Exchange Server | TechCognizance

Category Archives: Exchange Server

How to generate OWA Login report in Exchange server

Posted on February 27, 2021 by TechCognizance 2 comments

We can generate OWA login report in Exchange servers using IIS logs, we need to use log parser to get the designred report.

For example, if you want to get report of OWA logins for 10 days for all users.

Download and install log parser and log parser studio on a server and note down the path.
On one of the servers where you have enough space create a folder in C: Drive named “OWALogs”
Copy 10 days logs from C:\inetpub\logs\LogFiles\W3SVC1 from your Exchange servers to C:\OWAlogs
Create a subdirectory under C:\OWAlogs called MergedOWALogs

Open an elevated CMD on the server, where you had installed Log Parser.
Now, Navigate to :- C:\Program Files (x86)\Log Parser 2.2>

Run the below command

logparser.exe -i:iisw3c “select * into c:\OWAlogs\MergedOWALogs\merged.log from c:\OWaLogs\*” -o:csv”

It will take time according to the size of logs and then create a file Merged.log inside C:\OWALogs\MergedOWALogs

Now run below command.

LogParser -i:csv “SELECT cs-username, date, time, c-ip, cs-uri-stem, cs(User-Agent) FROM C:\OWALog\MergedOWALogs\Merged.log TO C:\OWALogs\Output.csv WHERE cs-method LIKE ‘%get%’ and cs-uri-stem LIKE ‘%owa%’

It will take time according to the size of logs.
It will create a file C:\OWALogs\Output.csv
You can ZIP this file and copy your to desktop, you can then apply desired filters on this file to get results you want.

If the above command doesn’t work in CMD you can run below commands in PowerShell.

$logparser = “c:\program files (x86)\Log Parser 2.2\logparser.exe”

$query = “SELECT * INTO C:\OWAlogs\MergedOWALog\merged.log FROM C:\OWALogs\*.log”

& $logparser -i:iisw3c -o:csv $query

Exchange Server

allow or suppress the auto replies when sending emails to groups.

Posted on January 4, 2021 by TechCognizance Leave a comment

Recently one of our users reported an issue that when he sent an email to a large distribution list, he did not receive any Auto Reply, OOF from any user. Though, there were many users had Auto Reply configured at that time.

There are few group properties which can cause this –

ReportToManagerEnabled – The ReportToManagerEnabled parameter specifies whether delivery status notifications (also known as DSNs, non-delivery reports, NDRs, or bounce messages) are sent to the owners of the group (defined by the ManagedBy property). Valid values are

$true: Delivery status notifications are sent to the owners of the group.
$false: Delivery status notifications aren’t sent to the owners of the group. This is the default value.

ReportToOriginatorEnabled – The ReportToOriginatorEnabled parameter specifies whether delivery status notifications (also known as DSNs, non-delivery reports, NDRs, or bounce messages) are sent to senders who send messages to this group. Valid values are:

$true: Delivery status notifications are sent to the message senders. This is the default value.
$false: Delivery status notifications aren’t sent to the message senders.

The ReportToManagerEnabled and ReportToOriginatorEnabled parameters affect the return path for messages sent to the group. Some email servers reject messages that don’t have a return path. Therefore, you should set one parameter to $false and one to $true, but not both to $false or both to $true.

SendOofMessageToOriginatorEnabled – The SendOofMessageToOriginatorEnabled parameter specifies how to handle out of office (OOF) messages for members of the group. Valid values are:

$true: When messages are sent to the group, OOF messages for any of the group members are sent to the message sender.
$false: When messages are sent to the group, OOF messages for any of the group members aren’t sent to the message sender. This is the default value.

Based on the above values, Exchange Online adds a header “X-Auto-Response-Suppress” to message to suppress or allow the Auto Replies or OOF.

Like in my example – SendOofMessageToOriginatorEnabled was False and I can see header “X-Auto-Response-Suppress” with value “DR, OOF, AutoReply” in the message properties.

We can adjust these values to allow or suppress the Auto Replies, OOF from groups.

Exchange 2010 DB & Single Item recovery

Posted on December 7, 2011 by TechCognizance 2 comments

Restore your Exchange 2010 DB backup to a different location using your backup application,

Like in this example I am using Windows backup utility and restoring the backup in my backup drive (G)

Start Windows server backup utility.

Click on recover

Select the location of the backup and click on the next.

Select date of the backup

Select Application in recover type

Select Exchange in Application type.

Choose “Recover to another location ” and choose the location where you want to recover

Now click on the recover

Once done, check the location once for the path of your database.

Check the status of the restored database using below command.

H:\Program Files\Microsoft\Exchange Server\V14\Bin>eseutil.exe /mh “G:\Restore\E

_\Program Files\Microsoft\Exchange Server\V14\Mailbox\MDB01\MDB01.edb”

It will show you the result as below.

Now check the consistency of the log files using below command.

H:\Program Files\Microsoft\Exchange Server\V14\Bin>eseutil.exe /ml “G:\Restore\F

_\Program Files\Microsoft\Exchange Server\V14\Mailbox\MDB01\E01″

Now you need to make you Data Base in “Clean Shutdown” state to mount it.

Run the below command to replay all the logs to your DB

H:\Program Files\Microsoft\Exchange Server\V14\Bin>eseutil.exe /r “E01” /l “G:\Restore\F_\Program Files\Microsoft\Exchange Server\V14\Mailbox\MDB01” /d “G:\Restore\E_\Program Files\Microsoft\Exchange Server\V14\Mailbox\MDB01\MDB01.edb”

You will be received the error as “Operation terminated with error -1216 (JET_errAttachedDatabaseMismatch”

So run the same command with “/i” switch

Now check the consistency of the data base for the clean shutdown state

If it still in “Dirty Shutdown” state then run the “hard repair”

H:\Program Files\Microsoft\Exchange Server\V14\Bin>eseutil.exe /p “G:\Restore\E_\Program Files\Microsoft\Exchange Server\V14\Mailbox\MDB01\MDB01.edb”

You will be receive an error, click on ok

Now check the database.

Now it will show you in the clean shutdown state.

Create a “Recovery Data Base” using below command with this existing database and log files.

Run the below command in Exchange management shell

Here, I am using the same EDB & Log files which I recovered from backup.

New-MailboxDatabase -Recovery -Name “RDB01” -Server “EX01” -EdbFilePath “G:\Restore\E_\Program Files\Microsoft\Exchange Server\V14\Mailbox\MDB01\MDB01.edb” -LogFolderPath “G:\Restore\F_\Program Files\Microsoft\Exchange Server\V14\mailbox\MDB01”

Mount this Recovery Database, run the below command

Mount-Database -Identity “RDB01”

Now recover the mailbox which you want to recover.

Restore-Mailbox -Identity subodhuniyal -RecoveryDatabase “RDB01”

This will restore all the emails of the mailbox “subodhuniyal”

Exchange Server