Exchange Solutions

If you install McAfee VirusScan Enterprise on an Exchange Server you will find that your outbound mail is being blocked. By default McAfee only allows certain processes to send out on port 25. Exchange isn’t one of them.

The block is caused by the Access Protection component. Disabling this component entirely would allow your mail to flow again. However, disabling an entire protection component may not be ideal. Instead, we list a couple of options below to allow Exchange through without sacrificing security.

Tip: Microsoft documents all the mandatory Exchange exclusions here. In addition, McAfee also details Exchange exclusions in this article.

Option 1

Right-click on the McAfee taskbar icon and select VirusScan console from the context menu.

Ran into a strange problem recently. I installed Exchange 2016 CU2 onto a brand new machine. This was the first Exchange 2016 server in the environment. Exchange 2010 SP3 RU14 was in coexistence. I could access the Exchange Control Panel fine. But when I accessed Outlook on the Web (formerly Outlook Web App) I received an Internal 500 server error. Not good. Especially on a brand new install.

Checking the application log revealed a ton of ASP.NET warnings. The warning had a source ASP.NET with Event ID 1310. Inside each warning was internal code 3008 with event message, A configuration error has occurred. The specifics are below.

ASP.NET Event ID 1310 Event Code 3008
Event code: 3008
Event message: A configuration error has occurred.
Event time: 9/1/2016 7:00:00 PM
Event time (UTC): 9/1/2016 11:00:00 PM
Event ID: 33cf7da9abe544e8b562fe0ab5437b57
Event sequence: 1
Event occurrence: 1
Event detail code: 0

We quickly found our answer in the exception message. In many instances the Microsoft.Exchange.Security assembly was missing. Other missing assemblies were referenced in separate warnings as well. I’ve highlighted the section below.

Recently while crafting an article to describe the migration process to Modern Public Folders I ran into some strange errors. They both occurred while the migration batch was attempting to copy data.

Here is the first.

Error: MigrationPermanentException: Request was quarantined because of the following error: Nullable object must have a value.

Cryptic huh? Nothing much on the interwebs either.

When I attempted to resume the batch I then received this error.

Error: MigrationPermanentException: Downlevel clients aren't supported. --> Downlevel clients aren't supported.

This one got me thinking. I suddenly wondered if I had ever upgraded Exchange 2016 in my lab from preview to RTM. A quick check of the build numbers revealed I had not. D’oh!

If you get this error make sure you are not still on the preview of 2016. In addition, once you upgrade and reboot your 2016 lab server, you will need to delete and recreate the batch. Then you should be able to test the migration process successfully.

Join the conversation on Twitter @SuperTekBoy.

If you are like me and eagerly deployed Exchange 2016 Preview in your 2013 lab (before official support was available) then you will likely have encountered this error when you upgraded to CU 10 and beyond.

[ERROR] The given key was not present in the dictionary.

If we review the Exchange setup log let’s see the last thing the installer was working on.

[2] Used domain controller DC.SKARO.LOCAL to read object CN=My Custom Apps,CN=Roles,CN=RBAC,CN=SKARO,CN=Microsoft Exchange,CN=Sevices,CN=Configuration,DC=SKARO,DC=LOCAL.
[2] Used domain controller DC.SKARO.LOCAL to write object CN=My Custom Apps,CN=Roles,CN=RBAC,CN=SKARO,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=SKARO,DC=LOCAL.
[2] Saving object "My Custom Apps" of type "ExchangeRole" and state "Unchanged".
[2] Used domain controller DC.SKARO.LOCAL to read object CN=My Marketplace Apps,CN=Roles,CN=RBAC,CN=SKARO,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=SKARO,DC=LOCAL.
[2] Used domain controller DC.SKARO.LOCAL to write object CN=My Marketplace Apps,CN=Roles,CN=RBAC,CN=SKARO,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=SKARO,DC=LOCAL.
[2] Saving object "My Marketplace Apps" of type "ExchangeRole" and state "Unchanged".
[2] Used domain controller DC.SKARO.LOCAL to read object CN=My ReadWriteMailbox Apps,CN=Roles,CN=RBAC,CN=SKARO,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=SKARO,DC=LOCAL.
[ERROR] The given key was not present in the dictionary.
[WARNING] An unexpected error has occurred and a Watson dump is being generated: The given key was not present in the dictionary.
[1] The following 1 error(s) occurred during task execution:
[1] 0. ErrorRecord: The given key was not present in the dictionary.
[1] 0. ErrorRecord: System.Collections.Generic.KeyNotFoundException: The given key was not present in the dictionary.

I have color-coded the setup log to help illustrate the process. During the organization preparation, Exchange is making changes to the RBAC roles.  This is where it is failing.

In blue, it reads in each RBAC role from our DC named dc.skaro.local.
In green, it specifies which DC it will use to write any changes.
In orange, it identifies what, if any, changes were made.

We can see it successfully completes its configuration on the “My Custom Apps” and “My Marketplace Apps” user roles. Yet the error occurs immediately after reading in “My ReadWrite Mailbox Apps”.

Something is preventing the Exchange 2013 setup from reading this role from Active Directory. Let’s check it out in ADSI Edit. The setup log gives us a direct path to the object.