Installing Exchange Server 2013 Preview

Microsoft has not released a final ship date for Exchange 2013, but a preview version is available as a free download for beta testing.

Following are some of the highlights of New Features in Exchange Server 2013:

  • Server roles are reduced to TWO (Client Access Server and Mailbox Server)
  • Exchange Management Console is discontinued; new web-based Exchange Admin Center and Exchange Management Shell (using PowerShell 3.0) replaces the old MMC-based Exchange Management Console.
  • New streamlined Outlook 2013 and Outlook Web App user interfaces, and offline access for OWA.
  • Public folders are stored in mailbox databases hence it can take advantage of Database Availability Groups for      replication and high availability.
  • Improvements to high availability features and manageability
  • Data loss prevention capabilities that can be integrated into Transport Rules

Getting Started with Exchange Server 2013 Preview (This is pre-release documentation and subject to change in future releases)

Note that this is only to have a look and feel of the product; it is not supported to run in production environments. Exchange Server 2013 Preview has no co-existence support with previous versions, which means you have to have a new domain setup in your test environment to install this Exchange Server 2013 Preview.

Read more of this post

Setup /PrepareAD fails during upgrading exchange 2003 to Exchange 2010 sp1

While migrating exchange 2003 server to exchange 2010, Active directory preparation part failed giving error after trying to modify the active directory.

Setup /PrepareLegacyExchangePermissions or setup /pl …….  COMPLETED successfully

Setup /PrepareSchema or setup /ps …. COMPLETED successfully

Setup /PrepareActiveDirectory or setup /prepareAD …. FAILED

“The following error was generated when “$error.Clear(); install-GlobalAddressLists -DomainController $RoleDomainController ” was run: “Active Directory operation failed on xxxAD.xxxx.com. The object ‘CN=Default Global Address List,CN=All Global Address Lists, CN=Address Lists Container,CN=xxxx, CN=Microsoft Exchange,CN=Services, CN=Configuration, DC=xxxx,DC=com’ already exists.”

While Googling the errors, all information pointed towards the access permission in “All Global Address Lists” container.

ran ADSIedit, Navigated to “All Global Address Lists” location through following steps

CN=All Global Address Lists,CN=Address Lists Container,CN=xxxx, CN=Microsoft Exchange, CN=Services, CN=Configuration, DC=xxxx,DC=com

Found a strange object “Default Global Address List” which was empty of any attributes. The only attribute could see was the Distinguished Name (DN) of  “Default Global Address List”.

Resolution:

Removed all the explicitly set permissions for Authenticated Users and Everyone group, which also removed any Deny permissions.

Rerun the setup.com /PrepareAD command switch and everything worked just fine this time.

Root Cause:

It was the Deny Read permission for the Authenticated Users and Everyone group that blocked the setup program from running the /PrepareAD.  The customer in his effort to hide the “Default Global Address List” probably made an administrator mistake and denied everyone the rights to read the “Default Global Address List”.

Downloading Exchange 2010 Offline Address Book fails

A security group does not have sufficient rights to an OAB folder.

After enabling Offline Address Book in exchange 2010, when you download OAB through outlook client, Outlook stays idle at “Offline address book connecting to Exchange server”

This is due to insufficient permission on OAB folder for required security groups. Following are the details of permission required in OAB folder.

Security group Permission requirement
Authenticated Users Read
Enterprise Admins Read
Domain Admins Read
Exchange Organization Administrators Read
Exchange Servers Full Control
Administrators Full Control

To modify folder permissions

 1. On the Client Access server, start Windows Explorer, and then locate the following folder:

%PROGRAMFILES%\Microsoft\Exchange\ClientAccess\OAB

2. In the right pane, right-click an OAB folder (represented by a GUID), and then click Properties.

3. Click the Security tab, and then modify the permissions as shown in the table that appears earlier in this topic.

4. When you have finished modifying the OAB folder permissions, click OK.

%d bloggers like this: