Unable to connect to Exchange Server via remote PS Unable to load assembly "Microsoft.Exchange.Configuration

 

IF you are trying to connect to your exchange server and failing with fallowing error, fallow the simple steps to fix the issue occurring

VERBOSE: Connecting to NPWINCAS03.SMTp25.gov [npwincas03.SMTp25.gov] Processing data from remote server failed with the following error message: Unable to load assembly "Microsoft.Exchange.Configuration.O bjectModel.dll" specified in "InitializationParameters" section. For more information, see the about_Remote_Troubleshooting Help topic. + CategoryInfo : OpenError: (System.Manageme....RemoteRunspace:RemoteRunspace) [], PSRemotingTransportException + FullyQualifiedErrorId : PSSessionOpenFailed

Open PowerShell

Enter fallowing PS command

$UserCredential = Get-Credential

Enter this one ( replace this to your own=npwincas03.smtp25.gov)

$Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri http://npwincas03.smtp25.gov>/PowerShell/ -Authentication Kerberos -Credential $UserCredential

Import-PSSession $Session

• Next time you open EMS it should connect


• Troubleshooting the Exchange Management Shell


• http://technet.microsoft.com/en-us/library/dd351136.aspx


• Use your network logon account to connect to a remote Exchange 2010 server


• http://technet.microsoft.com/en-us/library/dd297932.aspx

Respectfully,
Oz Casey, Dedeal ( MVP north America)
MCITP (EMA), MCITP (SA)
MCSE 2003, M+, S+, MCDST
Security+, Project +, Server +
http://smtp25.blogspot.com/ (Blog)
http://telnet25.wordpress.com/ (Blog)

TMG CAS 2007 ACTIVE SYNC Error, Status: 12309 The server requires authorization to fulfill the request. Access to the Web server is denied. Contact the server administrator.

If you are having fallowing probes with your TMG , Active sync publishing please have a look your firewall settings to possibly remedy the issue.

Denied Connection NPWINTMG1 8/29/2011 11:56:54 PM Log type: Web Proxy (Reverse) Status: 12309 The server requires authorization to fulfill the request. Access to the Web server is denied. Contact the server administrator.  Rule: E210 CAS - Active Sync webmail.SMTp25.org Source: 208.54.35.224:53699 Destination: 172.26.7.5:443 Request: OPTIONS http://webmail.SMTp25.org/Microsoft-Server-ActiveSync?Cmd=OPTIONS&User=dedealoc&DeviceId=androidc1734872834&DeviceType=Android Filter information: Req ID: 0b5d481c; Compression: client=No, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=no, valid=no, updated=no, logged off=no, client type=unknown, user activity=yes Protocol: https User: anonymous Additional information Client agent: Android/0.3 Object source: (No source information is available.) Cache info: 0x8 (Request includes the AUTHORIZATION header.) Processing time: 1 MIME type:

 

Open TMG, Drill down to FireWall Policy, locate the Active Sync rule you have and double click on it.

• Authentication delegation
• No delegation, but client may authenticate directly

• Click on Users and set , this rule applies to request from fallowing user set
• All users

Go to monitoring and make sure TMG servers ( if they are in Array) have been syncy, and test the rule.

Tips:

On the logs & Reports create filter to capture the authentication attempts etc.

Hopefully you will see everything green in the live logins and issues will get resolved (-:

Respectfully,
Oz Casey, Dedeal ( MVP north America)
MCITP (EMA), MCITP (SA)
MCSE 2003, M+, S+, MCDST
Security+, Project +, Server +
http://smtp25.blogspot.com/ (Blog)
http://telnet25.wordpress.com/ (Blog)

New-TestCasConnectivityUser.ps1Error

When you run TestCasConnectivityUser.ps1 , you need to have mail enabled test user account for the script to run properly.

new-TestCasConnectivityUser.ps1

Drill down to Script directory on your exchange server, and run “new-TestCasConnectivityUser.ps1”

• Program Files
• Microsoft
• Exchange Server
• V14
• Scripts

Make sure the password you are using at the first time meets the password requirements and if you need specify the OU where the account will get created ( replace STP25.gov to your own Domain name space.)

Get-MailboxServer mccnpwinmbx1 | .\new-TestCasConnectivityUser.ps1 -OU STP25.gov/users

If you open ADUC you will be able to see this user, in the default users container.

get-user extest_e7a1882f51284

 

No running  Test-OutlookWebServices -ClientAccessServer EXCCAS1 should work

Respectfully,
Oz Casey, Dedeal ( MVP north America)
MCITP (EMA), MCITP (SA)
MCSE 2003, M+, S+, MCDST
Security+, Project +, Server +
http://smtp25.blogspot.com/ (Blog)
http://telnet25.wordpress.com/ (Blog)

Status: A packet was dropped because Forefront TMG determined that the source IP address is spoofed.

 

TMG Logging is showing fallowing errors:……………….

• Denied Connection MCCNPWINTMG1 8/15/2011 11:09:37 PM
• Log type: Firewall service
• Status: A packet was dropped because Forefront TMG determined that the source IP address is spoofed.
• Rule: None - see Result Code
• Source: Internal (172.26.4.22:55507)
• Destination: Local Host (172.26.7.104:3389)
• Protocol: RDP (Terminal Services)
• Additional information
• Number of bytes sent: 0 Number of bytes received: 0
• Processing time: 0ms Original Client IP: 172.26.4.22

The network is reaching out to TMG internal interface is not recognized by the TMG server, thus TMG thinks the IP address is spoofed and drop the connection.

You need to tell TMG the Network or the IP Address itself does belong to Internal Network, so

Add static route to destination , for example

If we want to add static route for IP address 172.26.5.10 , and tell TMG what DGW to use to reach out this IP we would be using fallowing command from elevated command window ( CMD run as an administrator)

 

route add 172.26.5.10 mask 255.255.255.255 172.26.7.97 -p

Open MFTMG , click networking, Under Networks

Internal , internal Properties , click add range and add the IP address range.

Once you have completed this Click on monitoring, configuration and click to make sure TMG servers have been synched.

*** Before making any changes as good practice take backup of your TMG as the backup takes couple, minutes and you can go back if there are any unexpected issues, otherwise like me you will sit in the middle of the night and have to re-build everything (-: , un-necessary headache IMO***

**** Also as another good practice make the changes on the ARRAY MANAGER, if you are running TMG array***

Respectfully,
Oz Casey, Dedeal ( MVP north America)
MCITP (EMA), MCITP (SA)
MCSE 2003, M+, S+, MCDST
Security+, Project +, Server +
http://smtp25.blogspot.com/ (Blog)
http://telnet25.wordpress.com/ (Blog)