Tag Info

Hot answers tagged

14

This is probably a result of DOMAIN\Administrator being a member of the Organization Management group. From the description of that group: Members of this management role group have permissions to manage Exchange objects and their properties in the Exchange organization. Members can also delegate role groups and management roles in the organization. ...


11

What mfinni said, except that we forward three ports to a behind-the-firewall all-in-one Exchange box: 25: SMTP 80: HTTP (redirect to OWA HTTPS) 443: HTTPS This works fine for people with Androids, iPhones, etc. Generally, people at home use OWA or their phone, anyway. Edit: Since you asked for a Microsoft source, this is a link to a TechNet ...


9

That looks mostly correct for a wide-open all-protocols implementation. Some suggestions: Unless you have mail clients, with a business justification, that require all that, limit it to just 25, 80, 443. Don't allow POP access, that's a plaintext password. Don't allow client SMTP access, that's a plaintext password. (Of course, to accept mail from the ...


4

Organization Management does not actually give permission to access mailboxes using OWA. In fact, by default, this group is explicly denied access to all mailboxes, for the same reasons that you want to do so. I suspect that the account was granted rights to every single mailbox individually. You can check for it using a command such as: Get-Mailbox | ...


4

I managed to fix this issue by going to the following location in ADSIEDIT Domain > Configuration > Services Right Click CN=Microsoft Exchange > Properties Found and Removed a bad entry from the GlobalAddressList1 attribute.


3

After hours of troubleshooting, I finally identified the culprit. I had a transposed a number in the IP address of my mailserver. (In the ScreenOS address list) My firewall rules were using the named address entry, so that explains why they wouldn't work, even when the rules were correct. Rather embarassing, but I did want to post the solution in case ...


3

This is a normal behavior. UserAccountControl refers only to the user in the directory. Exchange add many attributes with which you can determine if a LDAP user has a mailbox. I'd say that msExchMailboxGuid would be the best, since every active mailbox must have one, and exchange delete the value when the mailbox is disabled (Tested on Exchange 2010 with ...


3

with the wizard in MS Outlook creating rules is trivial. One rule for all messages with an attachment: A second rule for all messages, except those with attachments:


2

Sadly i cant add a comment yet, so i have put my suggestion in here. Have you checked the Get-MessageTrackingLog to see if it shows any record of the email or delivery reports in ECP? Do you have any mail flow restriction rules in place that might be affecting this user? There are a lot of potential issues here, but the fact that its affecting the same ...


1

Use Exchange management shell: Get-MailBox | FL Identity Get-MailBox <identity> |fl LegacyExchangeDN


1

No, Exchange does not support this use of the + character, and I'm not aware of any tools or scripts you could use to make it, either.


1

MX records should not return CNAME records. Point your MX to the dynamic name and things should work. DNS tends to be cached so you may loose mail when your IP changes. Also use your ISPs relay server to send mail if your want reliable outbound delivery. EDIT: To fix the outbound addess: You should be authenticating to GMAIL to forward the email. ...


1

It appears from your message that you may be an administrator. If so, you have the rights because at times you will need them. Accept, but don't abuse the privilege granted you. A trustworthy administrator will only use the rights when required to do your duties. Those duties may include scanning emails for specific content, tracing email sources, and ...


1

Please check your receive connectors in the EAC under the Mail Flow section. Look for the connector that has binding with port 25 (generaly the default connecor with your mail server name or Default - Frontend-your mail server name). Click on Edit this connector and under Security (Second option in the list) scroll down to the bottom to find anonymous users. ...


1

Can you renew the selfcertificate that exchange create when you install it ? After that install it locally it each computer.


1

I'm not sure about the exact problem you're facing, you have not really described it. That said, would one of the switches on New-MailboxRepairRequest perform what you need? Also, it is helpful to know what version of Exchange you're running.


1

There are actually two disabled states for an Exchange mailbox. What many people consider "disabling" occurs when the Disable-Mailbox cmdlet is run. This actually removes most of the Exchange attributes from the account, and disconnects the mailbox. There is however an AD attribute msExchUserAccountControl. If this is set to 2, the mailbox is ...


1

I know this is an old question, but to convert public folders to a mailbox, you would simply click on All Folders in Outlook, click the top-level public folder and then export that folder to a PST, ensuring you have checked to include all subfolders. Then once exported you would import into the shared mailbox you have set up. I understand the need for this ...



Only top voted, non community-wiki answers of a minimum length are eligible