exchange superhero needed - removed exchange that was used

[fooby]

basically i removed our exchange box that was sending mail to the world, i did not realise this. Reinstalled exchange 2003, repatched, put back the DB files that were in use.. hoped for the best... got the worst.

no one can send any email messages out. :'(


I am receiving such things as

Event Type: Warning
Event Source: MSExchangeMTA
Event Category: X.400 Service
Event ID: 290
Date: 04/06/2007
Time: 15:44:16
User: N/A
Computer: TCC-COMMS2
Description:
A non-delivery report (reason code unable-to-transfer and diagnostic code MTS-congestion) is being generated for message C=GB;A= ;P=tcc;L=TCC-COMMS2-070604144411Z-2177. It was originally destined for C=GB;A= ;P=tcc;O=Exchange;DDA:SMTP=blah(a)hotmail.com; (recipient number 1), and was to be redirected to C=GB;A= ;P=tcc;O=Exchange;DDA:SMTP=blah(a)hotmail.com;. [MTA DISP:RESULT 16 136] (12)

For more information, click http://www.microsoft.com/contentredirect.asp.

and


Event Type: Error
Event Source: MSExchangeMTA
Event Category: Directory Access
Event ID: 155
Date: 04/06/2007
Time: 15:44:16
User: N/A
Computer: TCC-COMMS2
Description:
Error 0X80040920 occurred while reading information for directory name (DN) from the directory. [MTA DISP:ROUTER 10 38] (12)

For more information, click http://www.microsoft.com/contentredirect.asp.

please anyone help? i have googled much and will continue to google.

thanks

fooby

[fooby]

also this is another related event id

Event Type: Error
Event Source: MSExchangeTransport
Event Category: Routing Engine/Service
Event ID: 929
Date: 04/06/2007
Time: 16:23:36
User: N/A
Computer: TCC-COMMS3
Description:
Failed in reading Connector's DS Info Process Id: 3312 Process location: "C:\Program Files\Exchsrvr\bin\emsmta.exe" ConnectorDN: CN=Outbound Mail,CN=Connections,CN=First Routing Group,CN=Routing Groups,CN=TCC,CN=Administrative Groups,CN=tcc,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=name,DC=n ame,DC=name,DC=name Hr:80040920 Attribute:[]

'name' used to say some domain thigs

[ajbritton]

How exactly did you 'remove' the box? Do you have any other Exchange servers in the organization?

might sound stupid but have you set up all your connectors, such as x-400 mentioned in 1st error message, and virtual smtp
sorry can never get my head round exchange properly

[fooby]

thanks ajbritton - crisis averted.

What I had done though for future reference...

(back in the day)
created 1st ex server - went unhappy (corrupt db it turns out)
created 2nd moved db across
fixed 1st, moved back and un corrupted db.

took off the exchange settings migrated public stores over but left the exchange services on there (note here i didnt remove all :-S)

wind forward a bit

today i decide to de promote it from being an exchange server thinking that i had removed all the settings / management roles from it - turns out i hadnt.

add/remove programs, remove exchange

** Phone call **

"im getting a funny message when I email out to people... undeliverable something?"

oh dear

check event logs and its redder than jolly saint nick (see event id's above)

...

What had happened was my Routing groups settings were gone. i didnt realise this... after using terrasoft ldap explorer to drill through some AD configs i saw the settings were missing after following a path that event id was reporting as missing but didnt know what it was.

Called nexus in exeter (excellent tech support) and he asked me to drill down to..

Organisation (Exchange)
     Administrative groups
          First Administrative group
               Routing Groups
                    First Routing Group
                        Connectors
                             Outbound Mail

In here there is a setting for members and it had none of my exchange servers listed. after adding both my exchange boxen all was fine again.

After this I need to follow this http://support.microsoft.com/kb/822931 to find the rest of the info to ensure all data is replicated.

fooby

apologies for long post - however one day someone might need this.

[fooby]

might sound stupid but have you set up all your connectors, such as x-400 mentioned in 1st error message, and virtual smtp
sorry can never get my head round exchange properly

Quite correct, it was the connector. As above it wasnt listed. thanks for your input

fooby

[purple]

Hi all,

I am new here, drawn to the site following an exchange server 2003 disaster which appeared by description identical to fooby's post. I did have a pm conversation with fooby to clarify some of the particulars - @ fooby many thanks for your time ..

So - I have fixed my problem and would like to record for the next unsuspecting victim of this problem just how to resolve the issue and the clarify the initial cause..

If you uninstall IIS or more specifically the smtp service the exchange smtp verbs are removed and smtp and exchange stop talking to each other.

You can confirm you have this situation by :

telnet localhost 25  <enter>

ehlo

will return if all is ok

The following list: 
250-ServerName.example.com Hello [IP address] 
250-TURN 
250-ATRN 
250-SIZE 
250-ETRN 
250-PIPELINING 
250-DSN 
250-ENHANCEDSTATUSCODES 
250-8bitmime 
250-BINARYMIME 
250-CHUNKING 
250-VRFY 
250-X-EXPS GSSAPI NTLM LOGIN 
250-X-EXPS=LOGIN 
250-AUTH GSSAPI NTLM LOGIN 
250-AUTH=LOGIN 
250-X-LINK2STATE 
250-XEXCH50 
250 OK 

However, if the following command verbs for the Exchange 2003 or Exchange 2000 SMTP service are not present, the association of the Exchange 2003 or Exchange 2000 computer to the SMTP service is damaged: 

250-X-EXPS GSSAPI NTLM LOGIN 
250-X-EXPS=LOGIN 
250-AUTH GSSAPI NTLM LOGIN 
250-AUTH=LOGIN 
250-X-LINK2STATE 
250-XEXCH50

You resolve this issue by doing a reinstall of exchange as posted above but NOTE WELL !! If you have service pack 1 + installed the reinstall will quietly fail on the messaging and collaboration install. You need to stop the exchange system attendant service prior to the reinstall.

look at Microsoft KB822939 for chapter and verse.

Regards Purple