Setup L2TP / IPSec VPN on Windows Server 2016

Following tutorial shows how to setup Windows Server 2016 (single NIC, behind NAT/Firewall) as a L2TP / IPSec VPN Server.

Install Remote Access Role

• Open Server Manager > Manage > Add Roles and Features and add Remote Access role.
• On Role Services screen choose only DirectAccess and VPN (RAS).
  

Cannot delete legacy mailbox on Exchange 2010 - Access is Denied

Issue

Some mailboxes on Microsoft Exchange 2010 cannot be deleted via Exchange Management Console. Following error is displayed:

Active Directory operation failed on <domain controller>. This error is not retriable. Additional information: Access is Denied. Active directory response: 00000005: SecErr: DSID-033520B4, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

The affected mailboxes seem to be those that were moved during Exchange Upgrades from Exchange 2003 > 2007 > 2010.

Backup Exec was unable to prepare Microsoft Active Directory resources for Granular Recovery Technology (GRT) operations (V-79-57344-38747)

Issue

Backup Exec Server 16 (V-Ray Edition), running on Windows Server 2008R2 logs following warning after backing up Windows Server 2016 Domain Controller:

V-79-57344-38747 - Backup Exec was unable to prepare Microsoft Active Directory resources for Granular Recovery Technology (GRT) operations. Therefore you will be unable to perform GRT-enabled restores of Microsoft Active Directory data from this backup.

Enable Anonymous Relay on Exchange 2016

• Open Exchange Admin Center and Navigate to Mail Flow > Receive Connectors
• Create a new Receive Connector with following settings:
  • Role: Fontend Transport
  • Type: Custom