TMCITDept
asked on
Post Exchange Upgrade cleanup issues
Hi Folks,
We upgraded late last year from Exchange 2007 to 2010. Mostly things seemed to go as expected but somewhere we got off-track in the post-upgrade clean-up type things.
We are fairly vanilla environment: had one 2007 Mailbox/HT Server and a separate CAS server. Now all roles on one 2010 server.
Is it a problem that the old "First Administrative Group" is still present in AD somehow?
So a few symptoms:
Getting replication errors. We migrated Public Folders to new hotness during the appropriate time in the upgrade. Still get 4030 errors stating things like
Process Microsoft.Exchange.InfoWor ker.Common .Delayed`1 [System.St ring]: Unable to find any replicas for free/busy folder EX:/o=NetBIOS_domain/ou=Fi rst Administrative Group.
We followed the steps to decommission the old 2007 as per MS and various articles on the interwebs. Very carefully. The old servers were uninstalled and turned off. (Still in rack ;-)
We have two GALs curiously enough. One called "Default Global Address List" and one called "MyCo Global Address List". One appears to be legacy maybe 'cuz the First Admin Group is still around?
When running this: Update-GlobalAddressList -Identity "Default Global Address List" -DomainController "MyDC"
I get this: WARNING: The recipient "FQDN/Microsoft Exchange System Objects/Offline Address Book - First Administrative Group" is invalid and couldn't be updated.
If I run this same command using the other GAL name (MyCo Global Address List) it appears to work.
New users (ones created since upgrade) appear in the All Users (address list) distribution group and in the GAL but not in the OAB. Is it prudent to clean up the ADSI before deleting and recreating another OAB? Seems to me we did this once before in Dec13 which not coincidently is the modified date of the OAB files.
So...I have seen Microsoft's recommendation is NOT to rip out the old "First Administrative Group" or edit things in ASDI all willy nilly but something is not quite right. Any guidance?
Thanks, Jeff
We upgraded late last year from Exchange 2007 to 2010. Mostly things seemed to go as expected but somewhere we got off-track in the post-upgrade clean-up type things.
We are fairly vanilla environment: had one 2007 Mailbox/HT Server and a separate CAS server. Now all roles on one 2010 server.
Is it a problem that the old "First Administrative Group" is still present in AD somehow?
So a few symptoms:
Getting replication errors. We migrated Public Folders to new hotness during the appropriate time in the upgrade. Still get 4030 errors stating things like
Process Microsoft.Exchange.InfoWor
We followed the steps to decommission the old 2007 as per MS and various articles on the interwebs. Very carefully. The old servers were uninstalled and turned off. (Still in rack ;-)
We have two GALs curiously enough. One called "Default Global Address List" and one called "MyCo Global Address List". One appears to be legacy maybe 'cuz the First Admin Group is still around?
When running this: Update-GlobalAddressList -Identity "Default Global Address List" -DomainController "MyDC"
I get this: WARNING: The recipient "FQDN/Microsoft Exchange System Objects/Offline Address Book - First Administrative Group" is invalid and couldn't be updated.
If I run this same command using the other GAL name (MyCo Global Address List) it appears to work.
New users (ones created since upgrade) appear in the All Users (address list) distribution group and in the GAL but not in the OAB. Is it prudent to clean up the ADSI before deleting and recreating another OAB? Seems to me we did this once before in Dec13 which not coincidently is the modified date of the OAB files.
So...I have seen Microsoft's recommendation is NOT to rip out the old "First Administrative Group" or edit things in ASDI all willy nilly but something is not quite right. Any guidance?
Thanks, Jeff
ASKER
Thanks Simon. Seems part of the issue here is the Default Global Address List is boogered up (see above error when attempting to update it) and one is not allowed to modify or delete it.
The second one I have appears to be working fine and I suppose I can delete my OAB and attempt to associate it with the second (working) GAL called MyCo Global Address List.
However am I then to live forever with a broken Default GAL?
Jeff
The second one I have appears to be working fine and I suppose I can delete my OAB and attempt to associate it with the second (working) GAL called MyCo Global Address List.
However am I then to live forever with a broken Default GAL?
Jeff
ASKER
okay, I deleted the second GAL and the OAB. Recreated a new OAB. Updated new OAB.
New OAB doesn't appear to be working. Files in the C:\Program Files\Microsoft\Exchange Server\V14\ClientAccess\OA B folder are now gone. No new ones have appeared in the subsequent hours. Will check in the AM, I suppose.
Outlook (cached mode) clients are getting this error attempt to download new OAB: 0x80190194 probably 'cuz there is nothing to download currently...
New OAB doesn't appear to be working. Files in the C:\Program Files\Microsoft\Exchange Server\V14\ClientAccess\OA
Outlook (cached mode) clients are getting this error attempt to download new OAB: 0x80190194 probably 'cuz there is nothing to download currently...
Did you force the OAB to generate?
get-offlineaddressbook | update-offlineaddressbook
Did you set the OAB on the properties of the databases?
Simon.
get-offlineaddressbook | update-offlineaddressbook
Did you set the OAB on the properties of the databases?
Simon.
ASKER
Yes I did force the OAB to generate. >1x.
No I hadn't set the OAB on the DBs. Thank you, I forgot that step!
So I did that, re-forced the OAB update. >1x. Restarted the File Distro service.
Still no files in the ClientAccess\OAB directory.
Any other thoughts?
Jeff
No I hadn't set the OAB on the DBs. Thank you, I forgot that step!
So I did that, re-forced the OAB update. >1x. Restarted the File Distro service.
Still no files in the ClientAccess\OAB directory.
Any other thoughts?
Jeff
Sounds like the distribution isn't working correctly.
Do you get any errors in the event log about 15-30 minutes after the OAB generation attempt (time depends on the number of users, more users, the longer it is).
Simon.
Do you get any errors in the event log about 15-30 minutes after the OAB generation attempt (time depends on the number of users, more users, the longer it is).
Simon.
ASKER
Yes. Getting the 9331 and 9335 events w/ error 80004005, in addition to a new boatload of performance counter 106 events/errors.
Event log IDs on their own are close to useless.
Put the codes in to http://eventid.net/ and you will see how many variants of them there are. You need to post the entire entry.
Simon.
Put the codes in to http://eventid.net/ and you will see how many variants of them there are. You need to post the entire entry.
Simon.
ASKER
Here's the error I get when trying to update content in PF Mgmnt Console for Exchange Admin Group:
-------------------------- ---------- ---------- ----------
Microsoft Exchange Error
-------------------------- ---------- ---------- ----------
Action 'Update Content' could not be performed on object 'EX:/o=domain/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)'.
EX:/o=domain/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)
Failed
Error:
Cannot start content replication against public folder '\NON_IPM_SUBTREE\OFFLINE ADDRESS BOOK\EX:/o=domain/ou=Excha nge Administrative Group (FYDIBOHF23SPDLT)' on public folder database 'Public Folders'.
MapiExceptionNoReplicaAvai lable: StartContentReplication failed. (hr=0x80004005, ec=1129)
Diagnostic context:
Lid: 1494 ---- Remote Context Beg ----
Lid: 3010 StoreEc: 0x8004010F
Lid: 3010 StoreEc: 0x8004010F
Lid: 3650 StoreEc: 0x8004010F
Lid: 18128 StoreEc: 0x469
Lid: 18536 StoreEc: 0x469
Lid: 18544 StoreEc: 0x469
Lid: 18560 StoreEc: 0x469
Lid: 18740 StoreEc: 0x469
Lid: 1267 StoreEc: 0x469
Lid: 33819 StoreEc: 0x469
Lid: 27225 StoreEc: 0x469
Lid: 1750 ---- Remote Context End ----
Lid: 26322 StoreEc: 0x469
-------------------------- ---------- ---------- ----------
OK
-------------------------- ---------- ---------- ----------
--------------------------
Microsoft Exchange Error
--------------------------
Action 'Update Content' could not be performed on object 'EX:/o=domain/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)'.
EX:/o=domain/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)
Failed
Error:
Cannot start content replication against public folder '\NON_IPM_SUBTREE\OFFLINE ADDRESS BOOK\EX:/o=domain/ou=Excha
MapiExceptionNoReplicaAvai
Diagnostic context:
Lid: 1494 ---- Remote Context Beg ----
Lid: 3010 StoreEc: 0x8004010F
Lid: 3010 StoreEc: 0x8004010F
Lid: 3650 StoreEc: 0x8004010F
Lid: 18128 StoreEc: 0x469
Lid: 18536 StoreEc: 0x469
Lid: 18544 StoreEc: 0x469
Lid: 18560 StoreEc: 0x469
Lid: 18740 StoreEc: 0x469
Lid: 1267 StoreEc: 0x469
Lid: 33819 StoreEc: 0x469
Lid: 27225 StoreEc: 0x469
Lid: 1750 ---- Remote Context End ----
Lid: 26322 StoreEc: 0x469
--------------------------
OK
--------------------------
ASKER
Log Name: Application
Source: MSExchangeSA
Date: 4/16/2014 12:31:42 PM
Event ID: 9335
Task Category: (13)
Level: Error
Keywords: Classic
User: N/A
Computer: EMAIL.domain.com
Description:
OABGen encountered error 80004005 while cleaning the offline address list public folders under /o=domain/cn=addrlists/cn= oabs/cn=Of fline Address Book. Please make sure the public folder database is mounted and replicas exist of the offline address list folders. No offline address lists have been generated. Please check the event log for more information.
- \Offline Address Book
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="MSExchangeSA" />
<EventID Qualifiers="49152">9335</E ventID>
<Level>2</Level>
<Task>13</Task>
<Keywords>0x80000000000000 </Keywords >
<TimeCreated SystemTime="2014-04-16T19: 31:42.0000 00000Z" />
<EventRecordID>118352</Eve ntRecordID >
<Channel>Application</Chan nel>
<Computer>EMAIL.domain.com </Computer >
<Security />
</System>
<EventData>
<Data>80004005</Data>
<Data>/o=domain/cn=addrlis ts/cn=oabs /cn=Offlin e Address Book</Data>
<Data>\Offline Address Book</Data>
</EventData>
</Event>
Source: MSExchangeSA
Date: 4/16/2014 12:31:42 PM
Event ID: 9335
Task Category: (13)
Level: Error
Keywords: Classic
User: N/A
Computer: EMAIL.domain.com
Description:
OABGen encountered error 80004005 while cleaning the offline address list public folders under /o=domain/cn=addrlists/cn=
- \Offline Address Book
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="MSExchangeSA" />
<EventID Qualifiers="49152">9335</E
<Level>2</Level>
<Task>13</Task>
<Keywords>0x80000000000000
<TimeCreated SystemTime="2014-04-16T19:
<EventRecordID>118352</Eve
<Channel>Application</Chan
<Computer>EMAIL.domain.com
<Security />
</System>
<EventData>
<Data>80004005</Data>
<Data>/o=domain/cn=addrlis
<Data>\Offline Address Book</Data>
</EventData>
</Event>
ASKER
Log Name: Application
Source: MSExchangeSA
Date: 4/16/2014 12:31:42 PM
Event ID: 9331
Task Category: (13)
Level: Error
Keywords: Classic
User: N/A
Computer: EMAIL.domain.com
Description:
OABGen encountered error 80004005 (internal ID 501038d) accessing the public folder database while generating the offline address list for address list '/'.
- \Offline Address Book
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="MSExchangeSA" />
<EventID Qualifiers="49152">9331</E ventID>
<Level>2</Level>
<Task>13</Task>
<Keywords>0x80000000000000 </Keywords >
<TimeCreated SystemTime="2014-04-16T19: 31:42.0000 00000Z" />
<EventRecordID>118351</Eve ntRecordID >
<Channel>Application</Chan nel>
<Computer>EMAIL.domain.com </Computer >
<Security />
</System>
<EventData>
<Data>80004005</Data>
<Data>501038d</Data>
<Data>/</Data>
<Data>\Offline Address Book</Data>
</EventData>
</Event>
Source: MSExchangeSA
Date: 4/16/2014 12:31:42 PM
Event ID: 9331
Task Category: (13)
Level: Error
Keywords: Classic
User: N/A
Computer: EMAIL.domain.com
Description:
OABGen encountered error 80004005 (internal ID 501038d) accessing the public folder database while generating the offline address list for address list '/'.
- \Offline Address Book
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="MSExchangeSA" />
<EventID Qualifiers="49152">9331</E
<Level>2</Level>
<Task>13</Task>
<Keywords>0x80000000000000
<TimeCreated SystemTime="2014-04-16T19:
<EventRecordID>118351</Eve
<Channel>Application</Chan
<Computer>EMAIL.domain.com
<Security />
</System>
<EventData>
<Data>80004005</Data>
<Data>501038d</Data>
<Data>/</Data>
<Data>\Offline Address Book</Data>
</EventData>
</Event>
ASKER
Note: I get those errors IMMEDIATELY after attempting to update OAB.
Thanks,
Jeff
Also of note, I ran a BPA and received some results indicating the Site Folder Server setting in AD contained "DEL" which certainly seemed applicable. It had this for both Exchange and First Administrative Groups. I followed the instructions from TechNet to correct that on the Exchange Admin Group in ADSI....problem remains after a reboot.
Thanks,
Jeff
Also of note, I ran a BPA and received some results indicating the Site Folder Server setting in AD contained "DEL" which certainly seemed applicable. It had this for both Exchange and First Administrative Groups. I followed the instructions from TechNet to correct that on the Exchange Admin Group in ADSI....problem remains after a reboot.
First - do you have any Outlook 2003 clients? If not then you can remove the public folder distribution of the OAB.
Simon.
Simon.
ASKER
No we don't have any 2003 clients. And yes we would love to do away public folder distribution. It seems we have done that to some extent.
However that is a secondary point. I really need to get the OAB and GAL working via whatever method works. It was distributing OAB via web based for several months. It just wasn't updating. Now we aren't even getting an OAB at all. So we have moved backwards not forwards.
Do we have any thoughts on a course of action at this points?
However that is a secondary point. I really need to get the OAB and GAL working via whatever method works. It was distributing OAB via web based for several months. It just wasn't updating. Now we aren't even getting an OAB at all. So we have moved backwards not forwards.
Do we have any thoughts on a course of action at this points?
If you have no Outlook 2003 clients, go in to the OAB configuration and disable public folder distribution. Then check that the correct servers are listed as the distribution points.
Check the OAB virtual directory has the correct URLs on it.
Wait about 30 minutes, then do an Autodiscover test in Outlook.
http://semb.ee/adt
Confirm that the OAB distribution method is web based (it will show a URL) and not public folders.
Once that is confirmed as happening, and the URL being returned to the client is correctly, you can then troubleshoot further on why the OAB isn't generating correctly.
Simon.
Check the OAB virtual directory has the correct URLs on it.
Wait about 30 minutes, then do an Autodiscover test in Outlook.
http://semb.ee/adt
Confirm that the OAB distribution method is web based (it will show a URL) and not public folders.
Once that is confirmed as happening, and the URL being returned to the client is correctly, you can then troubleshoot further on why the OAB isn't generating correctly.
Simon.
ASKER
Yes we are not doing public dist. I never added/checked Public Dist after making a new OAB last week.
Yes the Autodiscover has the same url and sid/guid that ISS has and is the folder name in the V14\ClientAccess\OAB\ folder. The problem is that folder is empty. So yes I have been trying to troubleshoot why the OAB isn't generating correctly. Have any ideas?
Thanks,
Jeff
Yes the Autodiscover has the same url and sid/guid that ISS has and is the folder name in the V14\ClientAccess\OAB\ folder. The problem is that folder is empty. So yes I have been trying to troubleshoot why the OAB isn't generating correctly. Have any ideas?
Thanks,
Jeff
The OAB generation error you have posted is trying to use public folders. Therefore you need to go back and check the configuration again.
Run the BPA from the toolbox and see what that flags.
Simon.
Run the BPA from the toolbox and see what that flags.
Simon.
ASKER
As criticals....
It flags that my incoming and outgoing message size limits are too large.
And that Admin Group : First Administrative Group > Site folder server deleted.
In all issues....
Admin Group : First Administrative Group > Public Folder Tree Database assignment is empty.
It flags that my incoming and outgoing message size limits are too large.
And that Admin Group : First Administrative Group > Site folder server deleted.
In all issues....
Admin Group : First Administrative Group > Public Folder Tree Database assignment is empty.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
The reason is we figured it out ourselves.
Sounds like the GAL and then probably the associated OAB isn't behaving itself. Therefore I would simply recreate the lot - new GAL, new OAB and delete the existing.
After recreating the OAB, check the distribution methods - if you are Outlook 2007 and exclusively use web only. Don't forget to set the correct OAB on each database you may have.
Once you have created both, run get-offlineaddressbook | update-offlineaddressbook to force a regeneration of the OAB in to the correct places.
Simon.