HPlum78

Sorry I don't know why Dell would help with the HP server in question here? Or have I missed something? I also could not see a HP gen 9 server that had 6 drive bays at first glance, but again I could have missed something here as well.

So when you open the exchange powershell on the mail box server you should just be able to use the script as is above. The only value you need is the mail box DB name, the rest is just getting info from the DB and server and formatting the data.

$db = "Mailbox Database" Get-MailboxDatabase -identity $db | foreach-object {add-member -inputobject $_ -membertype noteproperty -name mailboxdbsizeinGB -value ([math]::Round(([int64](get-wmiobject cim_datafile -computername $_.server -filter ('name=''' + $_.edbfilepath.pathname.replace("","") + '''')).filesize / 1GB),2)) -passthru} | Sort-Object mailboxdbsizeinGB -Descending | format-table identity,mailboxdbsizeinGB

Sorry I thought I was clear, I am not suggesting mixing the 15k with 10k disks I am sugesting that splitting up OS and data in this instance would be the way I would approache this and to be honest I have made assumptions on the configuration so this is best guess. I am also trying to appreciate that unlike the setup I have access to (4 clusters with up to 8 nodes in each with TBs of RAM dedicated OS disks in each node with dedicated data and tmp storage) not all of us are in the same boat! If all the OS/ application and DB's are all located on the same spindles RAM will only go some way to elevate the issues being faced and as I stated in my previous post the schemes of the DBs can and should determine if a single instance should be used or multiple instances, this should be part of the DB tuning and the assessment that is carried out before banging DBs on to SQL servers mind.

Is this a dedicated SQL server? When you say installed SCOM do you mean it's the DB or the apps as well? Is the 3 disks you are talking about just for the DB's or is that also holding the OS and the applications? From the info supplied my first thoughts are if these disks are holding OS/ Apps/ and the DB instance then this probably needs thinking about, although that's not as simple now. While on DB instances the schemes for SCCM and SCOM applications are large and differ largely (I don't know about the PDQ software) but the former 2 should be installed in separate SQL instances. If you are installing the applications on the server as well this also needs some thought and is not ideal but if needs must and you don't have application servers availible then try to carve the apps up on to a separate set of disks or on the OS disks not on the same disks as the DB's. Ultimately more spindles = better performance but in the best practice for SQL deployments this is not always that straight forward. If I had absolutely no options I would have two disks mirrored for the OS these only need to be 10k and then fill the rest of the server up with disks and use them for the DBs and if absolutely necessary the applications as well. Then use sepearte instances for those DBs with large schemes.

For a Office 365 shared cal you could publish the cal using the PS commands? set-mailboxcalendarfolder [email protected]:\calendar -publishenabled $true -detaillevel fulldetails then run the following command get-mailboxcalendarfolder [email protected]:\calendar | FL Copy the link that has been generated from the PublishedCalendarUrl attribute in to your browser and see if it looks like what you are after. Then you can just embed that in your website/ do what you want from there

OffCAT’s replacement – Microsoft Support and Recovery Assistant (SaRA) - Just for info and the details can be found here:- https://blogs.technet.microsoft.com/exchange/2018/04/17/offcats-replacement-microsoft-support-and-recovery-assistant-sara/

Don't need to be powershell just an elevated command prompt. Find the event and copy the command out as it will have the guids so you don't have to hunt around for them.

Hmmmm, so if you do a Nslookup from one of the DC's what is returned? Probably need to try this in both working and none working states. Could this be a cache issue? Have you done an Nslookup on both of the external NS servers when it is in both states? Just in case the records are ending up diferent. I am taking a guess that your internal clients point to the DC's for name resolution. Is the site behind any kind of LB? And when something happens (server reboot or the likes) is the LB nic being registered momentarily and then this address being cached potently. Theses are just my thoughts spewed out late night so if they help good if not its late and non sense! To be honest sounds to me like you have a good ol mystery there Scooby. Good luck.

Oh and another thought on this, you can edit the registry and stop netlogon service registering the srv records for certain services so you can try to understand what is going on HKLM:\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters create a new multi string with the name DnsAvoidRegisterRecords and then you can add the following value(s):- Dc Pdc Gc GcAtSite GenericGc GenericGcAtSite GcIpAddress Kdc KdcAtSite Ldap LdapAtSite LdapIpAddress Rfc1510Kdc Rfc1510KdcAtSite Rfc1510UdpKdc Rfc1510Kpwd Rfc1510UdpKpwd you can see that this worked by restarting the netlogon service on the DC in question and checking DNS to see if the SRV records have been removed. You may find that as you do this the slowness that you are experiencing starts when you add certain keys.

I would look at what network traffic is coming into the DC you can then determine what might be the cause of the slow down. This may help:- https://blogs.technet.microsoft.com/askpfeplat/2013/12/15/domain-and-dc-migrations-how-to-monitor-ldap-kerberos-and-ntlm-traffic-to-your-domain-controllers/

I have in the main part had all my switches on the network and on a management vLAN with ACL's that control access to them and then some added protection for logging in by using RADIUS. That said I have seen all kinds of setups in my time!

I have mentioned this before but I would look at MIM, maybe a bit much but is powerful and can provision accounts in to any number of systems. Also will take care of the whole account life cycle (Joiners/ Movers/ Leavers).

Need a browser that has a SAML plugin, Firefox is what I would go with then get SAML view. See what is in the claim, not something I have done on a MAC mind as I have had no issues thus far I will however try and take a look.

Get-mailbox | select DisplayName,ForwardingAddress | where {$_.ForwardingAddress -ne $Null} That should get you any MB with forwarding set and the address that the MB is set to forward to. Get-Mailbox | Get-MailboxPermission | where {$_.user.tostring() -ne "NT AUTHORITY\SELF" -and $_.IsInherited -eq $false} And this should get the delegate bit sorted. You can | to export-CSV or ogv.....

GNU Mailman

Would not be the first time I have been told x is starting and they never walk through the door! until the start date they are under no contractual obligations to your organisation and is poor practice handing out creds before they actually start.

https://tophat.com/

Just need the SXS folder from the source disk, normal practice is to have that stored centrally so that you can point your servers at it if needs be.

If you are using any of the sync tools, you are going to need an exchange server of some description on prem essentially. You could just create a VM and install exchange 2016 (support requires n -1 anyhow - so exchange 2013 is a minimum) just make sure that the VM meets the minimum requirements for installing 2016. Then you are free to decommission the 2010 box, just make sure that you are never going to need a 2013 install before you install 2016 if you do install that first (all the roles you may require) before you install 2016.

You still need an exchange sever after you have migrated! Just need to upgrade it to a 2016 box.... I will be a little more helpful as the above statement is not entirely correct so the following may clear it up:- https://technet.microsoft.com/en-us/library/dn931280(v=exchg.150).aspx

@Trenton_Lister Can we just clear up what @rrrrr is saying as I have not read that he has booted in to DSRM at any point, so any restore would be a non authoritative restore. and no this is what I mean by DSRM - https://dirteam.com/sander/2012/11/29/rebooting-windows-server-2012-based-domain-controllers-into-directory-services-restore-mode/ Oh an I will clear up an inaccurate comment I made earlier about restoring from system state backups, what I driving at was that a system state restore dose not give you the options of doing a authoritative AD restore you are still able to do this by booting into DSRM.

@rrrrr the detail is in the thread, but the upshot is from what I have gleaned from this and the a previous post is that there a 2 DC's, both have been restored using system state backup but not using DSRM.

Did you get the output from the Powershell I posted previously, could just do with knowing what's what.

What also happens is that the RID attrb will be updated but this will just be based on the next available RID pool increment and this could still be in the range of the highest RID already in use in your domain.