All of the Best Exchange Server Fixes, including FIPFS service

 When you start seeing "Microsoft Exchange Server Auth Certificate" expirations

https://www.zubairalexander.com/blog/dealing-with-a-missing-microsoft-exchange-server-auth-certificate-that-causes-federation-or-auth-certificate-not-found-warnings/

Sometimes you see this message when you use OWA or ECP.

OWA Login Error "Something went wrong We can't get that information right now. Please try again later. X-FEServer: <server>"

The above blog will resolve it.

Powershell: Change the Current Configuation Domain Controllers

This command below will show the current configuration

Get-ExchangeServer -Identity "exmail" -status | fl

the commands below will change the configuration

Set-ExchangeServer -Identity "exmail" -StaticDomainControllers "VM-HIP-DC-BAK2.hippopool.com"

Set-ExchangeServer -Identity "exmail" -StaticGlobalCatalogs "VM-HIP-DC-BAK2.hippopool.com"

Set-ExchangeServer -Identity "exmail" -StaticConfigDomainController "VM-HIP-DC-BAK2.hippopool.com"

Enable or Disable The Content Filter

Disable or Enable it from the Exchange Management Shell

Set-ContentFilterConfig -Enabled $false

Set-ContentFilterConfig -Enabled $true

Check the status

Get-ContentFilterConfig | Format-List Enabled

When you disable content filtering, the underlying Content Filter agent is still enabled. To disable the Content Filter agent, run the command: 

Disable-TransportAgent "Content Filter Agent"

Disable Filtering

Set-MalwareFilteringServer exch-19 -BypassFiltering $true

Check Filtering Status

Get-MalwareFilteringServer

Update the Malware Filter Service After Jan 2 2022

See This link:

https://mspoweruser.com/microsoft-release-official-fix-for-fip-fs-scan-engine-failed-to-load-microsoft-exchange-issue/

Steps to Update the FIPFS Engine Manually:

Microsoft has also released a script at  https://aka.ms/ResetScanEngineVersion that automates the process and can be run in parallel over all your servers.

Remove existing engine and metadata

1. Stop the Microsoft Filtering Management service.  When prompted to also stop the Microsoft Exchange Transport service, click Yes.

2. Use Task Manager to ensure that updateservice.exe is not running.

3. Delete the following folder: %ProgramFiles%\Microsoft\Exchange Server\V15\FIP-FS\Data\Engines\amd64\Microsoft

4. Remove all files from the following folder: %ProgramFiles%\Microsoft\Exchange Server\V15\FIP-FS\Data\Engines\metadata

Update to latest engine

1. Start the Microsoft Filtering Management service and the Microsoft Exchange Transport service.

2. Open the Exchange Management Shell, navigate to the Scripts folder (%ProgramFiles%\Microsoft\Exchange Server\V15\Scripts), and run .\Update-MalwareFilteringServer.ps1 -Identity <server FQDN> -EngineUpdatePath "http://forefrontdl.microsoft.com/server/scanengineupdate"

3. Wait about 15 minutes for it to complete.

4. Check the Application Event Log, while filtering for event source FIPFS.  Event 6030 indicates a successful start, 6033 indicates final success

Verify engine update info

1. In the Exchange Management Shell, run Add-PSSnapin Microsoft.Forefront.Filtering.Management.Powershell.

2. Run Get-EngineUpdateInformation and verify the UpdateVersion information is 2112330001.

After updating the engine, Microsoft also recommend that you verify that mail flow is working and that FIPFS error events are not present in the Application event log.

Check It


Event Log

Exchange Migration Tricks

Add this management snap-in
Open the Exchange PS Consoole first

add-pssnapin Microsoft.Exchange.Management.PowerShell.E2010

Grant A User Access to Import and Export of Mailboxes

New-ManagementRoleAssignment –Role “Mailbox Import Export” –User “DOMAIN\USER”

Change The Network Location from Public to Private

See this link

Use
Get-NetConnectionProfile

Set-NetConnectionProfile -InterfaceIndex <IndexNumber> -NetworkCategory "Private"

Set-NetConnectionProfile -InterfaceIndex <IndexNumber> -NetworkCategory Domain





Comments

Post a Comment

Popular posts from this blog

Microsoft Visio 2010 Premium Product Keys

Image
Visio KMS client key from Microsoft You can use these with AutoKMS tool such as Office Toolkit 2.4.9 (office 2010/2013) which will re-arm them once every 180 days. So you are always in the grace period.  At the bottom of this page are keys for Visio 2019.  If you are here to figure out how to get a free copy of Visio activated on your computer, without paying Microsoft for it, then God or Allah will judge you later for your sins. Your soul will be sent to the underworld to be tormented by Satan for these sins. Please pay for your software! Visio Standard 2010 767HD-QGMWX-8QTDB-9G3R2-KHFGJ Visio Professional 2010 7MCW8-VRQVK-G677T-PDJCM-Q8TCP Visio Premium 2010 D9DWC-HPYVV-JGF4P-BTWQB-WX8BJ Keys from our Russian friends. you can only install with these keys, you cannot activate. ========================================================================= Visio Premium 2010: ========================================================================= C383V-HPHM...
Read more

Mercedes Benz Diesel CDI EGR Emulator Circuit Diagrams

Image
Mercedes EGR Emulator Circuits for Electric Wahler EGR on Diesel Engine For any car fitted with a MAF you can't just block the  EGR valve  as the MAF detects the reduced airflow when the valve operates. If it fails to report this reduction the ECU throws a code, turns on the MIL light and engages Limp Home mode. The  EGR valve  is operated in varying degrees whenever the engine is in cruise mode. A circuit has to be designed that reduces the MAF output voltage whenever the  EGR valve  is called to actuate. Having seen a mod on another forum I decided to give it a go and installed it last night. The circuit is really simple. The  EGR valve  transducer is fed with constant 12v which is proportionately shunted to Gnd to create the potential to activate the transducer, to engage the EGR solenoid and allow hot gasses into the intage via the  EGR valve  in varying degrees. The MAF is in the cold air intake. the EGR gasses enter furt...
Read more

Fix: The Diagnostic Service Host service failed to start due to the following error. [ solved, no kidding ]

Image
Lots of these Messages about the Diagnostic Service Host in the System Log On Windows 7/10 Machines Attached to A Domain The Diagnostic Service Host service failed to start due to the following error: A privilege that the service requires to function properly does not exist in the service account configuration. You may use the Services Microsoft Management Console (MMC) snap-in (services.msc) and the Local Security Settings MMC snap-in (secpol.msc) to view the service configuration and the account configuration.  The good news is that you can fix it using active directory group policy or the Local Security Policy and just adding a few things to the Local Policies.  Same fix applies to both Windows 7 and Windows 10.  To Fix this using any Policy, you must be running a Professional or Enterprise version of Windows. If you have Home Edition, sorry. Here's How to Fix It You see this in your system logs repeatedly, and its dragging down your computer and making it ...
Read more