Hi,

We have a mail server running Exchange 2013 in hybrid mode. We have migrated all mailboxes to Office 365 with no problems.

However, when new user accounts have been created, they are unable to recieve external email. The accounts are on Office365, but the NDR that we recieve is generated by our exchange server.

The message in the NDR is "Remote Server returned '420 4.2.0 Recipient deferred because there is no Mdb'"

This user can send emails to external accounts, and these emails come from username@domain.com

I can send an email from an external account to this user by emailing username@domain.onmicrosoft.com, it is only when using username@domain.com that I recieve this NDR

Any help would be greatly appreciated.

Hello! Please help me to solve the problem with Search-MailboxAuditLog and Search-AdminAuditLog (in ECP).I have test environment with EXCHANGE_2013_CU6_RUSSIAN (all exch roles on it) and want to check audit before production use.I was surprised that audit no working, i do that:

1) Enable and check audit for Test mailbox

2) Add Delete Actions to Owner of mailbox (in my case - Test) for fast checking

3) Login to Outlook under Test and delete 1 item, after thatcheck folder statistic for Test mailbox

4) Return to Outlook and delete one more item and see statistic again (for sure)

5) As we can see something write to audit folder, it's good, BUT:<o:p></o:p>Resume:Search-MailboxAuditLog - NO RESULT, with any parameters

Another problem -> Search-AdminAuditLog - HAVE RESULT, but from ECP i don't see it.

My TEST DB have healthy status of indexes, no problem with system mailbox but i have russian exchange. Maybe trouble in different language (not English) wrong parse logs or something else? I really need audit reports in production, it's very serious question, please help!!!

Hello friends, I need you guys help.
My Exchanbge 2013 CU13 server running on Windows Server 2012 R2 does not receive mail only from hotmail.com and live.com and outlook.com

I'm with this problem almost two months already opened several called to Hotmail support team, and believe me, even by phone I talked to them and explained the problem. But strangely enough they do not know explain what is happening and simply close the call.

My IP is not listed in any blacklists, my SPF is correct, my reverse DNS is correct .....

The email comes to my server, but from what I read in the receipt log, it enters a sort of a queue and is not delivered to the User.

In my desperation, I even installed a enovo ambient, an Exchange zero and auditioned to believe, the same problem happens only see my receipt log:

2016-09-15T22:47:12.639Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B8,20,127.0.0.1:25,127.0.0.1:19268,-,,Local
2016-09-15T22:47:36.092Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,0,*********:25,65.55.116.103:64646,+,,
2016-09-15T22:47:36.092Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,1,*********:25,65.55.116.103:64646,*,SMTPSubmit SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender AcceptRoutingHeaders,Set Session Permissions
2016-09-15T22:47:36.092Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,2,*********:25,65.55.116.103:64646,>,"220 SRV-EMAIL.*********.com.br Microsoft ESMTP MAIL Service ready at Thu, 15 Sep 2016 19:47:35 -0300",
2016-09-15T22:47:36.108Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,3,*********:25,65.55.116.103:64646,<,EHLO BLU004-OMC3S28.hotmail.com,
2016-09-15T22:47:36.108Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,4,*********:25,65.55.116.103:64646,*,SMTPSubmit SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender AcceptRoutingHeaders,Set Session Permissions
2016-09-15T22:47:36.108Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,5,*********:25,65.55.116.103:64646,>,250-SRV-EMAIL.*********.com.br Hello [65.55.116.103],
2016-09-15T22:47:36.108Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,6,*********:25,65.55.116.103:64646,>,250-SIZE 37748736,
2016-09-15T22:47:36.108Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,7,*********:25,65.55.116.103:64646,>,250-PIPELINING,
2016-09-15T22:47:36.108Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,8,*********:25,65.55.116.103:64646,>,250-DSN,
2016-09-15T22:47:36.108Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,9,*********:25,65.55.116.103:64646,>,250-ENHANCEDSTATUSCODES,
2016-09-15T22:47:36.108Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,10,*********:25,65.55.116.103:64646,>,250-STARTTLS,
2016-09-15T22:47:36.108Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,11,*********:25,65.55.116.103:64646,>,250-X-ANONYMOUSTLS,
2016-09-15T22:47:36.108Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,12,*********:25,65.55.116.103:64646,>,250-AUTH NTLM,
2016-09-15T22:47:36.108Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,13,*********:25,65.55.116.103:64646,>,250-X-EXPS GSSAPI NTLM,
2016-09-15T22:47:36.108Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,14,*********:25,65.55.116.103:64646,>,250-8BITMIME,
2016-09-15T22:47:36.108Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,15,*********:25,65.55.116.103:64646,>,250-BINARYMIME,
2016-09-15T22:47:36.108Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,16,*********:25,65.55.116.103:64646,>,250-CHUNKING,
2016-09-15T22:47:36.108Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,17,*********:25,65.55.116.103:64646,>,250 XRDST,
2016-09-15T22:47:36.108Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,18,*********:25,65.55.116.103:64646,<,STARTTLS,
2016-09-15T22:47:36.108Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,19,*********:25,65.55.116.103:64646,>,220 2.0.0 SMTP server ready,
2016-09-15T22:47:36.108Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,20,*********:25,65.55.116.103:64646,*,,Sending certificate
2016-09-15T22:47:36.108Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,21,*********:25,65.55.116.103:64646,*,CN=SRV-EMAIL,Certificate subject
2016-09-15T22:47:36.108Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,22,*********:25,65.55.116.103:64646,*,CN=SRV-EMAIL,Certificate issuer name
2016-09-15T22:47:36.108Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,23,*********:25,65.55.116.103:64646,*,69E1A67D7F03ADA6408BF42E947FCB89,Certificate serial number
2016-09-15T22:47:36.108Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,24,*********:25,65.55.116.103:64646,*,5D91AA7DB66F81C48DE7C8C8AAB5365E238920FD,Certificate thumbprint
2016-09-15T22:47:36.108Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,25,*********:25,65.55.116.103:64646,*,SRV-EMAIL;SRV-EMAIL.*********.com.br,Certificate alternate names
2016-09-15T22:47:36.201Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,26,*********:25,65.55.116.103:64646,*,,"TLS protocol SP_PROT_TLS1_2_SERVER negotiation succeeded using bulk encryption algorithm CALG_AES_256 with strength 256 bits, MAC hash algorithm CALG_SHA_384 with strength 384 bits and key exchange algorithm CALG_ECDHE with strength 384 bits"
2016-09-15T22:47:36.217Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,27,*********:25,65.55.116.103:64646,<,EHLO BLU004-OMC3S28.hotmail.com,
2016-09-15T22:47:36.217Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,28,*********:25,65.55.116.103:64646,*,,Client certificate chain validation status: 'EmptyCertificate'
2016-09-15T22:47:36.217Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,29,*********:25,65.55.116.103:64646,*,,TlsDomainCapabilities='None'; Status='NoRemoteCertificate'
2016-09-15T22:47:36.217Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,30,*********:25,65.55.116.103:64646,*,,TlsDomainCapabilities='None'; Status='NoRemoteCertificate'
2016-09-15T22:47:36.217Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,31,*********:25,65.55.116.103:64646,*,SMTPSubmit SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender AcceptRoutingHeaders,Set Session Permissions
2016-09-15T22:47:36.217Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,32,*********:25,65.55.116.103:64646,>,250-SRV-EMAIL.*********.com.br Hello [65.55.116.103],
2016-09-15T22:47:36.217Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,33,*********:25,65.55.116.103:64646,>,250-SIZE 37748736,
2016-09-15T22:47:36.217Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,34,*********:25,65.55.116.103:64646,>,250-PIPELINING,
2016-09-15T22:47:36.217Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,35,*********:25,65.55.116.103:64646,>,250-DSN,
2016-09-15T22:47:36.217Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,36,*********:25,65.55.116.103:64646,>,250-ENHANCEDSTATUSCODES,
2016-09-15T22:47:36.217Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,37,*********:25,65.55.116.103:64646,>,250-AUTH NTLM LOGIN,
2016-09-15T22:47:36.217Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,38,*********:25,65.55.116.103:64646,>,250-X-EXPS GSSAPI NTLM,
2016-09-15T22:47:36.217Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,39,*********:25,65.55.116.103:64646,>,250-8BITMIME,
2016-09-15T22:47:36.217Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,40,*********:25,65.55.116.103:64646,>,250-BINARYMIME,
2016-09-15T22:47:36.217Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,41,*********:25,65.55.116.103:64646,>,250-CHUNKING,
2016-09-15T22:47:36.217Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,42,*********:25,65.55.116.103:64646,>,250 XRDST,
2016-09-15T22:47:36.217Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,43,*********:25,65.55.116.103:64646,<,MAIL FROM:<tecnologiawell@outlook.com> SIZE=4798,
2016-09-15T22:47:36.217Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,44,*********:25,65.55.116.103:64646,*,SMTPSubmit SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender AcceptRoutingHeaders,Set Session Permissions
2016-09-15T22:47:36.217Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,45,*********:25,65.55.116.103:64646,*,08D3DDA0C4CC52B9;2016-09-15T22:47:36.092Z;1,receiving message
2016-09-15T22:47:36.217Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,46,*********:25,65.55.116.103:64646,>,250 2.1.0 Sender OK,
2016-09-15T22:47:36.233Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,47,*********:25,65.55.116.103:64646,<,RCPT TO:<administrador@*********.com.br>,
2016-09-15T22:47:36.233Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,48,*********:25,65.55.116.103:64646,>,250 2.1.5 Recipient OK,
2016-09-15T22:47:36.233Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,49,*********:25,65.55.116.103:64646,<,BDAT 4798 LAST,
2016-09-15T22:47:36.248Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,50,*********:25,65.55.116.103:64646,*,,Ignored X-OriginatorOrg header value 'outlook.com' because session capabilities do not allow it
2016-09-15T22:47:36.264Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,51,*********:25,65.55.116.103:64646,*,,Proxy destination(s) obtained from OnProxyInboundMessage event
2016-09-15T22:47:36.561Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,52,*********:25,65.55.116.103:64646,>,"250 2.6.0 <BN3PR0701MB113831B2F4857BFF5D3B86B5D1F00@BN3PR0701MB1138.namprd07.prod.outlook.com> [InternalId=38654705692, Hostname=SRV-EMAIL.*********.com.br] Queued mail for delivery",
2016-09-15T22:47:36.577Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,53,*********:25,65.55.116.103:64646,<,QUIT,
2016-09-15T22:47:36.577Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,54,*********:25,65.55.116.103:64646,>,221 2.0.0 Service closing transmission channel,
2016-09-15T22:47:36.577Z,SRV-EMAIL\Default Frontend SRV-EMAIL,08D3DDA0C4CC52B9,55,*********:25,65.55.116.103:64646,-,,Local

Silvio Tavares - Analista de Sistemas

Hi,
it organization two domains A - Exchange 2007 and B - Exchange 2013. Migration from A to B by export/import mailbox, because all user at domain B and only mailboxes at A.
Migration plan:
1.Enable mailbox for user at B, after that only external mail will flow no new mailbox
2.Export mailbox A data to PST, and than disable A mailbox
3.Import PST mailbox to B new mailbox.
4.Sync contacts, from A to B, and from B to A
5.Clear outlook cache
How I can make (coerce) Exchange 2007 (A) internal  massage flow to external smart host for custom user, without disable mailbox and user access.

Thank you!

HI Guys,

I just finished up an Exchange 2013 implementation.

My maiflow is working fine to and from the Internet.However something  i just cant seem to understand is

happening , all our e-mails to gmail cannot be delivered. However all the other domains receive our e-mails pretty fine.

Thanks in advance for your help.

Kassoka

Hi Team,

We are have Exchange 2013 with Cumulative update 14 in our environment. We have migrated few user to office365 by setting up Hybrid Environment. Now on-premises users are able to receive email from cloud user. But, on-premises users are unable to send mails to cloud users. we have added target address for that cloud user, still not receiving email.

Thanks in advance.

Hey Guys;

There is a exchange 2010 and 2013 server on my environment  under the same domain.

i lost exchange 2010 server also no recovery option but i have a DB from 2010.

Can i mount it on 2013 server ? how ? thank you.

Is it good practice to purge these if messages in there build up? Mail flow is fine and as these are copies can they be deleted manually?

What can cause them to build up for no apparent reason?

Dear All,

We have Exchange server 2013 CU10 it has all roles in single server it's working well and we have more than 700 mailbox users .. recently we got it unwanted ( Spam ) mail from so  i would like to protect spam so i need your help how can i protect my environment ?

Best Rgeards

Subash 

Hello, 

I am looking for good spam/virus protection for organisations below 100 Mailboxes.

What can you recomend?

Currently there is a mixed receive modus means  POP3 Port 110 for  @domain1.com   and  SMTP Port 25   for @domain2.com

thx in advance

Hello guys.

I'm putting in production Exchange 2016.
But I'm having problems with spam.

Follow the documentation of the product yet, the email accounts are receiving hundreds of spam yet.

The filter is not protecting anything my organization.

What I find strange is that the same step by step to Exchange 2013, and it works, but in 2016 the protection plumb activated not protect anything.

Is there anything I can do?

Or some other site that covers this subject in more detail?

This site: https://technet.microsoft.com/pt-br/library/bb201691(v=exchg.160).aspx

Silvio Tavares - Analista de Sistemas

Hi,

I've looked at all sorts of forums and have not been able to get this fixed.

I have one Exchange 2010 server working, and one Exchange 2013 server being installed, currently with two test mailboxes on it.

They are both on the same domain, in the same site, on the same physical network.  They can Ping each and access each others resources.  They both have no Firewall or Antivirus on them.

I have all default receive connectors on the Exchange 2013 server Enabled.

2013 can send and receive emails on the 2013 mailboxes on itself.  It can also send and receive external emails.

But emails from 2010 to 2013 do not work.  Weirdly they work from 2013 to 2010.

The Queue Viewer on Exchange 2010 comes up with an error:
451 4.4.0 Primary Target IP address responded with: "451 5.7.3 Cannot Achieve Exchange server Authentication." Attempted to failover to alternate host, but that did not succeed.  Either there are no alternate hosts, or delivery failed to all alternate hosts.

I have tried many posts to try and get the communication work, so no idea where to go.  the issue (in my eyes) clearly lies with the receive connectors on the 2013 Exchange server.. 

I created another Receive Connector, Internal-Relay, as a Hub Transport, with:
Authentication settings of: TLS, Basic, BasicTLS, Exchange Server
Permission Groups: Exchange Servers, Legacy Exchange Servers
Scoping: Remote: both my Exchange servers
Scoping: Network Adapter Bindings: All Available IPv4 on port 25
FQDN: FQDN of the exchange 2013 server
and it is Enabled.

I also ran on my Cisco ASA 5510: no fixup protocol smtp 25

So I am not sure what to do..  

Thanks

Silvio Tavares - Analista de Sistemas

I'm getting this error from time to time on certain messages coming in to my Exchange 2013 server.  I've been searching but haven't been able to find any reference to this error message.  It doesn't look like an Exchange error code, they're usually the three numbers but I've discussed it with the people who filter our mail for spam and it looks like the message is being successfully delivered to my server, only to disappear somewhere inside my system.  I can send the message internally and send it outbound but when I try to send it inbound from an external source I get the same error.  The message has a 17MB Excel file attachment but I've set the limits on my connectors a good bit higher than that.  I've tried sending other files, even larger ones and they are transmitted OK.  I know the message has been received by people on other mail servers OK.

Has anyone here seen this one?

Everything we hear is an opinion, not a fact. Everything we see is a perspective, not the truth.

Hi Experts,

We are running exchange 2013 in Hybrid with office 365

We have internal applications which required to send email without authentication like printer some apps etc....

So we created a recieve connecter and allowed only HLB virtual IP ( Created for Relay) in the connector selecting anonymous Permission group

Now there is a app which is sending email outside domains, which may cause issue.

How do I block these anonymous emails sending outside but allow internally

Manju Gowda

Hi all,

Does anyone know or have any valid documentation if this is by design?

I created 3 shared mailboxes and granted 3 users access to each of these.

2 of these shared mailboxes does not work to send as when they are hidden from address list, but one of them is working.

Can anyone confirm if this should be working?

According to MR Cunningham, this should work if add the mailbox as contact : http://exchangeserverpro.com/how-to-send-as-a-hidden-mailbox/

In my case it does not work for those two mailboxes.

Thanks!

Please mark as helpful if you find my contribution useful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you. Thank you! Off2work

Hi all...

We have an Exchange 2013 environment with an external Mail Security Appliance (FortiMail),  because of this our Malware Filter was disabled, but the process ScanningProcess.exe (Microsoft Filtering Server Scanning Process) are still running and sometimes hangs the CPU for several minutes scanning attachments.

Is there a method to disable the process and avoid the CPU high use?

(all servers have Exchange 2013 CU7)