40 C
Dubai
Sunday, May 4, 2025
Home Blog Page 79

Federation Information Could not be received from the External Organization –Exchange 2013

After Creating a federation Trust on Testcareexchange.biz  . Its throwing up a error “Federation Information Could not be received from the External Organization”

image

Verify 5 Things –

1 .Verify WSSecurityAuthentication is set to True

2 . Verify MRSPRoxy is enabled (Am not 100 % sure this step fixed the solution )

3. Verify 443 Port is accessible

4.  Verify this URL is accessible from your domain

https://autodiscover.testcareexchange.biz/autodiscover/autodiscover.svc/WSSecurity

5. If this command fails(Get-FederationInformation -DomainName testcareexchange.biz) on your internal servers and works on external servers ,verify “autodiscover.testcareexchange.biz” is pinging

==

Running with Verbose gives a detailed Error on where it fails

Get-FederationInformation -DomainName testcareexchange.biz –verbose

==

Step1 –

To Check

Get-AutodiscoverVirtualDirectory | Fl *wssecurity*

To Set to True – e.g.Servername\Autodiscover (Default Web Site)

Set-AutodiscoverVirtualDirectory “EXCH2013\Autodiscover (Default Web Site)” –WSSecurityAuthentication:$true

image

Step2 –

To Check

Get-WebServicesVirtualDirectory | fl *mrs*

To Set to True – e.g.Servername\EWS (Default Web Site)

Set-WebServicesVirtualDirectory “EXCH2013\EWS (Default Web Site)” -MRSProxyEnabled:$true

image

Step3 –

Telnet works on 443

image

Step4 –

Use a browser from external works , make sure it opens a credential prompt.

https://autodiscover.testcareexchange.biz/autodiscover/autodiscover.svc/WSSecurity

image

 

It worked 🙂

 

image

How to Create Autodiscoverredirect record for Multi Tenant Scenario in Exchange 2013

Lets say you are hosting many domains in one Exchange Server (Multi-Tenant) .

SSL cert has been Configured, With these below entries for example .

Mail.Careexchange.in

autodiscover.careexchange.in

In Simple Words – Using AutoDiscover with large numbers of accepted domains

image

Now for every domain you host . you cannot keep adding their entries in your SSL . that’s not going to benefit you . the recommended method is using the Autodiscoverredirect method .

like for the every domain you host . you can create a CNAME record.

autodiscover.DomainA.com CNAME to autodiscoverredirect.careexchange.in

So that you can get the autodiscover settings from your primary domain .

And Outlook 2007 . 2010 , 2013 can understand it . so that your Outlook can be configured automatically .

Click “Add Website”

image

“Type Autodiscoverredirect”

Create a Folder “AutodiscoverRedirect” in the below location

“C:\inetpub”

image

Now In that website – Add Http redirect URL

As Primarydomain (Hosterdomain)  https://mail.careexchange.in/autodiscover

Click on Apply

 

image

Add the Additional IP on the NIC . so that the IP listens .

Lets see how to create a CNAME record for example.

Create a CNAME Record for Every Tenant to use the Primary Auto discover Service

Lets say you host DomainA,DomainB,DomainC

In Domain A public DNS

autodiscover.DomainA.com CNAME to autodiscoverredirect.careexchange.in

In Domain B public DNS

autodiscover.DomainB.com CNAME to autodiscoverredirect.careexchange.in

In Domain C public DNS

autodiscover.DomainC.com CNAME to autodiscoverredirect.careexchange.in

Wait for DNS propagation for 2 to 4 hours .

To Verify the auto discover setting succeeded properly .

You can use Below Microsoft website .

http://testexchangeconnectivity.com/

Hope this information is Useful.

Still there are other methods like SRV methods , which doesn’t require a additional public IP

But few active sync phones doesn’t support SRV method . E.g Iphone.

Rapid Migration Guide from Exchange 2010 to Exchange 2013 – Released

Very much excited to release Exchange 2010 to Exchange 2013 migration guide.

Getting all the migration steps in a systematic procedure always helps Exchange Administrators to do the migration with ease.

This Plan should be more suitable for Medium and Small Business environments also it can be adopted to large enterprises with little bit of expertise.

 

Download the Rapid Migration Guide from Exchange 2010 to Exchange 2013

 

Happy migration 🙂

Client Access Coexistence with Exchange 2010 and Exchange 2013

Unlike Previous versions , Exchange 2013 Coexistence is done with ease without much complexity involved. but understanding the nature of the legacy clients is very important.

Once we make sure Exchange 2013 is completely configured. We got to re route the mail flow and URL name space , these procedure will explain using the same name space without introducing new name spaces

For Example (Choosing a typical example for better understanding)

My Outlook Web App URL is

https://mail.testcareexchange.biz/owa/

My MX record pointing to

testcareexchange.biz == > Mail.testcareexchange.biz

which points to Exchange 2010.

Now I want to switch over to Exchange 2013 by changing the MX and A record of mail.testcareexchange.biz , autodiscover.testcareexchange.biz

image

Before doing this – We will see the things should be looked at

How Internal Outlook (Connected to Exchange 2010) Will affect ?

Internal Outlook clients Which are connected to Exchange 2010 is not going to affect anyways.They will be still connected to Exchange 2010

How autodiscover going to work from External world ?

Once autodiscover.testcareexchange.biz points to exchange 2013. All requests will be proxied to the Exchange 2010 Server.

How Exchange 2010 Outlook anywhere clients going to connect once the switch over happens ?

All Exchange 2010 Outlook clients request will be proxy the requests to exchange 2010

Exchange 2010 Outlook anywhere should be enabled.

NTLM should be enabled in exchange 2010 server – Adding to Basic authentication.

How Outlook Web App going to work ?

Outlook Web App request will be proxied once it determines the location of the mailbox server

how to Verify Proxy works – you can login to Exchange 2013 Server

Browse

https://localhost/owa

Use a Exchange 2010 mailbox creds , Request should get proxied and Exchange 2010 Owa should open.

How Exchange Active Sync going to work ?

Active Sync Client requests will be proxied to Exchange 2010

How Exchange Web Services going to work ?

Exchange Webs Services requests going to be proxied to Exchange 2010

How IMAP – POP going to work ?

It will use the InternalConnectionSettings property value for each Exchange 2010 Client Access and it will attempt to connect to it .

Migrating Public Folders from Exchange 2010 to Exchange 2013

Step 1 :

Downloading Required PF migration Scripts

Login to Exchange 2010 –

Download the PF migration Scripts

Step 2:

Backing up PF structure in Exchange 2010

Backing up PF Folder , Items and Permission structure and run a full backup on the PF database.

First Run these Commands to take a Backup of Public Folder structure.

Backing up PF Structure

Get-PublicFolder -Recurse | Export-CliXML C:\PFMigration\Legacy_PFStructure.xml

Backing up PF Folder item Structure

Get-PublicFolderStatistics | Export-CliXML C:\PFMigration\Legacy_PFStatistics.xml

Backing up PF Permission Structure

Get-PublicFolder -Recurse | Get-PublicFolderClientPermission | Select-Object Identity,User -ExpandProperty AccessRights | Export-CliXML C:\PFMigration\Legacy_PFPerms.xml

Step 3:

Removing Unsupported Sign from PF Name in Exchange 2010

Make sure there is no PF folder contains the sign “\” in the name.

Get-PublicFolderStatistics -ResultSize Unlimited | Where {$_.Name -like “*\*”} | Format-List Name, Identity

if it returns any folder , Remove the “\” from the Public Folder name.

NOTE : If the name of a public folder contains a backslash \, the public folders will be created in the parent public folder. Review the .csv file and edit any names that contain the backslash.

Step 4:

Removing any existing Migration Request or any PF Folder in Exchange 2013

Make sure there is no Public folder migration request exist already.

Get-PublicFolderMigrationRequest

If there is any

Remove them

Get-PublicFolderMigrationRequest | Remove-PublicFolderMigrationRequest -Confirm:$false

Make Sure there is no PF mailbox or folder created in Exchange 2013

Get-Mailbox –PublicFolder

Get-PublicFolder

To Remove PF mailbox and PF folder in Exchange 2013

Get-Mailbox -PublicFolder | Where{$_.IsRootPublicFolderMailbox -eq $false} | Remove-Mailbox -PublicFolder -Force -Confirm:$false

Get-Mailbox -PublicFolder | Remove-Mailbox -PublicFolder -Force -Confirm:$false

Step 5:

Making Sure Public Folders is not Locked in Exchange 2010

Make sure PublicFoldersLockedforMigration, PublicFolderMigrationComplete  is set to $false

Get-OrganizationConfig | Format-List PublicFoldersLockedforMigration, PublicFolderMigrationComplete

image

Step 6:

Create the Foldertosize map file in Exchange 2010

Run the Script –

.\Export-PublicFolderStatistics.ps1 Foldertosize.csv mailboxserver.testcareexchange.biz

For Example –

.\Export-PublicFolderStatistics.ps1 Foldertosize.csv exch2010.testcareexchange.biz

image

Step 7:

Create the public-folder-to-mailbox map file in Exchange 2010

Run the Script –

.\PublicFolderToMailboxMapGenerator.ps1 <Maximum mailbox size in bytes> <Folder to size map path> <Folder to mailbox map path>

For Example – Taking 25 Gb into bytes

.\PublicFolderToMailboxMapGenerator.ps1 26843545600 Foldertosize.csv public-folder-to-mailbox.csv

image

Step 8:

Determining the number of PF mailboxes required . And Creating it

Now open the public-folder-to-mailbox.csv file , It will show you how many mailboxes you need.

image

Use the Below Script for 25 mailboxes . my case its only 1

$numberOfMailboxes = 25;

for($index =1 ; $index -le $numberOfMailboxes ; $index++)

{

$PFMailboxName = “Mailbox”+$index;

if($index -eq 1)

{

New-Mailbox -PublicFolder $PFMailboxName -HoldForMigration:$true -IsExcludedFromServingHiearchy:$true;

}

else

{

New-Mailbox -PublicFolder $PFMailboxName -IsExcludedFromServingHierarchy:$true

}

}

Login to Exchange 2013 Server

Creating the PF mailbox “PFMailbox” by using the below command

New-Mailbox -PublicFolder PFMailbox -HoldForMigration:$true

image

Now Open the public-folder-to-mailbox.csv file and Change to the PFmailbox name which you created.

and copy the CSV file to Exchange 2013 Server root C:\ drive.

image

Step 9:

Migrating the PF folders

New-PublicFolderMigrationRequest -SourceDatabase (Get-PublicFolderDatabase -Server <Source server name>) -CSVData (Get-Content <Folder to mailbox map path> -Encoding Byte)

==

You can add “ -AcceptLargeDataLoss –BadItemLimit “ Parameters if you encounter corrupted items.

For Example –

New-PublicFolderMigrationRequest -SourceDatabase (Get-PublicFolderDatabase -Server exch2010.testcareexchange.biz) -CSVData (Get-Content C:\public-folder-to-mailbox.csv -Encoding Byte)

image

To Check the Status of the Migration Request

you can run

Get-PublicFolderMigrationRequest | Get-PublicFolderMigrationRequestStatistics -IncludeReport | fl

On Completion it will show up as “AutoSuspended”

if the data is large its going to take some time 4 –5 GB / hour max .

image

Step 10:

Lock the public folders to complete the migration for final synchronization (This Step Involves DOWNTIME)

Note : Mail sent to mail-enabled public folders will be queued and won’t be delivered until the public folder migration is complete. (Mails can stay in the queue for up to 48 hours by default)

Login to Exchange 2010 Server

Set-OrganizationConfig –PublicFoldersLockedForMigration:$true

image

Step 11:

Resuming the Public folder migration to complete successfully .

Set-PublicFolderMigrationRequest -Identity \PublicFolderMigration -PreventCompletion:$falseResume-PublicFolderMigrationRequest -Identity \PublicFolderMigration

image

Check Status –

Get-PublicFolderMigrationRequest | Get-PublicFolderMigrationRequestStatistics -IncludeReport | fl

If some one is accessing the PF folders or any proxy failures or any live sessions its going to re attempt periodically.

image

Now it looks completed

image

image

Step 11:

Now to Test the PF migration status.

Setting the PF folders on a Test mailbox

Set-Mailbox -Identity test100 -DefaultPublicFolderMailbox PFmailbox

image

Now add the public folder mailbox

image

If your PF structure is huge. to confirm everything is ok . Redo Step2 with New .xml file names and you can compare those files before completion.

Step 12:

Exchange 2013 should start serving the Hierarchy

Run

Get-Mailbox -PublicFolder | Set-Mailbox -PublicFolder -IsExcludedFromServingHierarchy $false

image

Step 13:

On Completion Set PublicFolderMigrationComplete  to $true in Exchange 2010 Server.

Set-OrganizationConfig -PublicFolderMigrationComplete:$true

Step 14:

Removing Exchange 2010 Public Folder Database

image

 

Now Public Folders have been migrated from Exchange 2010 to Exchange 2013

How to Export/Import an SSL Certificate from Exchange2010 to Exchange 2013

Lets see how to export and import a Exchange Cert from Exchange 2010 to Exchange 2013

Open Exchange Management Console – Click on Server Configuration – Exchange Certificates – Right Click on the Cert – Click on Export Exchange Certificate

image

Browse for the location to save .  .pfx file . Enter a security password.

image

Save the file.

Login to Exchange 2013, We will do the import process.

Open the Exchange Admin Center – Click on Servers – Certificates – Click on Import Exchange Certificate.

image

Enter .pfx file location – Enter the password

Choose next

image

Specify the Server you want to import the exchange cert.

image

Choose finish.

Choose the Cert and Choose the Edit icon.

image

Choose the Services and click on Save.

image

Just do an IISreset to take effect.

Opening the URL the cert looks assigned.

image

× How can I help you?