 server and testing it:
220 exchange.home.com Microsoft ESMTP MAIL Service ready at Sun, 23 Nov 201
4 08:41:40 -0500
ehlo home.com
250-home.cave.com Hello [172.16.200.20]
250-SIZE 36700160
250-PIPELINING
250-DSN
250-ENHANCEDSTATUSCODES
250-AUTH
250-8BITMIME
250-BINARYMIME
250 CHUNKING
mail from:[email protected]
250 2.1.0 Sender OK
rcpt to:[email protected]
250 2.1.5 Recipient OK
DATA
354 Start mail input; end with <CRLF>.<CRLF>
Hello
Goodbye
451 4.7.0 Temporary server error. Please try again later. PRX3
I have been searching all over for some insights what this 451 4.7.0 .... PRX3 error is. There are a number of posts about PRX2, PRX4 and so forth. I have already found the information about verifying all DNS servers and creating a record in
the host file. None of that changed anything.
I disabled Symantec thinking it was causing the problem. Nope.
Any suggestions are GREATLY appreciated!

Hi Dolbert
Thank you for your question.
Did you can receive/send email?
If not, you can give me some error in your log or event?
“451 4.7.0 Temporary server error. Please try again later. PRX3” encoded SMTP response for when proxy fails because of connection failures to the destination. It happened at the send connector cannot resolve the correct destination. You can refer to the
following link to set configure internal reply:
http://glazenbakje.wordpress.com/2012/12/30/exchange-2013-how-to-configure-an-internal-relay-connector/
http://exchangequery.com/2013/12/02/steps-to-configure-anonymous-and-authenticated-relay-in-exchange-2013/
If there are any questions, please let me know.
Best Regard,
Jim

Exchange 2010 mailbox prompts for authentication to Exchange 2013 mailbox

I am in the process of a 2010 to 2013 migration. The only issue I can't seem to manage is an authentication issue with Outlook 2010. My Outlook profile consists of my Exchange 2013 mailbox and a shared mailbox on Exchange 2010. Initially, Outlook was prompting
for authentication to the Exchange 2010 mailbox. Regardless of whether I entered the correct credentials or simply cancelled the prompt, I still had full access to both mailboxes (including Public Folders on 2010). The authentication prompt was removed with
the following command:
Get-OutlookAnywhere -Server my2013exchserver | Set-OutlookAnywhere -InternalClientsRequireSsl $true
The second issue I now have is the reverse of the above: an Exchange 2010 user is prompted for authentication to an Exchange 2013 mailbox. How do I begin to troubleshoot this problem - should I run the same command (above) on 2010? I don't quite understand
how Outlook communicates with Exchange but I am thinking there is an incorrect setting on one of the Virtual Directories(?).
Many thanks.

Hi Dennis,
Please open Outlook - press CTRL key - right click on the Outlook icon from right bottom corner taskbar –Connection Status to check the connection for your Exchange 2010 mailbox with shared 2013 mailbox. The following example in my test results:
Please check your connection authentication. We can run the following command to set your Outlook Anywhere for Exchange 2013:
Set-OutlookAnywhere -Identity "E15-01\Rpc (Default Web Site)" -InternalClientAuthenticationMethod Ntlm -ExternalClientAuthenticationMethod Basic -ExternalClientsRequireSsl $True -InternalClientsRequireSsl $true
In Outlook side, please ensure the following settings in Account Settings:
In Security tab, make sure Always prompt for logon credentials is unchecked and Logon network security is set to Negotiate Authentication.
Regards,
Winnie Liang
TechNet Community Support

SMTP Routing in Exchange 2013

We are migrating from Exchange 2007 to Exchange 2013 and I have some questions around the mail flow changes in 2013.
I understand that the CAS role plays a part in mail flow now. We have our 2013 CAS servers installed as a separate role.
Should we direct our internal applications to the CAS servers for SMTP mail delivery or should it be the Mailbox servers?
Should the external mail flow next hop from our SPAM firewall be the CAS servers?
Where should we apply receive connector rules, CAS or Mailbox?

Hello,
For your applications, if the recipient is a internal user, you can configure internal SMTP relay via the frontend transport service. If the recipient is an external user, you can configure external SMTP relay via the frontend transport service.
The frontend transport service is on CAS server.
Here is an article for your reference.
http://exchangeserverpro.com/exchange-2013-configure-smtp-relay-connector/ (Note: Microsoft
is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. Please make sure that you
completely understand the risk before retrieving any suggestions from the above link.)
You're right. The external mail flow next hop from your firewall will be CAS servers.
You should apply transport rule on Mailbox server.
If you have any feedback on our support, please click
here
Cara Chen
TechNet Community Support

Exchange 2010SP1 Multi-Tenant Issue with Multiple Domains

I have an installation of Exchange 2010 SP1 with multi-tenant support enabled via the install time /hosting switch.
Everything works well for my smaller clients. I now have a bigger client that has about 300 users and 3 domains. The users are divided roughly equally amongst the domains - ie, 3 domains each with 100 users. I've added the first domain as normal:
$c = get-credential
New-organization -name "Pretend Company" -DomainName domain1.com -ProgramId HostingSample -OfferId 2 -location en-US -AdministratorPassword $c.password
After that I logged into the ECP control panel and created all the users. The migration went smoothly and has been working well for the last week. Now, it's time to add the next domain. Since the client wants all 300 users visible in the same GAL, I just
added a domain to the organization:
New-AcceptedDomain -Name domain2.com -DomainName domain2.com -Organization "Pretend Company"
This is where I run into problems. When I try to create the users for domain2.com via ECP, I am able to create the user successfully, and select domain2.com from the drop down. Once the user is created however, I am able to see that although their UPN
is [email protected], it created their email address as [email protected].
I tried creating the users manually via EMS:
$password = Read-Host "Enter password" -AsSecureString
New-MailUser -UserPrincipalName [email protected] -Password $password -Name "Test User" -Organization "Pretent Company" -PrimarySmtpAddress [email protected]
The user creates successfully and I can see the user created in the proper OU in AD. Unfortunately I can not see them in ECP nor can I see them if I do:
get-mailbox -Organization "Pretend Company"
This makes the management of the users very difficult to delegate, and I'm not sure that the users at domain2.com will even work.
This brings me to my questions:
(1) Is is possible create accounts that have different domain names in their default email addresses within the same Organization in /hosting mode?
(2) Is this something I need to do with an EmailAddressPolicy? I read the documentation but it didn't seem /hosting friendly.

Hi Earonk,
Please post your issue on below forum, you will get more help from there:
http://social.technet.microsoft.com/Forums/en-us/exchange2010hosters/threads
Regards!
Gavin

SharePoint 2013 Multi-tenant Feature Packs

I have not seen any information in regards to multi-tenancy feature packs for SharePoint 2013. Currently it seems, with the new end user licencing, when you install the Enterprise bits you can license a user for either Standard or Enterprise but not
Foundation. In SharePoint 2010 you could use the Enterprise bits then create defined feature packs to give a site collection Foundation, Standard or Enterprise features. Do updated defined feature packs exist for 2013?
There is mention of them here http://www.harbar.net/articles/sp2013mt.aspx
"Feature Packs provide the ability to constrain the Features available for a given tenant. The fundamental capability
isn’t changed in any way here, but of course the Features in the product have. Thus the old Feature Pack definitions for SKUs are no longer valid. A new set of feature pack definitions are required encompassing all of the new Features in SharePoint 2013."
But nothing else anywhere on the net, anyone have any ideas?

Hi all,
I thought I'd give an update. I too have worked through official channels and I believe I'm making progress but not a solution unfortunately. When you run Get-SPFeature, you get 409 different features. One thing I noticed, was the features
ending with Stapler that Spence didn't add to his foundation features suggests that adding these could be erroneous. This led me to believe that my ignorance in the above message was bliss and that my idea was not going to fly. Take for example
this:
AutohostedAppLicensing
AutohostedAppLicensingStapling
So is AutohostedAppLicensingStapling a Standard or Enterprise Feature, or something internal that should not be added as it gives bad results? What about the others I don't find?
Then I posed the question - what do the ID's with EDU* in them mean? They don't exist in product info - perhaps it's education specific SKU's? Does that expose customers to use SharePoint for Internet Sites without the SKU as we assume Enterprise
would be the baseline for all 409 features and we work our way back?
Or even this - MS Access Services is a feature, yet there are 10 Feature ID's associated with it. With Exchange, there are PS commands that refer to MS Internal only and for O365 use only. What
if the 209 features Microsoft sent me as a descriptor for onprem cannot correlate to the 409 Get-SPFeature ID's I have in my bag that render my farm useless?
I've also done research around the net and it looks like everyone went the inefficient, non-multitenant way - that is, either do foundation and try to compete with O365, or offer dedicated VM farms for clients with Standard or Enterprise installs and centralise
the SQL back-end.
Surely noone has done true multitenant... Have they?
Question. If i provision a client with no -Featurepack ID, do they get nothing or the default which is Enterprise Edition? I'd presume I will get nothing or an error for not specifying a switch but I would have to build another environment to
test.... which brings me to my last point. Based on the way Std and Ent can be enabled for on-prem customers on an individual basis and I installed Standard edition on its own VM then enumerated the Get-SPFeature cmdlet, surely I'd see all the features,
not just the standard edition install features. right? If not then I'll build it, enumerate the list and my 2013 Feature pack is sorted.
The biggest fear I have on this is going it alone and if I stuff up, having a non-compliant licensing solution for every user on the system and MS banging down my door for noncompliance on something they didn't provide guidance on in the first place.
Jason.
Consultant | Nerd | Visionary. http://www.ethertech.com.au/ | http://www.deeperstates.com.au

SharePoint Foundation 2013 - Multi-tenant Install and OneDrive for Business with Yammer i

Hello,
After installing SP Foundation 2013 (SP1) with Partitioned service applications we have noticed that while clicking on the "yammer and oneDrive" link the below error message comes up:
_admin/yammerconfiguration.aspx
any ideas??
http://technet.microsoft.com/en-us/library/dn659286%28v=office.15%29.aspx
we have also noticed that MS mentioned "OneDrive for Business with Yammer integration doesn’t work for multi-tenancy or partitioned service applications for on-premises deployments"
ja

ULS
Application error when access /_admin/cloudconfiguration.aspx, Error=Object reference not set to an instance of an object.   at Microsoft.SharePoint.WebControls.SPPinnedSiteTile.OnInit(EventArgs e)     at System.Web.UI.Control.InitRecursive(Control
namingContainer)     at System.Web.UI.Control.InitRecursive(Control namingContainer)     at System.Web.UI.Control.InitRecursive(Control namingContainer)     at System.Web.UI.Control.InitRecursive(Control
namingContainer)     at System.Web.UI.Control.InitRecursive(Control namingContainer)     at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
=====
To me it seems SharePoint social networking features require the full SharePoint Server product AND are not available with the free SharePoint Foundation, If correct then why MS punching it here in Foundation without a friendly error message..
ja

Exchange 2013 Multi site

Hi
I have Active directory 2012 R2 with sites ( A ,B)
Site A
I have 2 cas servers
I have 2 MBX servers with DAG
ALL users in site B has issue from slow outlook profiles , we suggest to create a CAS server there in B site and memeber of DAG
SO in site B we will have cas server + MBX member DAG
Regarding users in B site how can i enforce the to connect the exchange throw the cas server located in B site ?
How can i confirm that all smtp trafic will go from B site throw cas server located there then to the cas server located in A site then to the firewall ?
is this scenario provide performance wise?
all users for site B will have a DB and will be mounted on MX in B site .
Please need suggestions .
I need to have high performance for outlook profiles located in B site
we have wan link between site A and site B but it is slow .
Do I need to create another DAG ?
when shall we have multiple DAG in our exchange organization ?
Thanks
MCP MCSA MCSE MCT MCTS CCNA

Hi,
Based on your description, CAS servers in site A are Internet-facing, CAS server in Site B are non-internet facing.
In this case, all outbound mail for site B users will go from CAS in site B to CAS in site A and then to firewall and Internet.
All inbound mails will go from CAS in site A to CAS in site B and then go to Mailbox server.
Here is an article which may help you for your reference.
http://technet.microsoft.com/en-gb/library/aa996349(v=exchg.150).aspx
Best regards,
If you have feedback for TechNet Subscriber Support, contact
[email protected]
Belinda Ma
TechNet Community Support
Thanks for you reply Belinda ,
Is it need any configuration from my side ?
MCP MCSA MCSE MCT MCTS CCNA

Unable to send to external email recipients - Multi Tenant Exchange 2013 - MultiRole servers in DAG

Greetings all, I hope someone can help.
I have created a Exchange 2013 multi-tenant organization, with two servers, both multi-role - CAS and Mailbox roles.
Internal mail flow is fine (external email addresses can send to the domain).
External firewall port forwards ports 443 and 25 to the Internal DAG IP address.
There are two multi-role Exchange servers that are members of the DAG.
I am able to connect to OWA and ECP via https://externalIP/OWA and https://alias.domain.com/OWA
No SSL certificates have been purchased or installed yet.
Exchange URLs have not been changed since default configuration at install.
OWA and ECP works both internal and external.
External DNS works with SPF and PTR records correctly configured
Exchange RCA - Send test only fails with one Spam Listing (this Blacklist provider now flags all domains and you cannot ask to be removed)
Send Connectors are the default ones created during install. Receive connector is standard configuration with - * -
When sending email to an external address, I receive a failure notice
ServerName.test.corp.int gave this error:
Unable to relay
Your message wasn't delivered due to a permission or security issue. It may have been rejected by a moderator, the address may only accept email from certain senders, or another restriction may be preventing delivery.
More Info -
ServerName.test.corp.int
Remote Server returned '550 5.7.1 Unable to relay'
I have been troubleshooting this for many hours with no progress.
I have created new Send Connectors for the server that is advising that it is unable to relay, but they have all failed.
I have tried setting the Internal IP address for Exhange Server 1 (Exchange Server 2 reports failure), with most combinations of Security (Anonymous, Exchange Users, etc).
I have also tried with the IP range 192.168.11.0/24 to allow the whole the subnet, I still receive the unable to relay failure notice.
I have tried this guide - hxxps://glazenbakje.wordpress.com/2012/12/30/exchange-2013-how-to-configure-an-internal-relay-connector/ - with different combinations, still no resolution.
I am at a loss as to why I can't send out with the default configuration. I would assume that email would flow out without any changes, but this does not happen.
Can someone please assist before I lose my sanity.
Thanks in advance,
Terry

Greetings all, I hope someone can help.
I have created a Exchange 2013 multi-tenant organization, with two servers, both multi-role - CAS and Mailbox roles.
Internal mail flow is fine.
Incoming mail from external senders is also fine. -
external email addresses can send to the domain).
External firewall port forwards ports 443 and 25 to the Internal DAG IP address.
There are two multi-role Exchange servers that are members of the DAG.
I am able to connect to OWA and ECP via https://externalIP/OWA and https://alias.domain.com/OWA
No SSL certificates have been purchased or installed yet.
Exchange URLs have not been changed since default configuration at install.
OWA and ECP works both internal and external.
External DNS works with SPF and PTR records correctly configured
Exchange RCA - Send test only fails with one Spam Listing (this Blacklist provider now flags all domains and you cannot ask to be removed)
Receive Connectors are the default ones created during install. Send connector is standard configuration with - * -
When sending email to an external address, I receive a failure notice
ServerName.test.corp.int gave this error:
Unable to relay
Your message wasn't delivered due to a permission or security issue. It may have been rejected by a moderator, the address may only accept email from certain senders, or another restriction may be preventing delivery.
More Info -
ServerName.test.corp.int
Remote Server returned '550 5.7.1 Unable to relay'
I have been troubleshooting this for several days with no progress.
I have created new Receive Connectors for the server that is advising that it is unable to relay, but they have all failed.
I have tried setting the Internal IP address for Exhange Server 1 (Exchange Server 2 reports failure), with most combinations of Security (Anonymous, Exchange Users, etc).
I have also tried with the IP range 192.168.11.0/24 to allow the whole the subnet, I still receive the unable to relay failure notice.
I have tried this guide - hxxps://glazenbakje.wordpress.com/2012/12/30/exchange-2013-how-to-configure-an-internal-relay-connector/ - with different combinations, still no resolution.
Even more info - Further troubleshooting -
I found my one of my Exchange servers had an extra NIC. I have since added a second NIC to the other server, so now both Exchange servers have dual NICs. I removed the DAG cleanly and recreated the DAG from scratch, using this link -
hxxp://careexchange.in/how-to-create-a-database-availability-group-in-exchange-2013/
The issue still exists, even with a newly created DAG. I also found that the Tenant Address Books were not 'applied'. I applied them but still no resolution
I think the issue is related to multi-tenant configuration even though the error says that it can't relay. The unable to relay message can appear when sending from a domain that the Organization does not support. Like trying to email as [email protected]
when you domain name is apple.com - But through extensive research I still can't resolve the issue.
Can someone please assist before I lose my sanity.
Thanks in advance,
Terry

SMTP Authentication in Exchange 2013 multi tenant

Similar Messages

Maybe you are looking for