Hi guys, Right now i have 1 exchange hosting all roles in 1 AD site (A) and 1 subnet (10.0.10.0/24). I'm going to create a second (B) and third (C) AD site to reflect our physical architecture. So i'll also adding the new subnets and link them to the correct AD site (10.100.x.x/16 for C and 10.10.x.x/16 for B). I will not add any other exchange server. Each will have 2 DC. i did it 2 days ago and propagate the changes to all DC and exchange started to go wonky (owa not working, outlook not connecting, try to reboot OWA authentication service without success so i restarted exchange server). THen i removed all changes, propagate to all DC and everything came back. Did the sites changes have anything related to that exchange issue or is it a simple coincidence? I've read some stuff on exchange 2010 and AD site but didn't find anything that could have made exchange going wonky. Any thoughts? Thanks

From what you have said, it shouldn't. If Exch is in Site A, and that has a GC, Exch has the correct IP/subnet for Site A then it should continue to work. Adding more AD sites with DC/GC should not effect this. I'd check the event logs for further info and run the ExchBPA to give a a check. I'd also check the 2080 event in the app logs around the time of failure and see if that looks good. Sukh

ok so i've done some changed. here is the situation now (i can alway roll back): Site A : 10.0.0.0/16 and 192.168.0.0/16 (trying to move away from it) 2 dc Site B : 10.10.0.0/16 2dc Site C: 10.100.0.0/16 2dc and the exchange with all roles on it I can sent but can't receive. In the event viewer i have now : The connection to mailbox "domain\user" on Mailbox server "TOR-EXCHANGE01.domain" failed. Examine the event log of Mailbox server "TOR-EXCHANGE01.domain". More information TOR-EXCHANGE01.domain any thoughts?

what does event 2080 show?Sukh

i don't have event 2080 i have event 1032 warnings. So nowi put exchange back in site A where it was at the beginning, i can send/receive email but can't access owa. Pretty sure the warning stands for taht.

you should have an 2080 in the app log regardless. what do the 1032 say? post the exact event.Sukh

Log Name: Application Source: MSExchange ActiveSync Date: 11/30/2011 6:32:33 PM Event ID: 1032 Task Category: Requests Level: Warning Keywords: Classic User: N/A Computer: TOR-EXCHANGE01.domain Description: The connection to mailbox "domain\user" on Mailbox server "TOR-EXCHANGE01.domain" failed. Examine the event log of Mailbox server "TOR-EXCHANGE01.corp.achievers.com". More information TOR-EXCHANGE01.domain Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="MSExchange ActiveSync" /> <EventID Qualifiers="32772">1032</EventID> <Level>3</Level> <Task>1</Task> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2011-11-30T23:32:33.000000000Z" /> <EventRecordID>105413</EventRecordID> <Channel>Application</Channel> <Computer>TOR-EXCHANGE01.domain</Computer> <Security /> </System> <EventData> <Data>domain\user</Data> <Data>TOR-EXCHANGE01.domain</Data> <Data>Microsoft.Exchange.Data.Storage.WrongServerException: The user and the mailbox are in different Active Directory sites. ---&gt; Microsoft.Mapi.MapiExceptionMailboxInTransit: MapiExceptionMailboxInTransit: ExchangePrincipal detected site violation (hr=0x0, ec=1292) --- End of inner exception stack trace --- at Microsoft.Exchange.Data.Storage.ExchangePrincipal.UpdateDatabaseLocationInfo(AMUpdateFlags amFlags, DatabaseLocationInfo&amp; newDbInfo, Boolean&amp; locationChanged) at Microsoft.Exchange.Data.Storage.ExchangePrincipal.UpdateDatabaseLocationInfo(AMUpdateFlags amFlags) at Microsoft.Exchange.Data.Storage.MailboxSession.Initialize(MapiStore linkedStore, LogonType logonType, ExchangePrincipal owner, DelegateLogonUser delegateUser, Object identity, OpenMailboxSessionFlags flags, GenericIdentity auxiliaryIdentity) at Microsoft.Exchange.Data.Storage.MailboxSession.&lt;&gt;c__DisplayClass12.&lt;CreateMailboxSession&gt;b__10(MailboxSession mailboxSession) at Microsoft.Exchange.Data.Storage.MailboxSession.InternalCreateMailboxSession(LogonType logonType, ExchangePrincipal owner, CultureInfo cultureInfo, String clientInfoString, IAccountingObject budget, Action`1 initializeMailboxSession, InitializeMailboxSessionFailure initializeMailboxSessionFailure) at Microsoft.Exchange.Data.Storage.MailboxSession.CreateMailboxSession(LogonType logonType, ExchangePrincipal owner, DelegateLogonUser delegateUser, Object identity, OpenMailboxSessionFlags flags, CultureInfo cultureInfo, String clientInfoString, PropertyDefinition[] mailboxProperties, IList`1 foldersToInit, GenericIdentity auxiliaryIdentity, IAccountingObject budget) at Microsoft.Exchange.Data.Storage.MailboxSession.ConfigurableOpen(ExchangePrincipal mailbox, MailboxAccessInfo accessInfo, CultureInfo cultureInfo, String clientInfoString, LogonType logonType, PropertyDefinition[] mailboxProperties, InitializationFlags initFlags, IList`1 foldersToInit, IAccountingObject budget) at Microsoft.Exchange.Data.Storage.MailboxSession.Open(ExchangePrincipal mailboxOwner, WindowsPrincipal authenticatedUser, CultureInfo cultureInfo, String clientInfoString, Boolean wantCachedConnection) at Microsoft.Exchange.Data.Storage.MailboxSession.Open(ExchangePrincipal mailboxOwner, WindowsPrincipal authenticatedUser, CultureInfo cultureInfo, String clientInfoString) at Microsoft.Exchange.AirSync.Command.OpenMailboxSession(AirSyncUser user, Boolean shouldUseBudget) at Microsoft.Exchange.AirSync.Command.WorkerThread()</Data> </EventData> </Event>

The user and the mailbox are in different Active Directory sites. ---&gt; Microsoft.Mapi.MapiExceptionMailboxInTransit: MapiExceptionMailboxInTransit: ExchangePrincipal detected site violation That's what it's , moainf about, do you have a GC in the same site as Exch?Sukh

Yes i had one. I roll back everything, so now still working but not as it should be. Site A : 4 DC + Exchange and subnet 10.0.10./24 Site B : 2 DC and no subnet attached to it.

defo a GC and not only a DC?Sukh

they are all GC by default.

When you do the test again Run the ExchBPA Check the event logs for 2080Sukh

I just ran it to see if i had any issue right now taht's working and i just have a certificate issue because the host address is mail.domain.com i put a cert for *.domain.com... Otherwise, i have some warnings about 1 open-relay(made for intern software), network driver, temporary file path. Nothing alarming for the moment. But ExchBPA can't connect to the mail-gw which is a exchange in edge mode.

I didn tknow you had an edge So, how many Exch servers do you have and what roles do you have on each. You will have to run the ExchBPA from the Edge itself.Sukh

so i have 1 exchange edge, not in AD and another exchange with hub/mailbox/cas in AD. I ran ExchPBA on the edge and didn't find anything critical.

When you're moving your Exch server, you are moving this to another subnet which is mapped to another AD site?Sukh

in fact i'm not moving exchange, just creating subnet taht corresponds to reality. Right now i only have 1 subnet, 10.0.10.0/24 and only 2 DC/GC are in this network (Site A), all users and other server are on site A but in a 192.168.0 network. Whenever i created a network for site B (where there is 2DC/GC) exchange stop working for everyone.

Which subnet do you put the Exch servers on? I still dont know what you see in the 2080 event ID when you have moved the servers across?Sukh

edge is 10.110.0.25 (dmz) and exchange is on 10.100.40.25 i didn't see any 2080 event id when exchange moved, maybe because it was a the beginning of the move an after it was complaining about mb and user not being in the same site.

So when you move the Exch to another subnet, what subnet is the GC on ?Sukh

i am not moving exchange ot another subnet, just adding the subnet on the Sites and Service Console. When i created the subnet, there is a GC on the same subnet as exchange (10.100.40.16 is the GC)

So all your are doing is creating a new subnet, and assigning this to a new AD site? You are not assigning this new subnet to ANY server or client?Sukh

that's it!

What's the solution to this then?Sukh

i meant that's it, you have understood my situation :)