Category Archives: Windows

Remote principal name is not configured in trusted server list.

After buying a CA sign certificate from Geotrust i got this in my Event viewer:

Remote principal name is not configured in trusted server list.

The subject name sip.XXX.com of the certificate assigned to process AVMCUSvc(1788) was not found in the trusted server list.
Certificate serial number: OU=Equifax Secure Certificate Authority, O=Equifax, C=US
Certificate issuer name: 0DA2A3.
Cause: Incorrect setup of the pool. Should never happen.
Resolution:
Verify that the Subject Name of the certificate presented by the remote peer is configured in the trusted server list.

For more information, see Help and Support Center at

I fix this problem by typing:

c:
cd \
cd “C:\Program Files\Microsoft Office Communications Server 2007 R2\ResKit”
cscript OCSTrustEntry.vbs /action:add /FQDN:sip.XXXX.com /type:TrustedServer

Sponsor link: http://www.it-århus.dk / http://www.it-aarhus.dk

Exchange Active Sync test

Hvis nogen har brug for at teste Active Sync, men ikke lige syntes de vil ødelægge deres egen telefons opsætning for at teste en given opsætningen, kan produktet her anbefales:

http://www.microsoft.com/DOWNLOADS/details.aspx?FamilyID=38c46aa8-1dd7-426f-a913-4f370a65a582&displaylang=en

Det er en windows mobile emulator.

For at få netværk til at virke, kan henvises til denne guide:

http://www.betterthaneveryone.com/archive/2008/08/31/getting-network-access-on-the-windows-mobile-emulator.aspx

Office Communications Server 2007 R2: Installation failed with: Failure [0xC3EC78D8] Failed to read the Office Communications Server version information. This can happen if the computer clock is not set to correct date and time.

Its was solved by uninstall KB974571.

Microsoft recommends to postpone installing KB974571 on any LCS 2005 / OCS 2007 /OCS 2007 R2 servers.

Microsoft is investigating this issue, and will determine the most appropriate way to address it. Customers who are not running OCS or LCS server are not affected by this known issue, and can safely ignore this issue.

Customers who have deployed the OCS or LCS product on a server should assess the risk that is involved to decide whether to install the security update on that server. These customers should revisit this Knowledge Base article often, because this article will be updated as soon as more information and a resolution are available.

Office Communications Server 2007 R2: Installation failed with: Failure [0x80070005] Access is denied.

If you installation failed with: Failure [0x80070005] Access is denied.

This is a problems with administrator rights.

Please check the following things:

  1. The user need to be a domain user.
  2. The user is member of: Domain Admins group and RTCUniversalServerAdmins group. (Remember to relogon after you have put the user in these group).

Then right click on the installation file:

\Setup\amd64\setupee.exe (For enterprise)
\Setup\amd64\setupse.exe (For standard)

And then click Run As, then run it without “Run this program with restricted access”

Now you should be able to installed the Office Communications Server 2007 R2

OWA is not working with “owaauth.dll failed to load”

The first error had an Error ID of 2214 and a description of:

“Could not load all ISAPI filters for site ‘DEFAULT WEB SITE’.  Therefore site startup aborted.”

The second error had an Error ID of 2268 and a description of:

“The HTTP Filter DLL C:\Program Files\Microsoft\Exchange Server\ClientAccess\owa\auth\owaauth.dll failed to load.  The data is the error.”

I have resolv this error by copying the C:\Program Files\Microsoft\Exchange Server\Bin\extrace.dll to c:\windows\system32\

Why Exchange OWA can’t find the file in orginal place i can’t answher? But now OWA is working again

Securing a Exchange 2007 Client Access server, with a signed certificates

Securing a Exchange 2007 Client Access server, with a signed certificates

First to request a certificates start Exchange Management Shell

Type this into the console:

New-ExchangeCertificate -DomainName exchange01.domainname.local, webmail.domain.prefix -FriendlyName ”Microsoft Exchange” -GenerateRequest:$True -Keysize 2048 -path c:\certrequest.txt -privatekeyExportable:$true -subjectName “c=DK, o=organization name, CN=webmail.domain.prefix”

Change domainname.local, domain.prefix (2 places) and last change you organization name.

Now you get a file, name c:\certrequest.txt. The content of this file, you can send this to yours 3rd party certificate authority.
After this you got an a signed certificates back, as you need to import into the Exchange servers, this is done like this.

Copy the sign certificates to a file in the root of c:\ name signcert.txt
And run this in the Exchange console

Import-ExchangeCertificate –Path c:\signcert.txt | Enable-ExchangeCertificate –Services IIS,POP,IMAP,SMTP

Exchange 2003 and powershell

Have you ever need a list of yours mailbox and the size of it. You can find this in system manager, but you cannot export this list.
With Powershell you can get a list that you example can import in excel.
First you need to download and install powershell, you can download powershell from here:
http://www.microsoft.com/windowsserver2003/technologies/management/powershell/default.mspx

After you have downloaded and install it, type this command in the powershell

get-wmiobject -class Exchange_Mailbox -Namespace ROOT\MicrosoftExchangev2 -ComputerName servername | select-object MailboxDisplayName,TotalItems,Size

Change “servername” to you servers name example exchange01