Pat Spencer

Friday, March 28, 2014

Exchange 2013 SP1, New Install

Problem:

Error message pops up when attempting to edit user.

The issue was created by my having changed the default OU for the creation of new users.

Fix:
Return the default location for Users:
redirusr "cn=Users,dc=domain,dc=local"

Exchange 2013: Remote host said: 451 4.7.0 Temporary server error.

Exchange 2013 SP1, New install

Problem:
Exchange 2013: Remote host said: 451 4.7.0 Temporary server error. Please try again later. PRX2

The server used were a multi-role server and found as this is a bug in the program.

The fix:

1. Create host file entries on the server with two names: server,server.domain.local

2. Restart “Microsoft Frontend Transport” and “Microsoft Exchange Transport” services

Tuesday, March 4, 2014

Microsoft PKI (Certificate Authority) Migrations

Excellent articles on Migrating CA's

Microsoft "by the book"
AD CS Migration: Migrating the Certification Authority
http://technet.microsoft.com/en-us/library/ee126140(WS.10).aspx#BKMK_GrantPermsAIA
(Note: This has confusing references to either leaving the CA Server name the same or changing it)
Moving Your Organization from a Single Microsoft CA to a Microsoft Recommended PKI
http://blogs.technet.com/b/askds/archive/2010/08/23/moving-your-organization-from-a-single-microsoft-ca-to-a-microsoft-recommended-pki.aspx
Migrating Windows Certificate Authority Server from Windows 2003 Standard to windows 2008 Enterprise Server
http://smtpport25.wordpress.com/2010/01/16/migrating-windows-certificate-authority-server-from-windows-2003-standard-to-windows-2008-enterprise-server/
(Note that this is full of little typos, but looks like a simple solution to a simple scenario.
Be sure and read the feedback though, and there are lots of unanswered questions).

AD Upgrade Articles

Excellent Articles on AD Upgrades:

Upgrading an Active Directory Domain from Windows Server 2003 or Windows Server 2003 R2 to Windows Server 2012
https://msmvps.com/blogs/mweber/archive/2012/07/30/upgrading-an-active-directory-domain-from-windows-server-2003-or-windows-server-2003-r2-to-windows-server-2012.aspx
Group Policy Settings Reference for Windows and Windows Server
http://www.microsoft.com/en-us/download/details.aspx?id=25250

How-to Transfer FSMO roles using powershell

Excellent article on how to transfer FSMO roles using powershell
http://thelazyadmin.com/2013/08/managing-fsmo-roles-with-powershell/

Summary:
Netdom query fsmo
Move-ADDirectoryServerOperationMasterRole -Identity “Target_DC_Name” –OperationMasterRole 0,1,2,3,4