Hi,

I have started the migration of Exchange 2010 to Exchange 2013. Exchange 2010 is single server with all roles and Exchange 2013 with 1 CAS and 1 Mailbox. Initially plan was to verify the Windows XP users can connect with Exchange 2013 but there was a lot of issues and stop XP machines migration. Windows 7 machines are working perfectly without any issue.

Now decided to configure POP/IMAP on XP machines. The test of incoming POP/IMAP is fine and receiving emails from internal to external domains but the SMTP is giving error Send test e-mail: Your server does not support the connection encryption type specified. Try changing the encryption method. Contact the administrator of the mail server or Internet service provider for further assistance.

Can some guide what I am missing during the configuration.

Thanks

Hello

tip: set smtp port to 587 port with tls

Hello,

Can you please guide the process how to set smtp to port 587.

Thanks

Please follow the instruction given into below mentioned reference. It covers all the necessary parts and provides step-wise idea : https://kb.wisc.edu/helpdesk/page.php?id=2786

Moreover, for successful migration from Exchange 2010 to 2013, You may also consider on this automated solution (http://www.exchangemailboxmigration.com/) that could be a good alternative approach to get this job done in more secure way.

Hi,

I have tried the above solution but it didn't help. I didn't understand what happened as some days before it was working properly. Kindly guide

Hello

set smtp to tls.

http://goo.gl/zYwAuG

Hi,

According to your description, I understand that IMAP and POP account cannot send message with error Your server does not support the connection encryption type specified. Try changing the encryption method..
If I misunderstand your concern, please do not hesitate to let me know.

Firstly, we must to double confirm which cryptographic method are you used in your environment, please run Get-ImapSettings and Get-PopSettings to get more details about IMAP and POP3 configuration, especially TSL or SSL, ports.
More details about Configure IP addresses and ports for POP3 and IMAP4 access, for your reference:
https://technet.microsoft.com/en-us/library/bb123530(v=exchg.150).aspx

Hi Allen,

I tried and executed the Get-ImapSettings and Get-PopSettings CMDLet and got the following output

Please guide

Hello

wich version outlook client want to connect to exchange?

Hello

please add output: get-exchangecertificate |fl from cas server

Following is the   Get-ExchangeCertificate | fl
AccessRules        :
CertificateDomains : {mailboxserver, mailboxserver.domain.local}
HasPrivateKey      : True
IsSelfSigned       : True
Issuer             : CN=mailboxserver
NotAfter           : 1/22/2020 7:53:11 PM
NotBefore          : 1/22/2015 7:53:11 PM
PublicKeySize      : 2048
RootCAType         : Registry
SerialNumber       : 434974nb7347497449794732
Services           : IMAP, POP, IIS, SMTP
Status             : Valid
Subject            : CN=mailboxserver
Thumbprint         : 434974nb7347497449794732

AccessRules        : {System.Security.AccessControl.CryptoKeyAccessRule,
                     System.Security.AccessControl.CryptoKeyAccessRule,
                     System.Security.AccessControl.CryptoKeyAccessRule,
                     System.Security.AccessControl.CryptoKeyAccessRule}
CertificateDomains : {}
HasPrivateKey      : True
IsSelfSigned       : True
Issuer             : CN=Microsoft Exchange Server Auth Certificate
NotAfter           : 12/27/2019 6:52:43 PM
NotBefore          : 1/22/2015 6:52:43 PM
PublicKeySize      : 2048
RootCAType         : None
SerialNumber       : 434974nb7347497449794732
Services           : SMTP
Status             : Valid
Subject            : CN=Microsoft Exchange Server Auth Certificate
Thumbprint         : 434974nb7347497449794732

AccessRules        : {System.Security.AccessControl.CryptoKeyAccessRule,
                     System.Security.AccessControl.CryptoKeyAccessRule,
                     System.Security.AccessControl.CryptoKeyAccessRule}
CertificateDomains : {WMSvc-mailboxserver}
HasPrivateKey      : True
IsSelfSigned       : True
Issuer             : CN=WMSvc-mailboxserver
NotAfter           : 1/4/2025 4:48:16 PM
NotBefore          : 1/7/2015 4:48:16 PM
PublicKeySize      : 2048
RootCAType         : Registry
SerialNumber       : 434974nb7347497449794732
Services           : None
Status             : Valid

Thanks

Hello

check outlook settings:

Hello

the recive connector: Client Frontend EXCH enable verbose logging
and try from client again with outlook and try telnet cas 587
and check C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\Logs\FrontEnd\ProtocolLog\SmtpReceive  for log and share :)

Hi,

I changed the setting on receive connector to verbose but no success. Any other work around found for this issue

Hi,

Sorry for dely.

If we want to deploy IMAP and POP3 for internal and external access, we have to configure internal and external host name for IMAP, POP and SMTP, internal and external port number, internal and external encryption method.
Please run below command to double check those settings:

Get-ImapSettings | FL ExternalConnectionSettings,InternalConnectionSettings,ExtendedProtectionPolicy,Server, SSLBindings, UnencryptedOrTLSBindings

Get-PopSettings | FL ExternalConnectionSettings,InternalConnectionSettings,ExtendedProtectionPolicy,Server, SSLBindings, UnencryptedOrTLSBindings

Besides, we must registry relevant DNS record for POP and IMAP. However, if you are using the same name which is used for SMTP delivery then you dont have to worry about DNS record, only ports.
By the way, we can enable configuration so that user can use OWA to look up the setting of POP, IMAP, SMTP. Please refer to User settings to configure POP3 or IMAP4 access to their Exchange 2013 mailboxes section:
https://technet.microsoft.com/en-us/library/jj657728(v=exchg.150).aspx#settings

T

Hi,

I performed the above steps but couldn't get the solution. I did not understand how the POP/IMAP configuration is so complecated in Exchange 2013. Please suggest some other work around.

Thanks

Hi,

Found the solution after applying the permission on Default Send/Receive connector to resolve the issue. The commands are

Get-SendConnector | Add-ADPermission -user "NT AUTHORITY\ANONYMOUS LOGON" -ExtendedRights "MS-Exch-SMTP-Accept-Any-Sender"

Get-ReceiveConnector | Add-ADPermission -user "NT AUTHORITY\ANONYMOUS LOGON" -ExtendedRights "MS-Exch-SMTP-Accept-Any-Recipient"

Hope this will help some other.

• Marked as answer by Lucky-Hamu 18 hours 15 minutes ago

Hi,

Found the solution after applying the permission on Default Send/Receive connector to resolve the issue. The commands are

Get-SendConnector | Add-ADPermission -user "NT AUTHORITY\ANONYMOUS LOGON" -ExtendedRights "MS-Exch-SMTP-Accept-Any-Sender"

Get-ReceiveConnector | Add-ADPermission -user "NT AUTHORITY\ANONYMOUS LOGON" -ExtendedRights "MS-Exch-SMTP-Accept-Any-Recipient"

Hope this will help some other.

• Marked as answer by Lucky-Hamu Wednesday, March 18, 2015 1:07 PM

Hi,

Found the solution after applying the permission on Default Send/Receive connector to resolve the issue. The commands are

Get-SendConnector | Add-ADPermission -user "NT AUTHORITY\ANONYMOUS LOGON" -ExtendedRights "MS-Exch-SMTP-Accept-Any-Sender"

Get-ReceiveConnector | Add-ADPermission -user "NT AUTHORITY\ANONYMOUS LOGON" -ExtendedRights "MS-Exch-SMTP-Accept-Any-Recipient"

Hope this will help some other.

• Marked as answer by Lucky-Hamu Wednesday, March 18, 2015 1:07 PM

Hi,

Today uploaded new SSL UC Certificate. Everything was working fine after sudden users on POP/IMAP complained that they are not unable to receive emails but can send and having following error message in outlook.

Task 'username - Receiving' reported error (0x800CCC1A) : 'Your server does not support the connection encryption type you have specified. Try changing the encryption method. Contact your mail server administrator or Internet service provider (ISP) for additional assistance.'

The POP settings on Port 995 and SMTP 587 with None.

Can some one please guide what happened after installing the new Certificate. The certificate has already configured with IIS, SMTP, POP, IMAP services.

Please suggest solution.

Thanks

The issue has been resolved. Get the server component list and found that POPProxy and ImapProxy were Inactive. Executed the following PowerShell and activated the services.

Get-ServerComponentstate -Identity SERVERNAME

Fixed issues CMDLet

Set-ServerComponentState -Identity SERVERNAME -Component PopProxy -Requester HealthAPI -State Active

Thanks every one for their help.