Hi, I'm unable to send a email from my on-premise exchange 2013 server to my exchange online server.

Both have separate domain, and the O365 is synced with my AD with Dirsync, it's for all our student.

When I try to send a email from my email to a student address I have NDR error

Remote
Server returned '420 4.2.0 Recipient deferred because there is no Mdb'

The O365 domain is reachable if we send from external address to O365 it's fine. If we send email from O365 to our on-premise server domain, it's fine. It's only when my server want to send to 0365 account.

The O365 domain isn't listed in accepted domain in our on-premise server should be created?

I Have a send connector for the o365 domain in our on-premise server and he take MX to send to the domain and the type is personnalized. Is it correct?

In the get-hybridconfiguration the 0365 isn't listed, should it be since the 0365 domain will not be in our on-premise server.

Thanks

Hi.

I've created a rule that delays delivery of an email by two minutes if the recipient has an @ symbol in their address. I created it because, at my company, we are delaying sent emails to all external (non-domain) recipients. It works like a charm in all aspects, but I don't understand exactly how it works.

It was my understanding that it was looking at the header information for an @ symbol in the To: and CC: fields, but when I tested this, it delayed the external email and sent the internal email right away. This is exactly what it's supposed to do, but I don't understand exactly what it's doing in order to actually delay externally and allow internally right away.

Sorry if this is confusing. I can't really explain what I'm asking. Basically, I just want to know if maybe it's something to do with how it's looking up the contact in Exchange before it sends.

Any help is appreciated.

Hi 

I have Exchange 2013 

I want to track one message was send from one user to another one  in the same domain and organization 

 I want to get the sender destination IP address(internal IP) and make sure that the user is using his private PC 

BR

Mahmoud

Recently, I'm receiving some bounce email from my recipient saying "

Delivery has failed to these recipients or groups:

 email@address of my recipient
The server has tried to deliver this message, without success, and has stopped trying. Please try sending this message again. If the problem continues, contact your helpdesk.

this only happens in some of my recipient. So We check our exchange server if what's happening there, by checking, there was an error "451.4.4.0 Primary target IP address responded with "421.4.2.1. Unable to connect." Attempted failover to alternate host, but that did not succeed. Either there are no alternate hosts or delivery failed to all alternate hosts."

What does it mean. What shall I do. please help. Thanks.

I've seen a few older postings about this, but none of them have a solution.  We've upgraded to Exchange 2013 and we're using Public Folder rules to forward messages. When we set the forward type to be "Leave message intact", the message never gets forwarded.  The other two options "Standard" and "Insert message as an attachment" work fine.  In Exchange 2007 the "Leave message intact" option worked also.  I've seen some suggestions to use transport rules, but that won't work for what we're trying to do, so I'm wondering if there's another workaround for this issue.

Thanks,

Richard

Thanks, Rich

Hello All.............I have following question with respect to Exchange 2010 Mail Flow:

Often other E-Mail Servers refuse connection and does not allow e-mail delivery if the name of the SMTP Banner is different from the MX Record.  By default, the internal FQDN is the SMPT Banner. So, my question is how can we change it to match our external MX Record?  Is it safe doing so?  Would it not cause any issues with our e-mail service?

Hello,

Please help, basically we have the same issue as the following post, only the proposed answer is not the final answer and the issue persists:

http://social.technet.microsoft.com/Forums/en-AU/exchangesvrsecuremessaging/thread/76f4b8b5-7cfe-41c1-a3ef-47aa036612a6

Environment:
Windows Server 2012 DC edition
Exchange 2013 Std edition
Outlook 2013 (Office 2013 Std edition)
No Malware protection enabled within Exchange 2013
No Antivirus application on Windows Server

Issue:
Same problem experienced with two separate installations, random e-mails are stuck in the Exchange Submission Queue with Delivery Type Undefined and retry error "A storage transient failure has occurred during content conversion."

Workaround:
Running the following command will clear the queue but causes adverse effects:

Get-RemoteDomain|Set-RemoteDomain-TNEFEnabled $true

Would be great if Microsoft could help out here, we are sort of stretching relationships with our customers..

Regards,

Lyndon.

Hi,

I'm having a problem sending and receiving e-mails on my exchange.
I have setup a send connector and followed the step-by-step guides online.

I get the following logg:

2015-09-22T08:48:50.133Z,InternetSend,08D2C1E4EAD83E25,0,,207.38.2.251:25,*,,attempting to connect
2015-09-22T08:48:50.320Z,InternetSend,08D2C1E4EAD83E25,1,192.168.2.10:30210,207.38.2.251:25,+,,
2015-09-22T08:48:50.508Z,InternetSend,08D2C1E4EAD83E25,2,192.168.2.10:30210,207.38.2.251:25,<,220 upmsg1.unipoint.net ESMTP Postfix,
2015-09-22T08:48:50.508Z,InternetSend,08D2C1E4EAD83E25,3,192.168.2.10:30210,207.38.2.251:25,>,EHLO monkey-srvad.monkey.local,
2015-09-22T08:48:50.695Z,InternetSend,08D2C1E4EAD83E25,4,192.168.2.10:30210,207.38.2.251:25,<,250-upmsg1.unipoint.net,
2015-09-22T08:48:50.695Z,InternetSend,08D2C1E4EAD83E25,5,192.168.2.10:30210,207.38.2.251:25,<,250-PIPELINING,
2015-09-22T08:48:50.695Z,InternetSend,08D2C1E4EAD83E25,6,192.168.2.10:30210,207.38.2.251:25,<,250-SIZE,
2015-09-22T08:48:50.695Z,InternetSend,08D2C1E4EAD83E25,7,192.168.2.10:30210,207.38.2.251:25,<,250-ETRN,
2015-09-22T08:48:50.695Z,InternetSend,08D2C1E4EAD83E25,8,192.168.2.10:30210,207.38.2.251:25,<,250-STARTTLS,
2015-09-22T08:48:50.695Z,InternetSend,08D2C1E4EAD83E25,9,192.168.2.10:30210,207.38.2.251:25,<,250-AUTH DIGEST-MD5 PLAIN CRAM-MD5 LOGIN,
2015-09-22T08:48:50.695Z,InternetSend,08D2C1E4EAD83E25,10,192.168.2.10:30210,207.38.2.251:25,<,250-AUTH=DIGEST-MD5 PLAIN CRAM-MD5 LOGIN,
2015-09-22T08:48:50.695Z,InternetSend,08D2C1E4EAD83E25,11,192.168.2.10:30210,207.38.2.251:25,<,250-ENHANCEDSTATUSCODES,
2015-09-22T08:48:50.695Z,InternetSend,08D2C1E4EAD83E25,12,192.168.2.10:30210,207.38.2.251:25,<,250-8BITMIME,
2015-09-22T08:48:50.695Z,InternetSend,08D2C1E4EAD83E25,13,192.168.2.10:30210,207.38.2.251:25,<,250 DSN,
2015-09-22T08:48:50.695Z,InternetSend,08D2C1E4EAD83E25,14,192.168.2.10:30210,207.38.2.251:25,>,STARTTLS,
2015-09-22T08:48:50.882Z,InternetSend,08D2C1E4EAD83E25,15,192.168.2.10:30210,207.38.2.251:25,<,220 2.0.0 Ready to start TLS,
2015-09-22T08:48:50.882Z,InternetSend,08D2C1E4EAD83E25,16,192.168.2.10:30210,207.38.2.251:25,*,,Sending certificate
2015-09-22T08:48:50.882Z,InternetSend,08D2C1E4EAD83E25,17,192.168.2.10:30210,207.38.2.251:25,*,CN=monkey-srvad.monkey.local,Certificate subject
2015-09-22T08:48:50.882Z,InternetSend,08D2C1E4EAD83E25,18,192.168.2.10:30210,207.38.2.251:25,*,"CN=monkey-MONKEY-SRVAD-CA, DC=monkey, DC=local",Certificate issuer name
2015-09-22T08:48:50.882Z,InternetSend,08D2C1E4EAD83E25,19,192.168.2.10:30210,207.38.2.251:25,*,6103388C000000000002,Certificate serial number
2015-09-22T08:48:50.882Z,InternetSend,08D2C1E4EAD83E25,20,192.168.2.10:30210,207.38.2.251:25,*,A90FA095E86E317CA9A0F1492060154025E6E80D,Certificate thumbprint
2015-09-22T08:48:50.882Z,InternetSend,08D2C1E4EAD83E25,21,192.168.2.10:30210,207.38.2.251:25,*,monkey-srvad.monkey.local,Certificate alternate names
2015-09-22T08:48:51.069Z,InternetSend,08D2C1E4EAD83E25,22,192.168.2.10:30210,207.38.2.251:25,*,,Received certificate
2015-09-22T08:48:51.069Z,InternetSend,08D2C1E4EAD83E25,23,192.168.2.10:30210,207.38.2.251:25,*,CE724C99123EF74DAC404132623990D9FDBC5688,Certificate thumbprint
2015-09-22T08:48:51.069Z,InternetSend,08D2C1E4EAD83E25,24,192.168.2.10:30210,207.38.2.251:25,>,EHLO monkey-srvad.monkey.local,
2015-09-22T08:48:51.475Z,InternetSend,08D2C1E4EAD83E25,25,192.168.2.10:30210,207.38.2.251:25,<,250-upmsg1.unipoint.net,
2015-09-22T08:48:51.475Z,InternetSend,08D2C1E4EAD83E25,26,192.168.2.10:30210,207.38.2.251:25,<,250-PIPELINING,
2015-09-22T08:48:51.475Z,InternetSend,08D2C1E4EAD83E25,27,192.168.2.10:30210,207.38.2.251:25,<,250-SIZE,
2015-09-22T08:48:51.475Z,InternetSend,08D2C1E4EAD83E25,28,192.168.2.10:30210,207.38.2.251:25,<,250-ETRN,
2015-09-22T08:48:51.475Z,InternetSend,08D2C1E4EAD83E25,29,192.168.2.10:30210,207.38.2.251:25,<,250-AUTH DIGEST-MD5 PLAIN CRAM-MD5 LOGIN,
2015-09-22T08:48:51.475Z,InternetSend,08D2C1E4EAD83E25,30,192.168.2.10:30210,207.38.2.251:25,<,250-AUTH=DIGEST-MD5 PLAIN CRAM-MD5 LOGIN,
2015-09-22T08:48:51.475Z,InternetSend,08D2C1E4EAD83E25,31,192.168.2.10:30210,207.38.2.251:25,<,250-ENHANCEDSTATUSCODES,
2015-09-22T08:48:51.475Z,InternetSend,08D2C1E4EAD83E25,32,192.168.2.10:30210,207.38.2.251:25,<,250-8BITMIME,
2015-09-22T08:48:51.475Z,InternetSend,08D2C1E4EAD83E25,33,192.168.2.10:30210,207.38.2.251:25,<,250 DSN,
2015-09-22T08:48:51.475Z,InternetSend,08D2C1E4EAD83E25,34,192.168.2.10:30210,207.38.2.251:25,*,,sending message with RecordId 180388626672 and InternetMessageId <8a30447e24734177963feafefa073068@monkey-srvad.monkey.local>
2015-09-22T08:48:51.475Z,InternetSend,08D2C1E4EAD83E25,35,192.168.2.10:30210,207.38.2.251:25,>,MAIL FROM:<niclasj@monkey.local> SIZE=4586,
2015-09-22T08:48:51.475Z,InternetSend,08D2C1E4EAD83E25,36,192.168.2.10:30210,207.38.2.251:25,>,RCPT TO:<niclasjohansson1992@gmail.com>,
2015-09-22T08:48:51.849Z,InternetSend,08D2C1E4EAD83E25,37,192.168.2.10:30210,207.38.2.251:25,<,250 2.1.0 Ok,
2015-09-22T08:48:51.849Z,InternetSend,08D2C1E4EAD83E25,38,192.168.2.10:30210,207.38.2.251:25,<,450 4.1.8 <niclasj@monkey.local>: Sender address rejected: Domain not found,
2015-09-22T08:48:51.849Z,InternetSend,08D2C1E4EAD83E25,39,192.168.2.10:30210,207.38.2.251:25,>,QUIT,
2015-09-22T08:48:52.021Z,InternetSend,08D2C1E4EAD83E25,40,192.168.2.10:30210,207.38.2.251:25,<,221 2.0.0 Bye,
2015-09-22T08:48:52.021Z,InternetSend,08D2C1E4EAD83E25,41,192.168.2.10:30210,207.38.2.251:25,-,,Local

I also want to know how I can change so i dont have username@monkey.local but instead I want username@monkeysports.se

Thanks!

Hi

We have a big problem here!
A lot of messages are just deleted by the transport agent. I don't know why that happens. Message tracking just show me the following entries:

TrendMicro Scanmail has been installed on the server, and from that point I get these entries. So there must be a relation between, but I don't know what.

Any Suggestions?

Regards
Peter

Hey guys , 

 i have a doubt on how to create an secure connection between o365 and on-premises exchange 2013 server, i.e mails within my domain xyz.com (on cloud) to xyz.com (on prem) should be sent from o365 directly to my on prem exchange without opening port 25 on firewall.

pls help guys. I am new to o365 ,

Lui-A

Hi guys,

We have a very strange problem in our environment.

First let me explain our setup which have been working successfully for more that four years until last Sunday.

We have two servers running Exchange 2010 Enterprise. Both server are running The Hubtransport role, the CAS role and the mailbox role.

The servers are members of a DAG solution and both servers normally have active databases.

Last week we configured a new Certificate from GoDaddy. At first everything worked fine but I had trouble applying the certificate on one of the servers to the Hub transport role.

Last Sunday we noticed mails send from server a towards users hosted on Server B got stuck in the Queue.

After a lot of trouble shooting I created a ticket at MS. They helped me but it didn't went as smooth as we wanted.

I was really hoping they would tell me I just made a mistake which was easy to fix..

Unfortunately Microsoft told me yesterday they couldn't help me anymore and that I needed to perform an Inplace Updgrade which should fix the problem with the old Certificate.

This reminds me I forgot to mention something :), since I couldn't apply the new certificate to the transport role the old one was still used. Result TLS handshake mismatch..

After the disappointing message from Microsoft we worked during the evening to get stuff sorted out. I mean if people tell you, you can't fix stuff, you are kind of forced to proof them wrong...

If you have the same feeling this is your chance :) Any help is appreciated!!

Status at the moment:

We got rid of the old certificate; although MS told us this wasn't possible we still sorted it out.

Since our certificate from GoDaddy couldn’t hold the FQDN anymore we entered this in a Self Signed Cert. and assigned this to the SMTP service.

Right now queues are still pilling up the error message we get:

451 4.4.0 Primary target IP Address Responded with: "421 4.4.2 Connection Dropped due to SocketError."

I tried every single thing which I could found on the WWW to sort it out, I mean everything!

Mail sent from Server A still isn't delivered to people on Server B and the other way arround

I checked if there was a issue with the internal DNS, if there were problems to setup a SMTP session on port 25 between the two servers.

No problems to be found. Both Servers are showing StartTLS.

So basically I got stuck. if anyone of you guys had this at a certain moment and sorted it out, please share it with me.

Like mentioned your help is appreciated!

Hi,

Having attempted to resolve this issue in the Office 365 Forums (https://community.office365.com/en-us/f/156/t/407619), as it was after partially setting up an ADFS server (configured the Wizard to create the ADFS entry in AD, using my Exchange OWA Certificate - eg owa.domain.co.uk, rather than the desired STS.domain.co.uk) and then attempting to activate AD Synchronisation in the Office365 Portal, I noticed that my Outlook clients were prompting for AD credentials (which are no longer recognised). Also. I applied SP1 to my windows 2008 R2 DC's at the same time but I'm pretty sure this not related.

Anyway, the intersting thing is Outlook Anywhere works externally (if I connect a laptop via a 3G dongle) but not the LAN, although I did notice that Outllok 2013 did intermittently work on an internally connected laptop.

I have tried to retrace my steps (remove ADFS and then re-install with correct SSL cert - STS.domain.co.uk) and removed the old ADFS entries using ADSIEDIT (CN=<GUID>,CN=ADFS,CN=Microsoft,CN=Program Data,DC=<Domain>,DC=<COM>) but the Office 365team have suggested that I raise this with the Exchange experts.

Note, I did start to configure SSO 

• Connect to Microsoft Online Services with the credential variable set previously
  • Connect-MsolService –Credential $cred
    

 Set the MSOL ADFS Context server, to the ADFS server

• • Set-MsolADFSContext –Computer adfs_servername.domain_name.com
    

 BUT DID NOT RUN

• Convert the domain to a federated domain
  • Convert-MsolDomainToFederated –DomainName domain_name.comand even tried to disbale ADS

And even tried to disable the Federation

Set-MSOLDomainAuthentication-Authentication Managed -DomainName

John Philipson

Possibly made a bit of progress, regarding Outlook Anywhere Security Settings. Not sure whether this was thing that changed but all settings are now for "Anonymous Logon", rather than say "Negotiate Authentication". 

I have tried to change the Internal Settings with the following Powershell Command

Get-OutlookAnywhere -Server Exchange_CAS_Server| Set-OutlookAnywhere -InternalClientAuthenticationMethod NTLM

and when I checked,  with the following command, 

Get-OutlookAnyWhere – Server Exchange_CAS_Server | fl *internal*

the settings has changed to NTLM

but when I check Outlook clients, Autodiscover is still keeping the settings for  "Anonymous Logon"

I think there us a way of changing this in the registry but looks very involved

Am I right in saying that Office365 actually needs "Anonymous Logon" https://support.microsoft.com/en-gb/kb/2984912

Hi all,

I'm need help to understand the steps a mail goes through when an OOF rule is processed by the exchange as it seems to be acknowledging the incoming mails to have an automatic response but then dropping the response before it is sent.

I have a working exchange 2013 Std server. Mail works into and out of the organization. AutomaticReplies are enabled $True, AutoReply is enabled $True, AllowedOOFType is set to ExternalLegacy...however...when users enable their OOF automatic replies no response emails are being sent at all either internally nor externally.

Automated response rule processing by the exchange itself does seem to be triggered by the exchange but it is then dropping the mails and nothing gets sent. A message log track only ever shows two entries against a -Sender track on a mailbox when a user enables OOF. The EvendId on the process is only ever RECEIVE and there is never anything else like TRANSFER, SUBMIT or SEND.

We do however have 'dummy' mailboxes setup with outlook rules applied to them to send automated responses to people who email into a distribution list. This automated response rule processing on the mailbox side works 100%.

I've disabled the antivirus...why else would exchange not completely process or send an automatic reply message?

Thanks in advance,

Hi,

I manage two exchange servers in two separate domains \ forests. Domain A works great. Domain B sends and receives fine but OOF messages are not being delivered either internally nor externally.

I have confirmed OOF is correctly enabled on both servers.

[PS] C:\>Get-RemoteDomain | fl AllowedOOFType, AutoReplyEnabled, AutoForwardEnabled

AllowedOOFType     : ExternalLegacy
AutoReplyEnabled   : True
AutoForwardEnabled : True

When I run a MessgaeTrackingLog query on both servers specifically looking at a senders message log and isolating the message subject which is prefixed with"Automatic Reply:" the logs are vastly different.

The working server in Domain A has usually between 10 and 11 steps for processingmessages prefixed with "Automatic Reply" but the dysfunctional domain B only ever has 2 steps for messages prefixed with "Automatic Reply"!?!?

Below is the working Exchange server in Domain A - DomainA-EX01 log data...

Timestamp	    ClientHostname	                EventId	         Source	        TotalBytes   Sender	                   Recipients
2015/08/14 16:44		                        RECEIVE	         MAILBOXRULE	7096	          user@domainA.com	   abc@xyz.com
2015/08/14 16:44		                        HAREDIRECTFAIL   SMTP	        9000	          user@domainA.com	   abc@xyz.com
2015/08/14 16:44    DomainA-EX01.domain.local           RECEIVE	         SMTP	        9000	          user@domainA.com	   abc@xyz.com
2015/08/14 16:44		                        RECEIVE	         MAILBOXRULE	7112	          user@domainA.com	   abc@xyz.com
2015/08/14 16:44    DomainA-EX01	                DROP	         ROUTING	8996	          user@domainA.com	   abc@xyz.com
2015/08/14 16:44    DomainA-EX01	                AGENTINFO	 AGENT	        8996	          user@domainA.com	   abc@xyz.com
2015/08/14 16:44		                        HAREDIRECTFAIL   SMTP	        9016	          user@domainA.com	   abc@xyz.com
2015/08/14 16:44    DomainA-EX01.domain.local	        RECEIVE	         SMTP	        9016	          user@domainA.com	   abc@xyz.com
2015/08/14 16:44		                        TRANSFER	 ROUTING	8189	          user@domainA.com	   abc@xyz.com
2015/08/14 16:44    DomainA-EX01	                AGENTINFO	 AGENT	        11937	          user@domainA.com	   abc@xyz.com
2015/08/14 16:44    DomainA-EX01	                SEND	         SMTP	        8500	          user@domainA.com	   abc@xyz.com

Below is the server not sending OOF messages in Domain B - DomainB-EX01 log data...

Timestamp	    ClientHostname	        EventId	         Source	        TotalBytes   Sender	                Recipients
2015/08/14 13:26		                RECEIVE	         MAILBOXRULE	5042	          user@domainB.com qre@lfd.com
2015/08/14 13:26		                RECEIVE	         MAILBOXRULE	5054	          user@domainB.com qre@lfd.com

Note the vast difference is the EventId and Source transactions of log data. Can somebody please talk me through these steps and explain why they are missing on the dysfunctional exchange server?

Both servers also sit behind the same firewall and no MTA is working on the firewall \ proxy so I am ruling that out.

Thanks in advance...

durrie

Hello

I would like to setup a transport rule to block external email for a set of users. i.e. those users cannot send email externally.

I do not want those users to have to be a member of a distribution group (BlockExternalEmail for example)

What methods can i achieve an ad scoped membership for this transport rule without a distribution group.

Both mail-enabled security groups and distribution groups create a ... distribution list.

Thanks

Hi!
I have a problem where Out of office messages containing special characters gets replaced with a questionmark on the recieving end. Where to look for the reason? I guess there is some kind of encondingsetting I should look for?

I have also had reports on the same thing happening when a user sets up a inboxrule that forwards/redirects a incoming message.

Maybe this is the key?

https://technet.microsoft.com/en-us/library/aa997857(v=exchg.150).aspx

We have:

DomainName                           : *
ByteEncoderTypeFor7BitCharsets       : Undefined
CharacterSet                         : iso-8859-1
NonMimeCharacterSet                  : iso-8859-1
AllowedOOFType                       : ExternalLegacy
ContentType                          : MimeText

I've added an e-mail address to a mailbox on our exchange 2013 server. If users are on OWA, they can send to this alias with no issues. If the user is using Outlook 2010 or 2013 they get a bounce message saying the e-mail address couldn't be found. Both the sending user and the alias are in our domain, on the same Exchange server. 

I've updated the GAL and the OAB. I've also made sure to delete the auto fill entry in Outlook, then type the full address. Any thoughts or help is greatly appreciated.

Thanks,

Travis

Single multi-role server with a couple of mailboxes, recently added an Edge Transport server. After configuring the Edge Subscribtion I added sen.spamhaus.org as a RBL Provider:

Add-IPBlockListProvider -Name Spamhaus -LookupDomain zen.spamhaus.org

This is not working. A lot of spam is still entering Exchange and the http://www.crynwr.com/spam/ test failed.

Both servers run Exchange 2013 CU5.

Did my post help? Please use "Vote As Helpful", "Mark as answer" or "Propose as answer". Thank you!