Exchange 2019 + ADFS is it possible to configure ModernAuth for third-party Android mail clients?
Hello, Our organization operates under Uzbekistan's data localization and banking secrecy regulations, which require customer and corporate data — including email — to remain on infrastructure physically located within the country and under direct regulatory oversight. This precludes the use of cloud-hosted mail services such as Microsoft 365/Exchange Online, and requires a fully on-premises Exchange deployment with local identity federation (AD FS) instead of Azure AD. Environment: Exchange Server 2019 CU14, single server (MX01), pure on-premises. AD FS is registered as an AuthServer (Type: ADFS), no Azure AD / hybrid tenant involved. The AuthServer is configured correctly: AuthorizationEndpoint and TokenIssuingEndpoint are populated, IsDefaultAuthorizationEndpoint: True, and DomainName points to our mail domain. Realm/ServiceName are configured as well. Symptom: The native iOS Mail client (account added manually, no MDM profile) correctly redirects to our AD FS login page on first setup — the full Modern Auth flow works. A third-party EAS client (Nine by NitroDesk, Android) never receives an OAuth challenge at all — it falls back to Basic authentication. Get-ActiveSyncVirtualDirectory/Set-ActiveSyncVirtualDirectory in this build simply has no -OAuthAuthentication parameter (unlike EWS/OAB). Log finding: When testing with the Nine client, the following was captured in the Exchange HttpProxy/Eas logs: S:ServiceCommonMetadata.OAuthError=Flighting is not enabled for domain 'webmail.<domain>'. S:ServiceCommonMetadata.OAuthErrorCategory=OAuthNotAvailable Questions: What exactly controls "Flighting" for EAS OAuth in a pure on-prem Exchange 2019 CU14 + AD FS scenario (no Azure AD)? Is there a documented, supported way to enable it (New-FlightOverride? something else)? Is EAS Modern Auth even supported for an arbitrary/generic OAuth client (not Apple, not Outlook) in this scenario, or is it effectively an allowlist limited to specific client_ids (Apple Native Mail / Outlook)? How does native iOS Mail get redirected to AD FS without ever receiving an authorization_uri in the EAS/Autodiscover 401 challenge — is there an undocumented discovery path (e.g., hardcoded per registered client_id)? Thank you in advance for any insight.
Help~After installing Exchange 2019, mail is stuck in Draft in OWA
Hi all I dont undertand this symptom. Now I installed one new DC, one new Exchange 2019(CU13) in active directory domain. and I just set recieve connector(check anonymous user in Default Exchange) and created send connector and I sent mail to my own mailbox(administrator), and I also sent mail to other mailboxes, but I only have stuck Draft folder in OWA. before install Exchange 2019 CU13, I installed Exchange 2029 CU15 but it was same symptom so after removing Exchange 2019 CU15, I reinstalled Exchange CU 13. but it was same. DC and Exchange OS are Windows Server 2022 Standard on Dell H/W. ipv4 192.168.10.202 subnet 255.255.255.0 GW 192.168.10.1 Dns1 192.168.10.201(DC) It's the same as the link below, but there's nothing solved. T.T https://www.reddit.com/r/exchangeserver/comments/1daxga2/exchange_server_2019_emails_get_stuck_in_drafts/#:~:text=Here's%20some%20information%20about%20emails%20getting%20stuck,lots%20of%20space%20may%20not%20always%20work. If anyone knows how to solve this problem, please help meMigration Exchange 2016 to 2019 then SE
Hello, we replaced our old Exchange 2016 Server, to Exchange SE. After the update users notified me, that the search is taking long. We also have a lot of Errors in the Eventlog 3056 Scenario: UpdateMasterTable. The app master table could not be saved due to a conflict. Mailbox: x Error: Property conflict: DisplayName: 'BigFunnelPoiNotNeededReason', Resolvable: 'True', OriginalValue: 'Object is null', ClientValue: '2', ServerValue: '2' Property conflict: DisplayName: 'BigFunnelCorrelationId', Resolvable: 'True', OriginalValue: 'Object is null', ClientValue: 'Property: [{0b63e350-9ccc-11d0-bcdb-00805fccce04}:'BigFunnelCorrelationId'] BigFunnelCorrelationId, PropertyErrorCode: NotFound, PropertyErrorDescription: .', ServerValue: 'Property: [{0b63e350-9ccc-11d0-bcdb-00805fccce04}:'BigFunnelCorrelationId'] BigFunnelCorrelationId, PropertyErrorCode: NotFound, PropertyErrorDescription: .' Property conflict: DisplayName: 'BigFunnelIndexingStart', Resolvable: 'True', OriginalValue: 'Object is null', ClientValue: 'Property: [{0b63e350-9ccc-11d0-bcdb-00805fccce04}:'BigFunnelIndexingStart'] BigFunnelIndexingStart, PropertyErrorCode: NotFound, PropertyErrorDescription: .', ServerValue: 'Property: [{0b63e350-9ccc-11d0-bcdb-00805fccce04}:'BigFunnelIndexingStart'] BigFunnelIndexingStart, PropertyErrorCode: NotFound, PropertyErrorDescription: .' Property conflict: DisplayName: 'BigFunnelMessageUncompressedPOIVersion', Resolvable: 'True', OriginalValue: 'Object is null', ClientValue: 'Property: [0x36660003] BigFunnelMessageUncompressedPOIVersion, PropertyErrorCode: NotFound, PropertyErrorDescription: .', ServerValue: 'Property: [0x36660003] BigFunnelMessageUncompressedPOIVersion, PropertyErrorCode: NotFound, PropertyErrorDescription: .' Property conflict: DisplayName: 'BigFunnelPOIContentFlags', Resolvable: 'True', OriginalValue: 'Object is null', ClientValue: 'Property: [0x36630003] BigFunnelPOIContentFlags, PropertyErrorCode: NotFound, PropertyErrorDescription: .', ServerValue: 'Property: [0x36630003] BigFunnelPOIContentFlags, PropertyErrorCode: NotFound, PropertyErrorDescription: .' Property conflict: DisplayName: 'BigFunnelPOIUncompressed' Does somebody know how we can fix this problem? We find already that article that is similar but the workaround for the search (not the mirgration) doesnt work for us. We need Outlook cached. https://learn.microsoft.com/en-us/answers/questions/5508363/outlook-search-not-working-reliably-after-exchange
How to know if Exchange oAuth Metadata is refresh
Hi, I have an environment with Exchange 2013 hybrid coexistence with Exchange 2019 now. oAuth is enabled. I am suspecting the current environment, servers won't refresh the oAuth Metadata themselves. Is there any logs I can trace that? What event ID indicate the metadata is updated?
Supported / recommended .Net versions Exchange SE on Windows Server 2019
I’m reading up on the Exchange SE upgrade, but there’s something I don’t understand. We are currently running Exchange 2019 CU15 on a Windows Server 2019 server (desktop experience). My initial plan is to perform an in-place upgrade from Exchange 2019 CU15 to Exchange SE, while remaining on Windows Server 2019 for the time being. From what I’ve read, this should be possible: https://techcommunity.microsoft.com/blog/exchange/why-%E2%80%9Cin-place-upgrade%E2%80%9D-from-exchange-2019-to-exchange-se-is-low-risk/4410173 https://learn.microsoft.com/en-us/answers/questions/2182463/upgrade-exchange-2019-to-exchange-se According to the supportability matrix, this should also be supported: https://learn.microsoft.com/en-us/exchange/plan-and-deploy/supportability-matrix Exchange Server SE is supported on Windows Server 2019. What I don’t understand is the table for .NET Framework support. It seems like Windows Server 2019 is missing for Exchange Server SE in that table, just like Exchange Server 2019 CU15 on Windows Server 2019 with its corresponding .NET version. https://learn.microsoft.com/en-us/exchange/plan-and-deploy/supportability-matrix?view=exchserver-2019#additional-requirements-and-information Does anyone have an explanation for this? I’d love to hear it!
How to Delete a Composing Email Attachment via Outlook Add-in?
Context: Server: Exchange Server 2019 on premise Client: OWA Category: Outlook Add-in Office JS API Set: Supported up to 1.5 only Problem Details: Delete an attachment added manually or through EWS API to an email item. Limitations: 1. Limitation of makeEWSRequestAsync() Office JS method: The makeEWSRequestAsync method in Office.js does not support the DeleteAttachment SOAP operation, which is required from outlook add in. -> Attempted Workaround - Using fetch with EWS SOAP Request: I tried invoking the DeleteAttachment operation via a fetch call to the EWS endpoint. However, EWS response states "requested web method is not allowed for this application". 2. OWA Limitation: As OWA in this environment only supports Office.js up to version 1.5, the modern attachment Office JS APIs and Graph APIs are not an option. Question: In an Exchange On-Premises scenario, how can I programmatically delete attachments via my add-in? Specifically, is there a recommended approach to obtain a valid token for EWS requests, or any supported alternative to perform DeleteAttachment? Any way to convert EWS attachment ID to Office JS attachment UUID? Additional Notes: I am aware that Exchange Online supports more modern APIs (Graph/REST), but my current deployment is strictly Exchange On-Premises. The add-in works well for reading attachments and other operations, except for deletion. Any guidance or recommendations would be highly appreciated! Thank you in advance.exchange 2019 send to person not save in sent item
Hi, I have problem in organization with exchange 2019. I have user then send mail to outside one domain, mail not save in sent items. Tracking logs show is this mail send to customer. Customer recive this mail but not in mailbox user sent items. #TYPE Selected.Microsoft.Exchange.Management.TransportLogSearchTasks.MessageTrackingEvent "Timestamp","Sender","Recipients","MessageSubject","EventId","ServerHostname" "06.05.2025 09:10:45","email address removed for privacy reasons","user@customer.domain","FW: new order_season 2025","RECEIVE","exchange" "06.05.2025 09:10:46","email address removed for privacy reasons","user@customer.domain","FW: new order_season 2025","HAREDIRECT","exchange" "06.05.2025 09:10:46","email address removed for privacy reasons","user@customer.domain","FW: new order_season 2025","RECEIVE","exchange" "06.05.2025 09:10:46","email address removed for privacy reasons","user@customer.domain","FW: new order_season 2025","SUBMIT","exchange" "06.05.2025 09:10:46","email address removed for privacy reasons","user@customer.domain","FW: new order_season 2025","AGENTINFO","" "06.05.2025 09:10:46","email address removed for privacy reasons","user@customer.domain","FW: new order_season 2025","TRANSFER","exchange" "06.05.2025 09:10:53","email address removed for privacy reasons","user@customer.domain","FW: new order_season 2025","SENDEXTERNAL","m.net" "08.05.2025 09:33:17","email address removed for privacy reasons","user@customer.domain","RE: new order_season 2025","RECEIVE","exchange" "08.05.2025 09:33:17","email address removed for privacy reasons","user@customer.domain","RE: new order_season 2025","HAREDIRECT","exchange" "08.05.2025 09:33:17","email address removed for privacy reasons","user@customer.domain","RE: new order_season 2025","RECEIVE","exchange" "08.05.2025 09:33:17","email address removed for privacy reasons","user@customer.domain","RE: new order_season 2025","SUBMIT","exchange" "08.05.2025 09:33:17","email address removed for privacy reasons","user@customer.domain","RE: new order_season 2025","AGENTINFO","" "08.05.2025 09:33:17","email address removed for privacy reasons","user@customer.domain","RE: new order_season 2025","TRANSFER","exchange" "08.05.2025 09:33:27","email address removed for privacy reasons","user@customer.domain","RE: new order_season 2025","SENDEXTERNAL","mxw.net" "08.05.2025 10:19:55","email address removed for privacy reasons","user@customer.domain;user@customer.domain","RE: shipping documents xxx #20","RECEIVE","exchange" "08.05.2025 10:19:55","email address removed for privacy reasons","user@customer.domain;user@customer.domain","RE: shipping documents xxx #20","HARECEIVE","exchange" "08.05.2025 10:19:55","email address removed for privacy reasons","user@customer.domain;user@customer.domain","RE: shipping documents xxx #20","SUBMIT","exchange" "08.05.2025 10:21:04","email address removed for privacy reasons","user@customer.domain;user@customer.domain","RE: shipping documents xxx #20","HADISCARD","exchange" "08.05.2025 10:27:36","email address removed for privacy reasons","user@customer.domain;user@customer.domain","RE: combined shipment: xxx ","RECEIVE","exchange" "08.05.2025 10:27:36","email address removed for privacy reasons","user@customer.domain;user@customer.domain","RE: combined shipment: xxx ","HARECEIVE","exchange" "08.05.2025 10:27:36","email address removed for privacy reasons","user@customer.domain;user@customer.domain","RE: combined shipment: xxx ","SUBMIT","exchange" "08.05.2025 10:29:09","email address removed for privacy reasons","user@customer.domain;user@customer.domain","RE: combined shipment: xxx ","HADISCARD","exchange" "09.05.2025 15:22:38","email address removed for privacy reasons","user@customer.domain","RE: xxx","RECEIVE","exchange" "09.05.2025 15:22:38","email address removed for privacy reasons","user@customer.domain","RE: xxx","HAREDIRECT","exchange" "09.05.2025 15:22:38","email address removed for privacy reasons","user@customer.domain","RE: xxx","RECEIVE","exchange" "09.05.2025 15:22:38","email address removed for privacy reasons","user@customer.domain","RE: xxx","SUBMIT","exchange" "09.05.2025 15:22:39","email address removed for privacy reasons","user@customer.domain","RE: xxx","AGENTINFO","" "09.05.2025 15:22:39","email address removed for privacy reasons","user@customer.domain","RE: xxx","TRANSFER","exchange" "09.05.2025 15:22:56","email address removed for privacy reasons","user@customer.domain","RE: xxx","SENDEXTERNAL","mx.ner" I cant target this problem. Thansk for answers DS
Arbitration Mailboxes not available
I have an environment with an Exchange 2013 (15.00.1497.048) and an Exchange 2019 CU14 server installed. The new 2019 server appears to be fully operational with the exception of the system mailboxes, which means I cannot migrate the mailboxes off the 2013 server. What I have tried to resolve this issue: Re-run /PrepareAD - This did create the AD accounts; however, the system mailboxes were not created and when attempting to enable them getting the following error: "The user's Active Directory account must be logon-disabled for linked, shared, or resource mailbox." Checked for disabled or soft-deleted mailboxes - none that match the GUIDs for the system mailboxes Deleted the system accounts from Active Directory and re-ran /PrepareAD. It ran successfully and created the AD accounts; however, still getting the same error when attempting to enable the mailboxes. Looking for any insight into how to resolve this issue.
