How to give full access permissions for multiple users on Shared Mailbox in Exchange 2010

I have created a shared mailbox with name Team1 with email address Team1@contoso.com

Below are the list of users i need to provide full access on the shared mailbox "Team1"

User1
User2
User3

I have opened a notepad and pasted the list of users mentioned above and named the notepad as test.txt

Open another notepad and copy the code mentioned below and save it as mbx.ps1


$var1 = Read-Host "Type the file name" ### example.txt as an example
$var2 = Read-Host "Type the generic mailbox name to give full access" ### e.g. examplemailbox
Get-Content $var1 | foreach { Add-MailboxPermission $var2 -User $_ -AccessRights fullaccess}

Open EMS, navigate to the path where you have kept test.txt and mbx.ps1

I have saved the two files in desktop, so i have navigated to the location in EMS and ran .\mbx.ps1

Provided the file name which contains the user list.
Provided the Shared mailbox name on which i need to provide full access permission.

Unable to login to Blackberry Monitoring Console

The application has encountered a system error. Please report this error to the System Administrator.

Please return to the home page or log in again

The issue started suddenly where i am unable to login to the monitoring console.

The issue happened after restarting of the monitoring server.

I have verified the services on monitoring server were running up and fine.

Also i have checked on the blackberry enterprise servers on primary and stand by and found all are running fine.

I have stopped the blackberry AS on standby server and checked but still i am receiving the error.

Earlier i am using Chrome to open the monitoring console URL, now for checking i have opened the same in Internet Explorer and found i am able to login to the monitoring console successfully.

This confirms nothing wrong with the blackberry server end. Immediately i have completely closed all the tabs in chrome. I have opened the URL again the Chrome and as expected i am able to successfully login to the Blackberry Monitoring Console.

How to hide a distribution group in Exchange 2010

Use the below command to hide the distribution group from Global Address List in Exchange 2010

Set-DistributionGroup -Id "Distribution Group Name" -HideFromAddressListsEnabled $true

In future if you want to see the Distribution Group in Global Address List, use the below command

Set-DistributionGroup -Id "Distribution Group Name" -HideFromAddressListsEnabled $false

Exchange 2010 Sp3 Released

http://www.microsoft.com/en-us/download/details.aspx?id=36768

How to add a disclaimer in Exchange 2010

Open Exchange Management Console

Expand Organization Configuration -> Hub Transport -> Transport Rules

Click New Transport Rule from Action Pane (or) You can right click 

 

Fill the Name and Comment

In Conditions applying the scope for Inside the Organization

Appending disclaimer text and using a fallback action if unable to apply

Click finish to complete the process of creating a transport rule for disclaimer

I have tested the rule by sending an email from user1 to user2. It worked successfully as user2 can see the disclaimer text for the email received from user1.

How to check if someone deleted the user mailbox

I got a query from one of member from Exchange Team whether yesterday he deleted any user mailbox by mistake.

Exchange 2010 offers a feature called Administrator Audit Logging which facilitates recording of various Exchange Management Shell cmdlets executed in the Exchange Organization. Administrator audit logging keeps the information about the cmdlets that has been run in the Exchange Management Shell and Exchange Management Console in a log. It also records the cmdlets that are run through the Exchange Control Panel.

I ran the below command to verify if Audit logging is enabled or not

Get-AdminAuditLogConfig | fl

Output showed me that AdminAuditLoggingEnabled: True and also i have checked the agelimit AdminAuditAgelimit: 90.00:00:00 means till 90 days past entries will be present.

As the query is about "Remove-Mailbox"

Open EMS and type the below command

Search-AdminAuditlog -StartDate 02/06/2013 -EndDate 02/08/2013 -cmdlets "Remove-Mailbox"

Note: Here we would like to concentrate only for the 7th Feb logs

I found that the user details are not present in the output and hence i ran other command to prove that the exchange administrator removed only MailContact

Search-AdminAuditlog -StartDate 02/06/2013 -EndDate 02/08/2013 -cmdlets "Remove-MailContact"

Now i am able to see the user details and the administrator for the required date which he informed me.

Another approach is to use ECP -> Reporting -> Auditing -> Export the details by selecting the date range and select the user email address to send the export details.

You will receive an xml file.

Reference 

Configure Blackberry Monitoring Service to monitor a Blackberry Enterprise Server

Configure the SNMP service for monitoring:

You can configure the SNMP service on the computer that hosts the BlackBerry Enterprise Server so that the BlackBerry Monitoring Service can monitor BlackBerry Enterprise Server activity.

Before you begin: Verify that the SNMP service is installed and running.

On a computer that hosts the BlackBerry Enterprise Server or BlackBerry Enterprise Server components, in the Windows Services, right-click SNMP Service. Click Properties.
On the General tab, change the startup type to Automatic.
On the Traps tab, in the Community name field, type the community name for the SNMP service. The field is case-sensitive.
In the Trap Destinations section, add the IP address of the computer that hosts the BlackBerry Monitoring Service.
On the Security tab, in the Accepted community names section, add the community name that you typed in step 3. The SNMP community name is read-only.
Select the Accept SNMP packets from any host or Accept SNMP packets from these hosts option, depending on your organization's environment.
 If you selected Accept SNMP packets from these hosts, type the IP address of the computer that hosts the BlackBerry Monitoring Service.
Click Apply.
In the Services list, right-click SNMP Service. Click Restart.

Configure the BlackBerry Monitoring Service to monitor a BlackBerry Enterprise Server:

Before you begin: Verify that the computer that hosts the BlackBerry Enterprise Server has access to the computer that hosts the BlackBerry Monitoring Service.


In a browser, type https://<server_name>:8443/webconsole/app, where <server_name> is the FQDN of the computer that hosts the BlackBerry Monitoring Service.
Log in as an administrator that has permissions to access the BlackBerry Monitoring Service.
On the Configuration menu, expand Servers.
Click Manage Servers.
Click the Edit icon for the BlackBerry Enterprise Server that you want the BlackBerry Monitoring Service to monitor.
In the SNMP Configuration section, type the SNMP port number that the SNMP service on the BlackBerry Enterprise Server computer uses.
In the SNMP Configuration section, type the SNMP community name that the SNMP service on the BlackBerry Enterprise Server computer uses.
In the SNMP Configuration section, select the Monitoring status check box.
Click Save.

Blackberry Server Installation Issues

Today i have installed an two additional blackberry enterprise servers (5.0 SP3 MR8) with high availability.

Server01 (Primary)
Server02 (Standby)

Check here for the installation of blackberry enterprise server on a single server.

I am going to share my experience and challenges faced to finish the installation successfully. In my next blog i will detail the step-by-step procedure for complete installation for the blackberry enterprise server installation.

One of the pre-requisite was missed initially i.e .Net Framework 3.5.1 along with IIS related features.

During the Mapi Settings page, i have filled the server and mailbox details and clicked next and the system gave a warning message "The Blackberry service account (domain\name) doesn't seem to have view-only administrator.

From AD, i have confirmed the blackberry service account "member of" is having view only organization management.

From Exchange Management Shell (Exchange 2010) i have verified whether the blackberry service account is part of "view only organization management"


Add-RoleGroupMember "View-Only Organization Management" -Member "Blackberry Service account name"

After running this command i got an error blackberry service account is already a member of view only organization management group.

I have decided to re-add, for removal i have used EMC to remove the service account from the group.

EMC -> Tool Box -> Role Based Access Control -> From the View only organization management group members, i have removed the blackberry service account.

Then i ran the command mentioned above and now it ran successfully without error.

Service account should have proper permissions. Check the article here

Now i have clicked next still i got a warning message at MAPI settings page. Since i am sure that the blackberry service account is having proper permissions, i have ignored and continued with the next page. If really there is a permissions problem then i will land up here.

I have completed installing blackberry primary and standby server. 

This is the time to do the post checks for the newly installed server. I have created a test account which has mailbox in Exchange 2010, activated the account on my blackberry handset. Activation completed successfully, while checking the functionality of blackberry like (Mail, Calendar, Browsing, Address Look-up, Contacts) to/from Outlook. I got stuck with the calendar as while sending a meeting request from the blackberry device to outlook, meeting request was forwarded using blackberry service account.

Followed the article to fix the below mentioned problem:
"BESAdmin has forwarded your meeting request" email message is received when a meeting invitation is created or updated on the BlackBerry smartphone"

I have decided to go for the work around to enable EWS, to do this we need to go to the location where the blackberry installation files has been extracted command prompt
C:\Research In Motion\Blackberry Enterprise Server 5.0.3\Bundle33\tools\
here you type the below command
TraitTool -Server Servername(eg. Server01) -Trait EWSEnable -Set true

Before running this command, in the logs folder, CALH folder is missing. After running the command successfully in the logs folder i am able to see the CALH folder.

Again i tried to send the meeting request from the blackberry device and to my surprise i didn't see the strange message which appeared earlier.

Also i have installed the server which will be like: https://servername.domain.com/EWS/Exchange.asmx

Later i opened BAS console and in the server view i didn't see the additional two new servers on which BES is installed. Then i have restarted the BAS services on the earlier BES Server. 

Currently after the restart now i am able to see the new servers in the server view and verified the instances and found everything is in place as expected.