pantscat

In IIS what authentication mechanism is set for the Autodiscover virtual directory?

This might help: https://technet.microsoft.com/en-us/library/cc739973(v=ws.10).aspx I'm getting a bit confused by what I'm reading, but Microsoft seem to imply that the original local administrator on the first DC in your domain would be the EFS recovery agent. Apparently it's possible to get access to this account by booting into safe mode on the DC using F8 - have a read through here: security - Windows - Decrypt encrypted file when user account is destroyed - Super User

Yep, I can confirm that - names are resolving properly now. Try the exchange connectivity tester again - it'll help troubleshoot it!

In both directions?!

Still looks like a DNS issue to me - I can't resolve your autodiscover record. I'd nag 123reg and check that there's not an issue somewhere.

What are the permissions on the files? Try taking ownership of them and then try removing the tick...

External clients? Are the ports open on your firewall?

That's a good point. It's just not the same for me without Terry... his dry sense of humour and commentary was really what made the evening for me.

That's the easy bit - it's just a case now of selecting the files and unticking encryption... should be that simple. Let me know how you get on.

Blimey... that's brave. It's quite different from Exchange 2010 - how's your powershell? Msexchange.org has some nice guides.

Nope... it'll be specific to the administrator account. :-)

Yep - the records look fine. Also - you might want to edit that attachment - the domain is in the bottom left hand corner... ;-)

In that case the domain "administrator" account should be able to unencrypt the files.

Sorry to state the bloomin' obvious, but , I take it you've edited the screengrab to remove the actual targets?

Literally administrator@domain? or administrator@The-name-of-your-domain

I can't see the attachment... just gives an error. But yes, it looks like it's a DNS issue. If you want to PM me the domain I can test from here? alternatively try using something like KLOTH.NET - NSLOOKUP - DNS Look up - Find IP Address to do an independent NSlookup. Look at this: https://support.microsoft.com/en-us/kb/2028305

Have you tried this: https://testconnectivity.microsoft.com/ Is quite useful for troubleshooting. Does OWA work internally?

Have you set up the DNS records for autodiscover?

Recovery time objective... to use a bit of word w*nk. E.g. if your servers are Hyper-V VMs then it will take mere moments to restore them in the event of a hardware failure, and you can also temporarily (perhaps!) restore them to whatever hardware you've got lying around that will run Hyper-V.

Is the account listed under the recovery certificate the domain administrator account? If so - you should be able to un-encrypt the files whilst logged on as that user.

Ah... Without the recovery certificate you'll struggle to do anything, that's kinda the point of EFS. I take it that the user didn't export the certificate anywhere?

Well. I'm now midway through my second week and I have to say that there is life after education. But, having said that, my first week was a bit rocky and it was a massive culture shock. One that I was expecting, but still pretty tricky to get my head around. Things are going well so far, but I've got quite a lot to learn from a technical perspective, so if anyone knows any good free teaching materials for Citrix or Pix firewalls I'll let you claim a free drink from me. You'll have to come to London, mind. Thanks to everyone for the well wishes. Just wanted to keep in touch with a really lovely and valuable community.

Yep - that's a very good point. Perhaps a good opportunity to stick ESXi on the box and separate the roles out. 8GB RAM should do the trick.

Thanks all - much appreciated. I'll definitely "pop-in" when I can. @bossman, yep - definitely an adventure... feel equal measures of excitement and trepidation! Good job I'm leaving now before I'm institutionalised...

Hello all, I don't normally post much of a personal nature here, I try to help people out and I've found Edugeek to be an amazing resource for when I've been stuck and needed some ideas, so thanks to you all for being such a great and positive community. Today is my last day working in education. I decided quite some time ago that although working in education was fun, and at times rewarding, I wanted more of a challenge and have always been curious about what life would be like working out in the "real world". I hate to use that phrase as I've seen so much prejudice against IT in education and a great deal of it is completely unjustified, after all, how many other environments are there where you're expected to be able to be completely confident with every piece of IT kit available, as well as be able to manage staff effectively, plan and manage budgets, be a competent project manager and learn how to use and be an expert in any piece of software that is waved under your nose? Not many I'd imagine. Anyway, I digress. I'm indulging my curiosity and will be going off next week to return to London to work for a small-ish IT consultancy to focus on a more technical role - no more staff management, lots of networking, lots of VMware and a whole load of other things that I've probably not anticipated, too. Not quite sure what the point of this is other than to say thanks. Ant