MachPanel Knowledgebase

Configuring Autodiscover SRV Record for Outlook Connectivity

rehan_waseem — Mon, 11 Aug 2025 09:28:42 GMT

Summary

This article provide information about how to configure auto discover SRV record for Outlook Connectivity.

Applies To

All Versions.

Steps Procedure

Kindly make sure DNS (escpeically autodiscover) is properly configured for your customer organization.

Following is required to have successful autodiscovery:

_autodiscover._tcp.example.com. 3600 IN SRV 0 0 443 mail.example.com.

Please create SRV record as per above format for tenant domain.

SRV Record: Create SRV record in each tenant public DNS zone with given format.

Note: Make Sure you do not have any CNAME with name autodiscover in tenant DNS zone.

After making changes (if they were not already there) give DNS propagation some time and check your outlook connectivity again.

MachSol Signature Agent

rehan_waseem — Fri, 09 May 2025 16:04:00 GMT

Summary

This article provides details on how to configure Signature Agent.

Note:

This is a new and additionally paid feature, licenses for which can be acquired from MachSol Customer Portal / Store. Please contact MachSol Sales for more information.

Applies To

MachPanel build version 8 and above

Pre-Requisites:

To be installed on all Exchange Servers:
Required Exchange Server Version: Exchange Server 2019 version 15.2.1544.4 - 15.2.1748.24

(If you do not want to update to latest CU for Exchange, Please contact Support after purchasing license to deploy on older version of Exchange)

https://learn.microsoft.com/en-us/exchange/new-features/build-numbers-and-release-dates#exchange-server-2019

Permission Required for Service Account User

MachPanel Service Account user, under which MachPanel Provisioning Service is running required Application Impersonation permission to update sent item with signatures.

Introduction

The MachSol Signature Agent is a newly introduced, premium add-on for MachPanel (version 8 and above) designed to automate and manage email signatures across Microsoft Exchange environments.

Key Features and Configuration Overview
- Centralized Signature Management: Enables administrators to define and enforce consistent email signature policies across all users within specified Exchange Server Groups.
- Transport Agent Integration: Utilizes a transport agent to append signatures to outbound emails, ensuring uniformity and compliance.
- Secure Key Implementation: Employs a 32-character alphanumeric secure key to authenticate and authorize signature operations across servers.
- Customizable Settings: Configuration is managed via a Settings.json file, allowing customization of parameters such as:
  - WebServicePath: URL to the MachPanel web service endpoint.
  - LogMode: Defines the logging level (e.g., Simple).
  - EWSUrl: Exchange Web Services URL.
  - SecureKey: The aforementioned secure key

MachSol Signature Agent Configuration

Below are MachSol Signature Agent configuration steps:

Step - 1: Server Group Signature Settings

Please configure Server Group Signature Settings by navigating to following path: Home > Service Director > Exchange Hosting > Exchange Server Groups
Select options against desired Server Group and Select Signature Settings:

Check the box against: Server Transport Agent Signature enabled.
Input Comma separated IP Addresses of Exchange servers: example 10.2.210.13,10.2.210.14.
Note: The MachSol Signature Agent have to be installed on all Exchange Transport servers and Private IP must be mentioned for all servers.
Input Secure Key (32 Characters Alpha Numeric) and note the value. Example X7P9G2LQF5T1M8WZK4V6D3CYRJ0BNSAH

Step - 2: Download the attached file and copy MachSol Signature Agent Folder to 1st Exchange Transport server, example 10.2.210.13.

Update "MachSol SignatureAgent\Settings.json" as per your environment.

Update YourPanelURL.com with your MachPanel Control Server url, make sure the web service is accessible by opening the url in browser.
LogMode: "Simple" for basic logging, "Verbose" for detailed logging.
EWSUrl: EWSUrl of local Exchange Server, no need to change if default installation is same.
SecureKey: Mention the Secure Key Set in Server Group Settings example: X7P9G2LQF5T1M8WZK4V6D3CYRJ0BNSAH
Allow "Network Service" full permissions on the "MachSol SignatureAgent" folder and sub folder and files. If the Exchange Transport Service is running under another user than "Network Service", allow that user full permissions on the "MachSol SignatureAgent" folder.

Step - 3: Install Signature Agent

To install Signature Agent, please update AssemblyPath "C:\MachSol SignatureAgent\MachSol.SignatureAgent.dll" according to the location of MachSol SignatureAgent folder on your system in below commands:
Copy below commands and run on Exchange Shell:

Step - 4: Copy the MachSol SignatureAgent From 1st Exchange Server to all other Exchange Servers

Copy the MachSol SignatureAgent folder from 1st Exchange Server, example 10.2.210.13 to all other servers and run the commands mentioned in Step - 3.

Management

First you have make sure that Signature allowed for Mailboxes (using Transport Agent) is allowed in Service Plan or in the particular Exchange Subscription, You can review the Exchange Subscription interface for any particular Exchange Organization (Click Subs Id of that organization) and then under Resources tab click Edit Resources and make sure below resources are available.

Then navigate to Service Director > Exchange Hosting > Accounts and then click 'Manage' as Exchange Organization. Under the Management interface click "Rules" tab.

You can give the Name of Signature, Set the priority and then select the mailbox to apply this signature.

You have two option either you can Signature HTML or Signature Text.

Also you can add custom variable for each user/mailbox like (Display Name, Phone and Department etc.).

Then click Save button to add the signature.

Error on Subscribing Customer to Exchange Subscription

rehan_waseem — Wed, 18 Sep 2024 07:50:47 GMT

Summary

This article provides solution to the issue which is faced in the Service Queue while subscribing customer to Microsoft Exchange subscription

Applies To

All Versions

Error Details

When customer is subscribe to Exchange subscription then it jobs gets failed inside the Service Queue with below error:

Error: c: Create Offline Address Book: Length Cannot be less than Zero

Resolution

Possible Cause of this Error is that the CAS Internal FQDN input in Exchange Server setting is not set properly.

As mentioned in below screenshot Comma separated list of CAS servers, like CAS1.Domain.com,CAS2.Domain.com. 1st server in list will be treated as default.

Make sure full FQDN is specified not just servername.

Added Setting of MAPIhttpEnabled in mailbox features

rehan_waseem — Tue, 15 Aug 2023 15:22:09 GMT

Summary

This article provides information on new feature / enhancement Setting of MAPIhttpEnabled added in mailbox features.

Applies To

It applies to MachPanel build v7.2.20.

Details

Enable Mapi Over HTTP on your Exchange Server

Support-ability

Exchange Organization Configuration

Set-OrganizationConfig -MapiHttpEnabled $true

Virtual Directory Configuration

Test Mapi over HTTP Connections

Test-OutlookConnectivity -RunFromServerId ExSrv -ProbeIdentity OutlookMapiHttpSelfTestProbe

Settings on MachPanel

When the MAPIhttpEnabled setting is enabled, it means that Outlook clients will use the MAPIHTTP protocol for connecting to Exchange Server. You can find this setting under Exchange Products.

Navigate to the path: Home > Service Plans > Exchange
Create or Edit new Service plan, Select Resources tab.
Check MAPI access allowed on.

RPC over HTTP
MAPI over HTTP

To set initial value of the above feature for existing mailboxes following script can be used, replace highlighted as below:

0 = Not Allowed,
1 = Allowed

For MAPIOverHTTPs:

Update HB_tblExchangeMailboxDetail Set MAPIOverHTTPs ='0'

Update HB_tblExchangeMailBoxTemplates Set MAPIOverHTTPs ='0'

Update HB_tblSyncExMailbox Set MAPIOverHTTPs ='0'

For RPCOver HTTP:

Update HB_tblExchangeMailboxDetail Set RPCOverHTTP ='0'

Update HB_tblExchangeMailBoxTemplates Set RPCOverHTTP ='0'

Update HB_tblSyncExMailbox Set RPCOverHTTP ='0'

Enabling / Disabling MAPIHTTP:

Enabling or disabling MAPIHTTP can be a configuration choice made by Exchange administrators based on factors such as server and client versions, network environment, and security considerations.

To set value on Exchange Server, following PS script can be used:

$false = Not Allowed,
$true = Allowed

Get-CASMailbox -resultsize unlimited | Set-CASMailbox -MAPIHTTPEnabled $false

Get-CASMailbox -resultsize unlimited | Set-CASMailbox -MAPIBlockOutlookRpcHttp $false

Enabling / Disabling MAPI over HTTP & RPC over HTTP on Existing Plan/Subscription/ Addons:

RPC Over HTTP Allowed (MAPIBlockOutlookRpcHttp) initial value in existing Package/Addon/Sold Package/Sold Addon
Declare @ResourceId int
Set @ResourceId = (Select ResourceId from HB_tblResources where ResourceInternalID='1354' and CompanyId='1')

Declare @Allowed bit
--To set MAPIBlockOutlookRpcHttp to false:
Set @Allowed='1'
--To set MAPIBlockOutlookRpcHttp to true:, uncomment below line:
--Set @Allowed='0'

Update HB_tblPackagesDetail Set ResourceQuantity = @Allowed
Where ResourceID=@ResourceId

Update HB_tblPackagesSoldDetail Set ResourceQuantity = @Allowed
Where ResourceID=@ResourceId

Update HB_tblAddonTypeDetail Set ResourceQuantity = @Allowed
Where ResourceID=@ResourceId

Update HB_tblAddonsSoldDetail Set ResourceQuantity = @Allowed
Where ResourceID=@ResourceId

MAPI Over HTTP Allowed (MapihttpEnabled) initial value in existing Package/Addon/Sold Package/Sold Addon
Set @ResourceId = (Select ResourceId from HB_tblResources where ResourceInternalID='1355' and CompanyId='1')

--To set MapihttpEnabled to false:
Set @Allowed='0'
--To set MapihttpEnabled to true:, uncomment below line:
--Set @Allowed='1'

Update HB_tblPackagesDetail Set ResourceQuantity = @Allowed
Where ResourceID=@ResourceId

Update HB_tblPackagesSoldDetail Set ResourceQuantity = @Allowed
Where ResourceID=@ResourceId

Update HB_tblAddonTypeDetail Set ResourceQuantity = @Allowed
Where ResourceID=@ResourceId

Update HB_tblAddonsSoldDetail Set ResourceQuantity = @Allowed
Where ResourceID=@ResourceId
GO

Templates Update using SQL query

For templates where MAPI Access is not allowed, execute the following query:
- Update HB_tblExchangeMailBoxTemplates Set MAPIOverHTTPs ='0', RPCOverHTTP = '0'
  Where MAPIAccessAllowed='0'
For templates where MAPI Access is allowed, execute the following query:
- Update HB_tblExchangeMailBoxTemplates Set MAPIOverHTTPs ='1', RPCOverHTTP = '1'
  Where MAPIAccessAllowed='1'

Update Existing Mailboxes
- Reapply the updated templates to the existing mailboxes as required

Throttling Policy Error related to Exchange Server 2010

mudesira.munir — Wed, 26 Apr 2023 15:38:41 GMT

Summary

This article provides solution to an error message while creating mailbox users via MachPanel where provider "Microsoft Exchange Server 2010" is in use.

Applied to

This article applies to Machpanel build v7 and above

Error Message

Create New Mailbox(Set Mailbox): Unable to index into an object of type Microsoft.Exchange.Data.Directory.SystemConfiguration.Throttling Policy. IP= x.x.x.x.

This issue exists due to missing Throttling Policy handling in Exchange server 2010.

Solution:

Edit mailbox template, and change Throttling Policy from "NoPolicy" to another "Policy" that exists on backend Exchange Server 2010.

Hotfix for Exchange Zero Day Vulnerabilities

zohaib.shaikh — Thu, 06 Oct 2022 12:23:56 GMT

Summary

This article provides information about Exchange Zero day Vulnerabilities and how to fix these while using MachPanel.

Applies To

This article applies to Exchange 2013, 2016, 2019

Security Alert:

Customer Guidance for Reported Zero-day Vulnerabilities in Microsoft Exchange Server – Microsoft Security Response Center

Investigate if you are affected: Get-ChildItem -Recurse -Path C:\inetpub\logs\LogFiles -Filter "*.log" | Select-String -Pattern 'powershell.*autodiscover\.json.*\@.*200'

Mitigations:

URL Rewrite rule
Disable remote PowerShell access for non-admins

URL Rewrite rule:

Option 1: For customers who have the Exchange Emergency Mitigation Service (EEMS) enabled, Microsoft released the URL Rewrite mitigation for Exchange Server 2016 and Exchange Server 2019. The mitigation is enabled automatically and is updated to include the URL Rewrite rule improvements
Option 2: Microsoft created the EOMTv2 script for the URL Rewrite mitigation steps and updated it to include the URL Rewrite rule improvements. EOMTv2 script will auto-update on Internet connected machines and the updated version will show as 22.10.05.2304. The script should be re-run on any Exchange Server without EEMS enabled.
Option 3: Customers can follow the instructions as stated at Customer Guidance for Reported Zero-day Vulnerabilities in Microsoft Exchange Server – Microsoft Security Response Center

Disable remote PowerShell access for non-admins:

Please refer to Control remote PowerShell access to Exchange servers | Microsoft Learn to disable remote PowerShell access for users per user and bulk users.

How MachPanel cares about its customers?

Deploy Hotfix v7.0.41 HF2

Afterwards Every new created Mailbox will come up with RemotePowerShellEnabled as $false.
For Existing Mailboxes, please trigger Fix security permissions per tenant.

Caution: MachPanel Service / Provisioning account should be kept as RemotePowerShellEnabled as $true.

Exchange Hosting Dashboard/Landing Page

rehan_waseem — Wed, 17 Aug 2022 20:44:19 GMT

Summary

This article provides information about Exchange Hosting Dashboard/Landing Page

Applies To

This article applies to MachPanel all versions.

MachPanel Exchange Module DashBoard View

MachPanel Exchange Module Dashboard View offers complete Inventory details of your deployed Exchange topologies, its monitoring, reports, audits and RBAC like high end Controls. This document is intended to elaborate and illustrate features Set MachPanel Exchange Module offer via its Dashboard View.

More Information:

To see details on Inventory, Monitoring, Reporting, Auditing and RBAC please review below KB's:

Guide for Automation of Exchange Hosting Module

zohaib.shaikh — Wed, 17 Aug 2022 13:00:51 GMT

01:Exchange Hosting Dashboard/Landing Page

01.a. How To View Exchange Hosting Inventory

01.b. How To View Exchange Hosting Monitoring

01.c. How To View SPLA Reports for Exchange Hosting?

01.d. How To Enable Auditing for Exchange Hosting?

01.e. How To Configure Role Based Access Control (RBAC)?

02: How To Integrate Exchange Servers in MachPanel?

02.a. How To assign UM policy in Exchange Hosting?

02.b. How To integrate Email Client for Exchange Hosting?

02.c. How To Configure SOP for Exchange Server Groups(optional)?

03: How To Add Exchange Service Plans?

03.a. How To Create and Provision an Add-on?

03.b. How To Upgrade/Downgrade Service Plan?

03.c. How To Sell Addon in Bulk to All Resellers/All Customers & review Quota Over Usage Report?

04: How To Add Exchange Accounts?

05: How To Manage Exchange Accounts?

05.a. How To add Mail Domains?

05.b. How To add Mailboxes?

05.b.(i). How To Manage Mailboxes in Exchange Hosting?

05.b.(ii). How to select Personal Archive Database and enable Mail/Personal Archiving for a User Mailbox?

05.b.(iii). How To add Linked Mailboxes?

05.b.(iv). How To Perform Group Operations under Mailboxes?

05.b.(v). How to Soft delete/Permanent delete, Restore and Recover deleted mailboxes?

05.c. How To add Mail Contacts ?

05.d. How To add Distribution Lists?

05.e. How To add Public Folders?

05.e.(i). How To Import Public Folders?

05.e.(ii). How To Handle public folder hierarchy?

05.f. How To add Disclaimers?

05.g. How To manage compliance (Retention setting, Journaling, Litigation & In-Place Hold) of users?

05.h. How To add Mobile device policy?

05.i. How To add Application Impersonation?

05.j. How To add Calendar Permissions in Exchange account & Mailbox?

06: How To Create Exchange Mailbox Databases?

07: How To Add Public Folder Mailboxes (PFM)?

08: How To Add Mailbox Templates?

09: How To Perform Migration of Mailboxes via Mailbox Manager?

10: How To Integrate SPAM Filters?

11: How To Perform PST Exports/Imports?

12. How To Import Exchange Organizations and Users via Import Utility?

How to add contacts in Exchange accounts?

mudesira.munir — Tue, 16 Aug 2022 20:26:52 GMT

Summary

This article provides a summary on how to add new contacts for Exchange accounts in MachPanel.

Applies To

This article applies to MachPanel all versions.

Pre-Requisites:

Before you can manage services of Exchange you need to Integrate Exchange With MachPanel Control Panel. Please review the below KB article:
http://kb.machsol.com/Knowledgebase/Article/50264

Adding Contacts:

Mail contacts are listed in exchange Global Address List (GAL) and visible in OWA. Click on the mail contact name to manage advanced properties. When a mail contact is disabled it no longer shows in GAL.

You can manage hosting services for Exchange by clicking on the Service Management link from the following path: Home >> Service Director >> Exchange Hosting >> Exchange Accounts.

Select Mail Contacts tab and click on Add Mail Contact button to add a contact.

You can also add/delete/enable/disable bulk mail contacts. See the snapshot below:

To hide/show "Set as Primary Email Address" option navigate to path: Home >> Service Director >> Exchange Hosting >> Server Groups.

Select General Settings tab as shown below:

Add Bulk Contacts:

To add bulk contact click Add Bulk Mail Contact button and provide CSV as shown below:

Exchange Online connection fails with error: Access is Denied using Basic Authentication

rehan_waseem — Thu, 13 Jan 2022 08:49:36 GMT

Summary

This article provides a summary of "Access is denied" error encountered in connecting to Exchange Online while trying to perform any exchange related operation. Below error is contained in detailed error message: Connecting to remote server outlook.office365.com failed with the following error message : Access is denied.

Applies To

This article applies to:

MachPanel v6 and Later.
MachPanel's Exchange Online extension for its CSP Module.
Exchange Online

Overview

With the introduction of OAuth 2.0 in the year 2020 from Microsoft as an enhanced, more secure and modern authentication system, Microsoft had informed its users that the older Basic Authentication via PowerShell EXO V1 will be discontinued. It is confirmed that by October 2022 the Modern Authentication via OAuth v2.0 (PowerShell EXO v2) will fully replace the older mechanism.

To further speed up the process, Microsoft started identifying the tenants under its O365 cloud which were not using Basic Authentication and have stopped / blocked them from using it. If you have a new tenant for which Security Defaults are enabled, Basic Authentication will seize to work. For existing tenants as well, their Basic Authentication will stop working if detected by Microsoft and you will start facing the above highlighted error if this is done by Microsoft.

The changes affect all operations via Basic Authentication for Exchange Online whether being performed directly via PowerShell EXO v1, or via any 3rd Party App using PowerShell EXO v1.

MachPanel and Exchange Online

MachPanel currently uses PwerShell EXO v1 to communicate with Exchange Online and hence the recent changes by Microsoft as mentioned above will affect control panel's ability to perform operations on a tenant.

While we are working on making changes to our panel to upgrade to PowerShell EXO v2, the current workaround is to allow basic authentication. Please follow steps highlighted in solution section below:

Solution

In the Tenant you can run this Command Get-OrganizationConfig | Format-List basic*

(You will see the entry/value: 255 which stand for All Basic Authentications Blocked i.e. BasicAuthBlockedApps=255)

To change this, you need to login with the Global Admin, then go to the Help section and run this command Diag: Enable Basic Auth in EXO

After That you can activate the basic Authentication.

More details and pictorial illustration given on links below:

https://techcommunity.microsoft.com/t5/exchange-team-blog/basic-authentication-and-exchange-online-june-2021-update/ba-p/2454827
https://techcommunity.microsoft.com/t5/exchange-team-blog/basic-authentication-and-exchange-online-september-2021-update/ba-p/2772210

Some Images:

After activating the Basic Authentication for Exchange Online Remote PowerShell and running this Command Get-OrganizationConfig | Format-List basic*

(You will see the entry/value: 239 which stand for All Basic Authentications Allowed i.e. BasicAuthBlockedApps = 239)

Finally you can now connect via Exchnge Online OAuth v1.0

If steps are completed as highlighted above, then the procedure has been completed and you are done! However, sometimes when you hit "Run Test", you will get a different message. Please review below details to cater that scenario:

After Run test:

If you see following message:

These are the current Basic authentication settings:

The organization configuration is dehydrated. In the Microsoft datacenters, an organization configuration being dehydrated means that it has certain objects consolidated to save space. In this state, configuration cannot be modified. This can be changed by running the Enable-OrganizationCustomization cmdlet.
Note that you are only required to run the Enable-OrganizationCustomization cmdlet once in your Exchange Online organization. If you attempt to run the cmdlet again, you will get an error.

To handle this you have to connect tenant using ExchangeOnlineShell module, run the command: Enable-OrganizationCustomization.

Steps:

Open PowerShell
Install-Module -Name ExchangeOnlineManagement -RequiredVersion 3.2.0
1. (skip if already installed)
Import-Module ExchangeOnlineManagement
Connect-ExchangeOnline
1. Login
Enable-OrganizationCustomization

After this perform the above steps again from start.

To make this change, you need to login with the Global Admin, then go to the Help section and run this command Diag: Enable Basic Auth in EXO

Use Exchange migration utility to prepare Objects and Permissions for migration

Khurram.hameed — Fri, 20 Aug 2021 08:18:38 GMT

Summary

This article guides how the attached utility can be used to create/update objects in target platform by copying objects, permissions data from source platform.

Applies to

This article applies to MachPanel Build v6.4.70 and above.

Details

The Migration guide guides how to migrate the mailbox items (emails, folders and etc..), but it doesn’t replicate the mailbox settings such as group membership, calendar permissions and etc. To replicate the mailbox configuration settings, this separate desktop utility is created (Please see attachment) which can be used to collect and compile the configuration/settings data of the selected mailboxes, distribution lists and mail contacts in data files in JSON format on source exchange server. These files then can be imported in control panel

Download and unzip Exchange Migration Utility.zip on Source Exchange Server.
Launch ExchangeMigrationUtility.exe.
Specify Source Exchange Server domain details

Preferred Domain controller is Optional, you can also choose if Entire Forest must be searched by checking checkbox shown above. Click Next
All the Mail-domains will be loaded, domain of choice can be filtered using Search filed (it starts locating as soon as you type),
you can also make use of Select All, Clear All buttons as well

Check the checkbox(es) against one or more mail-domain(s) and click Next
All mailboxes will get loaded accordingly, again you can make use of Search filed, Select All, Clear All buttons

Select the desired mailbox (es), Click Get button(This will create script for selected Mailbox(es) ), click Next.
Similarly get script for Distribution lists by Searching, checking checkbox(es) against DLs

Click Get and then Next buttons
And for Mail Contacts as well, Search, check the checkbox(es)

Click Get and then Next buttons
Now you will be asked to specify Location where .dat files will be saved

Select the path. Click OK (You can create new folder by appending \FolderName in Data File Location path field)
Click Yes

And let following to complete.

Once done, A Success message will be shown, click OK.
Now created .dat files can be used after completing migration by following Migration guide

Migrate Exchange mailboxes from Exchange servers in one forest to Exchange servers in other forest (Cross forest Migration)

mudesira.munir — Mon, 28 Dec 2020 13:30:06 GMT

Summary

This article guides how to migrate Exchange mailboxes from Exchange servers in one forest to Exchange servers in other forest (i.e. Cross Forest Migration)

Applies to

This article applies to MachPanel Build v6.4.22 and above.

Pre-requisites

Enable MRS proxy.
Auto-discovery should be in place.
Valid SSL certificate should be in place on both Exchange Platforms.

Important:

This guide will assist in migrating the mailbox items (emails, folders and etc.) only
It doesn’t replicate the mailbox settings such as group membership, calendar permissions and etc.
To replicate the mailbox configuration settings a separate desktop utility is created to collect and compile the configuration/settings data of the selected mailboxes, distribution lists and mail contacts in data files in JSON format on source exchange server. Follow this article to run this utility separately and to create these files.
Once done these files can be imported in control panel as explained in Post Migration steps.

1. Migrating Mailbox(es) in Exchange

Control Panel provides Cross forest Migration i.e. providers can migrate Exchange mailboxes from Exchange servers in one forest to Exchange servers in other forest.

To Migrate Mailboxes, navigate to Home > Service Director > Exchange Hosting > Mailbox Migration.
There are four tabs named as Stats, Endpoints, Batches, and Mailbox Migration.
- Stats
  Under Stats tab, stats of Batches and Mailboxes are shown:
- Endpoints
  Under Endpoints tab, Click to Add new Endpoints.
Specify Endpoint name, select Domain, specify Source mailbox email address, specify Source Admin Username and password.

Clicking Verify Endpoints details will show success message as shown below

Specify Max concurrent migrations and Max concurrent incremental sync and click Save.
- Batches
  Important Note: Exchange service should not enabled on Targeted AD User (s). For AD users you need to specify the Mailbox GUID for cross forest migration under optional settings of Ad Users. Only those users will be visible on which GUIDs of source mailboxes are set under users and Proxy address (es) should be set (match email address of source mailbox). GUID can be set on AD User(s)
  To add/edit an AD user navigate to the following path: Home » Service Director » Active Directory » Users. Expand Optional Settings by clicking on (+) sign.
  Also, AD User(s) can be created either one by one, via bulk AD User creation (Using MachPanel AD module) or via ADSync.
  
  Specify Bad and Large Item limits, email address (es) can be specified if you want to be notified.
  Mode of syncing (Auto or Manual can be configured via checkbox), click Save.
  
  Logs are shown like this
  
  On closing the logs, All the Batches are shown listed like this.
- Select Endpoint: Select Endpoint from the dropdown list.
- Target Organization: For target organization provide following:
- Domain: Select domain
- Batch name: Provide batch name.
- Select User(s): Select users from Selectable to Selected
- Bad items limit: Provide bad items limit.
- Large items limit: Provide large items limit.
- Send report on Batch complete to: Comma separated email addresses
- Auto start batch instantly: Check box
  
  Click Save when done.
- Individually
- Bulk import via .csv
- Using ADSync (ADSync syncs GUIDs as well)
- Mailbox GUID for migration
- Mailbox Archive Guid
- Mailbox Archive Name
- Mailbox Recipient Type Details
- Mailbox Culture
- Proxy Addresses
- Mailbox Migration

Under Mailbox Migration, Mailbox wise migration status can be viewed.

Note: On all above interfaces records can be searched/filtered based on supported criteria

2. Use Desktop Utility

As you already have run special Exchange Migration Utility (if not, do it now, please follow the article) and as a results you have these files to update recipients (mailboxes, distribution lists and contacts)' settings

3. Post Migration Steps

Login to Target Exchange Server.
Navigate to Home » Service Director » Exchange Hosting » Accounts.
Click to Manage the migrated subscription, select General settings tab and Click Update recipients settings button or Update recipients settings Tab.

Now you will select the files for Mailboxes, Distribution Lists and Contacts

Once selected you will see these like this

In case of any mismatch you can check the checkbox to create recipient which are not found in Target Organization. Click Save.

Jobs will be added which can be tracked in Group Jobs

When these jobs are successful, recipients setting are updated.

Mailbox permissions enabled or changed and it gets stuck with status [syncing]

mudesira.munir — Thu, 06 Aug 2020 16:25:09 GMT

Summary

This article describes issue with “Permissions” where the mailboxes remain in “Syncing” status.

Applies To

Machpanel (Exchange mailboxes)

Details

Please note that the mailboxes being operated on “SHOULD NOT” have any Pending Jobs. If there are any pending jobs related to the mailboxes being worked on, the “Syncing” status will not change.

When Permissions on mailbox(es) are applied

and you see permissions are not getting synced, i.e. mailbox on which permission are applied is with [syncing] status for quite a while as shown above.

Solution

Check Exchange Group Actions
All jobs related to mailbox should be completed or canceled for sync to work.
Also Provisioning service must be running.

Question: What will be effect of problematic mailboxes on

Other mailboxes of the same org
Answer: will get processed without any issue
Mailboxes in other organizations
Answer: will get processed without any issue

i.e. only particular mailbox who has pending job(s) gets stuck.

Lastly, if its a case of MachPanel which has been recently updated to latest build, then there is a table that needs to be updated and all records for all mailboxes need to be synced before proper status for all mailboxes is visible in panel interface. Following query can be executed to check status of overall sync.

Select * from HB_tblExchangeMailboxSync

where sendas=0 or SendOnBehalf=0 or FullAccess=0 or CalenderPermissions=0If issue is still persisitent:

If issue is still persisitent / permissions sync not working, take following steps:

Enable Advanced logging.
Enable logging for thread: GroupActionWorkMailBoxPermissions. If there are multiple control servers, disable thread on all control servers except the one on which problem is being reviewed.
Review log files starting with:
◦ MBPermissionsSync
◦ SyncMailboxPermissions
After problem is solved, enable GroupActionWorkMailBoxPermissions thread on all servers, disable logging for Thread.
Disable Advanced logging.

To find duplicates following queries can be used:

================================================

Select UserLDAPUrl from HB_tblExchangeMailboxes

group by userldapurl having count(Userldapurl) > 1

===============================================

Select LDAPGroup from HB_tblExchangeDistributionLists

group by LDAPGroup having count(LDAPGroup) > 1

==============================================

Select ContactLDAPUrl from HB_tblExchangeMailContacts where HostedOrgId = (Select HostedOrgId from HB_tblExchangeOrganizations Where HostedOrgId=HB_tblExchangeMailContacts.HostedOrgId)

group by ContactLDAPUrl having count(ContactLDAPUrl) > 1

==============================================

If a duplicate is found, find all records against the LDAP in that table and keep 1 record against the Org.

Exchange Severs configuration and Global Settings in MachPanel.

rehan_waseem — Mon, 21 Apr 2014 03:15:31 GMT

Summary

This article provides a summary for integration of Exchange server, creating\selling of Exchange service plan, and service management (adding mailboxes, contacts, DL's, public folders etc.) in MachPanel.

Applies To

This article applies to MachPanel Build v7

Prerequisite

MachPanel Control Server Installation
http://kb.machsol.com/Knowledgebase/Article/50261
MachPanel Remote Server Installation
http://kb.machsol.com/Knowledgebase/Article/5026

Customization of MachPanel:

Customization of MachPanel includes Personalization, Localization, Layout Settings, Menu Setting, Theme changes & Email Templates etc.

Company profile settings are used in all the documents where company information is displayed. For example, Invoice document, Payment document, customer control center etc.

Please review the following KB article for further details:

http://kb.machsol.com/Knowledgebase/Article/50300

Management of Exchange Server Group in MachPanel

Integrate Exchange in MachPanel:

To integrate Exchange in MachPanel, navigate to the following path:Home » Service Director » Exchange Hosting » Server Groups and Add a Server Group. See the snapshot below:

To integrate Exchange in MachPanel please review the following KB article for further details:

http://kb.machsol.com/Knowledgebase/Article/50264

Email Clients

To integrate Email Client please follow below KB article:

https://kb.machsol.com/Knowledgebase/53475/How-to-integrate-Email-Client-charge-for-the-license

General Settings

You can set below setting on Server Group level for your Exchange Subscriptions

For checkbox setting Quota to 0 on Disable.
- This feature will work as needed for any mailbox disabled/enabled after the update is deployed.
- For existing mailboxes already disabled, you have to enable and then disable mailbox Or you can use set quota to 0 using PS: Set-Mailbox "UPN" -MaxSendSize "0" -MaxReceiveSize "0" (Have to replace UPN with UPN of mailbox.)
- Also, following query can be used to generate the PS commands: Select 'Set-Mailbox "' + UPN + '" -MaxSendSize "0" -MaxReceiveSize "0"' from HB_tblExchangeMailboxes where Disabled='1' and UserLDAPUrl!=''
- Above query will generate PS commands for the mailbox which are already disabled before the update. So you can copy those commands and execute them on Exchange Powershell.

Create Send Connector for Relay Accepted Domain
- You can create Send Connector for Internal/External relay domain using below KB article:

https://kb.machsol.com/Knowledgebase/55687/How-to-add-SMTP-Mail-Domain

OWA Mailbox Policies
- When a new server group is added, OWA policy is automatically added with default values in Database and within few minutes the policy get created on backend Exchange too. (When policy is created or modified, edit/remove buttons become disable)
- You can also create OWA mailbox policy as provider under the Server Group Setting
- You can give the policy name, choose your Server Group and then select Customers or select All

Then you can check/uncheck Communication Management resources

Similarly check/uncheck resources for Information Management, Security, User Experience, Time Management, File Access and Offline Access

At the end check/uncheck OWA features

Once Save it will apply to all of the mailboxes of the customer selected while creation of this OWA Policy and can be seen under Exchange Account Management interface as shown below:

You can also create Policy under the Account management and apply to its selected mailboxes

Billing system Configuration & Management:

Billing preferences are set of configurations that are supposed to be setup according to the underlying business scenarios because these settings totally depend on your business nature and customer relationship. Please review the following KB article for further details:

http://kb.machsol.com/Knowledgebase/Article/52404

Creating & Selling Exchange Service Plan:

Before Subscribing or Selling Exchange Service to a customer, create a Service Plan \ Package.

To create a new package \ service plan, navigate to the following path: Home >> Service Plan >> Exchange Hosting.

Click on Customer Product Listing tab, add new product. See the snapshot below:

Please view more details on Creating Service Plan \Package in MachPanel; http://kb.machsol.com/Knowledgebase/Article/52399

Please review the following KB article for Upgrading an existing Service Plan, resources, creating and selling Add-on; http://kb.machsol.com/Knowledgebase/Article/50348

Provisioning of a Service Plan:

Please review the following KB article for selling and provisioning of Exchange service further details:

http://kb.machsol.com/Knowledgebase/Article/50275

Service Management of Exchange:

You can manage hosting services for Exchange by clicking on the Service Management link from the following path: Home >> Service Director >> Exchange Hosting >> Exchange Accounts. See the snapshot below:

Please review the following KB article for further details:

http://kb.machsol.com/Knowledgebase/Article/52407

SOP for Specifying Exchange Server Group Additional Settings (All versions)

mudesira.munir — Thu, 27 Dec 2012 00:08:26 GMT

Summary

This document is used as SOP for specifying Additional Settings in Exchange Server Group while integrating Exchange Server (All Versions). This document helps you in acquiring the values for fields in additional settings from the back-end Exchange Server (all versions) and describes which fields are to be filled in manually.

Applies To

Applies to MachPanel v5.3.10 & above

Solution

Additional Settings Interface:

Note: The domain name used in this article is example.com

Platform access domain

The platform access domain can be acquired from the back-end by typing the following command at power shell. See the snapshots below:

OR

Auto discover URL

As the domain is example.com so the value for auto discover should be autodiscover.example.com. This value is acquirable from the backend server by using the following command at PS.

CMD: Get-autodiscovervirtualdirectory | fl ExternalURL

Auto discover redirect URL

As the domain is example.com so the value for auto discover redirect URL should be autodiscoveredirect.example.com. This value need to be input manually.

MX record address

MX values in example.com public zone. In our example it will be mx1.example.com, mx2.example.com. These values need to be input manually.

OWA URL

The OWA URL can be acquired from the backend server by typing the following command. See the snapshot below:

Outlook Anywhere URL

The Outlook Anywhere URL can be acquired from the backend server by typing the following command. See the snapshot below:

Incoming FQDN (POP/IMAP)

These values need to be input manually.

As domain is example.com so the value for POP should be pop.example.com which should be pointing to CAS.
As domain is example.com so the value for IMAP should be imap.example.com which should be pointing to CAS.

OutgoingFQDN (SMTP)

As domain is example.com so the value for SMTP should be smtp.example.com which should be pointing to HUB Server. This value need to be input manually.

Exchange Proxy Setting

This value can be acquirable from the backend Exchange Server.

Exchange SPLA reports in MachPanel

mudesira.munir — Thu, 10 Nov 2011 05:58:57 GMT

Summary

This article provides information regarding SPLA reports in MachPanel Control server.

Applies To

MachPanel V 6.5.25 and later

Procedure

To view Exchange SPLA report, navigate to the following path: Home » Service Director » Exchange Hosting » Reports

SPLA reports are shown in MachPanel by following standards:

BASIC

Mailboxes having OWA, POP, IMAP access but having no MAPI access

STANDARD

Mailboxes having basic features, plus MAPI access

STANDARD PLUS

Mailboxes having standard features plus outlook/MAC client CAL (There is absolutely no way to be entirely sure who uses which client/license with which account. Any mailbox with checkbox “Outlook Licenses” checked would be counted as Standard Plus. All other mailboxes (with other standard-features) would be counted as Standard.

ENTERPRISE

Mailboxes having all Enterprise features plus journaling archiving, In-place and Litigation Hold except Outlook Licenses

ENTERPRISE PLUS

Mailboxes having all Enterprise Plus features including Outlook licenses.

To view Exchange SPLA report, navigate to the following path: Home » Service Director » Exchange Hosting » Reports tab. Click on SPLA Report as shown below.

You can view SPLA report for Mailboxes, SPLA by customer and SPLA by Domain.

To change SPLA type in bulk click on Group Actions tab and select mailboxes which you want to convert in to Standard Plus.

OR click on mailbox name as shown below:

Click on Save and these mailboxes will be shown under Standard Plus in SPLA reports.

Handling DNS Records and Managing DNS zones

mudesira.munir — Fri, 27 May 2011 02:27:09 GMT

Summary

This article provides information about configuration of DNS Record, Names Server and DNS Zones management.

Applies To

MachPanel Version V.4.2.24 and Onwards

Procedure

For automatic handling of DNS for Exchange and SharePoint you have to create appropriate DNS Templates for each service. For this navigate to Home >> Service Director >> DNS Manager >> DNS Template and then click on 'Add DNS Template':

Enter the 'Template Title' and fill in the required fields i.e records name, type, priority and hostname:

Now the DNS Templates have been created, the only remaining task is to assign the templates to appropriate servers.

Names Server

You can add Names Server Groups.

Provide NS IP addresses.

Managing DNS Zones and SOA Records

You can Import DNS Zones, Add bulk DNS Zones, Bulk delete DNS Zones and Bulk Edit.

Click DNS Import Zone.

Select server, owner & customer and click Get DNS Zone.

Import Bulk DNS Zones:

You can import DNS zones in bulk by providing csv file.

Bulk Delete DNS zones:

You can bulk delete DNS zones by providing csv file.

DNS Record

Under DNS Record, you can Edit & remove DNS zones.

Create new DNS Records by clicking on Add DNS record.

Select DNS record type.

SOA Record

You can also update an SOA record for a DNS zone.

Prerequisite for MachPanel Exchange 2010 hosting mode Module

zohaib.shaikh — Sat, 12 Feb 2011 00:35:45 GMT

Statement of Procedure:

· On each Client Access Server in your deployment, navigate to the following location C:\Program Files\Microsoft\Exchange Server\V14\ClientAccess\ServicePlans
· Open ServicePlanHostingRemap.csv in NotePad
· Paste MachpanelDefault,1,MachpanelDefault_Sample in ServicePlanHostingRemap.csv file just above HostingSample,2,HostingAllFeatures_Sample and click save from the file menu.(where MachpanelDefault is programID, 1 is offerID, MachpanelDefault_Sample is serviceplanname)
· Copy HostingAllFeatures_Sample.serviceplan and paste in the same folder I.e C:\Program Files\Microsoft\Exchange Server\V14\ClientAccess\ServicePlans
· Rename HostingAllFeatures_Sample - Copy to MachpanelDefault_Sample

Remoting Exception Has Been Thrown By The Target Of An Invocation

mudesira.munir — Thu, 30 Oct 2008 01:56:40 GMT

Summary
Hosted Exchange Extension (HEE) shows following exception:
Remoting exception: Exception has been thrown by the target of an invocation

Applies To
MachPanel all versions
Hosted Exchange Extension (HEE)

Cause
This problem can occurs due to two reasons.
Firstly, when MachPanel remote Server is not installed at Exchange Server i.e. other than the server where MachPanel is installed. Or it is installed but the MachPanel Provisioning Service is not running.
Secondly, a firewall can block the port 7860 for MachPanel Provisioning Service disabling it to communicate properly.

Solution
Let us consider an example scenario for this which is as under:

Example Scenario
Server1: Active Directory (AD01)
Server2: Exchange Server 2007 SP1
Server3: MachPanel Control Server

This explanation is for above server setup scenario.

Case 1: Remote Server not installed or MachPanel Provisioning Service not running

Step1: Install MachPanel Remote Server
You need to install the MachPanel Remote Server on Exchange server and then configure it in MachPanel Control Center properly. Here Exchange server is Server2.
Please consult Exchange installation/configuration guides at:
http://kb.machsol.com/Downloads/6
Note: These settings are for Stand Alone Exchange Module of MachPanel.

Step2: Setup Active Directory Domains and Domain Administrator Login:
In your MachPanel Control Center login, Navigate to Home » Service Director » Active Directory Domains
• Domain administrator login: This will be the user responsible for connecting with Active Directory.
• It is recommended that you create a new user “administrator2” and call it the Domain Administrator Login.

Please refer to:http://kb.machsol.com/KnowledgebaseArticle50017.aspx for creation of administrator2 login for MachPanel.

Step3: Domain Administrator Login Permissions:
The Domain User (i.e administrator2) which is used for MachPanel should be member of certain groups for Standalone Exchange. For assigning related permissions please see http://kb.machsol.com/KnowledgebaseArticle50017.aspx

Step4: Configuring Hosted Exchange Extension (HEE)
In MachPanel Provider Control Center (PCC), navigate to:
Home » Service Director » Exchange Hosting » Server Groups » Edit Exchange Server

Set the following attributes:

Server alias: This should be complete server name e.g Exch01.Fabrikam.com. Complete name of Server2 with Domain Name.
IP: This should be IP of Server2. This same IP has to be in registry of remote server. To ensure this, follow these steps:
- Click Start >> Run
- Type regedit
- navigate to HKEY_LOCAL_MACHINE\SOFTWARE\MachSol\MachPanel
- Ensure that the string RemoteServerPublicIP is set to the same IP address as for Server2. If not, please make it same here
Server Name: This should be complete server name like Exch01.Fabrikam.com

Step5: Set MachPanel Remote Service identity

Update identity of MachPanel Provisioning Service. i.e. Server2 in this scenario. For this, follow these steps:
- Click Start >> Run
- Type services.msc
- Microsoft Windows Services screen will pop up
- Double Click on MachPanel Provisioning Service
- Select Log On tab
- Click Browse and Select the Domain Administrator Login (from Step3) from Active Directory Users
- Set Password of user.

Step6
Restart MachPanel Provisioning Service

Click Start >> Run
Type services.msc
Microsoft Windows Services screen will pop up
Double Click on MachPanel Provisioning Service and click Start

Alternatively, you can also start and stop MachPanel Services using Configuration Studio. For example, to start MachPanel Provisioning Service, please open Configuration Studio and go to Configure >> Services and click Start All Services button. Similarly for stopping all services click Stop All Services button

CASE 2: A Firewall is blocking the port for MachPanel Provisioning Service
A firewall has blocked MachPanel Provisioning Service to communicate appropriately, please disable firewall or allow port 7860 which is used by MachPanel Provisioning Service.

MachPanel Knowledgebase

Configuring Autodiscover SRV Record for Outlook Connectivity

Summary

Applies To

Steps Procedure

MachSol Signature Agent

Summary

Note:

Applies To

Pre-Requisites:

Permission Required for Service Account User

Introduction

MachSol Signature Agent Configuration

Step - 1: Server Group Signature Settings

Step - 2: Download the attached file and copy MachSol Signature Agent Folder to 1st Exchange Transport server, example 10.2.210.13.

Step - 3: Install Signature Agent

Step - 4: Copy the MachSol SignatureAgent From 1st Exchange Server to all other Exchange Servers

Management

Error on Subscribing Customer to Exchange Subscription

Summary

Applies To

Error Details

Resolution

Added Setting of MAPIhttpEnabled in mailbox features

Summary

Applies To

Details

Settings on MachPanel​​

Throttling Policy Error related to Exchange Server 2010

Summary

Applied to

Error Message

Solution:

Hotfix for Exchange Zero Day Vulnerabilities

Summary

Applies To

Security Alert:

Mitigations:

How MachPanel cares about its customers?

Exchange Hosting Dashboard/Landing Page

Summary

More Information:

Guide for Automation of Exchange Hosting Module

How to add contacts in Exchange accounts?

Summary

Applies To

Pre-Requisites:

Adding Contacts:

Add Bulk Contacts:

Exchange Online connection fails with error: Access is Denied using Basic Authentication

Summary

Applies To

Overview

MachPanel and Exchange Online

Solution

Use Exchange migration utility to prepare Objects and Permissions for migration

Summary

Applies to

Details

Migrate Exchange mailboxes from Exchange servers in one forest to Exchange servers in other forest (Cross forest Migration)

Summary

Applies to

Pre-requisites

1. Migrating Mailbox(es) in Exchange

Stats

Endpoints

Batches

Mailbox Migration

2. Use Desktop Utility

3. Post Migration Steps

Mailbox permissions enabled or changed and it gets stuck with status [syncing]

Summary

Applies To

Details

Solution

Exchange Severs configuration and Global Settings in MachPanel.

Summary

Applies To

Prerequisite

Customization of MachPanel:

Settings on MachPanel