Solved

Post Exchange Upgrade cleanup issues

Posted on 2014-04-15
20
564 Views
Last Modified: 2014-05-18
Hi Folks,
We upgraded late last year from Exchange 2007 to 2010. Mostly things seemed to go as expected but somewhere we got off-track in the post-upgrade clean-up type things.

We are fairly vanilla environment: had one 2007 Mailbox/HT Server and a separate CAS server. Now all roles on one 2010 server.
Is it a problem that the old "First Administrative Group" is still present in AD somehow?

So a few symptoms:

Getting replication errors. We migrated Public Folders to new hotness during the appropriate time in the upgrade. Still get 4030 errors stating things like
Process Microsoft.Exchange.InfoWorker.Common.Delayed`1[System.String]: Unable to find any replicas for free/busy folder EX:/o=NetBIOS_domain/ou=First Administrative Group.
We followed the steps to decommission the old 2007 as per MS and various articles on the interwebs. Very carefully. The old servers were uninstalled and turned off. (Still in rack ;-)

We have two GALs curiously enough. One called "Default Global Address List" and one called "MyCo Global Address List". One appears to be legacy maybe 'cuz the First Admin Group is still around?
When running this:   Update-GlobalAddressList -Identity "Default Global Address List" -DomainController "MyDC"
I get this:   WARNING: The recipient "FQDN/Microsoft Exchange System Objects/Offline Address Book - First Administrative Group" is invalid and couldn't be updated.
If I run this same command using the other GAL name (MyCo Global Address List) it appears to work.

New users (ones created since upgrade) appear in the All Users (address list) distribution group and in the GAL but not in the OAB. Is it prudent to clean up the ADSI before deleting and recreating another OAB? Seems to me we did this once before in Dec13 which not coincidently is the modified date of the OAB files.

So...I have seen Microsoft's recommendation is NOT to rip out the old "First Administrative Group" or edit things in ASDI all willy nilly but something is not quite right. Any guidance?

Thanks, Jeff
0
Comment
Question by:TMCITDept
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 13
  • 7
20 Comments
 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 40003722
First - don't touch the Default admin group, as that can cause you problems.
Sounds like the GAL and then probably the associated OAB isn't behaving itself. Therefore I would simply recreate the lot - new GAL, new OAB and delete the existing.

After recreating the OAB, check the distribution methods - if you are Outlook 2007 and exclusively use web only. Don't forget to set the correct OAB on each database you may have.

Once you have created both, run get-offlineaddressbook | update-offlineaddressbook to force a regeneration of the OAB in to the correct places.

Simon.
0
 

Author Comment

by:TMCITDept
ID: 40004937
Thanks Simon. Seems part of the issue here is the Default Global Address List is boogered up (see above error when attempting to update it) and one is not allowed to modify or delete it.
The second one I have appears to be working fine and I suppose I can delete my OAB and attempt to associate it with the second (working) GAL called MyCo Global Address List.
However am I then to live forever with a broken Default GAL?
Jeff
0
 

Author Comment

by:TMCITDept
ID: 40005216
okay, I deleted the second GAL and the OAB. Recreated a new OAB. Updated new OAB.
New OAB doesn't appear to be working. Files in the C:\Program Files\Microsoft\Exchange Server\V14\ClientAccess\OAB folder are now gone. No new ones have appeared in the subsequent hours. Will check in the AM, I suppose.
Outlook (cached mode) clients are getting this error attempt to download new OAB: 0x80190194   probably 'cuz there is nothing to download currently...
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 40006011
Did you force the OAB to generate?

get-offlineaddressbook | update-offlineaddressbook

Did you set the OAB on the properties of the databases?

Simon.
0
 

Author Comment

by:TMCITDept
ID: 40007593
Yes I did force the OAB to generate. >1x.
No I hadn't set the OAB on the DBs. Thank you, I forgot that step!
So I did that, re-forced the OAB update. >1x. Restarted the File Distro service.
Still no files in the ClientAccess\OAB directory.
Any other thoughts?

Jeff
0
 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 40008731
Sounds like the distribution isn't working correctly.
Do you get any errors in the event log about 15-30 minutes after the OAB generation attempt (time depends on the number of users, more users, the longer it is).

Simon.
0
 

Author Comment

by:TMCITDept
ID: 40009504
Yes. Getting the 9331 and 9335 events w/ error 80004005, in addition to a new boatload of performance counter 106 events/errors.
0
 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 40012180
Event log IDs on their own are close to useless.
Put the codes in to http://eventid.net/ and you will see how many variants of them there are. You need to post the entire entry.

Simon.
0
 

Author Comment

by:TMCITDept
ID: 40013237
Here's the error I get when trying to update content in PF Mgmnt Console for Exchange Admin Group:
--------------------------------------------------------
Microsoft Exchange Error
--------------------------------------------------------
Action 'Update Content' could not be performed on object 'EX:/o=domain/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)'.

EX:/o=domain/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)
Failed
Error:
Cannot start content replication against public folder '\NON_IPM_SUBTREE\OFFLINE ADDRESS BOOK\EX:/o=domain/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)' on public folder database 'Public Folders'.

MapiExceptionNoReplicaAvailable: StartContentReplication failed. (hr=0x80004005, ec=1129)
Diagnostic context:
    Lid: 1494    ---- Remote Context Beg ----
    Lid: 3010    StoreEc: 0x8004010F
    Lid: 3010    StoreEc: 0x8004010F
    Lid: 3650    StoreEc: 0x8004010F
    Lid: 18128   StoreEc: 0x469    
    Lid: 18536   StoreEc: 0x469    
    Lid: 18544   StoreEc: 0x469    
    Lid: 18560   StoreEc: 0x469    
    Lid: 18740   StoreEc: 0x469    
    Lid: 1267    StoreEc: 0x469    
    Lid: 33819   StoreEc: 0x469    
    Lid: 27225   StoreEc: 0x469    
    Lid: 1750    ---- Remote Context End ----
    Lid: 26322   StoreEc: 0x469    




--------------------------------------------------------
OK
--------------------------------------------------------
0
 

Author Comment

by:TMCITDept
ID: 40013248
Log Name:      Application
Source:        MSExchangeSA
Date:          4/16/2014 12:31:42 PM
Event ID:      9335
Task Category: (13)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      EMAIL.domain.com
Description:
OABGen encountered error 80004005 while cleaning the offline address list public folders under /o=domain/cn=addrlists/cn=oabs/cn=Offline Address Book.  Please make sure the public folder database is mounted and replicas exist of the offline address list folders.  No offline address lists have been generated.  Please check the event log for more information.
- \Offline Address Book
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="MSExchangeSA" />
    <EventID Qualifiers="49152">9335</EventID>
    <Level>2</Level>
    <Task>13</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-04-16T19:31:42.000000000Z" />
    <EventRecordID>118352</EventRecordID>
    <Channel>Application</Channel>
    <Computer>EMAIL.domain.com</Computer>
    <Security />
  </System>
  <EventData>
    <Data>80004005</Data>
    <Data>/o=domain/cn=addrlists/cn=oabs/cn=Offline Address Book</Data>
    <Data>\Offline Address Book</Data>
  </EventData>
</Event>
0
 

Author Comment

by:TMCITDept
ID: 40013252
Log Name:      Application
Source:        MSExchangeSA
Date:          4/16/2014 12:31:42 PM
Event ID:      9331
Task Category: (13)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      EMAIL.domain.com
Description:
OABGen encountered error 80004005 (internal ID 501038d) accessing the public folder database while generating the offline address list for address list '/'.
- \Offline Address Book
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="MSExchangeSA" />
    <EventID Qualifiers="49152">9331</EventID>
    <Level>2</Level>
    <Task>13</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-04-16T19:31:42.000000000Z" />
    <EventRecordID>118351</EventRecordID>
    <Channel>Application</Channel>
    <Computer>EMAIL.domain.com</Computer>
    <Security />
  </System>
  <EventData>
    <Data>80004005</Data>
    <Data>501038d</Data>
    <Data>/</Data>
    <Data>\Offline Address Book</Data>
  </EventData>
</Event>
0
 

Author Comment

by:TMCITDept
ID: 40013639
Note: I get those errors IMMEDIATELY after attempting to update OAB.
Thanks,
Jeff

Also of note, I ran a BPA and received some results indicating the Site Folder Server setting in AD contained "DEL"  which certainly seemed applicable. It had this for both Exchange and First Administrative Groups. I followed the instructions from TechNet to correct that on the Exchange Admin Group in ADSI....problem remains after a reboot.
0
 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 40017258
First - do you have any Outlook 2003 clients? If not then you can remove the public folder distribution of the OAB.

Simon.
0
 

Author Comment

by:TMCITDept
ID: 40018404
No we don't have any 2003 clients. And yes we would love to do away public folder distribution. It seems we have done that to some extent.
However that is a secondary point. I really need to get the OAB and GAL working via whatever method works. It was distributing OAB via web based for several months. It just wasn't updating. Now we aren't even getting an OAB at all. So we have moved backwards not forwards.
Do we have any thoughts on a course of action at this points?
0
 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 40018544
If you have no Outlook 2003 clients, go in to the OAB configuration and disable public folder distribution. Then check that the correct servers are listed as the distribution points.
Check the OAB virtual directory has the correct URLs on it.

Wait about 30 minutes, then do an Autodiscover test in Outlook.
http://semb.ee/adt

Confirm that the OAB distribution method is web based (it will show a URL) and not public folders.

Once that is confirmed as happening, and the URL being returned to the client is correctly, you can then troubleshoot further on why the OAB isn't generating correctly.

Simon.
0
 

Author Comment

by:TMCITDept
ID: 40019061
Yes we are not doing public dist. I never added/checked Public Dist after making a new OAB last week.
Yes the Autodiscover has the same url and sid/guid that ISS has and is the folder name in the V14\ClientAccess\OAB\ folder. The problem is that folder is empty. So yes I have been trying to troubleshoot why the OAB isn't generating correctly. Have any ideas?
Thanks,
Jeff
0
 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 40025940
The OAB generation error you have posted is trying to use public folders. Therefore you need to go back and check the configuration again.

Run the BPA from the toolbox and see what that flags.

Simon.
0
 

Author Comment

by:TMCITDept
ID: 40035699
As criticals....
It flags that my incoming and outgoing message size limits are too large.
And that Admin Group : First Administrative Group  > Site folder server deleted.
In all issues....
Admin Group : First Administrative Group  > Public Folder Tree Database assignment is empty.
0
 

Accepted Solution

by:
TMCITDept earned 0 total points
ID: 40063078
Soooo, as it turns out the issue was a missing Public Folder > System Public Folders > OFFLINE ADDRESS BOOK > Exchange Administrative Group property:  Replication server/partner not entered.
We deleted and created a new OAB just to start over. Adding that setting was the problem however. That setting is probably more obvious to those running separate CAS and Mail/Hub servers. Still needs to be present on the one box system however. Not sure why that wasn't drawing a flag though.
0
 

Author Closing Comment

by:TMCITDept
ID: 40073016
The reason is we figured it out ourselves.
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
This article outlines some of the reasons why an email message gets flagged as spam on a recipient's end.
To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…
Suggested Courses

617 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question