• Main
  • Blog
  • Who We Are
    • Jeremy Anderson
    • Amy Babinchak
    • Philip Elder
    • Cliff Galiher
    • Chris Matthews
    • Eriq Neale
    • Edwin Sarmiento
    • David Shackelford
  • HelpDesk
  • FAQ
  • Datto
  • SMBKitchen Project
    • SMBKitchen Crew

Archive for Exchange

Feb
15

Troubleshooting Autodiscover, OOF and EWS using Powershell

by amy

Post to Twitter Post to Facebook Post to StumbleUpon

In small business support I don’t often find a need to use powershell but when I do it’s usually Exchange. I found myself troubleshooting a lack of Out of Office responses and a MAC that refused to connect to Exchange the other day. These powershell commands helped me determine where the problem was.  

All three of these services require an autodiscover DNS record. So make sure that you have one. Our own Dave Shackelford wrote a very popular blog post on how to create one. You can read that post here. http://www.thirdtier.net/2011/06/setting-up-autodiscover-for-sbs-2011/

The first step is to determine if the services are configured for a URL that matches the SSL certificate.

Check the EWS URL

Powershell command to show the URL’s that EWS is configured to use.

Check and/or set the Internal autodiscover URL

1. Check the current configuration.
Get-ClientAccessServer | Select Name, *Internal* | fl

2. Define the new URL.
Set-ClientAccessServer –Identity <CAS Server Name> -AutoDiscoverServiceInternalUri: <Internal URL>

 

Verify that the OAB (Offline Address Book) has the correct URL

clip_image005

IF EWS Fails tests after verifying all settings above perform a reset of the Exchange virtual directories. This is found in the Exchange Management console under Server Configuration in the right side panel. After reset is compete run iisreset /noforce you may have to run it several times before it is successful.

This will result in the EWS directory being set to internal only.

You must then set the External URL

Powershell command to change the URL’s that EWS is configure to use.

Set-WebServicesVirtualDirectory –Identity “<EWS Name>” –ExternalUrl: https://url.domain.local/EWS/Exchange.asmx

 

—
So who wrote this blog and what do they do for a living anyway?
We’re Third Tier. We provide advanced Third Tier support for IT Professionals.
Third Tier Get Support BlogFeed Blog Twitter Twitter Facebook Facebook LinkedIn LinkedIN

0 Categories : Amy Babinchak, Exchange, Powershell
Mar
21

Need to make an SPF record?

by amy

Post to Twitter Post to Facebook Post to StumbleUpon

Microsoft has a nice wizard available that will create a full proof SPF record for your domain.

How does Sender ID Framework work?

  1. Sender sends an e-mail to Receiver.
  2. Receiver’s inbound e-mail server receives e-mail and calls its Sender ID Framework.
  3. The Sender ID Framework looks up the SPF record of the domain that Sender is using for sending the mail.
  4. The receiving Mail Transfer Agent (MTA) determines if the outbound Mail Server IP address matches IP addresses that are authorized to send mail for the user.

You can find the simple 4 step wizard here: http://www.microsoft.com/mscorp/safety/content/technologies/senderid/wizard/

1 Categories : Amy Babinchak, Exchange
Jan
6

Solving the Unresponsive Exchange, SBS Server Problem

by amy

Post to Twitter Post to Facebook Post to StumbleUpon

For several months I had a couple of SBS servers that would occasionally fail to respond. Often times I was able to RDP to the server. The event logs would not show a problem but workstations were unable to access anything on the server. A look at the workstations also found nothing wrong. In my experience there are two things that can cause mysterious problems like this: cabling and memory. We look at the cabling and the switch. They weren’t the problem. The problem was server memory sharing or lack thereof.

image

We’ve gotten used to Exchange hogging all the memory on the server, but in pre-2007 versions it was pretty good at sharing that memory with other applications. But no more. Exchange grabs that available memory and doesn’t let go. When the server comes under load it then becomes unresponsive to additional requests. Wait for a long time and the problem will go away. Reboot and the problem will go away. Restart the Exchange Store and the problem will go away. But what we really need to do is prevent it from happening in the first place.

The solution to this problem is to tune Exchange caching to your environment. TechNet has an article on how to calculate how much cache and therefore memory that Exchange will need. You can find that article here: http://technet.microsoft.com/en-us/library/ee832793.aspx. This is a great article in that it gives you the formula for determining the minimum and maximum memory allocation your environment will require and also point us to another TechNet article that shows us where to make this change. (Interestingly enough this later article is from Exchange 2000 days.) That second article is here: How to modify the Store Database maximum cache size in Exchange 2000 Server

If you do nothing then this is now much ram the Store service is taking on your server right now:

image

The amount of ram that you want to set aside for Exchange will vary based on the number of emails sent by the organization so you will want to perform the calculation outlined in the article above.

I’m a small business consultant with many clients running exchange on-premise. For my purposes I needed to find a standard that fit the majority of my clients. We can of course tweak said standard when the situation warrants, say the client is very small or very large. So I calculated a number that I felt would never be exceeded. My number is 10GB maximum and 5GB minimum. You should note that although it doesn’t say so in the article, the one written for the 2000 era, setting a minimum and a maximum was required in order to have the desired effect on freeing up the ram. You should also know that the value you enter into msExchESEParamCacheSizeMax and Min must be an increment of 32k. Thus 10GB is 326780 an 5GB is 163840. (Many thanks for Michael B Smith for assisting with the calculation and pointing out the importance of 32k)

Where is this parameter? It’s in Active Directory. You’ll need to enable Advanced Features viewing. Browse to the Information Store object and modify the attributes. Yes you will need to restart the Exchange services for this change to take effect.

Many thanks also to our fabulous staff at Third Tier for getting to the bottom of this issue.

—
So who wrote this blog and what do they do for a living anyway?
We’re Third Tier. We provide advanced Third Tier support for IT Professionals.
Third Tier Get SupportBlogFeed BlogTwitter TwitterFacebook FacebookLinkedIn LinkedIN

1 Categories : Amy Babinchak, Brian Higgins, Cliff Galiher, Exchange, Jeremy, SBS 2011
Aug
29

Brain Explosion Session Detail: Becoming a Message Sleuth

by amy

Post to Twitter Post to Facebook Post to StumbleUpon

You know Dave Shackelford as an Exchange MVP, Third Tier consultant and all around nice guy that seemingly knows more about Exchange than Microsoft does. Well, now you can learn some of his secrets.

Haven’t registered yet? Please do so now. www.thirdtier.net/registration Your registration fee includes a full day of training, lunch and an evening with Third Tier at the local pub. Space is limited so register today.

                                         explodingbrain    

 

Sometimes as a consultant  you are asked to be the expert on what happened to a message that was or wasn’t delivered. While you may have used the Exchange message tracking logs and the application log, there are also the SMTP protocol logs, the filtering logs and additional diagnostic logging at your disposal. This session will get you familiar with the tools and give you the best practices for getting useful data out of them, making you look like a CSI guy (or gal). I’ll focus on the scenarios that I encounter every week working for ThirdTier.

Remember, register to reserve your space. Last year we sold out. www.thirdtier.net/registration

—–
So who wrote this blog and what do they do for a living anyway?
We’re Third Tier. We provide advanced Third Tier support for IT Professionals.
Third Tier Get Support BlogFeed Blog Twitter Twitter Facebook Facebook LinkedIn LinkedIN

0 Categories : Brain Explosion, Dave Shackelford, Exchange, SMB Nation
Jun
27

Setting up Autodiscover for SBS 2011

by dave

Post to Twitter Post to Facebook Post to StumbleUpon

This is a refresh of an article I wrote earlier for SBS 2008, with a few minor updates.

If you are using Exchange 2007 or Exchange 2010 (SBS or non-SBS) and are using a single-name certificate, this article is for you.

When you migrate to SBS 2008 or SBS 2011 and you already have a domain name, you don’t need to use the built-in domain registration wizard that is included in the SBS setup process.

This is well and good, but it has a downside worth knowing about. You probably didn’t know it, but something that Microsoft does when they set up your new domain name at the registrar is create a custom SRV record for your domain so that Autodiscover will work properly for external client auto-configuration. This is because you are using a single-name cert, which isn’t what Exchange 2007/2010 was designed to use. If you already have a domain name registered and are able to create your own DNS SRV records (some DNS hosts don’t allow SRV record creation), it would be a good idea to create an Autodiscover SRV record to make it easier for Outlook 2007/2010 clients to autoconfigure themselves for Outlook Anywhere (RPC-over-HTTPS) and ActiveSync.

The details on how to set this record up are all in KB940881, but I’ll briefly summarize it here:

1. Get rid of any CNAME or A records for “autodiscover”, and any wildcard “*” records in the public DNS zone. This is a critical step, so don’t just drift past it.
2. Build the SRV record to look like this:

Service: _autodiscover
Protocol: _tcp
Port Number: 443
Host: remote.smallbizco.net

Weight and priority should normally both be set to zero.

Why do you need to do this for Autodiscover to work? Well when you feed an Outlook client an email address, it tries to autoconfigure itself, and it does this by trying to contact a series of hosts as follows:

- https://domainname.com/autodiscover/autodiscover.xml
- https://autodiscover.domainname.com/autodiscover/autodiscover.xml
- http://autodiscover.domainname.com/autodiscover/autodiscover.xml

After failing these steps, it will look for an SRV record, and if you haven’t created one, there won’t be one. We’ll come back to this point shortly.

Because your certificate is tied to a single name: remote.domainname.com, any https connection to the autodiscover URL will fail. If you want to create an A or CNAME record for ‘autodiscover’ that points to your server’s public IP and allow port 80 to your server, autodiscover will work, but you would then have allowed port 80 traffic to your server.

An alternate option, still using SSL, is what this article is about. This method takes advantage of a feature that was added in Outlook 2007 SP1 that allows it to look for an SRV record and use the SRV record to find the “real” autodiscover host. In this case, the SRV record is pointing to remote.smallbizco.net, which is the name covered by the cert, so a secure connection to that server to get Autodiscover information will succeed.

Got it? Great!

BTW, if you have a single-name cert on a non-SBS Exchange 2007 or Exchange 2010 server, you still want to use an SRV record as described above, but there will be other changes you will need to make to your environment as well, primarily resetting the URLs on most of your Exchange virtual directories so that they all point to the name that is on your certificate. This is something that the SBS wizards take care of automagically.

3 Categories : Dave Shackelford, Exchange, SBS 2011
May
31

Welcome Michael Smith!

by amy

Post to Twitter Post to Facebook Post to StumbleUpon

We’d like to introduce you to the latest addition to our consulting team, Michael Smith. Michael is an Exchange guru. He is also the author of Monitoring Exchange Server 2007 with System Center Operations Manager. 

Country and Time Zone (in GMT):
USA, EST, -5GMT

Areas of Expertise:
Exchange, Directory Services, System Center Operations Center

Certifications and Awards:
MVP Exchange
MCSE NT4/2000/2003
MCITP:EMA and SA
CCNA

Related Work Experience or Business Ownership:
Michael has had over 25 years of experience in the IT field and focuses on providing solutions that support customers goals for operational excellence.

Book:
Monitoring Exchange Server 2007 with Operations Manager

Social Networking:

http://theessentialexchange.com

0 Categories : Announcement, Exchange, Michael
Feb
15

Updating your Exchange migration strategies

by dave

Post to Twitter Post to Facebook Post to StumbleUpon

A couple of years ago, most SMB Exchange email migrations involved .pst files, or they were swing migrations that involved moving mailbox databases and remounting them, or moving mailboxes between one server and another. All that is changed now. Why? More and more, your clients will be moving back and forth between cloud and local storage, between hosted mail (whether that be Google Apps or Intermedia Hosted Exchange) and on-premises mail. Sometime you might have a multi-site corporation that wants to relocate. A growing percentage of the migrations being conducted now involve having to move data over WAN links, and that’s a game-changer.

So you have a migration planned, and you want to change MX records and cut over, but it looks like it’s going to take 5 days to migrate those 59gb of email down from the hosted provider! What do you do?

First, you think differently. No, I’m not talking about provisioning mac.com accounts, I’m asking us to stop thinking about the mail as a big chunk of data to be moved in one unit. Don’t even think of a single mailbox in that way. Start thinking about what part of the user’s mailbox they couldn’t live without for a day or two. The last two weeks of mail? The last two months? Once you’ve identified that interval that we’ll call “staple data”, make your plan: first cut over the MX record and immediately migrate that staple data. The reduced footprint of that data will turn your multi-day mailbox move effort into a several-hour effort. As soon as the staple data is in place on the new server, then begin the import of the rest of the data. I usually call that data the “historical backfill.”

Now how do you accomplish this date-delimited dissection of the mailbox? Pretty easily. All the basic tools we use or have used have all had date-specific parameters we can use during exports and imports. Exmerge had them, the PowerShell Export\Import-Mailbox commandlets have them. What are the other tools we can use? There’s one main other one that people aren’t usually familiar with. It’s called the Exchange Transporter Suite. It was built primarily to assist people in migrating from non-Microsoft mail platforms. In addition to tools to assist with Lotus migrations, it also has a very nice IMAP and POP migration tool. The IMAP tool is especially helpful for bringing client mail off of Google Apps and onto an Exchange server without having to do it from the Outlook client. Wouldn’t it be nice to do it in one place, all the mailboxes at once? Yep. It is. I’ll introduce you more formally to that tool in a future post.

How Come ExMerge Won’t Run?

One thing I’ve realized is that many SMB consultants aren’t sure how to move mail around in a world in which ExMerge isn’t easily accessible. That’s right, you can’t run ExMerge on an SBS 2008 or Exchange 2007 server to export\import mail. Ah, you might say, I’ve heard that you have to use PowerShell instead. Partly true, but you still can’t run the PowerShell import\export scripts on the server. You have to set up a separate management workstation to run them from. In fact, you can actually run ExMerge from a separate management workstation. The same change in functionality that will not let you run the PowerShell cmdlets on the server also “broke” ExMerge on the server.

The need for a separate management workstation to handle mail import\export procedures gets complicated for those who are trying to host their SBS 2008 box at a colo. In those situations, we’ve temporarily installed VMWare on the server and installed an XP Pro VM to use as a management workstation. Trying to handle the migration via a workstation connected to the colo via VPN is NOT a good idea.

So what’s involved in setting up a management workstation to run ExMerge or use the Import\Export scripts? I would suggest that you focus on running the PowerShell scripts rather than using ExMerge, but I’ll give you the details for both:

Installing ExMerge on a 32-bit Management Workstation

For ExMerge, you are going to follow the normal rules for running Exmerge on a workstation.

1. If on XP, install the IIS Snap-In component from the Add Components Add/Remove applet.
2. If on XP, install the Windows Server AdminPack tools.
3. Install the Exchange 2003 (yes, 2003) management tools on the workstation from the Exchange 2003 media. Ignore the schema error.
4. Download and install ExMerge on the workstation.
5. Pick or create a user who is not a member of the Domain Admins group to use for the import process.
6. Create an “ExMerge” group to assign Exchange permissions to and add the target user to the group.
7. Use the Exchange Management Console to delegate “Exchange View Only Administrator” control to the ExMerge group.

8. Give the ExMerge group Send-As and Receive-As rights. The easiest way to do this is in Exchange Powershell, like this:

Get-MailboxDatabase -identity “SERVER\First Storage Group\Mailbox Database” | Add-ADPermission         -user “DOMAIN\ExMergeGroup” -ExtendedRights Receive-As, Send-As

(You’d swap SERVER and DOMAIN\ExMergeGroup with the appropriate server name and domain and group names in your environment.)

You should now be able to log on to that workstation as a member of the ExMerge group and run ExMerge to pull data out of Exchange 2007 or migrate data into Exchange 2007. I will show you how to do date-delimited extraction later in this article.

If you are interested in knowing whether ExMerge will work in the same way with Exchange 2010, the answer is no, but you can read more about that in this helpful article by Alexander Zammit.

Getting Ready to use Import-Mailbox on a 32-bit Management Workstation

If you are going to use PowerShell to pull the mail into the new Exchange 2007 server (which I recommend), then you are going to need to get a workstation ready to run the import process on. This is mainly written with an XP system in mind.

1. Install these prerequisites: .Net Framework 2.0 and its update, MMC 3.0 (if on XP), and Powershell 1.0. Ah yes, and Outlook 2007 or 2010.
2. Download, extract and install the Exchange 2007 32-bit Management Tools. Make sure you download the version that matches the service pack level of your Exchange 2007 installation, otherwise you will have problems.
3. Pick or create an account that is NOT a member of the Domain Admins or any other privileged group in the domain. Add that user to the local Administrators group on the Exchange 2007 server.
4. In the Exchange 2007 Management Console on the server (click on Organization), use the Add Exchange Administrator action to grant that user account the Exchange Server Administrator role.
5. To import and export mail, you need to grant import user account Receive-As and Send-As permission on any mailbox databases on the Exchange 2007 server. To do that, run this command at an “escalated” Exchange PowerShell prompt:

Get-MailboxDatabase | Add-ADPermission –User Importer –ExtendedRights Receive-As,Send-As
(replace Importer with the name of the user that you created\picked.)

6. Give the server some time to refresh its credential cache. If you don’t have up to a couple of hours to wait, you can restart the Information Store service on the Exchange 2007 server, and after the service restarts, the permissions will be in effect.
7. Now log on to the workstation using the account you chose/created, and open the Exchange Management Shell.
8.  To use the import-mailbox cmdlet, adapt these examples for your use or look at the official docs:

To import all the .pst files in a specific directory into appropriate mailboxes, just make sure that each .pst file is named to match the user’s mailbox alias (jsmith’s .pst would be called jsmith.pst), and then execute something like this:

Dir D:\PSTDump\*.pst | Import-Mailbox

This will look at each .pst, match it to it’s mailbox on the server and import the contents of the .pst.

To import a single .pst file that doesn’t match the mailbox name, you can do this:

import-mailbox jsmith@domain.com -pstfolderpath d:\PSTDump\johnnyboy.pst

You can also do date-delimited imports, but that’s primarily something you’d want to do as an export process in ExMerge. I’ll go over that now.

Date-Delimited Mail Exports using ExMerge

Using date-delimited exports is commonly used when mailboxes are very large and need to be exported in chunks in order to avoid the 2gb limit on ANSI .pst files. It is also useful when there are many mailboxes to be moved in a short time and it is not practical to move all the data at once.

Let’s create a scenario: It’s March 13th, 2010 and tonight we need to migrate 115 users from an Exchange 2003 server in one domain to an Exchange 2007 server in another domain. We’ve already migrated the user accounts to the new domain using LDIFDE, but now it’s time to migrate the mail. We changed the firewall’s configuration an hour ago so that new email is being delivered to the mailboxes on the new server. We’ve set up our export\import account and are ready to use ExMerge.

Because the total amount of mail on the server is equal to 79gb (yes, this is an urgent project!) and a dozen of the mailboxes are larger than 3gb, it would take quite a bit of time to export all the mail out this evening. What we will do is export the “staple data” first: all the mail from January 1st 2010 up till today. Because that is only 73 days of mail, the .pst file for each mailbox will will be relatively small, and the entire export process will probably take 35 minutes or so. Since ExMerge will automatically name the .pst file after the user alias, the exported files are ready to be imported into Exchange 2007 immediately.

We've set the range for 73 days

Once the initial run of .pst files has been exported and then imported successfully, it’s time to start working on historical backfill. We will go back to ExMerge and begin running another date-delimited export covering all of 2009, choosing a separate directory as the destination. When that export finishes, we will use import-mailbox again (pointing it at the new directory) to bring that mail into the mailboxes on the new server. We can go backwards, year by year, until all the mail has been brought in. Since the most critical data has already been imported, the migration should seem smooth to the users even if data is continuing to be imported over the next 24 hours. It is the rare user that refers to 36-month old emails on a daily basis.

What if you have just set up Exchange 2010? Can the management workstation you set up for importing into Exchange 2007 still be used? Nope, while the strategies I’ve outlined here are still valid, you can only use a system set up with Exchange 2007 management tools to import data into an Exchange 2007 mailbox server. If you have SP1 loaded on Exchange 2010, you can run the new-mailboximportrequest and new-mailboxexportrequest commands to export or import to\from .pst files. See this article for more details: http://msexchangeteam.com/archive/2010/04/26/454733.aspx

Using strategies like these can reduce the stress of having to migrate a lot of mailbox data in a short time-frame, and make large-mailboxes less formidable seeming. I hope you find this helpful. Of course, if you’re in the middle of it and short on patience, go ahead and open a ticket, and I’ll help you out!

—–

So who wrote this blog and what do they do for a living anyway?
We’re Third Tier. We provide advanced Third Tier support for IT Professionals.
Third Tier Get Support BlogFeed Blog Twitter Twitter Facebook Facebook LinkedIn LinkedIN
0 Categories : Dave Shackelford, Exchange, Migration, SBS 2008, Tips
Feb
14

Install or Uninstall of CAS Role Seems to Hang

by dave

Post to Twitter Post to Facebook Post to StumbleUpon

Sometimes when you are installing or uninstalling the CAS role from an Exchange 2010 server, the setup process hangs during the CAS installation/uninstallation process, right at the point that the GUI says:

performance counters for the client access server role are being configured

It would be good to wait up to 30 minute, but if you’ve waited longer than that, the process will not finish. If you check the App Log at this point, you will see some errors related to Exchange performance counters. If you cancel the setup using Task Manager and then restart the process, it will finish the second time without any significant issues. It’s happened to me three times so far, once during installation and twice during uninstallation, and quitting the process and restarting it again resolved the problem.

—–

So who wrote this blog and what do they do for a living anyway?
We’re Third Tier. We provide advanced Third Tier support for IT Professionals.
Third Tier Get Support BlogFeed Blog Twitter Twitter Facebook Facebook LinkedIn LinkedIN
0 Categories : Dave Shackelford, Exchange
Sep
7

Training Content Details: It’s Only Plug & Play if you Know THESE Ninja Moves

by amy

Post to Twitter Post to Facebook Post to StumbleUpon

 

Cliff Galiher SBS, DNS and Exchange guru says…

The mobile landscape has changed. What was in the office, is now in the hands of your clients. They expect it to work and they expect you to make it secure. Mobile devices communicate with Exchange in their own unique way. We’ll take a deep look at how devices communicate with Exchange and get technical about the protocols. This will cover activesync AND autodiscover at a protocol level. Then we’ll walk through the process of setting up different devices and visually tie the steps back to the theory. So now the mobile device works and you understand why it works, how are you going to secure it? Cliff will cover controls IT can have on activesync devices such as remote encryption and remote wipe, how to use and how to configure it.

Join Third Tier in Las Vegas for an all day training on the day prior to SMBNation. See other content details elsewhere in our blog. Thanks to our sponsors, Hewlett Packard, Symform and Storagecraft we are able to keep the cost down to only $50. So head on over to the store and reserve your space for this all-day training session! Seats are limited for this event and we expect to sell out. So register early. http://www.thirdtier.net/store Training takes place October 21st.

0 Categories : Cliff Galiher, Events, Exchange, SBS 2008, SMB Nation
Sep
7

More Training Event Content Details! Dave Shackelford: Exchange Powershell Essentials and Certificate Handling

by amy

Post to Twitter Post to Facebook Post to StumbleUpon

Thanks to our sponsors, Hewlett Packard, Symform and Storagecraft we are able to keep the cost down to only $50. So head on over to the store and reserve your space for this all-day training session! Seats are limited for this event and we expect to sell out. So register early. http://www.thirdtier.net/store Training takes place October 21st.

exploding-brain

Exchange Powershell Essentials and Certificate Handling

If you’ve been working a bit with Exchange 2007, you’ve probably used just enough PowerShell to get by. In this session I’d like to take you further by showing you a few key PowerShell procedures that will make Exchange 2007 and Exchange 2010 administration and troubleshooting easier. We’re not going to go deep into PowerShell programming, what this session will do is give you some valuable but simple tools to increase your value when working with Exchange. Some of what we’ll cover includes:

- Working with single and multi-name certificates (including a cool new downloadable tool!)

- Refreshing Exchange virtual directories quickly to resolve CAS issues

- Easy quota administration

- Displaying mailbox size information in a user-friendly format

- Quick bulk-creation of users and mailboxes from a simple CSV file

Participants will be emailed a document with copy\pasteable scripts from this session to ensure that you can immediately put this content to use.

Check out the rest of our blog for more content details and don’t forget to register.

0 Categories : Dave Shackelford, Events, Exchange, SMB Nation
Next Page »

Search

Support

Third Tier provides advanced support services to IT Professionals. Learn about what we do at http://www.thirdtier.net or click on the support icon below to chat with one of our support representatives.

Live Chat Software by Kayako
Third Tier
Copyright © 2013 All Rights Reserved
iThemes Builder by iThemes
Powered by WordPress