CityCorpse

Exchange 2010 SP1 Export a message from the mail que to see its body

admin — Sun, 13 Nov 2011 19:22:16 +0000

Go into the queue viewer in exchange
suspend the message you wish to export
right click and view the properties of the message
note the Identity: field Ex Identity: EXHUB01\901119\6837546
Open exchange management shell
run the following command with Identity replaced with the Identity we noted already.

Export-Message -Identity EXHUB\901155\6837999 | AssembleMessage -Path C:\test\message.eml

Then you can open the message using thunderbird to view it as if it was sent to you.

This can be usefully when trying to verify spam is being sent through your organization.

Exchange 2010 SP1 audit Audit sent messages from a single email account

admin — Sun, 13 Nov 2011 15:32:39 +0000

Hello today I will show you a simple script that can be run on the Exchange Management Shell to output a CSV file of all sent messages from a single exchange email box.

> get-messagetrackinglog -Sender “user@emaildomain.com” -EventID “SEND” -Start “11/11/2011 10:03:00 PM” -End “11/11/2011 11:00:00 PM” |select Sender,Timestamp,@{Name=’Recipients’;Expression={[string]::join(“;”, ($_.Recipients))}},MessageSubject| Export-Csv c:\output\user_domain.csv

This will output a CSV file that can be opened in Excel showing all sent messages from the selected account what the subject is and who the recipients are. This can come in real handy when trying to track spam coming from a specific account, or to check for internal information being leaked.

Monitor Active directory Replication

admin — Sat, 30 Jul 2011 13:34:36 +0000

Hello today we are gonna go over a simple script that will monitor your replication of all domain controllers in an organization.

Remove-Item C:\NewScripts\ADReport.htm
New-Item -ItemType file -Path C:\NewScripts -Name ADreport.htm
$day = Get-Date

$from = “email@sendingfrom.com”
$to = “email@sendingto.com”

#* Connect to your mail server
$smtp = New-Object System.Net.Mail.SmtpClient(“mail.mailserver.com”);

#* SMTP authentication
$smtp.Credentials = New-Object System.Net.NetworkCredential(“email@sendingfrom.com”, “password”);

$fileName = “C:\NewScripts\ADReport.htm”

#########################################
####AD Replication Status################
#########################################

Function writeHtmlHeader
{
param($fileName)
$date = ( Get-Date ).ToString(‘yyyy/MM/dd’)
Add-Content $fileName “”
Add-Content $fileName “”
Add-Content $fileName “”
Add-Content $fileName ‘Active directory Report’
Add-Content $fileName ‘”
Add-Content $fileName “”
Add-Content $fileName “”
Add-Content $fileName “

”
Add-Content $fileName “”
Add-Content $fileName “”
Add-Content $fileName “”
Add-Content $fileName “

”
Add-Content $fileName “Active Directory Replication Status – $date”
Add-Content $fileName “

”
}
# Function to write the HTML Header to the file
Function writeTableHeader
{
param($fileName)
Add-Content $fileName “”
Add-Content $fileName “”
Add-Content $fileName “”
Add-Content $fileName “”
Add-Content $fileName “”
Add-Content $fileName “”
Add-Content $fileName “”
Add-Content $fileName “”
Add-Content $fileName “”
Add-Content $fileName “”
}

Function writeHtmlFooter
{
param($fileName)
Add-Content $fileName “

Destination DSA

Source DSA

Naming Context

Number of Failures

Last Failure Time

Last Success Time

Last Failure Status

”
Add-Content $fileName “”
Add-Content $fileName “”
}

#Collect the replication info
Function get-DBInfo
{
#Check the Replication with Repadmin
$workfile = repadmin.exe /showrepl * /csv
$results = ConvertFrom-Csv -InputObject $workfile

#Here pull the individual values from repadmin.exe

foreach($entry in $results) {
$dServer = $entry.’Destination DSA’
$sServer = $entry.’Source DSA’
$name = $entry.’Naming Context’
$fail = $entry.’Number of Failures’
$lastFail = $entry.’Last Failure Time’
$lastSuccess = $entry.’Last Success Time’
$lastFailStatus = $entry.’Last Failure Status’

writedata $dServer $sServer $name $fail $lastFail $lastSuccess $lastFailStatus
}
}

Function WriteData
{
param($dServer,$sServer,$name,$fail,$lastFail,$lastSuccess,$lastFailStatus)

$tableEntry = “$dServer$sServer$name$fail$lastFail$lastSuccess$lastFailStatus”

Add-Content $fileName $tableEntry
Write-Host $tableEntry
}

writehtmlheader $fileName
writetableheader $fileName
get-DBInfo
writehtmlfooter $fileName

#########################################
#########Send Email message with report###########
#########################################

$msg = new-object System.Net.Mail.MailMessage
$msg.From = $from
$msg.To.Add($to)
$msg.Subject = “Active Directory Hourly Status Report”, $day
$msg.Body = Get-Content C:\NewScripts\ADReport.htm
$msg.isBodyhtml = $true
$smtp.Send($msg)

##########################################

This will give you the following report emailed to you when you run the script:

AdReport

Add a FTP location as a Mapped Drive in Windows

admin — Mon, 02 May 2011 15:36:00 +0000

A super simple way to map a FTP site as a drive in your windows installation is to get a simple free program called Netdrive.

With Netdrive just download it at the following link: http://www.netdrive.net/

The run and install it.

open it up and add a newsite and enter your information for your ftp location and pick a drive letter you will then have a drive on your machine that links directly to your FTP location.

How to watch StarWars from the command line

admin — Thu, 28 Apr 2011 02:53:19 +0000

From any command line inter face run the following line

telnet towel.blinkenlights.nl

This has been around for a very long time. If it does not work make sure telnet is enabled.

Exchange 2010 delete the first mailbox database

admin — Thu, 28 Apr 2011 02:14:32 +0000

After you’ve installed a new Exchange 2010 environment and you try to delete the first automatically created mailbox database, you’ll receive the following error.

————————————————————————————
The mailbox database ‘DB01′ cannot be deleted.

DB01
Failed
Error:
This mailbox database contains one or more mailboxes or arbitration mailboxes. To get a list of all mailboxes in this database, run the command Get-Mailbox -Database . To get a list of all arbitration mailboxes in this database, run the command Get-Mailbox -Database -Arbitration. To disable a non-arbitration mailbox so that you can delete the mailbox database, run the command Disable-Mailbox . Arbitration mailboxes should be moved to another server; run the command Move-Mailbox -Arbitration -TargetDatabase . To remove the arbitration mailbox if this is the last server in the organization, run the command Remove-Mailbox -Arbitration -RemoveLastArbitrationMailboxAllowed.
————————————————————————————

You cannot remove the database, because there are some mailboxes in it. Ok….let’s have look what mailboxes are left in this mailbox database.

Get-Mailbox -Database DB01

As you can see, there are no mailboxes left in de mailbox database, but why we are still receiving this error!! This is the answer…….there are two hidden mailboxes left in de mailbox database, called arbitration mailboxes. With the following command you’re able to see this mailboxes

Get-Mailbox -Database DB01 -Arbitration | ft -wrap -auto

When you move these two mailboxes to another mailbox database, all the error messages are gone! So let’s do that!

New-MoveRequest “SystemMailbox{1f05a927-3be2-4fb9-aa03-b59fe3b56f4c}” -TargetDatabase DB02
New-MoveRequest “SystemMailbox{e0dc1c29-89c3-4034-b678-e6c29d823ed9}” -TargetDatabase DB02

G33k facebook

admin — Wed, 27 Apr 2011 19:43:03 +0000

this is by far the nerdiest way to check your facebook ever.

fbbash.nogoodatcoding.com

It is a Bash version of facebook so you can check everything command line (much like this site) Just though I would share this super awesome find.

Exchange 2010 SP1 Sort Top Mailbox by size

admin — Wed, 27 Apr 2011 02:22:41 +0000

This is a very useful script to see which mailboxes are using the most space.

Get-Mailbox -database DB100 | Get-MailboxStatistics | Sort-Object TotalItemSize -descending |Select-Object DisplayName,ItemCount,@{name="MailboxSize";exp={$_.totalitemsize}} -first 10

Powershell check what hot fixes are applied

admin — Wed, 27 Apr 2011 02:13:28 +0000

Hello to check which hot fixes are applied to a machine run the following command from within powershell.

Get-Hotfix -Description security* | Format-Table Hotfixid,InstalledOn

hopefully this helps with some troubleshooting

This is just the beginning

admin — Sat, 26 Apr 1902 20:02:40 +0000

Welcome to blog on everything from Microsoft Exchange to Linux and back to Powershell.

Have fun and figure this craziness out.