Anybody with access to Microsoft's internal tools willing to convert a trace file for me?
this blog post from Microsoft talks about how Microsoft will often do this if you contact them through the "Microsoft Newsgroups"
What is an Extrace ? - Exchange Support Team Central Europe - Site Home - TechNet Blogs
http://blogs.technet.com/b/appssrv/archive/2009/05/18/what-is-an-extrace.aspx
Hello,
Recently I started using the following powershell command to delete unwanted emails from every member's mailbox belonging to a distribution group:
Get-DistributionGroupMember -Identity "GroupeOne" | Search-Mailbox -SearchQuery 'Subject:"Bad Email" AND (received:01/15/2015..01/15/2015)' -targetmailbox spamfilter@mydomain.com -targetfolder "DeletedSpam 2014-01-15" -loglevel full -deletecontent -Confirm:$false
This works extremely well and helps me analyze who sent, received and opened the message. In the case of a virus this is really helpful to know which computer I need to start the virus removal process on.
Anyways, my question is regarding an email address that appears in my log as having sent a message. This email address appears to be a UUID. The following is an example of what it looks like:
MicrosoftExchangesrmf46KxQ8fPv9n0g41CGg4Kyi4tDCCC@mydomain.com
I've searched using:
get-mailbox -identity MicrosoftExchangesrmf46KxQ8fPv9n0g41CGg4Kyi4tDCCC@mydomain.com
The return is false and no object could be found. I'm trying to figure out how an object that doesn't exist can send messages?
Any ideas?
Aditya Mediratta
Aditya Mediratta
is there a way to hide your email address (from) and shoot out anonymous emails in exchnage. Anyone with customized script or code would be a great help ?
Aditya Mediratta
Hi,
these old alerts are already almost one year old. If I make import or export now --> no alerts.
Export PST of mailbox 'xxx' has been queued. It was started by Admin on 3/31/2014 8:01:27 AM.
Import PST of mailbox 'yyy' has been queued. It was started by Admin on 3/10/2014 12:12:59 PM.
These Imports and Exports success, but alerts left. Notification UI shows 50 or sometimes 74 alerts.
I check status with these commands, don't get any queued request:
get-mailboximportrequest -resultsize "Unlimited" | get-mailboximportrequeststatistics | fl > "C:\import-request.txt"
get-mailboxexportrequest -resultsize "Unlimited" | get-mailboxexportrequeststatistics | fl > "C:\exeport-request.txt"
KR, Jyrki
Hi Experts,
I had an abrupt problem came out when my clients brought me notice that they're disconnected from exchange, when I checked my exchange console then I saw my mailbox "dismounted" don't know how! Anyways I ran command to check my .edb file so in status it was mentioned "status: dirty shutdown" then i ran same utility with some command then in "status: clean shutdown" but now I'm still unable to mount it. Below is the error...
--------------------------------------------------------
Microsoft Exchange Error
--------------------------------------------------------
Failed to mount database 'Mailbox Database 1144169388'.
Mailbox Database 1144169388
Failed
Error:
Couldn't mount the database that you specified. Specified database: Mailbox Database 1144169388; Error code: An Active Manager operation failed with a transient error. Please retry the operation. Error: A transient error occurred during discovery of the database
availability group topology. Error: Database action failed with transient error. Error: A transient error occurred during a database operation. Error: MapiExceptionJetErrorDiskIO: Unable to mount database. (hr=0x80004005, ec=-1022)
[Database: Mailbox Database 1144169388, Server: EXCHANGE.Tabanis.net].
An Active Manager operation failed with a transient error. Please retry the operation. Error: A transient error occurred during discovery of the database availability group topology. Error: Database action failed with transient error. Error: A transient error
occurred during a database operation. Error: MapiExceptionJetErrorDiskIO: Unable to mount database. (hr=0x80004005, ec=-1022)
[Database: Mailbox Database 1144169388, Server: EXCHANGE.Tabanis.net]
An Active Manager operation failed with a transient error. Please retry the operation. Error: MapiExceptionJetErrorDiskIO: Unable to mount database. (hr=0x80004005, ec=-1022)
[Server: Exchange.Tabanis.net]
MapiExceptionJetErrorDiskIO: Unable to mount database. (hr=0x80004005, ec=-1022)
Please help experts, This mailbox it so much important to me. Guide me how can restore or recover it. Thanks
For some reason the mail.que file in my TransportRoles\data\Queue folder is growing and is currently over 14.5gb, and the temp folder has files dating back 7 months and has grown to about 15gbs. I didn't see any events in the event logs that could be causing it. Any idea on how to shrink these directories back down to normal? It looks like something that should be pruning them is not working.
Vincent Sprague
Team,
One of the sender user compaint he is getting bounce back due to poort reputation message when he is trying to send message to other domain.com
Error
554 Your access to this mail system has been rejected due to the sending MTA's poor reputation.
If i one to check any domain reputation and whether it is blacklisted how do i can do that.
We have stood up a side-by-side 2013 environment. We are changing from usmail.domain.com to mail.domain.com for our 2013 environment. The cert going on our 2013 environment will have autodiscover.domain.com and mail.domain.com on it only. From a user experience standpoint, when Outlook tries mail.domain.com for a user whose mailbox resides on our usmail.domain.com system and then connects there, currently they hit a 2013 CAS which tries to proxy their connection to the 2010 environment. They get a cert error since the old FQDN is not on the new cert used on the 2013 CAS servers.
We want to know if an admin can force all 2013 CAS servers to redirect (rather than proxy) either to the given assigned 2010 CAS value or to a hard value that we manually enter. This is so we don't need to include usmail.domain.com on our new certificate.
Is this something I can control (i.e. set via shell?)
Hi everyone.
I have an error with New-MailboxExportRequest command trying to export some mailbox reading from csv file.
Its the script:
[cmdletbinding()]
Param()
Add-PSSnapin Microsoft.Exchange.Management.PowerShell.Snapin
. 'C:\Program Files\Microsoft\Exchange Server\V15\bin\RemoteExchange.ps1'
Connect-ExchangeServer -Auto
$csvfolder = "$home\desktop"
$csvName = 'Libro1.csv'
$csvdata = Import-Csv $(Join-Path $csvfolder $csvName) -Encoding UTF8
$date = ((Get-Date).AddMonths(-3)).ToShortDateString()
if ($csvdata) {
$tot = $csvdata.Count
$actual = 0
foreach($record in $csvdata){
$sede = $record.Sede
$fileP = "\\172.22.3.23\C$\testbackup\"+$sede+".pst"
$actual++
$perc = $actual * 100 / $tot
Write-Progress -Activity 'Generating Export Requests' -Status "Generando exportación de $($record.Cuenta)
($actual of $Tot)" -Percentcomplete $perc
New-MailboxExportRequest -Mailbox $record -ContentFilter "Received -lt '$date'" -FilePath $fileP
}
}
It says the following:
Cannot process argument transformation on parameter 'Mailbox'. Cannot convert value "@{Cuenta=comunicaciones.fmm; Sede=Sede23}" toPlease, help me.
Regards
When I try to logon to ECP I get the message below. I have tried recreating the virtual directory but this did no good. This happened after doing an update on Friday. Thanks Microsoft. Any assistance is greatly appreciated.
Server Error in '/ecp' Application.
Runtime Error
Description: An exception occurred while processing your request. Additionally, another exception occurred while executing the custom error page for the first exception. The request has been terminated.
Hello. Can somebody explain about one issue?
We have Exchange 2013 CU6 + Lync 2013 (5.0.8308.556) integration. After install Exchange SP1 all Client Access Servers begun to consume all CPU time. In process explorer there are w3wp.exe (MSExchangeServicesAppPool) and lsass.exe (netlogon context). In IIS logs a lot of events about
GET /EWS/Exchange.asmx/s/GetUserPhoto email=username@contoso.com&size=HR648x648&CorrelationID=<empty>;&cafeReqId=07966a0b-99a4-4f0a-8a38-a8a83264e46c; 443 - 10.10.10.10 OC/15.0.4659.1001+(Microsoft+Lync) - 401 1 2148074254 46IIS logs are grow up very quickly, about 1GB per day. Before to installing SP1 was not problems. Thanks in advance.
Hello,
The environment is Exchange Server 2013. When user search previous mail using outlook or owa not work. that means not previous mail showing when user searching.
I found exchange server the following error in event viewer:
"The Microsoft Exchange Search Host Controller service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service."
I restart or start the Exchange Search Host Controller serviceseveral time but this service automatically stop with in 20 to 30 seconds.
Please suggest
I'm investigating some (SCOM 2012) alerts on our Exchange 2013 (SP1) environment:
All the monitors are Performance Counter based monitors. When I investigate those performance counters (found via the Crimson Channels in the Eventlogs ../ActiveMonitoring/Monitordefinition) all affected counters have already dropped below threshold values but the associated Health Sets stay unhealthy
IE: Get-ServerHealth -Identity '<Server>' -HealthSet '<HealthSet>' still reports Total.Shadow.Queue.Length.Above.Threshold.Monitor as UnHealthy while perfmon reports values way below 1500 for that particular server.
How to (re)evaluate the monitors ?
Hi All,
We have exchange co-existance of 2007 & 2013
Whenever I run a PowerShell script for ex: Get-MailboxReport.ps1, it used to run for entire Organisation where i want to run it for only exchange version 15.0.
How can i run this only for exchange 2013 servers
My command
c:\: Get-MailboxReport.ps1 -all
Which runs for all.
Manju Gowda
Aditya Mediratta
Cannot log in their console for exchange server 2010. And we cannot found any reason cause by their general setting
A few days ago all my outlook clients were disconnected. Looking into it and the Microsoft Exchange RPC Client Access service had died. Tried several restarts of the system but the service will not go into a running state. It always says Starting. But it is actually terminating and restarting. In the system log get Event 7031 - "The Microsoft Exchange RPC Client Access service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 5000 milliseconds: Restart the service." I can't find anything else on the error in any log file. Some other info not sure if this related or not. The contentIndex are corrupt and will not rebuild. Get a state of "Failed" with an error message of "The database has been dismounted." Also at time the system is very sluggish. Mostly right after a reboot for an hour or two. Details about the system are; Running Exchange 2013 SP1 on server 2012 R2. All roles on one machine. About 20 mailboxes. Database is about 40gig. No VM, just a normal server. plenty of diskspace, memory and CPU. The system has been running fine for about a year. Also, mobile devices and OWA work fine. Mail flow is fine. Outlook just can't connect.
Tried restoring the databases and logs from before the problem started but that did not help.
Not sure what to try from here.
Thanks