<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:atom="https://www.w3.org/2005/Atom" xmlns:sy="https://purl.org/rss/1.0/modules/syndication/" xmlns:dc="https://purl.org/dc/elements/1.1/" xmlns:content="https://purl.org/rss/1.0/modules/content/" xmlns:wfw="https://wellformedweb.org/CommentAPI/" xmlns:slash="https://purl.org/rss/1.0/modules/slash/"
  version="2.0">
  <channel>
    <title>PFEMSGIL</title>
    <atom:link
      href="https://docs.microsoft.com/archive/blogs/pfemsgil/feed.xml"
      rel="self"
      type="application/rss+xml" />
    <link>https://docs.microsoft.com/archive/blogs/pfemsgil/feed.xml</link>
    <description />
    <lastBuildDate>Wed, 17 Apr 2019 03:31:13 GMT</lastBuildDate>
    <language>en-US</language>
    <sy:updatePeriod>hourly</sy:updatePeriod>
    <sy:updateFrequency>1</sy:updateFrequency>
    <item>
      <title>Exchange 2013 Auto Reseed</title>
      <link>https://docs.microsoft.com/archive/blogs/pfemsgil/exchange-2013-auto-reseed</link>
      <pubDate>Sun, 24 Mar 2013 08:00:00 GMT</pubDate>
      <dc:creator><![CDATA[Tzahi Kolber]]></dc:creator>
      <guid
        isPermaLink="false">https://blogs.technet.microsoft.com/pfemsgil/2013/03/24/exchange-2013-auto-reseed/</guid>
      <description><![CDATA[Exchange 2013 includes a great new high availability feature that is part of the Database...]]></description>
      <content:encoded><![CDATA[<p>Exchange 2013 includes a great new high availability feature that is part of the Database Availability Group. This feature will reseed a database in case of disk failure from a "pool" of volumes that were pre-configured for this propose. In case that the failed drive contained an active database,&nbsp;Exchange will failover to one of the other passive copies and reseed the database. In case that the failed drive contained one of the passive copies, Exchange will reseed the database on the same drive.</p>
<p>AutoReseed reduces the need for Exchange Administrator or any other operator, to be on site at the moment of&nbsp;the drive crash and replace it as soon as he can in order to preserve the healthy copies structure.</p>
<p>&nbsp;</p>
<p><span style="font-size: small; text-decoration: underline;"><strong>The AutoReseed process acts as the following:</strong></span></p>
<p>1. The Microsoft Exchange Replication service periodically scans for copies that have a status of "FailedAndSuspended" for 15 minutes in a raw.</p>
<p>2. The Microsoft Exchange Replication service try to resume copy 3 times.</p>
<p>3. The Microsoft Exchange Replication service try assigning a spare volume for 5 times (every 1 hour).</p>
<p>4. The Microsoft Exchange Replication service try InPlaceSeed with SafeDeleteExistingFiles 5 times (every 1 hour).</p>
<p>5. Once all retires failed, the process stops.</p>
<p>6. After 3 days when the copy is still in "FailAndSuspend", the process resets and starts over from step 1.</p>
<p>&nbsp;</p>
<p><span style="font-size: small; text-decoration: underline;"><strong>The prerequisites for AutoReseed to take place:</strong></span></p>
<p>1. The copy is not ReseedBlocked or ResumeBlocked.</p>
<p>2. Logs and EDB are on the same volume.</p>
<p>3. The Logs and Database folder structure matches <span style="color: black; line-height: 107%; font-family: 'Arial','sans-serif'; font-size: 9pt; mso-fareast-font-family: 'Times New Roman'; mso-ansi-language: EN-US; mso-fareast-language: EN-US; mso-bidi-language: HE;">required&nbsp;</span>naming convention</p>
<p>4. There are no active copies running on the failed volume.</p>
<p>5. All copies on the volume are in FailedAndSuspend status.</p>
<p>6. No more than 8 FailedAndSuspend copies on the server.</p>
<p>&nbsp;So how does it work? Very simple.&nbsp;In the next example I will explain the idea behind the configuration, while this example describes a one database configuration in one server at the DAG out of 2 or more servers in the DAG configuration.&nbsp;A&nbsp;basic component when&nbsp;working with AutoReseed mechanism, is Mount Points. The idea is based on a pre-configured "cartridge" of volumes (like online spare), on each server for the databases that are replicated to the server. In case that&nbsp;the ESE engine has an issue writing to&nbsp;a specific volume according to the check list above, a new volume becomes active instead of the "problematic" one. In order to configure the "cartridge" of volumes we will create a directory called "ExchVols" which will host the different volumes. The Databases will be listed under the "ExchDBs" folder,&nbsp;each database will have 2 folders - one for logs and one for the database:</p>
<p>&nbsp;</p>
<p><span style="font-size: small;"><strong><span style="text-decoration: underline;">Components legend:</span></strong></span></p>
<p>1. ExchDBs: Folder that "hosts" the databases root folders.&nbsp;Each of the databases root folder is located on a mount point.</p>
<p>2. ExchVols: Folder that "hosts the volumes "cartridge". Under this folder, we will be able to list the volumes that are in production to host the databases folders and the "online spare" volumes.</p>
<p>3. DB001: A folder that hosts the database and logs folders for DB001. For every database, there is a folder with the same format - DBXXX and underneath a folder for database - DBXXX.db and folder for logs - DBXXX.log</p>
<p>In case of DB001, The folders underneath (DB001.edb &amp; DB001.log) &nbsp;are the same folders that exists below Volume1. That means that DB001 and Volume1 are pointing to the same location - 2 folders with the same mount point.</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/6765.DIR1.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/6765.DIR1.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/6765.DIR1.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/6765.DIR1.PNG" alt="" border="0" /></a></p>
<p>&nbsp;The Auto Reseed&nbsp;configuration includes 3 new main parameters for every Exchange 2013 DAG:</p>
<ul>
<li><em>AutoDagVolumesRootFolderPath (<strong>ExchVols</strong> in our example):</em>&nbsp;Includes the mount point containing all volumes for databases and the "Online Spare". &nbsp;The&nbsp;default location is: <strong>C:\ExchangeVolumes</strong></li>
<li><em>AutoDagDatabasesRootFolderPath (<strong>ExchDBs</strong> in our example):</em>Is the mount point that containing all the databases. The&nbsp;default location is: <strong>C:\ExchangeDatabases</strong></li>
<li><em>AutoDagDatabaseCopiesPerVolume:</em>&nbsp;Is the number of&nbsp;databases copies per volume. The default is 1 database per volume.</li>
</ul>
<p>Now after we go over the Auto Reseed components and the concepts around this high availability feature, let's see how to configure AutoReseed step by step.</p>
<p>The environment containes&nbsp;2 mailbox servers E15MBX1 and E15MBX2, CAS&nbsp;server named E15CAS1 and one domain controller. The DAG name is DAG13.</p>
<p>&nbsp;</p>
<p><span style="font-size: small;"><strong><span style="text-decoration: underline;">How to configure DAG for AutoReseed:</span></strong></span></p>
<p><strong>1.</strong> Configure the DAG with the <em>AutoDagVolumesRootFolderPath&nbsp;to point to <strong>ExchVols</strong> and <em>AutoDagDatabasesRootFolderPath for <strong>ExchDBs.&nbsp; </strong></em></em>In order to do it, run the commands:</p>
<p><strong><em>Set-DatabaseAvailabilityGroup DAG13 -</em><em>AutoDagDatabasesRootFolderPath C:\ExchDbs</em></strong></p>
<p><strong><em>Set-DatabaseAvailabilityGroup DAG13 -</em><em>AutoDagVolumesRootFolderPath C:\ExchVols</em></strong></p>
<p><em><em><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/3073.1_DAG_Conf.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/3073.1_5F00_DAG_5F00_Conf.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/3073.1_DAG_Conf.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/3073.1_5F00_DAG_5F00_Conf.PNG" alt="" width="586" height="83" border="0" /></a></em></em></p>
<p><em><em></em></em>&nbsp;</p>
<p><strong><em><em>2. </em></em></strong>We don't need to configure the<em><em><em><em> <em>AutoDagDatabaseCopiesPerVolume </em></em></em></em></em>value since we use the default of 1 database per volume. In case that you have more than 1 database per volume, for example 4, you should run the next command<em><em>: </em></em></p>
<p><em><em><strong>Set-DatabaseAvailabilityGroup DAG13 -AutoDagDatabaseCopiesPerVolume 4</strong></em></em></p>
<p><em><em><strong></strong><br />&nbsp;</em></em></p>
<p><strong>3.</strong> In order to verify that&nbsp;your DAG is&nbsp;configured correctly, run the next command:</p>
<p><em><em><strong>Get-DatabaseAvailabilityGroup DAG13 | fl *auto*</strong></em></em></p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/6433.2_DAG_Conf.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/6433.2_5F00_DAG_5F00_Conf.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/6433.2_DAG_Conf.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/6433.2_5F00_DAG_5F00_Conf.PNG" alt="" border="0" /></a>&nbsp;</p>
<p>&nbsp;</p>
<p><strong>4.</strong> Now create&nbsp;5 folders, one for ExchDBs, One for ExchVols, one for the database&nbsp;(DB001), and 2 for the volumes (Volume1 &amp; Volume2) that will be used for the database files and for "Online Spare" in case of drive crash. You can create the folders using Windows Explorer or by running the 3 commands from CMD (in example we will create all 5 folders by running only 3 commands):</p>
<p><strong>md C:\ExchDBs\db001</strong></p>
<p><strong>md C:\ExchVols\Volume1</strong></p>
<p><strong>md C:\ExchVols\Volume2</strong></p>
<p><strong></strong>&nbsp;</p>
<p>&nbsp;<strong>5.</strong> Verify that the root folders <strong>ExchDBs</strong> &amp; <strong>ExchVols</strong> folders were created:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/2364.4_Dir_Create.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/2364.4_5F00_Dir_5F00_Create.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/2364.4_Dir_Create.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/2364.4_5F00_Dir_5F00_Create.PNG" alt="" border="0" /></a></p>
<p>&nbsp;</p>
<p><strong>6.</strong> Verify that the volume folders Volume1 &amp; Volume2 were created:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/1031.4_Dir_Creation.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/1031.4_5F00_Dir_5F00_Creation.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/1031.4_Dir_Creation.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/1031.4_5F00_Dir_5F00_Creation.PNG" alt="" border="0" /></a></p>
<p>&nbsp;</p>
<p><strong>7.</strong>&nbsp;&nbsp;In addition verify that the database folder db001 was created as well:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/3718.5_Dir_Create.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/3718.5_5F00_Dir_5F00_Create.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/3718.5_Dir_Create.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/3718.5_5F00_Dir_5F00_Create.PNG" alt="" border="0" /></a></p>
<p>&nbsp;</p>
<p><strong>8.</strong> Now open Windows Disk Management (<em>diskmgmt.msc</em>) in order to create&nbsp;the Volume1&nbsp;mount point which will be used for hosting a database. For this purpose I pre-configrued 2 disks - one for each volume. Right click Disk 1 and choose <strong>New Simple Volume</strong>:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/7080.6_Vol1.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/7080.6_5F00_Vol1.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/7080.6_Vol1.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/7080.6_5F00_Vol1.PNG" alt="" border="0" /></a></p>
<p>&nbsp;</p>
<p><strong>9.</strong> Choose the size of your volume and click <strong>Next</strong>. In my example I choose the whole size of the disk - 20GB:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/3240.7_Vol1.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/3240.7_5F00_Vol1.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/3240.7_Vol1.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/3240.7_5F00_Vol1.PNG" alt="" border="0" /></a></p>
<p>&nbsp;</p>
<p><strong>10.</strong> Now instead of giving the drive a letter, choose&nbsp;the <strong>Mount in the following empty NTFS folder</strong> into Volume1 as a mount point&nbsp;at the next path: <strong>C:\ExchVols\Volume1</strong> and click <strong>OK</strong>:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/8865.8_Vol1.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/8865.8_5F00_Vol1.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/8865.8_Vol1.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/8865.8_5F00_Vol1.PNG" alt="" border="0" /></a></p>
<p>&nbsp;</p>
<p>&nbsp;<strong>11.</strong> Now click <strong>Next</strong>:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/8105.9_Vol1.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/8105.9_5F00_Vol1.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/8105.9_Vol1.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/8105.9_5F00_Vol1.PNG" alt="" border="0" /></a></p>
<p>&nbsp;</p>
<p><strong>12.</strong> Since an Exchange database and transaction logs are going to be hosted on that drive / volume, it is better to format the drive with 64KB and not as the <span style="color: black; line-height: 107%; font-family: 'Arial','sans-serif'; font-size: 9pt; mso-fareast-font-family: 'Times New Roman'; mso-ansi-language: EN-US; mso-fareast-language: EN-US; mso-bidi-language: HE;">default</span>. In order to do that, at the <strong>Format this volume with the following settings </strong>tab<strong>, </strong>open the<strong> Allocation unit size </strong>and choose<strong> 64KB:</strong></p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/6266.10_Vol1.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/6266.10_5F00_Vol1.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/6266.10_Vol1.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/6266.10_5F00_Vol1.PNG" alt="" border="0" /></a></p>
<p>&nbsp;</p>
<p><strong>13.</strong> In order to make things easier when troubleshooting drive issues (not must), name the volume at the <strong>Volume Label</strong> location with VOL1 and click <strong>Next</strong>.</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/7331.11_Vol1.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/7331.11_5F00_Vol1.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/7331.11_Vol1.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/7331.11_5F00_Vol1.PNG" alt="" border="0" /></a></p>
<p>&nbsp;</p>
<p><strong>14.</strong> Verify that all the parameters were configured correctly and click <strong>Finish</strong>:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/1882.12_Vol1.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/1882.12_5F00_Vol1.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/1882.12_Vol1.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/1882.12_5F00_Vol1.PNG" alt="" border="0" /></a></p>
<p>&nbsp;</p>
<p><strong>15.</strong> At the end of the Volume1 configuration, it should look as following:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/0842.13_Vol1.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/0842.13_5F00_Vol1.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/0842.13_Vol1.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/0842.13_5F00_Vol1.PNG" alt="" border="0" /></a></p>
<p>&nbsp;</p>
<p><strong>16.</strong> The next step is pointing the volume as a second mapping to a different location - db001 folder. In order to do that, right click the volume you have just created and select <strong>Change Drive Letter and Paths...</strong>:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/8284.14_Vol1.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/8284.14_5F00_Vol1.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/8284.14_Vol1.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/8284.14_5F00_Vol1.PNG" alt="" border="0" /></a></p>
<p>&nbsp;</p>
<p><strong>17.</strong> At the properties screen, select <strong>Add</strong> and choose the <strong>Mount in the following empty NTFS folder</strong> option. Click <strong>Browse </strong>and navigate to <strong>C:\ExchDBs\db001. </strong>Choose db001 folder and click<strong> OK:</strong></p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/3617.15_Vol1.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/3617.15_5F00_Vol1.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/3617.15_Vol1.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/3617.15_5F00_Vol1.PNG" alt="" border="0" /></a></p>
<p>&nbsp;</p>
<p><strong>18.</strong> At the next screen click <strong>OK</strong> again:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/2043.16_Vol1.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/2043.16_5F00_Vol1.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/2043.16_Vol1.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/2043.16_5F00_Vol1.PNG" alt="" border="0" /></a></p>
<p>&nbsp;</p>
<p><strong>19.</strong> Verify that the both paths are listed:<strong> C:\ExchVols\Volume1</strong> and <strong>C:\ExchDBs\db001</strong> like the next example and click <strong>OK</strong>:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/0842.17_Vol1.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/0842.17_5F00_Vol1.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/0842.17_Vol1.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/0842.17_5F00_Vol1.PNG" alt="" border="0" /></a></p>
<p>- Note: This action will point both <strong>C:\ExchVols\Volume1</strong> and <strong>C:\ExchDBs\db001 to</strong>&nbsp;VOL1 drive.</p>
<p>&nbsp;</p>
<p><strong>20.</strong> Now repeat steps 8 - 15 for the second volume (Volume2) in order to add it as an "Online Spare" in case that Volume1 will crash. In order to it, right click on the second drive and mount it&nbsp;to <strong>C:\ExchVols\Volume2. </strong></p>
<p>Notice that you DO NOT NEED&nbsp;to repeat steps 16 - 19 since&nbsp;Volume2 is an "&nbsp;Online Spare" drive and not yet used for a production database:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/5466.18_Vol2.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/5466.18_5F00_Vol2.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/5466.18_Vol2.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/5466.18_5F00_Vol2.PNG" alt="" border="0" /></a></p>
<p>&nbsp;</p>
<p><strong>21.</strong>&nbsp;In order to verify that Volume2 has been configured correctly, right click Disk2 and select <strong>Change Drive Letter and Paths... </strong>you sholud see the next path <strong>C:\ExchVols\Volume2</strong></p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/4341.19_Vol2.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/4341.19_5F00_Vol2.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/4341.19_Vol2.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/4341.19_5F00_Vol2.PNG" alt="" border="0" /></a></p>
<p>&nbsp;</p>
<p><strong>22.</strong> After you have configured both volumes and mounted them to the correct locations, you <span style="color: black; line-height: 107%; font-family: 'Arial','sans-serif'; font-size: 9pt; mso-fareast-font-family: 'Times New Roman'; mso-ansi-language: EN-US; mso-fareast-language: EN-US; mso-bidi-language: HE;">should </span>see the folders icons were changed to mount points icons as following&nbsp;:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/2047.191_Vol2.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/2047.191_5F00_Vol2.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/2047.191_Vol2.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/2047.191_5F00_Vol2.PNG" alt="" border="0" /></a></p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/6735.192.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/6735.192.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/6735.192.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/6735.192.PNG" alt="" border="0" /></a></p>
<p>&nbsp;</p>
<p>Now we will create all the needed steps in order to create and adjust the databases paths and copies. Please note that if you have already have databases created on your Exchange 2013 DAG environment with active mailboxes, you will have to move mailboxes to the new databases or to use the&nbsp;<a title="https://technet.microsoft.com/en-us/library/dd351168(v=exchg.141).aspx" href="https://technet.microsoft.com/en-us/library/dd351168(v=exchg.141).aspx" target="_blank">Move-DatabasePath</a> PowerShell command in order to move the database and transaction logs to the mount point location.</p>
<p>&nbsp;</p>
<p><strong>23.</strong> Create 2 directories under Volume1 folder, which is actually the same location&nbsp;as db001&nbsp;mount point. The 2 directories, 1 for&nbsp;database and 1 for&nbsp;transaction logs, should be with the same syntax:</p>
<p>C:\&lt; Volume<em>FolderName</em>&gt;\Volume<em>X</em>\&lt;<em>dbname</em>&gt;.db (In our example it would be - C:\ExchVols\Volume1\db001.db)</p>
<p>C:\&lt; Volume<em>FolderName</em>&gt;\Volume<em>X</em>\&lt;<em>dbname</em>&gt;.log (In our example it would be - C:\ExchVols\Volume1\db001.log)</p>
<p>You can create the folders using Windows Explorer or use CMD for that. In my <span style="color: black; line-height: 107%; font-family: 'Arial','sans-serif'; font-size: 9pt; mso-fareast-font-family: 'Times New Roman'; mso-ansi-language: EN-US; mso-fareast-language: EN-US; mso-bidi-language: HE;">example</span>, I used the 2 commands in order to create db001.db &amp; db001.log directories:</p>
<p><strong>md C:\ExchVols\Volume1\db001.db</strong></p>
<p><strong><strong>md C:\ExchVols\Volume1\db001.log</strong></strong></p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/0458.20_DBLOGS.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/0458.20_5F00_DBLOGS.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/0458.20_DBLOGS.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/0458.20_5F00_DBLOGS.PNG" alt="" border="0" /></a></p>
<p>&nbsp;</p>
<p>&nbsp;<strong>24.</strong> The directories structure should look as following:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/5001.21_DBLOGS.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/5001.21_5F00_DBLOGS.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/5001.21_DBLOGS.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/5001.21_5F00_DBLOGS.PNG" alt="" border="0" /></a></p>
<p>&nbsp;</p>
<p><strong>25.</strong> Now we will create a new database named db001 on a mailbox server named E15MBX1 and we will point the database and logs&nbsp;to the folders we created at the previous step according to the syntax of the directories structure:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/8524.22_NEW_DB.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/8524.22_5F00_NEW_5F00_DB.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/8524.22_NEW_DB.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/8524.22_5F00_NEW_5F00_DB.PNG" alt="" width="616" height="188" border="0" /></a></p>
<p>&nbsp;</p>
<p><strong>26.</strong> The next step is to mount the new database. You can use powershell command or use the EAC (Exchange Administration Center). Under the Servers menu, choose&nbsp;Databases, right click the new database&nbsp;db001 and click Mount:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/4011.23_Mount_DB.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/4011.23_5F00_Mount_5F00_DB.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/4011.23_Mount_DB.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/4011.23_5F00_Mount_5F00_DB.PNG" alt="" border="0" /></a></p>
<p>&nbsp;</p>
<p><strong>27.</strong> Now we will add a copy for the newly created database. From the EAC, under the Servers menu, choose Databases, right click the new database db001 and click Add Database Copy:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/0486.24_COPY_DB.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/0486.24_5F00_COPY_5F00_DB.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/0486.24_COPY_DB.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/0486.24_5F00_COPY_5F00_DB.PNG" alt="" border="0" /></a></p>
<p>&nbsp;</p>
<p><strong>28.</strong> Choose the mailbox server that you would like to add as an additional copy. In our example it would be E15MBX2, click on Browse and choose the mailbox server:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/4024.25_COPY_DB.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/4024.25_5F00_COPY_5F00_DB.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/4024.25_COPY_DB.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/4024.25_5F00_COPY_5F00_DB.PNG" alt="" border="0" /></a></p>
<p>&nbsp;</p>
<p><strong>29.</strong> After selecting the additional copy, click on <strong>Save</strong>:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/3404.26_COPY_DB.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/3404.26_5F00_COPY_5F00_DB.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/3404.26_COPY_DB.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/3404.26_5F00_COPY_5F00_DB.PNG" alt="" border="0" /></a></p>
<p>&nbsp;</p>
<p><strong>30.</strong> Verify that the copy was added and that the copy is in a Healthy state. As you can see, the database db01 is now mounted on E15MBX1 and has a valid and healthy copy at E15MBX2:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/8666.27_COPY_DB.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/8666.27_5F00_COPY_5F00_DB.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/8666.27_COPY_DB.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/8666.27_5F00_COPY_5F00_DB.PNG" alt="" border="0" /></a></p>
<p>&nbsp;</p>
<p><strong>31.</strong>&nbsp;So currently&nbsp;we are having a database named db001 which is mounted at E15MBX1 and has also a copy at E15MBX2. Each server has 1 volume&nbsp;(Volume1), which hosts&nbsp;the database and transaction logs and 1 volume as an "Online Spare" (Volume2). In that case no matter if Volume1 will fail on E15MBX1 or E15MBX2 - Volume2 on each server will be replaced automatically by the system and take place of the failed drive.</p>
<p>&nbsp;</p>
<p><strong>32.</strong> At this step we will simulate a "disk failure" in Volume1 on server E15MBX1 - this volume hosts the mounted database. In order to simulate a failure in Volume1, we will remove the drive from the Hyper-V settings of E15MBX1. Acting that way will eliminate Volume1 without any delay from the server:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/8206.30_Remove.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/8206.30_5F00_Remove.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/8206.30_Remove.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/8206.30_5F00_Remove.PNG" alt="" border="0" /></a></p>
<p>&nbsp;</p>
<p><strong>33.</strong> You are able to see that the Hard Drive Vol1_MBX1.vhd was <span style="color: black; line-height: 107%; font-family: 'Arial','sans-serif'; font-size: 9pt; mso-fareast-font-family: 'Times New Roman'; mso-ansi-language: EN-US; mso-fareast-language: EN-US; mso-bidi-language: HE;">disconnected </span>from E15MBX1:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/4062.31_Remove.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/4062.31_5F00_Remove.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/4062.31_Remove.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/4062.31_5F00_Remove.PNG" alt="" border="0" /></a></p>
<p>&nbsp;</p>
<p><strong>34.</strong> As a result, the drive will not be <span style="color: black; line-height: 107%; font-family: 'Arial','sans-serif'; font-size: 9pt; mso-fareast-font-family: 'Times New Roman'; mso-ansi-language: EN-US; mso-fareast-language: EN-US; mso-bidi-language: HE;">available </span>to the system, therefore we will get the next error message at E15MBX1:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/6646.32_Remove.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/6646.32_5F00_Remove.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/6646.32_Remove.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/6646.32_5F00_Remove.PNG" alt="" border="0" /></a></p>
<p>&nbsp;</p>
<p><strong>35.</strong> After the "disk failure" we can see that the mounted database was automatically activated on E15MBX2 (the healthy copy) because of the disk failure and that the copy on E15MBX1 (which was at mounted state), was changed to "FailedAndSuspend":</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/7446.33_Remove.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/7446.33_5F00_Remove.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/7446.33_Remove.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/7446.33_5F00_Remove.PNG" alt="" border="0" /></a></p>
<p>&nbsp;</p>
<p><strong>36.</strong> Since the replication service scan all the databases every 15 minutes look for a "FailedAndSuspend" state, the server which experiences a disk failure, will automatically replace the failed volume (disk) and automatically reseed the database from the active database. In our example we can see that after a while, the "FailedAndSuspend" copy on E15MBX1 was changed automatically after reseeding to a "Healthy" copy:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/7607.34_Healthy.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/7607.34_5F00_Healthy.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/7607.34_Healthy.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/7607.34_5F00_Healthy.PNG" alt="" border="0" /></a></p>
<p>&nbsp;</p>
<p><strong>37.</strong> At the next screen shot, we can see that after Volume1 failed on E15MBX1, Volume2 was automatically activated and db001 was automatically reseed:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/7737.35_Healthy.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/7737.35_5F00_Healthy.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/7737.35_Healthy.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/7737.35_5F00_Healthy.PNG" alt="" border="0" /></a></p>
<p>&nbsp;</p>
<p><strong>38.</strong> In order to follow the AutoReseed process, we should look at the next location: <strong>Event Viewer\Applications and Services Logs\Microsoft\exchange\HighAvailability\seeding</strong></p>
<p><strong><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/0763.event.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/0763.event.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/0763.event.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/0763.event.PNG" alt="" width="337" height="471" border="0" /></a></strong></p>
<p><strong></strong>&nbsp;</p>
<p><strong>39.</strong> At the event viewer at the above mentioned location,&nbsp;event&nbsp;id 1109 will appear and inform&nbsp;that the replication service discovered that there is a disk failure and that there is no possibility to write to the database and logs location of db001: C:\ExchDBs\db001.</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/4621.36_event1.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/4621.36_5F00_event1.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/4621.36_event1.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/4621.36_5F00_event1.PNG" alt="" border="0" /></a></p>
<p>&nbsp;</p>
<p><strong>40.</strong> Event id 825 indicate that the seeding process was started:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/3286.36_event.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/3286.36_5F00_event.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/3286.36_event.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/3286.36_5F00_event.PNG" alt="" border="0" /></a></p>
<p>&nbsp;</p>
<p><strong>41.</strong> Event id 826&nbsp;indicate that the seeding process was completed:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/8233.37_event.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/8233.37_5F00_event.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/8233.37_event.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/8233.37_5F00_event.PNG" alt="" border="0" /></a></p>
<p>&nbsp;</p>
<p><strong>42.</strong> Event id&nbsp;1109&nbsp;describes the last checks for the database:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/4743.38_event.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/4743.38_5F00_event.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/4743.38_event.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/4743.38_5F00_event.PNG" alt="" border="0" /></a></p>
<p>&nbsp;</p>
<p><strong>43.</strong> Event id&nbsp;1110&nbsp;claims that the last checks for the database were completed successfully:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/5852.39_event.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/5852.39_5F00_event.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/5852.39_event.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/5852.39_5F00_event.PNG" alt="" border="0" /></a></p>
<p>&nbsp;</p>
<p><strong>44.</strong> The final step in the database seeding is the Content Indexing&nbsp;(CI) seeding.&nbsp;Event 827 indicates that the CI seeding was started:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/0028.40_event.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/0028.40_5F00_event.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/0028.40_event.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/0028.40_5F00_event.PNG" alt="" border="0" /></a>&nbsp;&nbsp;</p>
<p>&nbsp;</p>
<p><strong>45.</strong> Event 828 indicates that the CI seeding was finished successfully:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/6661.41_event.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/6661.41_5F00_event.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/6661.41_event.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/6661.41_5F00_event.PNG" alt="" border="0" /></a></p>
<p>&nbsp;</p>
<p>&nbsp;After the database was reseeded automatically, the administrator should replace the failed disk in order to keep the cartridge volumes available for the next disk failure event.</p>
<p>&nbsp;</p>
<p><span style="text-decoration: underline;"><strong>Summery:</strong></span></p>
<p>AutoReseed <span style="line-height: 107%; font-family: 'Arial','sans-serif'; color: black; font-size: 9pt; mso-fareast-font-family: 'Times New Roman'; mso-ansi-language: EN-US; mso-fareast-language: EN-US; mso-bidi-language: HE;">mechanism </span>in Exchange 2013 keeps the messaging service up and running with high nonstop availability. The Exchange administrators can sleep well now and replace the failed drives in the morning instead of waking up in the middle of the night.</p>
<p>&nbsp;</p>
<p>&nbsp;I would like to thank <span><span id="spnR" class="rwRR" title="heikop@microsoft.com">Heiko Pohl (Microsoft - Principle PFE) &amp; <span><span id="spnR" class="rwRR" title="Danijel.Klaric@microsoft.com">Danijel Klaric (Microsoft - Senior PFE) for the assistance.&nbsp;.</span></span></span></span></p>
<p>&nbsp;</p>
<p>&nbsp;</p>]]></content:encoded>
    </item>
    <item>
      <title>Setting up Kerberos with a CAS Array Exchange 2010.</title>
      <link>https://docs.microsoft.com/archive/blogs/pfemsgil/setting-up-kerberos-with-a-cas-array-exchange-2010</link>
      <pubDate>Fri, 03 Aug 2012 13:40:00 GMT</pubDate>
      <dc:creator><![CDATA[Tzahi Kolber]]></dc:creator>
      <guid
        isPermaLink="false">https://blogs.technet.microsoft.com/pfemsgil/2012/08/03/setting-up-kerberos-with-a-cas-array-exchange-2010/</guid>
      <description><![CDATA[&nbsp;
This document describes what needs to be done in order to apply the Kerberos authentication...]]></description>
      <content:encoded><![CDATA[<p>&nbsp;</p>
<p>This document describes what needs to be done in order to apply the Kerberos authentication in addition to NTLM for Outlook users against Exchange 2010 CAS servers. This document is based on TechNet article: <a href="https://technet.microsoft.com/en-us/library/ff808312.aspx">Configuring Kerberos Authentication for Load-Balanced Client Access Servers</a>.</p>
<p>The problems around too many NTLM authentications and limitations, including theory around the solution for using Kerberos, are described at the next TechNet article: <a href="https://technet.microsoft.com/en-us/library/ff808313.aspx">https://technet.microsoft.com/en-us/library/ff808313.aspx</a></p>
<p>&nbsp;</p>
<p><strong><span style="text-decoration: underline;">Exchange environment architecture:</span></strong></p>
<ol>
<li><b>DC01</b>: Windows 2003 Domain controller.</li>
<li><b>EX141</b>: Exchange 2010 SP2 installed as HUB, CAS, MBX.</li>
<li><b>EX142</b>: Exchange 2010 SP2 installed as MBX (DAG member).</li>
<li><b>EX143</b>: Exchange 2010 SP2 installed as MBX (DAG member).</li>
<li>The domain name is <b>msft.net</b></li>
</ol>
<p><strong></strong>&nbsp;</p>
<p>&nbsp;<a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/8306.Environment.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/8306.Environment.PNG"><img width="630" height="662" alt="" src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/8306.Environment.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/8306.Environment.PNG" border="0" /></a><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/5483.1_.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/5483.1_5F00_.png"></a></p>
<p>&nbsp;</p>
<p><br /><strong><span style="text-decoration: underline;">Before you begin:</span></strong></p>
<p>&nbsp;</p>
<p>According to the official TechNet&nbsp;article regarding to the <a title="https://technet.microsoft.com/en-us/library/ff808312.aspx" href="https://blogs.technet.com/controlpanel/blogs/posteditor.aspx/Kerberos authentication configuration">Kerberos authentication configuration</a>, you should create only one ASA credential in case you are having a single DAG stretched across 2&nbsp;Active Directory sites:</p>
<p>"Because this architecture includes a Database Availability Group (DAG) that&rsquo;s&nbsp;stretched across both Active Directory sites, you must deploy a single ASA credential for use by members of the Client Access server arrays in ADSite1 and&nbsp;ADSite2. If you don&rsquo;t use a single ASA credential, clients will have Kerberos authentication issues when you perform a datacenter switchover because the secondary datacenter Client Access server array members won&rsquo;t be able to decrypt the Kerberos session ticket. For more information about activating the secondary datacenter, see <a href="https://technet.microsoft.com/en-us/library/dd351049.aspx">Datacenter Switchovers</a>."</p>
<p>&nbsp;</p>
<p><span style="text-decoration: underline;"><strong>The next steps describe the Kerberos authentication configuration:</strong></span></p>
<p>1. Creating the alternate service account (ASA) for the CAS ARRAY in the domain. This is being done,&nbsp;by opening the Active Directory User and Computers and creating new computer account:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/4274.1_.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/4274.1_5F00_.png"><img width="643" height="354" alt="" src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/4274.1_.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/4274.1_5F00_.png" border="0" /></a></p>
<p>&nbsp;</p>
<p>2. Type your name for the ASA and click <strong>Next</strong>. In our example, the ASA named CAS-ARRAY-ASA. In Windows 2008 domain environment, the new computer account wizard will look slightly different.</p>
<p>&nbsp;<a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/3542.2.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/3542.2.png"><img alt="" src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/3542.2.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/3542.2.png" border="0" /></a></p>
<p>&nbsp;</p>
<p>3. Click <strong>Finish:</strong></p>
<p><strong><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/8750.3.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/8750.3.png"><img alt="" src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/8750.3.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/8750.3.png" border="0" /></a></strong></p>
<p><br />&nbsp;&nbsp;</p>
<p>&nbsp;</p>
<p><strong>4. </strong>It is recommend to type a description for the ASA, in order to avoid deletion on this account by mistake in the future.</p>
<p><strong><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/2476.4.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/2476.4.png"><img alt="" src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/2476.4.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/2476.4.png" border="0" /></a></strong></p>
<p>&nbsp;</p>
<p>&nbsp;<br />&nbsp;</p>
<p>5. After creating the ASA (computer account), verify the account has replicated to all domain controllers within all Active Directory sites that contain the client Access servers that will use the ASA credential.</p>
<p>&nbsp;</p>
<p>&nbsp;&nbsp;</p>
<p>6. In order to continue, we need to verify the CAS array&rsquo;s FQDN, since this name will be used for the SPN that will be attached to the ASA. In order to check the CAS Array&rsquo;s FQDN, run the next command:</p>
<p><b>Get-ClientAccessArray</b></p>
<p><b><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/4426.5_.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/4426.5_5F00_.png"><img width="669" height="165" alt="" src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/4426.5_.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/4426.5_5F00_.png" border="0" /></a></b></p>
<p>&nbsp;</p>
<p>&nbsp;<br />&nbsp;</p>
<p><strong>7. </strong>We also need to the check the InternalUrl &amp; ExternalUrl names, which also needs to be configured for the SPN:</p>
<p><b>Get-ClientAccessServer ex141 | Get-OwaVirtualDirectory | fl ExternalUrl,InternalUrl</b></p>
<p><b><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/7080.6.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/7080.6.png"><img width="668" height="140" alt="" src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/7080.6.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/7080.6.png" border="0" /></a></b></p>
<p><b>- </b>In case that you want to check the InternalUrl &amp; ExternalUrl names configuration for ALL of your CAS servers, run the next command:</p>
<p><b>Get-ClientAccessServer | Get-OwaVirtualDirectory | fl Server,Name,ExternalUrl,InternalUrl</b></p>
<p><br />&nbsp;&nbsp;</p>
<p>&nbsp;</p>
<p>8. Setting the SPNs for the NetBIOS &amp; FQDN names. It&rsquo;s recommended to add also the NetBIOS names (short names), since Outlook 2003 clients and maybe other MAPI applications works this way with short names.</p>
<ul>
<li><b>http</b> Use this SPN for Exchange Web Services, Offline Address Book downloads, and the Autodiscover service. This data was provided at steps 6 &amp; 7.</li>
<li><b>exchangeMDB</b> Use this SPN for RPC Client Access.</li>
<li><b>exchangeRFR</b> Use this SPN for the Address Book service.</li>
<li><b>exchangeAB</b> Use this SPN for the Address Book service.</li>
</ul>
<p><b></b>&nbsp;</p>
<p>9. Now create the SPN names using the <strong>setspn</strong> built-in command. The command can run using PS1 or a BAT file, but it is recommended to run the commands one by one in order to verify that all commands processed successfully.</p>
<p>&nbsp;</p>
<p><strong>setspn -s exchangeMDB/outlook CAS-ARRAY-ASA$ </strong></p>
<p><strong>setspn -s exchangeRFR/outlook CAS-ARRAY-ASA$ </strong></p>
<p><strong>setspn -s exchangeAB/outlook CAS-ARRAY-ASA$ </strong></p>
<p><strong>setspn -s exchangeMDB/outlook.msft.net CAS-ARRAY-ASA$ </strong></p>
<p><strong>setspn -s exchangeRFR/outlook.msft.net CAS-ARRAY-ASA$ </strong></p>
<p><strong>setspn -s exchangeAB/outlook.msft.net CAS-ARRAY-ASA$ </strong></p>
<p><strong>setspn -s exchangeMDB/mail.msft.net CAS-ARRAY-ASA$ </strong></p>
<p><strong>setspn -s exchangeRFR/mail.msft.net CAS-ARRAY-ASA$</strong></p>
<p><strong>setspn -s exchangeAB/mail.msft.net CAS-ARRAY-ASA$</strong></p>
<p><strong>setspn -s http/outlook.msft.net CAS-ARRAY-ASA$ </strong></p>
<p><strong>setspn -s http/mail.msft.net CAS-ARRAY-ASA$</strong></p>
<p><strong>setspn -s http/autodiscover.msft.net CAS-ARRAY-ASA$</strong></p>
<p><br /><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/2480.7.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/2480.7.png"><img width="731" height="596" alt="" src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/2480.7.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/2480.7.png" border="0" /></a></p>
<p>&nbsp;&nbsp;</p>
<p>&nbsp;</p>
<p>10. To verify that all relevant SPNs have been assigned properly, run the following command from the Exchange's Powershell:</p>
<p><b>Setspn &ndash;L msft\CAS-ARRAY-ASA</b></p>
<p><b><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/3414.8.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/3414.8.png"><img width="614" height="186" alt="" src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/3414.8.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/3414.8.png" border="0" /></a></b></p>
<p><br />&nbsp;</p>
<p>&nbsp;&nbsp;</p>
<p>11. In order to &ldquo;attach&rdquo; the ASA credentials to the CAS Array servers, we should run the next script from the following location: <b>C:\Program Files\Microsoft\Exchange Server\V14\Scripts</b></p>
<p><b><span dir="RTL"></span><span dir="RTL"></span><span lang="AR-SA" style="color: #1f497d; font-family: 'Times New Roman','serif'; font-size: 12pt; mso-fareast-font-family: 'Times New Roman'; mso-bidi-language: AR-SA; mso-ansi-language: EN; mso-fareast-language: EN-US;" dir="RTL"><span dir="RTL"></span><span dir="RTL"></span><span style="color: #000000; font-family: times new roman,times;">.</span></span><span style="color: #000000; font-family: times new roman,times;"><span dir="LTR"></span><span dir="LTR"></span><strong><span lang="EN" style="mso-fareast-font-family: 'Times New Roman'; mso-bidi-language: AR-SA; mso-ansi-language: EN; mso-fareast-language: EN-US;"><span dir="LTR"></span><span dir="LTR"></span>\RollAlternateserviceAccountPassword.ps1 &ndash;ToArrayMembers outlook.msft.net -GenerateNewPasswordFor &ldquo;msft\CAS-ARRAY-ASA$" &ndash;Verbose</span></strong></span></b></p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/5050.9.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/5050.9.png"><img width="664" height="236" alt="" src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/5050.9.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/5050.9.png" border="0" /></a></p>
<p>&nbsp;</p>
<p>&nbsp;&nbsp;</p>
<p>12. In case that the script was finished succfully, you will get the following message:&nbsp;</p>
<p><b>&ldquo;THE SCRIPT HAS SUCCEEDED</b><b>":</b></p>
<p>&nbsp;</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/2043.11_.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/2043.11_5F00_.png"><img width="668" height="473" alt="" src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/2043.11_.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/2043.11_5F00_.png" border="0" /></a></p>
<p>&nbsp;&nbsp;</p>
<p>&nbsp;</p>
<p>13.&nbsp;To verify that the ASA credentials have been deployed properly use the following command:</p>
<p><strong>Get-ClientAccessServer -IncludeAlternateServiceAccountCredentialStatus | fl name,*alter*</strong></p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/0654.12.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/0654.12.png"><img width="613" height="128" alt="" src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/0654.12.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/0654.12.png" border="0" /></a>&nbsp;</p>
<p>&nbsp;</p>
<p>&nbsp;&nbsp;</p>
<p>14. Download and run the <a href="https://gallery.technet.microsoft.com/scriptcenter/525fb1dc-b612-4998-a2d1-55f32a6c35ac">ConvertOABDir.ps1</a>&nbsp;in order to create new application pool to support different authentication methods like Kerberos and Certificate authentication for the OAB virtual directory. This script should run on each of the CAS servers in the Outlook.msft.net CAS array.</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/5238.13.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/5238.13.png"><img width="609" height="82" alt="" src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/5238.13.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/5238.13.png" border="0" /></a></p>
<p>&nbsp;</p>
<p>&nbsp;&nbsp;</p>
<p>15. Restart the MSExchangeOAB &amp; MSExchangeRPC on all the CAS servers in the configured array:</p>
<p><strong>Get-Service MSExchangeAB,MSExchangeRPC | Restart-Service</strong></p>
<p><strong><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/5633.14.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/5633.14.png"><img width="606" height="111" alt="" src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/5633.14.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/5633.14.png" border="0" /></a></strong></p>
<p><strong></strong>&nbsp;</p>
<p>&nbsp;&nbsp;</p>
<p>16. Verify that the services are up and running:</p>
<p><strong>Get-Service MSExchangeAB,MSExchangeRPC | fl name,status</strong></p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/3225.15.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/3225.15.png"><img width="604" height="124" alt="" src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/3225.15.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/3225.15.png" border="0" /></a></p>
<p>&nbsp;</p>
<p>17.<strong>&nbsp;</strong>In order to verify that all the previous steps completed successfully and that clients can communicate using Kerberos, use one of the&nbsp;there ways:</p>
<p>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 17.1&nbsp;Configure the Outlook to connect using TCP/IP, while the &ldquo;Encryption&rdquo; is marked and that the "Logon network security&rdquo; is configured to use the "Kerberos Password Authentication"</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/3750.16_.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/3750.16_5F00_.png"><img alt="" src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/3750.16_.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/3750.16_5F00_.png" border="0" /></a></p>
<p>&nbsp;&nbsp;</p>
<p>Now open Outlook and verify that you are able to connect&nbsp;your mailbox:&nbsp;</p>
<p>&nbsp;</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/8078.17_.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/8078.17_5F00_.png"><img alt="" src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/8078.17_.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/8078.17_5F00_.png" border="0" /></a></p>
<p>&nbsp;</p>
<p>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;17.2&nbsp;At one of the workstations that are installed with outlook, open the command prompt&nbsp;and type: <strong>Klist tickets</strong> (on Windows XP or Windows server 2003).&nbsp;On Windows 7 or Windows 2008 type:&nbsp;<strong>Klist</strong></p>
<p></p>
<p><b>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Klist tickets</b> (Before Kerberos configuration):</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/4113.18.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/4113.18.png"><img width="614" height="309" alt="" src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/4113.18.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/4113.18.png" border="0" /></a></p>
<p>&nbsp;</p>
<p><b>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Klist tickets</b> (After Kerberos configuration):</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/6403.19.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/6403.19.png"><img width="601" height="595" alt="" src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/6403.19.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/6403.19.png" border="0" /></a></p>
<p>&nbsp;</p>
<p>&nbsp;&nbsp; &nbsp;&nbsp; 17.3&nbsp;From the Client Access Server, check the Address Book protocol logs. These logs are usually located at the following&nbsp;path: C:\Program Files\Microsoft\Exchange server\v14\Logging\AddressBook Service:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/0647.20.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/0647.20.PNG"><img alt="" src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/0647.20.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/0647.20.PNG" border="0" /></a></p>
<p>&nbsp;</p>
<p>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Now open one of the recent logs that were created after the Kerberos configuration&nbsp;you have made in the previous steps.&nbsp;In case you have configured all the steps in the right way, you should see the word</p>
<p>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <strong>Kerberos&nbsp;</strong>inside the AddressBook Service log.&nbsp;That means that the server successfully created a Kerberos authentication connection, as we can see in the next screenshot:</p>
<p>&nbsp;<a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/8875.20_.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/8875.20_5F00_.PNG"><img width="594" height="193" alt="" src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/8875.20_.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/8875.20_5F00_.PNG" border="0" /></a></p>
<p>&nbsp;</p>
<p>&nbsp;</p>
<p><span style="color: #ff0000;"><b>* Important: In case that your organization doesn&rsquo;t work with encryption at the Exchange CAS &amp; Outlook client side as the following example, you will not be able to use Kerberos to connect to the directory!</b></span></p>
<p>&nbsp;<a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/2055.21_.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/2055.21_5F00_.png"><img alt="" src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/2055.21_.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/2055.21_5F00_.png" border="0" /></a></p>
<p>&nbsp;</p>
<p>- The next example shows the directory disconnection status:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/6052.22_.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/6052.22_5F00_.png"><img width="587" height="353" alt="" src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/6052.22_.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/6052.22_5F00_.png" border="0" /></a></p>
<p>&nbsp;</p>
<p>&nbsp;</p>
<p>In order to check if your CAS server is configured with the &ldquo;EncryptionRequired&rdquo; parameter, run the command:</p>
<p><b>Get-ExchangeServer ex141 | Get-RpcClientAccess | fl EncryptionRequired</b></p>
<p><b><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/6443.23.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/6443.23.png"><img width="591" height="91" alt="" src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/6443.23.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/6443.23.png" border="0" /></a></b></p>
<p><b></b>&nbsp;</p>
<p>In order to change this value, run the next command on<b> all the CAS servers</b> and restart the MSExchangeRPC service:</p>
<p><b>Set-RpcClientAccess &ndash;server servername &ndash;EncryptionRequired $true</b></p>
<p>&nbsp;</p>
<p>More information regarding to encryption configuration, you can find here:</p>
<p><a href="https://technet.microsoft.com/en-us/library/dd439391(v=EXCHG.80).aspx">https://technet.microsoft.com/en-us/library/dd439391(v=EXCHG.80).aspx</a></p>
<p><a href="https://support.microsoft.com/kb/2006508">https://support.microsoft.com/kb/2006508</a></p>
<p></p>
<p><b></b>&nbsp;</p>
<p><span style="font-size: large;"><b><span style="text-decoration: underline;">Rollback:</span></b></span></p>
<p>&nbsp;</p>
<p>In order to roll back from the configuration above, run the next steps:</p>
<p>&nbsp;</p>
<p>18. Delete all the SPNs we have created at step 9:</p>
<p><strong>setspn -d exchangeMDB/outlook CAS-ARRAY-ASA$ </strong></p>
<p><strong>setspn -d exchangeRFR/outlook CAS-ARRAY-ASA$ </strong></p>
<p><strong>setspn -d exchangeAB/outlook CAS-ARRAY-ASA$ </strong></p>
<p><strong>setspn -d exchangeMDB/outlook.msft.net CAS-ARRAY-ASA$ </strong></p>
<p><strong>setspn -d exchangeRFR/outlook.msft.net CAS-ARRAY-ASA$ </strong></p>
<p><strong>setspn -d exchangeAB/outlook.msft.net CAS-ARRAY-ASA$ </strong></p>
<p><strong>setspn -d exchangeMDB/mail.msft.net CAS-ARRAY-ASA$ </strong></p>
<p><strong>setspn -d exchangeRFR/mail.msft.net CAS-ARRAY-ASA$</strong></p>
<p><strong>setspn -d exchangeAB/mail.msft.net CAS-ARRAY-ASA$</strong></p>
<p><strong>setspn -d http/outlook.msft.net CAS-ARRAY-ASA$ </strong></p>
<p><strong>setspn -d http/mail.msft.net CAS-ARRAY-ASA$</strong></p>
<p><strong>setspn -d http/autodiscover.msft.net CAS-ARRAY-ASA$</strong></p>
<p>&nbsp;</p>
<p>19. Delete the computer account you have created in step 1.</p>
<p>&nbsp;</p>
<p>20. Verify that there are no outlook clients that are configured to use &ldquo;<b>Kerberos Password Authentication". </b>Instead, they should use the <b>&ldquo;Negotiate Authentication&rdquo;</b> as the following example:<strong></strong></p>
<p><b><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/1651.24.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/1651.24.png"></a><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/8154.24_.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/8154.24_5F00_.png"><img alt="" src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/8154.24_.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/8154.24_5F00_.png" border="0" /></a></b></p>
<p><b></b>&nbsp;</p>
<p>"Turning Kerberos Authentication Off</p>
<p>--------------------------------------------------------------------------------</p>
<p>&nbsp;To revert your Client Access server array so that it doesn't use Kerberos, remove the SPNs from the shared service account. If the SPNs are removed, Kerberos authentication won't be attempted by your clients, and clients configured to use Negotiate authentication will use NTLM. Clients configured to use only Kerberos will be unable to connect. Once the SPNs are removed you should also delete the shared service account. You can use the maintenance script to clean out credentials from all Client Access server array members by using the toEntireForest parameter and using the -copy from server parameter to specify a server that does not have any Kerberos credentials. In addition, <b>you should eventually restart all client computers to clear the Kerberos ticket cache."</b></p>
<p>&nbsp;</p>
<p>More info:</p>
<p><a href="https://technet.microsoft.com/en-us/library/ff808312.aspx">https://technet.microsoft.com/en-us/library/ff808312.aspx</a></p>
<p></p>]]></content:encoded>
    </item>
    <item>
      <title>Changing DAG &amp; DAG members IP addresses</title>
      <link>https://docs.microsoft.com/archive/blogs/pfemsgil/changing-dag-dag-members-ip-addresses</link>
      <pubDate>Wed, 01 Aug 2012 22:36:00 GMT</pubDate>
      <dc:creator><![CDATA[Tzahi Kolber]]></dc:creator>
      <guid
        isPermaLink="false">https://blogs.technet.microsoft.com/pfemsgil/2012/08/01/changing-dag-dag-members-ip-addresses/</guid>
      <description><![CDATA[This article describes the steps needed in order to change Database&nbsp;Availability Group (DAG)...]]></description>
      <content:encoded><![CDATA[<p>This article describes the steps needed in order to change Database&nbsp;Availability Group (DAG) and DAG's members IP addresses.</p>
<p>The core steps for the IP addresses changes are based on <a href="https://support.microsoft.com/kb/230356">KB230356</a> which explains how to change the Windows cluster&rsquo;s IP addresses.</p>
<p>In addition to the steps taken to change the IP addresses of the cluster&rsquo;s members, we should take into consideration the Exchange system the runs on the cluster&rsquo;s infrastructure. Therefore, additional steps regarding to the Exchange 2010 system were added to this document.</p>
<p>&nbsp;</p>
<p><strong><span style="text-decoration: underline;">The environment:</span></strong></p>
<p>The existing Exchange environment contains 3 Exchange 2010 Mailbox servers in the DAG, one of the servers is also CAS &amp; HUB.</p>
<p><strong><span style="text-decoration: underline;">Before making the IP changes:</span></strong></p>
<p>- Before changing the IP addresses of the servers involved in the Exchange environment, write down as&nbsp;in the next table, the current and the new IP addresses:</p>
<table border="1" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td style="text-align: center;" valign="top" width="25">
<p>#</p>
</td>
<td valign="top" width="91">
<p>Server name</p>
</td>
<td valign="top" width="118">
<p>Role</p>
</td>
<td valign="top" width="159">
<p>Current IP address</p>
</td>
<td valign="top" width="146">
<p>New IP address</p>
</td>
</tr>
<tr>
<td style="text-align: center;" valign="top" width="25">
<p>1</p>
</td>
<td valign="top" width="91">
<p>EX141</p>
</td>
<td valign="top" width="118">
<p>MBX / HUB / CAS</p>
</td>
<td valign="top" width="159">
<p>100.100.100.201</p>
</td>
<td valign="top" width="146">
<p>100.100.97.201</p>
</td>
</tr>
<tr>
<td style="text-align: center;" valign="top" width="25">
<p>2</p>
</td>
<td valign="top" width="91">
<p>EX142</p>
</td>
<td valign="top" width="118">
<p>MBX</p>
</td>
<td valign="top" width="159">
<p>100.100.100.202</p>
</td>
<td valign="top" width="146">
<p>100.100.97.202</p>
</td>
</tr>
<tr>
<td style="text-align: center;" valign="top" width="25">
<p>3</p>
</td>
<td valign="top" width="91">
<p>EX143</p>
</td>
<td valign="top" width="118">
<p>MBX</p>
</td>
<td valign="top" width="159">
<p>100.100.100.203</p>
</td>
<td valign="top" width="146">
<p>100.100.97.203</p>
</td>
</tr>
<tr>
<td style="text-align: center;" valign="top" width="25">
<p>4</p>
</td>
<td valign="top" width="91">
<p>DAG</p>
</td>
<td valign="top" width="118">
<p>Cluster</p>
</td>
<td valign="top" width="159">
<p>100.100.100.234</p>
</td>
<td valign="top" width="146">
<p>100.100.97.234</p>
</td>
</tr>
</tbody>
</table>
<p>- In this case, the current and the new IP addresses are in same subnet (255.255.248.0). This means that no subnet changes needs to take place.</p>
<p>- Update all the other messaging related consumers that this change might prevent them from getting the messaging service during the IP changes period.</p>
<p>- The IP addresses change is reversible. In case that something gets wrong because of network or other issues, you can revert back to the previous IP addresses configuration.</p>
<p><strong>- It is recommended to suspend the databases replication and dismount the databases before making the IP changes.</strong></p>
<p>&nbsp;</p>
<p><strong><span style="text-decoration: underline;">Steps taken to change the IP addresses:</span></strong></p>
<p><strong>* In case you are moving the DAG / Nodes to different subnets, add the new IP that will represent the DAG as a&nbsp;mandatory step&nbsp;by running the next command (although you can do it via the EMC) before starting the next steps:</strong></p>
<p><strong><strong>Set-DatabaseAvailabilityGroup &ndash;identity DAG -DatabaseAvailabilityGroupIPAddress </strong>100.100.100.234</strong>,<strong><strong>100.100.97.234</strong></strong></p>
<p>1. Verify that the cluster&rsquo;s resources (IP &amp; Name) are owned by one of the other cluster&rsquo;s nodes and not on the node you are going to run the IP changes. In this case, the first IP change is going to take place on EX141. In order to check which node is owned the cluster&rsquo;s resources, we should run the next command:</p>
<p><strong>Cluster group &ldquo;cluster group&rdquo; /state</strong></p>
<p>In case EX141 is owned the cluster&rsquo;s resources, use the next command to move the resources to other node in the cluster (EX142):</p>
<p><strong>Cluster group &ldquo;cluster group&rdquo; /moveto:EX142</strong></p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/8357.3.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/8357.3.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/8357.3.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/8357.3.PNG" alt="" border="0" /></a></p>
<p>2. Stop all Exchange&rsquo;s services on the Exchange server which it&rsquo;s IP is going to be changed first.</p>
<p>In order to stop all the Exchange services quickly, stop the &ldquo;Microsoft Exchange Active Directory Topology&rdquo; service (MSExchangeADTopology). Stopping this service will stop all other Exchange services in case you choose &ldquo;YES&rdquo; in the next screenshot:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/3730.4.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/3730.4.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/3730.4.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/3730.4.PNG" alt="" border="0" /></a></p>
<p>3. Verify that all the Exchange&rsquo;s services are in &ldquo;Stopped&rdquo; state and that no monitoring or other system started them up again.</p>
<p>4. Check the hosts file on all Exchange servers in the environment and verify that it doesn&rsquo;t contains the DAG / DAG members IP address. The hosts file is located at the next path:</p>
<p><strong>C:\Windows\System32\drivers\etc</strong></p>
<p>In case that the hosts file contains IP addresses relevant to the DAG or DAG members, change those IP addresses to the new IP addresses.</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/6558.5.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/6558.5.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/6558.5.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/6558.5.PNG" alt="" border="0" /></a></p>
<p>5. Change the IP address of the network adapter on node EX141 to the new IP address. This requires the computer to be rebooted.</p>
<p>6. After the server is up and running again, verify that the node EX141 was registered in the DNS with A &amp; PTR records.</p>
<p>7. Verify that the node EX141 can ping the domain controllers and that other servers can ping the servers. In addition, check the communication between the server and the HUB &amp; CAS servers.</p>
<p>8. Before changing EX142 IP address, fail the cluster&rsquo;s resources (IP &amp; Name) over to the functional node EX141. In order to failover to EX141 node, run the next command:</p>
<p><strong>Cluster group &ldquo;cluster group&rdquo; /moveto:EX141</strong></p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/3022.6.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/3022.6.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/3022.6.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/3022.6.PNG" alt="" border="0" /></a></p>
<p>&nbsp;9. Change the IP addresses for the network adapters in node EX142 and reboot the server.</p>
<p>10. Verify that node EX142 can ping the domain controllers and that other servers can ping EX142. In addition, check the communication between the server and the HUB &amp; CAS servers.</p>
<p>11. Before changing EX143 IP address, fail ail the cluster&rsquo;s resources (IP &amp; Name) over to one of the cluster&rsquo;s nodes you have already changed the IP address (EX141 node, in this example). run the next command:</p>
<p><strong>Cluster group &ldquo;cluster group&rdquo; /moveto:EX141</strong></p>
<p><strong><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/0638.6.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/0638.6.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/0638.6.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/0638.6.PNG" alt="" border="0" /></a></strong></p>
<p>12. Change the IP addresses for the network adapters in node EX143 and reboot the server.</p>
<p>13. Verify that node EX143 can ping the domain controllers and that other servers can ping EX143. In addition, check the communication between the server and the HUB &amp; CAS servers.</p>
<p>14. Verify that the cluster service is up and that all nodes are online:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/3443.7.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/3443.7.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/3443.7.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/3443.7.PNG" alt="" border="0" /></a></p>
<p>15. Now change the DAG IP address to the new IP address (same as cluster). In order to change it, run the next command:</p>
<p><strong>Set-DatabaseAvailabilityGroup &ndash;identity DAG -DatabaseAvailabilityGroupIPAddress 100.100.97.234</strong></p>
<p>This command will remove the old IP address of the DAG and leave it with the new the new IP address only.</p>
<p><strong>16. </strong>In case that you have changed the subnet mask as well, run the &ldquo;DiscoverNetworks&rdquo; option, in order to force rediscovery of all DAG networks:</p>
<p><strong>Set-DatabaseAvailabilityGroup &ndash;identity DAG -DiscoverNetworks</strong></p>
<p>17. Verify that the in &ldquo;Failover Cluster Manager&rdquo; that the cluster resources are up with the new IP address:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/4861.8.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/4861.8.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/4861.8.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/4861.8.PNG" alt="" border="0" /></a></p>
<p>18. Verify that all the Exchange services on all nodes are up</p>
<p>19. In order to verify that the DAG&rsquo;s IP address was changed, run the next command:</p>
<p><strong>Get-</strong><strong> </strong><strong>DatabaseAvailabilityGroup dag &ndash;Status | fl&nbsp;DatabaseAvailabilityGroupIp*</strong></p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/5025.10.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/5025.10.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/5025.10.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/5025.10.PNG" alt="" border="0" /></a></p>
<p>20. At the Failover cluster manager, double-click the IP Address resource to open its properties.</p>
<p>21. On the Parameters tab in the IP Address resource properties, make sure that the Network to Use box contains the new network as the network to use:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/3250.11.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/3250.11.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/3250.11.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/3250.11.PNG" alt="" border="0" /></a></p>
<p>22. Verify that the &ldquo;Application&rdquo; and &ldquo;System&rdquo; doesn&rsquo;t contain any errors related the cluster or exchange.</p>
<p>23. Verify that the Cluster&rsquo;s IP address is registered with the new IP address at the DNS.</p>
<p>24.Now check that the cluster is working by moving the resources to one of the other cluster&rsquo;s members:</p>
<p><strong>Cluster group &ldquo;cluster group&rdquo; /move</strong></p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/6204.12.PNG" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/6204.12.PNG"><img src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/95/30/6204.12.PNG" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-95-30/6204.12.PNG" alt="" border="0" /></a></p>
<p>25. After all the infrastructure (Windows servers, cluster) was configured and working, verify that all the databases are at Mounted state.</p>
<p>26. Now move / activate one of the mounted databases to one of the other DAG members and verify that <span style="font-family: 'Verdana','sans-serif'; font-size: 10pt; mso-fareast-font-family: 'Times New Roman'; mso-ansi-language: EN-US; mso-fareast-language: EN-US; mso-bidi-language: HE; mso-bidi-font-family: 'Times New Roman';">the activation is working as expected.</span></p>]]></content:encoded>
    </item>
    <item>
      <title>Welcome to PFEMSGIL blog!</title>
      <link>https://docs.microsoft.com/archive/blogs/pfemsgil/welcome-to-pfemsgil-blog</link>
      <pubDate>Sun, 29 Jul 2012 03:56:00 GMT</pubDate>
      <dc:creator><![CDATA[Tzahi Kolber]]></dc:creator>
      <guid
        isPermaLink="false">https://blogs.technet.microsoft.com/pfemsgil/2012/07/29/welcome-to-pfemsgil-blog/</guid>
      <description><![CDATA[Hi and Welcome to the PFEMSGIL!
&nbsp;
This blog was created and published by the Microsoft Israel...]]></description>
      <content:encoded><![CDATA[<p>Hi and Welcome to the PFEMSGIL!</p>
<p>&nbsp;</p>
<p>This blog was created and published by the Microsoft Israel Services Messaging <a title="https://download.microsoft.com/download/E/0/2/E022A49D-0A6B-4396-809B-F8BBCB917BD5/Premier%20Field%20Engineer.pdf" href="https://blogs.technet.com/controlpanel/blogs/posteditor.aspx/PFE">PFE</a>s. &nbsp;</p>
<p>In this blog we will publish Microsoft Exchange related articles on current and new technologies.</p>
<p>&nbsp;</p>
<p>Good Luck!</p>]]></content:encoded>
    </item>
  </channel>
</rss>