Exchange 2016: AuditStorageState could not be converted to the AuditStorageState type

Today a mailbox on Exchange 2016 greeted me with the following error message: Here is the exact wording of the message: The object "frankysweb.de/user/NoReply" has been corrupted or is not compatible with Microsoft support requirements and is in an inconsistent state. The following validation error: The AuditStorageState property could not be converted to the AuditStorageState type. Error converting the string ... Read more

Exchange 2016: Certificate Wizard for Let's Encrypt

I had already announced that the certificate wizard would receive an update for Let's Encrypt. The version for Exchange 2016 is now ready. The certificate wizard can fetch a certificate from Let's Encrypt with just a few entries and then renew it fully automatically. I have tested this script so far with Windows Server 2016 and Exchange Server 2016. Tests ... Read more

Exchange 2016: Renew Let's Encrypt certificate

In a previous article, I already described how the free Let's Encrypt certificates can be requested and assigned to Exchange services using PowerShell. I am currently working on automating the entire process from requesting the Let's Encrypt certificate to automatic renewal using PowerShell. The goal is a fire-and-forget script for the Exchange certificates, let's ... Read more

Exchange 2016: Comprehensive white paper on Autodiscover

Every day I receive emails from readers with questions and problems that are largely due to Autodiscover and/or incorrect certificates. This whitepaper is intended to help administrators understand and correctly configure Autodiscover, as it is an important part of Exchange Server without which the connection of Outlook and other devices would not work. The idea for ... Read more

Apple, ActiveSync and StartCom / StartSSL / WoSign

I am currently receiving a lot of inquiries about ActiveSync and Apple devices. Apple devices do not want to establish an ActiveSync connection with Exchange using the integrated Mail app. So if you find your environment in the following description, you will run into the problem described: Apple devices with the integrated mail app (iPhone, iPad) The SSL certificate comes from StartCom / StartSSL ... Read more

Determine Exchange Server PatchLevel

Unfortunately the Exchange 2010 Shell is not reliable, if you want to find out which patch level the Exchange Server has, the Exchange Shell always returns the build 123.4: In the Exchange 2010 Shell only the last service pack for Exchange 2010 is displayed (SP3), but not the update rollup packages: A better method ... Read more

Exchange 2016: Configure URLs and hostnames via PowerShell

To specify the URLs and hostnames of an Exchange 2016 server, the following script can be used: #Hostname for Exchange Webservices, OWA, Outlook Anywhere, Active Sync: $OutlookHostname = "outlook.frankysweb.de" #Hostname for Autodiscover: $AutodiscoverHostname = "autodiscover.frankysweb.de" #OWA $owa = "https://" + "$OutlookHostname" + "/owa" write-host "OWA URL:" $owa Get-OwaVirtualDirectory -Server $env:computername | Set-OwaVirtualDirectory -internalurl $owa -externalurl $owa ... Read more

Exchange 2016: Determine DNS names for certificates (Quick & Dirty)

The DNS names of the configured URLs of the virtual Exchange directories are relevant for the SSL certificate. The corresponding DNS names must be available on the certificate as SAN (Subject Alternate Name). This small script lists all configured DNS names of the Exchange 2016 servers. This allows the certificate to be requested and issued accordingly. $AllExchangeServers = Get-ExchangeServer foreach ($ExchangeServer in $AllExchangeServers) ... Read more

Exchange 2016: Free certificates from Let's Encrypt

Foreword The certification authority Let's Encrypt has been offering free certificates for some time now. I wrote an article on this topic back in December 2015, but the Windows client wasn't working reliably at the time, so I had to take a detour via a Linux computer. A little over a year has now passed and I have ... Read more

Exchange 2016: Is RPCoverHTTP still needed?

RPCoverHTTP, better known as Outlook Anywhere, was introduced with Exchange Server 2003. RPCoverHTTP is used to connect Outlook to Exchange Server without a VPN, but it was not always easy to realize or implement. Essentially, RPCoverHTTP tunnels the remote procedure calls via the http protocol to transport RPC over the Internet. The ... Read more