Link to home
Start Free TrialLog in
Avatar of Wajeehk
Wajeehk

asked on

RUS Exchange 2003 not stamping email address after Exchange 2003 migrated to new hardware

Dear Experts,

I have Win 2000 DC and with E2k3 on same server, no other DC no other exchange 2k3. Our plan to move now to Exchange 2010 and Win 2008 R2 DC on two seperate servers.

For all this the first step is to move E2k3 to new server temporarily so that I can do required schema changes on Win 2000, so I moved the E2k3 to new server with Win 2003 on it, it is a virtual machine, and this is for temporary period since we have plan for 2010.

Since I moved the E2k3 every thing on new virtual server working OK and I turned off exchange services on my old E2k3 which is also Win 2000 DC in our office. Then I encountered problem when I create a new AD user it is not getting email address. As soon as I moved RUS from new E2k3 to old email address got created immediately for that user. I followed different trouble shooting steps given on technet which talk about event id 8011 with usnChanged values ranges but I could not find any event 8011 which is searching with UsnChanged values.

but there are other many 8011 and 8012 events in new E2k3 machine. so far no luck, any ideas ?

Thanks because I need to un-install E2k3 from old server to move ahead and do schema changes for making it ready to allow me to install Win 2008 as member server.

thanks,
Avatar of Wajeehk
Wajeehk

ASKER

Dear Experts!

No, Response from any one till now!!!!
Avatar of Manpreet SIngh Khatra
Go to properties of the "Domain RUS" and check its pointing to old Server and DC possibly so when you shut them down it stopes processing

- Rancy
Avatar of Wajeehk

ASKER

Yes, it is pointing to old server for a Windows DC and for mail server it is now pointing to new server which I build on Win 2003 and E2k3

I only turned off exchange 2003 services on my old server which is also Win DC and I did not turned off the server itself.

any ideas ?
The new Server is a DC as well so why not simply point it to the new server ?

- Rancy
Avatar of Wajeehk

ASKER

No, the new server is not a DC, it is only a member server on which exchange is moved just, so for DC it has to point to old server
Ohk do this once you stop Exchange services on the old server and rus isnt working run EXBPA and check what issues it reports

Hope both Domain and Enterprise RUS are taken care of :)

- Rancy
If RUS isn't working on the new one - there are few reasons to it.

1) MSExchangeSA is stalled - you'd see this error in ExBPA - restart of this service solves it.
2) There are corrupted entries in RUS, which would cause issues - again ExBPA would tell you of it.
3) New Exchange 2003, is having issues talking to Domain Controllers.

Run the ExBPA, check errors in application logs - both are good place to start troubleshooting.

Regards,
Exchange_Geek
Avatar of Wajeehk

ASKER

Dear Exchange_Geek,

Thankyou for your reply to my email, From last 3 days I am unable to solve this problem and it is delaying my task next steps,

The Exchange services on old server is now off which is also a DC, and I ran health check report on new one with ExBPA and attached here the informational ITEMS report and All issues report:

If you please take a look for this problem.

now if in present situation I create any user in AD his email will not be stamped and as soon as I turn on services on old exchange server and just point old exchange in RUS , email address is stamped, rest all things running from new email server, all email boxes, GAL etc.

Incase I am missing anything here relating to this issue, please tell me , I will generate more information for that.
Many thanks in advance, uptil now no one pointed about that new E2k3 is having known issues contacting DC
Info-items-ExBPA.201304051132103.htm
ExBPA.201304051132103477.data.htm
Avatar of Wajeehk

ASKER

Exchange_Geek!

this is an event type is 'error' event id 8207, says 'error updating public folder with free-busy information on virtual machine mailserver1, error number is 0x8004010f

Do you think it has any relation with RUS ?

waiting for your response.

Thanks
Not at all, do you mind sharing screenshot of your domain and enterprise RUS?

Regards,
Exchange_Geek
Do run EXBPA once you shutdown the old server as then it will tell whats wrong

- Rancy
Avatar of Wajeehk

ASKER

Screen Shot for my Domain what screen shot you need actually and also for RUS tell me, and I will send it to you now. Just direct me what type of screenshot you are looking for

Do you think re-building the RUS on new server will help ?
Nopes ... no rebuild please

I would have stop the old server ... create user and if still not stamped run EXBPA at that time to check for errors

- Rancy
Avatar of Wajeehk

ASKER

Dear Rancy,

I have attached ExbPA results here in one above post. I have also mentioned the situation that the exchange services on old server are off when I run this exbpa health test. The old server is not powered off because it is a DC also, so jus exchange services turned off on it.

Can you see those attachments I have attached here ?
Mailserver1 is the new server ?
Havent you selected both servers when running EXBPA ?

- Rancy
Avatar of Wajeehk

ASKER

No, Only new server is selected which is mailserver1, since services were turned off on old one so I did not select it, do you need both to be selected and attach output again here ?
Yes everything as we know it will report services down so be it but lets take a complete dump and in this i dont see anything so concerned .....

- Rancy
Avatar of Wajeehk

ASKER

Here it is both servers the one with off services, let me know if additional details needed

thanks
AllIssues-BothServers.htm
Information-BothServers.htm
Critical-both-Servers.htm
None-defaultSettings-BothSvrs.htm
Organization: sejeltech
Warning       Recipient Update Service appears to be stalled       Organization: sejeltech
      Recipient Update Service 'Recipient Update Service (Enterprise Configuration)' has not run for 45 hours. If new entries are not being processed then the service may have stalled. A manual restart of the Microsoft Exchange System Attendant service on server MAILSERVER1 might be necessary.
      arrow Tell me more about this issue and how to resolve it.
Warning       Recipient Update Service appears to be stalled       Organization: sejeltech
      Recipient Update Service 'Recipient Update Service (SEJELTECH)' has not run for 45 hours. If new entries are not being processed then the service may have stalled. A manual restart of the Microsoft Exchange System Attendant service on server MAILSERVER1 might be necessary.
      arrow Tell me more about this issue and how to resolve it.
Recipient Update Service appears to be stalled
http://technet.microsoft.com/en-us/library/ecc985e4-7542-419f-9940-a7d20342917e.aspx

Mailbox Store Database size limit has been set
http://technet.microsoft.com/en-us/library/993cf37f-0c5f-40a0-95f7-3f90a12d91f5.aspx

Non-default       Database size limit       Server: MAILSERVER1
      The maximum database size for mailbox store 'Mailbox Store (MAILSERVER1)' on server MAILSERVER1 is set to 117 GB.
      arrow Tell me more about this setting

Is MAILSERVER1 .... Exchange Standard version ??

- Rancy
Avatar of Wajeehk

ASKER

Yes, it is standard edition with SP2, installed

So, I now manually re-start the System Attendant service now ?
Standard version is limited to 75GB just for your information so better plan for next version

- Rancy
Avatar of Wajeehk

ASKER

Yes, this is in plan we already have 2010 license, since 2010 setup requires minimum domian functional level to be 2003 and no Win 2000 DC in the network, so to retire our Win 2000 DC it was needed to move it to another server temporary, then I can un-install exchange from it and run adprep/domainprep , adprep/forestprep on Win 2000, proceed with Win 2008 R2 DC, change the forest and domain functional level and dcpromo the win 2000 from the network.

So I change the DB limit to 75 now  ?
Also go ahead and re-start the system attendant now on mailserver1?
No sir leave and just plan for next move as if you change to 75 Database will be dismounted everyday once Online maintenance completes ....

Restart the service after production hours as it will impact users connection to mailbox and also dismount database so plan after backup is completed :)

- Rancy
Avatar of Wajeehk

ASKER

We are off today, it is weekly holiday here, so I can do that 're-start of service' but DB I will leave as it is for now.

Will feed you back after that, if it stamp email for the new users which are in in AD with no email ID's still
Avatar of Wajeehk

ASKER

Dear Rancy,

I just created another user, but his email address not created, I re-started the Exchange system Attendant service, Ran ExBPA again, but it show same message RUS is stalled

Any advise
How many accounts do we have ?
Look one way could be to restart server max or check thing as per that article if not we can try new RUS but it will run through all accounts and will take time :( (more like a rebuild of RUS)

- Rancy
When you right click on RUS - you get an option called update now. Hit that button.

Wait for few minutes and then recheck the email addresses. Create a new account if you'd wish.

Regards,
Exchange_Geek
Avatar of Wajeehk

ASKER

We have 80 accounts. So what you advise rebuild? During rebuild and after it is finished, all accounts whch are working will continue to work or they will also be in trouble? I don't want to make problem with any existing emaip addresses. The existing addresses will remain as it is?
Please advise.....Thanks.....
I would say yes if that doesnt help i would simply create a New Domain RUS with the new server and enjoi life ....  RUS will check each account and verify them with Recipient policy and Stamp them (If changes yes might happen cant negate that)

If you want take a completed environment dump
csvde -f "C:\Dump-6April.csv" (Some location and file to CSV)

- Rancy
Avatar of Wajeehk

ASKER

I have tried update now and till now nothing updated for new user email addresses.

What is the procedure for re-build , right click and re-build, around how much time we are talking about ? the emails will keep flowing during that period ?
Avatar of Wajeehk

ASKER

I clicked update now for RUS for both enterprise configuration & the second one also about half n hour before, till now no email address stamped for new users.

I ran ExBPA now , it is not showing any issue for RUS appears to be stalled for MailServer1
Avatar of Wajeehk

ASKER

Re-build operation I need to do for both RUS at the same time Or Only for RUS (with our domain name)
Rebuild should just be for Domain RUS (80 Objects in total ..... it will check all stuff "PublicFolders\Contacts\Mailbox\DL\etc etc") ..... its weekend so yes should complete within few hours can exactly say

- Rancy
Avatar of Wajeehk

ASKER

Dear Rancy,

Uptil now in morning, I am having events in event viewer 8329 'the recipient update service is starting rebuild of DC=sejeltech, DC=com

I started this at night, this event 8329 is repeated many times, I have read in article

http://support.microsoft.com/kb/822794

event id 8330 will be there , saying 'rebuild is complete', I don't see any such till now, and Yes , I do a rebuild for Domain RUS only

So, I wait or there is something I can check ?
Avatar of Wajeehk

ASKER

Also I don't see any

Event ID 8332

Event Type:      Information
Event Source:      MSExchangeAL

Event Category:      Address List Synchronization
Event ID:      8332
Date:       Date
Time:       Time
User:       N/A
Computer:      ServerName
Description: The Recipient Update Service has started to export a block of entries from DC=contoso,DC=com, beginning at USN 1. It will finish processing the directory when it reaches USN 298599

which show that rebuild still running....
Avatar of Wajeehk

ASKER

I checked just now also 'MSExchDoFUllReplication' boolean value, it is set to 'false'

Click Start, click Run, type adsiedit.msc, and then click OK.
Expand Configuration Container [DomainController.sejeltech.com],
expand CN=Configuration,DC=sejeltech,DC=com,
expand CN=Services, expand CN=Microsoft Exchange, and then
expand CN=sejeltech
Expand CN=Address Lists Container, and then click CN=Recipient Update Services.

here I found this value to set as 'false'
What's the current update? has it progressed?

Regards,
Exchange_Geek
Avatar of Wajeehk

ASKER

Status Update for now:
Event Viewer showing repeatedly logs:
Event ID 8329 'the recipient update service is starting rebuild of DC=sejeltech, DC=com

along with this

event ID's 8259 'Stopped replication for address list recepient update service enterprise config'

same event ID 8259 ' Stopped replication for address list recepient update service (Sejeltech)'

No development.....
Avatar of Wajeehk

ASKER

No event ID's 8332 logged which according to articles show that progress is going on in rebuild,

it seems to me it is in loop, but need expert opinion before taking step
Thanks,
On which counters are your diagnostic logging increased?

Regards,
Exchange_Geek
Avatar of Wajeehk

ASKER

msExchangeAL > Address Link Syncronization is set to medium, rest all I make none
Avatar of Wajeehk

ASKER

Now, when I run ExBPA on mailserver1 which is new server, I don't see RUS seems to be stalled error under 'all issues'
This is when running for health check!
read the article: http://support.microsoft.com/kb/822794

and under diagnostic logging you'd need to change three counters to maximum.

Regards,
Exchange_Geek
Avatar of Wajeehk

ASKER

I have set it to maximum now,

according to articles , now I should have event as below with 'Base DC' and UsnChanged values also, but I could not find one.
Event ID: 8011
Description: Base DC

There should be some 8011 with such picture, but I was not having thats why I found that my RUS is not looking for new objects and hence all this post. Now again I set it to maximum.

you need me to send some information now after enabling logging to max for those three items
image0021144847614109.jpg
Can you check and see if your users have Exchange attributes such as email addresses or mailbox store name.

Regards,
Exchange_Geek
Avatar of Wajeehk

ASKER

Yes, the working users have email addresses and mailbox store name.

For newly created users it asks where to create emailbox, where already the server name and mailboxstore name is given, then I just say 'finish' to complete it.
Perfect, so refresh your console once and let us know if the accounts has email addresses stamped.

Also, please go to ESM and take screenshot of properties of Recipient Update Service (Domain) under ESM - Recipient Update Service

User generated image
RUS properties

User generated image
Regards,
Exchange_Geek
I would say try creating a new account and check

- Rancy
Avatar of Wajeehk

ASKER

Dear Experts,

now I created new user, and I was waiting for 5 min for email address stamping, I closed ADUC and re-open again, no result,

Screen shots attached as requested,

Any thing you require from event viewer?
Domain-RUS.JPG
Enterprise-RUS.JPG
New-USer.JPG
Avatar of Wajeehk

ASKER

Do you think it has to do something with permissions etc for new mailserver so that it can do query AD new objects ?

How to make sure rebuild was successful because no 8332 OR 8330 was logged in to event viewer .....
Here is my suggestion - start Exchange services on your old server MailServer and keep a close eye on your event viewer and check if users are getting stamped.

Regards,
Exchange_Geek
Would be Okay if Rancy and I take a remote session, if approved by MODs (chances are slim, but we could ask for it)?

Of course we are liable to document all the troubleshooting here so that other people can learn and resolve their issue by reading this thread.

Are you okay with it?

Regards,
Exchange_Geek
Avatar of Wajeehk

ASKER

Yes, we can consider remote session for this also,

So I will now start the exchange services on my old exchange (mailserver) which is a DC also with Win 2000

The thing I want to ask here I should point in RUS to old mailserver ? or keep RUS pointing to (mailserver1) for checking of email stamp

thanks for all your efforts for this case
Let RUS be pointing and be as they are no more changes ...

- Rancy
Agreed, do not make any changes at the moment.

Regards,
Exchange_Geek
Avatar of Wajeehk

ASKER

So,

I turned on the services now on old server, and RUS still as it is pointing to new 'Mailserver1'
Fair enough, so restart System Attendant on MAILSERVER1 and let us know if there are any effects in event viewer AND on your new users.

Regards,
Exchange_Geek
Avatar of Wajeehk

ASKER

on the old server, I have also increased the logging for , it is now maximum:

- Address List Sync
- Proxy Generation
- Ldap Operations

OK, I will re-start the system attendant service on 'Mailserver1' and feed you back with results, I just need half hour for that because office time will be over then, I can do that easily
Not an issue.

Regards,
Exchange_Geek
Guys want to shed some more light on this issue .... as we know RUS doesnt not just stamp email but does all Address list and other stuff ..

have we followed some article and moved roles features to new server ??

- Rancy
Migrating Address List across E2003 servers? May be I'm getting it wrong - share some articles for it please - OR you're talking about OABs is it? That to me comes once RUS issue gets solved.

Regards,
Exchange_Geek
Avatar of Wajeehk

ASKER

I followed this guide to change the required things from old to new server (Mailserver1)


http://www.msexchange.org/articles-tutorials/exchange-server-2003/migration-deployment/Removing-First-Exchange-2003-Server-Part1.html


ONLY schedule+FreeBusy, folder under it Ex:/o=sejeltech/ou=First Administrative Group did not appear to my new server

Rest all things moved. But even if the services of old exchange is off, calenders are available for users which are shared among them, Our all outlook clients are 2007 and 2010

Thanks,
Avatar of Wajeehk

ASKER

This is the folder I am referring to, see picture, schedule+FreeBusy
Schedule-Busy.jpg
Avatar of Wajeehk

ASKER

So, now I restarted the System Attendant service on Mailserver1

Created a new user no email address, for already created new user before re-start of system attendant service, also no email generated
Events shows anything? Also, earlier would you have email address stamped immediately?

Regards,
Exchange_Geek
Avatar of Wajeehk

ASKER

Just checked again, no email address given yet. Yes, before addresses were stamped immediately.

Event shows
ID 8329, The recipient update service is starting a rebuild of DC=sejeltech,DC=com
ID 8258, Starting replication of Address List 'Recipient Update service (Sejeltech)'
ID 8259, Stopped replication of Address List 'Recipient update service (Sejeltech)
ID 8259, Stopped replication of Address List 'Recipient update service Enterprise configuration

Also attached 8011, there is also 8012 in logs
Event-8011.JPG
So, RUS rebuild now restarted after the services of MAILSERVER were started - Right

Regards,
Exchange_Geek
Avatar of Wajeehk

ASKER

As far as I remember, when last night I started the rebuild operation and when in morning I checked in office at 9:00am

then again I checked at 12:00 and I posted a reply to you here where you asked, "has it progressed"

I replied:
-----------------------------------
Status Update for now:
Event Viewer showing repeatedly logs:
Event ID 8329 'the recipient update service is starting rebuild of DC=sejeltech, DC=com

along with this

event ID's 8259 'Stopped replication for address list recepient update service enterprise config'

same event ID 8259 ' Stopped replication for address list recepient update service (Sejeltech)'
----------------------------------------

so it was also doing same at that time 'starting rebuild', at that time the services were off on old server
Avatar of Wajeehk

ASKER

But if you want to observe something now, I can wait for that, if you think that rebuild is again triggered, But I remember all the morning time in office it was doing same
Could you download the client version of join.me, Rancy and I would like to remote into your system and troubleshoot.

Regards,
Exchange_Geek
Avatar of Wajeehk

ASKER

Dear EE Admin,

Yes, the participants were telling me that they will document here what ever they find to fix the problem
Avatar of Wajeehk

ASKER

But I am not at office presently, some time tomorrow is it possible ?

I can download it on my PC, and you can connect to my PC and from there, I have two remote sessions to both new server and old server, using a utility 'RAdmin' which we use internally in our office for remote connections to servers and also to some user PC's
This will be OK with you to connect to my PC and check the remote sessions already open in my PC

Also I will bring to knowledge of my department head for this remote access, just for his knowledge
So, what time is suitable for you people ?
Avatar of Wajeehk

ASKER

Where are you guys located, just to have time difference, we are in KSA and its 10:45pm here night
yeah you could share from your PC now, not an issue with us.

Regards,
Exchange_Geek
We're in India and its 1-15AM :)

Regards,
Exchange_Geek
Avatar of Wajeehk

ASKER

Okay, good, I will inform my manager for this session,

will post to you once I am ready, but for time how you do that ?
Avatar of Wajeehk

ASKER

right so you guys ahead from us 2.5 hrs, so it is good, we can do it tomorrow, I will post here , and I will download this utility in morning.

I hope for some result tomorrow

thanks for all efforts
Well, normally join.me is an easy way to remote into computers - it's free and all you need to do is provide the code of it. It's made by the same guys who have made LogMeIN.

Regards,
Exchange_Geek
Avatar of Wajeehk

ASKER

Yes,

Right , i know about logme in and used it before also, I checked it now, this website of join me is having logo for Logmein.

I will take approval of my manager and come back to you guys again tomorrow with update on this

Regards,
No problem.

Regards,
Exchange_Geek
Avatar of Wajeehk

ASKER

Guys,

Giving the control to you remotely is difficult at the moment, what can be done is that I share my screen to you using JoinMe and on chat session you instruct me while you are viewing my screen and I perform steps needed for trouble shooting
Provide the join.me ID to us, we'll jump in.

Regards,
Exchange_Geek
Avatar of Wajeehk

ASKER

OK! give me some time like 1 hr, I will post here once ready
Avatar of Wajeehk

ASKER

Okay, I am available now, here is the code for connection:
484-084-967
Here is the 4-hour long story short.

We have a setup of server1 which is also a DC and sever2 that is a member server
server1 can stamp users immediately, whereas server2 cannot.

we checked security tab in ADSIEDIT of both servers by going down to
Configuration partitiion - Services - Microsoft Exchange - Org Name - Admin Group - First Admin Group - Servers  
Found permission wise all good.

we checked at RUS properties in ADSIEDIT for domain and enterprise for any instance of gatewayproxy attribute being populated with garbled attributes, didn't find this mess.
RUS was to be found in ADSIEDIT under
Configuration partitiion - Services - Microsoft Exchange - Org Name - Address list container - Recipient Update Service

we moved RUS from pointing to server1 to server2 from Exchange system Manager.
Open ESM - Expand Organization - Recipients - Recipient Update Service - Domain RUS - properties - browse for Exchange Server

Once done, diagnostic logging was increased on server2 -
Open ESM - Expand Organization - Administration Group - First AGroup - Servers - Server1 properties - diagnostic logging to maximum
Service      Category
MSExchangeAL      LDAP Operations
MSExchangeAL      Address List Synchronization
MSExchangeSA      Proxy Generation (Exchange 2003 only)

Restarted MSExchangeSA on server2.

Found MSExchangeSA showing events depicting ABV_DG.dll and DSAccess.dll loaded.

Checked the versions of both files on server1 and server2 from C:\Program Files\Exchsrvr\Bin folder and found no version mis-match.

Ran ExBPA and found few warnings, but not related to RUS

Checked chimney, found it disabled.

Checked events that were appearing in logs, found all correct except two important events were not appearing when RUS was pointing to server2 (faulty server)

Event Type:      Information
Event Source:      MSExchangeAL
Event Category:      LDAP Operations
Event ID:      8011
Date:       Date
Time:       Time
User:       N/A
Computer:      ServerName
Description:
Searching directory ServerName.contoso.com at base 'DC=contoso,DC=com' using filter '(&(USNChanged>=273870)(uSNChanged<=298312)((objectclass=*)))' and requesting attributes distinguishedName; objectGUID; LegacyExchangeDN; msExchADCGlobalNames; ObjectSID; ObjectClass; objectCategory;

Event Type:      Information
Event Source:      MSExchangeAL
Event Category:      Address List Synchronization
Event ID:      8129
Date:       Date
Time:       Time
User:       N/A
Computer:      ServerName
Description: Evaluating directory object 'CN=UserName,CN=Users,DC=contoso,DC=com' against address list 'CN=All Users,CN=All Address Lists,CN=Address Lists Container,CN=Microsoft,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=contoso,DC=com' rule '(& (mailnickname=*) (| (&(objectCategory=person)(objectClass=user)(!(homeMDB=*))(!(msExchHomeServerName=*)))(&(objectCategory=person)(objectClass=user)(|(homeMDB=*)(msExchHomeServerName=*))) ))'. DC=contoso,DC=com.

So, this made us believe that DC isn't supplying information to Exchange.

Checked Manage and Security Audit logs and found Exchange Enterprise Group present
This was checked on DC:server1: Default Domain Controller Policy | Configuration | Windows Settings | Security Settings | Local Policies | User Rights Assignment

Ran setup.exe /domainprep from Exchange CD on server2 (faulty server)

Checked events 2080 found SACL rights for server1 on server2.

Moved RUS back to server1 from server2 and found user stamped immediately.

At this point, we stopped cause we ran out of options.

Issue status: Stands unsolved.

Regards,
Exchange_Geek
Avatar of Wajeehk

ASKER

Guys do you think any exchange update can fix this issue of RUS?

Now, since I decreased the logging for
- Address List Sync
- Proxy Generation
- Ldap Operations

I can see event 3113 in event viewer

=======================================
There was a problem retrieving the list of public message databases (MDBs) associated with the TLH with GUID "0F6FC9C1-7C30-4E6F-B16B-32B8083D0839". The entry "/DC=local/DC=hps/CN=Configuration/CN=Services/CN=Microsoft Exchange/CN=HPS/CN=Administrative Groups/CN=First Administrative Group/CN=Servers/CN=HPSS02/CN=InformationStore/CN=First Storage Group/CN=Public Folder Store (HPSS02)" was not found in the directory. The item may have been deleted.

This problem may resolve itself after directory replication and regular directory maintenence completes.
=======================================

This copy paste from internet, since I am not in office, but this warning is generated in event viewer, just replace information with mine 'sejeltech'
this gives you any information ?
This is Public Folder Server message, nothing related to RUS

Regards,
Exchange_Geek
Avatar of Wajeehk

ASKER

Dear Experts,

as discussed , I will add W2k8 DC/GC today, please tell me after this I remove the GC check box from W2k server?

I will feed you back after this change and I want to work with you to change RUS to new DC/GC to see if works then because this is all we thought to try

thanks
No need to demote the current GC to DC until Windows 2k8 is perfectly working .... it would take that as a possible last step

- Rancy
Avatar of Wajeehk

ASKER

Okay,

I will keep current GC W 2k as it is, I will post once I will finish to ask you guys to take a look if all is ok. I hope we reach to some result by this.

thanks for support
Avatar of Wajeehk

ASKER

Dear Rancy,

Just want to know that during this process when I run

- adprep32/ forestprep
- adprep32/ domainprep

this on existing W2k, and then adding new W2k8 GC/DC , does this create any disturbance/intruption to our email send/receive that time?

also please tell me, is it possible to revert back the adprep/forestprep and adprep/domain prep changes on W2k if things not going well ?

Please advise,
Firstly AD or Exchange Schema once prepared cannot be degraded :(

What as a side i can say is take a System State backup to be on the Safer side of things

- Rancy
Avatar of Wajeehk

ASKER

for emails there will be disturbance? during schema upgrade on W2k?
There shouldnt be any affect but i always prefer to do such Big activities over weekends or EOD friday so i have time in case of issue ....

- Rancy
Avatar of Wajeehk

ASKER

Yes, Our week end starts today, so we will start today EOD. In case of problem can you join us?
I wouldnt be able to join as on a trip

- Rancy
Avatar of Wajeehk

ASKER

Dear Experts,

I have now done the required changes on W2k DC and now W2k8 R2 DC is in place, it is now having
-DNS  
-GC

The roles are in old server (W2k still), I need further advise on:
- When transfer all 5 roles to this new W2k8 R2
- How to do the DNS ( as you guys mentioned primary DNS will be with W2k)
- When do we test for RUS
- When we proceed for changing the DNS on workstations, OR no need now until the W2k is running

As agreed can we have a remote session to do rest things and check for the RUS for which we decided to go for this step

waiting for your response.

Thanks,
Wajeeh
DNS.jpg
Avatar of Wajeehk

ASKER

Dear Experts!

Any of you available today for verifying things and check RUS?
Please have a read and run through the MS troubleshooting guide for the RUS:

http://support.microsoft.com/kb/288807

Shout if you get stuck anywhere or can't get it working.

Alan
Avatar of Wajeehk

ASKER

I have tried the methods, increase diagnostics logging, two experts also tried to help me with remote session, they tried to examine deeply but no luck, you can see post here.

So I asked you , it is possible you have some idea to fix this case.
------------------------------------------------
Checked events that were appearing in logs, found all correct except two important events were not appearing when RUS was pointing to server2 (faulty server)

Event Type:      Information
Event Source:      MSExchangeAL
Event Category:      LDAP Operations
Event ID:      8011
Date:       Date
Time:       Time
User:       N/A
Computer:      ServerName
Description:
Searching directory ServerName.contoso.com at base 'DC=contoso,DC=com' using filter '(&(USNChanged>=273870)(uSNChanged<=298312)((objectclass=*)))' and requesting attributes distinguishedName; objectGUID; LegacyExchangeDN; msExchADCGlobalNames; ObjectSID; ObjectClass; objectCategory;

Event Type:      Information
Event Source:      MSExchangeAL
Event Category:      Address List Synchronization
Event ID:      8129
Date:       Date
Time:       Time
User:       N/A
Computer:      ServerName
Description: Evaluating directory object 'CN=UserName,CN=Users,DC=contoso,DC=com' against address list 'CN=All Users,CN=All Address Lists,CN=Address Lists Container,CN=Microsoft,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=contoso,DC=com' rule '(& (mailnickname=*) (| (&(objectCategory=person)(objectClass=user)(!(homeMDB=*))(!(msExchHomeServerName=*)))(&(objectCategory=person)(objectClass=user)(|(homeMDB=*)(msExchHomeServerName=*))) ))'. DC=contoso,DC=com.

So, this made us believe that DC isn't supplying information to Exchange.
-------------------------------------
They advised be to get another DC W 2k8, and now I have it but problem still there, can you take a look, I can arrange remote session as well
@Wajeehk:

Correction: We didn't advise you get another DC W2k8. It was your plan to migrate to W2k8 and later on to E2k10. We did advise you steps on how to migrate, however I quote we didn't advise you to migrate to W2k8.

I particularly had asked you to engage Microsoft to get this issue solved *if this was important to you*

I am staying away from this thread, cause you are asking us for help on DNS Migration / AD Migration / Exchange Migration - which falls under the banner of consulting.

Understand remote session isn't the first step of troubleshooting at EE, it was a last step taken to troubleshoot and issue which wasn't getting solved despite all the steps taken.

Remote session was provided to us as a rarest-of-rare case here at EE. Please do not misuse this right at EE AND please do not misquote what any EE recommends.

Regards,
Exchange_Geek
Avatar of Wajeehk

ASKER

Dear Exchange_Geek,

During the chat when the problem was un-resolved, we all agreed to intro a W2k8 as DC/GC, transfer all roles to it and point the RUS to it new DC/GC W2k8.

While trouble shooting the problem I updated you that it is our plan to have DC on W2k8 and Exch 2010 on another instance of W2k8. and my plan was to introduce W2k8 after this RUS is solved but after you guys examined things and no luck,

I have with me that day chat session, where it says "i would suggest to add W2k8 as DC" since it was a part of my migration plan, so we thought to do this step and see if this might fix the case.

I am not misquoting anything, I appreciated all your efforts, and I updated you after my yesterdays step so you can try to see if the problem still exists.

The complete plan of AD/DNS was disclosed to you since we were having chat so during trouble shooting I explained my target. Other then this we were working on actual problem of RUS.

I hope all is clear and I am not trying to miss use any facility at EE. Sorry for any disturbance to you
Yeah cause it was your migration plan - hence, having W2k8 as DC would help - but again, this is not something that we've recommended in first place - this was recommended since it was being available to you as per your plan

Continuing from where we left off, point RUS to the new DC and let us know if it helps or not.

If you need help over DNS or AD Migration from W2k to W2k8, I'd suggest to open new thread - cause this thread would work purely to resolve RUS issue.

Regards,
Exchange_Geek
I agree with Exchange_Geek and its more like recommendations and RDP\Live-meetings isnt quiet allowed by EE only with very rare cases.

However we are still in to try and assist with the RUS issue but its was more of a road block with nothing working for us

- Rancy
Avatar of Wajeehk

ASKER

Yes, that is fine, 'this was recommended to me W2k8 DC/GC' when I updated to you both for my complete plan. So, we thought this step might help relating to actual problem.

Yes, yesterday I shifted all 5 roles to new DC and today in morning I pointed RUS to it W2k8 GC/DC and RUS pointing to mailserver1 as a exchange server, when creating new object a test user no luck.

If I point RUS to mailserver (old one) and for DC/GC to W2k8 still no luck

if I point RUS to mailserver (old one) and for DC/GC to (mailserver), yes address appears

although all roles are with W2k8

This is update till now.
In that case, we're back to square one.

Run setup /domainprep again from your Exchange CD - if that helps, good.

Regards,
Exchange_Geek
Avatar of Wajeehk

ASKER

so,

I keep RUS to mailserver 1 (for exchange) and keep RUS to W2k8 for DC ?

and Run domainprep on mailserver1?
I assume its that VM issue nothing else as it cant pick user information from a new DC\GC as well :(

- Rancy
Avatar of Wajeehk

ASKER

The new DC/GC is on VM also so now both mailserver1 and W2k8 DC/GC on a VM
yes - do as you had written

Regards,
Exchange_Geek
Avatar of Wajeehk

ASKER

I am running domain prep, there is a message see attached, Say 'OK' and proceed ?
Domain-Prep.JPG
Yes

Regards,
Exchange_Geek
Avatar of Wajeehk

ASKER

Completed and re-started SA service,
I have now these logs in event viewer

see attached where 'Sejel-DC' is the new W2k8

new user created no luck till now
8039.JPG
Make modification to the account and hit update RUS

Regards,
Exchange_Geek
Avatar of Wajeehk

ASKER

Done that,

Will feed you back on this....
Avatar of Wajeehk

ASKER

Dear Expert,

Any updates of Exchange 2003 SP2 can solve this, any ideas ? critical security updates?
You were supposed to give a feedback to us.

Regards,
Exchange_Geek
Last i know was August Rollup patch for Exchange

- Rancy
Avatar of Wajeehk

ASKER

No, it is not updating address, that is why I asked , do I need to perform Exchange 2003 SP2 updates, any one that will solve this case?
I'm out of ideas and wouldn't be in a position to provide you a solution, however would monitor this thread just in case someone provides an answer.

All the best.

Regards,
Exchange_Geek
Avatar of Wajeehk

ASKER

Okay,

Can you try to figure out one more time by taking a look to the system, if EE gives permission for that?
There is nothing I can work with now.

Sorry to say that.

Regards,
Exchange_Geek
Avatar of Wajeehk

ASKER

Dear Exchange_Geek!

Since this step of moving E2k3 to a virtual machine, I took for a temporary period because I wanted to retire my W2k DC so that I can have my forest and domain function levels raised in order to get E2k10 setup going.

I faced the problem of this service and after all efforts no luck. E2k10 don't make use of this service so, is it ok if I go for it and don't consider if RUS is working or not because at the final stage of E2k10 this is not required and has to be deleted?
I'd say it is upto you - if you think RUS is important, then work towards solving it - if not, wait for migration to E2k10.

Regards,
Exchange_Geek
ASKER CERTIFIED SOLUTION
Avatar of Wajeehk
Wajeehk

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Wajeehk

ASKER

The reason , I accepted my own comment as a solution is because, finally I decided that working towards solving this is of no use for me as I am going for the final result as E2K10 which don't use this RUS function, So I will not be using it.

Regards,