Casey Spiller's blog

The chicken or the egg. How to get current ESE dll's from .msp packages to run Jetstress against without installing Exchange

2012-03-12T15:58:00Z

You want to jetstress some new hardware, but may not be running the latest build of ESE and need to do comprehensive testing with the latest build of ESE to make sure the results are right.

The typical approach most people use is to install Exchange, get it patched up and then stop all of the services manually. While this does work, its not exactly guidance and can be a little problematic.

Now lets look at our jetstress guidance:

http://technet.microsoft.com/en-us/library/bb643095(v=EXCHG.80).aspx

"Jetstress testing should be performed before you install Exchange on the server. If you have already installed Exchange Server, you should still copy the ESE database modules to the Jetstress installation directory. If you are testing with a different version of Exchange Database Engine than the one installed with Exchange Server, you may have to uninstall the existing Exchange Database Engine counters before you run Jetstress. You can do this by running unlodctr ESE at a command prompt. However, you will still have to uninstall and reinstall the Exchange version of the Exchange Database Engine counters when testing is completed."

What can we do about this?

Obtain the latest patch that includes ESE fixes. Specifically we need:

ESE.DLL
ESEPERF.DLL
ESEPERF.INI
ESEPERF.HXX

Download msix from http://hstewart.members.winisp.net/downloads/msix.zip (source: http://blogs.msdn.com/b/heaths/archive/2006/04/07/571138.aspx)
Run : msix PathtoLatestPackage.msp /out "C:\Directory to output files"
In the output directory, you should now see files such as "PCW_CAB_E12_DAT". Look for the largest file as depending on the version of Exchange, this file name will be different)
Rename PCW_CAB_E12_DAT to PCW_CAB_E12_DAT.CAB
Double click the cab to access the .dll's
Copy the files needed to the appropriate Jetstress directory

Error "Cannot open Mailbox" when attempting to open an Exchange 2007 mailbox from Exchange 2010

2012-03-06T19:16:00Z

The scenario is that you are logged into a Exchange 2010 mailbox and want to access a shared calendar or mailbox on Exchange 2007.

When attempting to open the mailbox, you may receive the following error/ (full call stack below):

Request

Url:
https://server.company.com:443/owa/proxyLogon.owa

Exception

Exception type:
Microsoft.Exchange.Data.Storage.StoragePermanentException

Exception message: Cannot open mailbox /o=Company/ou=Administrative Group/cn=Recipients/cn=testuser1.

First, we want to look at the Exception that failed inside of the callstack.

In the Inner Exception:

Exception type: Microsoft.Mapi.MapiExceptionCallFailed

Exception message: MapiExceptionCallFailed: Unable to make
connection to the server. (hr=0x80004005, ec=2084) Diagnostic context: Lid:
23065 EcDoConnectEx called [length=86] Lid: 17913 EcDoConnectEx returned
[ec=0x824][length=56][latency=58] Lid: 19778 Lid: 27970 StoreEc: 0x824 Lid:
17730 Lid: 25922 StoreEc: 0x824

80004005 = Generic Error (MAPI_E_CALL_FAILED)
2084 = ERROR_DS_CANT_REM_MISSING_ATT (An attribute cannot be retrieved from AD for the logon)

In troubleshooting the issue, we were able to figure out that the attribute that was missing was SharedCalendarTimezoneSetting.

Background:

There was new functionality that was added to Exchange 2007 SP3 RU1. This new functionality forces Exchange 2007 to check the delegate user's SharedCalendarTimeZone, which is used to determine what time zone to show the mailbox in. This works fine against an Exchange 2007 delegate mailboxes, but unfortunately it doesn’t work against Exchange 2010 mailboxes. The failure happens when the Exchange 2010 user attempts to access the Exchange 2007 mailbox and on login, we attempt to check this value in an attempt to learn how to present the data. This data doesn't exist and therefore the error is generated.

Resolution:

On Exchange 2007, set the default time zone setting:

set-organizationalconfig -sharecalendartimezonesetting principal

Note: This can be set to principal or delegate as the article explains, either will resolve the issue if we are running into this problem.

If the parameter value is set to Principal, the time zone is shown in the principal’s time zone. If the parameter value is set to Delegate, the time zone is shown in the Delegate’s time zone.

The Full Call stack:

Microsoft.Exchange.Data.Storage.ConnectionCachePool.OpenMailbox(String
serverDn, String userDn, String mailboxDn, Guid mailboxGuid, Guid mdbGuid,
Object identity, ConnectFlag connectFlag, OpenStoreFlag openStoreFlag,
CultureInfo cultureInfo, String clientInfoString, Boolean secondTry)

Microsoft.Exchange.Data.Storage.MailboxSession.Initialize(LogonType
logonType, ExchangePrincipal owner, DelegateLogonUser delegateUser, Object
identity, OpenMailboxSessionFlags flags)

Microsoft.Exchange.Data.Storage.MailboxSession.CreateMailboxSession(LogonType
logonType, ExchangePrincipal owner, DelegateLogonUser delegateUser, Object
identity, OpenMailboxSessionFlags flags, CultureInfo cultureInfo, String
clientInfoString)

Microsoft.Exchange.Data.Storage.MailboxSession.Open(ExchangePrincipal
mailboxOwner, IntPtr authenticatedUserHandle, CultureInfo cultureInfo, String
clientInfoString)

Microsoft.Exchange.Clients.Owa.Core.OwaClientSecurityContextIdentity.CreateMailboxSession(ExchangePrincipal
exchangePrincipal, CultureInfo cultureInfo)

Microsoft.Exchange.Clients.Owa.Core.UserOptions.LoadSharedCalendarTimezoneSetting(TimezoneSetting&
setting)

Microsoft.Exchange.Clients.Owa.Core.UserOptions.Load(IList`1
properties)

Microsoft.Exchange.Clients.Owa.Core.UserOptions.LoadAll()

Microsoft.Exchange.Clients.Owa.Core.UserContext.Load(OwaContext
owaContext)

Microsoft.Exchange.Clients.Owa.Core.RequestDispatcher.CreateUserContext(OwaContext
owaContext, UserContextKey userContextKey, UserContext& userContext)

Microsoft.Exchange.Clients.Owa.Core.RequestDispatcher.PrepareRequestWithoutSession(OwaContext
owaContext, UserContextCookie userContextCookie)

Microsoft.Exchange.Clients.Owa.Core.RequestDispatcher.InternalDispatchRequest(OwaContext
owaContext)

Microsoft.Exchange.Clients.Owa.Core.RequestDispatcher.DispatchRequest(OwaContext
owaContext)

System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()

System.Web.HttpApplication.ExecuteStep(IExecutionStep step,
Boolean& completedSynchronously)

Inner Exception

Exception type: Microsoft.Mapi.MapiExceptionCallFailed

Call stack

Microsoft.Mapi.MapiExceptionHelper.ThrowIfError(String
message, Int32 hresult, Int32 ec, DiagnosticContext diagCtx)

Microsoft.Mapi.ExRpcConnection.Create(ConnectionCache
connectionCache, ExRpcConnectionCreateFlag createFlags, ConnectFlag connectFlags,
String serverDn, String userDn, String user, String domain, String password,
String httpProxyServerName, Int32 ulConMod, Int32 lcidString, Int32 lcidSort,
Int32 cpid, Int32 cReconnectIntervalInMins, Int32 cbRpcBufferSize, Int32
cbAuxBufferSize)

Microsoft.Mapi.ConnectionCache.OpenMapiStore(String
mailboxDn, Guid mailboxGuid, Guid mdbGuid, ClientIdentityInfo clientIdentity,
String userDnAs, OpenStoreFlag openStoreFlags, CultureInfo cultureInfo, String
applicationId)

Microsoft.Mapi.ConnectionCache.OpenMailbox(String mailboxDn,
Guid mailboxGuid, Guid mdbGuid, ClientIdentityInfo clientIdentity, String
userDnAs, OpenStoreFlag openStoreFlags, CultureInfo cultureInfo, String
applicationId)

Microsoft Exchange Transport Log Search service will not start and a series of 4999 events are logged

2012-01-24T18:01:00Z

Problem

On Exchange 2010, you may notice the below event firing rapidly. In our scenerio we were seeing the service attempt to start and go down approximatly 420 times an hour, logging the below 4999 every time. The only action that was taken prior to this problem appearing was the instalation of Exchange 2010 Sp2. It has been noted that this same problem has occured while installing various RollUps (RUs) as well.

Log Name:      Application
Source:        MSExchange Common
Event ID:      4999
Task Category: General
Level:         Error
Keywords:      Classic
User:          N/A
Description:
Watson report about to be sent for process id: #, with parameters: E12, c-RTL-AMD64, 14.02.0247.005, MSExchangeTransportLogSearch, MSExchangeTransportLogSearch, M.E.T.L.S.MailFlowStatistics.InitializeRecord, System.OutOfMemoryException, a3ee, 14.02.0247.003.
ErrorReportingEnabled: False

Resolution

When we have seen the problem in the past, the problem has happened when a function attempted to format information from these files. The end result is a IndexOutofRangeException when trying to read the contents of temporary stored statistics.

Rename the following directory (to preserve existing data for root cause if desired):

Program Files\Microsoft\Exchange Server\V14\TransportRoles\Logs\ActiveUsersStats\Backup
Restart the Microsoft Exchange Transport Log Search service

Upon restarting the service a new Backup directory is created by the service and the error will not persist.

Troubleshooting EWS requests using IIS logs with Logparser

2012-01-23T14:09:00Z

The problem:

We have very valuable data inside of the IIS logs that can greatly assist in troubleshooting Exchange Web Service clients. The problem is that all of the data exists in one field (cs-uri-query) inside of the IIS logs.

An example cs-uri-query field for a EWS call:

;RC:111111ac-1111-1111-1111-111112c1111;Init>>Conn:0,HangingConn:0,AD:30000/30000/0%,CAS:54000/54000/0%,AB:30000/30000/0%,RPC:36000/36000/0%,FC:1000/0,Policy:DefaultThrottlingPolicy_3333333-3333-3333-3333-333333333333,Norm,Sub:5000/0;SoapAction=GetUserAvailability;AddressCount=1;MessageId=urn:uuid:db01111-da7c-4f46-b89d-1111be7aaaaa;Requester=S-3-3-33-3333223333-3333333333-3333673333-3323333;local=1;Threads.Worker.Available=1198;Threads.Worker.InUse=0;Threads.IO.Available=1194;Threads.IO.InUse=1;Failures=0;MailboxRPC.TimeTaken=0;MailboxRPC.RequestCount=0;AD.TimeTaken=0;AD.RequestCount=2;Request.CPU.Main=0;Local.FirstThreadExecute=0;Local.LongPole.Elapsed.TimeTaken=53;Local.LongPole.Elapsed.Destination=server.company.com;LocalLongPole.TimeTaken=3;LocalLongPole.RequestCount=28;LocalLongPole.Destination=server2.company.com;TotalLocal.TimeTaken=53;TotalLocal.RequestCount=1;Thread.CPU.LongPole.TimeTaken=15;Thread.CPU.LongPole.Destination=LocalRequest.Execute;Request.Phase.PreQuery=5;Request.Phase.RequestDispatcher.BeginInvoke=0;Request.Phase.RequestDispatcher.Complete=54;Request.Phase.PostQuery=0;Request.CPU.Total=15;TimeInAS=59;[C]Queues:0msec/Execute:59msec;End(61ms)>>Conn:1,HangingConn:0,AD:30000/29996/1%,CAS:54000/53940/1%,AB:30000/30000/0%,RPC:36000/35972/1%,FC:1000/0,Policy:DefaultThrottlingPolicy_333333-3333-3333-3333-aaaaaaaaaaaa,Norm[Resources:(DC)dc.company.comHealth:-1%,HistLoad:0),(DC)dc2.company.com(Health:-1%,HistLoad:0),(Mdb)DatabaseName(Health:-1%,HistLoad:0),],Sub:5000/0;

The solution:

We will utilize logparser purely for speed

Download Log Parser

The LogParser Query:

It took a bit of time to work around some of the logic, but this works well.

Logparser.exe -i:iisw3c "SELECT time, date, cs-username, substr(substr(cs-uri-query, index_of(cs-uri-query, 'Impersonate')),0,index_of(substr(cs-uri-query, index_of(cs-uri-query, 'Impersonate')),';')) AS [Impersonate], substr(substr(cs-uri-query, index_of(cs-uri-query, 'SoapAction')),0,index_of(substr(cs-uri-query, index_of(cs-uri-query, 'SoapAction')),';')) AS [SoapAction], substr(substr(cs-uri-query,index_of(cs-uri-query, 'RC')),0,index_of(substr(cs-uri-query, index_of(cs-uri-query, 'RC')),';')) AS [RC Data], cs-uri-stem, substr(substr(cs-uri-query, index_of(cs-uri-query, 'Execute')),0,index_of(substr(cs-uri-query, index_of(cs-uri-query, 'Execute')),';')) AS [Time to Execute] INTO c:\logs\out.csv FROM c:\logs\*.log Where cs-username = 'Domain\ServAcct' AND cs-uri-query LIKE '%SoapAction%'"

Note: output goes into the file specified after the INTO clause above. Input is taken from the FROM clause. Notice we are grabbing all .log files in a directory. We are also filtering for requests coming from one user, typipcally applications will authenticate as one user and Impersonate the intended target.

What this query does:

-Only fields that are sent by a specific user (Domain\ServAcct above)

Splits the csi-uri-query to pull out:

who the above user is impersonating as
what the soapaction is
the RC field
The Execution time

It took me a bit to understand the built in functions to sort the data we needed.

The output:

How fast is this?

On my (rather speedy) laptop with about 650 megs of logs:

Statistics:

-----------

Elements
processed: 827827

Elements
output: 325218

Execution
time: 11.02 seconds

Great, i see the data in Excel.... How can i make it useful?

Sorting and Charting in Excel is extremely helpful, I'll go through a few scernios that shed some light on our issue

Counts for each user:

Row Labels	Count of SoapAction
Impersonate:Domain\User1	1102
SoapAction=m:ConvertId	293
SoapAction=m:CreateItem	1
SoapAction=m:FindFolder	22
SoapAction=m:FindItem	310
SoapAction=m:GetFolder	11
SoapAction=m:GetItem	377
SoapAction=m:UpdateItem	88
Impersonate:Domain\User2	1013
SoapAction=m:ConvertId	285
SoapAction=m:CreateItem	1
SoapAction=m:FindFolder	22
SoapAction=m:FindItem	352
SoapAction=m:GetFolder	11
SoapAction=m:GetItem	286
SoapAction=m:UpdateItem	56

Counts for each Action:

Row Labels	Count of SoapAction
SoapAction=GetUserAvailability	31
SoapAction=m:ConvertId	65685
SoapAction=m:CreateItem	1560
SoapAction=m:DeleteItem	1013
SoapAction=m:ExpandDL	12
SoapAction=m:FindFolder	49536
SoapAction=m:FindItem	102752
SoapAction=m:GetFolder	24804
SoapAction=m:GetItem	70584
SoapAction=m:ResolveNames	76
SoapAction=m:UpdateItem	9165
Grand Total	325218

That looks great, how do I get that level of detail out of the logs?

Note: I am using Excel 2010

To Calculate Counts for each user:

Open the .csv output in Excel
Without selecting any cells, click insert, PivotTable
At Select a Table or Range, the default should be all Cells, click New Worksheet
On the new worksheet with the PivotTable click Impersonate and SoapAction under PivotTable Field List (upper right)

Now drag SoapAction to the (Sum) Values box at the bottom right

Now we will want to fix the sort to list the user with the highest number of requests first

Highlight all of the values inside of “Count of SoapAction” column (not gathering the header or the total at the bottom)
Click the Data tab

Select Z to A to sort Largest to Smallest (Next to Sort, upper right)

To Calculate Counts for each Action:

Open the .csv output in Excel
Without selecting any cells, click insert, PivotTable
At Select a Table or Range, the default should be all Cells, click New Worksheet
On the new worksheet with the PivotTable click SoapAction under PivotTable Field List (upper right)

Now drag SoapAction to the (Sum) Values box at the bottom right

Now look at the worksheet with the Pivot Table, you should see the data sorted correctly. Using the same technique you can sort or chart the data by time to get an idea of when the bulk of requests are coming in

-CaseyS

Exchange 2003\Redbull Connector\Permissions not migrated when we migrate resource mailboxes

2008-05-07T21:04:00Z

When attempting to migrate resource mailboxes across via the Exchange 2003 Lotus Notes Connector (Redbull) you may notice that permissions are not migrated correctly. This issue is by design, you will need to set these permissions manually at this time.

The server to which the application is connected cannot impersonate the requested user due to insufficient permission.

2008-03-12T20:04:00Z

PROBLEM: When running The Transporter for either Lotus Notes or IMAP migrations you may encounter the following error:

Summary: 1 item(s). 0 succeeded, 1 failed.
Elapsed time: 00:01:00

email@address.com
Failed

Error:
Migration does not happen for the user (email@address.com) due to some errors. All the mailbox items belonging to this user will be ignored.

System.Web.Services.Protocols.SoapException: The server to which the application is connected cannot impersonate the requested user due to insufficient permission.
   at Microsoft.Exchange.Services.RequestSoapHeaderServiceExtension.ProcessSoapHeaders(SoapMessage message, Object responsibleObject)
   at Microsoft.Exchange.Services.RequestSoapHeaderServiceExtension.AfterDeserializeRequest(SoapMessage message)
   at Microsoft.Exchange.Services.ServiceExtensionManager.DoAfterDeserializeRequest(SoapMessage message)
   at Microsoft.Exchange.Services.ServiceExtensionManager.<>c__DisplayClass1.<ProcessMessage>b__0()
   at Microsoft.Exchange.Diagnostics.ExWatson.<>c__DisplayClass8.<SendReportOnUnhandledException>b__4()
   at Microsoft.Exchange.Common.IL.ILUtil.DoTryFilterCatch(TryDelegate tryDelegate, FilterDelegate filterDelegate, CatchDelegate catchDelegate)
   at Microsoft.Exchange.Diagnostics.ExWatson.SendReportOnUnhandledException(MethodDelegate methodDelegate, IsExceptionInteresting exceptionInteresting, Boolean terminating)
   at Microsoft.Exchange.Diagnostics.ExWatson.SendReportOnUnhandledException(MethodDelegate methodDelegate, IsExceptionInteresting exceptionInteresting)
   at Microsoft.Exchange.Services.Core.ServiceDiagnostics.TraceErrorOnUnhandledException(MethodDelegate methodDelegate)
   at Microsoft.Exchange.Services.ServiceExtensionManager.ProcessMessage(SoapMessage message)
   at System.Web.Services.Protocols.SoapMessage.RunExtensions(SoapExtension[] extensions, Boolean throwOnException)
   at System.Web.Services.Protocols.SoapServerProtocol.CreateServerInstance()
   at System.Web.Services.Protocols.WebServiceHandler.Invoke()
   at System.Web.Services.Protocols.WebServiceHandler.CoreProcessRequest()

Warning:
Impersonation failed for the user (email@address.com) Error: (ErrorImpersonationDeniedThe server to which the application is connected cannot impersonate the requested user due to insufficient permission.).

RESOLUTION:

This error lets you know that you lack permissions to impersonate the user. The Active Directory user used to perform the migration must have the permission to impersonate the users to inject mail into their mailboxes.

This permission can be set using an Exchange Management Shell command:

This adds the permission to one CAS (Client Access Server):
Add-ADPermissions -Identity 'DN_of_ClientAccessServer' -User 'domain\username' -ExtendedRights ms-Exch-EPI-Impersonation

This adds the permission to all CAS servers:
foreach ($exchangeServer in Get-ExchangeServer)
{
     if ($exchangeServer.ServerRole -match 'ClientAccess')
     {
          Add-ADPermission -Identity $exchangeServer.DistinguishedName -User 'domain\user' -ExtendedRights ms-Exch-EPI-Impersonation
     }

}

Where domain\user is the user performing the migration.

A few quick questions about upgrading to a new version of the Transporter

2008-01-25T22:58:00Z

Everyone in awhile i get questions via email that arent well documented. I will try (when i have time) to post those here:

1. Can we upgrade by installing the new release without issues, or will it wipe out existing settings?

Uninstall/Reinstall the Transporter application but leave your connectors in place

2. Do we also need to upgrade the Domino server with a new excalcon ?

Yes, the reason you have to do it this time is due to a security change that was implemented for this release. (Generally you want to do this regardless of the release to be on the safe side)

New Transporter released today - things are getting busy

2008-01-21T20:31:00Z

New build of the transporter shipped today, you can download it here:

http://www.microsoft.com/downloads/details.aspx?FamilyID=35fc4205-792b-4306-8e4b-0de9cce72172&DisplayLang=en

This is the transporter release that has been in the works for a while now. It includes new powershell commands to assist in migrating from any generic pop3 or imap server to Exchange 2007.

A quick quote on that:

Key Features of POP/IMAP migration tools:
Tools are designed to enable an administrator to bulk migrate mailboxes from generic POP/IMAP servers to Exchange.
• General extraction of mailbox content from generic POP/IMAP servers
     o Test has migration of mailbox content from Exchange, Domino, GMAIL, AOL, Comcast, IMAP UW Server on Unix, Mail.RU,Communicate Pro
     o Extraction can use individual mailbox credentials or through an administrative credential
• Migration to Exchange 2007 using the Transporter Engine and Exchange Web Services
     o Migrates content into existing mailboxes using Exchange Web Services
     o Preserves all mail formatting, address headers and iCAL content
• Easy to use MMC Wizard GUI and PowerShell tasks
     o GUI can be used to load and track bulk lists of mailboxes to migrate
     o PowerShell can be used for automation/advanced migration

So here recently i've had a couple things i wanted to blog about, but we have been incredibly busy the last few weeks. Today i read an article that might explain why, and gives a little insight into how the next few months might go:

http://www.internetnews.com/ent-news/article.php/3722791

Specifically this section of the article which Justin pointed out to me this morning:

"
That rhetoric is echoed by his boss. "In the last six months of 2007, in the enterprise customer segment alone, more than 300 firms representing 2.8 million people began the move to Exchange Server, Office SharePoint Server and the Office suite," Chris Capossela, corporate vice president in the Microsoft Business Division, said in a statement. "That’s a 164% increase over the same period in 2006 [and] we’re already on track to exceed these numbers in 2008," he added.
"

Busy times... busy times

Could not create one or more attachments for item \ The operation has timed out

2007-12-20T00:56:00Z

PROBLEM:

When attempting to run move-dominomailbox you may receive the following error:

WARNING: Could not create one or more attachments for item (Subject of the message (message.mail)) for the user User@domain.com
The message was migrated without attachments. This error might be due to configuration limitation on the server.
Error details: The operation has timed out
Please refer to help for the configuration changes needed

RESOLUTION:

This error is typical when we time out trying to send the SOAP message over HTTP and timing out due to IIS's timeout setting.

1. First lets look at the size of the message we are migrating across on Domino.
2. Look at the web.config for the EWS virtual directory to see what the maxRequestLength is set to. This needs to be higher than the size of the message we are trying to push across.
3. Look at the timeout setting in IIS Manager for the Website that EWS falls under
     a. Open IIS Manager
     b. Right click/Properties of the Website EWS is under
     c. On the Web Site tab, adjust the Connection timeout from 120 seconds upwards depending on how large the message is and how long it takes to send via SOAP

The request failed with HTTP status 401: Unauthorized \ Could not retrieve e12 webservice url

2007-12-18T23:29:00Z

PROBLEM:

When attempting to migrate a user with move-dominomailbox using the Transporter for Lotus Notes for Exchange 2007, you may receive the following error:

The request failed with HTTP status 401: Unauthorized
Could not retrieve e12 webservice url

When running the same command with a -debug at the end of it, you may receive the following error:

DEBUG: Pinging URL (https://server.domain.com/ews/exchange.asmx)
DEBUG: Request failed with the error message (The request failed with HTTP status 401: Unauthorized.).

RESOLUTION:

If you run the Transporter for Lotus Notes on the CAS server that you have specified for the Availability Service URL, you will need to disable the loopback check (DisableLoopbackCheck) on this CAS server.

Method 1: Disable the loopback check

1. Click Start, click Run, type regedit , and then click OK.
2. In Registry Editor, locate and then click the following registry key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa

3. Right-click Lsa, point to New, and then click DWORD Value.
4. Type DisableLoopbackCheck , and then press ENTER.
5. Right-click DisableLoopbackCheck, and then click Modify.
6. In the Value data box, type 1 , and then click OK.
7. Quit Registry Editor, and then restart your computer.

Method 2: Specify host names

To specify the host names that are mapped to the loopback address and can connect to Web sites on your computer, follow these steps:

1. Click Start, click Run, type regedit , and then click OK.
2. In Registry Editor, locate and then click the following registry key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0

3. Right-click MSV1_0, point to New, and then click Multi-String Value.
4. Type BackConnectionHostNames , and then press ENTER.
5. Right-click BackConnectionHostNames, and then click Modify.
6. In the Value data box, type the host name or the host names for the sites that are on the local computer, and then click OK.
7. Quit Registry Editor, and then restart the IISAdmin service.

MORE INFORMATION:

You can additionally test this by connecting to the same URL (https://server.domain.com/ews/exchange.asmx) from both the CAS server itself, and from a different machine on the same domain. The CAS server will be unable to login and reprompt for credentials. The other machine will be able to log in fine and display the XML fine. This is an issue with how we only allow connections to the FQDN of the machine name, the external name we have specified in the url does not match this.

ie. if the server name is server.internaldomainname.com and external to your company you specify it as server.domain.com.

Microsoft Operations Manager and Exchange 2007\How to determine the script running for a failed alert

2007-11-16T18:41:00Z

Recently, i began working a bit with Microsoft Operations Manager on a few issues related to the Management Pack for Exchange Server 2007 for MOM 2005. One of the things that drove me crazy right off the bat was my inability to actually see what script it was running when an alert failed.

Lets take a look at the following alert:

Type: Error
Description: One or more of the OWA Connectivity tests failed. Detailed Information:
-----------------------------------------------
Error: The test received an unexpected response to an OWA request.
URL: https://server.com/

In MOM 2005, you will see the alert like this. Pay close attention to the section that has been circled below:

This indicates exactly where we can find the rule that fired for a failed alert.

Next lets open up the MOM Administrators Console.
-Expand Management Packs\Rule Groups\Microsoft Exchange Server\Exchange 2007

Now you will use the Rule information gathered above to locate the Rule that failed:

Notice the path to the rule on the left, and the actual rule highlighted on the right.

Now double click on the Rule:

Click on the Response, and click Edit:

Select the cmdletCommand and click Edit Parameter:

Now copy the contents of the Value field and paste them into notepad or run them in a powershell window

Now you can work with the powershell command in powershell to determine why it failed

So from this i can tell the ExternalURL we are going to, is the wrong URL... (going to / instead of /owa)

First i list off the ExternalURL with "get-OWAVirtualDirectory "owa (default web site)" | fl *" and then set the ExternalURL to the correct value with set-OWAVirtualDirectory:

And then finally rerun the test to make sure the problem is fixed:

Success! Now I can resolve the MOM alert and were good to go.

Free/Busy information off (ahead) by one hour starting November 4th?

2007-10-29T23:49:00Z

So some of you may have ran into this already, its a new problem we have been made aware of.

Symptoms: Free/Busy information is one hour ahead for any meetings on or after November 4th.

This problem is only seen when the following conditions are met:
-Exchange 2007 is used
-Outlook 2007 is used to view "legacy" Free/Busy data
*or*
-From Outlook 2007 we are viewing Free/Busy data of Lotus Notes users across the Transporter.

note:
-Outlook Web Access 2007 will not exhibit this problem
-Outlook Web Access 2003 will exhibit this problem

The problem here has nothing to do with the Transporter. This problem is when viewing "legacy" free/busy data from either Outlook 2007 or Outlook Web Access 2003 on/after the date of November 4th. The Transporter is effected due to it storing Free/Busy data in a public folder and going across the Availability Service to get to it.

The cases behind this problem are ongoing, I will post an update here when I hear about a resolution.

3Ehh Schedule Object Doesn't Exist when trying to view a users Free/Busy information

2007-10-28T02:20:00Z

When a Domino/Notes or Exchange user tries to view Free/Busy you may receive the
following error in the Domino Console:

Notes viewing Exchange Free/Busy:
ODSTree_HostToCanAppend> Creating schedule object for Address@Domain@NotesDomain,
error = 3EEh: schedule object doesn't exist

Exchange viewing Domino/Notes Free/Busy:
ODSTree_HostToCanAppend> Creating schedule object for Address@Domain, error = 3EEh:
schedule object doesn't exist

----------------------------------------------------------

(There are three known reasons that cause this error)

This typically means that Domino was able to connect to Exchange to view
free/busy data, but for some reason the users free/busy information was not in the
Free/Busy public folder.

This happens more often than not if we havent logged into the users mailbox or
the user has never used their calendar. Attempt to view this users Free/Busy data
from another Outlook client. If it does not show up there, thats a good place to
start troubleshooting.

However if you can see the data in Outlook but not in the Notes client and are
recieving the above error, check the Administrative Group that we are viewing with
notes. By default Free/Busy does not replicate between Administrative Groups and
you will need to configure replicas.

Note: Configuring replicas of Free/Busy information dramatically increases the
time before a meeting is set and Free/Busy is able to be viewed remotely due to
multiple layers of replication
We connect to the public folder database via http://server/public . By default
on Exchange 2007 CAS, /public is set to REQUIRE SSL. This needs to be removed to
not require SSL. SSL can not be enabled on this virtual directory or we will fail.
When a Exchange user tries to view a Domino/Notes users Free/Busy:

Error:
ODSTree_HostToCanAppend> Creating schedule object for Address@Domain, error = 3EEh:
schedule object doesn't exist

Make sure the Exchange user exists in Busytime on Domino/Notes

-CaseyS

Error 800706ba: The Active Directory synchronization agent could not be opened.

2007-10-25T23:17:00Z

When running Directory Synchronization under Exchange 2007 with the Transporter Suite for Lotus Notes, you may encounter the following error:

Event Type: Error
Event Source: ExchangeDominoConnector
Event Category: Domino Directory Synchronization
Event ID: 8322
Description:
Error 800706ba: The Active Directory synchronization agent could not be opened.

Event Type: Error
Event Source: ExchangeDominoConnector
Event Category: Domino Directory Synchronization
Event ID: 511
Description:
Error {GRC:1404}: The application failed while processing.

When attempting to Sync users from Notes to Exchange, we need to generate addresses for contacts/users so that we can create them in Active Directory.

RPC connectivity is required from the Transporter server to the Mailbox server running the Recipient Update Service.

Attempt to open the event logs of the Mailbox Server from the Transporter server. If this fails, there is a firewall in place (hardware or software) that is preventing us from generating those addresses.

-CaseyS

Microsoft Transporter Suite End to End document released...

2007-10-25T16:44:00Z

If you are going to be migrating with the Exchange 2007 Transporter Suite for Lotus Notes, you want this document.

This document not only has screenshots of how everything should be configured, there is an excellent troubleshooting section in it that fixes the bulk of the issues weve seen to date.

Microsoft Transporter Suite End to End document

-CaseyS

Missing headers when using the Exchange 2003 Lotus Notes Connector (Redbull)

2007-10-03T16:31:00Z

Some of you may have already noticed this, but I wanted to put this out there in an attempt to document just about anything I come across that is known to us here at Microsoft.

You may notice that if you bridgehead your mail on Notes and sit Exchange behind it that the message headers get stripped before it hits Exchange.

(Internet)-----(Domino/Notes)-----(Exchange)

This is known and by design. The "Received" headers are not copied to PR_TRANSPORT_HEADERS during conversion. This means that the only headers Exchange users will see are Exchange headers.

The only work around? Use SMTP for mailflow.

-CaseyS

An item with the same key has already been added when using the Transporter for Lotus Notes

2007-09-27T23:41:00Z

When migrating domino mailboxes using the Lotus Notes Transporter for Exchange 2007, you may encounter the following error:

"An item with the same key has already been added."

From the Transport Powershell we see this error:
Move-DominoMailbox : An item with the same key has already been added.

------------------------------------------------------------------------------------

I have ran across this error a couple of times, i cant tell you exactly what seems to be causing it. It appears to be something inside of the nsf for the user so we will want to run the 3 step magic trick on it as follows:

Run the following Domino command line utilities on the Domino mail file; typically shortname.nsf.

Note: You will be prompted for and must know the user.id and password for the Domino mail file.

In the following examples, replace shortname.nsf with the Domino mail file that failed during the migration attempt.

C:\Program Files\Lotus\Notes\nfixup shortname.nsf -f
C:\Program Files\Lotus\Notes\nupdall shortname.nsf -r
C:\Program Files\Lotus\Notes\ncompact.exe shortname.nsf

For more information visit http://www-304.ibm.com/jct09002c/isv/tech/faq/individual?oid=2:31420