© 2005 Global Knowledge Network, Inc. All rights reserved. Section 5: Advanced Operations Troubleshooting and Maintenance Scripting for Exchange Server.

© 2005 Global Knowledge Network, Inc. All rights reserved.

Section 5: Advanced Operations

Troubleshooting and Maintenance Scripting for Exchange Server 2003

Administrators Advanced Data Recovery Archiving Enhanced Mobility

Ultimate Exchange Server 2003:Heighten Security, Consolidation, and Availability


Section Objectives

After completing this section, you will be able to: Troubleshoot Microsoft Exchange servers Troubleshoot Microsoft Exchange clients List Exchange Server 2003 tools for troubleshooting Run the Microsoft Best Practice Analyzer for Exchange Server

2003 Connect to Microsoft Outlook Mobile Access Define the requirements for Microsoft ActiveSync Describe the Exchange Management Pack for Microsoft

Operations Monitor Explain Microsoft Windows Management Instrumentation and

ADSI Use scripts to administer Exchange Server 2003 Name the components that can be customized for Microsoft

Outlook Web Access

Knowledge Guide

5-2


Troubleshooting and Maintenance

Troubleshooting and maintenance should be methodical processes.

Maintenance is the first step in troubleshooting. Administrators’ value to organizations is often

measured in their knowledge or expertise with solving problems.

5-3


Troubleshooting Method

1. Identify the problem.

2. Perform a diagnosis.

3. Develop and implement the solution.

4. Verify that the solution worked.

5. Document the solution.

5-4


Network Connectivity (TCP/IP Basics) 5-5


Exchange Servers

Two categories of Exchange problems are: Performance problems Mail flow problems

5-7


Process

Performance Problems 5-7

Processor

Memory

Disk

Network interface card


Mail Flow Problems 5-13

Information store (store.exe, exsmtp.dll)

EXIPC (exipc.dll)

Local queue

Destinationqueue

Router: Linkstate or DNS

Active Directory

NTFS(ntfsdr.dll)

EXIFS(exifs.sys)

Advanced queuing (aquue.dll)

SMTP (smtpsvc.dll)

IIS (inetinfo.exe)

Routing/Queuing

Catagorizor (cat.dll)


Message-Handling Components 5-14

Component Description

aquue.dll Advanced Queuing Engine manages the queues used by SMTP.

cat.dllMessage Categorizer expands distribution lists and address resolution for every recipient of a message.

drviis.dll EXIPC Store driver.

exipc.dllAn instance of this dll exists in IIS and the Store processes. It is used to create a shared memory heap for circular queue communications between SMTPsvc.dll and the Exsmtp.dll (front-end/back-end).

exsmtp.dll Protocol stub on the information store for SMTP.

inetinfo.exe Parent process for all IIS services which includes SMTPSVC.

ntfsdrv.dll NTFS Store driver.

phatcat.dll Pre-categorizer and post categorizer.

store.exe Parent process for the Exchange ESE.


Troubleshooting Queues

Message pending submissionsMessages awaiting directory lookupMessages waiting to be routedLocal deliveryMessages with an unreachable destinationMessages queued for deferred deliveryDSN messages pending submissionFailed message retry

5-15


System Queue and Description 5-16

System Queue Description

DSN messages pending submission

This is where NDRs wait to be submitted to SMTP.

Failed message retry queue

Messages in this queue failed to be submitted to their destination queue. Corrupted messages can also end up in this queue.

Local delivery Messages in this queue are waiting to be submitted to the information store. A high number of messages in this queue could indicate storage subsystem problems. Check your disk storage for hardware-related problems.

Messages pending submissions

These are messages that have been accepted by SMTPSVC but have not been processed. If this queue fills up, make sure that the SMTPSVC is not competing for resources with another process, such as antivirus software or other high CPU processes.

Messages awaiting directory lookup

ImailMsg items wait in this queue while the categorizer is running. If this is filling up, then it is likely that address resolution is failing. Make sure your Global Catalog servers are available and the DNS has the correct SRV records registered.

Messages queued for deferred delivery

Older versions of Outlook use this queue when a user marks a message for deferred delivery. It can also be used as a holding area for messages that are looping due to improper SMTP configurations.

Messages waiting to be routed

Messages wait in this queue while the router determines the best route for the message. If this backs up, the router may be too busy calculating delivery restrictions.

Messages with an unreachable destination

Messages in this queue are not able to be delivered to the destination. Either the route cannot be determined, or no connectors are currently available to route over. This could be a DNS or link state problem.


Mailboxes

USER on DATE, TIMEThe message reached the recipient’s e-mail system, but delivery was refused. Attempt to resend the message. If it still fails, contact your system administrator.SERVER FQDN #5.2.1

5-17


Public Folders 5-19


Outlook Clients 5-21


Outlook Express

No connection could be made because the target machine actively refused it.The server could not be found. (Account:account name, POPserver:'mail', Error Number: 0x800ccc0d)Task 'server name - Sending and Receiving' reported error (0x800ccc0f): 'The connection to the server was interrupted. If this problem continues, contact your server administrator or Internet service provider (ISP). The server responded: ? K'Your server has unexpectedly terminated the connection. Possible causes for this include server problems, network problems, or a long period of inactivity. Account. account name, Server: 'server name', Protocol: POP3, Server Response: '+OK', Port: 110, Secure(SSL): N0, Error Number: 0x800ccc0fTask 'SMTP server name - Sending and Receiving' reported error (0x80042109): 'Outlook is unable to connect to your outgoing (SMTP) e-mail server. If you continue to receive this message, contact your server administrator or Internet service provider (ISP).'The operation timed out waiting for a response from the receiving (POP) server 0x8004210aA time-out occurred while communicating with the server 0x800ccc19

5-23


Outlook Web Access 5-25


Exchange Server 2003 Administrators’ Toolbox

5-26

Exchange Server 2003 Resource Kit (MSPress)Slipstick Systems

http://slipstick.com

Exchange Server 2003 Downloads http://microsoft.com/exchange/downloads

Microsoft Exchange Server TechCenterhttp://www.microsoft.com/technet/prodtechnol/exchange/default.mspx


Microsoft Exchange Server Best Practices Analyzer Tool

5-27


Exchange Management Pack for MOM 2005

5-28


Exchange Server 2003 Service Packs 5-29

1. Front-end servers

3. Management machines 2. Back-end servers

Applying service packsfor Exchange Server 2003


Scripting for Exchange Server 2003 Administrators

5-30

WMI scripts ADSI scripts

AD ObjectAdministration

SystemManagement

Contact

Computer

Server

Group

User

Policy

Printer

East


WMI and Exchange Server 2003

ExchangeClusterResourceExchangeConnectorStateExchangeLink ClassExchangeQueue ClassExchangeServerState ClassExchange_DSAccessDC ClassExchange_MessageTrackingEntry

ClassExchange_Server ClassExchange_FolderTree ClassExchange_Link ClassExchange_Mailbox ClassExchange_PublicFolder ClassExchange_Queue ClassExchange_QueueCacheReloadEvent

Class

Exchange_QueuedMessage ClassExchange_QueuedSMTPMessage

ClassExchange_QueuedX400Message

ClassExchange_QueueSMTPVirtualServer

ClassExchange_QueueVirtualServer ClassExchange_QueueX400VirtualServer

ClassExchange_ScheduleInterval ClassExchange_Server ClassExchange_SMTPLink ClassExchange_SMTPQueue ClassExchange_X400Link ClassExchange_X400Queue Class

5-31


ADSI and Exchange Server 2003 5-32

IAD

objUser


TechNet Script Repository 5-33


Advanced Data Recovery

Offline Data RecoverySnapshotsRecovery Storage GroupsRecover Mailbox DataMerge or Copy DataSchedule Recovery Mailbox Data TaskMailbox Data Recovery Task Summary

5-34


Offline Data Recovery

PowerControls (Ontrack Data Recovery)Recovery Manager for Exchange (Quest Software)

5-35


Ontrack PowerControls 5-35


Quest Recovery Manager for Exchange

5-36


Snapshots 5-37

Volume ShadowCopy Service

(VSS)

Snapshot

1.

2.

3.

4.

5.

6.

E00.log

E0000001.log

E0000002.log

Lock SG/read only

Release SG

Backupsoftware

(VSS Requestor)

Exchange Server2003

(writer)

Hardware orsoftware

(provider)


Recovery Storage Groups 5-39


Recover Mailbox Data 5-41


Merge or Copy Data 5-42


Schedule Recovery Mailbox Data Task

5-43


Mailbox Data Recovery Task Summary

5-44


Archiving

Some of the main reasons for archiving include: Server performance Knowledge management Elimination of storage limits Regulatory compliance

5-45


New Data Retention Model 5-46

All mailbox data stored on the Exchange server

Exchange server backups and restores take a long time

Limits are required

E-discovery is very difficult

X number of days e-mail resides on the Exchange server

> x mail is archived

Archive disk storage is less costly than Exchange server

No limits are required

The server performs better

E-discovery is possible and easy to do

DASstorage

DASNASSAN

DAS

Archivingsystem


Built-in Archiving

Create mailbox storeIndex mailbox storeCreate mailbox-enabled

userEnable archiving on

applicable mailbox stores

5-48


Third-Party Archiving Tools 5-49


Regulatory Compliance

Sarbanes-Oxley Act of 2002 (SOX)Health Insurance Portability and Accountability Act of 1996

(HIPAA)Archiving for Compliance:

Capture entire message, including the header, for all SMTP traffic.

Categorize archived messages for ease of administration. Capture metadata associated with every item in the archive. Store data on fixed media. Index the archive database. Provide advanced search and forensic tools. Incorporate single-instance storage and other performance

optimization features. Provide a secure means in which to control access to the

archive.

5-50


Enhanced Mobility 5-51


Outlook Mobile Access 5-52


ActiveSync Requirement

Exchange Server requirementsActive Directory requirementsWireless device requirements Internet connectivity and security requirements

5-53


OWA Administration 5-55


OWA Customization 5-57


OWA Example 5-58

© 2005 Global Knowledge Network, Inc. All rights reserved. Section 5: Advanced Operations Troubleshooting and Maintenance Scripting for Exchange Server.

Documents

global knowledge network

microsoft exchange servers

exchange ese

availability slide

maintenance troubleshooting

exchange management

microsoft activesync

information store