Dave_Lincs

Forum Replies Created

Viewing 30 posts - 1 through 30 (of 85 total)
  • Author
    Posts

  • Dave_Lincs
    Member
    in reply to: Duplicate Parameter Names in Event Log #325682

    Re: Duplicate Parameter Names in Event Log

    dhindel;267888 wrote:
    Did you ever figure out how to get the parameter’s fixed? Was there a hotfix for it? I’m having the same exact problem.

    Hi,

    Off the top of my head I am not sure, I will go back through my scripts to see what I did, but I seem to remeber we did something clever in Excel to get the page count

    Dave


    Dave_Lincs
    Member
    in reply to: Reading Application and Services Log Win2K8R2 #325681

    Re: Reading Application and Services Log Win2K8R2

    Thanks for that, not sure how I missed that, but have noticed a problem with the event viewer, but will post in the 2008 thread as it is not to do with powershell.

    Thanks

    Dave


    Dave_Lincs
    Member
    in reply to: Free Busy Info from second GAL/Address List #325680

    Re: Free Busy Info from second GAL/Address List

    I have looked at the TEst email connectivity tool within Outlook and the errors I get when testing with a company1 address are the same as when testing with a company2 address.

    I have created autodiscover DNS entry in the new DNS zone


    Dave_Lincs
    Member
    in reply to: Lost access to volume following 4.1 upgrade #325679

    Re: Lost access to volume following 4.1 upgrade

    tehcamel;218710 wrote:
    check and see if there are any known issues for your hardware ?

    We have checked and there are no known issues the driver the iSCSI card uses is the same for 4.0U1 and 4.1

    Dave


    Dave_Lincs
    Member
    in reply to: Full Access Permission not working #325678

    Re: Full Access Permission not working

    afzal_06;212329 wrote:
    I am facing the same problem please help.
    Full access permission not working on Exchange 2007.

    What we did was create a mailadmin account and assign it as a full exchange administrator.

    ESM > Org Configuration > Add Exchange Administrator

    That seem to fix it for us

    Dave


    Dave_Lincs
    Member
    in reply to: Windows version of Rancid #325677

    Re: Windows version of Rancid

    I did have a look at CatTools, but the free version only covers upto 20 devices, whereas we have over 200 devices and we are trying not to spend any money on this.

    But thanks for your suggestion though

    Dave


    Dave_Lincs
    Member
    in reply to: Cisco Catalyst 3020 Web Interface #325676

    Re: Cisco Catalyst 3020 Web Interface

    auglan;208122 wrote:
    So the new IOS you installed didnt include the web interface? If not I would go to cisco.com and install an IOS that does have it. You can copy the IOS from one of the switches you have now and use that.

    We backed up the .bin file from one of our current Cisco 3020 switches, which we then loaded onto the new switch.

    How do I use that file to recreate the web interface?

    Thanks

    Dave


    Dave_Lincs
    Member
    in reply to: Migrate emails from MAC server to exchange server. #325675

    Re: Migrate emails from MAC server to exchange server.

    What client is being used to access the email? How many users do you have? What OS are they using?

    If you only have a handful of users, it would be worth looking at exporting each users mailbox to a format you can import into exchange PST maybe

    Dave


    Dave_Lincs
    Member
    in reply to: Unable to un-install Exchange 2000 #325674

    Re: Unable to un-install Exchange 2000

    m80arm;205180 wrote:
    Is your front end server on your internal LAN or DMZ? If it’s in the DMZ the required ports may not be opened for it to communicate with the domain.

    Michael

    Hi,

    Yes it did sit in our DMZ however, we have brought it into our main network, to do the removal

    Dave


    Dave_Lincs
    Member
    in reply to: Ex2007 anon relay #325673

    Re: Ex2007 anon relay

    Right I got it working, and I hold my hands up and its my own dumb ass fault.

    Internally mail.domain.co.uk points to mailsrv3 which is our FBA CAS server it has no other roles other than being a CAS.

    mailsrv1 is the HUB/MBX server, so of course you can see where I am going with this. When I tested stmp2.domain.co.uk pointed at mailsrv1 surprisingly it worked.

    So thanks for the help

    Dave


    Dave_Lincs
    Member
    in reply to: Ex2007 anon relay #325672

    Re: Ex2007 anon relay

    What order does Exchange apply the receive connectors?

    Trying to get this annoymous relay to work, I have Client MAILSRV1, Default MAILSRV1, Multifunctions.

    Both the Default and Client have the Remote Servers set to 0.0.0.0 – 255.255.255.255 will this take precidnece over the multifunction address range which is 10.97.0.0/16

    Thanks

    Dave


    Dave_Lincs
    Member
    in reply to: Email not being delivered to alt domain #325671

    Re: Email not being delivered to alt domain

    Thanks for replying.

    Yes MX is all setup as this has worked fine for over a year with users on the 2000 system, it is only when they were moved over to 2007 has it stopped.

    I have done the telnet test from both the 2000 and 2007 environment and the email arrives.

    There is nothing in the queue waiting to come across to the 2007 server, I will look at the message tracking which I think we have enabled on the 2000 box anyway

    Kimbie


    Dave_Lincs
    Member
    in reply to: Unable to remove public folders Ex2007 #325670

    Re: Unable to remove public folders Ex2007

    I went with the nuclear option in the end, worked a treat thanks


    Dave_Lincs
    Member
    in reply to: Moving of bridgehead #325669

    Re: Moving of bridgehead

    FischFra;201520 wrote:
    As Sembee already wrote if your new connector on Exchange 2007 is working well you can just delete the Exchange 2000 SMTP connector through ESM.

    You only wrote about the sending part I hope you didn’t forget about receiving mails which means to configure the receive connector on your E2007 box.

    I had forgot about them till you mentioned it, far too much going on.

    I have had a look in Server Config > Hub Transport and there are two reicve connectors already there, Client MAILSRV1 and Default MAILSRV1

    Are they enough to recieve email in from the outside world?

    We will have to set it so all email flows into the 2007 server, I take it any email for users on the Exchange 2000 server will get forwared across to it?

    Thanks

    Dave


    Dave_Lincs
    Member
    in reply to: Moving of bridgehead #325668

    Re: Moving of bridgehead

    Sembee;200850 wrote:
    Did you read what I wrote?

    I said CREATE a connector. Not modify the existing.

    Simon.

    Simon,

    Yes I did mis-read your post, so I do apolgise.

    After I have created a new connector to send email to the outside world, what do I do about the connector from the 2000 system ?

    Dave


    Dave_Lincs
    Member
    in reply to: Change default email address Exchange 2007 #325667

    Re: Change default email address Exchange 2007

    Cheers that is just what I was looking for

    Dave


    Dave_Lincs
    Member
    in reply to: Moving of bridgehead #325666

    Re: Moving of bridgehead

    I have gone to Organization Config > Hub Transport > Send Connectors

    In there is listed the connectors from the 2000 side of the farm.

    Am I right in assuming I go into the rule, source tab, and then add the 2007 hub server and delete the 2000 severs from it?

    Dave


    Dave_Lincs
    Member

    Re: Two hub servers, need to remove one, any problems with that?

    Cheers Simon, that worked a treat

    Ran it and let me get rid of the first CAS server

    Dave


    Dave_Lincs
    Member

    Re: Two hub servers, need to remove one, any problems with that?

    Sembee;199648 wrote:
    I don’t bother with changing the existing RGC.
    I simply remove it using get-routtinggroupconnector | remove-routinggroupconnector then recreate it by simply running new-routinggroupconnector and entering the information when prompted.

    Remember you have to run it twice, once for each direction, and use different names!

    Simon.

    Simon,

    I ran the Get-RoutingGroupConnector and got the following info:

    Name SourceRoutingGroup TargetRoutingGroup
    —- —————— ——————
    MAILCAS01-MAIL_SRV02 Exchange Routing Group … First Routing Group
    MAIL_SRV02-MAILCAS01 First Routing Group Exchange Routing Group …
    [/CODE]

    So how would I remove them with your command?

    Thanks[CODE]Name SourceRoutingGroup TargetRoutingGroup
    —-



    MAILCAS01-MAIL_SRV02 Exchange Routing Group … First Routing Group
    MAIL_SRV02-MAILCAS01 First Routing Group Exchange Routing Group …
    [/CODE]

    So how would I remove them with your command?

    Thanks


    Dave_Lincs
    Member
    in reply to: VMware Doubts #325663

    Re: VMware Doubts

    Just to add some things on as well.

    We are in the process of migrating to Exchange 2007 and I can honestly say in testing VMWare has saved us a BUCKET load of time in testing, rebuilding servers etc.

    Also is there any reason why you are looking at ESX and not ESXi? ESXi can be booted of an SD card, it is how our HP blades boot, then the VMs are stored on our SAN.

    I do not have my VM books in front of me, but if you do go the ESX route, I belive you need a separate LUN/Volume per ESX machine

    Dave


    Dave_Lincs
    Member

    Re: Two hub servers, need to remove one, any problems with that?

    This is the command I put in the EMS, howver when I do Get-RoutingGroupConnector before and after running the command no changes have occured.

    Do I need to leave it sit for a while?

    Set-RoutingGroupConnector -Identity “Exchange Administrative Group (FYDIBOHF23SPDLT)Exchange Routing Group (DWBGZMFD01QNBJR)MAILSRVCAS-MAIL_SRV02” -SourceTransportServers mailsrvmbx.domain.co.uk


    Dave_Lincs
    Member

    Re: Two hub servers, need to remove one, any problems with that?

    Sembee;199077 wrote:
    Do check in Exchange 2000 ESM that the server you are removing is not the routing group master. If it is, change it before starting the uninstall. The uninstaller doesn’t detect that but it will cause problems.

    Ok I will take a look, where will I need to look in 2000 ESM to see if it is the routing group master, and how to I move it if I have to?

    Thanks

    Dave


    Dave_Lincs
    Member
    in reply to: ISA Customisation – Ex2007 Page #325660

    Re: ISA Customisation – Ex2007 Page

    cruachan;198917 wrote:
    Have you got “Require all users to authenticate” ticked on the OWA Web Listener in ISA? If you have untick it and you’ll see the Exchange FBA logon page rather than the ISA one.

    Does that not just bypass the ISA server sending the traffic directly to the CAS server? Thus negating the security of the ISA server?

    I found the solution. You have to make sure that the listener and the web publishing rule but have Exchange under the custom form section

    Dave


    Dave_Lincs
    Member
    in reply to: OWA 2007 and IE6 #325659

    Re: OWA 2007 and IE6

    joeqwerty;198880 wrote:
    Are they using OWA Light? If so, I don’t believe that right click functionallity is available. Try using OWA Premium.

    http://technet.microsoft.com/en-us/library/aa997437(EXCHG.80).aspx

    There were using the premium version, but this is what I did to fix it:

    Open up ESM
    Server Config > Client Access
    Right click on OWA folder and go to properties
    Click Private Computer File Access tab
    Click Customise
    Click Force Save
    Add extension into top box eg .pdf
    Ok out
    No need to restart IIS
    Test should be ok

    So a bit strange that it works fine on IE8 but at least I found an issue to that problem.

    Dave


    Dave_Lincs
    Member
    in reply to: My Exchange Publishing nightmare…please help #325658

    Re: My Exchange Publishing nightmare…please help

    cruachan;198618 wrote:
    If you change ISA to be the back firewall then everything from the internet hits the firebox, and gets passed to the ISA if allowed by the firebox. Internal users would hit the ISA first on the way out, so assuming that the OWA URL is the same for all users then all users would get the ISA OWA login. The only difference is that internal and external clients would use seperate web listeners, one listening on the external network (forwarded from the firebox) and one listening on the internal network.

    Thanks for your suggestion about using ISA as a back firewall, however after lengthy talks over coffee, we decided that it would be unwise in doing that method for various reasons.

    So we have come up with a new solution of which I have attached an image for.

    I have created the MAILSRV1 server already that the CA, Hub, UM, Mailbox roles on in the same AD site as the current CAS and Mailbox servers, which is set to form based authentication, I will then modify MAILCAS01 to be set to basic authentication and move the mailboxes onto MAILSRV1 from MAILMBX01, once I have moved the users I will remove MAILMBX01 from the Exchange environment.

    I then can setup ISA to talk to MAILCAS01 for external users.

    Now in theory that should all work yes?

    However I have run into some issues with it. On the MAILSRV1 server, in ESM under client access there is the /owa folder but not the /exchange /public /exchweb so if a user goes to [url]https://mailsrv1/exchange[/url] it will not load a page, however I need users to get to that page so they can be redirected to our old EX2000 server, while users are migrated across.

    However since MAILCAS01 was the first CAS to be created it has the folders I am missing on MAILSRV1.

    So any ideas on this?

    Many thanks

    Dave


    Dave_Lincs
    Member
    in reply to: My Exchange Publishing nightmare…please help #325657

    Re: My Exchange Publishing nightmare…please help

    cruachan;198616 wrote:
    Personal opinion, but I wouldn’t replace the Firebox. I’d bin it and use ISA as an Edge Firewall. I understand though that there are bound to be political reasons against doing that.

    You could also (again ISA reconfiguring here!) use ISA as a back firewall behind the Firebox, so that only Internal users loop through the ISA and only external traffic comes through the firebox.

    We were looking at replacing it with an Cisco ASA server, but as you say replacing a hardware firewall with a Microsoft product would not be a good step in the eyes of mangement, even through I am sure ISA is more than capable.

    So in your suggestion I would forward port 443 from the Firebox to the ISA server which would be the back firewall which would then pass the traffic to the client access server? Would this give the external users the ISA login or the Exchange login page?

    Thanks

    Dave


    Dave_Lincs
    Member
    in reply to: My Exchange Publishing nightmare…please help #325656

    Re: My Exchange Publishing nightmare…please help

    cruachan;198613 wrote:
    I think you’re stuck with either creating a second website or having one group of users using Basic Authentication.

    The normal way round this with ISA would be to create 2 web listeners, one for External Users and one for Internal Users, to spread the load a bit. Unless the server is really low spec it should handle it no problem. However this only works with a multihomed ISA Server, as a unihomed ISA Server sees EVERYTHING that isn’t itself as one network. Here’s the isaserver.org article for reference, although it’s no use to you unless you plan to change ISA to be an Edge firewall rather than a reverse proxy.

    I assume you have too many users for it to be practical to get all of the internal clients using Outlook and that’s why you are trying to do this?

    Thanks for replying.

    We have approx 1000 users we on our system, the hardware that ISA sits on is more than capable, however the Firebox firewall is not upto the task of handling that many users, and we do not have the money to replace it at the moment.

    During our weekly breakfast we came up with this plan, which I am hoping will work.

    Build a new 2008 server that has Client Access, Hub Transport, Mailbox, Unified messaging with FBA set for internal users.

    We then create a second 2008 server with only the Client Access rules turned on and set this to basic authentication.

    On the ISA server we push the traffic to the second server which should work, however how will the SSL work? As both servers would have a differnet SSL installed?

    Dave


    Dave_Lincs
    Member
    in reply to: Form-Based and Basic Auth together #325655

    Re: Form-Based and Basic Auth together

    Sembee;197939 wrote:
    You will need to use two different web sites.
    You cannot have fba enabled on the server and use ISA server.

    Another option would be to point the users at the ISA server for OWA access, not the internal URL.

    Simon.

    Simon,

    I thought I might have to create a seperate website, but some questions

    1) Is it best to have both BA and FBA websites on the same CAS server? or put the BA version on the mailbox server?

    2) Do you have any good instructions for creating a second OWA website?

    3) We have it set intnerally so if you go to [url]https://mail2/exchange[/url] you will be either forwarded to /OWA if you are on EX2007 or /Exchange if you are on EX2000, however via ISA this ends up in to many redirects.

    Thanks for any help and suggestions

    Dave


    Dave_Lincs
    Member
    in reply to: Can not get Ex2007 / ISA Publishing to work #325654

    Re: Can not get Ex2007 / ISA Publishing to work

    @biggles77 – Thanks for moving the thread.

    Well after tehcamel post I have moved a bit further on and can not get the ISA login page from an external source which is great.

    I login with domainusername and then the password then nothing happens, in the status bar at the bottom is the message: Waiting for https://mail2.domain.co.uk/CookieAuth.dll?Logon

    ISA shows an allowed connection from our external machine to our CAS server, repeating over and over

    Thanks

    Dave


    Dave_Lincs
    Member
    in reply to: Ex2007 user can not login #325653

    Re: Ex2007 user can not login

    Simon,

    Thanks for your help, however I have realised I have made such a newbie error.

    I moved the mailbox back from 2007 to 2000 as I was getting ready to remove Exchange completely and rebuild it as nothing seemed to work.

    So moved it back and it still could not log in, it was only then while sorting out a user account in AD did I think to check the account I was having problems with only to find it was locked out…

    So there was some piss taking in the office about that, but it never occurred to me, as it stopped working after I messed about with the SSL.

    So thanks for your help Simon

    Cheers

    Dave

Viewing 30 posts - 1 through 30 (of 85 total)