Email destined for recently moved Modern Public Folders are going to the Poison queue.

Scenario I recently worked a case where the customer had moved all of the public folders from one Modern Public Folder mailbox to another and deleted the old Public Folder mailbox. This was on Exchange 2013 CU9. After he did that, email destined for what were previously mail-enabled Public Folders started to show up in the…


O365 Migration that completes with warnings due to insufficient rights.

The Problem: With the rise in Hybrid configurations around the world, we are starting to see some regular occurrences of issues around migrating from OnPremises exchange (called OnPrem henceforth) to O365. Perhaps the most common is one where most users migrate fine, but a select few only partially migrate. When you look at the migration logs, they…


No properties available on the Exchange Org container in AD Sites and Services

Scenario: So I ran into an odd case this week where the customer could not see the properties of their Exchange Org container in AD Sites and Services. Not only could they not see it, it’s icon, which should have been a folder icon, was actually the notorious Unknown icon. It looked as such: When…


Only seeing first receive event when doing message tracking against a public folder that was migrated to O365 from Legacy Exchange

In Exchange 2010 and older (legacy exchange), when you migrate a public folder to O365, it makes a change that causes message tracking to only show the initial receive event when running message tracking against the legacy namespace. Scenario A Public Folder with a Primary SMTP email address of gets migrated to O365. You…


1007 AccessDenied: Access Denied when trying to renew Federation Certificate

The 1007 AccessDenied event is usually tied to a time skew issue and that should always be confirmed before proceeding, however, that is also the error you will get when you try to renew a federation certificate in Exchange, when the old certificate has already exceeded the expiration date. Scenario I am trying to replace…


Shared Free/busy between two untrusted forests failing in one or both directions

In a recent case, I found a pretty common mistake many customers make when setting up their free/busy sharing between two untrusted orgs or more appropriately, when they set up their trusted and intermediate certs for their target domains. Scenario: Contoso and WingTipToys are two partner companies with no forest trust between them that want to…


Unable to expand legacy onPrem Public Folders with O365 account

I have been seeing a few scenarios lately where users who log into Exchange using an account other than the OnPrem User Principal Name (UPN) are running into various difficulties. Today we will focus on one of those scenarios. We will discuss how we figured it out and what needs to be done to get the desired functionality….


Microsoft Filtering Management Service won’t start on Exchange 2013

Issue In a recent case, the transport service on an exchange 2013 server was failing to start due to a dependency failure (Error 1068: The dependency service or group failed to start). As it turned out, it was dependent on the Microsoft Filtering Management Service (FMS.exe), and that was the service that was having trouble…


Mitigating Mail Loops when using Auto Reply in Exchange 2010

Symptoms When you enable Auto Reply for the Default(*) Remote Domain in Exchange 2010, you are increasing the risk of causing a mail loop. Cause When you send an auto reply to a message, and the recipient has either an auto-reply or Out Of Office set, their reply can cause your auto-reply to send another…