Exchange 2003 Domain to Domain Recovery

Warning! Please confirm in a test environment. I have not used these notes in some time and do not remember if they are complete!

This is the method used when new mailboxes were created in a new domain with the same domain name and server name. This assumes the files were in a clean state.

Open Active Driectory Users and Computers

Add Administrator to “Exchange Domain Server” group

To confirm files were closed in a Clean State

At a command prompt Go to the exchsrv\bin directory and run:

ESEUTIL /mh “path to the .edb” (use the quotes too)

Scroll up through the output and look for STATE=Clean Shutdown

If clean close the dos window and proceed

Open Exchange System Manager (proceed past any ok or warnings in the recovery store)

Expand >Adminstrative groups>First Administrative Group> Servers>

Right Click on the server and select New Recovery Storage Group

Note the creation path

and let it create

Right Click on Recovery Storage Group and select New Mailbox Store

Again note the path and let it create it

Make sure it mounts OK

Dismount the New Mailbox Store you just mounted

Go to the directory of your original .edb and.stm files you wish to use COPY them to the recovery store directory where the recovery mailbox store is.

Note the name of the store it created here _____________________________

Delete the store .edb and .stm files and rename your data to the same name

Delete the log files as well

Remount the store it should mount ok but the folders may not appear under it proceed to next step

Run ADSIedit.msc

Expand:

CN=Configuration

CN=Services

CN=”DOMAINNAME”

CN=Adminstrative Groups

CN=First Administrative Group

CN=Servers

CN=”SERVERNAME”

CN=InformationStore

CN=Recovery Storage Group

Right Click on CN=Recovery Storage Group and open properties

Click Show only attributes that have values

Scroll through the “msExchRecovery and msExchREcovery” and set it to TRUE and OK

Right click in the expanded name on the right and select properties

Click Show only attributes that have values

Check the “distinguishedName” field CN=Mailbox….

Check the “msExchOrigMDB” field CN=Mailbox….

Verify the path and that they match if not cut and paste to match them up then remount the store

Also Check the “LegacyExchangeDN” field /o=Domain name

Again verify the path and remount the store

The sub folders should appear in the mailbox store minus the Full Index

You should be able to see the users in the mailbox store

Go back to ADSIedit Scroll through the “msExchRestore” and set it to NOT SET and OK

Dismount and remount the store. After some time 30 minutes or so refresh and the Full index should appear.

Now you will have to dismount the users from their new

Comments

Post a Comment

Popular posts from this blog

FRS to DFSR Post Cleanup “File Replication NtFrs Stopped”

Image
After successfully migrating from FRS to DFSR you get the File Replication NtFrs service is Stopped error on the local servers AD DS Services list. In the Event logs you may see Event id 13575 13577. You can confirm your migration completed by opening a cmd prompt as administrator and typing in: dfsrmig /getmigrationstate After your migration to DFSR is completed and you have given your servers ample time to propagate this service is no longer required. Since it is set to “Automatic”, as shown below” it shows in logs as a false positive error. Edit the File Replication Service and change it to “Disabled”, as shown below: Once it is listed as “Disabled” it will no longer show in the Console as an “error” Note : it may take some time to clear from the active view
Read more

Domain Migration SubinACL /Migratetodomain How To:

Caution : DO NOT run this on Domain Controller C:\ and only run on roaming profiles folders, or my docs shares day of migration to avoid ownership change issues. Confirm Domain trust is in place and users and groups have been migrated Test ping of olddomain.org from new domain Test ping of newdomain.org from olddomain Add newdomain.org domain controller host records to olddomain.org including reverse DNS records Confirm the user running the app is a domain admin in BOTH domains Download SubinACL here: http://www.microsoft.com/en-us/download/details.aspx?id=23510 /Migratetodomain- command will add the permissions of the new user to the old files and folders for example if jimbob@olddomain.org was migrated to the new domain jimbob@newdomain.org and you run the command below any file or folder in that path that has jimbob@olddomain.org will add Jimbob@newdomain.org with the exact same permissions. This is a safer way to migrate by keeping the old and new permissions intact while a...
Read more

How to configure HP LaserJet Printer IPsec Encryption

Image
  I always recommend using a static IP for network printers. Once you have that configured use the printers web interface by going to that IP address using internet explorer. Select the” Networking” Tab > “IPsec/Firewall” as shown below: First we will add a rule to allow unencrypted traffic from all connections we will later define IPsec rules specific to the print server. You can set encrypted for all but keep in mind if it fails you will have a harder time remotely repairing it. Select “Add Rules” > “All IP Addresses” as shown below: Select “All Services” >”Next” as shown below: Select “Allow traffic…” >”Next” as shown below: Select “Finish” >”Next” as shown below: Select “OK” as shown below: It should take you back to the ” Networking” Tab > “IPsec/Firewall” as shown below: Note: “Enable IPsec/Firewall” is unchecked Now we will add an Encrypted Rule: Select “Add Rules” > “New” as shown below: Name the Rule, Specify the local and remote IP Addresses ...
Read more