Monday, August 1, 2011

Echange Certificate expires

On SBS 2008, one year after the initial installation, your Exchange 2007 certificate will be expired.

Under Exchange Shell
Get-ExchangeCertificate | List
Locate the expired certificate and copy the footprint
Create a new certificate

New-ExchangeCertificate
Copy the new certificate thumbprint in order to activate it.
Enable-ExchangeCertificate -Thumbprint F7A8F1B443A0E7266C72CDE0603302C07B856076 -Service IIS
Then you can remove the old certificate.

Remove-ExchangeCertificate -Thumbprint 157700393E5D76615E855A773CFA08AB5842DFB0


After, you will need to install the new certificate to your computers. You can use GPO to do it.

Wednesday, March 16, 2011

How to fix Exchange 452 4.3.1 Insufficient system resources

The first symptom : no incoming mails in your Exchange Organisation.
The first test to make : try to test your incoming SMTP service using telnet.
If you have the following result, you're reading the right post !
452 4.3.1 Insufficient system resources
If you have a quick look in your event log, you will find a 15002 event message, explaining you that your disk space is low. Here we are.
Different security levels are set in exchange, chained to different reactions : http://technet.microsoft.com/en-us/library/bb397220(EXCHG.80).aspx

Two ways to get out of this issue :
  1. increase disk space
  2. disable the Back Pressure Feature
For the first point, no lesson, just act as you are used to.
For the second point : Back Pressure Feature.
Differents triggers :
  • Disk space, memory, ...
Three levels :
  • Normal Action: The Exchange Server 2007 Server accepts new connections and messages.
  • Medium Action: The resources sre starting to be overused. Back pressure is applied to the server in a limited manner. Messages from senders in the authoritative domain can flow, but the server will reject new connections and messages from other sources.
  • High Action: A resource is being overused. All message flow will stop and the server will reject all new connections and messages.
To disable the Back Pressure Feature, you have to edit the file located in the bin folder of your exchange server : EdgeTransport.exe.config
Locate the EnableResourceMonitoring param and put the value to "false".
Restart the Exchange Transport Service using the exchange shell :
Restart-Service msExchangeTransport
Sources :

How to test SMTP server using telnet : here is the script

telnet mail.mydomain.com 25
EHLO mydomain.com
MAIL FROM:chris@microsoft.com
RCPT TO:kate@mydomain.com NOTIFY=success,failure
DATA
Subject: Test depuis Contoso

This is a test message
.
QUIT
Source : http://technet.microsoft.com/fr-fr/library/bb123686.aspx
Simple version : http://exchange.mvps.org/smtp_frames.htm