Whitelisting in Exchange 2003

I neede a way to create a whitelist in Exchange 2003. Apparently the support for whitelisting is not very good. Here are some options:

1. Global Accept List

You can add the IP och a “Safe” mail server.

http://www.exchangeinbox.com/article.aspx?i=44&t=3&p=2

2. Custom Weighting

You can add an XML file containing rules for changeing the SCL value based on SUBJECT or BODY

http://www.accendo.co.uk/blog/?p=4

3. White list Recipients (Note: Not Senders)

You can add certain recipients for whome you will not filter email.

http://support.microsoft.com/?id=912587

Unable to uninstall Exchange 2003

I get this message when I try to uninstall Exchange 2003 I get this error message:

“One or more users currently use a mailbox store on this server”

 

Here is how to find the problematic mailboxes.

http://support.microsoft.com/?kbid=279202

Here is another article on how to completely uninstall Exchange 2003

http://www.msexchange.org/tutorials/Remove-Exchange-server-entire-Exchange-organization.html

Redirect to /exchange in Exchange 2003

How do I redirect the default web site to /exchange ?

1. Log onto the OWA server

2. Open the IIS Manager

3. Open the properties for the default web site

4. Under the Home Directory Tab, do the following

a) Choose redirection to a url
b) Type /exchange in the text box
c) Check the “directory under this one” radio button

5. Click “apply”, “OK”, and exit the IIS manager.

6. Test the changes by opening a web browser, and connecting to the www root folder.  It should now take you directly to the Exchange Logon screen.

 

Source

http://exchange.mvps.org/owaredirect_frames.htm

Exchange 2007 OWA trouble

I had a problem at one of my customers today. Suddenly they told me that OWA had stopped working.

 

When I tried it it started loading but it just stopped with the this URL:

https://servername/owa/auth/logon.aspx?url=https://servername/owa&reason=0

After some searching I found this from KB935490 about Roll-Up Fix 2:

Issue 2

Symptoms

When you install Update Rollup 2 for Exchange 2007, you experience the following symptoms:


After the installation of Update Rollup 2 for Exchange 2007 is complete, users cannot log on to Outlook Web Access. In this scenario, the users are redirected to a blank Web page that has a URL that resembles the following:

https://servername/owa/auth/logon.aspx?url=https://servername/owa&reason=0


The following event is logged in the Application log:

Event Type: Error
Event Source: MsiInstaller
Event Category: None
Event ID: 1024
Description: Product: Microsoft Exchange Server – Update ‘Update Rollup 2 for Exchange Server 2007 (KB935490) 8.0.711.2’ could not be installed. Error code 1603. Windows Installer can create logs to help troubleshoot issues with installing software packages. Use the following link for instructions on turning on logging support: http://go.microsoft.com/fwlink/?LinkId=23127
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


The Setup Wizard for Update Rollup 2 for Exchange 2007 displays the following message during the installation of Update Rollup 2 for Exchange 2007:

Setup Wizard for Update Rollup 2 for Exchange Server 2007 (KB 935490) ended prematurely because of an error. Your system has not been modified. To install this program at a later time, please run the installation again.

Cause

This issue occurs if the %SYSTEMDRIVE%ExchangeSetupLogs folder has been deleted, renamed, or moved after the installation of Exchange 2007.
Note The %SYSTEMDRIVE% variable represents the root directory of the drive on which the operating system is installed. For example, %SYSTEMDRIVE% might represent drive C.

Resolution

To resolve this issue, follow these steps:

1.
If the ExchangeSetupLogs folder was renamed or moved, restore it to the root folder of the drive on which the operating system is installed.
Note The ExchangeSetupLogs folder may have been removed, and you may be unable to restore it. In this situation, create an empty folder that is named ExchangeSetupLogs in the root folder of the drive on which the operating system is installed.

2.
Reinstall Update Rollup 2 for Exchange 2007.

 

I simply downloaded Roll-Up Fix 6 and installed it.

Links

Roll-Up Fix 2 http://support.microsoft.com/kb/935490
Roll-Up Fix 6 http://support.microsoft.com/kb/942846

E-mail already exists in this organization

Today I was setting up a new email address for a user and I got the following error:

E-mail already exists in this organization

Apparently the address alreaty existed… how do I find it?

 

  • Start Active Directory Users and Computers
  • Goto Find…
  • Select Custom Search
  • Select the advanded tab
  • put “proxyaddresses=smtp:mail.address@domain.com” into the editbox (drop the “s)
  • Make sure the “Entire directory” scope is selected

 

Source

http://groups.google.com/group/microsoft.public.exchange.admin/browse_thread/thread/21888e98bb4e5ea9

Event ID 12014 – Microsoft Exchange couldn't find a certificate

Event ID 12014 may appear in the Application event log of CAS/HUB Transport/Edge server:

         “Microsoft Exchange couldn’t find a certificate that contains the domain name mail.domainname.com
         in the personal store on the local computer. Therefore, it is unable to offer the STARTTLS SMTP
         verb for any connector with a FQDN parameter of mail.domainname.com.
         Verify the connector configuration and the installed certificates to make sure that there is
         a certificate with a domain name for every connector FQDN.”

 

This means that you are missing a cert for a SMTP connector

Here is the solution:

 

New-ExchangeCertificate -Domain Name “mail.yourdomain.com”, “computername” -Services “SMTP”

Enable-ExchangeCertificate “thumbprint recieved above” -Services “SMTP”

 

Links

http://www.webservertalk.com/message2184491.html

http://support.microsoft.com/kb/555855

Exchange System Manager Errors

I did some troubleshooting on an Exchange Server. I found these errors and solutions:

Error 0x8004010F

I had to add my local server name to the host header in IIS I had only my
public name to fix the following error.

Error c103b404

Uncheck “Require secure channel” and “Require 128-bit encryption”
Add local and external hostname to hostfile

 

Links

http://www.ureader.com/message/1311148.aspx
http://support.microsoft.com/?id=324345
http://www.webservertalk.com/message1034771.html

Misc IIS Tools

Here are links to some IIS tools

IIS 6.0 Reource Kit

  • IIS 6.0 Migration Tool Version 1.0
  • Apache to IIS 6.0 Migration Tool Version 1.0
  • CustomAuth Version 1.0
  • IISCertDeploy.vbs Version 1.0
  • IIS Host Helper Service Version 1.0
  • IISState Version 3.0
  • Log Parser Version 2.1
  • Metabase Explorer Version 1.6
  • Permissions Verifier Version 1.0
  • RemapUrl Version 1.0
  • SelfSSL Version 1.0
  • TinyGet Version 5.2
  • Web Capacity Analysis Tool Version 5.2
  • WFetch Version 1.3
  • Internet Information Services Diagnostic Tools

    • SSL Diagnostics 1.0 (fixed version of SelfSSL)
    • Authentication and Access Control Diagnostics (AuthDiag) 1.0
    • Exchange Server SMTP Diagnostics 1.0 
    • Log Parser 2.2
    • WFetch 1.4
    • Trace Diagnostics
    • Debug Diagnostics

    ISA and OWA problem(s)

    I had a customer who was having a problem with a ISA published Exchange 2003 OWA. Phe problem had two symptoms:

    1. When they clicked on an URL in a mail in OWA they where redirected to a login page.

    2. When the create a new message and attach a file they get redirected to a login page.

    Turns out this was tho separate problems:

    URL problem:

    This is a problem with authentication settings in IIS

    http://support.microsoft.com/default.aspx?scid=kb;en-us;817312&Product=exch2003
    http://www.petri.co.il/forums/showthread.php?t=1835

    Attachment problem:

    This is a problem with the delegation to the backend Server. This is a known bug in ISA 2007. There is a hotfix but you have to call PSS to get it.

    http://support.microsoft.com/kb/934583
    http://support.microsoft.com/kb/934587/