Avatar of Matthew Cioffi
Matthew Cioffi
Flag for United States of America asked on

Exchange 2010 old user returned

Hello,

We are running Small Business Server 2011 with Exchange 2010.  it has been patched and updated recently to the latest updates.

We had a user, AJ, that left the company 3 years ago.  His account was deleted a few months, maybe 6, after he left.  The mailbox was deleted and the AD User. when he returned we created the account as new and added a mailbox.   we are having some issues with people not being able to email him. we get hard bounces with what looks like and LDAP lookup string being the unknown address.

I have done some research and it points to the X500 address being wrong. everything I have used to find the proper legacy email DN has failed. i used a powershell command from the exchange management console, but that did not seem to work. all the examples I have read about don't quite line up with what I'm seeing. I was told to get the legacy info from ADSI, but I don't have the attribute tab.

Any suggestions that might help?

Thanks,
Matt.
ExchangeSBS

Avatar of undefined
Last Comment
Matthew Cioffi

8/22/2022 - Mon
ASKER CERTIFIED SOLUTION
timgreen7077

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
Michelangelo

This is a complete explanation but do skip to the point where the legacydn is buolt using the NDR and added as x500 to the proxy addresses
SOLUTION
Michelangelo

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
Matthew Cioffi

ASKER
So the NDR string that comes back can be converted and entered as another address.  Will that resolve the issue immediately or do I need to update the GAL?  

Also does it make sense that it failed using OWA from inside the network, but worked sending from Outlook on my Android phone?  

Also, can I see what the current legacy address is for the user,  I have read posts about looking at the attributes in the user panel. But I don't have that tab.
timgreen7077

this is not a GAL issue but outlook issue. if you delete the problem user's email address from your outlook autocomplete and get then get the address from the GAL you will be able to successfully send the email.

yes get the address from the NDR and convert it according to the link I sent you and then add to the email addresses on the problem mailbox and it should resolve your issue. It's not instant, you will still have to wait for the OAB to update.
This is the best money I have ever spent. I cannot not tell you how many times these folks have saved my bacon. I learn so much from the contributors.
rwheeler23
Michelangelo

@tmgreen Nope: the old legactexchangedn is stamped in emails too so you can get the very same error also replying to old emails or calendar invites.
timgreen7077

agreed in regards to applying to old emails, but I don't think that was the question the author asked. but I do agree.
Michelangelo

@matthew Also owa has cached addresses but activesync devices should not. So yes that should solve without updating the GAL when replying to old items
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
Michelangelo

@tim yes it applies because when reconnecting a disconnected mailbox the new user gets a new legacydn stamped
Matthew Cioffi

ASKER
So what about OWA, I thought it read from the OAB directly.  Some tests failed for OWA.

I'm trying to get a better handle on how all the various components work to get the proper address.

So basically, Outlook is caching the old X500 address and trying to send to that. The NDR has what it is trying to sens to, which is the old X500 address.

What about external sensors using outlook and auto fill?  Would they be using the old X500 as well or is it only inside the company, outlook clients with auto fill from before the address was deleted?
timgreen7077

they created a new mailbox according to the authors question. they didn't reconnect the original mailbox.
Experts Exchange is like having an extremely knowledgeable team sitting and waiting for your call. Couldn't do my job half as well as I do without it!
James Murphy
Matthew Cioffi

ASKER
Correct.

User and mailbox AJ was deteled.

Employee came back, user and mailbox Aj was created as new.
timgreen7077

owa can cache old addresses also based on usage, so if you use outlook alot owa will attempt to keep the uniformity and cache those addresses and can be cleared in owa also. x500 addresses are internal and and not external.
Michelangelo

I’ve seen it Only internal but sometimes external addresses get IMCEAX type address as sender (i believe they come off old exchange installs only).
I currently do have a similar issue that i’m finding hard to grasp fully so I would suggest you to proceed for incremental changes: first check that your issue is solved by adding these address as proxyaddresses, then come back eventually (note that this works  with my own issue but as solution it does not scale easily to hundred of thousand users because i find it hard looking at the tacking logs  to match a IMCEAEX address in the NDR with the related smtp  address the eamil was sent to - that may well be a question of its own, though.)
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
timgreen7077

Michelangelo

@tim  the fact that the mailbox was newly provisioned does not make any difference since it will have the same smtp address which is sued to retrieve cached items  and old emails, which in turn contain the old legacyexchangedn
Michelangelo

Besides, Sorry for all the typos, i’m writing from mobile and editing is a pain!
Your help has saved me hundreds of hours of internet surfing.
fblack61
Matthew Cioffi

ASKER
Thank you both VERY much.  The info was very informative and solved the problem.