Force Archiving on Hosted Exchange (Office 365)
By default Office 365 Hosted Exchange processed Archiving policies only once ever 7 days.
You can force this for any mailbox using Windows PowerShell:
- Connect Windows PowerShell to your Office 365 account.
- Run: Start-ManagedFolderAssistant -Identity <mailbox>
Archiving policies for specified mailbox should be executed within few minutes.
Connect PowerShell to Exchange Online (Office 365)
To connect to Office 365 Exchange Management Shell, use the following method (this uses modern authentication and works with or without Multi Factor Authentication - MFA):
- Run Windows Power Shell as Administrator
- This step only needs to be done once on each PC you are connecting from:
- Run: Install-Module -Name ExchangeOnlineManagement -RequiredVersion 2.0.5
For an updated command and new versions check PowerShell Gallery. - Run: Import-Module ExchangeOnlineManagement
- Run: Install-Module -Name ExchangeOnlineManagement -RequiredVersion 2.0.5
- Run: Connect-ExchangeOnline
- Log in with your Office 365 admin credentials.
- To test a successful connection, run: Get-Mailbox
- To disconnect, run: Disconnect-ExchangeOnline
Read more: Connect PowerShell to Exchange Online (Office 365)
Trace failed login attempts and account lockouts
Enable logging
By default domain controllers only log successful login attempts, therefore you should first off all start logging failed login attempts. This is done via Group Policy:
Computer Configuration > Policies > Windows Settings > Security Settings > Local Policies > Audit Policy
Enable both Success and Failure event logging for following Policies:
- Audit account logon events
- Audit account management
- Audit logon events
ntbackup job fails with blank log files
Issue
ntbackup scheduled backup job begins and immediately fails.
Backup logs created in C:\Documents and Settings\<ntbackup-account>\Local Settings\Application Data\Microsoft\Windows NT\NTBackup\data don't list any errors. Backup .log files are created but they are blank 1kb files.
Application logs record following warning when backup begins:
Event ID: 1524
Source: Userenv
User: ntbackup-account (account used to run scheduled job)
Type: Warning
Description:
Windows cannot unload your classes registry file - it is still in use by other applications or services. The file will be unloaded when it is no longer in use.
- Find email address in Active Directory
- Offline address book not updating on Exchange 2010
- Can't install WSUS 3.0 on Windows Server 2003 64bit
- Sophos Control Center fails to remove third party antivirus software (Error Code 00000049)
- Windows cannot find 'gpedit.msc'
- An internal error has occurred (error 50331688) on Windows SBS Server 2008
- Shutting down multiple servers with single APC PowerChute Agent
- Can't add additional x86 Driver on 64bit Windows Server 2008
- IIS website takes long time to load first time
- Can't uninstall Exchange 2007 because of present public folder replicas