Dear all

I have a problem with my newly set up Exchange 2013 server in a remote location. There a just two mailboxes residing on this server in the moment just for testing. My problem is that I can use Outlook Web App to connect to server, I can send and receive mails but cannot set up Outlook. When auto configuring Outlook settings the process goes fine through establishing network connection and searching for user settings, but stops by “Log on to server” asking for user name and password. Even if I enter correct data, user name and password request returns each time again and again.

If I click retry, I receive a message stating “The connection to Microsoft Exchange is unavailable, Outlook must be online to complete…”. Very similar behavior appears with both Outlook 2007 and Outlook 2013. From the same workstation I can open OWA, either using external or internal URL and everything goes fine. Even if I try to configure Outlook manually and enter Exchange server name and user name and click “Check name”, I receive an error “Outlook cannot log on. Verify you are connected to the network and using the proper server and mailbox name…”.

I can ping the Exchange server and the name of the server is being correctly resolved.

On the server itself I checked Outlook Anywhere authentication method and it is set to “Basic”.

Same happens on workstations locally and in the remote location when connected via LAN.

Same happens when I set authentication as NTLM both on server and on client

When clicking “Check name” sporadically I receive a message “Name cannot be resolved”

No matter what I do, I receive a password prompt: “Connect to interal.domain.com” with no success in Outlook and can connect at the very same time from the same workstation using https://internal.domain.com/owa or even from outside the organization using external URL and Outlook Web App.

Please help

Thanks a lot

Eduard

Single Sign On is not working for Exchange 2013 Cu12 OWA.I am trying it for the first time.

My environment has  one DC collocated with ADFS 3.0  and Exchange 2013 CU12 and Exchange 2016 CU1 on separate vm box.

I have followed technet article https://technet.microsoft.com/en-us/library/dn635116%28v=exchg.150%29.aspx i am getting below event id ;However i have configured my Relying Party as Https://Mail.contoso.local/owa but i am seeing https://localhost/owa in the event id.I am not sure why it is not redirecting to right url.DC time is synced with the exchange server in the domain.Windows Firewall

When i try to browse https://mail.contoso.local/owa i get a credential prompt from ADFS server when i enter the credentials i get 400 Bad request and when i check the ADFS event id i see the below error no error found in Exchange server.I have recreated the relying party trust and claim rule ,Rebooted the ADFS server  and exchange servers same issue.But currently i want Exchange 2013 OWA single sign on to be working internally any hep is much appreciated.

Log Name:      AD FS/Admin
Source:        AD FS
Date:          4/15/2016 5:19:57 AM
Event ID:      364
Task Category: None
Level:         Error
Keywords:      AD FS
User:          CONTOSO\AdfsService
Computer:      FQDN.Contoso.Local
Description:
Encountered error during federation passive request.

Additional Data

Protocol Name:
wsfed

Relying Party:
https://localhost/owa/

Exception details:
Microsoft.IdentityServer.Web.InvalidScopeException: MSIS7007: The requested relying party trust 'https://localhost/owa/' is unspecified or unsupported. If a relying party trust was specified, it is possible that you do not have permission to access the trust relying party. Contact your administrator for details.
   at Microsoft.IdentityServer.Web.Protocols.WSFederation.WSFederationSignInContext.Validate()
   at Microsoft.IdentityServer.Web.Protocols.WSFederation.WSFederationProtocolHandler.GetRequiredPipelineBehaviors(ProtocolContext pContext)
   at Microsoft.IdentityServer.Web.PassiveProtocolListener.OnGetContext(WrappedHttpListenerContext context)


Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="AD FS" Guid="{2FFB687A-1571-4ACE-8550-47AB5CCAE2BC}" />
    <EventID>364</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000001</Keywords>
    <TimeCreated SystemTime="2016-04-15T09:19:57.357321000Z" />
    <EventRecordID>1149</EventRecordID>
    <Correlation ActivityID="{00000000-0000-0000-1D00-0080010000D9}" />
    <Execution ProcessID="7000" ThreadID="6424" />
    <Channel>AD FS/Admin</Channel>
    <Computer>pnwvads1001.Contoso.Local</Computer>
    <Security UserID="S-1-5-21-2436829481-2076273062-547070292-1157" />
  </System>
  <UserData>
    <Event xmlns="http://schemas.microsoft.com/ActiveDirectoryFederationServices/2.0/Events">
      <EventData>
        <Data>wsfed</Data>
        <Data>https://localhost/owa/</Data>
        <Data>Microsoft.IdentityServer.Web.InvalidScopeException: MSIS7007: The requested relying party trust 'https://localhost/owa/' is unspecified or unsupported. If a relying party trust was specified, it is possible that you do not have permission to access the trust relying party. Contact your administrator for details.
   at Microsoft.IdentityServer.Web.Protocols.WSFederation.WSFederationSignInContext.Validate()
   at Microsoft.IdentityServer.Web.Protocols.WSFederation.WSFederationProtocolHandler.GetRequiredPipelineBehaviors(ProtocolContext pContext)
   at Microsoft.IdentityServer.Web.PassiveProtocolListener.OnGetContext(WrappedHttpListenerContext context)

</Data>
      </EventData>
    </Event>
  </UserData>
</Event>

Lakz

Hi,

In Outlook 2013 and 2010 (only these two I checked) we have the below options within rules -

1. With specific words in the sender's address

2. Have server reply using a specific message.

The issue is -

When I apply this rule to a mailbox of Exchange 2010 or 2007 server, this rule not works (not sending auto reply). I tested it from Outlook 2013 and Outlook 2010.

When I apply this rule to a mailbox of Exchange 2013 server, this rule works perfectly. Sender is receiving the desired auto reply. This rule works both outlook open and closed.

Kindly Suggest why this rule is not working for Exchange 2010 and 2007 mailboxes.

Thanks.

hi all  , 

i am keep receiving the below bounce back message   and i didn't send any email to receive this bounce back :

Delivery has failed to these recipients or groups:

xx@mycompanydomain  Your message wasn't delivered due to a permission or security issue. It may have been rejected by a moderator, the address may only accept email from certain senders, or another restriction may be preventing delivery.

The following organization rejected your message: gmail-smtp-in.l.google.com.

Diagnostic information for administrators:

Generating server: smtp01.mycompanydomain.com

xx@gmycompanydomain  gmail-smtp-in.l.google.com Remote Server returned '<gmail-smtp-in.l.google.com #5.7.1 SMTP; 550-5.7.1 Unauthenticated email from info.adobesystems.com is not accepted due 550-5.7.1 to domain's DMARC policy. Please contact the administrator of 550-5.7.1 info.adobesystems.com domain if this was a legitimate mail. Please 550-5.7.1 visit 550-5.7.1https://support.google.com/mail/answer/2451690 to learn about the 550 5.7.1 DMARC initiative. qb7si14587464wjc.2 - gsmtp>'

Original message headers:

Return-Path: <xx@mycompanydomain >

Received: from mail.mycompanydomain.com ([172.21.1.63])

        by smtp01.mycompanydomain.com
  with ESMTP id uA4CrlWw026742-uA4CrlX0026742

        (version=TLSv1.0 cipher=AES128-SHA bits=128 verify=NOT)

        for <xx@mycompanydomain.com
>; Fri, 4 Nov 2016 15:53:47 +0300

Resent-Date: Fri, 4 Nov 2016 15:53:47 +0300

Resent-Message-ID: <201611041253.uA4CrlWw026742-uA4CrlX0026742@smtp01.mycompnaydomain.com>

Resent-From: <xx@mycompanydomain.com
>

Received: from smtp01.mycompanydomain.com
(172.20.1.24) by SRV-MAIL-01.mycompanydomain.com

 (172.21.1.63) with Microsoft SMTP Server (TLS) id 15.0.1044.25; Fri, 4 Nov

 2016 15:57:45 +0300

Received: from r156.info.adobesystems.com (r156.info.adobesystems.com [192.243.232.156])

        by smtp01.mycompanydomain.com  with ESMTP id uA4Crh3b026739-uA4Crh3c026739

        for <xx@mycompanydomain.com
>; Fri, 4 Nov 2016 15:53:43 +0300

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

        s=neolane;

        d=info.adobesystems.com;

        h=domainkey-signature:from:date:subject:to:reply-to:mime-version:x-mailer:message-id:content-type;

        bh=z6pbeBx+Obkhw5aGuJVBndtrMS8RPeASVgu3g3ToCH8=;

 b=DlQfm7nbOu7TpgkksNhNDnwT4xrIgu/hT4KBIIPzGuTGUk2+KiVr1ia11EeGHBf8XEaRP6uty5RTGFeMeNbWH9Q5zG+IUv/uxi8+uRd/6cDvei2XE3txjTlMHiXeLbKL/3HiSSBf+ib3rn6vEqii40HpfuaQHep6e+AM8I7oPJ8=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns;

        s=neolane;

        d=info.adobesystems.com;

        h=From:Date:Subject:To:Reply-To:MIME-Version:X-mailer:Message-ID:Content-Type;

 b=r75wbIg6oiyg8ql+kgQsfgATS2PqKs5MHr3JBFFGn6mmsOpmZhSOvxtjh78t6bydLLu6+jB7+QiwyvWFEeYkYy19/TGaMeAs4Xmdq+5+0mtXnbGiEm5UuIrnC8Q53wfUL+nv0BFZnY1ztfy3wCIUBjsZKpp2hGQc1Z3d0mPXZy0=

From: Adobe <demand@info.adobesystems.com>

Date: Fri, 4 Nov 2016 05:59:24 -0700

Subject: =?utf-8?B?UmVwb3J0OiBHZXQgYWxsIHlvdXIgY2hhbm5lbHMgcGxheWluZw==?=

 =?utf-8?B?IHRvZ2V0aGVy?=

To: <xx@mycompanydomain.com
>

Reply-To: Adobe <digital@adobe.com>

MIME-Version: 1.0

X-mailer: nlserver, Build 6.1.1.8692

Message-ID: <NM6363A6E95067B3555camp@info.adobesystems.com>

Content-Type: multipart/alternative;

        boundary="----=_NextPart_336_B3CA12BA.B3CA12BA"

Authentication-Results: smtp01.mycompanydomain.com

        spf=pass (
mycompanydomain.com: domain of camp@info.adobesystems.com designates 192.243.232.156 as permitted sender) smtp.mailfrom=camp@info.adobesystems.com

Hi Tech,

I am getting the below error.Our exchange is configured with 2013.So Please may I know what is the error and is it any effect  to exchange database related.What exactly the error and the logs coming some days back.

SMTP rejected a (P1) mail from 'HealthMailbox2086eae0218847a6985f1a95d028d82b@otpcindia.local' with 'Client Proxy DCMAILSRV01' connector and the user authenticated as 'HealthMailbox2086eae0218847a6985f1a95d028d82b'. The Active Directory lookup for the sender address returned validation errors. Microsoft.Exchange.Data.ProviderError
_______________
Event Id -1025
Source- MSExchange Transport

Thanks,

Sudhanshu

Hello,

I've created a huge (over 30000 items) address list of contacts filtered by custom attribute. In Outlook everything looks and works fine. When I display this address list in OWA it shows me contacts, but no details. I can use it to send e-mail, but I can't see phone number or working location. On the other hand, if I click on the same name in All contacts I can get full details. My question is what may cause this problem? or is it by design and there's nothing to do with it? Thanks for any help or suggestions.

Best regards

Dear All,

I am having a problem with  a single user in my domain accessing webmail, while the rest are fine.

as below

I have been unable to connect to my emails for a few days now and I receive the following error messages.

On https://mail.mydomain.com/owa/auth.owa:

The mail.mydomain.com  page isn’t working

mail.mydomain.com is currently unable to handle this request.

HTTP ERROR 500

On https://mail.mydomain.com/owa/#path=/mail

Hi,

I am having trouble with my new emails downloading or syncing with the Outlook 2010 program. This has been happening for a few months but I really would like to get this resolved if possible because it is much easier to keep track of my emails in the outlook program. Any tips or help on this would be greatly appreciated. 

Thanks,

Miriam Rosales

As above - recently just added 60-odd new mailbox users to our directory and Exchange org (recent company acquisition).

I've added their staff photos to the directory and they're showing up normally in the Address Book of Outlook and generally with Outlook's UI, but it's just been pointed out to me that they're not showing up in UI of OWA (Exchange 2013) - I can't for the life of me think of a reason why this would happen...

I've tried manually kicking off an update of the OAB, but that hasn't helped.  I'm now wondering if this is because none of these users have ever used Outlook (full-fat) yet - they're all in a remote office with no access to our internal LAN yet, so they're all OWA users via TMG for the moment.  Does Outlook 'do something' I don't know about, which would cure this?  Or is there something else I've missed?

I've never had a problem with GAL photos before today (it's always 'just worked'), so this is a new area for me.

Thanks for any suggestions!

Hello,

Blackhills in a post revealed that EWS is vulnerable to tools like MailSniper.ps1.  Below is the post.

http://www.blackhillsinfosec.com/?p=5396

Has anyone else seen this?

MailSniper could search a mailbox via the EWS URL.  https://mail.domain.com/EWS/Exchange.asmx 

Suggestions to resolve this?

How can we block EWS externally but allow internally?

Thanks

Ron

Hello Everyone,

Just update our password policy and just noticed when users reset their password via OWA the password suggestion does not match our policy.  Anyway to update the text that is displayed?



Hi;

In Outlook 2013, when you click File, you can see the URL for OWA in "Account  Social Network Settings", usually; this is pointing to the external url of OWA.

Is it possible to hide this URL? Because I do not want my user try to type this URL from his/her home computer even though their account has no OWA enable.  For security reason, I do not want it to be displayed.

Also, in Outlook 2013, it gives a lot of flexibility for user to access Exchange mailbox from Outlook.  How can I prevent the user not using their Outlook at home to access to their mailbox.  In Exchange 2010, if I disable Outlook Anywhere, they will not able to do it but how to prevent in Exchange 2013?

thanks!

KW - CNE,MCSE,VCP5

Hello All,

I have the following situation.

We have a hosted Exchange 2013 environment and the old Exchange was 2010. We are using Outlook 2010 fully updatet and we have a terminal server enivironment on Windows Server 2008R2.

Our Exchange servers are also updatet with the latest updates.

Couple of weeks ago a customer is migrated to our platform.

First we created all the users in our environment. For the migration I did a PST migration and used the Exchange Management Shell. On the server of the customer I did a export of there mail.

After the export was finished we uploaded the mail to our environment and did a Import of the PST files. Also through the Exchange Management Shell. This went all ok and we didn't had any issues.

I noticed the auto-complete list was also migrated and that gave a lot of issues when they tried to mail internal after clearing the Auto-Complete list the issue was solved.

But they have a appliciation called SAP and its there core business application for creating offers or invoices. They have a option which create a email and put it in drafts so the user can check the email and add a signature. Also the To: field is already filled in. When they send the email they get a NDR back immediately. 

Your message did not reach some or all of the intended recipients.

      Subject:    Oferte nav aanvraag IOTD - 29210

      Sent: 5/21/2014 4:22 PM

The following recipient(s) cannot be reached:

      External@external.nl on 5/21/2014 4:22 PM

            Diagnostic code = OrNameUnrecognized; Reason code = TransferFailed; Status code = 510

            < #5.1.0 smtp;550 5.1.0 RESOLVER.ADR.InvalidInSmtp; encapsulated INVALID address inside an SMTP address (IMCEAINVALID-)>

If we delete the address in the to: field and put in manual it send the email. When they try the same address again already filled in it fails. When I check the Email Properties of the contact the only field that is filled in is Display Name.

After you send the email when the to: field is already filled and you check the sent email you see at E-mail type INVALID. Another user sees a whole different contact when see right click on the address and choose Contact Card. After deleting the contact that shows a different contact is displayed.

I created a test user and also with the test user, newly created, we have the same issue.

I have contacted the supportdesk of the application to ask where the contact information is stored. The contact information is created within the application and the only things filled is the customer name and email address.

I have been looking for a week now and haven't find a solution yet. Also i'm not sure anymore where to look is this Outlook related or Exchange or is it the application?

I hope someone can help me with this.

Kind Regards,

Mathijn

Our client is having an issue whereby they are trying to send emails from a shared mailbox and when this is sent they get and undeliverable message returned instantly.  

What it appears to be is that instead of sending to the intended recipients address it tries to send to Recipient.recipientsdomain@sendersdomain.com.  full error is

IMCEAINVALID-recipient+40.recipientdomain+2Eco+2Euk@InternalDomain.com

In this  post the poster suggested it was a setting that needed to be enabled but didn't allude to what this was.  Can anyone please provide any assistance as this is preventing urgent emails being sent to numerous but not all of their clients.

http://social.technet.microsoft.com/Forums/en-US/c77100f9-5cd8-460b-a9e3-38dbea60dc95/action?threadDisplayName=outlook-2010-imceainvalid-ndr-with-exchange-2013

Kind Regards

Adam

Hi,

Have a user that cannot delete one of her calender meeting.
Get the error "Cannot open this item". So it cannot be opened or deleted.

Tried the following:
Testet from OWA (Webmail), same error
Testet moving her to another database
Testet doing it from remote computer and her computer.
Tried to delete it from powershell.

Anyone got any good tips? It just one meeting that need to be removed, all other works