Config Helper » Exchange http://www.confighelper.com Technology Configuration and Support Site Thu, 30 Jun 2011 13:32:20 +0000 en hourly 1 http://wordpress.org/?v=3.2.1 Exchange Distribution List Owner Unable to Make Changes to Membership http://www.confighelper.com/2010/12/exchange-distribution-list-owner-unable-to-make-changes-to-membership.html http://www.confighelper.com/2010/12/exchange-distribution-list-owner-unable-to-make-changes-to-membership.html#comments Mon, 06 Dec 2010 11:38:01 +0000 admin http://www.confighelper.com/?p=165 Problem: When the owner of a distribution list is trying to update the membership through Outlook he receives a message that states, "Changes to the distribution list membership cannot be saved. You do not have sufficient permission perform this operation on this object."

This can be fixed quite easily. Open Active Directory Users and Computers and locate the security group that represents the distribution list. Right-click the object and choose Properties, then click the Managed By tab. Check the box that says "Manager can update membership list" and the user should now be able to make changes to the DL.

LIKE NEW 70-236: Microsoft Exchange Server 2007 Configuration LIKE NEW 70-236: Microsoft Exchange Server 2007 Configuration Paypal US $40.00 1h 54m
Microsoft Exchange Server 2010 Enterprise Microsoft Exchange Server 2010 Enterprise Paypal US $300.00 16h 19m
Microsoft Windows Advanced Server 2000 & 2002 Exchange SQL Host Commerce Biztalk Microsoft Windows Advanced Server 2000 & 2002 Exchange SQL Host Commerce Biztalk Paypal US $99.50 1d 16h 46m
Microsoft Exchange Server 2007 by Joshua Maher, Scott Lowe, Walter Glenn... Microsoft Exchange Server 2007 by Joshua Maher, Scott Lowe, Walter Glenn... Paypal 0 Bid US $8.99 1d 17h 31m
MICROSOFT T-SHIRT windows 7 exchange xp server 2008 MICROSOFT T-SHIRT windows 7 exchange xp server 2008 Paypal US $8.49 16d 14h 55m
MICROSOFT T-SHIRT windows 7 exchange xp server 2008 MICROSOFT T-SHIRT windows 7 exchange xp server 2008 Paypal US $8.49 16d 14h 55m
Learn Microsoft Exchange Server 2003 - IT Training Tutorial Learn Microsoft Exchange Server 2003 - IT Training Tutorial Paypal US $19.95 19d 18h 36m
MCSE Guide to Microsoft Exchange Server 2003 Administration by Larry... MCSE Guide to Microsoft Exchange Server 2003 Administration by Larry... Paypal US $19.99 2d 17h 51m
Microsoft Exchange Server 2003 Training Tutorial CD NEW Microsoft Exchange Server 2003 Training Tutorial CD NEW Paypal US $11.89 17d 11h 24m
MICROSOFT T-SHIRT windows 7 exchange xp server 2008 MICROSOFT T-SHIRT windows 7 exchange xp server 2008 Paypal US $8.49 16d 14h 55m
Powered by phpBay Pro
]]> http://www.confighelper.com/2010/12/exchange-distribution-list-owner-unable-to-make-changes-to-membership.html/feed 0 Global Address List Not Updating-Exchange Cached Mode Enabled http://www.confighelper.com/2010/07/global-address-list-not-updating-exchange-cached-mode-enabled.html http://www.confighelper.com/2010/07/global-address-list-not-updating-exchange-cached-mode-enabled.html#comments Fri, 02 Jul 2010 22:53:48 +0000 admin http://www.confighelper.com/?p=133 Changed to Active Directory accounts are not displiaing in the Global Address List when Cached Exchange Mode is enabled in Outlook. You notice that if you disable cached mode, close Outlook and re-open, then check the GAL everything is now updated.

Overview

This behavior was experienced by a user trying to update the Business Phone attribute in the GAL to display internal phone extensions of employees. The Active Directory Telephone number attribute for each user object was updated, but the GAL was not displaying the updated Business Phone extensions. At first this was believed to be a synchronization issue with cached mode because when cached mode was disabled the GAL would display the updated phone extensions, but a gaining a better understanding of the Offline Address Book will shed some light on this behavior.

Exchange Cached Mode

When you enable Exchange Cached Mode in Outlook a copy of your mailbox and the Offline Address Book (OAB) is copied to your local computer. This mode was created to counter slow network latency issues that would slow down Outlook because it was constantly connecting to the Exchange server. With cached mode enabled Outlook will use both the offline and online copies of your mailbox to deliver a better user experience with Outlook slowing to a crawl when doing simple tasks like switch to a different folder.

How the Offline Address Book Works in Exchange

Exchange generates the OAB files every24 hours, or once per day, at 5:00 am by default. You can force Exchange to update the OAB more frequently but it is not recommended. The Outlook client will check for updates to the OAB once every 24 hours, but each Outlook client might check for updates at a different time and therefore can have different a different version of the OAB. For example, the server will update the OAB at 5:00 am, but one Outlook client might check for updates at 10:00 am, but another client might not check until 5:00 pm. During that 7 hours the 2 clients would have different versions of the OAB.

When the Outlook client checks for updates to the OAB it will first attempt to download the differential files and not the full OAB in order to prevent network congestion, but if the differential files are greater than 1/8 of the size of the full OAB then Outlook will download the entire copy of the OAB. That might happen in the event that there have been a lot of updates to the directory in the past 24-48 hours, such as when an area code is changed and every user is affected.  Outlook can be forced to download the updated OAB by clicking on Tools>then Send/Receive> then click Download Address Book. You’ll have to close Outlook and re-open and it will start before the download will start. Keep in mind that this will only download the changes that occurred prior to 5:00 am when Exchange generated the updated Offline Address Book. If changes were made after Exchange generated the OAB, then you would have to force Exchange to update the OAB and then force Outlook to download the address book, but this practice is not recommended by Microsoft.

Troubleshooting OAB problems

If you are troubleshooting an issue and want to confirm whether you are looking at the Offline Address Book or if you are pulling the online address book there is a simple way to check. Open the Address Book and right-click on Global Address List, then click Properties. It will display The current server is: and then path. If the path is pointing to a local drive then you are obviously using the offline address files. If the path points to a domain controller then you are using the online copy of the address book. You can see examples of each below:

Local OAB

Offline Address Book Local Path

Online Global Address List

Online Global Address List ServerSummary

That about covers the basics of the Offline Address Book and how it is downloaded to Outlook from the Exchange Server. Hopefully this has helped you if you were unclear at all on how the OAB works in Exchange. If you have questions please leave them below and I will answer them or if you have a comment I also appreciate hearing those as well. Thanks for stopping by.

Microsoft Exchange Server 2010 Enterprise Microsoft Exchange Server 2010 Enterprise Paypal US $300.00 16h 19m
MCITP Design & Deploy Exchange Server 2010 Test 70-663 Exam 070-663 QA PDF+SIM MCITP Design & Deploy Exchange Server 2010 Test 70-663 Exam 070-663 QA PDF+SIM Paypal US $6.97 27d 6h 54m
Microsoft Exchange Server 2010 Best Practices (2010,... Microsoft Exchange Server 2010 Best Practices (2010,... Paypal US $29.99 8d 1h
NEW - Mastering Microsoft Exchange Server 2010 NEW - Mastering Microsoft Exchange Server 2010 Paypal US $18.08 6d 21m
Symantec Backup Exec 2010 R3 w/ 4 agents SERVER/SQL/EXCHANGE/ACTIVE DIRECTORY Symantec Backup Exec 2010 R3 w/ 4 agents SERVER/SQL/EXCHANGE/ACTIVE DIRECTORY Paypal US $1,500.00 16d 12h 53m
NEW Microsoft Exchange Server 2010 Standard Edition - 6 NEW Microsoft Exchange Server 2010 Standard Edition - 6 Paypal US $1,151.99 20d 16h 44m
MCTS 70-662 Exchange Server 2010 Configuring Exam 070-662 Test QA PDF+Simulator MCTS 70-662 Exchange Server 2010 Configuring Exam 070-662 Test QA PDF+Simulator Paypal US $6.97 9d 6h 4m
Microsoft Exchange Server 2010 Configuring 70-662 Exam Test Simulator & PDF Microsoft Exchange Server 2010 Configuring 70-662 Exam Test Simulator & PDF Paypal US $5.97 26d 9h 50m
Microsoft Exchange Server 2010 Administration Insta... Microsoft Exchange Server 2010 Administration Insta... Paypal US $26.24 29d 8h 47m
Microsoft Exchange Server 2010 NEW by Siegfried Jagott Microsoft Exchange Server 2010 NEW by Siegfried Jagott Paypal US $48.91 28d 22h 22m
Powered by phpBay Pro
]]> http://www.confighelper.com/2010/07/global-address-list-not-updating-exchange-cached-mode-enabled.html/feed 0 Smartphone unable to sync with Exchange http://www.confighelper.com/2009/12/smartphone-unable-to-sync-with-exchange.html http://www.confighelper.com/2009/12/smartphone-unable-to-sync-with-exchange.html#comments Wed, 16 Dec 2009 19:31:45 +0000 admin http://www.confighelper.com/?p=41 I recently encountered an issue while trying to sync a T-Mobile Dash Smartphone (with Windows Mobile 6 Standard) to an Exchange 2007 server. While researching the issue I noticed that many people were having the same problem. After finding a solution I thought it would be helpful to write out the steps I used to troubleshoot the issue and the solution that finally worked.


Kaspersky Mobile Security 9

Problem Overview

Using Exchange 2007 with SSL certificate from GoDaddy.com. You can successfully connect to OWA using a web browser. You configure Activesync on your Smartphone to sync email from your Exchange server to your phone. When ActiveSync tries to connect you receive the following error message:

The security certificate on the server is invalid. Contact your system administrator or ISP to install a valid certificate on the server and try again.
Support Code:
0x80072F0D

Knowing that the certificate worked fine when using a regular web browser I first wondered if the Godaddy certificate was not compatible with Windows Mobile 6. I checked the Microsoft Technet site on Windows Mobile 6 and Godaddy is listed as a trusted vendor. http://technet.microsoft.com/en-us/library/cc182295.aspx

Just to make sure, I re-installed the certificate using Godaddy’s instructions for installing an intermediate certificate, see below:
1. Click the Start menu and click Run.... Type mmc in the Run window and click OK to start the Microsoft Management Console (MMC).
2. In the Management Console, select File then Add/Remove Snap In.
3. In the Add or Remove Snap-ins dialog, click the Add button and then select Certificates.
4. Choose Computer Account then click Next.
5. Choose Local Computer, then click Finish.
6. Close the Add or Remove Snap-ins dialog and click OK to return to the main MMC window.
7. If necessary, click the + icon to expand the Certificates folder so that the Intermediate Certification Authorities folder is visible.
8. Right-click on Intermediate Certification Authorities and choose All Tasks, then click Import.
9. Follow the wizard prompts to complete the installation procedure.
10. Click Browse to locate the certificate file. Change the file extension filter in the bottom right corner to be able to select the file. Click Open after selecting the appropriate file.
11. Click Next in the Certificate Import Wizard.
12. Choose Place all certificates in the following store; then use the Browse function to locate Intermediate Certification Authorities. Click Next. Click Finish.
NOTE: If the Go Daddy Class 2 Certification Authority root certificate is currently installed on your machine you will need to disable it from the Trusted Root Certification Authorities folder.
13. Expand the Trusted Root Certification Authorities folder
14. Double-click the Certificates folder to show a list of all certificates.
15. Find the Go Daddy Class 2 Certification Authority certificate.
16. Right-click on the certificate and select Properties.
17. Select the radio button next to Disable all purposes for this certificate.
18. Click OK.
19. Repeat steps 13 to 18, using Starfield Class 2 Certificate Authority as the certificate name to disable.

Next, I verified that the OWA site was accessible using IE and that there were no certificate errors, which confirmed that the site was working and the server certificate was valid.

After re-installing the certificate the phone still would not sync so I called Godaddy. After trying several different troubleshooting steps the phone still was not working. They told me to download the file gd_iis_intermediates.p7b and to install that on the server and that should resolve the issue. I imported the p7b file using the same steps as above, but still not luck.

I read some posts that people were able to resolve this issue by coping the certificate to the phone by connecting it to a computer with ActiveSync installed and then manually installing the certificate. The suggested method was to connect to the OWA site, then to view the certificate and export it to a file, and then to copy that file to the phone. I tried this method first but it did not work.

The Solution
Finally I resolved the issue. I copied the gd_iis_intermediates.p7b file to the phone using ActiveSync and installed the certificate, on this phone all I had to do was click the certificate and it installed by itself. I disconnected the cable from the phone, launched ActiveSync and then initiated a sync. Boom! It finally started working. It prompted my that it would have to re-download everything again. This took some time, but I did not care because I was just happy to get it working. If you have any trouble getting to work at this point, verify that the gd_iis_intermediates.p7b file show up on the phone under Intermediate certificates. You can view the certificates by going to Settings, then Security, then Certificates.

<table cellpadding="0" cellspacing="0" border="0"><tr><td><img src="http://www.confighelper.com/images/0/" /><td></tr><tr><td><td></tr></table> ]]> http://www.confighelper.com/2009/12/smartphone-unable-to-sync-with-exchange.html/feed 1