Solved

Post Exchange Upgrade cleanup issues

Posted on 2014-04-15
20
536 Views
Last Modified: 2014-05-18
Hi Folks,
We upgraded late last year from Exchange 2007 to 2010. Mostly things seemed to go as expected but somewhere we got off-track in the post-upgrade clean-up type things.

We are fairly vanilla environment: had one 2007 Mailbox/HT Server and a separate CAS server. Now all roles on one 2010 server.
Is it a problem that the old "First Administrative Group" is still present in AD somehow?

So a few symptoms:

Getting replication errors. We migrated Public Folders to new hotness during the appropriate time in the upgrade. Still get 4030 errors stating things like
Process Microsoft.Exchange.InfoWorker.Common.Delayed`1[System.String]: Unable to find any replicas for free/busy folder EX:/o=NetBIOS_domain/ou=First Administrative Group.
We followed the steps to decommission the old 2007 as per MS and various articles on the interwebs. Very carefully. The old servers were uninstalled and turned off. (Still in rack ;-)

We have two GALs curiously enough. One called "Default Global Address List" and one called "MyCo Global Address List". One appears to be legacy maybe 'cuz the First Admin Group is still around?
When running this:   Update-GlobalAddressList -Identity "Default Global Address List" -DomainController "MyDC"
I get this:   WARNING: The recipient "FQDN/Microsoft Exchange System Objects/Offline Address Book - First Administrative Group" is invalid and couldn't be updated.
If I run this same command using the other GAL name (MyCo Global Address List) it appears to work.

New users (ones created since upgrade) appear in the All Users (address list) distribution group and in the GAL but not in the OAB. Is it prudent to clean up the ADSI before deleting and recreating another OAB? Seems to me we did this once before in Dec13 which not coincidently is the modified date of the OAB files.

So...I have seen Microsoft's recommendation is NOT to rip out the old "First Administrative Group" or edit things in ASDI all willy nilly but something is not quite right. Any guidance?

Thanks, Jeff
0
Comment
Question by:TMCITDept
  • 13
  • 7
20 Comments
 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 40003722
First - don't touch the Default admin group, as that can cause you problems.
Sounds like the GAL and then probably the associated OAB isn't behaving itself. Therefore I would simply recreate the lot - new GAL, new OAB and delete the existing.

After recreating the OAB, check the distribution methods - if you are Outlook 2007 and exclusively use web only. Don't forget to set the correct OAB on each database you may have.

Once you have created both, run get-offlineaddressbook | update-offlineaddressbook to force a regeneration of the OAB in to the correct places.

Simon.
0
 

Author Comment

by:TMCITDept
ID: 40004937
Thanks Simon. Seems part of the issue here is the Default Global Address List is boogered up (see above error when attempting to update it) and one is not allowed to modify or delete it.
The second one I have appears to be working fine and I suppose I can delete my OAB and attempt to associate it with the second (working) GAL called MyCo Global Address List.
However am I then to live forever with a broken Default GAL?
Jeff
0
 

Author Comment

by:TMCITDept
ID: 40005216
okay, I deleted the second GAL and the OAB. Recreated a new OAB. Updated new OAB.
New OAB doesn't appear to be working. Files in the C:\Program Files\Microsoft\Exchange Server\V14\ClientAccess\OAB folder are now gone. No new ones have appeared in the subsequent hours. Will check in the AM, I suppose.
Outlook (cached mode) clients are getting this error attempt to download new OAB: 0x80190194   probably 'cuz there is nothing to download currently...
0
 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 40006011
Did you force the OAB to generate?

get-offlineaddressbook | update-offlineaddressbook

Did you set the OAB on the properties of the databases?

Simon.
0
 

Author Comment

by:TMCITDept
ID: 40007593
Yes I did force the OAB to generate. >1x.
No I hadn't set the OAB on the DBs. Thank you, I forgot that step!
So I did that, re-forced the OAB update. >1x. Restarted the File Distro service.
Still no files in the ClientAccess\OAB directory.
Any other thoughts?

Jeff
0
 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 40008731
Sounds like the distribution isn't working correctly.
Do you get any errors in the event log about 15-30 minutes after the OAB generation attempt (time depends on the number of users, more users, the longer it is).

Simon.
0
 

Author Comment

by:TMCITDept
ID: 40009504
Yes. Getting the 9331 and 9335 events w/ error 80004005, in addition to a new boatload of performance counter 106 events/errors.
0
 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 40012180
Event log IDs on their own are close to useless.
Put the codes in to http://eventid.net/ and you will see how many variants of them there are. You need to post the entire entry.

Simon.
0
 

Author Comment

by:TMCITDept
ID: 40013237
Here's the error I get when trying to update content in PF Mgmnt Console for Exchange Admin Group:
--------------------------------------------------------
Microsoft Exchange Error
--------------------------------------------------------
Action 'Update Content' could not be performed on object 'EX:/o=domain/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)'.

EX:/o=domain/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)
Failed
Error:
Cannot start content replication against public folder '\NON_IPM_SUBTREE\OFFLINE ADDRESS BOOK\EX:/o=domain/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)' on public folder database 'Public Folders'.

MapiExceptionNoReplicaAvailable: StartContentReplication failed. (hr=0x80004005, ec=1129)
Diagnostic context:
    Lid: 1494    ---- Remote Context Beg ----
    Lid: 3010    StoreEc: 0x8004010F
    Lid: 3010    StoreEc: 0x8004010F
    Lid: 3650    StoreEc: 0x8004010F
    Lid: 18128   StoreEc: 0x469    
    Lid: 18536   StoreEc: 0x469    
    Lid: 18544   StoreEc: 0x469    
    Lid: 18560   StoreEc: 0x469    
    Lid: 18740   StoreEc: 0x469    
    Lid: 1267    StoreEc: 0x469    
    Lid: 33819   StoreEc: 0x469    
    Lid: 27225   StoreEc: 0x469    
    Lid: 1750    ---- Remote Context End ----
    Lid: 26322   StoreEc: 0x469    




--------------------------------------------------------
OK
--------------------------------------------------------
0
 

Author Comment

by:TMCITDept
ID: 40013248
Log Name:      Application
Source:        MSExchangeSA
Date:          4/16/2014 12:31:42 PM
Event ID:      9335
Task Category: (13)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      EMAIL.domain.com
Description:
OABGen encountered error 80004005 while cleaning the offline address list public folders under /o=domain/cn=addrlists/cn=oabs/cn=Offline Address Book.  Please make sure the public folder database is mounted and replicas exist of the offline address list folders.  No offline address lists have been generated.  Please check the event log for more information.
- \Offline Address Book
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="MSExchangeSA" />
    <EventID Qualifiers="49152">9335</EventID>
    <Level>2</Level>
    <Task>13</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-04-16T19:31:42.000000000Z" />
    <EventRecordID>118352</EventRecordID>
    <Channel>Application</Channel>
    <Computer>EMAIL.domain.com</Computer>
    <Security />
  </System>
  <EventData>
    <Data>80004005</Data>
    <Data>/o=domain/cn=addrlists/cn=oabs/cn=Offline Address Book</Data>
    <Data>\Offline Address Book</Data>
  </EventData>
</Event>
0
How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

 

Author Comment

by:TMCITDept
ID: 40013252
Log Name:      Application
Source:        MSExchangeSA
Date:          4/16/2014 12:31:42 PM
Event ID:      9331
Task Category: (13)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      EMAIL.domain.com
Description:
OABGen encountered error 80004005 (internal ID 501038d) accessing the public folder database while generating the offline address list for address list '/'.
- \Offline Address Book
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="MSExchangeSA" />
    <EventID Qualifiers="49152">9331</EventID>
    <Level>2</Level>
    <Task>13</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-04-16T19:31:42.000000000Z" />
    <EventRecordID>118351</EventRecordID>
    <Channel>Application</Channel>
    <Computer>EMAIL.domain.com</Computer>
    <Security />
  </System>
  <EventData>
    <Data>80004005</Data>
    <Data>501038d</Data>
    <Data>/</Data>
    <Data>\Offline Address Book</Data>
  </EventData>
</Event>
0
 

Author Comment

by:TMCITDept
ID: 40013639
Note: I get those errors IMMEDIATELY after attempting to update OAB.
Thanks,
Jeff

Also of note, I ran a BPA and received some results indicating the Site Folder Server setting in AD contained "DEL"  which certainly seemed applicable. It had this for both Exchange and First Administrative Groups. I followed the instructions from TechNet to correct that on the Exchange Admin Group in ADSI....problem remains after a reboot.
0
 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 40017258
First - do you have any Outlook 2003 clients? If not then you can remove the public folder distribution of the OAB.

Simon.
0
 

Author Comment

by:TMCITDept
ID: 40018404
No we don't have any 2003 clients. And yes we would love to do away public folder distribution. It seems we have done that to some extent.
However that is a secondary point. I really need to get the OAB and GAL working via whatever method works. It was distributing OAB via web based for several months. It just wasn't updating. Now we aren't even getting an OAB at all. So we have moved backwards not forwards.
Do we have any thoughts on a course of action at this points?
0
 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 40018544
If you have no Outlook 2003 clients, go in to the OAB configuration and disable public folder distribution. Then check that the correct servers are listed as the distribution points.
Check the OAB virtual directory has the correct URLs on it.

Wait about 30 minutes, then do an Autodiscover test in Outlook.
http://semb.ee/adt

Confirm that the OAB distribution method is web based (it will show a URL) and not public folders.

Once that is confirmed as happening, and the URL being returned to the client is correctly, you can then troubleshoot further on why the OAB isn't generating correctly.

Simon.
0
 

Author Comment

by:TMCITDept
ID: 40019061
Yes we are not doing public dist. I never added/checked Public Dist after making a new OAB last week.
Yes the Autodiscover has the same url and sid/guid that ISS has and is the folder name in the V14\ClientAccess\OAB\ folder. The problem is that folder is empty. So yes I have been trying to troubleshoot why the OAB isn't generating correctly. Have any ideas?
Thanks,
Jeff
0
 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 40025940
The OAB generation error you have posted is trying to use public folders. Therefore you need to go back and check the configuration again.

Run the BPA from the toolbox and see what that flags.

Simon.
0
 

Author Comment

by:TMCITDept
ID: 40035699
As criticals....
It flags that my incoming and outgoing message size limits are too large.
And that Admin Group : First Administrative Group  > Site folder server deleted.
In all issues....
Admin Group : First Administrative Group  > Public Folder Tree Database assignment is empty.
0
 

Accepted Solution

by:
TMCITDept earned 0 total points
ID: 40063078
Soooo, as it turns out the issue was a missing Public Folder > System Public Folders > OFFLINE ADDRESS BOOK > Exchange Administrative Group property:  Replication server/partner not entered.
We deleted and created a new OAB just to start over. Adding that setting was the problem however. That setting is probably more obvious to those running separate CAS and Mail/Hub servers. Still needs to be present on the one box system however. Not sure why that wasn't drawing a flag though.
0
 

Author Closing Comment

by:TMCITDept
ID: 40073016
The reason is we figured it out ourselves.
0

Featured Post

Free Gift Card with Acronis Backup Purchase!

Backup any data in any location: local and remote systems, physical and virtual servers, private and public clouds, Macs and PCs, tablets and mobile devices, & more! For limited time only, buy any Acronis backup products and get a FREE Amazon/Best Buy gift card worth up to $200!

Join & Write a Comment

Exchange server is not supported in any cloud-hosted platform (other than Azure with Azure Premium Storage).
Marketers need statistics and metrics like everybody else needs oxygen. In this article we explain how to enable marketing campaign statistics for Microsoft Exchange mail.
In this video we show how to create a Contact in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Contact ta…
In this video we show how to create an Address List in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Organization >> Ad…

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now