Excellent article on this issue in Exchange 2010 and points out why sysprep and unique SID’s are so important
Sunday, February 7, 2010
RPC Encryption – Exchange 2010 and Outlook 2003
By default Outlook 2003 does not encrypt traffic between itself and the Exchange server it connects to.
With the introduction of Exchange 2010 RPC traffic between the Exchange server and Outlook must be encrypted by default.
To get around this with Outlook 2003 clients you must either use Group Policy to enable RPC encryption or disable the requirement for encryption on all Exchange 2010 CAS servers. To do this run the following common in the EMS.
Set-RpcClientAccess –Server CAS1 –EncryptionRequired $False
Without making one of these changes Outlook 2003 clients will not be able to connect to the Exchange 2010 CAS.
Monday, February 1, 2010
Update Rollup 2 available for Exchange 2007 SP2
http://msexchangeteam.com/archive/2010/01/29/453908.aspx
Here is the lists of fixes it covers:
KBA 972076 lists all the fixes included in this rollup. Here are some of the product improvements and critical bug fixes we'd like to call out:
- KB 972705: This one is for all the IT pros and anyone who has ever had to explain abnormal database size/log file growth in a short period of time. We have added three new registry entries to help speed up troubleshooting the issue:
- BytesLogWarningThreshold
- BytesLogErrorThreshold
- BytesLogCheckPeriodInMinutes
- KB 975404: Accepting meeting requests sent via an application using CDO like Blackberry devices sometimes results in rendering an embedded message attached to the meeting request inaccessible.
- KB 976137: We have made a change to the behavior of the Unified Messaging Auto attendant when it plays the greeting for callers on a holiday. Currently when callers call on a holiday, they hear the non-business hours greeting followed by the holiday greeting. In this rollup we have made a change so that the callers calling on a holiday will only hear the holiday greeting. If your greetings are configured such that they would make sense to callers calling on a holiday only if they hear both the non-business hours greeting and the holiday greeting, then you need to re-configure them when you install this update rollup.
- KB 971177: Another change in the UM Auto Attendants configuration in the Exchange Management Console. It is now aware if your time zone follows Daylight Saving Time.
- KB 975165: In an environment using self-signed certificates and CAS-CAS proxying, Exchange Web Services requests proxied may start failing after the Availability Service has made a proxy request.
- A bug where the OWA Virtual Directory cannot be accessed via the Exchange Management Console in an environment coexisting with Exchange 2010 if the Exchange 2007 server was upgraded from Exchange 2007 SP1 to SP2.
Sunday, January 31, 2010
Exchange 2010 OWA errors in Exchange Management Console
You may get the following error:
“An IIS Directory entry couldn’t be created. The error message is Access is denied.
.HResult= –2147024891 it was running the command Get-OwaVirtualDirectory”.

This is resolved by adding the Exchange Trusted Subsystem group to the local Administrator group on the Exchange 2007 server.
Exchange 2010 from Installation to Migrating Mailboxes Pt.1
Documenting and auditing an infrastructure of 100 odd physical server ranging in age from 3-6 years covering 12 locations and 2 AD forests took a little bit of my time for a couple of months.
So now that is over I am back to my regular job and on to my first few Exchange 2010 migrations.
I am going to run you through how to get Exchange 2010 installed in your environment and migrate your mailboxes from an Exchange 2007 server to an Exchange 2010 environment today. Please note this will not cover DAG’s (Database Availability Groups) I will be covering that is great detail in a future post.
So lets get started.
On the source server we need to make sure the following prerequisites are completed before installing Exchange 2010 into the environment.
1) Exchange 2007 SP2 must be installed on source server.
If you have more than 1 Exchange 2007 server you must have SP2 installed on all CAS servers in Organisation and installed on all Exchange 2007 servers in the same AD site as the one that you are planning on placing your Exchange 2010 server.
2) Other than all the current Windows Updates, you need to install Windows Installer 4.5 (found here)
If installing Exchange 2010 on Windows 2008 you also need to install SP2 and the following
- Install Microsoft .NET Framework 3.5 Service Pack 1 (SP1). For details, see Microsoft .NET Framework 3.5 SP1.
- Install the Microsoft .NET Framework 3.5 Family Update for Windows Vista x64, and Windows Server 2008 x64 updates. For details, see Microsoft .NET Framework 3.5 Family Update for Windows Vista x64, and Windows Server 2008 x64. See also Microsoft Knowledge Base article 959209, An update for the .NET Framework 3.5 Service Pack 1 is available.
- Install Windows Remote Management (WinRM) 2.0 and Windows PowerShell V2 (Windows6.0-KB968930.msu). For details, see Windows Management Framework.
- On servers that will host the Hub Transport or Mailbox server role, install the Microsoft Filter Pack. For details, see 2007 Office System Converter: Microsoft Filter Pack.
sc config NetTcpPortSharing start= auto ServerManagerCmd -ip z:\scripts\Exchange-Typical.xml –Restart
Where Z is the location of the source files.
After all the OS pre-requisites are done installing and the server has finished its reboot. you can either proceed with the GUI install or the command line install.
My personal preference is to use the command line.
So from the command prompt (it will need to be run as Administrator)
Start with the AD modifications
setup.com /preparead
After this completes you will need to actually install Exchange.
For a server holding CAS, Mailbox and Hub Transport roles issue the following command
setup.com /m:Install /r:M,H,C
If you have update rollups and wish to incorporate that into your installation and the following switch
/UpdatesDir:“c:\ExchangeUpdates“
The contents of the update folder must be a .msp or update.exe.
The GUI installation is pretty much a next, next finish affair with the one exception of being asked if the CAS role will be Internet facing and if so what the external address will be.
If you are installing Exchange 2010 into an environment comprised of Exchange 2003 you will need to specify the server that you wish to create a Routing Group connector with.
On the Exchange 2003 server if you use a smart host for outbound mail make sure that the smart host is set on the SMTP connector NOT the Default SMTP Virtual Server as this will cause mail flow problems.
That wraps it up for this part.
I’ll go through moving mailboxes next
Thursday, January 28, 2010
Exchange 2010 EAS problems
In Exchange 2010 after migrating from Exchange 2007 (not sure about 2003 haven’t had the issue with a 03->10 migration yet) you may get the following error when trying to use ActiveSync : -
ActiveSync registered a problem on the server.
Support code: 0×85010014
The Exchange Connectivity Analyser will state that there is a HTTP 500 error
The solution to this is that any users that wish to use ActiveSync need to have inheritance turned on on their AD user object.

Now if setting this on one user is OK but to do it to a lot (I have about 2200 AD objects and they think it is around 90 ActiveSync user) use ADModify (www.codeplex.com/admodify)

After doing this all phones synced again, although they did do a complete re-sync so just bear that in mind
Wednesday, November 11, 2009
Exchange 2010 released worldwide
The Exchange Team has announced that Exchange 2010 is now available world wide and is also now available as a trial download
http://msexchangeteam.com/archive/2009/11/09/453096.aspx
http://technet.microsoft.com/en-au/evalcenter/dd185495.aspx
Go get some!
I’ll be starting some Exchange 2010 how-to’s when work settles down a little and I have some spare time in the evening.