Exchange - The Blog

By Mark Fugatt

June 2005 - Posts

Help Protect Your Messaging and Collaboration Servers from Viruses, Worms, and Spam

Sybari Software provides security products that help businesses protect their messaging and collaboration servers from viruses, worms, and spam.

http://www.microsoft.com/windowsserversystem/solutions/security/sybari.mspx

Posted: Jun 28 2005, 01:39 PM by Mark | with no comments
Filed under:
Updated: Messaging Hygiene at Microsoft

This document has now been updated:

http://www.microsoft.com/downloads/details.aspx?familyid=17dc35ad-8ba1-48b1-91f3-563313ee878a&displaylang=en

Posted: Jun 28 2005, 11:15 AM by Mark | with no comments
Filed under:
Forgot all about this

I had forgot all about this little site, it worth checking out and placing and order or two:

www.cafepress.com/ehlo

Posted: Jun 25 2005, 09:38 PM by Mark | with no comments
Filed under:
More information on ExBPA 2.1

Posted with permission from Paul Bowden.

We are pleased to announce the availability of the Exchange Server Best Practices Analyzer v2.1. The new version can be downloaded from here. Starting next week, for those running ExBPA v2.0, you will be prompted to upgrade to v2.1 the next time the tool is started.

List of enhancements included in ExBPA v2.1:

  • HBA Collection - ExBPA.MSI package now installs the WMI extensions required for querying Host Bus Adaptors through the HBA API. This allows ExBPA to automatically collect configuration and diagnostic information from HBAs such as Emulex, Qlogic and LSI. The extensions need to be installed on the Exchange server. Either install ExBPA or the FCInfo tool on the server to enable collection of HBA information. NOTE: Once the extensions are installed on the server, ExBPA will be able to collect the information even when running from a remote workstation.
  • Performance Baseline - In addition to the regular 'Health Check' scan, a new scan type of 'Health/Performance Check' can be run. This tells the BPA engine to sample key Exchange and Operating System performance counters and produce statistics showing the 90th percentile and maximum value. The list of counters is based upon the Exchange 2003 Performance Troubleshooting whitepaper. The performance statistics will be displayed in the "Baseline" report once the scan has completed. By default, 240 samples will be taken at 30 second intervals (i.e. 2 hour run). These defaults can be overridden with the following registry parameters:

Key: HKEY_CURRENT_USER\Software\Microsoft\Exchange\ExBPA

Value: PerfSamples

Type: DWORD

Data: The total number of samples to collect (default: 240)

Value: SampleInterval

Type: DWORD

Data: The time to wait between each sample (default: 30)

NOTES:

1. The time estimation in the UI is fixed at 2 hours, it does not take into account any registry overrides.

2. ExBPA uses a global 3-hour timeout for processing each Exchange server. If you wish to increase the sample time beyond 2.5 hours, a modification will be necessary to the ExBPA.Config.xml. (MaxTime="ALL,180;...").

3. The percentage complete values shown during scanning are based on object completions. As the sampling process is implemented as a single object, the server completion state will appear to 'stick' between 35 and 40% for the 2-hour sampling period. This is expected.

4. It is possible to sample multiple servers at the same time. However, you should keep the number of servers in scope to a minimum (e.g. less than 10)

5. Unlike the regular 'Health Check' it is important to run the new 'Health/Performance Check' when the Exchange server is at its busiest. As ExBPA uses the performance data helper (pdh) library to sample counters, the overheads on the server should be no greater than regular sampling with performance monitor (sysmon). To reduce overheads, it is recommended that you run ExBPA from a workstation rather than the server console.

6. In the initial ExBPA v2.1 release, Error and Warning rules have not been implemented for performance data. These will be introduced in a web update.

7. The sample data is stored as a comma-separated list embedded within the output XML. The ExBPA UI does not support the graphing of this data, or direct conversion to performance monitor log format. The overhead of collecting and storing the data is small. For example, scanning an organization containing a single Exchange 2003/Windows 2003 server:

         Health Check - 2,938 KB

        Health/Performance Check - 3,078 KB

  • Cluster Reporting - Reports such as the 'Full Issues List' separates physical nodes from the virtual server. The new format makes it easier to identify issues that need to be corrected on individual physical nodes.
  • Wildcard Collection - The BPA engine now supports wildcard collection from the registry. This enables a new set of rules, in particular exclusion settings for file-level antivirus products and Windows firewall configuration.
  • Latest Rules - Includes the latest Config XML file (rules database). Over 100 new rules have been introduced in v2.1 - see the list at the end of this e-mail. Specific areas of improvement include the recipient update service, third-party anti-virus checking, and debug settings. In addition to the new rules, over 30 existing rules have been reconditioned to provide better clarity.
  • Better Screen Layout - The size of the main report window is now based on the screen resolution rather than fixed at 800x600.
  • Scan Selection Information - When viewing the list of previous scans, the Config XML version used for the collection is now displayed in the details panel.
  • UDP Support - In addition to TCP, the new version of the tool can connect to ports using UDP. For example, new rules use this function to test the availability of WINS servers.
  • Checksum Operations - The BPA engine now supports the calculation of MD5 checksums. While the current rules database does not utilize this feature, it can be enabled in the future without updating the binaries.

Bug fixes:

  • Command-line parameters used with EXBPACMD are now case-insensitive.
  • For automatic updates, the tool now uses IE configuration settings if the default proxy server is not available.
  • Better handling of Date/Time formats.
  • Export functionality no longer deletes the original output XML file.
  • The language of the tool is no longer derived from the regional settings. Instead, the OS language is used.
  • Clearer instructions for when the scheduler can be used.

Other notes:

  • ExBPA v2.1 is available for U.S. English only. Other languages will be refreshed later on in the year.
  • In-place upgrades from ExBPA v2.0 to v2.1 are supported.
  • The build number for ExBPA v2.1 is 7599  (Displayed as 2.1.7599.0 in the ExBPA UI. Files on disk will be version 6.5.7599.0).

Please send any questions and feedback to exbpafb@microsoft.com. Thanks!

The Microsoft Exchange Operational Support Tools Team

List of new rules introduced in ExBPA v2.1:

 

More than 800 address lists are present

 

More than 800 global address lists are present

 

Intelligent Message Filter is not installed on one or more servers running Exchange Server 2003

 

MaxPageSize is set too high

 

Active Directory Connector software update is required

 

Exchange organization has zero recipient policies

 

Exchange organization has zero system policies

 

Everyone security group is not denied the right to create top-level public folders

 

Envelope journaling is enabled

 

Mailbox Enable User system policy change required

 

SMTP address is not defined in the default recipient policy

 

Message routing loop may exist

 

Search filter change required for recipient policy

 

Recipient Update Service software update required

 

Recipient Update Service is inactive

 

Recipient Update Service did not process all changes

 

Recipient Update Service appears to be stalled

 

Recipient Update Service is configured for full rebuild

 

Recipient Update Service full rebuild

 

Offline Address Book generation is set to update continuously

 

Replica of Offline Address Book version 3a not found

 

Replica of Offline Address Book version 2 not found

 

Cannot connect to the routing master on port 25

 

Cannot connect to the routing master on port 691

 

networkAddress attribute is not set correctly

 

RPC binding does not contain FQDN

 

Cluster debugging is enabled

 

Single global catalog present in topology

 

Active Directory round-trip response error

 

Server has less than four storage groups but more than four mailbox stores defined

 

Information Store service is configured to interact with desktop

 

Circular logging is disabled

 

Offline address book is not associated with mailbox store

 

Background Cleanup interval for a mailbox store is missing

 

Aging Keep Time interval for database is non-default

 

Default public store is remote

 

Maximum cached views has been modified

 

Maximum cached views is set too low

 

Maximum cached views is set too high

 

Message journaling is enabled

 

Background Cleanup for a mailbox store is non-default

 

Background Cleanup interval for a public folder store is missing

 

Background Cleanup for a public folder store is non-default

 

msExchAlternateServer attribute has been set

 

SMTP server accepts basic authentication

 

Anonymous access is enabled

 

External DNS server is used for SMTP

 

SMTP queue folder and pickup folder are identical

 

Intelligent Message Filter is not enabled on the server

 

Intelligent Message Filter is enabled on the mailbox server

 

Extended SMTP verbs are not available

 

System Attendant service is configured to interact with desktop

 

System Attendant service is not running as LocalSystem

 

Exchange Management service is not running as LocalSystem

 

Performance data from Epoxy Client Out Queue Length (DSAccess) counter

 

Performance data from Epoxy Client Out Queue Length (SMTP) counter

 

Performance data from Epoxy Store Out Queue Length (DSAccess) counter

 

Performance data from Epoxy Store Out Queue Length (SMTP) counter

 

Performance data from SMTP Local Queue Length counter

 

Performance data from SMTP Remote Queue Length counter

 

Performance data from SMTP Categorizer Queue Length counter

 

Performance data from RPC Operations/sec counter

 

Performance data from Virus Scan Queue Length counter

 

Performance data from RPC Requests counter

 

Performance data from RPC Averaged Latency counter

 

Performance data from Average Disk sec/Read counter of the LogicalDisk performance object

 

Performance data from Average Disk sec/Read counter of the PhysicalDisk performance object

 

Performance data from Average Disk sec/Write counter of the LogicalDisk performance object

 

Performance data for Average Disk sec/Write counter

 

Performance data for Log Record Stalls/sec counter

 

Performance data for Log Threads Waiting counter

 

Performance data for Available MBytes counter

 

Performance data for Pages/sec counter

 

Performance data for % Processor Time counter

 

Performance data for Bytes Total/sec counter

 

Performance data from LDAP Read Time counter

 

Performance data from LDAP Search Time counter

 

Update available for McAfee GroupShield 6.0 for Microsoft Exchange

 

Update available for Sybari Antigen 7.5 for Microsoft Exchange

 

Update available for Sybari Antigen 8.0 for Microsoft Exchange

 

Update available for McAfee GroupShield 5.2 for Microsoft Exchange

 

Messageware Plus Pack is installed

 

ASP.NET Rootver is damaged

 

Administrative file shares disabled

 

INO_FLPY.SYS version update available

 

INO_FLTR.SYS version update available

 

The version of the Tcpip.sys file installed on this computer may require a hotfix

 

URLScan is installed

 

Filter update for Intelligent Message Filter is available

 

Windows Server 2003 SP1: Outlook Web Access hotfix is required

 

MTA Stacks service is configured to interact with desktop

 

Exchange resident on domain controller that is not a global catalog server

 

Exchange Server 5.5 resident on Active Directory domain controller

 

Primary WINS server failed to respond

 

Network card checksum offloading is enabled

 

Network card teaming is enabled

 

SiteName is hard-coded

 

RestrictRemoteClients registry key is enabled

 

EnableAuthEpResolution registry key is enabled

 

Application log size

 

The TEMP/TMP variable appears to point to an invalid or inappropriate folder

 

NSI Software Double-Take is installed

 

Windows Management Instrumentation service is not running as LocalSystem

 

BCC journaling is enabled

 

TarpitTime has been implemented

 

ReloadOSInterval is non-default

 

Path for RPC proxy server extension is incorrect

 

DSAccess PreloadBaseDNs registry parameter is non-default

 

DSAccess PreloadFilters registry parameter is non-default

 

AssertOnEvent is set

 

BreakOnEvent is set

 

Debug Break At Startup is set

 

Store working directory is missing or incorrect

 

Posted: Jun 24 2005, 02:40 PM by Mark | with 1 comment(s)
Filed under:
ExBPA 2.1 Now Available

http://www.microsoft.com/downloads/details.aspx?familyid=dbab201f-4bee-4943-ac22-e2ddbd258df3&displaylang=en

More information can be found on Paul's blog, the Health/Performance Check feature looks really cool. 

Posted: Jun 24 2005, 12:11 PM by Mark | with no comments
Filed under:
Exchange Server Cookbook

Looks like a great book:

http://www.oreilly.com/catalog/exchangeckbk/index.html

Posted: Jun 23 2005, 11:13 AM by Mark | with no comments
Filed under:
Messaging Webcasts in July
TechNet Webcast: Accessing Exchange Server from Your Mobile Device (Level 300)
Tuesday, July 12, 2005 - 11:30 AM-1:00 PM Pacific Time
Paul Limont, Program Manager, Microsoft
Does your organization have all the mobile access it could in the areas of security, flexibility, and affordability? This webcast will discuss and demonstrate how Microsoft Exchange Server 2003 provides secure and affordable remote and mobile access to e-mail and personal information management software across a range of mobile devices. Come discover how to leverage the mobile capabilities of Exchange Server 2003 and the new mobility features available in SP2.
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032276821&Culture=en-US

Momentum Webcast: Fighting Spam the Microsoft Way (Level 100)
Thursday, July 21, 2005 - 11:00 AM - 12:00 PM Pacific Time
Microsoft Technical Experts, Microsoft Corporation
Sixty percent of all email hitting your network is spam. Last year alone businesses lost $22 billion due to dealing with unsolicited email. Left uncontrolled, spam severely impacts bandwidth on your network, storage space on your mail server, and support time of your information technology (IT) staff. This webcast discusses how Microsoft Office Professional Edition 2003 coupled with Microsoft Exchange Server can maximize the protection of your company's email while minimizing IT time spent maintaining your network. Join us to learn what you need to combat spam from one end of your network to the other.
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032276938&Culture=en-US

TechNet Webcast: Implementing Messaging Security for Exchange Server Clients (Level 200)
Monday, July 25, 2005 - 9:00 AM - 10:30 AM Pacific Time
Kai Axford, Security Specialist, Microsoft Corporation
To ensure that messages can be read only by the intended recipients, it is as important to provide security for the clients of Microsoft Exchange Server 2003 as it is to secure the server itself. Join this webcast to learn about solutions such as using Secure/Multipurpose Internet Mail Extension and Information Rights Management to protect e-mail content. We will also discuss remote procedure call over HTTP to help secure client connections to Exchange Server 2003 via the Internet. The presentation concludes with a discussion about how to control access to e-mail attachments and how to manage and secure Microsoft Office Outlook Web Access.
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032276836&Culture=en-US
Posted: Jun 22 2005, 03:48 PM by Mark | with no comments
Filed under:
Configuring Exchange SMTP Gateways at Microsoft

Description of how Microsoft IT custom configures its SMTP servers to make its mail flow more securely and manageably.

http://www.microsoft.com/downloads/details.aspx?familyid=85dc356f-301b-4e61-b239-870047251997&displaylang=en

Posted: Jun 22 2005, 03:40 PM by Mark | with no comments
Filed under:
Troubleshooting IMF

Paul Flaherty has produced a BlogCast on troubleshooting IMF, well worth checking out:

http://blog.flaphead.dns2go.com/archive/2005/06/17/2780.aspx

Posted: Jun 17 2005, 11:25 AM by Mark | with no comments
Filed under:
See the new SP2 Mobile Features in Action

This was posted on the Exchange teams Blog:

http://blogs.technet.com/exchange/archive/2005/06/08/406104.aspx

Posted: Jun 11 2005, 11:11 PM by Mark | with no comments
Filed under:
Fibre Channel Information Tool

Works on Microsoft Windows Server 2003 and Microsoft Windows 2000 systems
Tool for discovery of SAN resources and configuration information on your Fibre Channel SAN

http://www.microsoft.com/downloads/details.aspx?FamilyID=73d7b879-55b2-4629-8734-b0698096d3b1&DisplayLang=en

Posted: Jun 06 2005, 09:43 PM by Mark | with no comments
Filed under:
New features in Exchange Server 2003 with Service Pack 2 deliver complete mobile messaging solution.
http://www.microsoft.com/presspass/press/2005/Jun05/06-06SFPWindowsMobilePR.mspx
Posted: Jun 06 2005, 03:07 PM by Mark | with no comments
Filed under:
Exchange 2003 SP2 is coming :-)

Get a sneak preview of the new features and improvements coming in Service Pack 2 (SP2), scheduled for release in the second half of 2005. SP2 builds on the capabilities of Exchange Server 2003 to offer you even better protection, reliability, easier administration, as well as improved mobile messaging when used in combination with the Microsoft Windows Mobile 5.0 Messaging and Security Feature Pack.

http://www.microsoft.com/exchange/downloads/2003/sp2/overview.mspx

Microsoft TechEd - Amsterdam July 5th - July 8th

I'll be there, I am scheduled to be at TechEd in Amsterdam, I will be working in the Ask-The-Experts sessions and on the Supportability Panel.

Ask the Experts

Microsoft experts specializing in all 12 tracks at Tech·Ed 2005 Europe will be available to answer your technical questions at the Microsoft Pavilion. Ask product questions relating to your current work projects, follow up on points raised in sessions, and meet face-to-face with speakers, Microsoft consultants, Microsoft technical support service engineers, product managers, Microsoft Certified Trainers (MCTs) and Microsoft Most Valuable Professionals (MVPs).

http://www.mseventseurope.com/teched/05/pre/content/default.aspx

Posted: Jun 03 2005, 11:24 AM by Mark | with no comments
Filed under:
Do you have an SLA for Exchange?

Chris Harris the PM for the MOM Exchange Management pack is looking for feedback/info, this is your chance to help shape the future of the Exchange Management Pack.

This is the post that Chris made:


I'm the PM that owns the Exchange Management Pack at Microsoft. I'm working
on the reports for our next major release and I need your help.

I want to make it easier for you to report on service/server availability
and to measure your compliance with Service Level Agreements.

Please tell me how your orgainization measures availability or defines
Service Level Agreements (SLA) for Exchange. Or, perhaps more importantly,
how you would like to measure or define them.

Examples:
* Outlook clients must be able to successfully connect to the server 99.5%
of the time during normal business hours.
* The Exchange databases must be mounted 99.9% of the time


Please provide the following:
1. Current SLA and availability definitions
2. How do you measure it today?
3. Preferred SLA and availability definitions
4. How would you like to measure it?

To make it worth your effort, I've got a number of different software
packages sitting in my office, and for the best idea I'll let you take your
pick.

If you

Thanks,
Chris Harris


Posted: Jun 03 2005, 10:52 AM by Mark | with no comments
Filed under:
Multi-site Data Replication for Exchange Server 2003

The Exchange Product Group has received numerous queries regarding deploying Exchange in a Multi-site/data replication environment. In order to respond to those queries, we have published a whitepaper on deployment guidelines and a Knowledge Base article outlining support policies.

Deployment Guidelines for Exchange Server Multi-Site Data Replication

Multi-site data replication support for Exchange 2003 and Exchange 2000

Posted: Jun 03 2005, 07:43 AM by Mark | with no comments
Filed under:
Adding Query-Based Distributions Groups to a static Distribution Group

So, I am working with my client and they want to add a Query-Based Distribution Group to a static Distribution Group, so the first place I go is into the properties of the static group and then select the Members tab, well I was wrong, if you do this the Query-Based Distribution Group does not appear, what you need to do is right-click over the static Distribution Group and then select "Add Exchange Query-Based Distribution Group".

Posted: Jun 01 2005, 12:30 PM by Mark | with no comments
Filed under: