Failed Security Audits 4625 HMWorker Exchange 2013

Failed Security Audits 4625 HMWorker Exchange 2013

One of the first problems I encountered after Installing Exchange 2013 on Windows Server 2012 ( and R2 ) was that my security log grew to 200k events in just a few days. Event ID 4625 Unknown user name or bad password coming from your Healthmailox usually under the name of HealthMailbox4d14f344f…@domainname. The process producing it was “C:\Program Files\Microsoft\Exchange Server\V15\Bin\MSExchangeHMWorker.exe”. The problem itself is a bit masked. On the client side you can barely notice any problems but your Event Viewer is a different story. The problem indicates problems with your Health mailboxes even without upgrading or migrating. It happens with new installs too. So searching the web I found the solutions which at this point are very limited for such new technologies as Windows Server 2012 R2 and Exchange 2013.

I found the solution of re-creating your Health monitoring mailboxes to be working well for me. Here is how :

Open Exchange Management Shell as Administrator and type :

Get-Mailbox -monitoring | Get-MailboxStatistics

get-mailbox-monitoring

As you can see the ItemCount is large. We will be removing these mailboxes but we don’t have the full names displayed here. So we will run the same command put “| fl” it.

Get-Mailbox -monitoring | Get-MailboxStatistics | fl

get-mailbox-monitoring-fl

Remove-Mailbox -Identity HealthMailbox4d14f344f6294c1fb8d3f45bf436452a and confirm Y.

remove-mailbox

Do this for the rest of the health monitoring mailboxes. Take their Identities from the “Get-Mailbox -monitoring | Get-MailboxStatistics | fl” command.

After your are done deleting them you will have to re-run the PrepareAD cmd from the Exchange setup.

Navigate your Exchange Shell to the bin directory of Exchange installation:

cd “Program Files\Microsoft\Exchange Server\V15\bin”

Once there type

setup.exe /preparead /iacceptexchangeserverlicenseterms

Wait for the setup to finish and restart the Exchange Health Manager service.

net stop msexchangehm

net start msexchangehm

setup-prepare-ad

This should re-create your health mailboxes. Run the Get-Mailbox -monitoring | Get-MailboxStatistics to double check.

 

 

 

Can’t remove additional mailboxes in Outlook

Can’t remove additional mailboxes in Outlook

Have you ever wondered why you can’t close down your additional mailboxes in Outlook, returning you this error :

Can't remove additional mailbox from Outlook

Only to find out that your Account Settings tab is empty?

Can't remove additional mailbox from Outlook

Well there is still hope. There are two options. You can just re-create the Outlook profile and hope that this fixes it or you can choose to explore more options. One of these options is called Auto Mapping and is introduced in Exchange 2010 and 2013.

It basically automatically adds any mailboxes you have Full Access to directly into your Outlook client. This is designed to reduce the administrative time to give such access especially for helpdesk teams where a single click can provide you with Full Access but you need still to do a remote session to the customer’s computer and add the mailbox into their Outlook.This is for the customers that don’t know how to do it themselves and believe me 90% of them don’t.

However touching the automapping cannot be done through the GUI and would need Shell. Here is the command :

Add-MailboxPermission -Identity User1 -user “User2” -AccessRights FullAccess -InheritanceType All -AutoMapping:$false

where User 1 is the mailbox owner and User 2 is the user receiving the FullAccess rights to User1’s mailbox. -AutoMapping:$false or true turns off and on the automapping.

Can't remove additional mailbox from Outlook

Don’t worry if you run the command for users that already have Full Access to their mailboxes, it will still run the command properly.

For those of you who want to go even further here are the registry keys responsible for the Outlook profiles. Always backup your registry before editing !

HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Default

Going through Exchange 2013 Admin Center

Going through Exchange 2013 Admin Center

Exchange 2013 Admin Center – Whether you like it or not, Exchange 2013 has ditched the all beautiful Management Console and has gone to a web based ( in a browser ) management called Exchange Admin Center. Still buggy for me in IE 10. Here is a video of going through the different menus without going deep in to the details.

exchange 2013 admin center

Official MS Library article: http://technet.microsoft.com/en-us/library/jj150562.aspx

Here is the video. Enjoy:

Installing Exchange 2013 on Windows Server 2012

Installing Exchange 2013 on Windows Server 2012

Installing Exchange 2013 on Windows Server 2012 is new and interesting theme among the IT world nowadays and that’s why I tried installing it without reading what’s new and if anything else is required. I wanted to make a video of it and upload it unedited so it can show how a pure installation goes on without preparations and with any problems coming on the way. Installation is done on a virtual test machine with 8 GB of RAM. With a minimum requirements of 8 GB of RAM it was clearly not very optimal for running 2012 + Exchange 2013. Maybe a few more GB will make it run smooth. This time there are packages that need installing.

2010 Filter packhttp://www.microsoft.com/en-us/download/details.aspx?id=17062

installing exchange 2013 on windows server 2012

Service Pack 1 for Microsoft Office Filter Pack 2010 (KB2460041) 64-bit Edition –

http://www.microsoft.com/en-us/download/details.aspx?id=26604

Unified Communications Managed API 4.0 Runtime –

http://www.microsoft.com/en-us/download/details.aspx?id=34992

 

And here is the video. I repeat, it’s unedited so feel free to jump on long reboots or installations.