Using Outlook 2010 x86 on Windows 7 x64 back in June 2013 I created a protected message using the Outlook "Do not forward" option, and the message was successfully protected using our internal AD RMS. My colleague opened the message, responded, and there is a thread of several messages in my Outlook Inbox and Sent items. Now, I see these messages as protected with the "Do not enter" symbol in the Outlook folders, and when I open one of the these messages the contents do not display. I can see the title but below the subject bar I see an Outlook icon with "message.rpmsg" next to it, indicating that the message has somehow become an attachment, showing "Last changed: 12 June 2013", and in the message body I see:

You have received a message with restricted permission.
Open this item to read its content.
-
-
If you are not running an e-mail application that supports messages with restricted permission, such as Microsoft Office 2003 or later, you can view this message by downloading the Rights Management Add-on for Internet Explorer from http://officeredir.microsoft.com/r/rlidRestrictedPermissionViewer?clid=1033&ver=14&app=outlook.exe&lidhelp=0409&liduser=0809&lidui=0409

The above is irrelevant since we have Office 2010 as well as Windows 7 and other protected content works perfectly fine at the moment.

Right mouse and executing Open on the the "message.rpmsg" causes Outlook to respond with a popup saying "The command line argument is not valid. Verify the switch you are using". Preview of the message is unreadable as the message (which has somehow become an attachment) exists in an encrypted state. Presumably Outlook is not handling the RMS-protected content, and nothing shows in the logs on the AD RMS server when I attempt to open any of the messages in this thread. Outlook Offline and Online mode yields the same behavior.

The email environment is hosted on Exchange 2007.

What is odd about this is that my collegue can open the message on his Outlook, reply to it and without issue I can open view the reply as normal, seeing the complete thread contents, can reply, and can see that I have full permissions on the conversation.

While my computer (and local profile was rebuilt) in August 2013 I can open other protected messages that I have sent and received from within my Inbox and Sent items all the way back through last year. It is just items in this thread that are inaccessible. Unfortunately these are the only ones that are in a thread with replies. There are some other users who are experiencing similar issues. Of the seven users, including myself, the mailboxes are in 7 different databases in three different exchange mailbox clusters, so there does not seem to be a problem with a single server or database. Running Outlook in advanced debug mode does not show anything in the logs either.

The big question is what is causing the previous items in this particular thread from being unreadable?

↧

Exchange 2010 - Outlook 2016 client issue adding new account automatically

November 2, 2016, 4:03 am

≫ Next: Notifications on shared calendar

≪ Previous: AD RMS protected messages not opening in Outlook 2010

I am running Outlook 2016 on a client, connecting to Exchange 2010 server

When I try to add the user's e-mail account to the 2016 I get an error

We're sorry, we couldn't set up your account automatically. To set it up tourself, click Next.

It seems to be finsing the server and the account, but cannot complete the action. Is tehre something wrong with our autodiscover? Any help is much appreciated

Thanks Darren

↧

Notifications on shared calendar

November 2, 2016, 8:06 am

≫ Next: Federation trust

≪ Previous: Exchange 2010 - Outlook 2016 client issue adding new account automatically

How do I set up notifications on a shared calendar using Exchange when anyone adds items on the calendar?

↧

Federation trust

November 2, 2016, 12:50 pm

≫ Next: OWA 2013 and hide specific options

≪ Previous: Notifications on shared calendar

I have an email address where we send emails: companyBrand.com, however OWA points to mail.company.com/owa. I cannot add this domain (companyBrand.com) to my federation trust, but I was able to add company.com. So, I can see the Free/Busy schedule, but I cannot send the invitation because the domain is not an actual email address.

How would I be able to change company.com to companyBrand.com in my Exchange environment to be able to use the address properly?

↧

OWA 2013 and hide specific options

November 1, 2016, 6:11 pm

≫ Next: Exchange 2010 -> 2013 Migration - Outlook fails to load new mailboxes - "The set of folders cannot be opened .... "

≪ Previous: Federation trust

Hi,

We're upgrading to Exchange 2013 and when logged into OWA 2013, in the top right under OPTIONS there are a number of options that we would like to hide from staff. For example:

- Options/Site Mailboxes/My Site Mailboxes

- Options/Groups/Distribution Groups

Hopefully it's just that I've been looking in the wrong places, but i can't seem to find anyway to do this.

Thanks

↧

Exchange 2010 -> 2013 Migration - Outlook fails to load new mailboxes - "The set of folders cannot be opened .... "

January 13, 2014, 7:01 pm

≫ Next: Can't login through Exchange server OWA when Active Directory logon hour schedule activated

≪ Previous: OWA 2013 and hide specific options

We are currently migrating from an exchange 2010 cluster with 2 servers (all roles) to a new 2013 cluster (all roles). Prior to moving production mailboxes over, we started testing 2013 by adding dummy mailboxes and running access tests. What we found is that OWA, Active-Sync work fine ... Outlook Anywhere does not.

While starting Outlook for the first time after adding an account, Outlook fires out:

"Cannot start microsoft outlook. Cannot open the outlook window. The set of folders cannot be opened. You must connect to Microsoft Exchange with the current profile before you can synchronize your folders with your outlook file (.ost)."

Non-Cached:

"Cannot start microsoft outlook. Cannot open the outlook window. The set of folders cannot be opened. Microsoft Exchange is not available. etehr there are network problems or the exchange server is down for maintenance"

After spending a day on the web trying to source out the cause, here's what we know:

- YES - A properly signed certificate is applied and correctly assigned to appropriate services and IIS is restarted on both
- YES - OWA/Active-Sync work correctly without any certificate issues
- YES - Outlook Anywhere settings for internal/external hostnames are set to match the SSL Certificate
- YES - Outlook Anywhere authentication is set to forms based with NTLM (and clients match)
- YES - MAPIBlockOutlookRpcHttp is set to $false on all accounts
- YES - MAPIEnabled is set to $true on all accounts
- YES - Accounts are quickly resolved and added to outlook (issues is only on Outlook startup)
- YES - Cached vs Non-cached mode both fail
- YES - Exchange 2010 accounts work fine
- YES - This Affects Outlook 2013 and 2010 clients

Interestingly:

- If we access 2010 mailboxes through 2013 cas, no issues
- If we access 2010 mailboxes through 2010, no issues
- If we access 2013 mailboxes through 2013 cas, issues
- If we access 2013 mailboxes through 2010, issues

Would really appreciate a few suggestions, no idea what is causing this.

↧

Can't login through Exchange server OWA when Active Directory logon hour schedule activated

October 30, 2016, 9:49 am

≫ Next: How to hide Outlook 2013 to show URL for OWA access

≪ Previous: Exchange 2010 -> 2013 Migration - Outlook fails to load new mailboxes - "The set of folders cannot be opened .... "

Hello!!

I have enabled user logon hour by Active Directory, when logon hour activated then domain user can't logon from Exchange server OWA. My requirement is user prevent logon by their Active Directory logon schedule but don't hamper to login from Exchange server Outlook Web App (OWA) for a single moment. Please help me ASAP. Thanks.

Babu

↧

How to hide Outlook 2013 to show URL for OWA access

November 2, 2016, 7:38 pm

≫ Next: Cannot send email

≪ Previous: Can't login through Exchange server OWA when Active Directory logon hour schedule activated

Hi;

In Outlook 2013, when you click File, you can see the URL for OWA in "Account Social Network Settings", usually; this is pointing to the external url of OWA.

Is it possible to hide this URL? Because I do not want my user try to type this URL from his/her home computer even though their account has no OWA enable. For security reason, I do not want it to be displayed.

Also, in Outlook 2013, it gives a lot of flexibility for user to access Exchange mailbox from Outlook. How can I prevent the user not using their Outlook at home to access to their mailbox. In Exchange 2010, if I disable Outlook Anywhere, they will not able to do it but how to prevent in Exchange 2013?

thanks!

KW - CNE,MCSE,VCP5

↧

Cannot send email

October 13, 2016, 7:42 am

≫ Next: Unable to delete user's calendar from 'My Calendars' in Outlook 2010

≪ Previous: How to hide Outlook 2013 to show URL for OWA access

Good Day,

I cannot send email. Keep on getting "

You don't have permission to perform this action.

Exchange 2013.

Thank you

↧

Unable to delete user's calendar from 'My Calendars' in Outlook 2010

November 3, 2016, 7:11 pm

≫ Next: Outlook 2010/Exchange 2013 - Recover deleted items - just back into deleted folder?

≪ Previous: Cannot send email

Hi All,

I have tried just about everything, but I am unable to delete a calendar from the calendar navigation pane as shown below. When I right click and select 'Delete Calendar', it literally does nothing.

I'm rather new to this environment, but we are using Exchange Server 2010 with Office 2010. I have access to the exchange server box and the calendar was added via the 'Share calendar by email' option from another user. (.ics file).

I have tried:

Re-launching in Safe Mode
Re-launching using the /resetnavpane switch
Deleting using the list view

↧

Outlook 2010/Exchange 2013 - Recover deleted items - just back into deleted folder?

November 4, 2016, 1:08 am

≫ Next: Blackhills revealed EWS vulnability to tools like MailSniper

≪ Previous: Unable to delete user's calendar from 'My Calendars' in Outlook 2010

I've tested and this is what it does for me. Any items recovereable get put back into deleted items folder regardless of whether the items are normal deleted and then deleted from deleted items or shift-deleted straight away?

BUT, I've seen it where recover deleted items has recovered items directly back into the inbox. Under what conditions is this even possible?

↧

Blackhills revealed EWS vulnability to tools like MailSniper

November 4, 2016, 10:57 am

≫ Next: REcall an email message

≪ Previous: Outlook 2010/Exchange 2013 - Recover deleted items - just back into deleted folder?

Hello,

Blackhills in a post revealed that EWS is vulnerable to tools like MailSniper.ps1. Below is the post.

http://www.blackhillsinfosec.com/?p=5396

Has anyone else seen this?

MailSniper could search a mailbox via the EWS URL. https://mail.domain.com/EWS/Exchange.asmx

Suggestions to resolve this?

How can we block EWS externally but allow internally?

Thanks

Ron

↧

REcall an email message

November 4, 2016, 1:34 pm

≫ Next: Help setting up Outlook 2010 with hotmail

≪ Previous: Blackhills revealed EWS vulnability to tools like MailSniper

I need to recall an email that was sent. Everything I read says to open the message, then go to Actions. I can't find Actions. I'm on Windows 10 using Office 365. Does anyone have a suggestion?

↧

Help setting up Outlook 2010 with hotmail

November 4, 2016, 2:51 pm

≫ Next: bounce back email

≪ Previous: REcall an email message

Recently due to hardware problems Outlook 2010 had to be reinstalled. I believe my first attempt to set it up messed things up because I did not know the correct server name, I still don't. My knowledge of how all this works is next to 0. I have not been able to get any help from Google as I don't understand all the terminology. Now when outlook is opened it waits on the splash screen and eventually the message "The server is unavailable" comes up. I would be most grateful if someone can provide a link for dummies or help.

Thanks.

↧

bounce back email

November 5, 2016, 11:18 pm

≫ Next: Outlook cant connect to exchange server

≪ Previous: Help setting up Outlook 2010 with hotmail

hi all ,

i am keep receiving the below bounce back message and i didn't send any email to receive this bounce back :

Delivery has failed to these recipients or groups:

xx@mycompanydomain Your message wasn't delivered due to a permission or security issue. It may have been rejected by a moderator, the address may only accept email from certain senders, or another restriction may be preventing delivery.

The following organization rejected your message: gmail-smtp-in.l.google.com.

Diagnostic information for administrators:

Generating server: smtp01.mycompanydomain.com

xx@gmycompanydomain gmail-smtp-in.l.google.com Remote Server returned '<gmail-smtp-in.l.google.com #5.7.1 SMTP; 550-5.7.1 Unauthenticated email from info.adobesystems.com is not accepted due 550-5.7.1 to domain's DMARC policy. Please contact the administrator of 550-5.7.1 info.adobesystems.com domain if this was a legitimate mail. Please 550-5.7.1 visit 550-5.7.1https://support.google.com/mail/answer/2451690 to learn about the 550 5.7.1 DMARC initiative. qb7si14587464wjc.2 - gsmtp>'

Original message headers:

Return-Path: <xx@mycompanydomain >

Received: from mail.mycompanydomain.com ([172.21.1.63])

        by smtp01.mycompanydomain.com
  with ESMTP id uA4CrlWw026742-uA4CrlX0026742

        (version=TLSv1.0 cipher=AES128-SHA bits=128 verify=NOT)

        for <xx@mycompanydomain.com
>; Fri, 4 Nov 2016 15:53:47 +0300

Resent-Date: Fri, 4 Nov 2016 15:53:47 +0300

Resent-Message-ID: <201611041253.uA4CrlWw026742-uA4CrlX0026742@smtp01.mycompnaydomain.com>

Resent-From: <xx@mycompanydomain.com
>

Received: from smtp01.mycompanydomain.com
(172.20.1.24) by SRV-MAIL-01.mycompanydomain.com

 (172.21.1.63) with Microsoft SMTP Server (TLS) id 15.0.1044.25; Fri, 4 Nov

 2016 15:57:45 +0300

Received: from r156.info.adobesystems.com (r156.info.adobesystems.com [192.243.232.156])

        by smtp01.mycompanydomain.com  with ESMTP id uA4Crh3b026739-uA4Crh3c026739

        for <xx@mycompanydomain.com
>; Fri, 4 Nov 2016 15:53:43 +0300

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

        s=neolane;

        d=info.adobesystems.com;

        h=domainkey-signature:from:date:subject:to:reply-to:mime-version:x-mailer:message-id:content-type;

        bh=z6pbeBx+Obkhw5aGuJVBndtrMS8RPeASVgu3g3ToCH8=;

 b=DlQfm7nbOu7TpgkksNhNDnwT4xrIgu/hT4KBIIPzGuTGUk2+KiVr1ia11EeGHBf8XEaRP6uty5RTGFeMeNbWH9Q5zG+IUv/uxi8+uRd/6cDvei2XE3txjTlMHiXeLbKL/3HiSSBf+ib3rn6vEqii40HpfuaQHep6e+AM8I7oPJ8=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns;

        s=neolane;

        d=info.adobesystems.com;

        h=From:Date:Subject:To:Reply-To:MIME-Version:X-mailer:Message-ID:Content-Type;

 b=r75wbIg6oiyg8ql+kgQsfgATS2PqKs5MHr3JBFFGn6mmsOpmZhSOvxtjh78t6bydLLu6+jB7+QiwyvWFEeYkYy19/TGaMeAs4Xmdq+5+0mtXnbGiEm5UuIrnC8Q53wfUL+nv0BFZnY1ztfy3wCIUBjsZKpp2hGQc1Z3d0mPXZy0=

From: Adobe <demand@info.adobesystems.com>

Date: Fri, 4 Nov 2016 05:59:24 -0700

Subject: =?utf-8?B?UmVwb3J0OiBHZXQgYWxsIHlvdXIgY2hhbm5lbHMgcGxheWluZw==?=

 =?utf-8?B?IHRvZ2V0aGVy?=

To: <xx@mycompanydomain.com
>

Reply-To: Adobe <digital@adobe.com>

MIME-Version: 1.0

X-mailer: nlserver, Build 6.1.1.8692

Message-ID: <NM6363A6E95067B3555camp@info.adobesystems.com>

Content-Type: multipart/alternative;

        boundary="----=_NextPart_336_B3CA12BA.B3CA12BA"

Authentication-Results: smtp01.mycompanydomain.com

        spf=pass (mycompanydomain.com: domain of camp@info.adobesystems.com designates 192.243.232.156 as permitted sender) smtp.mailfrom=camp@info.adobesystems.com

↧