This one's been a real pain for me recently. I have a DC, an exchange 2007 server and an ISA server. The ISA server hosts the exchange Edge Transport services and the exchange server is the Hub Transport.
Outbound mail is being processed fine but inbound mail is queueing up on the edge server. It will sit there for a random amount of time. Then all of a sudden a few will get delivered to the user's mailboxes. This happens constatntly and the users are complaing of delays receiving email.
Now - I had been seeing events suggesting that a certificate had expired. so i generated a new one using the exchange cmdlet - and subsequently wrecked something. So I performed the following, restarting the relevant services where appropriate:
- generated new cert (I received a warning that the cert was missing in AD but that it was now fixed)
- removed the edge subscription from the HT and the ET
- created a new edge subscription and used the xml file to create a new one on the HT
- started the edge synchronisation
But still the mail is queueing up at the edge server. I ran through the mailflow trouble shooter and get the following errors:
One or more inconsistencies were found with Active Directory Application Mode (ADAM) instance on server ISA-SERVER.domain.com. This is an indication that EdgeSync has not successfully replicated critical configuration information from Active Directory to this ADAM instance.
No EdgeSync credentials were found in Active Directory for Edge Transport server role computer %EDGECN%. This occurs when the tool is unable to retrieve one or more values for the 'msExchEdgeSyncCredential' attribute on the server object '%EDGEDN%' in Active Directory.
The test-edgesynchronisation returns a successful message
The necessary rules are in place in ISA
What have i missed?