Event - Source AutoEnrollment ID: 15

Automatic certificate enrollment for DOMAIN\user failed to contact the active directory (0x8007052b). Unable to update the password. The value provided as the current password is incorrect.
Enrollment will not be performed.

---------------------------------

http://support.microsoft.com/kb/310461

Cause:

This problem may occur if the Autoenrollment feature cannot reach an Active Directory domain controller. In a Microsoft Windows NT 4.0 domain, Active Directory is not available. Therefore, the Autoenrollment feature cannot work. In an Active Directory domain that has Microsoft Windows 2000 or later domain controllers, the problem may be caused by a DNS name resolution or by network connectivity issue.

Back to the top

RESOLUTION

For a Microsoft Windows XP-based computer or a Microsoft Windows Server 2003-ba...

For a Microsoft Windows XP-based computer or a Microsoft Windows Server 2003-based computer that is joined to a Windows NT 4.0 domain, to turn off the Autoenrollment feature in the Local Group Policy, follow these steps on the local workstation:

1. Click Start, click Run, type gpedit.msc, and then press ENTER.
2. In the left pane, expand Computer Configuration, expand Windows Settings, expand Security Settings, and then expand Public Key Policies.
3. Double-click Autoenrollment Settings.
4. Click Do not enroll certificates automatically.
5. Click OK.
6. Repeat steps 2 through 5, but in step 2, expand User Configuration, expand Windows Settings, expand Security Settings, and then expand Public Key Policies.
7. Close the Group Policy window.

For a computer that is a member of a Windows 2000 or later Active Directory domain, make sure that the domain member has network connectivity with at least one domain controller.

After you have determined that you have good Internet Protocol (IP) connectivity between the member and a domain controller, correct the DNS address in the IP properties of the workstation. To do this, follow these steps:

1. Start the Network Connections tool in Control Panel.
2. Right-click Local Area Connection, and then click Properties.
3. Click Internet Protocol (TCP/IP), and then click Properties.
4. Type the correct DNS address in the Preferred DNS server box.
5. Click OK.

Exchange 2007 - Backups

Exchange 2007 - How to Change the First Storage Group log file location (to save running out of disk space)

Open the EMC - Click on Server Configuration - On Mailboxes Right Click the top Mailbox "First Storage Group" by default it will log through to c:\ if not changed.

The default log file location is:
:\Program Files\Microsoft\Exchange Server\Mailbox\First Storage Group

To Change the log file location of the First Storage Group

Open EMC
Server Configuration
Mailbox
R/C First Storage Group - Select Move Storage
This will take the Storage Group offline automatically and back online when its finished.

Exchange 2007 - EdgeTransport.exe.config.txt

To be found in c:\program files\Microsoft\Exchange Server\Bin\

Exchange 2007 - low disk space

Free up disk space:

Delete log files:

c:\windows\system32\LogFiles\W3SVC1\

Change the Queue Path.

Goto: c:\program files\Microsoft\Exchange Server\Bin

Make a Backup of EdgeTransport.exe.config.txt ie: EdgeTransport.exe.config.txt.20090715.txt

Edit EdgeTransport.exe.config.txt

Create a folder somewhere else (on another drive) - edit the folder's ACL to include System, Network Service (full access rights), Administrator

Change the path of the "QueueDatabasePath" value to the newly created folder.

Change the path of the tempstorage

Before you move you any files - stop the service Microsoft Exchange Tansport - and start when finished.

Using Diruse
from command line: diruse /s /m /q:1.5 /l /* "c:\program files\" /L .\diruse.log

This nice little command will log a snapshot of your directories in mb's - exceeding 1.5mb in size to c:\diruse.log

Run a normal Disk Cleanup Utility to clean some files up.

Run a defrag on the exchange database

http://technet.microsoft.com/en-us/library/aa998863.aspx

Exchanger 2007 - GAL & OAB Update

Get-GlobalAddressList | Update-GlobalAddressList -Verbose


Get-OfflineAddressBook| Update-OfflineAddressBook -Verbose

Add a persistant Route to Windows XP routing table

route ADD -P 192.168.0.8 MASK 255.255.255.0 192.168.0.1

IP Address followed by the Network MAsk and the Gateway