Exchange 2010 Access is denied error when you want to manage the CAS role

Running Exchange 2007 has had its pros and cons. Now that Exchange 2010 is out we want to take advantage of the new features you need do the Exchange migrations. After installing Exchange 2010 server in an Exchange 2007 server environment can give some quirky results. After the installation Exchange 2010 and open the Exchange management console you go to Microsoft Exchange On-Premises -> ServerConfiguration -> Client Access and you will receive the following error message.

 

More...

Tags: ,

Enabling the AD recycle bin

Everything between <..> needs to be replaced or contains your specific environmental information.

To enable the AD recycle bin you first need to upgrade all your DC’s to Windows Server 2008 R2. Next you need to bring your domain and forest to 2008 R2 fictional level. Once your forest level is at the 2008 R2 functional level you can then enable the recycle bin feature.

More...

Tags: , , ,

Leftovers after upgrading to windows 2008 R2

We upgraded one of our DC’s to 2008 R2 and everything went fine except for the DNS issue that I blogged about here. After an installation I inspect the server and check to see if everything is ok. I disable hidden en system file viewing in explorer and see what is left. Can across the following two folders $INPLACE.~TR and $WINDOWS.~Q. These folders can be large. In my case they were 3.4 Gig. These folder were left over from the in place upgrade and can be deleted with no consequences.

FacebookDigg It!NewsVineRedditStumbleUpon

Tags:

How to remove a Domain DFS Name space with a decommissioned server?

I ran in to this one awhile back but had to figure it out again recently.
Customer has a root DFS Name Space on a single server. He decommissioned the server without removing the name space first. Now his login scripts are failing and he want the name space back but the server has been reinstalled. Quickest way is to delete the name space and recreate it on another server but that’s the problem, deleting the name space. To delete the name space you need to start up adsiedit and go to CN=Dfs-Configuration,CN=System,DC=<name_of_your_domain>. On the server that you are creating the new name space you need to execute the following commands:

Dfsutil /PktFlush
Dfsutil /SpcFlush

Dfsutil /PurgeMupCache

Now you should be able to create the same name space on the new server. I do highly recommend that you wait 15 min before doing so. DFS stops giving referrals to the decommissioned server within 15 minutes of the update to the DFS Active Directory directory service object. The DFS Active Directory object resides on the local domain controller and is issued by the PDC emulator master. The time that the update can take depends on Active Directory replication schedules.

FacebookDigg It!NewsVineRedditStumbleUpon

Tags:

DNS problems after upgrading you DC’s to Windows Server 2008 R2

We have seen this problem with every installation of Windows Server 2008 R2 behind an ISA server. Clients are not able to resolve certain DNS names. We noticed that we had problems resolving all Microsoft .com sites.
All the other Microsoft site like
www.microsoft.nl or www.bing.co.uk do work. So what gives? As it turns out in Windows 2008 R2 EDNS Probes is enabled by default. This can causes the DNS UDP packets to be larger than the ISA Servers DNS filter allows.
To fix this you need to execute the following command:

dnscmd <Server Name> /Config /EnableEDnsProbes 0

FacebookDigg It!NewsVineRedditStumbleUpon

Tags:

Exchange 2007 sp2 upgrade failure

I was upgrading a customer of ours to Exchange 2007 sp2 I encountered an error that stomped me for a little while. The error occurred during the /PrepareAD Duplicate AcceptedDomain found. Ok just run the GUI and all will be fine. The GUI setup will automatically do the AD prep for you. Errrrroooor The accepted domain already exists. What the F… Ah the exchange setuplog will hold the clue.

This is what I got:
[9/6/2009 2:07:24 PM] [2] Processing object "d8bf2a74-f28f-448a-8cfa-53d364a9eb84".
[9/6/2009 2:07:24 PM] [2] [ERROR] Unexpected Error
[9/6/2009 2:07:24 PM] [2] [ERROR] The accepted domain <DomainName>.com already exists.
[9/6/2009 2:07:24 PM] [2] Ending processing.
[9/6/2009 2:07:24 PM] [1] The following 1 error(s) occurred during task execution:
[9/6/2009 2:07:24 PM] [1] 0.  ErrorRecord: The accepted domain mages-touch.com already exists.
[9/6/2009 2:07:24 PM] [1] 0.  ErrorRecord: Microsoft.Exchange.Management.SystemConfigurationTasks.DuplicateAcceptedDomainException: The accepted domain <DomainName>.com already exists.
[9/6/2009 2:07:24 PM] [1] [ERROR] The accepted domain <DomainName>.com already exists.
[9/6/2009 2:07:24 PM] [1] Setup is halting task execution because of one or more errors in a critical task.
[9/6/2009 2:07:24 PM] [1] Finished executing component tasks.
[9/6/2009 2:07:24 PM] [1] Ending processing.
[9/6/2009 2:07:24 PM] [0] The Exchange Server Setup operation did not complete. For more information, visit http://support.microsoft.com and enter the Error ID.
[9/6/2009 2:07:24 PM] [0] End of Setup

Bing and google both had no anwsers to this. Neither did MS support site.

Ok the domain is my domain so what the f.. It’s late and the customer isn’t their so I’ll rename the accepted domain name and then change it back. No way, logically so but it was worth a try. I’ll use ADSIEdit. Goto the configuration container -> Services -> Microsoft Exchange -> <DomainName>.com -> Transport Settings -> Accepted Domains and I selected the object and clicked edit. Next I went to the attribute msExchAcceptedDomainName and the value was *.<DomainName>.com. Is the “*.” causing the problem? In earlier versions of exchange we used the *.DomainName to except all sub domains. In Exchange 2007 things changed it was not required any more but it still works. So I still come accros this in Exchange 2007 implementations.

Removing the “*.” allowed me to upgrade the server without any problems.

FacebookDigg It!NewsVineRedditStumbleUpon

Tags:

Exchange 2007 sp2 upgrade with UC language packs

Upgrading Exchange 2007 to sp2 will be necessary for all exchange admins that want to migrate (transform) to Exchange 2010. This service pack is not for the faint hearted because it does about a complete reinstall of your exchange server. First thing we have to upgrade our AD. Yes a new ForestPrep. This is well documented so I won’t go in to that here.

What about unified communication role? No problem if you don’t have language packs installed. If you do you need to de-install them first. Upgrade to SP2 and then install the SP2 language pack.

What about your language settings? Do you lose them? No, once you install the SP2 language pack your auto attended will continue work as before.

De-install command :     Setup.com /RemoveUmLanguagePack:<UmLanguagePackName>

Install command :            Setup.com /AddUmLanguagePack:<UmLanguagePackName> /s: d:\<MyLocalFolder>

Setup.com is from the exchange installation files.
MyLocalFolder is folder that contains the language files.

FacebookDigg It!NewsVineRedditStumbleUpon

Tags:

Operations Manager 2007 R2 hits RTM

The Operation Manager team has signed off on SCOM 2007 R2. You can download a trail version by Microsoft downloads.
General Availability of the product will be 1st July 2009.
We have been testing the relese candidateand are realy pleased with the improvements that the team has made with R2. For more information follow this link.
FacebookDigg It!NewsVineRedditStumbleUpon

Tags: ,

What drains your laptops battery life?

Have you ever wondered what uses the most battery power on your laptop? Well here is a list of the most power consuming devices on your laptop. This list of course does not including peripheral devices.
  • LCD: 43%
  • Chipset: 21%
  • Processor: 9%
  • Graphics: 8%
  • Hard Drive: 5%
  • Network: 4%
  • Other bits: 10%

The two items that surprised me were the chipset and hard drive. From the “olden days” hard drives consumed way more power than anything else. That belief lasted for a long time in the computer world. I knew that the power consumption had been reduced but not that much.

In Windows 7 Microsoft has used this information to optimize it’s power consumption. You will notice things like your LCD screen dims if you don’t use your computer 2 min on battery and 5 min when connected to the AC. Even Windows 7 slide show will be paused if it’s on battery power. So many small things they looked at to enhance the battery life.
 
So the next time you tweaking your screen settings think about your battery life and if it is really needed to tweak that setting.
FacebookDigg It!NewsVineRedditStumbleUpon

Tags:

Windows 7 Upgrade

One other related caution is INSTALL ONLY OFFICIALLY RELEASED BUILDS FROM MICROSOFT. It will always be tempting to get the build with the “mod” already done but you really never know what else has been done to the build. There’s a thrill in getting the latest, we know, but that also comes with risks that can’t even be quantified. For the RC we will work to release a hash or some other way to validate the build, but the best way is to always download directly from Microsoft.

Here’s what you can do to bypass the check for pre-release upgrade IF YOU REALLY REALLY NEED TO:

  1. Download the ISO as you did previously and burn the ISO to a DVD.
  2. Copy the whole image to a storage location you wish to run the upgrade from (a bootable flash drive or a directory on any partition on the machine running the pre-release build).
  3. Browse to the sources directory.
  4. Open the file cversion.ini in a text editor like Notepad.
  5. Modify the MinClient build number to a value lower than the down-level build. For example, change 7100 to 7000 .
  6. Save the file in place with the same name.
  7. Run setup like you would normally from this modified copy of the image and the version check will be bypassed.

thanks to:

http://blogs.msdn.com/e7/archive/2009/04/07/delivering-a-quality-upgrade-experience.aspx

FacebookDigg It!NewsVineRedditStumbleUpon

Tags: