Released: June 2016 Quarterly Exchange Updates


Today we are announcing the latest set of Cumulative Updates for Exchange Server 2016 and Exchange Server 2013. In addition to normal fixes to customer reported issues, these releases also include updated functionality. Exchange Server 2016 Cumulative Update 2 and Exchange Server 2013 Cumulative Update 13 are available on the Microsoft Download Center.

.Net 4.6.1 Support

Support for .Net 4.6.1 is now available for Exchange Server 2016 and 2013 with these updates. We fully support customers upgrading servers running 4.5.2 to 4.6.1 without removing Exchange. We recommend that customers apply Exchange Server 2016 Cumulative Update 2 or Exchange Server 2013 Cumulative Update 13 before upgrading .Net FrameWork. Servers should be placed in maintenance mode during the upgrade as you would do when applying a Cumulative Update. Support for .Net 4.6.1 requires the following post release fixes for .Net as well.

Note: .Net 4.6.1 installation replaces the existing 4.5.2 installation. If you attempt to roll back the .Net 4.6.1 update, you will need to install .Net 4.5.2 again.

AutoReseed support for BitLocker

Beginning with Exchange 2013 CU13 and Exchange 2016 CU2, the Disk Reclaimer function within AutoReseed supports BitLocker. By default, this feature is disabled. For more information on how to enable this functionality, please see Enabling BitLocker on Exchange Servers.

SHA-2 support for self-signed certificates

The New-ExchangeCertificate cmdlet has been updated to produce a SHA-2 certificate for all self-signed certificates created by Exchange. Creating a SHA-2 certificate is the default behaviour for the cmdlet. Existing certificates will not automatically be regenerated but newly installed servers will receive SHA-2 certificates by default. Customers may opt to replace existing non-SHA2 certificates generated by previous releases as they see fit.

Migration to Modern Public Folders resolved

The issue reported in KB3161916 has been resolved.

Change to Get-ExchangeServer cmdlet

The Get-ExchangeServer cmdlet has been updated in Exchange Server 2016 Cumulative Update 2 to reflect the Exchange 2016 ServerRole definitions; Mailbox or Edge. Due to the way Remote PowerShell (RPS) works, the ServerRole definition output will be based upon the version hosting the RPS session, e.g. CU2 endpoints will report CU2 ServerRole definitions for all servers in the org. Customers should use the properties assigned to a particular service on the Exchange Server object to determine capabilities of a server, if needed. For instance, customers with scripts relying upon ServerRole Output looking for ClientAccess to be installed will need to look for the IsClientAccessServer property in the cmdlet output instead. An example follows:

[PS] C:\Windows\system32>$MyServer = Get-ExchangeServer EXHV-9895
[PS] C:\Windows\system32>$MyServer.ServerRole
Mailbox
[PS] C:\Windows\system32>$MyServer.IsClientAccessServer
True
[PS] C:\Windows\system32>

Installing from a mounted ISO displays English UI only

We are aware that customers who mount the ISO image and install Exchange from the mapped drive will not receive a local language setup experience. For customers who desire a local language setup experience, the workaround is to copy the files from the mounted ISO to a local OS drive and execute Setup from the local OS drive instead of the mounted ISO. We are working to resolve this in a future cumulative update.

Release details

KB articles which contain greater depth on what each release includes are available as follows:

Exchange Server 2016 Cumulative Update 2 does include updates to Active Directory Schema. These updates will apply automatically during setup if the permissions and Active Directory requirements are met during installation. If the Exchange Administrator lacks permissions to update Active Directory Schema, a Schema Admin should execute SETUP /PrepareSchema before installing Cumulative Update 2 on the first Exchange server. The Exchange Administrator should also execute SETUP /PrepareAD to ensure RBAC roles are updated correctly.

Exchange Server 2013 Cumulative Update 13 does not include updates to Active Directory, but may add additional RBAC definitions to your existing configuration. PrepareAD should be executed prior to upgrading any servers to CU13. PrepareAD will run automatically during the first server upgrade if Setup detects this is required and the logged on user has sufficient permission.

Additional information

Microsoft recommends all customers test the deployment of any update in their lab environment to determine the proper installation process for your production environment. For information on extending the schema and configuring Active Directory, please review the appropriate TechNet documentation.

Also, to prevent installation issues you should ensure that the Windows PowerShell Script Execution Policy is set to “Unrestricted” on the server being upgraded or installed. To verify the policy settings, run the Get-ExecutionPolicy cmdlet from PowerShell on the machine being upgraded. If the policies are NOT set to Unrestricted you should use the resolution steps in KB981474 to adjust the settings.

Reminder for customers in hybrid deployments

Customers in hybrid deployments where Exchange is deployed on-premises and in the cloud, or who are using Exchange Online Archiving (EOA) with their on-premises Exchange deployment are required to deploy the most current (e.g., CU13) or the prior (e.g., CU12) Cumulative Update release.

For the latest information on Exchange Server and product announcements, please see What’s New in Exchange Server 2016 and Exchange Server 2016 Release Notes. You can also find updated information on Exchange Server 2013 in What’s New in Exchange Server 2013, Release Notes and product documentation available on TechNet.

Note: Documentation may not be fully available at the time this post was published.

Exchange Team

Comments (96)
  1. sime3000 says:

    This is great news, Thanks.

    Does Microsoft plan on ever releasing another Help (.chm) file for Exchange 2013 and 2016 ? The last one was released a very long time ago and the page has now mysteriously disappeared. (
    http://www.microsoft.com/en-us/download/details.aspx?id=35395 ). Is it really that difficult to make these available for those of us who use them ?

  2. @ExchangeITPRo says:

    So much stuff this time .
    regarding below
    Reminder for customers in hybrid deployments

    ****Customers in hybrid deployments where Exchange is deployed on-premises and in the cloud, or who are using Exchange Online Archiving (EOA) with their on-premises Exchange deployment are required to deploy the most current (e.g., CU13) or the prior (e.g., CU12) Cumulative Update release.****

    Do you mean CU12 and CU13 are mandatory for any Hybrid (Exchange 2013) Deployment? So if a customer is on Exchange 2013 CU10 they must be at least CU12, right?

    1. Yes, an E2013 customer must be on CU12 or CU13 for support in a hybrid deployment. Likewise, an E2016 customer must be on CU1 or CU2.

  3. Shannon says:

    Link doesn’t work for Exchange 2013 CU 13 if you click on the KB link. Does work for 2016 CU 2 though.

    1. As noted in these update articles:
      Documentation may not be fully available at the time this post was published.

  4. Excellent work on resolving the PF issue, Now I can get those stalled migrations moving.

  5. Great set of updates. Any word on if this includes the passive index rebuilding Greg Taylor mentions in his Mechanics videos? Where network utilization was to be dropped by 40%?

    1. No, CU2 does not include this feature.

      1. Awesome. Greg mentioned on Yammer that hopefully it will ship in CU3.

        1. Gareth, we are completely committed to shipping this feature when it is ready. We simply need to ensure that we work out any unexpected issues. Things are looking very good for Cumulative Update 3 at the moment.

          1. Great news. Looking forward to testing that feature.

  6. 2013 KB link appears to be broken.

    Exchange Server 2013 Cumulative Update 13 (KB3135743)
    https://support.microsoft.com/en-us/kb/3135743

    1. I wonder what percentage of the user base this even affects. It addresses people who installed Oracle products on their Exchange boxes.

      1. Sean Waite says:

        I understand Oracle binaries are baked-in to OWA on Exchange 2007 [web-ready document viewing] – so installing UR20 should be considered to fix the security vulnerability.

        1. Sean Waite says:

          Also Oracle libraries are baked-in to Exchange 2010 – see https://technet.microsoft.com/en-us/library/security/ms12-058.aspx – so install UR14 to cover this vulnerability

          1. The Outside-In binaries from Oracle affect all currently supported versions of Exchange. Last week we shipped security updates for all products as part of the patch Tuesday release. We do not consider security releases to be bound by our quarterly release schedule which is why they are not called out in this blog announcement. Customer who move to Exchange Server 2016 Cumulative Update 2 or Exchange Server 2013 Cumulative Update 13 do not need to apply the updates released last week if they move to the Cumulative Updates released this week. All customers should choose a deployment path that allows them to address the security vulnerability in the Oracle products included with Exchange Server.

    1. @ExchngeITPRO says:

      Thanks both !
      Good catch, technically that article from Ross at least could have a link on this CU release news – just my two cents :)

  7. Lijo John says:

    Should we need to apply cumulative update 1 ( https://www.microsoft.com/en-us/download/details.aspx?id=51497) before applying CU2 for Exchange server 2016?

    1. Sebastian M. says:

      Hi,

      That’s not necessary, because these are CUMULATIVE updates.

      Sebastian

    2. Cumulative Updates are cumulative, meaning that they include all changes introduced in prior updates. You do not need to apply CU1 in order to install CU2.

  8. @sime3000 – The CHM file technology has been deprecated by Microsoft. We have no plans to produce further versions of this file. All product help documentation has been transferred to TechNet or is exposed in place within the product, e.g. Outlook on the Web or Exchange Admin Center.

    1. sime3000 says:

      Thanks Brent. So if we’re at 40,000 ft on a long flight working with no Internet access or we’re at one of our client sites where the Exchange servers have no Internet access and we need to get quick access to a TechNet Exchange subject or we need to get the syntax of a cryptic shell command, how would you suggest that we get that information without the use of a complied help file ?

      1. For me personally I will use the plane’s wifi. If at a site without internet access I turn on internet sharing with my phone.

        If I don’t have access to TechNet and need the latest PowerShell syntax I first run the Update-Help cmdlet. Then I can use the Get-Help cmdlet. For example, “Get-Help Get-Mailbox”. Or “Get-Help Get-Mailbox -Examples” works wonders as well.

        Tab-completion also helps when remembering those cmdlets and parameters.

        Hope this helps. :)

        1. sime3000 says:

          Not really. The question was specifically for Brent Alinger [MSFT] .

          1. Justin Grote says:

            This still works for saving TechNet sections into a .CHM file. Is it so hard to make it yourself if you insist on being stuck in the past?
            http://packagethis.codeplex.com/

      2. Jeff says:

        @sime3000 It looks like there is a tool that you can use to make an offline copy of the Technet articles. It’s called “Package This” and more info is at http://www.itworld.com/article/2769712/networking-hardware/how-to-download-the-entire-microsoft-technet-library-and-take-it-on-the-road.html.
        But otherwise, I’d say if you’re at 40,000 feet on a flight, you won’t be working on an Exchange server. And if you are, you already have internet access. :) There’s also the help command. For instance, “help get-mailbox” will give you an output of the syntax for the cmdlet. “get-help get-mailbox” gives you even more detailed syntax.

      3. CHM technology is deprecated and no longer produced for the Exchange Server products. Might I suggest if you find yourself at 40,000 feet (well above normal commercial flight limits BTW) you sit back and enjoy the in-flight entertainment, your favorite refreshment or just take a nap as an alternative. We are not going to produce an offline version of Exchange documentation for this or any other purpose.

        1. sime3000 says:

          Hello Brent Alinger [MSFT]
          Your condescending response is noted. It’s a common reaction I see from Microsoft reps at all levels when they can’t handle a question. I’m reminded of The Emperor’s New Clothes.
          I’ve posted this simple CHM question several times in this blog. No one could be bothered to address it until now and when I posted the location of the last Exchange CHM file ( http://www.microsoft.com/en-us/download/details.aspx?id=35395 ) a while back, no one responded again but it magically disappeared. Nice.
          You didn’t answer my question re offline access to Exchange TechNet documentation (regardless of altitude), so I will take your condescending response to mean – “I don’t know and I really don’t care”

          1. sime3000 – My failed attempt at humor was not intended to be condescending. My apologies if you interpret it otherwise. As to your no clothes comment, your view of the situation is not accurate from my point of view. We absolutely care about our community. As I indicated, the underlying CHM technology has been deprecated and is no longer supported. This is not an Exchange only position and should not be news to anyone using Microsoft products. Our plan is to provide support content online via TechNet and in product for OWA/EAC only. That statement should be clear that there is no plan to make this available in any other form. I believe this statement answers your question as to how this content is to be consumed now and in the future.

          2. sime3000 says:

            Brent Alinger [MSFT]
            Hmmm. No Reply function under your June 24, 2016 at 9:07 am post.

            “We absolutely care about our community” Is a nice sentiment however …

            I posted a simple query in this blog re the CHM file in February 2014 but no one from your group could be bothered to respond
            https://blogs.technet.microsoft.com/exchange/2014/02/25/released-exchange-server-2013-service-pack-1/ . That might tend to indicate that your group really doesn’t care.

            I posted a simple query in this blog re the CHM file in September 2015 but no one from your group could be bothered to respond
            https://blogs.technet.microsoft.com/exchange/2015/09/15/released-september-2015-quarterly-exchange-updates/ . That might tend to indicate that your group really doesn’t care.

            I posted a simple query in this blog re the CHM file in December 2015 but no one from your group could be bothered to respond
            https://blogs.technet.microsoft.com/exchange/2015/12/15/released-december-2015-quarterly-exchange-updates/ . That might tend to indicate that your group really doesn’t care.

            I posted a simple query in this blog re the CHM file in March 2016 but no one from your group could be bothered to respond
            https://blogs.technet.microsoft.com/exchange/2016/03/15/released-march-2016-quarterly-exchange-updates/ . That might tend to indicate that your group really doesn’t care.

            I posted a simple query re the CHM file in this particular June 2016 thread but I received what to me was an obviously condescending response advising how you thought I should spend my time while on a commercial airliner. That might tend to indicate that your group really doesn’t care.

            I posted a simple query in this particular June 2016 thread asking if Microsoft had a suggestion for an alternative to the CHM file for doing work offline. I didn’t get a response to that specific question either from Microsoft. That might tend to indicate that your group really doesn’t care.

            Repeatedly posting this simple query and not getting a response after two+ years, other than a condescending one, has been a complete waste of my time. This definitely tells me that your group really does not care regardless of the nice sentiment.

  9. Michael Skitt says:

    I missed the “Additional Information” about changing the Execution Policy on the March 2016 updates, but this was not a recommendation on the December 2015 updates as far as I can see, is this just for Exchange 2016 or all versions? also is the Recommendation post update to reset to “RemoteSigned”? …Is there another reason this has been added that your not telling us about?

    1. This applies to all versions.

  10. Frank says:

    What about support for PowerShell v5?

  11. Chris Davidson says:

    Does this fix the Edge valid recipient bug; https://support.microsoft.com/en-gb/kb/3152396 ?

    1. Robert says:

      This seems to be a pretty important bug fix for anyone running call ahead, did it make this release or is there an expected release that will include it?

    2. Yes it does. Funny this doesn’t get mentioned anywhere. ;)

      1. Robert says:

        According to Premiere, this bug was actually fixed in CU2. So apparently, the issue is that the CU2 release notes don’t document this as being one of the items that were fixed. I have not tested to confirm that it is, in fact, fixed yet.

  12. sime3000 says:

    The recently updated Supportability Matrix at https://technet.microsoft.com/en-us/library/ff728623(v=exchg.150).aspx appears to indicate that Exchange 2013 RU13 does not support .NET Framework 4.6.1 while Exchange 2016 CU1/RTM does support it. That’s incorrect, is it not ?

  13. Benoit Boudeville says:

    When evaluating .NET Framework 4.6.1 with E2016CU2 and Win2012 R2, KB3146715 displays a disclaimer about “PRE-RELEASE SOFTWARE”:

    MICROSOFT PRE-RELEASE SOFTWARE LICENSE TERMS
    MICROSOFT .NET FRAMEWORK PRE-RELEASE
    These license terms are an agreement between Microsoft Corporation […]

    Is that a mistake or this cumulative hotfix is really a pre-release ? looks like the .NET Framework 4.6.2 Preview somehow. Can we install or is there a misleading link in the KB article ?

    1. Seems like a bug in the KB. Thanks for pointing this out we will follow-up with the .Net team. 4.6.2 is not yet supported against any version of Exchange. 4.6.1 is as high as we go currently.

  14. As stated above, CU13 for E2013 supports .Net 4.6.1 (plus hotfix). The TechNet article will be corrected in the future.

    1. sime3000 says:

      Ross Smith IV
      I assume that your comment is in response to my June 22, 2016 at 7:46 am post.
      It appears that after my post some changes were made to the https://technet.microsoft.com/en-us/library/ff728623(v=exchg.150).aspx article to try and correct the misinformation but the .NET information in that article is still wrong…

  15. Keith Kroslow says:

    I also see that Update Rollup 14 for Exchange Server 2010 SP3 was also released. I know it’s a small update but it should also be posted here so we know. :-)

  16. wer83 says:

    In what was a terrifying moment on step 16 (finalizing setup), the DepedentAssemblyGenerator.exe crashed and left the setup incomplete. Luckily running setup again detected the incomplete previous setup and was able to successfully complete it, but man that was scary. I copied what was presented in case anyone wants it, and also submitted a crash report to Microsoft.

    Error:
    The following error was generated when “$error.Clear();
    $dependentAssemblyGeneratorExePath = [System.IO.Path]::Combine($RoleInstallPath, “bin”, “DependentAssemblyGenerator.exe”);
    $exchangeBinPath = [System.IO.Path]::Combine($RoleInstallPath, “bin”);
    $clientAccessPath = [System.IO.Path]::Combine($RoleInstallPath, “ClientAccess”);
    $sharedWebConfig = [System.IO.Path]::Combine($RoleInstallPath, “ClientAccess”, “SharedWebConfig.config”);

    $a = &”$dependentAssemblyGeneratorExePath” -exchangePath “$exchangeBinPath” -exchangePath “$clientAccessPath” -configFile “$sharedWebConfig”;
    $a | % { if ($_.Length > 0) { Write-ExchangeSetupLog -Info “$_.ToString()” } }
    Start-SetupProcess -Name “iisreset” -Args “/timeout:120″
    ” was run: “System.Management.Automation.RemoteException”.

    Error:
    The following error was generated when “$error.Clear();
    $dependentAssemblyGeneratorExePath = [System.IO.Path]::Combine($RoleInstallPath, “bin”, “DependentAssemblyGenerator.exe”);
    $exchangeBinPath = [System.IO.Path]::Combine($RoleInstallPath, “bin”);
    $clientAccessPath = [System.IO.Path]::Combine($RoleInstallPath, “ClientAccess”);
    $sharedWebConfig = [System.IO.Path]::Combine($RoleInstallPath, “ClientAccess”, “SharedWebConfig.config”);

    $a = &”$dependentAssemblyGeneratorExePath” -exchangePath “$exchangeBinPath” -exchangePath “$clientAccessPath” -configFile “$sharedWebConfig”;
    $a | % { if ($_.Length > 0) { Write-ExchangeSetupLog -Info “$_.ToString()” } }
    Start-SetupProcess -Name “iisreset” -Args “/timeout:120″
    ” was run: “System.Management.Automation.RemoteException: Unhandled Exception:”.

    Error:
    The following error was generated when “$error.Clear();
    $dependentAssemblyGeneratorExePath = [System.IO.Path]::Combine($RoleInstallPath, “bin”, “DependentAssemblyGenerator.exe”);
    $exchangeBinPath = [System.IO.Path]::Combine($RoleInstallPath, “bin”);
    $clientAccessPath = [System.IO.Path]::Combine($RoleInstallPath, “ClientAccess”);
    $sharedWebConfig = [System.IO.Path]::Combine($RoleInstallPath, “ClientAccess”, “SharedWebConfig.config”);

    $a = &”$dependentAssemblyGeneratorExePath” -exchangePath “$exchangeBinPath” -exchangePath “$clientAccessPath” -configFile “$sharedWebConfig”;
    $a | % { if ($_.Length > 0) { Write-ExchangeSetupLog -Info “$_.ToString()” } }
    Start-SetupProcess -Name “iisreset” -Args “/timeout:120″
    ” was run: “System.Management.Automation.RemoteException: “.

    Error:
    The following error was generated when “$error.Clear();
    $dependentAssemblyGeneratorExePath = [System.IO.Path]::Combine($RoleInstallPath, “bin”, “DependentAssemblyGenerator.exe”);
    $exchangeBinPath = [System.IO.Path]::Combine($RoleInstallPath, “bin”);
    $clientAccessPath = [System.IO.Path]::Combine($RoleInstallPath, “ClientAccess”);
    $sharedWebConfig = [System.IO.Path]::Combine($RoleInstallPath, “ClientAccess”, “SharedWebConfig.config”);

    $a = &”$dependentAssemblyGeneratorExePath” -exchangePath “$exchangeBinPath” -exchangePath “$clientAccessPath” -configFile “$sharedWebConfig”;
    $a | % { if ($_.Length > 0) { Write-ExchangeSetupLog -Info “$_.ToString()” } }
    Start-SetupProcess -Name “iisreset” -Args “/timeout:120″
    ” was run: “System.Management.Automation.RemoteException: System.UnauthorizedAccessException: Access to the path ‘C:\Program Files\Microsoft\Exchange Server\V15\ClientAccess\SharedWebConfig.config’ is denied.
    at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
    at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy, Boolean useLongPath, Boolean checkHost)
    at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options, String msgPath, Boolean bFromProxy)
    at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share)
    at System.Xml.XmlDocument.Save(String filename)
    at Microsoft.Exchange.Management.DependentAssemblyGenerator.UpdateConfigFile(String configFilePath, IList`1 exchangeAssemblies, Int32& numAssembliesAdded)
    at Microsoft.Exchange.Management.DependentAssemblyGenerator.Main(String[] args)”.

    Error:
    The following error was generated when “$error.Clear();
    $dependentAssemblyGeneratorExePath = [System.IO.Path]::Combine($RoleInstallPath, “bin”, “DependentAssemblyGenerator.exe”);
    $exchangeBinPath = [System.IO.Path]::Combine($RoleInstallPath, “bin”);
    $clientAccessPath = [System.IO.Path]::Combine($RoleInstallPath, “ClientAccess”);
    $sharedWebConfig = [System.IO.Path]::Combine($RoleInstallPath, “ClientAccess”, “SharedWebConfig.config”);

    $a = &”$dependentAssemblyGeneratorExePath” -exchangePath “$exchangeBinPath” -exchangePath “$clientAccessPath” -configFile “$sharedWebConfig”;
    $a | % { if ($_.Length > 0) { Write-ExchangeSetupLog -Info “$_.ToString()” } }
    Start-SetupProcess -Name “iisreset” -Args “/timeout:120″
    ” was run: “System.Management.Automation.RemoteException:
    “.

  17. David Rawling says:

    Now that .NET 4.6 is on the supported list, is there any word on support for WMF5 / PowerShell 5 in Exchange? It’d be really nice to be able to standardise to that across the environment.

    1. David, we are not going to support installing WMF packages that bring newer WMF versions down to older OS versions with Exchange server. Our plan is to only support the version of WMF which is installed natively with the OS. Interop of these versions will be supported if Exchange is deployed on different OS versions, but there is no plan to support standardization on WMF versions across different OS versions.

      1. Mat Simon says:

        That’s a bit sad to hear, since PowerShell v5 has brought many useful additions (thinking abut extracting archives for pointing one simple but helpful feature). It’s in daily use where you realize when going back to pre-v5 PowerShell what you are missing.

      2. sime3000 says:

        Hello Exchange Team,
        Why are some redirection functions apparently not working in the Exchange Management shell ? e.g. in Exchange 2013 CU13 if you run “Get-MailPublicFolder 3> output.txt” to redirect warning messages to a text file, any warning messages will be visible on the screen but the output file will be empty.

        1. sime3000 says:

          Hello Exchange Team,

          Just wondering if I will need to wait two years for an answer to this question as I did with my previous question.

          In case you missed it my question was … Why are some redirection functions apparently not working in the Exchange Management shell ? e.g. in Exchange 2013 CU13 if you run “Get-MailPublicFolder 3> output.txt” to redirect warning messages to a text file, any warning messages will be visible on the screen but the output file will be empty.

          Thanks

          1. sime3000 says:

            Hello Exchange Team,

            Its been two weeks since I posted this question and I’m just wondering if I will need to wait two years for an answer to this question as I did with my previous question.

            In case you missed it my question was … Why are some redirection functions apparently not working in the Exchange Management shell ? e.g. in Exchange 2013 CU13 if you run “Get-MailPublicFolder 3> output.txt” to redirect warning messages to a text file, any warning messages will be visible on the screen but the output file will be empty.

            Thanks

          2. sime3000 says:

            Hello Exchange Team,

            Its been three weeks since I posted this question and I’m just wondering if I will need to wait two years for an answer to this question as I did with my previous question.

            In case you missed it my question was … Why are some redirection functions apparently not working in the Exchange Management shell ? e.g. in Exchange 2013 CU13 if you run “Get-MailPublicFolder 3> output.txt” to redirect warning messages to a text file, any warning messages will be visible on the screen but the output file will be empty.

            Thanks

          3. sime3000 says:

            Hello Exchange Team,

            Its been four weeks since I posted this question and I’m just wondering if I will need to wait two years for an answer to this question as I did with my previous question. I guess you folks must be really busy!

            In case you missed it my question was … Why are some redirection functions apparently not working in the Exchange Management shell ? e.g. in Exchange 2013 CU13 if you run “Get-MailPublicFolder 3> output.txt” to redirect warning messages to a text file, any warning messages will be visible on the screen but the output file will be empty.

            Thanks

          4. sime3000 says:

            Hello Exchange Team,
            Its been five weeks since I posted this question and I’m just wondering if I will need to wait two years for an answer to this question as I did with my previous question. I guess you folks must be really busy!
            In case you missed it my question was … Why are some redirection functions apparently not working in the Exchange Management shell ? e.g. in Exchange 2013 CU13 if you run “Get-MailPublicFolder 3> output.txt” to redirect warning messages to a text file, any warning messages will be visible on the screen but the output file will be empty.
            Thanks

        2. sime3000 says:

          Hello Exchange Team,
          Its been six weeks since I posted this question and I’m just wondering if I will need to wait two years for an answer to this question as I did with my previous question. I guess you folks must be really busy!
          In case you missed it my question was … Why are some redirection functions apparently not working in the Exchange Management shell ? e.g. in Exchange 2013 CU13 if you run “Get-MailPublicFolder 3> output.txt” to redirect warning messages to a text file, any warning messages will be visible on the screen but the output file will be empty.
          Thanks

          1. sime3000 says:

            Hello Exchange Team,
            Its been seven weeks since I posted this question and I’m just wondering if I will need to wait two years for an answer to this question as I did with my previous question. I guess you folks must be really busy!
            In case you missed it my question was … Why are some redirection functions apparently not working in the Exchange Management shell ? e.g. in Exchange 2013 CU13 if you run “Get-MailPublicFolder 3> output.txt” to redirect warning messages to a text file, any warning messages will be visible on the screen but the output file will be empty.
            Thanks

          2. sime3000 says:

            Hello Exchange Team,
            Its been eight weeks since I posted this question and I’m just wondering if I will need to wait two years for an answer to this question as I did with my previous question. I guess you folks must be really busy!
            In case you missed it my question was … Why are some redirection functions apparently not working in the Exchange Management shell ? e.g. in Exchange 2013 CU13 if you run “Get-MailPublicFolder 3> output.txt” to redirect warning messages to a text file, any warning messages will be visible on the screen but the output file will be empty.
            Thanks

          3. Chris Webb says:

            How about you put in a support ticket instead of looking like a moron posting over and over.

          4. sime3000 says:

            Hello Exchange Team,
            Its been nine weeks since I posted this question and I’m just wondering if I will need to wait two years for an answer to this question as I did with my previous question. I guess you folks must be really busy!
            In case you missed it my question was … Why are some redirection functions apparently not working in the Exchange Management shell ? e.g. in Exchange 2013 CU13 if you run “Get-MailPublicFolder 3> output.txt” to redirect warning messages to a text file, any warning messages will be visible on the screen but the output file will be empty.
            Thanks

  18. Great news! One question – why wasn’t KB3161916 mentioned in the list of fixes for both CU’s?

    1. Michel, this is an oversight. Thanks for pointing this out. We will get this corrected.

  19. David B says:

    running setup /m:upgrade /IAcceptExchangeServerLicenseTerms fails with the following error:

    Cannot find path ‘C:\Program Files\Microsoft\Exchange Server\V15\UnifiedMessaging\grammars’ because it does not exist.

    it looks like the directory does not exist and should be created.

  20. Jürgen says:

    Hello all, just one more question. Is the Security Hotfix KB3150501 also included in CU13?
    Thank you Jürgen

    1. Yes, as indicated in the Cumulative Update KB’s, the fix is included in both releases.

  21. medevacs says:

    Can someone please update this table https://technet.microsoft.com/library/hh135098.aspx with the newest RUs for Ex2007 and Ex2010?
    – Exchange 2007 SP3 RU20 – https://www.microsoft.com/en-us/download/details.aspx?id=52769
    – Exchange 2010 SP3 RU14 – https://www.microsoft.com/en-us/download/details.aspx?id=52766

  22. Paul K says:

    Any official documentation for moving Modern Public Folders from On-Prem Exch2013/2016 to Office 365/Exchange Online yet? All documentation seems to cover Exchange 2007 or Exchange 2010 only.. i.e https://technet.microsoft.com/en-GB/library/jj200758(v=exchg.150).aspx

    I’ve asked at https://social.technet.microsoft.com/Forums/office/en-US/77f6aa27-e462-4e21-8234-c5d2d65aa2e8/move-exchange-2013-public-folders-to-exchange-online-office-365?forum=exchangesvradmin and even on the forums there is uncertainty with some saying 3rd party migration wizards are still the best option, others saying to perform a PST export and import and someone else saying that you can simply move the Public Folder Mailbox to Office 365 and that’s it (if it’s the latter, I’ll buy everyone on the dev team a beer)

    Can we pleeeeeeeeeeeeeeeease get some official documentation on this?

  23. Richie Coan says:

    Because of this new method of determining IsClientAccessServer we are no longer able to set the external access domain and also not able to created a front end transport receive connector

  24. Harry says:

    Hello, we are running Exchange 2016 CU1 for pilot users. we have experienced several issues, like Outlook cannot connect after mailbox is migrated to Exchange 2016, free/busy not working after mailbox is migrated. It turns out we have to recycle MSExchange app pools manually. It seems the issues happened since Exchange 2013, and till now Exchange 2016 CU1, the issues have not been addressed. Is this Exchange bug or Windows 2012 R2 IIS bug. I have checked Exchange 2016 CU2 fixed list, I don’t see it. Does Microsoft have ETA to address the issues. Thank you!

    1. Phillip Lyle says:

      I think you are referring to the need to recycle the Autodiscover app pool, which causes the issue you describe. Not sure if it’s fixed in CU2 or not. Lots of people are experiencing this problem – I’m surprised it’s not more widely addressed on this blog.

      1. Harry says:

        Right, Outlook cannot connect after mailbox is migrated to Exchange 2016 can be fixed by recycling MSExchangeAutodisverAppPool manually; free/busy issue can be fixed by MSExchangeServicesAppPool manually…
        These are big issues. Microsoft need to address these asap.

  25. Benoit Boudeville says:

    With the support of .NET Framework v4.6.1, is it supported to enable the PortReuseOnSocketBind network optimization that was introduced in .NET 4.6 ? Since Exchange seems to target v4.5, sockets created in the HttpProxy probably don’t make use of this. However, this can be enabled globally on the server by setting HWRPortReuseOnSocketBind in the registry. I’ve faced a port exhaustion issue in the past with Mapi/HTTP where sudden bad network conditions (datacenter links dropping randomly in a full Active/Active infrastructure (following the Unbound model)) were causing port exhaustion because sockets were not freed fast enough + not reused. Rare conditions, I have to admit but thinking of enabling this optimization could be beneficial… for both stability and scalability of large Exchange environments.

    Now that this is not documented at all for Exchange, it is likely not supported.
    Any plans to look at using this scalability feature in the future ?

    1. As you suspected, we are still targeting 4.5.2 compatibility. We have not yet taken any hard dependencies on 4.6.1 features. You can expect that at some point in the future though. We are looking at port re-use provided by the OS with Exchange Server but don’t support this at the moment.

  26. Mike says:

    No DKIM support yet? Third-party plugins add bugs, maintenance and uncertainty about things breaking as Exchange is updated, so official support for both signing and incoming tests is highly desirable.

  27. After upgrade to Exchange 2016 CU2, in ECP doesn’t show “Client Access” role in Server tab.
    Before upgrade Exchange 2016 servers displayed as: “Client access, Mailbox”, after upgrade: “Mailbox”
    Exchange 2013 CAS-servers before upgrade displayed as: “Client Access”, after upgrade: “None”.
    Is it just cosmetic issue?

    1. Benoit Boudeville says:

      @Renat: See “Change to Get-ExchangeServer Cmdlet” in the release notes. Remember the EAC uses cmdlets; therefore this is consistent.

      1. Missed this change when read article. Thank you!

  28. Medha Cloud says:

    This is great news, Thanks.

  29. Robert Affleck says:

    Hoping this will clear up my Application Log which is full of MSExchangeCommon Critical 106 errors in regards to performance counters be fouled up. Prior fixes either don’t work or come back after a reboot. PLEASE make it easier to turn off these type of errors in the future.

    1. Robert Affleck says:

      The update fixed my (and others) issues with the MSExchangeCommon 106 errors – but perhaps any resinstall would have corrected it as well.

      1. Hi Robert,
        if this happens again, this can be fixed manually by running:

        Add-PSSnapin Microsoft.Exchange.Management.PowerShell.Setup
        Get-ChildItem “C:\Program Files\Microsoft\Exchange Server\V15\Setup\Perf” `
        | Where-Object {$_.Name -match “.xml”} `
        | Foreach {
        Write-host “Importing ” $_.fullname
        New-PerfCounters -DefinitionFileName $_.FullName
        }

  30. Mat Simon says:

    Hi

    Not certain where to report this exactly but maybe that’s one place to drop a line for CU2:

    Setup.exe if executed in CLI mode still tells it is CU1 – if run in graphical mode it is saying CU2 though, minor glitch that can happen, no worries.

    However I was able to reproduce a annoying glitch with CU2 (which I couldn’t confirm on CU1 since already updated):
    Have a shared mailbox with “MessageCopyForSentAsEnabled” enabled, and permit the right to send as throguh a group. Members of that group can “send as” as that shared mailbox yet their sent mail doesn’t get copied to the sent items folder of the shared mailbox. However if the user is given the right directly as user object, things work as expected.

  31. Barebodkin says:

    Be aware this upgrade will remove the “reset password” role from the organization management RBAC group and will also remove it from any other RBAC groups you may have given it to. It will also take away the -delegating permission from the organization management group, so you’ll have to start over and scour the internet for the necessary commands to restore the ability to reset passwords through the EAC, both for yourself, and for anyone you’ve delegated this to.
    Exchange Team: please consider making it less difficult in the future, to utilize the excellent reset password feature you built into the EAC, both for administrators and for the help-desk people we might delegate this ability to. If the security types won’t allow this, at least consider rewriting the related technet articles to clearly explain the procedure, not only the commands which must be typed, but the fact that they must be typed from an exchange server and won’t work if typed on a workstation with management tools installed. Personally, I found this frustrating. Just my two cents worth.

  32. MeMyselfandI says:

    We have 2 Exchange 2013 CU3 running (DAG), what do we need to upgrade to the most recent version ? Which in-between Updates do we have to install ?

  33. enid says:

    Is there any plan to support DKIM function of on-premise exchange 2013 version? Thank you !

    1. Alan Plummer says:

      For the guy that asked about DKIM. We use this….works perfectly.
      http://www.netal.com/dkimx.htm

  34. Viktor Ninov says:

    Hello Exchange Team,

    Due to some objective reasons (Veritas Enterprise Vault) we are not able to upgrade our Exchange 2013 environment past CU9.

    Will the security update for Exchange 2013 do any harm?

    1. Veritas EnterpriseVault supports Exchange Server 2013 CU10, 11 and 12. See Enterprise Vault Compatibility List dated July 1, 2016 (https://www.veritas.com/support/en_US/article.TECH38537).

      1. Viktor Ninov says:

        Hello Bharat,

        Sorry, missed to say we have Veritas Enterprise Vault 10 version :)

        I found out, that the dedicated Security Update cannot be run on our Exchange Servers due to the incompatible version.

        Is there a way for the security update to be installed on a CU9 Exchange?

  35. All2surreal says:

    Hi. So with CU13 does that fix the issue that CU12 had with the installation taking a very long time? Or is that issue still remain and we have to do that command line thing still?

    1. Viktor Ninov says:

      Hi,

      We are unable to install any CU later than 9, due to incompatibility with EV 10.

      So my question is, is there a way to install the security update for Exchange, described in https://support.microsoft.com/en-us/kb/3150501?

  36. Human says:

    There is probably a bug in Exchange 2016 CU2. Don’t know, about previous CU and 2016 versions.

    When you create a new Admin Role (under permissions), or copy existing role and try to save it, it will give you error:

    “Object class organizationalUnit is not recognized as a valid object class for E-mail recipient objects.”

    Can’t create new or modify existing admin role from E2016 CU2, from shell the same…

    When i paste a wrong OU, it recognize that is “doesn’t exist”

    From E2010 the same thing works (Exchange 2010 SP3 Rollup13).

    1. Barebodkin says:

      Same problem in 2016 CU2 as described by “Human” here, unable to create new management role group. Error message is:
      “Object class organizationalUnit is not recognized as a valid object class for E-mail recipient objects.”

  37. SaP2016 says:

    I did not receive a response before on why the CU1 install failed when a second ActiveSync Virtual Directory wasadded to the FE. Getting the same error with CU2 install. The CUs just do not appreciate the presence of a second virtual directory added for ActiveSync. The same was occurring in Ex 2013 when a second OWA virtual directory was present. How do I go about to resolve this issue? Anyone knows?

  38. Aleh Alisevich says:

    what about compartibility Ex2013CU13 with NET 4.6.2

  39. FP says:

    Installing Ex2013 CU13, Prerequisite Analisys gets to 98% and then stays there for ever! no errors, just stuck at 98%, any ideas? thanks! (it happens either running from CLI or GUI)

Comments are closed.

Skip to main content