Cross Forest Migration

Tools

1.  Microsoft Identity Lifecycle Manager (ILM) 2007 Feature Pack 1 (FP1) 
2. MIIS
3. FIM, other 3rd party dirsync tool, etc

2. Scripts

(a) This example configures the Availability service to retrieve per-user free/busy information on a Mailbox server in the target forest.

Get-MailboxServer | Add-ADPermission -Accessrights Extendedright -Extendedrights "ms-Exch-
EPI-Token-Serialization" -User "<Remote Forest Domain>\Mailbox servers"

Add-AvailabilityAddressSpace -Forestname ContosoForest.com -AccessMethod PerUserFB -UseServiceAccount:$true

(b) To configure bidirectional cross-forest availability, repeat these steps in the target forest.


If you choose to configure cross-forest availability with trust, and also choose to use a service account (instead of specifying organization-wide or per-user credentials), you must extend permissions as shown in the example in the "Use the Shell to configure trusted cross-forest availability with a service account" section. Performing that procedure in the target forest gives Mailbox servers in the source forest permission to serialize the original user context.
(c) This example configures trusted cross-forest availability with a service account.
Get-MailboxServer| Add-ADPermission -Accessrights Extendedright -Extendedright "ms-Exch-EPI-Token-Serialization" -User "<Remote Forest Domain>\Exchange servers"

This example sets the organization-wide account on the availability configuration object to configure the access level for free/busy information in the target forest
Set-AvailabilityConfig -OrgWideAccount "Contoso.com\User"

This example adds the Availability address space configuration object for the source forest.
$a = Get-Credential (Enter the credentials for organization-wide user in Contoso.com domain)
Add-AvailabilityAddressspace -Forestname Contoso.com -Accessmethod OrgWideFB -Credential:$a


From Microsoft Technet : http://technet.microsoft.com/en-us/library/bb125182(v=exchg.150).aspx









from Blog :http://blogs.technet.com/b/ucedsg/archive/2010/04/22/how-does-federated-calendar-sharing-work-in-exchange-2010.aspx



Four things needed to get you started:

1) Obtain a X.509 certificate from a Trusted Root CA (GoDaddy, Entrust, etc) for use with Microsoft Federation Gateway (MFG) for signing and encrypting delegation tokens.  (more here). Here is a list of Trusted Root CAs that MFG is aware of here.

2) Create a Federation Trust using cmdlet with the MFG (more here):

New-FederationTrust

3) Provide domain ownership by creating a DNS TXT record similar to (more here):

Contoso.com IN TXT AppId = 1C2

4) Add your SMTP domains (other Exchange Orgs) and add Federated domains to trust calendar information with (other org must accept) using cmdlet (more here):

Set-FederatedOrganizationIdentifier  - to enable your SMTP domains for federation sharing with the MFG

Add-FederatedDomain – to add other External Orgs to share calendar information with

The trust relationship between this workstation and the Primary domain failed

Issue : The trust relationship between this workstation and the Primary domain failed

Resolution : 

On Windows Server 2008 R2

Login to machine with local admin account and open Windows Shell "Run as Administrator" 

and run this command and then log off and try login with Domain credentials

NETDOM RESETPWD /Server:enteryourDCFQDN /UserD:domain\accountwithprivilege  /PasswordD:enteryourpassword

Alternatively, you can run the following command from shell also

Reset-ComputerMachinePassword -server yourDCFQDN -confirm

and for WINDOWS 7
Disjoin and Join Computer from Domain and that will resolves the issue

RpcClientAccessServer Exchange 2010 FAQ

Why there is a "Microsoft Exchange RPC Client Access" service in CAS and MBX server ?

Public folder connections from an Outlook client occur against the RPC Client Access service on the Mailbox server role. It is optional on a Mailbox server, only required for Outlook public folder access. 

How to point RPC Cas service  to Newly created Database ?

Get-Mailboxdatabase | Set-Mailboxdatabase -RpcClientAccessServer "CASArrayname.domain.com"

Setting Static RPC ports for MAPI and Directory Access ?
By default you need to open the TCP 135 EndPointMapper and the Dynamic RPC range TCP 1024-65535 between your internal Client network and the CAS server or Arrays and your Mailbox servers.

On CAS servers, for Mailbox connections, add D-Word “TCP/IP Port" and set the value 55000, 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSExchangeRpc\ParametersSystem

also from

Microsoft.exchange.addressbook.service.exe.config 

Open the file in Notepad and then change the “RpcTcpPort” value from the default assignment of “0” to the port you want Outlook clients and Exchange to use for the directory access via the NSPI EndPoint. In this article we use port 55001.

Unicast Mode

With the WNLB cluster configured in unicast mode, the MAC address of each server’s network adapter will be changed to a virtual cluster MAC address, which is the MAC address that will be used by all servers in the Windows NLB cluster. When unicast mode is enabled, clients can only connect to the servers via the VIP address on the network interface card (NIC) that has been configured with the cluster MAC address.

Multicast mode

With the Windows NLB cluster configured in multicast mode, a multicast MAC address is added to the cluster adapter of each server in the cluster. Note that I write “is added”, as each server will retain their original MAC address.

A Windows NLB cluster, no matter what mode it is configured in, works with just a single network adapter installed in each server, but it is recommended to install a second network adapter in each server, in order to achieve optimal performance, and to separate ordinary and cluster related network traffic.

So what mode should I use for my Exchange 2010 CAS array and how many network adapters should I install in each Client Access server? Well, a best practice recommendation is to install two network adapters and use unicast mode, so that the host and cluster network traffic are separated on their own respective network interface. However, if you only have the option of installing one NIC in each CAS server or if you’re forced to using multi-cast mode because of the switches used in your organization, you should pick multicast mode.

"Your Exchange Server Configuration is not supported" Error Code 3

Exchange 2013 and Sharepoint 2013
--------------------------------------
While configuring Site mailbox for Sharepoint 2013 and Exchange 2013 as per Technet Article, Configure site mailboxes in SharePoint Server 2013


and after running scripts, 

(a) .\Set-SiteMailboxConfig.ps1 -ExchangeSiteMailboxDomain domain.com –ExchangeAutodiscoverdomain autodiscover.domain.com -WebApplicationUrl https://SharepointserverFQDN -Force

Things need to take care in the above command for Switch
 -ExchangeSiteMailboxDomain      should be mentioned DomainFQDN and in option 
-ExchangeAutodiscoverDomain,     it should be Autodiscover domain

To findout Autodiscover domain, Run the following command from Exchange Management Shell

(a) Test-OutlookWebServices -id emailaddress.com

(b) Get-WebServicesVirtualDirectory

and 

(b) "Test E-Mail Autoconfiguration" from Outlook

And then run the following Scripts

(b) .\Configure-EnterprisePartnerApplication.ps1 -ApplicationType Sharepoint –AuthMetadataUrl  https://sharepointFQDN.domain.com/_layouts/15/metadata/json/1

we are getting error

The Hub Site Mailbox
 "Your Exchange Server Configuration is not supported"

Correlation ID : 3e55a09c-fc49-8040-e119-a2722ea02855, Error Code 3

Please note that Correlation ID might be different for each Sharepoint Site so good to be looked into the Error Code

In my case, i found out that .\Set-SiteMailboxConfig.ps1 Script switch -ExchangeSiteMailboxDomain "Email address" , Changing the switch ExchangeSiteMailboxDomain to "Domain.com", 

It Resolves the issue

What Is RPC

What Is RPC?

RPC is an interprocess communication (IPC) method that is used by clients and servers to communicate with each other. Simply put, RPC is used by programs, typically on a client computer, to execute a program on a server computer. For example, Microsoft® Outlook® clients communicate with Microsoft Exchange Server using RPC. The client computer sends a message to the server computer with certain arguments. The server responds to the client with a message that contains the results of the executed program.

Integral to this process is the endpoint—the name, port, or group of ports on a computer that is monitored by a server for incoming client requests. More specifically, it is a network-specific address of a server process that is used for RPCs.

The Endpoint Mapper, which is part of the RPC subsystem, is responsible for responding to the clients’ requests to resolve dynamic endpoints. In some situations, Endpoint Mapper is also responsible for dynamically assigning endpoints to servers.

Another important RPC component is the Locator Service. It maintains a list of RPC services and servers on the network. A Windows® client connects to the domain controller over the Server Message Block (SMB) ports (TCP 139 and 445) and searches for RPC services or servers through the Locator Service.

Most built-in Windows services communicate with each other using RPC. For example, certificate services, DCOM, FRS, MSMQ, MAPI, and Active Directory® Replication Service use RPC for communication. Therefore, if the RPC service is not functioning properly on a network, you may experience any number of communication problems.

from : http://technet.microsoft.com/en-us/magazine/2007.07.howitworks.aspx

Exchange 2010: How to Delete the First Database and Move the System Mailboxes

Before removing the Last Database from the system Confirm the location
(a) Transaction log file

(b) Catalogue file

The First database contains the SystemMailboxes which are the Arbitration mailbox(es).

We have to move these system mailboxes to another database before of remove the Default Database.

1. Find the Arbitration Mailbox using the Exchange Management Shell (EMS):

Get-Mailbox -Arbitration | Where {$_.Name -like "SystemMailbox*" } | ft –wrap

2. Now create a new move request in order to move the system mailboxes to another mailbox database:

New-MoveRequest -Identity "SystemMailbox{1f05a927-32d1-4e19-8ea5-67eba859f541-yourGUID}" -TargetDatabase "dbxxxx"

3. Verify whether the move request completed:

Get-MoveRequest

4. Now remove the move request

Remove-MoveRequest -Identity "the name of the request like Microsoft Exchange Approval Assistant"

Exchange 2007 SP3 Rollup 13 "Microsoft Information store" Crashes

Issue
=================
In Exchange 2007 environment, Single box holds Hub, CAS, MBX roles is installed with SP3 Rollup 13

OS: Microsoft Windows Server 2003 R2 Enterprise Edition x64, Service pack 2

Microsoft Information store is crashing within 2-3 Minutes and on checking the Application log shows the following Event id 



Event Type:       Error
Event Source:       MSExchangeIS
Event Category:       General
Event ID:       9659
Date:             7/1/2014
Time:             12:15:50 PM
User:             N/A
Computer:       computername
Description:
The Microsoft Exchange Information Store encountered an unexpected exception 0xC0000005 at address 00000001403B8C4B while processing a request for user NETWORK SERVICE.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 45 00 63 00 44 00 6f 00   E.c.D.o.
0008: 52 00 70 00 63 00 45 00   R.p.c.E.
0010: 78 00 74 00 32 00 00 00   x.t.2...
0018: 5b 44 49 41 47 5f 43 54   [DIAG_CT
0020: 58 5d 00 00 0e 02 00 00   X]......
0028: ff 4c 0d 00 00 00 00 00   ÿL......
0030: 00 03 00 02 00 00 b9 8e   ......¹Ž
0038: 00 10 0f 01 04 80 d3 15   .....€Ó.
0040: 40 10 0f 01 04 80 a9 fe   @....€©þ
0048: 00 10 ec 03 00 00 71 5d   ..ì...q]
0050: 40 10 ec 03 00 00 d2 55   @.ì...ÒU
0058: 60 20 0f 01 04 80 00 80   ` ...€.€
0060: 6f 67 0f 01 04 80 f1 5e   og...€ñ^
0068: 40 10 0f 01 04 80 1c 41   @....€.A
0070: 00 10 0f 01 04 80 49 9a   .....€Iš
0078: 00 10 0f 01 04 80 49 da   .....€IÚ
0080: 40 10 0f 01 04 80 1c 6c   @....€.l
0088: 00 10 94 00 00 00 1c 5c   ..”....\
0090: 00 10 0f 01 04 80 b9 8e   .....€¹Ž
0098: 00 10 0f 01 04 80 d3 15   .....€Ó.
00a0: 40 10 0f 01 04 80 a9 fe   @....€©þ
00a8: 00 10 0f 01 04 80 d2 55   .....€ÒU
00b0: 60 20 0f 01 04 80 40 00   ` ...€@.
00b8: 8f 66 0f 01 04 80 d2 55   f...€ÒU
00c0: 60 20 0f 01 04 80 02 01   ` ...€..
00c8: 80 38 0f 01 04 80 ac 1a   €8...€¬.
00d0: 40 10 0f 01 04 80 d2 55   @....€ÒU
00d8: 60 20 0f 01 04 80 02 01   ` ...€..
00e0: 80 38 0f 01 04 80 ac 1a   €8...€¬.
00e8: 40 10 0f 01 04 80 1c 41   @....€.A
00f0: 00 10 0f 01 04 80 1c 41   .....€.A
00f8: 00 10 0f 01 04 80 49 9a   .....€Iš
0100: 00 10 0f 01 04 80 49 da   .....€IÚ
0108: 40 10 0f 01 04 80 1c 6c   @....€.l
0110: 00 10 0f 01 04 80 1c 5c   .....€.\
0118: 00 10 0f 01 04 80 b9 8e   .....€¹Ž
0120: 00 10 0f 01 04 80 d3 15   .....€Ó.
0128: 40 10 0f 01 04 80 a9 fe   @....€©þ
0130: 00 10 0f 01 04 80 1c 79   .....€.y
0138: 00 10 0f 01 04 80 49 9a   .....€Iš
0140: 00 10 0f 01 04 80 49 da   .....€IÚ
0148: 40 10 0f 01 04 80 1c 6c   @....€.l
0150: 00 10 0f 01 04 80 1c 5c   .....€.\
0158: 00 10 0f 01 04 80 b9 8e   .....€¹Ž
0160: 00 10 0f 01 04 80 d3 15   .....€Ó.
0168: 40 10 0f 01 04 80 a9 fe   @....€©þ
0170: 00 10 0f 01 04 80 1c 41   .....€.A
0178: 00 10 0f 01 04 80 49 9a   .....€Iš
0180: 00 10 0f 01 04 80 49 da   .....€IÚ
0188: 40 10 0f 01 04 80 1c 6c   @....€.l
0190: 00 10 0f 01 04 80 1c 5c   .....€.\
0198: 00 10 0f 01 04 80 b9 8e   .....€¹Ž
01a0: 00 10 0f 01 04 80 d3 15   .....€Ó.
01a8: 40 10 0f 01 04 80 a9 fe   @....€©þ
01b0: 00 10 0f 01 04 80 b4 34   .....€´4
01b8: 40 10 bd f9 ff ff b4 34   @.½ùÿÿ´4
01c0: 40 10 bd f9 ff ff c0 1c   @.½ùÿÿÀ.
01c8: 40 10 0f 01 04 80 c8 10   @....€È.
01d0: 40 10 0f 01 04 80 c1 1d   @....€Á.
01d8: 40 10 0f 01 04 80 48 16   @....€H.
01e0: 40 10 0f 01 04 80 1c 41   @....€.A
01e8: 00 10 0f 01 04 80 49 9a   .....€Iš
01f0: 00 10 0f 01 04 80 49 da   .....€IÚ
01f8: 40 10 0f 01 04 80 1c 6c   @....€.l
0200: 00 10 0f 01 04 80 1c 5c   .....€.\
0208: 00 10 0f 01 04 80 b9 8e   .....€¹Ž
0210: 00 10 0f 01 04 80 d3 15   .....€Ó.
0218: 40 10 0f 01 04 80 a9 fe   @....€©þ
0220: 00 10 0f 01 04 80 d2 55   .....€ÒU
0228: 60 20 0f 01 04 80 40 00   ` ...€@.
0230: 8f 66 0f 01 04 80         f...€  


Event Type:       Error
Event Source:       MSExchange Common
Event Category:       General
Event ID:       4999
Date:             7/1/2014
Time:             12:15:50 PM
User:             N/A
Computer:       computername
Description:
Watson report about to be sent to dw20.exe for process id: 5236, with parameters: E12N, c-rtl-AMD64, 08.03.0348.001, store.exe, store.exe, 3b8c4b, c0000005, b5d1, 08.03.0348.001.  ErrorReportingEnabled: True

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.



Event Type:       Error
Event Source:       Microsoft Exchange Server
Event Category:       None
Event ID:       5000
Date:             7/1/2014
Time:             12:15:50 PM
User:             N/A
Computer:       computername
Description:
EventType e12n, P1 c-rtl-amd64, P2 08.03.0348.001, P3 store.exe, P4 store.exe, P5 3b8c4b, P6 c0000005, P7 b5d1, P8 08.03.0348.001, P9 NIL, P10 NIL.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 65 00 31 00 32 00 6e 00   e.1.2.n.
0008: 2c 00 20 00 63 00 2d 00   ,. .c.-.
0010: 72 00 74 00 6c 00 2d 00   r.t.l.-.
0018: 61 00 6d 00 64 00 36 00   a.m.d.6.
0020: 34 00 2c 00 20 00 30 00   4.,. .0.
0028: 38 00 2e 00 30 00 33 00   8...0.3.
0030: 2e 00 30 00 33 00 34 00   ..0.3.4.
0038: 38 00 2e 00 30 00 30 00   8...0.0.
0040: 31 00 2c 00 20 00 73 00   1.,. .s.
0048: 74 00 6f 00 72 00 65 00   t.o.r.e.
0050: 2e 00 65 00 78 00 65 00   ..e.x.e.
0058: 2c 00 20 00 73 00 74 00   ,. .s.t.
0060: 6f 00 72 00 65 00 2e 00   o.r.e...
0068: 65 00 78 00 65 00 2c 00   e.x.e.,.
0070: 20 00 33 00 62 00 38 00    .3.b.8.
0078: 63 00 34 00 62 00 2c 00   c.4.b.,.
0080: 20 00 63 00 30 00 30 00    .c.0.0.
0088: 30 00 30 00 30 00 30 00   0.0.0.0.
0090: 35 00 2c 00 20 00 62 00   5.,. .b.
0098: 35 00 64 00 31 00 2c 00   5.d.1.,.
00a0: 20 00 30 00 38 00 2e 00    .0.8...
00a8: 30 00 33 00 2e 00 30 00   0.3...0.
00b0: 33 00 34 00 38 00 2e 00   3.4.8...
00b8: 30 00 30 00 31 00 2c 00   0.0.1.,.
00c0: 20 00 4e 00 49 00 4c 00    .N.I.L.
00c8: 20 00 4e 00 49 00 4c 00    .N.I.L.
00d0: 0d 00 0a 00               ....    




Event Type:       Error
Event Source:       Application Error
Event Category:       (100)
Event ID:       1000
Date:             7/1/2014
Time:             12:15:56 PM
User:             N/A
Computer:       computername
Description:
Faulting application store.exe, version 8.3.348.1, faulting module store.exe, version 8.3.348.1, fault address 0x00000000003b8c4b.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74   Applicat
0008: 69 6f 6e 20 46 61 69 6c   ion Fail
0010: 75 72 65 20 20 73 74 6f   ure  sto
0018: 72 65 2e 65 78 65 20 38   re.exe 8
0020: 2e 33 2e 33 34 38 2e 31   .3.348.1
0028: 20 69 6e 20 73 74 6f 72    in stor
0030: 65 2e 65 78 65 20 38 2e   e.exe 8.
0038: 33 2e 33 34 38 2e 31 20   3.348.1
0040: 61 74 20 6f 66 66 73 65   at offse
0048: 74 20 30 30 30 30 30 30   t 000000
0050: 30 30 30 30 33 62 38 63   00003b8c
0058: 34 62                     4b      



To resolve this issue
===============

researching on issue, suggests you install Latest update and since Windows Server is x64 bit so /4GB switch is also not an option to check. 

Found no Antivirus or any third party device except Storage driver and NIC driver

EXBPA is also not helping indicating towards any issues.

Increased the diagnostic logging on MsExchange Store to expert from EMC, alternatively you can also increased the diagnostic logging from Registry key or from EMS.

From Shell
Set-EventlogLevel "servername\MsExchange Store Driver" -Level Expert

I stopped all the Exchange related service on the server and restarted the Information store, It's not crashing so i have to find what could be causing the crash.
Since the only Exchange related service is running is "information store" so thought of starting Transport Service

Now, Started Transport service, MSExchange store Crashed, so changed the "Data" folder under Transport Roles, Location could be "Microsoft\Exchange server\Transport Roles\Data\Queue" so here i renamed the Data folder to "Old Data" and restart Transport service, no issues now, MsExchange Information Store is not crashing

Gradually started all the services and information store is not crashing.