Troubleshooting

Causes:

• Not able to Ping the configured GC from the installation machine.

• Firewall has been enabled, and port 389 is closed.

• Unknown Username or Bad Password entered in the organization settings page.

• Global Catalog Server(GC) configured in the organization settings page might be down.

Resolution:

• Confirm if you are able to ping the Global Catalog Server from the machine where Exchange Reporter is installed.

• Exchange Reporter Plus uses port 389 for LDAP connection. If firewall is enabled, ensure that the port 389 is added to the exception list.

• Verify the correctness of Username and Password entered in the organization settings page.

Cause:

MAPI required for this task is not installed.

Resolution:

MAPI can be installed using any one of the following three MAPI providers - 'Microsoft Outlook 2003 and 2007', 'MAPI Download' or 'Exchange System Manager 2003 SP2'.

NOTE:

• Only 'MAPI Download' is supported for Exchange 2010 environments.

• 64-bit Microsoft Outlook is not supported by Exchange Reporter Plus.

• Ensure that 'MAPI Download' and 'Microsoft Outlook' are not installed on the same machine where Exchange Reporter Plus is installed.

 

Cause:

When 'Microsoft Outlook' is used as a MAPI provider, it must also be set as the default mail client.

Resolution:

Set 'Microsoft Outlook' as the default mail client. To set Microsoft Outlook as the default mail client, Open Internet Explorer -->> Click on Tools -->> Internet Options -->> Click 'Programs' tab in the Email list, Click 'Microsoft Office Outlook' -->> Click 'OK'

 

Cause:

User Credentials provided in the 'Organization Settings / Task scheduling' page or while configuring 'Exchange Reporter Plus Service' might be wrong.

Resolution:

Verify the correctness of the user name and password entered in the above locations. The username should be provided as <DomainName\UserName>

 

Cause:

The User provided in the 'Organization Settings / Task scheduling' page or while configuring 'Exchange Reporter Plus Service' is not a member of a desired privileged group.

Resolution:

Verify if the user provided in the 'Organization Settings' page is a member of one of the following Groups

• 'Exchange View only Administrator Group', if Exchange Server 2003 User (or)

• 'Exchange Organizational Administrator Group', if Exchange Server 2007 User (or)

• 'Organizational management Group', if Exchange Server 2010, 2013 or 2016 User

When the Product is installed as a Service, the configured Service Account must abide by the defined criteria. The configured service account must be a local system administrator.

The user credential should have "Send As" and "Receive As" permissions on Organization Mailboxes.

Cause:

User Credentials provided in the 'Organization Settings / Task scheduling' page or while configuring 'Exchange Reporter Plus Service' might be wrong. The mailbox user provided in the 'Organization Settings/Task Scheduling' page or while configuring the 'Exchange Reporter Plus Service' is hidden from the Global Address List.

Resolution:

Verify if the user whose credentials entered in the 'Organization Settings' page, has a valid MAILBOX which is not hidden from the GAL (Global Address List).

 

To unhide the user from Global Address List,

• Open user properties from 'Active Directory Users and Computers', navigate to 'Exchange Advanced' Tab and uncheck 'Hide from Exchange Address List'.

 

 

Cause:

Insufficient Privileges to access Organization Mailbox for the user credentials provided. (The user credentials could be provided under the 'Organization Settings / Task scheduling' page or while configuring 'Exchange Reporter Plus Service').

Resolution:

Verify if the user whose credentials entered in the 'Organization Settings' page

1. Has a valid MAILBOX which is not hidden from the GAL (Global Address List).

2. Has logged-on to his/her designated Mailbox at least once.

3. Has "Send As" and "Receive As" permissions on the Organization Mailboxes.

4. Is a member of one of the following Groups

   • 'Exchange View only Administrator Group' if Exchange Server 2003 User (or)

   • 'Exchange Organizational Administrator Group' if Exchange Server 2007 User (or)

   • 'Organizational management Group' if Exchange Server 2010, 2013 or 2016 User

5. Verify if the 'Exchange Server' under consideration is accessible from the machine where Exchange Reporter Plus is installed.

 

Cause:

User credential provided in the does not have a valid mailbox. The user credentials could be provided under the 'Organization Settings / Task scheduling' page or while configuring 'Exchange Reporter Plus Service'.

Resolution:

Verify if the user whose credentials entered 'Organization Settings' page,

• Has a valid MAILBOX that is not hidden from the GAL (Global Address List) and

• Has logged-on to his/her designated Mailbox at least once.

• Has "Send As" and "Receive As" permissions on Organization Mailboxes.

 

Cause:

Unable to logon to MAPI Client required for collecting Mailbox Information with the credentials provided in any of the folowing locations - 'Organization Settings / Task Scheduling' page or while configuring 'Exchange Reporter Plus Service'.

Resolution:

1. Verify the correctness of Username and Password entered in the organization settings page.




2. Verify if the User credentials provided,

   1. Has a live accessible mailbox and

   2. Has Send As" and "Receive As" permissions on the Organization mailboxes.

   3. Is a member of one of the following Groups

      • 'Exchange View only Administrator Group' if Exchange Server 2003 User (or)

      • 'Exchange Organizational Administrator Group' if Exchange Server 2007 User (or)

      • 'Organizational management Group' if Exchange Server 2010, 2013 or 2016 User

Cause:

Exchange Reporter Plus is unable to communicate with the Mailbox Information Store of the specified Exchange Server for the credentials provided. The user credentials could be provided under the 'Organization Settings / Task scheduling' page or while configuring 'Exchange Reporter Plus Service'.

Resolution:

Ensure that the Mailbox Private Store of the specified Exchange Server is mounted. Also ensure that a privileged user credentials are provided in the Organization Settings page.

 

Cause:

An unexpected problem might have occurred while MAPI Installation.

Resolution:

Sometimes MAPI installation might unexpectedly fail. Please uninstall and reinstall MAPI and restart Exchange Reporter Plus for the changes to take effect.

 

Cause:

The Scheduled Task includes one or more servers that are "unmanaged".

Resolution:

Remove Unmaged Servers from Scheduled Task Data Sources or ensure that the server has atleast one managed mailbox.

 

Note: Exchange Reporter Plus is licensed based on number of mailboxes, for a Server to be managed it should include atleast one licensed mailbox in it. You can manage mailbox license from Admin -->>License Management option.

Cause:

The Scheduled Task includes one or more mailboxes that are "unmanaged".

Resolution:

Ensure that only the managed mailboxes are considered for the scheduled task.

 

Note: Exchange Reporter Plus is licensed based on number of mailboxes. You can manage mailbox license from Admin -->>License Management option.

 

Cause:

Unable to establish a connection to remote powershell.

Resolution:

1. Make sure that the Exchange server and the machine on which Exchange Reporter Plus is installed are on the same domain. If they are on different domains, make sure a trust has been established between the two.
2. Make sure that the Exchange Server and the machine on which Exchange Reporter Plus is installed are on the same subnet.
3. Make sure that the credentials provided in the organization settings page is correct and that they have sufficient privileges.
4. Make sure that the machine on which Exchange Reporter Plus is installed is connected to the network.

 

Cause:

Windows Remote Management Framework is not installed.

Resolution:

Download and install WinRm from the link: http://support.microsoft.com/kb/968929

 

 

Cause:

Exchange Reporter Plus is not able to access the Log Path configured under 'Log/Store Path' settings page.

Resolution:

1. Check if the 'Log/Store Path' configured under 'Log/Store Path' settings page is correct.


2. Ensure that you are able to access the admin$ of the specified Server.

From the installation machine, select Start --> Run and type \\<Server Name>\admin$.

 

If you get the same error, enable Remote Administration Exception for the Server as below:

1. From the Server, select 'Start' --> 'Run' and type 'gpedit.msc' and hit 'enter'
2. Expand the Administrative Templates -> Network Connections -> Windows Firewall
3. Click the Domain Profile and double click the Windows Firewall : Allow remote administration exception
4. Select Enabled and click OK

3. Ensure that you are able to ping the specified Server by FQDN

   From the installation machine, open a command prompt and type ping <FQDN of the Server>. You must be able to ping the Server using its Fully Qualified Domain Name (eg. hostname.domainname.com).

    

Cause:

Unable to access the configured Exchange Server log files location with user credentials provided in the Organization Settings page.

Resolution:

• Check if you are able to 'ping' the admin share of the Specified Server from the installation machine using the user credentials provided in Organization Settings page.

Example: From the installation machine Click on Start --> Run --> Type '\\<Servername>\c$'

• Check if the Log Path entered under 'Log / Store Path' in Exchange Reporter Plus is of the following format.

The Traffic Log Path Format for Windows 2003 Server would be like : 'C:\Program Files\Exchsrvr\<servename.log>' and for Windows 2007 / 2010 would be like 'C:\Program Files\Microsoft\Exchange Server\V14\TransportRoles\Logs\MessageTracking'. For 2013 / 2016 would be like '\\\C$Program Files\Microsoft\ExchangeServer\V15\TransportRoles\Logs\MessageTracking'

 

The OWA Log Path Format for Windows 2003 / 2007 Server would be like : 'C:\WINDOWS\system32\LogFiles\W3SVC1' and for Windows 2010 & above would be like 'C:\inetpub\logs\LogFiles\W3SVC1'

Cause:

Exchange Reporter Plus collects log path info from the Active Directory. A log path change made by a user in MS Exchange is not automatically reflected in the Active Directory.

Resolution:

Verify the log path configured in Exchange Reporter Plus (Admin -->>Log / Store path). If any of the Servers log path is not correct, update them manually.

 

To modify the 'Log Path' for the Specified Server:

1. Go to the 'Admin' tab in the product
2. Click on 'Log / Store Path'
3. Modify the 'Traffic Log Path'
4. Modify the 'OWA (IIS) Log Path'
5. Modify the 'Failed Request (IIS) Log Path'
6. Click on 'Save'.

 

Cause:

Message Tracking Logging or Outlook Web Access logs might not have been enabled in Exchange Server.

Resolution:

Enable 'Message Tracking logs' in Exchange Server.

To enable Message Tracking Logs for Exchange Server 2003

Follow the below steps to enable 'Message Tracking Logs' for Exchange Server 2003

1. Click on Start -->All Programs -->> Microsoft Exchange -->>System Manager
2. From the 'Exchange System Manager' --> Right click against the Server and Click on 'properties'
3. From the 'Properties' dialog, Click on 'General' Tab, provide a check against 'Enable Message Tracking' and click on 'OK' button.

To Enable Message Tracking Logs for Exchange Server 2007/ 2010

'Message Tracking Logs' for Exchange Server 2007/2010 must be enabled from the Management Console of the respective servers.

1. Click on Start -->All Programs -->> Microsoft Exchange Server 2007-->>Exchange Management Console
2. From the 'Exchange Management Console'-->Click on 'Hub Transport'--> Right click against the Server and Click on 'properties'
3. From the 'Properties' dialog, Click on 'Log Settings' Tab, provide a check against 'Enable Message Tracking' and click on 'OK' button.

 

Enable Outlook Web Access Logs in Exchange Server

To enable Outlook Web Access Logs for IIS 6.0

Follow the below steps to enable logging for IIS 6.0

1. On the Taskbar, click Start --> Control Panel--> Administrative Tools--> Internet Information Services (IIS) Manager.
2. Right Click on Websites--> Default Web Site and select Properties.
3. Click Properties button under Enable Logging section

To Enable Outlook Web Access Logs for IIS 7.0

For IIS 7 follow the steps below to enable Cookie.

1. On the Taskbar, click Start --> Control Panel --> Administrative Tools --> Internet Information Services (IIS) Manager.
2. Right Click on Sites --> Default Web Site and select Properties
3. On the Logging page, in the Actions pane, click Enable to enable logging or click Disable to disable logging.
4. In Features View, double-click Logging.

Cause:

csCookie field might not have been enabled in OWA.

Resolution:

Enable csCookie with the following steps.

 

Follow the below steps to enable csCookie logging for IIS 6.0

1. Go to Run --> Type 'inetmgr' --> Expand Server name.
2. Expand "Web Site" --> Go to Properties of "Default Web Site".
3. Enable Logging
4. Click on Properties --> Go to "Advanced" tab --> Provide a check against "Cookie ( cs(Cookie)) and click on OK.

For IIS 7 follow the steps below to enable csCookie logging.

1. Go to Run --> Type 'inetmgr' -->Expand Server name
2. Expand 'Sites' --> Click on 'Default Web Site'
3. Open 'Logging'.
4. Enable logging by clicking on 'Enable' from Actions column.
5. Click on "Select Fields" under Log file and Enable Cookie ( cs(Cookie)).

 

Cause:

The Scheduled Task includes one or more servers that are "unmanaged".

Resolution:

Remove Unmaged Servers from Scheduled Task Data Sources or ensure that the server has atleast one managed mailbox.

 

Note: Exchange Reporter Plus is licensed based on number of mailboxes, for a Server to be managed it should include atleast one licensed mailbox in it. You can manage mailbox license from Admin -->>License Management option.

Cause:

Failed Request Tracing definition might not have been configured.

Resolution:

Pre-requisite: IIS 7 and above should be installed on the server. After the default installation of IIS 7 or above, install the tracing role service to use failed request tracing. After you install the role service, you still must enable failed request tracing at the site level, application level, or directory level.

 

Steps to Install Tracing Role Service

FOR WINDOWS SERVER 2012 OR WINDOWS SERVER 2012 R2

1. On the taskbar, click Server Manager.
2. In Server Manager, click the Manage menu, and then click Add Roles and Features.
3. In the Add Roles and Features wizard, click Next. Select the installation type and click Next. Select the destination server and click Next.
4. On the Server Roles page, expand Web Server (IIS), expand Web Server, expand Health and Diagnostics, and then select Tracing. Click Next.
5. On the Select features page, click Next.
6. On the Confirm installation selections page, click Install.
7. On the Results page, click Close.

FOR WINDOWS SERVER 2008 OR WINDOWS SERVER 2008 R2

1. On the taskbar, click Start, point to Administrative Tools, and then click Server Manager.
2. In the Server Manager hierarchy pane, expand Roles, and then click Web Server (IIS).
3. In the Web Server (IIS) pane, scroll to the Role Services section, and then click Add Role Services.
4. On the Select Role Services page of the Add Role Services Wizard, select Tracing, and then click Next.
5. On the Confirm Installation Selections page, click Install.
6. On the Results page, click Close.

 

Steps to Enable Tracing

1. Open Internet Information Services (IIS) Manager.
2. In the Connections pane, select the server connection, site, application, or directory for which you want to configure failed request tracing.
3. In the Actions pane, click Failed Request Tracing.
4. In the Edit Web Site Failed Request Tracing Settings dialog box, select the Enable check box to enable tracing, leave the default value or type a new directory where you want to store failed request log files in the Directory box, type the number of failed request trace files you want to store in the Maximum number of trace files box, and then click OK.

 

Steps to Configure Failure Definitions

1. Open Internet Information Services (IIS) Manager.
2. In the Connections pane, select the server connection, site, application, or directory for which you want to configure failed request tracing.
3. In the Home pane, double-click Failed Request Tracing Rules.
4. In the Actions pane, click Add.
5. On the Specify Content to Trace page of the Add Failed Request Tracing Rule Wizard, select the content type you want to trace, and then click Next.
6. On the Define Trace Conditions page, select the conditions you want to trace, and then click Next. Trace conditions can include any combination of status codes, a time limit that a request should take, or the event severity.
7. Status codes for Access Denied/Logon Failure: 401.1,401.2,401.3,401.4,401.5.
8. If you specify all conditions, the first condition that is met generates the failed request trace log file.
9. On the Select Trace Providers page, select one or more of the trace providers under Providers or Select "All".
10. On the Select Trace Providers page, select one or more of the verbosity levels under Verbosity.
11. If you have selected the ASPNET or WWW Server trace provider in step 7, select one or more functional areas for the provider to trace under Areas of the Select Trace Providers page.
12. Click Finish.

 

Cause:

Certain parameters are missing from the IIS 8 logs as mentioned in https://support.microsoft.com/en-us/kb/2829173

Resolution:

Upgrade to IIS 8.5 to fix issue

 

Cause:

OWA failed logons are usually recorded under apppoolId MSExchangeOWAAppPool. The default trace file limit is 50, after which the logs are overwritten with newly generated ones. If the current logs do not include details about failed logons, the report will not have data.

Resolution:

Steps to Enable Tracing

1. Open Internet Information Services (IIS) Manager.
2. In the Connections pane, select the server connection, site, application, or directory for which you want to configure failed request tracing.
3. In the Actions pane, click Failed Request Tracing.
4. In the Edit Web Site Failed Request Tracing Settings dialog box, edit the number of failed request trace files you want to store to 10,000 in the Maximum number of trace files box, and then click OK.

 

Cause:

For Exchange Server 2007 and 2010 environments, Exchange Management Shell is needed for gathering Mailbox Permission Reports

Resolution:

Install Exchange Management Shell in the same machine where Exchange Reporter Plus is installed.

 

Cause:

Exchange System Manager(ESM) is required for Mailbox Permission gathering in Exchange Server 2003 environments. 64 bit servers cannot accommodate Exchange System Manager (ESM).

Resolution:

Uninstall the product and re-install it on a 32 bit machine where Exchange System Manager (ESM) is installed.

 

Cause:

The Scheduled Task includes one or more servers that are "unmanaged".

Resolution:

Remove Unmaged Servers from Scheduled Task Data Sources or ensure that the server has atleast one managed mailbox.

 

Note: Exchange Reporter Plus is licensed based on number of mailboxes, for a Server to be managed it should include atleast one licensed mailbox in it. You can manage mailbox license from Admin -->>License Management option.

Cause:

Unable to establish connection with Exchange Web Services.

Resolution:

• Ensure that the machine on which Exchange Reporter Plus is installed is connected to the network.

• Ensure that the URL 'https://<servername>/EWS/Exchange.asmx' is reachable from the machine on which ERP is installed.

Cause:

EWS Managed API is required to generate this report.

Resolution:

• Ensure that the EWS Managed API is installed on the same machine as Exchange Reporter Plus.

• If not, navigate to '<producthome directory>\lib\native' and run EwsManagedAPI.msi

Cause:

EWS is supported only on Microsoft Exchange Server 2007 and above.

Resolution:

Ensure that you have at least one Exchange 2007 server or above in the environment.

Cause:

Insufficient permissions to access room mailbox calendar.

Resolution:

• Ensure that the user provided in Organization Settings page has Calendar access permission on required room mailboxes.

• If not, run the following commandlet in Exchange Management Shell:
  Get-Mailbox -RecipientTypeDetails 'RoomMailbox' | Foreach-Object {Add-MailboxFolderPermission $_":\Calendar" -User <user in Organization settings page> -AccessRights Reviewer}

Cause:

Insufficient permissions to gather mailbox content.

Resolution:

• Ensure that the user provided in Organization Settings page has Full access permission on required mailboxes.

• If not, run the following commandlet in Exchange Management Shell:
  Add-MailboxPermission -Identity <mailbox name> -User <user in Organization settings page> -AccessRights FullAccess

Cause:

User Credentials provided in the 'Organization Settings / Task scheduling' page or while configuring 'Exchange Reporter Plus Service' might be wrong.

Resolution:

Verify the user name and password entered in the above locations. The username format should be <DomainName\UserName>

Cause:

.NET framework is required.

Resolution:

Download and install .NET from
http://www.microsoft.com/en-in/download/details.aspx?id=21

Cause:

• Unable to establish connection with Exchange Web Services.

Resolution:

• Ensure that the URL 'https://<servername>/EWS/Exchange.asmx' is reachable from the machine on which Exchange Reporter Plus is installed.
• If the URL is reachable, please check your user credentials.

Cause:

• User Credentials provided on the Organization Settings page or user credentials provided while configuring the Exchange Reporter Plus service might be wrong or not updated.
• This EWS URL is not part of this organization.

Resolution:

• Update the selected organization's EWS URL.
• If the issue persists, please update the password on the Organization Settings page.

Cause:

• Service account does not have a valid mailbox.

Resolution:

• Please create a mailbox for the service account.
• Please wait for essential data gathering to take place.
• If the issue persists, please provide alternative credentials for a user with a mailbox who is a member of the Organization Management group in the admin page of your Exchange server.

Cause:

• EWS Managed API is required to be added in the URL Settings.

Resolution:

• Ensure that the EWS Managed API is installed in the same machine that houses Exchange Reporter Plus.
• If not, navigate to '<product home directory>\lib\native' and run EwsManagedAPI.msi.

Cause:

• .NET not installed

Resolution:

• Click here to download and install .NET framework.
• .NET version 3.5 or above is required.

Cause:

• The account does not have the required permission to impersonate the requested user.

Resolution:

• Ensure that the user is given the ApplicationImpersonation role in Exchange admin center.
• If not, run the following cmdlet in Exchange Management Shell:

  New-ManagementRoleAssignment -Name "impersonationAssignmentName" -Role "ApplicationImpersonation" -User {user in Error Message}

Cause:

• TLS 1.2 is required to be added in the URL Settings.

Resolution:

• Ensure that TLS 1.2 is enabled in the same machine that houses Exchange Reporter Plus.
• Use the following PowerShell cmdlet to check:
  • [Net.ServicePointManager]::SecurityProtocol
• If not, enable TLS 1.2, and restart the product for the changes to take effect.