MSExchangeGuru.com

Learn Exchange the Guru way !!!

 

Mystery of adding X500’s – What an amazing thing to know…!!!

This is something I learned this morning and thought I should share with my subscribers.

Issue:

Users are receiving NDR while responding to old emails of Ron Mayers.

Delivery has failed to these recipients or distribution lists:

Mayers, Ron
The recipient’s e-mail address was not found in the recipient’s e-mail system. Microsoft Exchange will not try to redeliver this message for you. Please check the e-mail address and try resending this message, or provide the following diagnostic text to your system administrator.

If you click on the name, the NDR will get resolved to:

IMCEAEX-_O=EXCH_OU=EXCHANGE+20ADMINISTRATIVE+20GROUP+20+28FHSDHJF23GHYED+29_CN=RECIPIENTS_CN=RON+2EMayers@contoso.com

EXCH is the Exchange Organization name

Cause:

This behavior is caused because every internal message send/received in the orgn, will have the recipient info resolvable normally to the LegacyExchangeDN attribute. In this case, the user mailbox would have been recreated or the old LegacyExchangeDN value would have been changed to a different one.

Resolution:

We need to add a new X500 address to the user mailbox from Exchange Management Console. To do that, we need to first create it in the right format.

First step is to get rid of the _ and convert them to /

/O=EXCH/OU=EXCHANGE+20ADMINISTRATIVE+20GROUP+20+28FHSDHJF23GHYED+29/CN=RECIPIENTS/CN=RON+2EMayers@contoso.com

Now the tricky part:

/O=EXCH/OU=EXCHANGE+20ADMINISTRATIVE+20GROUP+20+28FHSDHJF23GHYED+29/CN=RECIPIENTS/CN=RON+2EMayers@contoso.com

Look closely and you see some numbers like +20, +28 etc… Wondering what they are?

+20 is a SPACE

+28 and +29 are ( and ) respectively

+2E is .

So the actual X500 address to be added will look like this:

/O=EXCH/OU=EXCHANGE ADMINISTRATIVE GROUP (28FHSDHJF23GHYED)/CN=RECIPIENTS/CN=RON.Mayers@contoso.com

I know it’s crazy but it is what it is… :-)
Update – MuthuKumar did cover X500 here:

Exmerge and X500.. A story…: http://msexchangeguru.com/2010/02/26/exmerge-and-x500-a-story/

Ratish Nair
MVP Exchange
Team @MSExchangeGuru.com

Keywords: Adding a new X500 address, Issue with X500 address, NDR while replying to old emails in exchange

20 Responses to “Mystery of adding X500’s – What an amazing thing to know…!!!”

  1. Wizkid Says:

    This is a know issue becuase of the legacyexchangeDN being used by exchange to send internal emails. So you just need to add legacyexchnagedn of old user to the x500 of the new user with the same email id.

  2. Sahin Boluk Says:

    I have seen this in our environment as well, migrating from GroupWise to E2K10. For these users, I manually added the X500 address. My worry is that we have a migrtion coming up for two other sites that we e-mail alot with, on different versions of Exchange, and this will arise again. is there a bulk way to add these or do we don’t have to worry about it at all?

  3. Muthukumar P Says:

    Sahin,

    I’m sure ADModify is the tool that you’re looking for! :)

    Muthu

  4. Wizkid Says:

    Sachin,
    Use this PS script on my article

    http://msexchangeguru.com/2012/03/09/e2010-email-id-for-bulk-users/

  5. IMCEAX error after migration from Exchange 2007 to Exchange 2013 « exkb Says:

    [...] http://msexchangeguru.com/2012/03/15/x500/ [...]

  6. Wizkid Says:

    Adddition:

    +40 represents @

  7. Prabhat Says:

    Addition:

    +2C represents comma
    +5F represents underscore

  8. IMCEAX error after migration from Exchange 2007 to Exchange 2013 | FICILITY.NET Says:

    [...] http://msexchangeguru.com/2012/03/15/x500/ [...]

  9. Venkat Says:

    Excellent article :-)
    One query about LegacyExchangeDN – Does this value affect all versions of outlook users or is it for Outlook 2003?

  10. Waltr Says:

    +3F is ?

  11. Kuriya Says:

    Can anyone convert this

    IMCEAEX-_O=DOMAIN_OU=EXCHANGE+20ADMINISTRATIVE+20GROUP+20+28FYDIBOHF23SPDLT+29_CN=RECIPIENTS_CN=Julian+20Mitchelld45@domain.com

  12. Kuriya Says:

    User’s email address is julian.mitchell@domain.com

    Not sure what d45 represents ?

    CN=Julian+20Mitchelld45@domain.com

  13. Alex Says:

    Hi guys,

    I’ve written a script to help with conversion of email if you want… I haven’t extensively tested it but where I have it’s fine…
    It’ll ask for the email address affected… i.e. in the example in the page you can paste in /O=EXCH/OU=EXCHANGE+20ADMINISTRATIVE+20GROUP+20+28FHSDHJF23GHYED+29/CN=RECIPIENTS/CN=RON+2EMayers@contoso.com
    & it will give you the correct format of the address…

    Enjoy..

    Set FSO = CreateObject(“Scripting.FileSystemObject”)
    Set WshShell = CreateObject(“Wscript.Shell”)

    Set oArgs = WScript.Arguments
    If oArgs.Count = 0 Then
    oMail = InputBox(“Paste the affected email address”,”Email Required”)
    Else
    oMail = oArgs(0)
    End If

    If oMail = “” Then
    WScript.Quit
    End if

    oCurDir = WshShell.CurrentDirectory
    Set OutPutFile = FSO.CreateTextFile(oCurDir & “\” & “ConvertedX500.txt”,2)

    If Instr(oMail,”IMCEAEX-”) Then
    oMail = Replace(oMail,”IMCEAEX-”,”")
    End If
    oRes = Replace(oMail,”_”,”/”)
    oRes = Replace(oRes,”+28″,”(“)
    oRes = Replace(oRes,”+29″,”)”)
    oRes = Replace(oRes,”+2E”,”.”)
    oRes = Replace(oRes,”+20″,” “)
    oRes = Replace(oRes,”+40″,”@”)
    oRes = Replace(oRes,”+2C”,”,”)
    oRes = Replace(oRes,”+5F”,”_”)

    Wscript.Echo “A resulting text file has been created in the same folder as this script” & VbCrLf &_
    VbCrLf & “This will now open – you can paste the contents into an X500 email address.”

    OutPutFile.WriteLine oRes
    OutPutFile.Close
    WshShell.Run “Notepad.exe ” & oCurDir & “\” & “ConvertedX500.txt”

  14. Microsoft Fragestunde zu Office 365 und Windows Intune am 18. Juni 2013 - .: Daniel Melanchthon :. - Site Home - TechNet Blogs Says:

    [...] Mystery of adding X500’s – What an amazing thing to know…!!! « MSExchangeGuru.com http://msexchangeguru.com/2012/03/15/x500/ [...]

  15. Prakash Pandey Says:

    I my case user is deleted…pls suggest if any solution for it.

  16. dbiz Says:

    Your instructions are malformed. I know because I just wasted 8 hours trying to figure out why they don’t work.

    IMCEAEX-_O=EXCH_OU=EXCHANGE+20ADMINISTRATIVE+20GROUP+20+28FHSDHJF23GHYED+29_CN=RECIPIENTS_CN=RON+2EMayers@contoso.com

    /O=EXCH/OU=EXCHANGE+20ADMINISTRATIVE+20GROUP+20+28FHSDHJF23GHYED+29/CN=RECIPIENTS/CN=RON+2EMayers

    Now the tricky part:

    /O=EXCH/OU=EXCHANGE+20ADMINISTRATIVE+20GROUP+20+28FHSDHJF23GHYED+29/CN=RECIPIENTS/CN=RON+2EMayers

    Look closely and you see some numbers like +20, +28 etc… Wondering what they are?

    +20 is a SPACE

    +28 and +29 are ( and ) respectively

    +2E is .

    So the actual X500 address to be added will look like this:

    /O=EXCH/OU=EXCHANGE ADMINISTRATIVE GROUP (FHSDHJF23GHYED)/CN=RECIPIENTS/CN=RON.Mayers

    You have an extra @contoso.com which should be removed and you use the 28 from the +28 in the address. This is incorrect.

  17. Melodeem Says:

    I rarely comment, but this post saved my day… Thank you Guru.

  18. Transmo Says:

    I have the x500 address of the user without the @domain part. Is that correct? Users are still getting the bounced back message. What am I doing wrong?

  19. Transmo Says:

    I figured what it was.

    There was an event ID 9217 (http://technet.microsoft.com/en-us/library/hh343866%28v=exchg.140%29.aspx) preventing email delivery.

    The problem was the the proxy X500 address was set as LegacyExchangeDN for ExchangeActiveSync and the Phone objects of the user entity in Active Directory so I guess those two count as two Active Directory objects.

    The fix was to clear the LegacyExchangeDN for those objects in ADSI Edit and leave them as “Not Set”.

  20. Ryan Says:

    If you, like me, need to do this to all the recipients in your domain after a mail migration, you can use powershell to automate it. This is how I did it. In order for this to work correctly, your primary SMTP addresses and user aliases must be the same on both domains – you can tweak if yours aren’t the same.

    1. Open Exchange Management Shell
    2. get-mailbox | select Alias,PrimarySMTPAddress | Export-Csv C:\email.csv

    3. Open Active Directory Module for Windows PowerShell
    4. import-csv C:\email.csv | foreach{Set-ADuser -Identity $_.Alias -add @{proxyAddresses = “X500:/O=EXCH/OU=EXCHANGE ADMINISTRATIVE GROUP/CN=RECIPIENTS/CN=$($_.PrimarySMTPAddress)”}}

Leave a Reply

Notify me of followup comments via e-mail. You can also subscribe without commenting.