Microsoft Exchange 2016 DAG Error Setting Witness Server and WitnessDirectory

We have a number of 2 node DAGs which provide our Microsoft Exchange 2016 service. Being a 2 node DAG a file share witness server is in place. We had a datacentre event that took out one of the nodes and the witness server, rendering the one of the DAGs unhealthy and a second in […]

More...

Microsoft Exchange 2016 – How to Fix Exchange DAG Witness Failed State

In certain situations the Exchange DAG witness can become a problem, this can occur during an upgrade or can happen if there is a network interruption. Although the DAG will continue to operate the witness is considered failed, which can cause odd behaviour in a failover scenario, as there is no quorum available for the […]

More...

Continuing Analysis and Resolution of NetApp and RC4 Issues Caused by (KB5019964) For CVE-2022-37967 and KB5021131 CVE-2022-37966

A long running issue, which I covered in my previous posts: https://geekmungus.co.uk/?p=3532 and https://geekmungus.co.uk/?p=3593, this should be taken as the current status of the problem and the resolution. Issue Following the patch: KB5021131 CVE-2022-37966, which was released November 8th 2022 we’ve continued to have some issues with Kerberos authentication to servers (devices) that use (and […]

More...

Calendar Publishing to Internet from Microsoft Exchange (2016+)

Microsoft Exchange provides the capability to allow publishing of user calendars to the Internet, this is different from calendar sharing (which is typically internal, i.e. within our organisation). These instructions explain how to enable publishing by policy and how to apply it your own user mailbox. Calendar Publishing Policy Configuration on Microsoft Exchange These steps […]

More...

Further Exploration of KB5019964 Kerberos Changes

NOTE: See https://geekmungus.co.uk/?p=3619 for the most up to date article! The following is my analysis going going deeper into my recent article: https://geekmungus.co.uk/?p=3532, hopefully this will give you a bit more context and information, but also allowed me to work through the issue in my head through documentation. Synopsis The patch KB5019964 changes what the […]

More...

Internal, External URLs, InternalAuthenticationMethod and ExternalAuthenticationMethod Explained

Within the Microsoft Exchange configuration you’ll see that there is an InternalURL and ExternalURL attribute for each of the key Microsoft Exchange Web Services, e.g. OWA, ECP, ActiveSync etc. Personally i’ve never really used these when they are different, but what it allows is for your internal and external URLs to access the services to […]

More...