Homeslice - Just Like a Boss

 Exchange 2016 Transport Service Will Not Start The Trifecta of Exchange Woes You see events indicating that the self signed exchange certificate is missing.  No Mail is being delivered, SMTP is failed, message queue is backing up from your front end mail filter service, i.e. proofpoint or vipre service. and you see events showing that FIPS is not starting and certificates are not accepted Certificate Issue. See Step 2 FIP-FS scan engine issue. See Step 1 Best thing to do is to turn it off completely.  EventID 5300 has been the bane of our existence. Steps: 1. Disable Scan Engine in Powershellx64 Change the execution policy for PowerShell: Set-ExecutionPolicy -ExecutionPolicy RemoteSigned. Download the script:  https://aka.ms/ResetScanEngineVersion Use elevated Exchange Management Shell, run on every server. 2. In IIS look for "Exchange Back End", then SSL Settings, then Bindings, then make sure a valid certificate is assigned. 3. Finally, Start the "Microsoft Exchan...

 When you start seeing "Microsoft Exchange Server Auth Certificate" expirations https://www.zubairalexander.com/blog/dealing-with-a-missing-microsoft-exchange-server-auth-certificate-that-causes-federation-or-auth-certificate-not-found-warnings/ Sometimes you see this message when you use OWA or ECP. OWA Login Error "Something went wrong We can't get that information right now. Please try again later. X-FEServer: <server>" The above blog will resolve it. Powershell: Change the Current Configuation Domain Controllers This command below will show the current configuration Get-ExchangeServer -Identity "exmail" -status | fl the commands below will change the configuration Set-ExchangeServer -Identity "exmail" -StaticDomainControllers "VM-HIP-DC-BAK2.hippopool.com" Set-ExchangeServer -Identity "exmail" -StaticGlobalCatalogs "VM-HIP-DC-BAK2.hippopool.com" Set-ExchangeServer -Identity "exmail" -StaticCon...

Track Messages in Exchange 2016 Get-MessageTrackingLog [-Server <ServerIdentity>] [-ResultSize <Integer> | Unlimited] [-Start <DateTime>] [-End <DateTime>] [-EventId <EventId>] [-InternalMessageId <InternalMessageId>] [-MessageId <MessageId>] [-MessageSubject <Subject>] [-Recipients <RecipientAddress1,RecipientAddress2...>] [-Reference <Reference>] [-Sender <SenderAddress>] Get-MessageTrackingLog    [-DomainController <Fqdn>]    [-End <DateTime>]    [-EventId <String>]    [-InternalMessageId <String>]    [-MessageId <String>]    [-MessageSubject <String>]    [-Recipients <String[]>]    [-Reference <String>]    [-ResultSize <Unlimited>]    [-Sender <String>]    [-Server <ServerIdParameter>]    [-Start ...

The Windows Update Hall of Shame Occasionally, Windows updates can be really bad and really screw up your computers. Here's my list of the worst offenders.  These are only bad because they really screw up when Sophos Antivirus is installed.  Some of these are showstoppers for Microsoft Exchange. KB4493472 This update can really interfere with Sophos antivirus. See the related story.   https://community.sophos.com/products/endpoint-security-control/f/sophos-endpoint-software/112101/sav-service-hangs-after-installing-kb4493472   If you have Windows 7, or Windows Server 2008, expect real trouble if you allow this one. KB4499164 Once again, more issues caused by an update rollup. Causes Sophos Antivirus protected machines to hang and freeze.    It appears that once again there are conflicts with Sophos and the most recent (MAY) patch Tuesday from Microsoft.  www.theregister.co.uk/.../   "Its advice on what to do is pretty blunt: uninst...