New E2010SP1 transition: Missing FQDN in SPN; non-SMTP address space; DCOM
A few errors I'm receiving after adding one CAS and one multirole HT/MBX physical server in a single 2003 server environment for which I'm having problems finding the exact resolution. Their E2003 environment (ahp-exch01.domain.local) is all on one physcial host behind a firewall. Their public URL is webmail.domain.com. 1. BPA's only critical issue: The computer account for Exchange server ahp-exch01.domain.local does not appear to contain the fully-qualified domain name of Exchange SMTP virtual server 'Default SMTP Virtual Server'. This may cause Kerberos authentication to fail when sending messages between servers. The tool expected to find 'SMTPSVC/Webmail.domain.com' in the 'servicePrincipalName'. The article says to use this syntax: setspn.exe -a SMTPSVC/mail.yourdomain.com YOURSERVERNAME I want to confirm that the first field is the public URL (webmail.domain.com) and the second field is what? The E2010 CAS server name? The E2003 server name? The internal webmail alias (webmail.domain.local)? Something else? 2. After installing E2010, it imported two SMTP address spaces from E2003 which are configured for fax routing on the old E2003 server. The E2003 server has a fax application installed on the same server, as well as a Brooktrout TR1034 board. The fax software routes the faxes via SMTP to the localhost IP. They are using DNS instead of a smarthost for SMTP routing. The two error messages are: --- Non-SMTP address space 'SMS:*;1' was detected on the DNS SMTP connector 'FaxMaker SMTP Connector' in routing tables with timestamp 2/8/2012 7:38:20 PM. The address space is ignored on the connector because a non-delivery report (NDR) will be sent for the message or because the message will go to another connector. Exchange Server 2007 or Exchange 2010 tasks block this configuration. However, the connector may have been set up by Exchange Server 2003. --- Non-SMTP address space 'FAX:*;1' was detected on the DNS SMTP connector 'FaxMaker SMTP Connector' in routing tables with timestamp 2/8/2012 7:38:20 PM. The address space is ignored on the connector because a non-delivery report (NDR) will be sent for the message or because the message will go to another connector. Exchange Server 2007 or Exchange 2010 tasks block this configuration. However, the connector may have been set up by Exchange Server 2003. --- I found this link but it's unclear to me what specific steps I need to perform to resolve the errors: http://www.microsoft.com/technet/support/ee/transform.aspx?ProdName=Exchange&ProdVer=8.0&EvtID=5025&EvtSrc=MSExchangeTransport&LCID=1033 3. I'm getting these errors randomly on the HTMBX server even when the CAS server is online: --- DCOM was unable to communicate with the computer AHP-EXCAS01.domain.local using any of the configured protocols. --- Jim Thanks for any guidance you can offer.
February 8th, 2012 4:11pm

For the SMTPSVC SPN, I found this ancient link which did the best job IMO of covering internal/external references with setspn: http://www.tech-archive.net/Archive/Exchange/microsoft.public.exchange.connectivity/2006-11/msg00103.html I checked the virtual server in ESM and it already had Webmail.domain.com listed in the FQDN field. I ran following but it didn't list any changes, but ExBPA no longer barks about it. --- C:\Users\username>setspn -L ahp-exch01 Registered ServicePrincipalNames for CN=AHP-EXCH01,OU=Servers,DC=domain,DC=local: exchangeMDB/ahp-exch01.domain.local exchangeMDB/AHP-EXCH01 exchangeRFR/ahp-exch01.domain.local exchangeRFR/AHP-EXCH01 SMTPSVC/AHP-EXCH01 SMTPSVC/ahp-exch01.domain.local HOST/AHP-EXCH01 HOST/ahp-exch01.domain.local C:\Users\username>setspn.exe -a SMTPSVC/webmail.domain.com AHP-EXCH01 Registering ServicePrincipalNames for CN=AHP-EXCH01,OU=Servers,DC=domain,DC=local SMTPSVC/webmail.domain.com Updated object C:\Users\username>setspn -L ahp-exch01 Registered ServicePrincipalNames for CN=AHP-EXCH01,OU=Servers,DC=domain,DC=local: SMTPSVC/webmail.domain.com exchangeMDB/ahp-exch01.domain.local exchangeMDB/AHP-EXCH01 exchangeRFR/ahp-exch01.domain.local exchangeRFR/AHP-EXCH01 SMTPSVC/AHP-EXCH01 SMTPSVC/ahp-exch01.domain.local HOST/AHP-EXCH01 HOST/ahp-exch01.domain.local C:\Users\username> ---
Free Windows Admin Tool Kit Click here and download it now
February 9th, 2012 3:27pm

For the SMTPSVC SPN, I found this ancient link which did the best job IMO of covering internal/external references with setspn: http://www.tech-archive.net/Archive/Exchange/microsoft.public.exchange.connectivity/2006-11/msg00103.html I checked the virtual server in ESM and it already had Webmail.domain.com listed in the FQDN field. I ran following but it didn't list any changes, but ExBPA no longer barks about it. --- C:\Users\username>setspn -L ahp-exch01 Registered ServicePrincipalNames for CN=AHP-EXCH01,OU=Servers,DC=domain,DC=local: exchangeMDB/ahp-exch01.domain.local exchangeMDB/AHP-EXCH01 exchangeRFR/ahp-exch01.domain.local exchangeRFR/AHP-EXCH01 SMTPSVC/AHP-EXCH01 SMTPSVC/ahp-exch01.domain.local HOST/AHP-EXCH01 HOST/ahp-exch01.domain.local C:\Users\username>setspn.exe -a SMTPSVC/webmail.domain.com AHP-EXCH01 Registering ServicePrincipalNames for CN=AHP-EXCH01,OU=Servers,DC=domain,DC=local SMTPSVC/webmail.domain.com Updated object C:\Users\username>setspn -L ahp-exch01 Registered ServicePrincipalNames for CN=AHP-EXCH01,OU=Servers,DC=domain,DC=local: SMTPSVC/webmail.domain.com exchangeMDB/ahp-exch01.domain.local exchangeMDB/AHP-EXCH01 exchangeRFR/ahp-exch01.domain.local exchangeRFR/AHP-EXCH01 SMTPSVC/AHP-EXCH01 SMTPSVC/ahp-exch01.domain.local HOST/AHP-EXCH01 HOST/ahp-exch01.domain.local C:\Users\username> ---
February 9th, 2012 3:27pm

For the SMTPSVC SPN, I found this ancient link which did the best job IMO of covering internal/external references with setspn: http://www.tech-archive.net/Archive/Exchange/microsoft.public.exchange.connectivity/2006-11/msg00103.html I checked the virtual server in ESM and it already had Webmail.domain.com listed in the FQDN field. I ran following but it didn't list any changes, but ExBPA no longer barks about it. --- C:\Users\username>setspn -L ahp-exch01 Registered ServicePrincipalNames for CN=AHP-EXCH01,OU=Servers,DC=domain,DC=local: exchangeMDB/ahp-exch01.domain.local exchangeMDB/AHP-EXCH01 exchangeRFR/ahp-exch01.domain.local exchangeRFR/AHP-EXCH01 SMTPSVC/AHP-EXCH01 SMTPSVC/ahp-exch01.domain.local HOST/AHP-EXCH01 HOST/ahp-exch01.domain.local C:\Users\username>setspn.exe -a SMTPSVC/webmail.domain.com AHP-EXCH01 Registering ServicePrincipalNames for CN=AHP-EXCH01,OU=Servers,DC=domain,DC=local SMTPSVC/webmail.domain.com Updated object C:\Users\username>setspn -L ahp-exch01 Registered ServicePrincipalNames for CN=AHP-EXCH01,OU=Servers,DC=domain,DC=local: SMTPSVC/webmail.domain.com exchangeMDB/ahp-exch01.domain.local exchangeMDB/AHP-EXCH01 exchangeRFR/ahp-exch01.domain.local exchangeRFR/AHP-EXCH01 SMTPSVC/AHP-EXCH01 SMTPSVC/ahp-exch01.domain.local HOST/AHP-EXCH01 HOST/ahp-exch01.domain.local C:\Users\username> ---
Free Windows Admin Tool Kit Click here and download it now
February 10th, 2012 3:31pm

Hello, The command should be: setspn.exe -a SMTPSVC/webmail.domain.com Intenert facing server In additon, please check the application log and find if there are any related error reports. Thanks, Simon
February 12th, 2012 12:29pm

Hello, The command should be: setspn.exe -a SMTPSVC/webmail.domain.com Intenert facing server In additon, please check the application log and find if there are any related error reports. Thanks, Simon
Free Windows Admin Tool Kit Click here and download it now
February 12th, 2012 12:29pm

Hello, The command should be: setspn.exe -a SMTPSVC/webmail.domain.com Intenert facing server In additon, please check the application log and find if there are any related error reports. Thanks, Simon
February 12th, 2012 12:33pm

So you're saying it should be "setspn.exe -a SMTPSVC/webmail.domain.com webmail.domain.com"? Application log on the CAS?
Free Windows Admin Tool Kit Click here and download it now
February 12th, 2012 10:10pm

So you're saying it should be "setspn.exe -a SMTPSVC/webmail.domain.com webmail.domain.com"? Application log on the CAS?
February 13th, 2012 6:06am

For the DCOM error, I found this link. I will try it and report back in a few days. http://www.expta.com/2011/07/fix-for-dcom-10009-errors-in-exchange.html
Free Windows Admin Tool Kit Click here and download it now
February 13th, 2012 8:20pm

For the DCOM error, I found this link. I will try it and report back in a few days. http://www.expta.com/2011/07/fix-for-dcom-10009-errors-in-exchange.html
February 17th, 2012 12:23pm

Hello, Is there any update on this thread? Thanks, Simon
Free Windows Admin Tool Kit Click here and download it now
February 19th, 2012 12:27pm

Hello, Is there any update on this thread? Thanks, Simon
February 19th, 2012 12:27pm

Hello, Is there any update on this thread? Thanks, Simon
Free Windows Admin Tool Kit Click here and download it now
February 19th, 2012 12:40pm

The last DCOM error was on the 13th, so I think that is resolved. I'm not seeing any error messages in the Application log related to SPN, but I'm still confused on whether I got it right based on your previous post. For the non-SMTP address spaces, I'm inferring that they were imported from Exchange 2003, and even though they are listed they won't be recognized by E2010? E2003 and the routing group are still in the environment, and the fax software/hardware is still on the E2003 server. It will likely be a week or so before we move these items to the new server. So I guess if the faxes are working now, and those 2 address spaces are not in use, then it's safe to remove them? When I install the fax software on the hub transport, will the fax software be able to deliver mail to 127.0.0.1 successfully, or will I need to allow that somewhere?
February 20th, 2012 9:39am

The last DCOM error was on the 13th, so I think that is resolved. I'm not seeing any error messages in the Application log related to SPN, but I'm still confused on whether I got it right based on your previous post. For the non-SMTP address spaces, I'm inferring that they were imported from Exchange 2003, and even though they are listed they won't be recognized by E2010? E2003 and the routing group are still in the environment, and the fax software/hardware is still on the E2003 server. It will likely be a week or so before we move these items to the new server. So I guess if the faxes are working now, and those 2 address spaces are not in use, then it's safe to remove them? When I install the fax software on the hub transport, will the fax software be able to deliver mail to 127.0.0.1 successfully, or will I need to allow that somewhere?
Free Windows Admin Tool Kit Click here and download it now
February 20th, 2012 9:39am

The last DCOM error was on the 13th, so I think that is resolved. I'm not seeing any error messages in the Application log related to SPN, but I'm still confused on whether I got it right based on your previous post. For the non-SMTP address spaces, I'm inferring that they were imported from Exchange 2003, and even though they are listed they won't be recognized by E2010? E2003 and the routing group are still in the environment, and the fax software/hardware is still on the E2003 server. It will likely be a week or so before we move these items to the new server. So I guess if the faxes are working now, and those 2 address spaces are not in use, then it's safe to remove them? When I install the fax software on the hub transport, will the fax software be able to deliver mail to 127.0.0.1 successfully, or will I need to allow that somewhere?
February 20th, 2012 9:49am

I don't understand why a previous message dated 9 days ago was marked as an answer 6 hours ago, when my last post 2 days ago indicated the DCOM errors still existed.
Free Windows Admin Tool Kit Click here and download it now
February 22nd, 2012 9:44am

I don't understand why a previous message dated 9 days ago was marked as an answer 6 hours ago, when my last post 2 days ago indicated the DCOM errors still existed.
February 22nd, 2012 9:44am

I don't understand why a previous message dated 9 days ago was marked as an answer 6 hours ago, when my last post 2 days ago indicated the DCOM errors still existed.
Free Windows Admin Tool Kit Click here and download it now
February 25th, 2012 9:51am

I don't understand why a previous message dated 9 days ago was marked as an answer 6 hours ago, when my last post 2 days ago indicated the DCOM errors still existed.
February 25th, 2012 9:51am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics