Dear Experts,

Scenario : We have 2 sites A & B where Site A was holding active copies and site B passive copies of mailbox server. Now we have switched to as B as primary (holding active copies). CAS servers were Hyper-V replicated from Site A to Site B.

After swithover, we can still see emails are getting delivered from CAS Servers --> Site A mailbox server --> Site B mailbox server. This creates a dependency on Site A.  Please let me know why emails getting routing from Site A mailbox servers ? The emails should directly be routed from CAS to Site B ? What should I do to remove the dependency so that CAS directly hand over the emails to Site B

Troubleshooting Done :

1. Change the DNS of CAS servers as Site B as primary and Site A as secondary.

2. Changed the activation preferences.

Still no luck. Please guide.

Exchange Online Sender receives this bounce-back: "Remote server returned '450 4.5.0 no recipient succeeded'

I can't find much information about this NDR.

I'm (Exchange 2013 on-prem) on the receiving end (sent from Exchange Online) of the issue. The error points to me, but I do not see the email in question passing through our edge firewall. The originating server and mailbox and many other mailboxes can send mail to (as far as I can tell in the hub/frontend protocol/edge firewall, set verbose, logs and test messages) all my other mailboxes.

It only affects mail flow from one mailbox on Exchange Online to one mailbox on my system and started around 1/12/19.

https://testconnectivity.microsoft.com

• Passed Inbound/Outbound SMTP for a variety of users.
• DNS tests passed.

Receiving mailbox in question.

• Get-MailboxRepairRequest passed.
• Not hitting quota.

I'm having the sending user try multiple clients (OWA/Outlook/Phone) to see if it is happening to one or all.

We recently had a high profile user retire and we quickly hired a replacement.

I want to keep the mail flowing to the new employee and create a disclaimer stating the retired user is no longer with the company. Step 1 was simple but creating a new disclaimer has me a little confused.

After configuring a disclaimer in the ECP for that user (mail flow>rules>"+">Apply disclaimers) it doesn't work.

The user is disabled in Active Directory.

How do I stop emails from ending up in the "Spambox" folder.

I accidentally marked a UPS notification as spam, and now it seems to be forever ending up in the "Spambox" folder. I added ups to my safe senders list but it is not helping.

When I move the messages from spambox to my inbox they end up back in Spambox within seconds.

I am also not able to mark these emails as "Not junk".

What do I do? HELP!

Hi,

we're investigating a migration of Lotus Notes to Exchange. One issue is the migration of encrypted mail. How to keep them confidential in Exchange?

We have users like a secretary that has read/write access to a mailbox of a manager. If another user mails the manager with confidential information, he encrypts it in LN before sending it, so only the mailbox owner can open the message. Is this possible in Exchange 2013 and in Exchange online? Heard that you can set things via IRM, but that with Outlook web access the secretary can set the manager's mailbox as primary and than will be able to open the confidential email....

best regards,

Hans

Hello

I have a platform based on Windows servers,

I have an Exchange 2013 mail server with an OWA web access application.

I need to enable electronic signature of emails by accessing through OWA.

the certification authority that will be used is on another server under windows as well

I have set the S/MIME settings as follows:

Set-SmimeConfig -OWAAllowUserChoiceOfSigningCertificate $true
Set-SmimeConfig -OWAAlwaysSign $true
Set-SmimeConfig -OWACheckCRLOnSend $true
Set-SmimeConfig -OWAClearSign $true
Set-SmimeConfig -OWACRLConnectionTimeout 60000
Set-SmimeConfig -OWACRLRetrievalTimeout 10000
Set-SmimeConfig -OWADisableCRLCheck $true
Set-SmimeConfig -OWAForceSMIMEClientUpgrade $true
Set-SmimeConfig -OWAIncludeCertificateChainAndRootCertificate $true
Set-SmimeConfig -OWASenderCertificateAttributesToDisplay *********
Set-SmimeConfig –OWASigningAlgorithms 800C
Set-SmimeConfig -SMIMECertificateIssuingCA $([byte[]](Get-Content -Encoding byte -Path "C:\certs\issuer&root.sst" -ReadCount 0)

the file issuer&root.sst was imported from the CA

I have installed owasmime.msi for Internet explorer

but unfortunatly it doesn't give me the ability to sign

both fields: 
encrypt this message
and 
digitally sign this message
are in grey

in parameters I have set to choice automatically the certificate

How could I find solution for the problem? please

Thank you

Hello

I am wanting to use a transport rule to help our users identify email originating from outside of the domain. In this rule I have prepended the Subject line with "External" and also prepended the message with a Banner. As we have several trusted sources which send email to our users I have added a list of Exceptions using "Except when the From address contains". Within this list of exceptions are multiple List Serve addresses, these address continue to get the external tags despite being listed as exceptions. We have several Lists, each of which are added as Mail Contacts on ourExchange 2010 environment.

I am hoping you all can help me identify where I went wrong, and help me resolve this issue. At this point this banner is in a testing phase and is expected to roll out to the rest of the domain once this issue is resolved.

Current Exceptions: 

 Except if the message:
     Is received from 'Inside the organization'
     or Includes these words in the message subject: '[External]  '
     or Includes these words in the sender's address: 

Any suggestions are appreciated

Hi guys,

I was looking at an old Exchange 2003 hybrid server today and there was a bunch of connectors to anti-spam appliances and so forth, a real mess.

My questions is if we want the flow to go as "recommended" we would en up in having:

- Incoming email via EOP first and if the mailbox is not hosted online it will be routed down to the on-prem Exchange?

- Outbound mail will go from on-prem (if sender is located there) to Exchange Online and out via EOP?

How many "hybrid - connectors" are there in a typical environment with only one exchange server, apart from the regular receiving connectors?

- Exchange On-prem send-connector to Exchange Online

- Exchange On-prem receive connector from Exchange Online

- Exchagne Online sendconnector to Exchange On-prem?

- Exchabne Online receive connector from Exchange On-prem?

- and to the internet itself? :)

If we remove all connectors related to the hybrid setup and re-run the Hybrid Configuration Wizard it will create the connectors for me? Or if we dont remove the current ones, will they be disabled/turned off while the wizard creates the new ones and enables them??

Hi,

Good day, Please I've been trying to send email to gmail from my domain(****)but i i keep getting #ERROR! 

Exchnage serevr 2013

Symantec Anti spam

mx.google.com rejected your message to the following email addresses:

abcdfg (abcdfg@gmail.com)
mx.google.com gave this error:
This message does not have authentication information or fails to pass authentication checks. To best protect our users from spam, the message has been blocked. Please visit https://support.google.com/mail/answer/81126#authentication for more information. x74si5869187pfe.23 - gsmtp 
Your message wasn't delivered due to a permission or security issue. It may have been rejected by a moderator, the address may only accept email from certain senders, or another restriction may be preventing delivery.
Diagnostic information for administrators:
Generating server: abcdfgh.ABSCDF.COM
abcdfg@gmail.com
mx.google.com
Remote Server returned '550-5.7.1 This message does not have authentication information or fails to pass 550-5.7.1 authentication checks. To best protect our users from spam, the 550-5.7.1 message has been blocked. Please visit 550-5.7.1 https://support.google.com/mail/answer/81126#authentication for more 550 5.7.1 information. x74si5869187pfe.23 - gsmtp'

Hi guys,

I was looking at an old Exchange 2013 hybrid server today and there was a bunch of connectors to anti-spam appliances and so forth, a real mess.

My questions is if we want the flow to go as "recommended" we would en up in having:

- Incoming email via EOP first and if the mailbox is not hosted online it will be routed down to the on-prem Exchange?

- Outbound mail will go from on-prem (if sender is located there) to Exchange Online and out via EOP?

How many "hybrid - connectors" are there in a typical environment with only one exchange server, apart from the regular receiving connectors?

- Exchange On-prem send-connector to Exchange Online

- Exchange On-prem receive connector from Exchange Online

- Exchagne Online sendconnector to Exchange On-prem?

- Exchabne Online receive connector from Exchange On-prem?

- and to the internet itself? :)

If we remove all connectors related to the hybrid setup and re-run the Hybrid Configuration Wizard it will create the connectors for me? Or if we dont remove the current ones, will they be disabled/turned off while the wizard creates the new ones and enables them??

Hi All,

we have our exchange webmail hosted externally. recently we have got this message from our vendor say, we are under the risk factor(Vulnerability - SSL Connection: SSLv3 CBC Mode Cipher POODLE Vulnerability(443/TCP)). This is from the external test.

For More details Error : This server supports SSLv3 with CBC mode ciphers. The server's highest supported protocol: TLSv1.2, Server allows a client to connect with the lower protocol: TLSv1.1

Please let us know, how to resolve this issue. And let me know to set to resolve this.

We have Exchange 2013 server, which is on Windows 2012 R2

Thanks

In Exchange Admin Center

When an email is being sent to both internal and external recipients the message tracking shows submitted and Pending, both internal and external recipient receive the email.

My concern is why the status is pending but the email is successfully receive by therecipient?

Thanks,

Joh 

Some users are not recieving emails sent to a distribution list but some recieve the same email. After looking at the tracking logs I got the 554.5.6.0 errors on this users. But why do others get the same email and the others not ? Where can I start troubleshooting this issue ? This is Office 2013 SP1 and Exchange 2013SP1 CU12

This are the error messages from those users

[{LRT=};{LED=554 5.6.0 Corrupt message content; STOREDRV.Deliver.Exception:ConversionFailedException; Failed to process message due to a permanent exception with message Content conversion: Corrupt summary TNEF content. ConversionFailedException: Content conversion: Corrupt summary TNEF content. [Stage: CreateReplay]};{FQDN=};{IP=}] [{LRT=};{LED=554 5.6.0 Corrupt message content; STOREDRV.Deliver.Exception:ConversionFailedException; Failed to process message due to a permanent exception with message Content conversion: Corrupt summary TNEF content. ConversionFailedException: Content conversion: Corrupt summary TNEF content. [Stage: CreateReplay]};{FQDN=};{IP=}] [{LRT=};{LED=554 5.6.0 Corrupt message content; STOREDRV.Deliver.Exception:ConversionFailedException; Failed to process message due to a permanent exception with message Content conversion: Corrupt summary TNEF content. ConversionFailedException: Content conversion: Corrupt summary TNEF content. [Stage: CreateReplay]};{FQDN=};{IP=}] [{LRT=};{LED=554 5.6.0 Corrupt message content; STOREDRV.Deliver.Exception:ConversionFailedException; Failed to process message due to a permanent exception with message Content conversion: Corrupt summary TNEF content. ConversionFailedException: Content conversion: Corrupt summary TNEF content. [Stage: CreateReplay]};{FQDN=};{IP=}] [{LRT=};{LED=554 5.6.0 Corrupt message content; STOREDRV.Deliver.Exception:ConversionFailedException; Failed to process message due to a permanent exception with message Content conversion: Corrupt summary TNEF content. ConversionFailedException: Content conversion: Corrupt summary TNEF content. [Stage: CreateReplay]};{FQDN=};{IP=}] [{LRT=};{LED=554 5.6.0 Corrupt message content; STOREDRV.Deliver.Exception:ConversionFailedException; Failed to process message due to a permanent exception with message Content conversion: Corrupt summary TNEF content. ConversionFailedException: Content conversion: Corrupt summary TNEF content. [Stage: CreateReplay]};{FQDN=};{IP=}] [{LRT=};{LED=554 5.6.0 Corrupt message content; STOREDRV.Deliver.Exception:ConversionFailedException; Failed to process message due to a permanent exception with message Content conversion: Corrupt summary TNEF content. ConversionFailedException: Content conversion: Corrupt summary TNEF content. [Stage: CreateReplay]};{FQDN=};{IP=}] [{LRT=};{LED=554 5.6.0 Corrupt message content; STOREDRV.Deliver.Exception:ConversionFailedException; Failed to process message due to a permanent exception with message Content conversion: Corrupt summary TNEF content. ConversionFailedException: Content conversion: Corrupt summary TNEF content. [Stage: CreateReplay]};{FQDN=};{IP=}] [{LRT=};{LED=554 5.6.0 Corrupt message content; STOREDRV.Deliver.Exception:ConversionFailedException; Failed to process message due to a permanent exception with message Content conversion: Corrupt summary TNEF content. ConversionFailedException: Content conversion: Corrupt summary TNEF content. [Stage: CreateReplay]};{FQDN=};{IP=}] [{LRT=};{LED=554 5.6.0 Corrupt message content; STOREDRV.Deliver.Exception:ConversionFailedException; Failed to process message due to a permanent exception with message Content conversion: Corrupt summary TNEF content. ConversionFailedException: Content conversion: Corrupt summary TNEF content. [Stage: CreateReplay]};{FQDN=};{IP=}] [{LRT=};{LED=554 5.6.0 Corrupt message content; STOREDRV.Deliver.Exception:ConversionFailedException; Failed to process message due to a permanent exception with message Content conversion: Corrupt summary TNEF content. ConversionFailedException: Content conversion: Corrupt summary TNEF content. [Stage: CreateReplay]};{FQDN=};{IP=}] [{LRT=};{LED=554 5.6.0 Corrupt message content; STOREDRV.Deliver.Exception:ConversionFailedException; Failed to process message due to a permanent exception with message Content conversion: Corrupt summary TNEF content. ConversionFailedException: Content conversion: Corrupt summary TNEF content. [Stage: CreateReplay]};{FQDN=};{IP=}] [{LRT=};{LED=554 5.6.0 Corrupt message content; STOREDRV.Deliver.Exception:ConversionFailedException; Failed to process message due to a permanent exception with message Content conversion: Corrupt summary TNEF content. ConversionFailedException: Content conversion: Corrupt summary TNEF content. [Stage: CreateReplay]};{FQDN=};{IP=}] [{LRT=};{LED=554 5.6.0 Corrupt message content; STOREDRV.Deliver.Exception:ConversionFailedException; Failed to process message due to a permanent exception with message Content conversion: Corrupt summary TNEF content. ConversionFailedException: Content conversion: Corrupt summary TNEF content. [Stage: CreateReplay]};{FQDN=};{IP=}] [{LRT=};{LED=554 5.6.0 Corrupt message content; STOREDRV.Deliver.Exception:ConversionFailedException; Failed to process message due to a permanent exception with message Content conversion: Corrupt summary TNEF content. ConversionFailedException: Content conversion: Corrupt summary TNEF content. [Stage: CreateReplay]};{FQDN=};{IP=}] [{LRT=};{LED=554 5.6.0 Corrupt message content; STOREDRV.Deliver.Exception:ConversionFailedException; Failed to process message due to a permanent exception with message Content conversion: Corrupt summary TNEF content. ConversionFailedException: Content conversion: Corrupt summary TNEF content. [Stage: CreateReplay]};{FQDN=};{IP=}] [{LRT=};{LED=554 5.6.0 Corrupt message content; STOREDRV.Deliver.Exception:ConversionFailedException; Failed to process message due to a permanent exception with message Content conversion: Corrupt summary TNEF content. ConversionFailedException: Content conversion: Corrupt summary TNEF content. [Stage: CreateReplay]};{FQDN=};{IP=}] [{LRT=};{LED=554 5.6.0 Corrupt message content; STOREDRV.Deliver.Exception:ConversionFailedException; Failed to process message due to a permanent exception with message Content conversion: Corrupt summary TNEF content. ConversionFailedException: Content conversion: Corrupt summary TNEF content. [Stage: CreateReplay]};{FQDN=};{IP=}] [{LRT=};{LED=554 5.6.0 Corrupt message content; STOREDRV.Deliver.Exception:ConversionFailedException; Failed to process message due to a permanent exception with message Content conversion: Corrupt summary TNEF content. ConversionFailedException: Content conversion: Corrupt summary TNEF content. [Stage: CreateReplay]};{FQDN=};{IP=}] [{LRT=};{LED=554 5.6.0 Corrupt message content; STOREDRV.Deliver.Exception:ConversionFailedException; Failed to process message due to a permanent exception with message Content conversion: Corrupt summary TNEF content. ConversionFailedException: Content conversion: Corrupt summary TNEF content. [Stage: CreateReplay]};{FQDN=};{IP=}] [{LRT=};{LED=554 5.6.0 Corrupt message content; STOREDRV.Deliver.Exception:ConversionFailedException; Failed to process message due to a permanent exception with message Content conversion: Corrupt summary TNEF content. ConversionFailedException: Content conversion: Corrupt summary TNEF content. [Stage: CreateReplay]};{FQDN=};{IP=}] [{LRT=};{LED=554 5.6.0 Corrupt message content; STOREDRV.Deliver.Exception:ConversionFailedException; Failed to process message due to a permanent exception with message Content conversion: Corrupt summary TNEF content. ConversionFailedException: Content conversion: Corrupt summary TNEF content. [Stage: CreateReplay]};{FQDN=};{IP=}] [{LRT=};{LED=554 5.6.0 Corrupt message content; STOREDRV.Deliver.Exception:ConversionFailedException; Failed to process message due to a permanent exception with message Content conversion: Corrupt summary TNEF content. ConversionFailedException: Content conversion: Corrupt summary TNEF content. [Stage: CreateReplay]};{FQDN=};{IP=}] [{LRT=};{LED=554 5.6.0 Corrupt message content; STOREDRV.Deliver.Exception:ConversionFailedException; Failed to process message due to a permanent exception with message Content conversion: Corrupt summary TNEF content. ConversionFailedException: Content conversion: Corrupt summary TNEF content. [Stage: CreateReplay]};{FQDN=};{IP=}] [{LRT=};{LED=554 5.6.0 Corrupt message content; STOREDRV.Deliver.Exception:ConversionFailedException; Failed to process

Hi Team,

We are running Exchange server 2013 without Edge server only CAS and Mailbox and third party email gateway.

Whenever external senders send email to wrong recipient the NDR gives the full information about the internal host name and IP address of exchange server.

I followed the below link.

https://practical365.com/exchange-server/remove-internal-exchange-server-names-ip-addresses-message-headers/

the article is for a scenario where Edge transport servers is used, how do i configure this when there is no edge transport server ?

TechGUy,System Administrator.

A relatively new installation (3 weeks) of EX2013 and for the last 2 days, every 4-5 hours or so, inbound mail stops. I have checked the event logs and nothing, no errors show. A test through testexchangeconnectivity.com give the error 421 4.3.2 Service not available.

Whilst a simple restart of the transport service rectifies the issue, I am not sure how to establish what is causing the problem.

Any suggestions?

We are in a Hybrid environment, all of our mailboxes are hosted in O365 but we have an on premise Exchange server for mail relay. We just installed an Exchange 2013 server today (we have Lync 2010 so we could not jump to Exchange 2016), it replaced our Exchange 2010 server. Yesterday I could send to our Dynamic Distribution Group. Once our Exchange 2013 server was in place and everything routed through it I cannot send to it any longer - Remote Server returned '550 5.7.1 RESOLVER.RST.AuthRequired; authentication required. I can send to DL's just fine, just not this DDG. The permissions are correct and I have removed and re-added myself as someone who can send to it. It's as if it thinks I am not an internal user.

Your
message can't be delivered because delivery to this address is restricted.

For more information about this issue see DSN code 5.7.1 in
Exchange Online

We running exchange 2013 on prem and in hybrid mode with office 365. We use barracuda essentials for spam and archiving. We have been seeing a lot of rejected messages in the logs of the Essentials stating the exchange server is rejecting the emails even though the users are valid. it is happening coming from multiple domains.

Rejected (smtp.berkshirefarm.org:25:550 5.1.1 User unknown)

Allowed Sender Policies (header:Lisa.GharteyOgundimu@ocfs.ny.gov)Rejected (smtp.berkshirefarm.org:25:550 5.1.1 User unknown) 

both were going to valid working email accounts on our domain that have mailboxes still on premise.

I have checked and updated our spf records and all other records look fine. The users get emails from other outside companies

Thank You in advance

Stonecold31666

What is the meaning of below custom_data in Message Trace

S:PCFA=OCAT|dkim=0
S:DeliveryPriority=Normal

S:AMA=EV|engine=A|v=0|sig=201902060009|name=|file=|hash=|phash=
S:AMA=EV|engine=S|v=0|sig=20190205.020|name=|file=|hash=|phash=
S:AMA=EV|engine=M|v=0|sig=1.285.949.0|name=|file=|hash=|phash=

I was getting a warning says "Microsoft Exchange Auth Certificate is going to expire soon" like that.

This certificate was self generated and would like to renew before expire and i had clicked on renew button in Exchange Control panel for both CAS (1 server) and Mailbox Server (1 server).

I can see that the certificate got renewed for another 5 years and thumbprint has been changed.

My Question is, Exchange will take the renewed certificate automatically or do i need to publish it. If yes please provide guidance to publish the renewed certificate. Could anyone please help me.

Regards

Anu