Link to home
Start Free TrialLog in
Avatar of TMCITDept
TMCITDept

asked on

Post Exchange Upgrade cleanup issues

Hi Folks,
We upgraded late last year from Exchange 2007 to 2010. Mostly things seemed to go as expected but somewhere we got off-track in the post-upgrade clean-up type things.

We are fairly vanilla environment: had one 2007 Mailbox/HT Server and a separate CAS server. Now all roles on one 2010 server.
Is it a problem that the old "First Administrative Group" is still present in AD somehow?

So a few symptoms:

Getting replication errors. We migrated Public Folders to new hotness during the appropriate time in the upgrade. Still get 4030 errors stating things like
Process Microsoft.Exchange.InfoWorker.Common.Delayed`1[System.String]: Unable to find any replicas for free/busy folder EX:/o=NetBIOS_domain/ou=First Administrative Group.
We followed the steps to decommission the old 2007 as per MS and various articles on the interwebs. Very carefully. The old servers were uninstalled and turned off. (Still in rack ;-)

We have two GALs curiously enough. One called "Default Global Address List" and one called "MyCo Global Address List". One appears to be legacy maybe 'cuz the First Admin Group is still around?
When running this:   Update-GlobalAddressList -Identity "Default Global Address List" -DomainController "MyDC"
I get this:   WARNING: The recipient "FQDN/Microsoft Exchange System Objects/Offline Address Book - First Administrative Group" is invalid and couldn't be updated.
If I run this same command using the other GAL name (MyCo Global Address List) it appears to work.

New users (ones created since upgrade) appear in the All Users (address list) distribution group and in the GAL but not in the OAB. Is it prudent to clean up the ADSI before deleting and recreating another OAB? Seems to me we did this once before in Dec13 which not coincidently is the modified date of the OAB files.

So...I have seen Microsoft's recommendation is NOT to rip out the old "First Administrative Group" or edit things in ASDI all willy nilly but something is not quite right. Any guidance?

Thanks, Jeff
Avatar of Simon Butler (Sembee)
Simon Butler (Sembee)
Flag of United Kingdom of Great Britain and Northern Ireland image

First - don't touch the Default admin group, as that can cause you problems.
Sounds like the GAL and then probably the associated OAB isn't behaving itself. Therefore I would simply recreate the lot - new GAL, new OAB and delete the existing.

After recreating the OAB, check the distribution methods - if you are Outlook 2007 and exclusively use web only. Don't forget to set the correct OAB on each database you may have.

Once you have created both, run get-offlineaddressbook | update-offlineaddressbook to force a regeneration of the OAB in to the correct places.

Simon.
Avatar of TMCITDept
TMCITDept

ASKER

Thanks Simon. Seems part of the issue here is the Default Global Address List is boogered up (see above error when attempting to update it) and one is not allowed to modify or delete it.
The second one I have appears to be working fine and I suppose I can delete my OAB and attempt to associate it with the second (working) GAL called MyCo Global Address List.
However am I then to live forever with a broken Default GAL?
Jeff
okay, I deleted the second GAL and the OAB. Recreated a new OAB. Updated new OAB.
New OAB doesn't appear to be working. Files in the C:\Program Files\Microsoft\Exchange Server\V14\ClientAccess\OAB folder are now gone. No new ones have appeared in the subsequent hours. Will check in the AM, I suppose.
Outlook (cached mode) clients are getting this error attempt to download new OAB: 0x80190194   probably 'cuz there is nothing to download currently...
Did you force the OAB to generate?

get-offlineaddressbook | update-offlineaddressbook

Did you set the OAB on the properties of the databases?

Simon.
Yes I did force the OAB to generate. >1x.
No I hadn't set the OAB on the DBs. Thank you, I forgot that step!
So I did that, re-forced the OAB update. >1x. Restarted the File Distro service.
Still no files in the ClientAccess\OAB directory.
Any other thoughts?

Jeff
Sounds like the distribution isn't working correctly.
Do you get any errors in the event log about 15-30 minutes after the OAB generation attempt (time depends on the number of users, more users, the longer it is).

Simon.
Yes. Getting the 9331 and 9335 events w/ error 80004005, in addition to a new boatload of performance counter 106 events/errors.
Event log IDs on their own are close to useless.
Put the codes in to http://eventid.net/ and you will see how many variants of them there are. You need to post the entire entry.

Simon.
Here's the error I get when trying to update content in PF Mgmnt Console for Exchange Admin Group:
--------------------------------------------------------
Microsoft Exchange Error
--------------------------------------------------------
Action 'Update Content' could not be performed on object 'EX:/o=domain/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)'.

EX:/o=domain/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)
Failed
Error:
Cannot start content replication against public folder '\NON_IPM_SUBTREE\OFFLINE ADDRESS BOOK\EX:/o=domain/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)' on public folder database 'Public Folders'.

MapiExceptionNoReplicaAvailable: StartContentReplication failed. (hr=0x80004005, ec=1129)
Diagnostic context:
    Lid: 1494    ---- Remote Context Beg ----
    Lid: 3010    StoreEc: 0x8004010F
    Lid: 3010    StoreEc: 0x8004010F
    Lid: 3650    StoreEc: 0x8004010F
    Lid: 18128   StoreEc: 0x469    
    Lid: 18536   StoreEc: 0x469    
    Lid: 18544   StoreEc: 0x469    
    Lid: 18560   StoreEc: 0x469    
    Lid: 18740   StoreEc: 0x469    
    Lid: 1267    StoreEc: 0x469    
    Lid: 33819   StoreEc: 0x469    
    Lid: 27225   StoreEc: 0x469    
    Lid: 1750    ---- Remote Context End ----
    Lid: 26322   StoreEc: 0x469    




--------------------------------------------------------
OK
--------------------------------------------------------
Log Name:      Application
Source:        MSExchangeSA
Date:          4/16/2014 12:31:42 PM
Event ID:      9335
Task Category: (13)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      EMAIL.domain.com
Description:
OABGen encountered error 80004005 while cleaning the offline address list public folders under /o=domain/cn=addrlists/cn=oabs/cn=Offline Address Book.  Please make sure the public folder database is mounted and replicas exist of the offline address list folders.  No offline address lists have been generated.  Please check the event log for more information.
- \Offline Address Book
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="MSExchangeSA" />
    <EventID Qualifiers="49152">9335</EventID>
    <Level>2</Level>
    <Task>13</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-04-16T19:31:42.000000000Z" />
    <EventRecordID>118352</EventRecordID>
    <Channel>Application</Channel>
    <Computer>EMAIL.domain.com</Computer>
    <Security />
  </System>
  <EventData>
    <Data>80004005</Data>
    <Data>/o=domain/cn=addrlists/cn=oabs/cn=Offline Address Book</Data>
    <Data>\Offline Address Book</Data>
  </EventData>
</Event>
Log Name:      Application
Source:        MSExchangeSA
Date:          4/16/2014 12:31:42 PM
Event ID:      9331
Task Category: (13)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      EMAIL.domain.com
Description:
OABGen encountered error 80004005 (internal ID 501038d) accessing the public folder database while generating the offline address list for address list '/'.
- \Offline Address Book
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="MSExchangeSA" />
    <EventID Qualifiers="49152">9331</EventID>
    <Level>2</Level>
    <Task>13</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-04-16T19:31:42.000000000Z" />
    <EventRecordID>118351</EventRecordID>
    <Channel>Application</Channel>
    <Computer>EMAIL.domain.com</Computer>
    <Security />
  </System>
  <EventData>
    <Data>80004005</Data>
    <Data>501038d</Data>
    <Data>/</Data>
    <Data>\Offline Address Book</Data>
  </EventData>
</Event>
Note: I get those errors IMMEDIATELY after attempting to update OAB.
Thanks,
Jeff

Also of note, I ran a BPA and received some results indicating the Site Folder Server setting in AD contained "DEL"  which certainly seemed applicable. It had this for both Exchange and First Administrative Groups. I followed the instructions from TechNet to correct that on the Exchange Admin Group in ADSI....problem remains after a reboot.
First - do you have any Outlook 2003 clients? If not then you can remove the public folder distribution of the OAB.

Simon.
No we don't have any 2003 clients. And yes we would love to do away public folder distribution. It seems we have done that to some extent.
However that is a secondary point. I really need to get the OAB and GAL working via whatever method works. It was distributing OAB via web based for several months. It just wasn't updating. Now we aren't even getting an OAB at all. So we have moved backwards not forwards.
Do we have any thoughts on a course of action at this points?
If you have no Outlook 2003 clients, go in to the OAB configuration and disable public folder distribution. Then check that the correct servers are listed as the distribution points.
Check the OAB virtual directory has the correct URLs on it.

Wait about 30 minutes, then do an Autodiscover test in Outlook.
http://semb.ee/adt

Confirm that the OAB distribution method is web based (it will show a URL) and not public folders.

Once that is confirmed as happening, and the URL being returned to the client is correctly, you can then troubleshoot further on why the OAB isn't generating correctly.

Simon.
Yes we are not doing public dist. I never added/checked Public Dist after making a new OAB last week.
Yes the Autodiscover has the same url and sid/guid that ISS has and is the folder name in the V14\ClientAccess\OAB\ folder. The problem is that folder is empty. So yes I have been trying to troubleshoot why the OAB isn't generating correctly. Have any ideas?
Thanks,
Jeff
The OAB generation error you have posted is trying to use public folders. Therefore you need to go back and check the configuration again.

Run the BPA from the toolbox and see what that flags.

Simon.
As criticals....
It flags that my incoming and outgoing message size limits are too large.
And that Admin Group : First Administrative Group  > Site folder server deleted.
In all issues....
Admin Group : First Administrative Group  > Public Folder Tree Database assignment is empty.
ASKER CERTIFIED SOLUTION
Avatar of TMCITDept
TMCITDept

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
The reason is we figured it out ourselves.