Try our new Certificate Revocation List Check Tool
CRLcheck.exe is a tool developed to verify digital signatures of executable files. It collects files from known paths on your client, checks their signature, and checks Certificate Revocation Lists (CRL) and OCSP download. This helps avoid delays in launching files.

Category: M365,AZURE,INTUNE

M365/Hybrid Exchange Setup: Steps to verify on-premise, Prepare for Directory Synchronization (IDFIX, UPN, Proxyaddress)

TIP: Cleanup everything LOCAL before you even think of moving anything to M365 or Azure or even starting the Connector PRO TIP: Full manual list of Objects/attribute to check on your local ADS in this blog. This blog entry is mainly about those two steps of the MS Technet: https://learn.microsoft.com/en-us/microsoft-365/enterprise/prepare-for-directory-synchronization?view=o365-worldwide Directory Clean-up Tasks Directory object […]

Exchange: Error when you want to change a Receive Connector TLS with a Cert with no Common Name

On an Exchange 2016/2019/M365/Azure you want to change the TLS Certificate of your Receive Connector. Your SAN (Subject Alternate Name) or Wildcard Certificate has no Common Name [CN] (Empty). When you try to assign the cert the regular way you get an error. Nothing wrong with the Cert company just the other side (Requester/Converter) as […]

Exchange 2010 – 2016 Migration remove of old MDB fails (Mailboxexports)

  Error: This mailbox database is associated with one or more active MailboxExport requests Source: This means you have current/Pending/stalled as sample PST Exports running (Maybe very old). Solution: You will have to remove those you are able to remove the emtpy old Exchange MDB. Get-MailboxExportRequest (ExchangePowerShell) | Microsoft Docs     Microsoft Exchange Error […]

WINMAIL.DAT (Exchange 2007-2016-M365) Outlook – DEUTSCH

WINMAIL.DAT Transport Neutral Encapsulation Format oder TNEF ist ein proprietäres E-Mail-Anhangsformat, das von Microsoft Outlook und Microsoft Exchange Server verwendet wird. Eine Datei mit TNEF-Codierung wird in der Regel als winmail.dat oder win.dat bezeichnet und hat einen MIME-Typ von Application/MS-TNEF. Der offizielle (IANA) Medientyp ist jedoch application/vnd.ms-tnef. Wie oder wann passiert das? Wenn ein Absender […]

Exchange: Activesync 1053 Event, 4003 Error 2007/2010/2013/2016 Adminsholder

Activesync with Exchange 2013 does not work, ADMINSHOLDER Flag (an old bad friend) ERROR YOU SEE: Access+is+denied.%0d%0aActive+directory+response%3a+00000005%3a+SecErr%3a+DSID-03152612%2c+problem+4003+(INSUFF%5FACCESS%5FRIGHTS)%2c+data+0%0a_ We just had a user with Activesync with a user migrated from 2007 to 2013. The user was fresh made on 2007 and migrated forth and back a few times. https://testconnectivity.microsoft.com/ Did show all info he can get […]

Exchange 2013/2016 and 2010 Proxy back (400) Bad Request, ADS-user in too many ADS-groups member

Exchange 2010/2013/2016 Migration, problem after DNS-pointing to 2016 structure with some users Outlook.exe When you thought Kerberos Bloating is way back 2012 it returns. And after some research it is still all over the place. It does affect on premise Solutions as well as cloud solution like ADFS, AZURE etc. Error: This error (HTTP 400 […]

How to turn off Autodiscover Warning in Outlook 2010, 2013, 2016, 2019

How to turn off Autodiscover Warning in Outlook 2010/2013/2016/2019 (Exchange 2010/2013/2016) Warnung: Das Konto wurde fuer die Einstellung auf die Website umgeleitet https://support.microsoft.com/en-us/help/2480582/how-to-suppress-the-autodiscover-redirect-warning-in-outlook A little bit more explained than in the Microsoft KB and with a check THAT if you ONLY set the Registry key if the OFFICE Version is installed. During Migrations you could […]

Defrag Exchange on-premises Database with ESEUTIL

http://technet.microsoft.com/en-us/library/aa998863(v=exchg.80).aspx If you are at the end of Migration. Check there are no user active on the DB:  Show all mailboxes on Database “mb3” Get-Mailbox -Database “mb3” | select Displayname, Alias, Database, OrganizationalUnit | ft -wrap –auto  Also check this KB for hidden accounts and dead accounts : https://www.butsch.ch/post/Exchange-20072010-Delete-default-Mailbox-Database-remove-last-MailboxSG.aspx Get the Path of the DB: How […]

Turn of Autodiscover warning box agree Outlook.exe with GPO

How to turn off Autodiscover Warning in Outlook 2010/2013/2016/2019 Warnung: Das Konto wurde fuer die Einstellung auf die Website umgeleitet https://support.microsoft.com/en-us/help/2480582/how-to-suppress-the-autodiscover-redirect-warning-in-outlook A little bit more explained than in the Microsoft KB and with a check THAT if you ONLY set the Registry key if the OFFICE Version is installed. During Migrations you could otherwise run […]

Missing entry in Fortigate Application Filter ROOT.CERTIFICATE.URL and OCSP source of W10 Setup failing

Fortigate Application Filter Certificate wrong/missing Entry sample for an important laptop driver (W10 Deployment fails because of signed Driver Revocation Lookup) OR HOW a missing small ENTRY I a FORTIGATE FIREWALL IPS/APP filter can ruin your Windows 10 OS-Deployment work.   Reason: Missing entry in Fortigate Application Filter “ROOT.CERTIFICATE.URL” and “OCSP” source of failing deployment […]

Exchange: Server 2008 SMTP/IIS does not write Logfiles

On old Exchange machines we migrated we often (After Exchange is de-installed) install the SMTP Server. So we can re-route E-Mail from devices which have not been migrated and log that info. You have a Server 2008 64BOIT RTM and the separate installed SMTP-Service in IIS 6.0 Manager does not write Logfiles. You set the […]

Powershell RUS Adressrichtlinien Setzen fuer Exchange

Wie mache ich ein Adressrichtlinie im Exchange 2007/2010 Zur Auswahl in der GUI stehen nur einige Optionen. Leider nicht die Option: Erster Buchstabe Vorname . Nachname @ Domain s.muster@kunde.ch Diese muss man im PowerShell machen: new-EmailAddressPolicy -Name ‘kunde.ch’ -IncludedRecipients ‘AllRecipients’ -Priority ‘Lowest’ -EnabledEmailAddressTemplates ‘SMTP:%1g.%s@kunde.ch’ So kann man alle Werte der RUS-Richtlinie ansehen: Get-EmailAddressPolicy -identity “kunde.ch” | […]

W10 _German_Deutsch WIN 10 ENT how to add English as display language with DISM

Enhance your W10 or W11 migration experience with this insightful solution. When transitioning from Windows 7 to Windows 10, especially in non-international companies within the DACH region, having a W10 Admin machine becomes essential, especially if your domain controllers are still operating on 2012R2. Encounter an issue where, on a German Windows 10 system, RSAT […]