Weird emails showing in Outlook 2013 Inbox after Exchange 2013 PST Import

Hi there,
I've just done an Import PST from Exchange 2013 using the GUI, and when it is finished, I then open Outlook 2013 I am seeing a few strange emails in the Inbox.
The PST's were from Outlook 2007, and were previously used in with POP mail.
The message is like this:
Subject: Undeliverable: Not read: RE: Re: information
Your message did not reach some or all of the intended recipients.
Subject: Not read: RE: Re: information
Sent: 20/04/2014 11:08 p.m.
The following recipient(s) cannot be reached:
Big John on 20/04/2014 11:11 p.m.
Diagnostic code = MailRecipientUnknown; Reason code = TransferImpossible; Status code = 511
< #5.1.1 smtp;550 5.1.1 RESOLVER.ADR.RecipNotFound; not found>
The date and time of the message is during the import process.
Does anyone have any suggestions?
From a PST of around 8GB, I ended up with about 50 of these type of messages, mostly to the same recipients, but there were some different ones. From a mailbox of about 3GB, I got about 5 of these messages. From the smaller mailboxes I got none.
Thanks in advance,
Steve.

Hi Steve,
Please verify whether this issue occur in OWA.
If everything is OK in OWA, it seems the .pst import completed successfully. Let's perform troubleshooting on the Outlook client side.
1. Please run Outlook under the safe mode to avoid some AVs and add-ins.
2. Please try to re-create profile to refresh the caches.
3. Please also check whether the missing messages in others' folders or subfolders.
I want to know that why you exported to .pst from Outlook 2007 and imported it into Exchange 2013. Did you migrated Exchange server from 2007/2010 to 2013?
If it is the case, I suggest moving mailbox from Exchange 2007/2010 to Exchange 2013.
Please correct me if there is any misunderstanding.
Thanks
Mavis
Mavis Huang
TechNet Community Support

Similar Messages

TS3276 why the emails keep coming into my inbox after I delete them?

My emails keep coming into my inbox after I deleted them. Why is that?

It sounds like your ISP's Mail Server is an IMAP type that retains the Mail on the Server. You need to go into your Mail> Preferences>Accounts> and set the Mail to Delete from the Server, after a set amount of time.
Hope this helps

HTTP 500 ERROR AFTER EXCHANGE 2013 SP1 INSTALL

Help after exchange 2013 sp1 new install unable to get to the ECP or OWA page with HTTP 500 error in IE the install went ok but not sure what can be causing the error any help would be appriciated.
EXCHANGE 2013--SP1 on WIN2K12--R2 Standard
TY
M4326

See the following:
http://social.technet.microsoft.com/Forums/exchange/en-US/08d3777c-dc03-4411-8c87-7db37d2f406a/exchange-2013-owa-login-error-http-500?forum=exchangesvrclients
CK

GMAIL IMAP: Mail app on iPhone, random old emails showing as new in inbox.

Hi all,
I've tried to get an answer to this elsewhere, hopefully someone here can shed some light on my problem.
I just switched both my GMAIL accounts from POP to IMAP: using the web interface, everything's fine; using the Mail app on my desktop, everything's fine; however, using the Mail app on my iPhone, one of the accounts is fine, but the other account only show a random smattering of email from between 2005 and 2007 as the "newest" emails. Now, new emails come in fine and dandy but as soon as there are fewer than 25, WHAM!, these random group starts showing up in the inbox. It's annoying as all get out. I've tried deleting the account from my iPhone and setting it up from scratch, to no avail. If both accounts were acting this way I'd chalk it up to either an error on my end, or some tick between GMAIL and my phone but these seem not to be the case. So, how about it? Any insight out there?
thanks,
christian

Yes that is normal. The sync between your gmail inbox and the all mail folder in gmail is not immediate, so you will have an emal that will appear as unread in the all mail folder, yet you did read it already in the gmail inbox. There is no way around this nagging issue at present.
I cannot comment on the other point you raise as uses/behavior for sharing one's computer vary greatly. If you have privacy issues and still share your computer with others, you may want to create a guest user profile and have others use this guest user profile when using your computer. That way they will be able to use a browser, or create a document and so on and so forth, but will be prevented from seeing the data/files/folders and applications - the way you have set them up - you see when you are logged in.
To create a guest account go to system preferences>accounts
hope this helps

Mac outlook 2011 users with Exchange 2013 cu5

Hi all, I had a strange issue that came up after I reconfigured our receive connector in exch2013.
I have Exch2013 with Cu5 and a 2010 sp3. In order to fight spam I needed to reconfigure a new connector that's a bit locked down compared to the default frontend that's open to all remote networks, so in the new connector under
the scope settings I put our internal network ip and disabled the default frontend connector that was created during install. Since our exch2010 box is the main server that sends in and out, and has better antispam features, this is where all emails went
through and got routed to the 2013 box.
After restarting services, all was working including iphones and androids, except for Macs with outlook 2011, they were suddenly not able to connect to the exch2013 box after the changes. I looked at the transport logs but I couldn't see
anything showing why these users were not connecting, event viewer as well. It did block a lot of spam from getting through, but I had to revert back to the default front end connector just to get the Mac outlook users working again, has anyone seen
this before, or any other settings I might have missed. If anyone can get me some ideas or pointers, I'd greatly appreciate.
Thanks in advanced.
Carlo

Hi,
I suggest try to re-create MAC 2011 user profile for testing.
Find a related KB for Exchange Online (even if it isn't for Exchange on-premises, please try it.) for your reference:
http://support.microsoft.com/kb/2847916/en-us
Thanks
Mavis
If you have feedback for TechNet Subscriber Support, contact
[email protected]
Mavis Huang
TechNet Community Support

Outlook anywhere not workinhg , exchange 2013

i have exchange 2013 environment everything is working fine except outlook anywhere iam using TMG 2010 for publishing rule (OWA , Active sync and OA ) all are working fine except OA
when i try to configure outlook user his computer not in domain it keep asking for username and password during configuration and after 2 times asking the password it shows the attached screen with no success
can you advice why this happening ?

this happen to all users , no one can use OA but others services like OWA and active sync working fine with all , they all configured in same TMG sever with same listener
get-outlookanywhee | fl output as below
RunspaceId                         : 8153f39f-76d2-4b02-8b4b-fdd8fa9f4977
ServerName                         : severname
SSLOffloading                      : True
ExternalHostname                   : webmail.xxxx.com
InternalHostname                   : webmail.xxxx.com
ExternalClientAuthenticationMethod : Ntlm
InternalClientAuthenticationMethod : Ntlm
IISAuthenticationMethods           : {Basic, Ntlm, Negotiate}
XropUrl                            :
ExternalClientsRequireSsl          : True
InternalClientsRequireSsl          : True
MetabasePath                       : IIS://servename.xxxxx.local/W3SVC/1
                                     T/Rpc
Path                               : C:\Program Files\Microsoft\Exchange
                                     Server\V15\FrontEnd\HttpProxy\rpc
ExtendedProtectionTokenChecking    : None
ExtendedProtectionFlags            : {}
ExtendedProtectionSPNList          : {}
AdminDisplayVersion                : Version 15.0 (Build 847.32)
Server                             : servername
AdminDisplayName                   :
ExchangeVersion                    : 0.20 (15.0.0.0)
Name                               : Rpc (Default Web Site)
DistinguishedName                  : CN=Rpc (Default Web Site),CN=HTTP,CN=P
                                     cols,CN=servername,CN=Servers,CN=Exchan
                                     Administrative Group
                                     (FYDIBOHF23SPDLT),CN=Administrative
                                     Groups,CN=xxxxxx
                                     Co,CN=Microsoft Exchange,CN=Services,C
                                     nfiguration,DC=xxxxx,DC=local
Identity                           : servername\Rpc (Default Web Site)
Guid                               : b667bc75-2280-4b1b-99cd-9991b2300f6e
ObjectCategory                     : xxxxxx.local/Configuration/Schema/ms
                                     h-Rpc-Http-Virtual-Directory
ObjectClass                        : {top, msExchVirtualDirectory,
                                     msExchRpcHttpVirtualDirectory}
WhenChanged                        : 12/18/2014 6:07:17 PM
WhenCreated                        : 11/4/2014 9:07:48 AM
WhenChangedUTC                     : 12/18/2014 2:07:17 PM
WhenCreatedUTC                     : 11/4/2014 5:07:48 AM
OrganizationId                     :
OriginatingServer                  : DC.xxxxx.local
IsValid                            : True
ObjectState                        : Changed
note
my domian xxxxxxx.local and my extrenal url webmail.xxxxxx.com

Outlook 2010 disconnects from Exchange 2013

One of the users running Outlook 2010 (14.0.7108.5000) randomly gets disconnected from her mailbox on Exchange 2013. The disconnect lasts about 5 min and then connection reestablishes. While outlook gets disconnected, computer does not have any problems
accessing any other network resources. Event 25 gets logged on the client when outlook disconnects and states the following. "Network problems are preventing connection to Microsoft Exchange."
Other users in the same mailbox database don't experience or notice the same issue.
The error message states that the mailbox database is offline, but it's probably misleading as the database remains online and mounted while the disconnect happens. The problems seems to follow the user no matter what mailbox database she is in.
The following information gets logged in exchange RCP Client Access log Listed in chronological order.
RopHandler: OpenFolder: [StoragePermanentException] There was an error parsing the entry ID. -> [MapiExceptionInvalidParameter] Unable to obtain the FID and MID from the entry id. (hr=0x80070057, ec=0)
ClientRPCCount=42;AvgClientLatency=00:00:00.0022142;ServerRPCCount=8;AvgCasRPCProcessingTime=00:00:00.0057500;AvgMbxProcessingTime=00:00:00;MaxCasRPCProcessingTime=00:00:00.0460000;20%ClientPercentile=10;40%ClientPercentile=10;60%ClientPercentile=10;80%ClientPercentile=10;90%ClientPercentile=10;95%ClientPercentile=20;99%ClientPercentile=20;100%ClientPercentile=50;20%CasPercentile=10;40%CasPercentile=10;60%CasPercentile=10;80%CasPercentile=10;90%CasPercentile=10;95%CasPercentile=10;99%CasPercentile=10;100%CasPercentile=50;20%MbxPercentile=10;40%MbxPercentile=10;60%MbxPercentile=10;80%MbxPercentile=10;90%MbxPercentile=10;95%MbxPercentile=10;99%MbxPercentile=10;100%MbxPercentile=10;ClientRpcFailureData:
RpcEndPoint: [ServerUnavailableException] Connection must be re-established -> [SessionDeadException] Connection is severed (ConnectionFailedTransientException). Client needs to reconnect. -> [ConnectionFailedTransientException] Cannot get row count.
-> [MapiExceptionNetworkError] Unable to get table row count. (hr=0x80040115, ec=0)
RopHandler: Logon: [RopExecutionException] Mailbox is temporarily unavailable. Error code = MdbOffline (0x00000476) -> [MailboxOfflineException] Cannot open mailbox /o=CORP/ou=Office/cn=Recipients/cn=Banger. -> [MapiExceptionMdbOffline] Unable to make
connection to the server. (hr=0x80004005, ec=1142)
RpcEndPoint: [ServerUnavailableException] Connection must be re-established -> [SessionDeadException] The primary owner logon has failed. Dropping a connection. -> [RopExecutionException] Mailbox is temporarily unavailable. Error code = MdbOffline
(0x00000476) -> [MailboxOfflineException] Cannot open mailbox /o=CORP/ou=Office/cn=Recipients/cn=Banger. -> [MapiExceptionMdbOffline] Unable to make connection to the server. (hr=0x80004005, ec=1142)
Any help would be greatly appreciated

After reviewing the entire RCP Client log on the server, I am ruling out the client PC at this moment.
The disconnect seems to be getting triggered by a Healthmailbox check that starts right before users gets disconnected.
Here is a similar problem with exchange 2010 with no answer.
http://serverfault.com/questions/474123/one-email-user-keeps-disconnecting-from-our-exchange-server
Healthmailbox associated with user's mailbox database preforms the following operations at 19:00:05.899Z
Connect
OwnerLogon
OwnerLogoff
Disconnect
a minute later, at 19:01:43.526Z Healthmailbox associated with initial mailbox database preforms the following operations
Connect
ArchiveLogon
ArchiveLogoff
Disconnect
and then at 19:01:46.479Z server logs RopHandler: OpenFolder: [StoragePermanentException] There was an error parsing the entry ID. -> [MapiExceptionInvalidParameter] Unable to obtain the FID and MID from the entry id. (hr=0x80070057, ec=0) for the
client connection and client notices the disconnect.

Outlook clients cannot connect Exchange 2013 cutover from 2010

Hello,
My company has been running an Exchange 2013/2010 coexistence. Currently, Exch 2013 (2mbx and 1 CAS) utilizes "mail2.domain.com" for the name space. Exch 2010 (1MBX 1 CAS) uses "mail.domain.com"
We recently attempted to cutover external and internal DNS to point "mail.domain.com" and "autodiscover.domain.com" to the Exch 2013 server.
We changed all virtual directories on 2013 to use "https://mail.domain.com/owa" (ECP, EWS, etc. were changed too) for the internal and external URL. The Exch 2010 virtual directories internal URL are set to "https://internalFQDN.domain.com/owa"
the external URLs are $null
Both CAS servers were setup to use Outlook Anywhere since this is how 2013 proxies to 2010. The internal URLs for both were set to "mail.domain.com" IIS authentication Methods (Basic, NTLM). ClientAuthenicsationMethod: NTLM.
For both servers the autodiscoverserviceinternaluri was set to: https://autodiscover.domain.com/autodiscover/autodiscover.xml
The 2013 server has two SSL certificates installed. One is a wildcard cert for "*.domain.com" and the other includes our SANs (mail.domain.com, mail2.domain.com, webmail.domain.com, autodiscover.domain.com) it also includes the FQDN for the 2010
and 2013 CAS servers.
I'm speaking in the past tense because we had to roll back. The problem was no Outlook user could connect. This goes for mailboxes hosted on the Exchange 2013 and 2010 servers. The error was: "Cannot
open your default e-mail folder" to "The connection to Microsoft Exchange is unavailable. Outlook must be online or connected to complete".
Everything else worked fine during the cutover. OWA 2013 login page proxied 2010 logins properly, Outlook 2011 could connect with EWS fine, Active-Sync worked without issues too.
It was only the Outlook 2010 and 2013 clients that could not connect.
We rolled back and everything is working as it was before with the separate namespace. That leads me to think it's something with Outlook Anywhere (RPC/HTTPS)
but the settings seem correct unless I'm missing something. Any help is appreciated.
Thanks!

Hard to say. I've had to change the router to point to the old server as mail wasnt getting in. But OWA did seem ok, although I couldn't send messages... I could only see the inbox and contacts etc.

Treo 800W Can't get email from desktop outlook b/c no exchange server or web-based email

Help... I used to use the "personal business connection" from Sprint before they discontinued using it last fall to get my email. They housed it on their server by having it sink with my desktop outlook 2000 in real time, then my device (Treo 800w) would sink with their server so that I could respond to email on my treo and it would look the same in my desktop outlook as it did on my treo. It would show messages read that i had read, and my sent treo messages would appear in my desktop outlook sent folder. Since Sprint has discontinued "business connection-- personal", I have not been able to get my email in the same fashion. I don't have an exchange server at work and use POP3 email but it is not a commercial service like yahoo or gmail. I download my email to my outlook and primarily use outlook on my desktop but want to be able to use my treo to view and respond to email on the fly and have it show the messages I have already addressed in my desktop outlook. Any ideas? I am desperate and very frustrated that Sprint discontinued business connection. Every application I have looked at either required an exchange server or that I house all my email on a web-based site and quit using my desktop outlook. Thanks....
Post relates to: Treo 800w (Sprint)

Yes, I was very bummed when Sprint discontinued BCPE.
SEVEN Networks, the company that made BCPE for Sprint, has several new products available under beta. None of them seem to offer exactly what we had with BCPE. In fact, one forum posting says that our style of usage (sync'ing directly with the data stored in the Outlook data file) was never actually a supported configuration. Anyway, you can sign up for the beta here if you want to explore the new options: http://community.seven.com/main.php
Good luck in your search.
Post relates to: Treo 800w (Sprint)

Problem with Outlook (client) 2010/2013 profiles on Exchange 2013

We have recently started migrating to Exchange 2013 and have come across a problem with some of our accounts. This problem exists in both migrated mailboxes and natively created 2013 mailboxes.
basically we have a lot of "shared" accounts. We create a user object in AD, give it a mailbox, then give a security group "Full Access" (and often "send-as") permissions on the account. We then Disable the
account in AD (to prevent directly using the password) and then add/remove group members to manage access. everyone uses their own credentials to get to the account.
For the most part this works fine. Users can access OWA and get to these shared mailboxes, they can also 'add' the mailbox to their Outlook client by going into Account Settings->Properties of the Exchange user->More Settings... ->Advanced Tab->"Open
these additional mailboxes:" and adding the mailbox.
However what has happened is that some users were setting up a separate profile instead of adding a mailbox. (Pretty much these
instructions: )
When this is done an error occurs. :
Cannot open your default e-mail folders. You must connect to Microsoft Exchange with the current profile before you can synchronize your folders with your Outlook data file (.ost).
Connecting with a profile set up as yourself first does not clear the error, whenever the shared mailbox folder is selected you get this. The exception is if you go into the account properties and turn off Cached mode. the error then becomes:
Cannot open your default e-mail folders. the file c:\users\[user]\appdata\local\microsoft\outlook\[datafile].ost is not an Outlook datafile (.ost).
Which is weird since migrated accounts had working OST files which were functional prior to migration and outlook creates the new OST for new accounts. This message appears to be a red herring and the problem is still sync access but it throws this
error instead.
In the end is creating a new profile for a mailbox you have Full Access to no longer supported in 2013 or is there something we can do to fix this problem?

Hi AD-Tester,
According to your description and I do an test, however I cannot reproduce the problem.
I want to confirm some points, please help to collect answers for following questions:
1. Check all account or some special user face this problem.
2. Try this command to check Atodiscover, Exchange Web services, Availability service, Offline Address Book services works well:
Get-ClientAccessServer | Test-OutlookWebServices -Identity 'e-mail address'
If it works on OWA, problem may point to outlook client. Please try to re-create a outlook profile for testing.
Note: please make sure set properly setting for Outlook anywhere.
Additional, we can recreate an account and enable-mailbox, then disable in AD and try to login outlook account again.
Best Regards,
Allen Wang

Outlook Cannot Logon Error - Exchange 2013

Hi all,
I simply cannot create an Outlook (2007 or 2010) account to connect to my new installation of Exchange 2013 in Windows Server Essentials environment:
1) Using autodiscover:
I get green ticks for "Establishing network connection and "Search for [email protected] server
settings". At "Log on to Server" I get the error message "The action cannot be completed. The connection to
Microsoft Exchange
is unavailable. Outlook must be online or connected to complete this action"
2) Using manual configuration:
Outlook Anywhere (RPC over HTTP) Exchange Proxy settings configured using the internal FQDN for the Exchange
server and negotiate for authentication. Clicking "check name" button to resolve servername (internal FQDN) and
username (user email address) gives error, "Outlook cannot logon. Verify you are connected to the network and are
using the proper server and mailbox name. The connection to Microsoft Exchange is unavailable. Outlook must be
online or available to complete this action.
3) I can ping Exchange server using hostname and FQDN
4) PC is member of the domain
4) I have verified Exchange certiicate is installed on the client PC (although in the "Other People" certificates folder. Makes no difference when moved to the Trusted Root Certification Authority folder.
5) I can successfully connect to the user mailboxes via OWA
I've been working to resolve this issue for several days now and am at a complete loss as to what to do next to get this up and running.
Any assistance will be greatly appreciated.
RS
RS

Hi RS,
Did you try to run Office Configuration Analyzer Tool (OffCAT) only for Outlook and check the results? If not, proceed and run the Tool and post the results.
Additional info how to run the tool and check the results, you can find here: http://blogs.technet.com/b/catastrophic_failure_joannav/archive/2013/10/30/how-to-view-offcat-report-that-was-created-on-another-computer.aspx
If no
Regards, Catastrophic Failure "JV"

Outlook 2010 connecting to Exchange 2013 and 2007 ... delivery fails

Hello,
we are having a problem with a few Outlook 2010 Clients that have two Exchange accounts setup in one profile. One account is connecting to the company's Exchange 2013 Server, the second account is connecting to an external provider's Exchange 2007 infrastructure
using Outlook Anywhere.
The companies Exchange 2013 was recently migrated from Exchange 2010 and this is the point where the problem started.
Some users are no longer able to send using the external Exchange 2007 account. When they try they are receiving an NDR with the following error message:
#554 5.6.0 STOREDRV.Deliver; Corrupt message content## from the external provider's servers.
When I setup a profile containing only the external provider's mailbox everything works fine until I am adding the company's Exchange 2013 back in at which point the same error appears.
We have no problems using the company's Exchange 2013 servers.
Does anyone have an idea what causes this and how to resolve it? The external provider is uncooperative in troubleshooting so we are left with the problem.
Thank you
Sascha

Hi,
The problem should be related to the External Exchange 2007.
Please refer to this kb below:
http://support.microsoft.com/kb/2203381/en-us
This problem occurs when the email message is a multipart/mixed MIME message which contains a text/plain body and an application/applefile body. If the corresponding body is not a real application/applefile body, the Exchange Server 2007 server considers
that the email message is invalid. Therefore, it generates the NDR. However, Exchange Server 2010 can deliver this kind of email message successfully.
To resolve this problem, you should let the External Provider install the following update rollup:
2279665 Description of Update Rollup 1 for Exchange Server 2007 Service Pack 3
Hope this helps.
Thanks,
Melon Chen
Forum Support
Come back and mark the replies as answers if they help and unmark them if they provide no help.
If you have any feedback on our support, please click
here

Introducing Active Directory sites AFTER exchange 2013 installation

Hi
We have multiple physical sites and only 1 active directory site. Email environment is pure on-premises exchange 2013. Each physical site has CAS/Mailbox servers. There are not IP restrictions between these physical sites. Everything
is outlook anywhere obviously.
I would like to introduce NEW AD sites for each of these physical locations.
Do you see any major issues that I need to be aware of?
Can this be done in the middle of the day?
Will there be pop ups in outlooks and disconnects?
I appreciate your help.

I haven't had to do this before, but I would probably schedule this at night as there are some changes that will need to be made on the Exchange side of things.
Once you have the new AD Sites configured (Make sure you have at a minimum one Global Catalog, although I would recommend at least 2 in each AD site). You should cycle the AD Topology Service on each Exchange Server (this is going to cause all services
to restart so do it one at a time).
You should also use Set-ClientAccessServer and set the proper site scopes that you want Autodiscover to respond to.
I'm sure there's more, but that's what I can think of at the moment.
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread

Outlook 2010 connected to Exchange 2013 prior to coexistence

I installed Exchange 2013 into the environment (Exchange 2010 SP3) and left it at that (ie no additional config). I noticed Outlook 2010 client connected to Exchange 2013 somehow (it got a cert warning). Why would Outlook connect to the new
Exchange 2013 server like that? Although I enabled Outlook Anywhere, it is not trying RPC/HTTP first, but rather RPC/TCP.

Hi,
By design, if the user mailbox located in Exchange 2010 server, the Outlook client will connect to Exchange 2010 server automatically.
According to your description, I found that we have nothing additional configuration on Exchange 2013. So, only server name and internal services' URLs are configured automatically during the Exchange 2013 server installation.
If it has no mailbox located in Exchange 2013, it is odd that Outlook client connect Exchange 2013 first.
I suggest running "Test E-mail AutoConfiguration" in Outlook to verify which Exchange server the Outlook connected.
Thanks
Mavis
Mavis Huang
TechNet Community Support

Large ETLTraces files after Exchange 2013 CU6

After installing Exchange 2013 CU6, you may notice the Exchange Drive is consumed a lot than before and the size is increasing rapidly. After troubleshooting, you may find everything is running properly and
there is no issues with your Exchange Server.
Then you need to check whether the files in the following location is the root cause:
C:\Program Files\Microsoft\Exchange Server\V15\Bin\Search\Ceres\Diagnostics\logfie
C:\Program Files\Microsoft\Exchange Server\V15\Bin\Search\Ceres\Diagnostics\ETLTraces
(You may find log files like “DocumentProcessingTrace_XX.etl )
Prior to CU6, there is not ETLTrace folder listed in this location and there are log folders however the log file has files no exceeding 7 MB size.
Post upgrade, there comes the ETLTrace folder and the files in this folder are close to 50 MB and the log files folder have log files exceeding 50 MB size.
This is a designed behavior in Exchange CU6, if you have limited hard drive space, as a workaround solution, we can safely remove or move the location of these lo files:
Before doing the changes, please firstly stop the health monitoring service. To Change the Log File Path, the Registry Key value is:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Search Foundation for Exchange\Diagnostics
To Change the ETLTrace path the registry Value is:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office Server\16.0\Search\Diagnostics\Tracing
Please click to vote if the post helps you. This can be beneficial to other community members reading the thread.

@Simon_Wu, I tried your solution. However after a couple of days the logs were moved back to the original, default location. It looks like the server has a process which checks for hacks and undoes any attempts to change the path.
Interestingly the altered Registry entries remained altered, however the files were switched back to the default location. It generates just over 1Gb of logs per day on a largely idling Exchange 2013 CU7 server with 350 mailboxes.
Go figure!
What I found to work consistently and reliably is to replace default folders with junction points to another folder on another drive.
I also found that these files are created by a process which runs under the System process (PID 4), therefore you'll need to restart the server in Safe Mode to replace the default folders with junction points.

Weird emails showing in Outlook 2013 Inbox after Exchange 2013 PST Import

Similar Messages

Maybe you are looking for