EarthReactor

Forum Replies Created

Viewing 30 posts - 31 through 60 (of 205 total)
  • Author
    Posts
  • Avatar
    EarthReactor
    Member

    Re: is auditing of file and folder actions possible in windows environment?

    Ossian;282608 wrote:
    Yes, it can be done
    Two steps:
    1) enable auditing of object access in a group policy
    2) Turn on auditing of individual actions in the advanced security tab of files or folders

    Auditing everything will generate a massive amount of log entries, and fill security logs quickly – better to limit both where you audit and/or who you audit

    Thanks very much!

    Avatar
    EarthReactor
    Member
    in reply to: SBS 2011, outlook 2010 asking for password #377215

    Re: SBS 2011, outlook 2010 asking for password

    I have resolved the issue now, and as always with me, it was something stupid that I overlooked:
    I installed the latest service pack for exchange and it resolved the issue!

    Avatar
    EarthReactor
    Member
    in reply to: SBS 2011, outlook 2010 asking for password #377214

    Re: SBS 2011, outlook 2010 asking for password

    I have purchased and installed the correct certificate now – it validates remote.domain.com,autodiscover.domain.com and server.domain.local.

    Still same issue.

    I just checked all updates on server and client.

    Now I have tried to pinpoint the issue – it seems to just be happening when I try to download the global address book – every time I do that, the credentials prompt comes up, if I just do a normal send and receive, no prompt.

    Avatar
    EarthReactor
    Member
    in reply to: SBS 2011, outlook 2010 asking for password #377213

    Re: SBS 2011, outlook 2010 asking for password

    tehcamel;282056 wrote:
    are your clients on the domain ?

    Yes they are all joined to the domain. using a mix of windows XP (soon to be replaced:-)) and windows 7 pro.

    Everything has been working fine since the new server was installed about 4 months ago. then all of a sudden this issue arises.

    Avatar
    EarthReactor
    Member

    Re: outlook web access will not load up – page constantly loading

    I Shouldn’t say this, but computers drive me mad!

    I have just managed to log in successfully to OWA!

    There were two things that I have done:

    1.rebooted the server – don’t think this was the resolution because I had tried this previously to no avail.

    2.modified settings using ADSIEdit as per this article, to stop exchange “eating” all of the ram on the server:
    http://www.bursky.net/index.php/2012/05/limit-exchange-2010-memory-use/

    Im wondering if that has resolved it – we had a separate issue yesterday evening where RAM usage was at 98% and Exchange management was failing to open, and the server was almost locking up (symptoms I have seen time and time again with SBS 2011), hence why I implemented the above to limit RAM usage by exchange.

    Anyway, touch wood that has resolved it. Has anyone else had issues with RAM usage in SBS 2011? I know its by design, but I find it always causes issues – on this particular server we have 32GB of ram, Exchange was using 19GB of it, and even though its supposed to release it, I dont think it does so efficiently.

    Avatar
    EarthReactor
    Member

    Re: outlook web access will not load up – page constantly loading

    JeremyW;281778 wrote:
    Have you run the SBS BPA?
    Exchange BPA?
    Does RWW work?

    I have just installed and ran SBS BPA – in results pane under non-compliant, it shows no entries, so I assume all is ok there.

    Just trying to install Exchange BPA now, but I am getting an error that Net framework 1.1 is required – I would have thought the server would have a more recent version of framework already installed, is it safe to install that?

    RWW, what is that?

    Avatar
    EarthReactor
    Member

    Re: outlook web access will not load up – page constantly loading

    tehcamel;281851 wrote:
    I recall seeing this exact error, or at least, related to the config file
    somewhere in the file there’s an extra / or or something.. stand by

    here:
    http://forums.iis.net/t/1170240.aspx

    see if that helps
    seems permission-wise

    i was actually thinking of a slightly differnt error, but hopefully this helps

    Thanks, I checked the link, and notably this post:

    Please check the identity account of ‘MSExchangeOWAAppPool’ app pool in IIS manager and make sure it has read permission to read applicationHost.config file in system32inetsrvconfig directory. Also it should have read permission on the site’s web.config file.

    I checked in IIS admin, application pools, and MSExchangeOWAAppPool uses localsystem account, which I assume is SYSTEM in the security tab.

    SYSTEM does indeed have read access to applicationHost.config.

    Avatar
    EarthReactor
    Member
    in reply to: Question about Routing and remote access #377209

    Re: Question about Routing and remote access

    tehcamel;281847 wrote:
    do they use the same logon id, or separate ?
    I’d expect it if it’s the same username, but just from the same location it should be able to cope with..

    They are using separate logins.

    If it should work, then I guess there is something else wrong here. I’ll have to try and replicate the issue.

    Avatar
    EarthReactor
    Member

    Re: outlook web access will not load up – page constantly loading

    I tried SBS fix my network but it didnt find anything major – only that it couldnt configure my router and that I was using forwarders instead of root hints.

    I checked the application log and found event ID 2307 over and over again:

    The worker process for application pool ‘MSExchangeOWAAppPool’ encountered an error ‘Cannot read configuration file
    ‘ trying to read configuration data from file ‘\?’, line number ‘0’. The data field contains the error code.
    [/CODE]

    I have goggled this, but cant really understand what the problem is. Maybe some corruption in a system file somewhere.

    Any ideas?[CODE]
    The worker process for application pool ‘MSExchangeOWAAppPool’ encountered an error ‘Cannot read configuration file
    ‘ trying to read configuration data from file ‘\?’, line number ‘0’. The data field contains the error code.
    [/CODE]

    I have goggled this, but cant really understand what the problem is. Maybe some corruption in a system file somewhere.

    Any ideas?

    Avatar
    EarthReactor
    Member

    Re: outlook web access will not load up – page constantly loading

    teiger;281636 wrote:
    BTW, the landing page for OWA in SBS 2011 is
    remote.domain.com/owa

    Your on an answering rampage today ay:-)

    Thanks, I have tried that path and it will not work. And also, I have found when people are trying to set out of office remotely (via Exchange over HTTP) it is also erroring, which I think may be related.

    I am going to try repairing the connection from SBS console – but going to wait until I can go on site Monday.

    Avatar
    EarthReactor
    Member
    in reply to: Problem with slow server login and remote access #377206

    Re: Problem with slow server login and remote access

    teiger;281637 wrote:
    Have you, by any chance, disabled IPv6 on the server?

    No I haven’t. I think both problems are resolved now though – remote access was my fault (firewall block/scope restriction) and slow logon i think was actually that I had roaming profiles enabled, and too much stuff on the desktop!! (Whoops).

    Dave

    Avatar
    EarthReactor
    Member
    in reply to: cannot connect to sbs 2011 via remote desktop #377205

    Re: cannot connect to sbs 2011 via remote desktop

    teiger;281634 wrote:
    Sorry for coming late to this thread, but I am just surprised no-one mentioned the SBS Console. Go to the Network/Connectivity tab and you have a dashboard of all your connectivity. Most important, IMHO, in the tasks on the RHS you have a “Fix My Network” wizard, which, usually, throws up any and all networking issues you may have.
    Of course, if your problem is restrictions in the ports/addresses in your firewall, it won’t know, but at least you won’t waste your time “fixing” your server when it doesn’t need fixed.

    Thanks for jumping in – however, in this case the solution was me being a bit stupid – I had previously set a limited scope for connections on port 3389 via the firewall, and then totally forgot I had done so!!!

    Avatar
    EarthReactor
    Member

    Re: Exchange log files are very large – 45GB total – Is this bad?

    teiger;281633 wrote:
    For all this talk of backups, backups and Exchange logs, David, why not build a virtual machine somewhere and try a RESTORE. That way you will know if you have a valid backup or not.
    After all, backups aren’t worth the disk space they are taking, if you cannot restore from them!

    I do do this with our main backups (made with backup assist). but the main reason for this post is because those backups (for exchange) are intermittently failing to even complete). And I think it may be to do with the fact that the logs aren’t being pruned – making the backup nearly twice the size – and seeing as we are using rsync to get it off site every evening, i think its too much for the bandwidth to cope with.

    Avatar
    EarthReactor
    Member
    in reply to: Problem with slow server login and remote access #377203

    Re: Problem with slow server login and remote access

    After I removed almost everything off the desktop, it worked fine. So i think that was the cause, unless some updates went on that I didnt realise.

    Avatar
    EarthReactor
    Member

    Re: Exchange log files are very large – 45GB total – Is this bad?

    Yes, that makes sense. I think I may do that. Not sure how it would work with backup assist/Rsync – hopefully it would only have to back up the changes.

    Avatar
    EarthReactor
    Member

    Re: Exchange log files are very large – 45GB total – Is this bad?

    tehcamel;281570 wrote:
    if you have two backup products pruning logs, they’ll confuse the logs if you need to recover.

    it’s ok to use two programs – you just need to make sure only one is responsible for truncating/pruning the logs.

    That makes sense, I can just have windows backup prune the logs, and backup assist I know does not prune them on its current setting.

    Avatar
    EarthReactor
    Member

    Re: outlook web access will not load up – page constantly loading

    tehcamel;281571 wrote:
    it’s preferable to run fix-my-network onsite (Or at least, connect to a workstation on the network and use that to RDP in then run it)

    Thanks, I’ll try it tomorrow. I’ll go on site – it’s only round the corner anyway:-)

    Avatar
    EarthReactor
    Member

    Re: Exchange log files are very large – 45GB total – Is this bad?

    Ossian;281559 wrote:
    logs get pruned at the end of the backup process, using the checkpoint file to indicate which logs are no longer needed.

    This is done automatically by an “Exchange Aware” backup application

    Thanks very much.

    Avatar
    EarthReactor
    Member

    Re: Exchange log files are very large – 45GB total – Is this bad?

    Thanks guys.
    I just read through this Microsoft article on Exchange 2010 log files so that I could understand it a bit better:

    http://technet.microsoft.com/en-us/library/bb331958(v=exchg.141).aspx

    Humannetwork, in the article it does say that after you successfully discount the databases, the log files are no longer needed and can be safely deleted, so thats an option, but I gather that its probably not the recommended route.

    Ossian, thanks for the heads up, that makes sense, I will configure SBS to do a full backup AND prune the log files.

    Out of interest, how are the logs pruned – ie how does the backup software know that all of the logs have been replayed already?
    I’m just wondering, for example, if the backup failed mid way through, would it matter that it had already pruned the logs?

    Avatar
    EarthReactor
    Member

    Re: outlook web access will not load up – page constantly loading

    Sorry about the late reply guys, I kept avoiding this problem as its confusing me!!

    Andycoxuk
    I have googled that, but not implimented anything yet, I dont fully understand what to do so I need to read up on it, BUT Im not sure if its just exchange/owa (See below).

    Virtual
    No, no proxy server involved.

    teiger
    I havent tried that yet, can I run it remotely, are there any implications, dont want to lock myself out really.

    Some more info:
    its strange, forgetting about OWA for a minute, if I just browse to the root of the server, remotely, at the following URL:
    https://mail.domain.com
    I get the IIS landing page.
    However, the remote access FQDN as per SBS (And as per the SSL cert) is:
    remote.domain.com
    But if I go to that address:
    https://remote.domain.com
    it just loads continuously. -But note that both mail.domain.com and remote.domain.com DO resolve to the correct public IP address.

    ??

    So I guess thats where the problem lies?

    Avatar
    EarthReactor
    Member

    Re: Exchange log files are very large – 45GB total – Is this bad?

    I think I buried my question in too much fluff!

    Is there any danger in pruning the logs with Windows Backup? It warns me I shouldn’t do it if I have other backups running, not sure why??

    Avatar
    EarthReactor
    Member

    Re: Exchange log files are very large – 45GB total – Is this bad?

    Hi guys,

    I spoke to backup assist and they said there is an option to prune the exchange logs by selecting full VSS instead of copy.

    I understand that also windows backup does a VSS copy by default and doesnt prune logs, I found this article about it:

    http://social.technet.microsoft.com/Forums/windowsserver/en-US/093b7a8b-d4e8-46d3-b8a0-b3546a08bd9a/exchange-2010-full-backups-with-windows-backup-not-clearing-transaction-logs?forum=windowsbackup

    I followed that on the server, and got the option to select Full VSS backup, however, it advises that this should be done only if no other backup programs are being used – which is not true in my case, as Im using windows backup and backup assist.

    Just wopndering if there are any implications in what I am going to do – basically, it will be as follows:

    backup assist – backs up data and exchange every night at 8pm – this is off site backup.

    windows backup – backs up full server, data exchange etc every morning at 4am – this is local backup, just for failsafe, and easy restore – Im going to set this to do full VSS backup and prune logs.

    Will that be ok?

    Avatar
    EarthReactor
    Member
    in reply to: cannot connect to sbs 2011 via remote desktop #377194

    Re: cannot connect to sbs 2011 via remote desktop

    Ossian;281283 wrote:
    Certainly.
    Any particular calibre or weapon (I prefer the 15″ Mk I)?

    You aren’t the first to have done something a little bit silly :twisted:, nor will you be the last

    you could probably shoot me out of that one!

    Avatar
    EarthReactor
    Member
    in reply to: cannot connect to sbs 2011 via remote desktop #377193

    Re: cannot connect to sbs 2011 via remote desktop

    It turns out that when I originally configured remote desktop, i restricted the scope to several IPs in the firewall (for security)!!

    Boy do I feel like an idiot! Sorry guys:-)

    Avatar
    EarthReactor
    Member
    in reply to: cannot connect to sbs 2011 via remote desktop #377192

    Re: cannot connect to sbs 2011 via remote desktop

    Can someone please shoot me in the face…

    Avatar
    EarthReactor
    Member
    in reply to: cannot connect to sbs 2011 via remote desktop #377191

    Re: cannot connect to sbs 2011 via remote desktop

    Thanks.
    its very strange, I just tried again to connect from a local network computer – I can ping the DNS name of the server and it resolves fine.
    I try to connect via remote desktop and it just times out and says the usual:
    either the server is turned off, network not available, or not responding.

    I have two hunches –
    1.Its something to do with the fact that the server has two network adaptors – but the unused one is disabled?
    2.it has something to do with ipv6.

    are either of those possible culprits?

    Avatar
    EarthReactor
    Member
    in reply to: cannot connect to sbs 2011 via remote desktop #377190

    Re: cannot connect to sbs 2011 via remote desktop

    Bertmax;281235 wrote:
    Did you add the necessary accounts to the Remote Desktop Users group? By default, only those with local admin rights have the ability to use RDP.

    The account I am using to access the server is the domain admin account.
    When I checked “Allow connections from computers running any version of remote desktop”, the box for users says administrator already has access.

    Avatar
    EarthReactor
    Member

    Re: Exchange log files are very large – 45GB total – Is this bad?

    5habbaranks;281202 wrote:
    Within Backup Assist you can (and obviously have to) specify to clear the logs on a successful backup. Im assuming that if the OP is doing a full exchange backup with backup exec they couldn’t have stipulated to flush the transactional logs.

    Thanks, thats led me to a possible problem – we only have the Rsync version of backup assist, it does still backup exchange, but I have a feeling that it does not give the option to prune the exchange logs, does that sound right?

    Also, windows backup is set to do a full server backup, which includes the exchange drive, how come that is not pruning logs? Any ideas?

    Avatar
    EarthReactor
    Member
    in reply to: Recipients email is mis-spelt upon reply #377188

    Re: Recipients email is mis-spelt upon reply

    OK, so I read the message headers as per this article:

    http://office.microsoft.com/en-gb/outlook-help/view-e-mail-message-headers-HA001230300.aspx

    Heres a snippet from the headers (with confidential data obscured):

    Date: Thu, 30 Jan 2014 03:51:23 -0800
    From: Jsmith
    Reply-To: Jsmith
    Subject: Fw: EN7999/E8
    To: Recipient
    In-Reply-To:
    MIME-Version: 1.0
    Content-Type: multipart/alternative;
    boundary=”178851755-1006144440-xxxxx”
    Return-Path: [email protected][/CODE]

    Of course, I can see the Reply-To field is incorrectly spelt, does that mean that the sender has some information incorrectly configured?[CODE]Date: Thu, 30 Jan 2014 03:51:23 -0800
    From: Jsmith
    Reply-To: Jsmith
    Subject: Fw: EN7999/E8
    To: Recipient
    In-Reply-To:
    MIME-Version: 1.0
    Content-Type: multipart/alternative;
    boundary=”178851755-1006144440-xxxxx”
    Return-Path: [email protected][/CODE]

    Of course, I can see the Reply-To field is incorrectly spelt, does that mean that the sender has some information incorrectly configured?

    Avatar
    EarthReactor
    Member
    in reply to: Recipients email is mis-spelt upon reply #377187

    Re: Recipients email is mis-spelt upon reply

    JeremyW;281029 wrote:
    Check the SMTP headers on an email you received from him and see what shows in the “reply-to” field.

    Thanks. I am going to check this evening.

Viewing 30 posts - 31 through 60 (of 205 total)