2013年11月11日 星期一

Exchange Server 2010 Event ID 2501

這個錯誤訊息通常會出現在 DAG 成員的 MBS 上,雖然在 AD 站台裡已經把子網域指定好,但是該錯誤訊息還是會出現 !!
 
Event Type: Error

Event Source: MSExchange ADAccess

Event Category: General

Description:

Process MSEXCHANGEADTOPOLOGY (PID=). The site monitor API was unable to verify the site name for this Exchange computer - Call=DsctxGetContext Error code=8007077f. Make sure that Exchange server is correctly registered on the DNS server.
 
執行 nltest /dsgetsite 之後仍然會出現找不到指定 DC......錯誤訊息
 
 
發生原因:
由於 DAG 設定完成後,Cluster 會 Bind 一張 Microsoft Failover Cluster Virtual Adapter.....IP 通常會是 169.254.X.X,同時 Ping 自己時也會回應 169.254.x.x....
 
網路上大部分查到的解答是利用 nvspbind 的工具就可以解決,但是事實上問題還是無法根治 !!
 
解決方法:
加 Hosts File....格式如下:
 
# Copyright (c) 1993-2009 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
#      102.54.94.97     rhino.acme.com          # source server
#       38.25.63.10     x.acme.com              # x client host
# localhost name resolution is handled within DNS itself.
# 127.0.0.1       localhost
# ::1             localhost
 
172.16.1.10        mbs01.lingo.com         mbs01


另一個 Solution.....使用 Regedit

WORKAROUND


To work around this issue, hardcode the Active Directory Site name in the registry. To do this, follow these steps:
  1. Click Start, click Run, type Regedit, and then press OK.
  2. Locate the following registry subkey:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters
  3. On the Edit menu, click New, and then click String Value.
  4. Type SiteName, and then press Enter.
  5. Right-click SiteName, click Modify, type the name of the Active Directory Site that the Exchange server belongs to in the Value data box, and then click OK.
  6. Exit Registry Editor, and then restart the computer to apply the change.
 
When you hardcode the Active Directory Site name, Windows will return the hardcoded site name in response to the query from Exchange. This behavior enables Exchange server to bypass any site name lookup failures.
 
 
 

2013年10月1日 星期二

Exchange Server 2010 Setup/p 錯誤

Exchange Server 2010 執行到 setup /p 時,出現以下訊息....找到多個具有網域名稱 xxx 和帳戶名稱 Administrator 的物件.....


 
原因:
 
在單一 AD 網域架構下不會產生錯誤,如果 AD 架構為多網域架構(多 Domain Tree)
就會出現這個錯誤,原因是每個網域都有 Administrator 物件...
 
 
解決方式:
建立一個獨立帳號(Lingo),加Enterprise Admin & Schema Admin group,再執行 setup /p 即可 !

Exchange Server 2010 Address Lists 更新

人員調動部門之後除了在 AD 把該用戶搬到所屬 OU 之後,還要到 Exchange 2010 管理指令介面執行以下指令,這樣會比較快生效 !!

Get-AddressList | Update-AddressList
http://technet.microsoft.com/en-us/library/aa997982.aspx


或是可以建立一個 Update-Address.cmd file, 內容如下:

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -command ". 'C:\Program Files\Microsoft\Exchange Server\V14\bin\RemoteExchange.ps1'; Connect-ExchangeServer -auto; Get-AddressList | Update-AddressList "





 再透過排程去定時執行 Update-Address.cmd 即可

2013年9月30日 星期一

Exchange Server 2010 AP Relay

一般要讓 AP Server 可以 Relay,只要建立一個 "接收連接器" 開放 Relay 即可,若 AP 的語法裡面有定義了 oMailer.SetFrom("客服系統" , "lingo@grandsi.com").......會導致收件者收到信件之後,寄件者會變成 "江曉嵐",而非 "客服系統"

原因:
AP Relay 接收連接器驗證的部分一般都會勾選 "Externally Secured",這個設定預設會自動解析匿名 SMTP Address 所致 
 


  
解決方式:
1. 建立一個 Relay 接收連接器,驗證這裡全部不要勾選 
 
2. 群組權限指勾選匿名 









3. 下這個指令即可
add-ADPermission -Identity relay -User "NT Authority\anonYmous logon" -ExtendedRights ms-Exch-SMTP-Accept-Any-Recipient


AD 物件重複,無法刪除

 
在 AD 上有物件重複,也無法透過 ADUC 刪除
 
解決方法:
Use Repadmin.exe option /removelingeringobjects, which safely remove instances of lingering objects from both writable directory partitions and read-only directory partitions
Repadmin.exe provides the following
  • Compares the directory database objects on a reference domain controller with the objects on the target domain controller, which contains (or is suspected to contain) lingering objects.
  • If you use the /advisory mode parameter, events are logged in the Directory Service event log for the objects that are found.
  • If you do not use the /advisory mode parameter, the found objects are deleted without replicating the deletions; that is, the deletions occur only on the target domain controller.

郵件類別遺失


Exchange Server 2010 搭配 Outlook 2007/2010/2013,在新增工作要求或是會議邀請時,通常習慣上會加上分類
 



但是收件者在收到工作或是會議邀請時,該類別就會消失了......
 
原因:
Exchange Server 2010 預設會將類別清除
 
解決方法:
Hub Server 執行下面的Command
Set-Transportconfig  ClearCategories:$False
Restart Transport service


Exchange Server 2010 Error 9646










請在 MBS Role 設定此 Registry

To change the value of the maximum permitted MAPI sessions per user from the default, you can configure the Maximum Allowed Sessions Per User registry entry. To do this, follow these steps.

Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:


1.       Click Start, click Run, type regedit in the Open box, and then click OK.

2.       Locate and then click the following registry subkey:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSExchangeIS\ParametersSystem

3.       If the Maximum Allowed Sessions Per User entry does not exist, do the following:

a.       On the Edit menu, point to New, and then click DWORD Value.

b.       Type Maximum Allowed Sessions Per User as the entry name, and then press ENTER.

4.       Right-click the Maximum Allowed Sessions Per User entry, and then click Modify.

5.       Click Decimal, type the value that you want to set in the Value data box, and then click OK

6.       Exit Registry Editor.

7.       Click Start, click Run, type services.msc in the Open box, and then click OK.

8.       Click the MSExchange Information Store service, and then click Restart Service.

2013年7月11日 星期四

Outlook 附件消失

症狀 : 使用 Outlook 2007/2010 收到信件時,附件只有doc 檔,jpg or pdf 附件不見了,但是由webmail 進入信箱檢視該封信的附件都有 jpg & pdf 檔,對方的寄件備份也是正常的


請參考以下微軟KB說明:


 

請參照微軟KB調整所有 Exchange 2010 伺服器上的設定

Exchange Server 2010

  1. Stop the Exchange Transport service.
  2. Locate the EdgeTransport.exe.config file. This file is located in the following path:
     :\Program Files\Microsoft\Exchange Server\Bin\
  3. In the EdgeTransport.exe.config file, add the following entry between the element and the element:
  4. Restart the Transport service.