ExchangeORG.net

Ericsson authentication problem through ISA 2006

2007-10-22T17:48:00Z

I'm getting the question quite often now about how to get an Ericsson device to successfully authenticate through ISA 2006 for ActiveSync.

The Problem: When we connect with an Ericsson device through ISA 2006 for ActiveSync we’re trying to use Forms-Based authentication instead of Basic and the authentication will fail. A Windows Mobile device will automatically perform a fall-back to Basic authentication and can then successfully authenticate but some other devices, for example an Ericsson device won’t automatically fall-back to Basic authentication.

Solution 1: Create a new web listener that only will use Basic authentication and then publish active sync to use that web listener.

Solution 2: Change the user agent mapping to get a device with the User Agent “SonyEricsson” to use Basic authentication instead of Forms-Based authentication.

1.       Copy the “edit-user-agent.vbs” to the ISA 2006 server.
2.       Open a command prompt and run the script: cscript edit-user-agent.vbs
3.       Restart the firewall service

For more information about managing User-Agent Mappings in ISA 2006:
http://www.microsoft.com/technet/isa/2006/development/useragentmappings.mspx

Microsoft Transporter Suite for Lotus Domino Build:08.01.0223

2007-05-02T10:07:00Z

A new version of the Microsoft Transporter Suite for Lotus Domino is now available for download.Version: 08.01.0223
Date Published: 5/2/2007
Language: English
Download Size: 8.5 MB - 17.0 MB*
(This build will solve the problem we had when migrating RTF formated mail with Swedish characters to Exchange.)

Download Microsoft Transporter Suite for Lotus Domino at:
http://www.microsoft.com/downloads/details.aspx?familyid=35FC4205-792B-4306-8E4B-0DE9CCE72172&displaylang=en

Bulk create mail contacts based on a CSV file

2007-04-12T11:34:00Z

Here's how you can use the Exchange management shell to bulk create mail contacts based on a CSV file.Create a CSV file with the following colums:
displayName,FirstName,LastName,Emailaddress
(If you have Swedish characters in the CSV file you have to save the file in UTF8.)

Use the following shell command to import and create the contacts based on the CSV file:
Import-Csv contacts.csv | ForEach { New-MailContact -Name $_.displayName -Firstname $_.Firstname -Lastname $_.Lastname -ExternalEmailAddress $_.Emailaddress -OrganizationalUnit "MyDomain.com/Contacts" }

For a complete list of parameters that you can use to create mail-enabled contacts go to:
http://technet.microsoft.com/en-us/library/bb124519.aspx

Exchange 2007 PowerShell Scrips

2006-03-09T03:00:00Z

Here's some Exchange 2007 PowerShell scripts that you might find usefull:

http://www.microsoft.com/technet/scriptcenter/scripts/message/exch2007/default.mspx?mfr=true

How to change Exchange system messages?

2005-04-13T03:31:00Z

The system messages are stored in Exchsrvr\bin\MDBSZ.dll

To be able to edit this file you can download RLTOOLS.exe from:
ftp://ftp.microsoft.com/Softlib/MSLFILES/RLTOOLS.EXE
(Included in this toolkit you’ll fin a tool called RLQuikEd.exe that will allow you to open and edit the dll.)

MDBSZ.dll is replaced in service packs so after upgrading the server you will need to make the changes again.

Changing the MDBSZ.dll is NOT supported by MS PSS.
But if you contract MCS to do the changes for you, the MCS will support the changes (Not PSS)You can also use Exchange Quota Message Service to do generate custom quota messages for users on Exchange server without editing DLLs

More information about Exchange Quota Message Service:
http://www.gotdotnet.com/workspaces/workspace.aspx?id=b82dabfa-8353-472c-b82b-1423263ab1bb

Recover from accidentally deleting the All Address Lists Container.

2004-10-13T22:44:00Z

1. You accidentally deleted the All Address Lists Container.
2. You didn’t have a backup of Active Directory so you have manually recreated the
All Address Lists Container.
3. You have created a new address list.
4. Created a new offline address list that uses the new address list.

When you now try to rebuild the offline address book you get the following events:

Event type: ERROR
Event Source: MSExchangeSA
Event Category: OAL Generator
Event: 9344
Description: OALGen could not find the address list with the Active Directory object GUID of
'/guid=DB1034E23D62334BBAB3ABF2AE132DD2' in the list of available address lists. Please check the offline address list configuration object.
- New OAB

And you get the:

Event type: ERROR
Event Source: MSExchangeSA
Event Category: OAL Generator
Event: 9334
Description:
OALGen encountered error 8004010f while initializing the offline address list generation process.
No offline address lists have been generated. Please check the event log for more information.
- New OAB

The easiest way to recover from this scenario is to:

1. Delete the All Address Lists Container.
2. Rerun ForestPrep (This will recreate the All Address Lists Container.)
3. Create a new Address List
4. Create a new offline address list that uses the new address list.
5. Rebuild the Offline Address List.

MPSReports Exchange – Edition

2004-06-30T03:04:00Z

MPSReports for Exchange is a nice little tool that will help you gathering detailed system status and configuration information. The tool has two reporting modes:

Lite mode (default) : Running MPSReports in this mode will collect the following reports and a CAB file containing all of the reports will be created.

Event logs - The event logs are captured in both native and CSV format to allow analysis by different tools.
System Startup and Crash Recovery data - copies of the BOOT.INI, Autoexec.NT and Config.NT are collected as well as the registry settings that control application and system crash handling.
Cluster Information - gathers information about MSCS and WLBS if these services are configured on the system.
System service configuration and trace settings - registry settings for key system components.
Hotfix information - information about hotfix install history.
System Diagnostics - output from the Windows diagnostics tools.
Network configuration - various network configuration and current state information.
Process Information - inventory of the currently running processes and device drivers on the system.
System File Information - subset inventory of the most important system files.
Setup log files - Log files created by MSI when applications are installed.

Exchange Information - Information about the installation and
configuration of Exchange.

List of Exchange Registry Key values
Inventory of \exchsrvr\*.exe & *.dll
DIR /s of \exchsrvr
List of Exchange Diagnostic Setting
Copy of the Exchange / ADC Setup Progress Log(s)
Copy of WMI logs

Exchange 5.5 ONLY

File list of the database paths.

Exchange 2000 and Exchange 2003 ONLY

Output from run the exchdump tool
Output from run the exchdump tool
List of SMTP Bindings
List of DSAccess configuration
List of ADC Registry Key values
Inventory of \MSADC
Storage Group & Database Information

Exchange 2003 ONLY

List of Content Filtering Registry Keys
Copy of the OMA Browse web.config file

Exchange Running on Windows 2000

Output from netdiag /v /debug
Output from dcdiag /v
Dump of the metabase
Output from various nltest commands

Exchange Running on Windows 2003 and Above

Output from netdiag /v /debug
Output from dcdiag /v
Copy of metabase.xml
Output from various nltest commands

.NET Framework - Information about the .NET Framework

Dump of Framework registry keys
Inventory of Microsoft.NET

IIS Information - Information about IIS

List of IIS Registry Key values

Full mode: Running MPSReports in Full Mode creates all of the reports in Lite Mode and adds the following extra reports: System File Information - inventory of all application files and more system
files not collected in Lite Mode

inventory of %SYSTEMROOT%

More information can be found at:
http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd915706/MPSRPT_Exchange_Readme.txt

Download MPSReports for Exchange at:
http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd915706/MPSRPT_Exchange.EXE

Clean SMTP queues from a spam attack.

2004-05-15T01:42:00Z

I've seen a loot of questions in different newsgroups about how to clean
SMTP queues from a spam attack.

The easiest way to do this is to use the Advanced Queuing
Administration Command Line Interface tool (aqadmcli.exe)

Run aqadmcli.exe from a command line with the following syntax to delete all messages from all queues:

setserver "Servername"
delmsg flags=all

Run aqadmcli.exe from a command line with the following syntax to delete all messages from a specific sender address:

setserver "Servername"
delmsg flags=sender,sender=sender@domain_name.com

You can download aqadmcli.exe from:
ftp://ftp.microsoft.com/pss/Tools/Exchange%20Support%20Tools/Aqadmcli/aqadmcli.exe

Error Code Lookup Tool

2004-05-10T23:45:00Z

Error Code Lookup tool can be used to translate errors reported by windows.

Here's a reprint of "Error Code Lookup Tool.doc" included in the Err package:

Error Code Lookup Readme
Determine error values from decimal and hexadecimal error codes in Microsoft Windows® operating systems. The tool can look up one or more values at a time.
Installation
From the Microsoft Web site, download the tool to a specified directory.
Using Error Code Lookup
Usage: err [value] [value]…
where must be of one of the following forms:
Decorated hex (0x54f)
Implicit hex (54f)
Ambiguous (1359)
Exact string (=ERROR_INTERNAL_ERROR)
Substring (:INTERNAL_ERROR)
All values on the command line will be looked up in Exchange’s internal tables and presented to you. If available, informational data associated with the value or values will also be shown (see example below). By default, the tool searches all tables, but you can restrict the output to those tables you deem appropriate by adding “/” to the beginning of the command line.
Example:
> err /winerror.h /ntstatus.h 0
# winerror.h selected.
# ntstatus.h selected.
# for hex 0x0 / decimal 0:
STATUS_WAIT_0 ntstatus.h
ERROR_SUCCESS winerror.h
# The operation completed successfully.
NO_ERROR winerror.h
SEC_E_OK winerror.h
S_OK winerror.h
# 5 matches found for “0”

Err.exe can bee downloaded from:
http://www.microsoft.com/downloads/details.aspx?FamilyId=BE596899-7BB8-4208-B7FC-09E02A13696C&displaylang=en

Outlook Web Access change password functionality

2004-05-10T07:06:00Z

The Outlook Web Access change password feature is installed, but it is disabled by default.

The password configuration consists of two changes:

1. Adding/editing the registry value to the back end server.

Location: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeWeb\OWA
Value: DisablePassword
Type: REG_DWORD
Value Data: 0 or 1
Enter the value 0 if you want to enable the change password feature. (The Change Password button is available.)
Enter the value 1 if you want to disable the change password feature. (The Change Password button is unavailable.)

2. Adding Iisadmpwd virtual directory to the front-end server.

Right-click the Default Web Site, click New, and then select Virtual Directory.
Create the virtual directory with the alias IISADMPWD
Point the new virtual directory to Winnt\System32\Inetsrv\Iisadmpwd directory, and make sure that both Read and Execute permissions are selected.

Both changes are made to a standalone server if you are using just one server.

Additional Information:
555071 - IISADMPWD Virtual Directory Is Not Created During a Default Install of IIS 6.0

269082 - IISADMPWD Virtual Directory Is Not Created During Clean Install of IIS 5.0

Temporarily increase the Exchange database size limit by 1 GB

2004-05-09T20:49:00Z

Exchange 2000 and Exchange 2003 Standard Editions limit the information store size to 16gb.
It is the total database size, including the EDB and the STM file, not just the EDB file.

When the mailbox store database in Microsoft Exchange Server 2003 Standard Edition or Microsoft Exchange 2000 Server Standard Edition reaches the 16gb size limit, the mailbox store does not mount.

To resolve this issue, new functionality has been added to Exchange 2000 Standard Edition that allows an administrator to: Increase the 16GB limit by 1GB to allow for recovery.

In Exchange 2003, this functionality is built into the product. However, to enable this functionality, the administrator must create the new registry value:

Location: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSExchangeIS\Private
Value: Temporary DB Size Limit Extension
Type: REG_DWORD
Value Data: 1

To resolve this issue in Exchange 2000, you can apply the September 2003 Exchange 2000 Server Post-Service Pack 3 Rollup. This update requires that you install Exchange 2000 Service Pack (SP3) and install the 813051 update on your server.
824282 September 2003 Exchange 2000 Server Post-Service Pack 3 Rollup

More information can be found at:
828070 Exchange Server Mailbox Store Does Not Mount When the Mailbox Store Database Reaches the 16-GB Limit

OWA Attachment blocking

2004-05-09T07:48:00Z

There are 2 levels of file attachments for Outlook Web Access.

Level1 attachments have file extensions that are prohibited to access, download or attach.
This applies to back-end servers and standalone servers.

Level2 attachments have file extensions that can be accessed, but only if saved to the client's file system first.
This applies to back-end servers and standalone servers.

OWA is installed with a default set of file extensions for the two levels as shown in the following registry keys:

Location: HKLM\System\CurrentControlSet\Services\MSExchangeWeb\OWA
Value: Level1FileTypes
Type: REG_SZ
Value Data: ade,adp,app,asx,bas,bat,chm,cmd,com,cpl,crt,csh,exe,fxp,hlp,hta,inf,ins,isp,js,jse,
ksh,lnk,mda,mdb,mde,mdt,mdw,mdz,msc,msi,msp,mst,ops,pcd,pif,prf,prg,reg,scf,
scr,sct,shb,shs,url,vb,vbe,vbs,wsc,wsf,wsh

Location: HKLM\System\CurrentControlSet\Services\MSExchangeWeb\OWA
Value: Level2FileTypes
Type: REG_SZ
Value Data: ade,adp,asx,bas,bat,chm,cmd,com,cpl,crt,exe,hlp,hta,htm,html,htc,inf,ins,isp,js,jse
,lnk,mda,mdb,mde,mdz,mht,mhtml,msc,msi,msp,mst,pcd,pif,prf,reg,scf,scr,sct,
shb,shs,shtm,shtml,stm,url,vb,vbe,vbs,wsc,wsf,wsh,xml,dir,dcr,plg,spl,swf

Attachments listed should be separated by a comma with no space.

There are a couple of other registry keys for OWA.
One of them is DisableAttachments. It allows administrators to prevent users from accessing or adding attachments as a whole.

Location: HKLM\System\CurrentControlSet\Services\MSExchangeWeb\OWA
Value: DisableAttachments
Type: REG_DWORD
Value Data: 0,1 or 2
Enter the value 0 if you want to allow all attachments.
Enter the value 1 if you want to disallow all attachments.
Enter the value 2 if you want to allow attachments from only back-end servers.