Deleting SCP on Exchange servers...Need Help Please

Namless Shelter 216

Hi There,

We have been running Ex2010, Ex2016 & Office 365 Hybrid Environment for two year... Now I am trying to remove ex2010 server. So I will start with deleting the old SCP points.

Now I can see on SCP on two servers:

On Exchange 2016 server:

It has two SCP connectors: ex2010 and ex2016.

On Exchange 2010 server:

It has only one SCP connectors ex2010 .

If I want to decommission Exchange 2010 server and delete SCP for Ex2010 only for now .

Should I run this command only on Exchange server 2010:

set-ClientAccessServer -identity EX2010 -AutoDiscoverServiceInternalUri $null

Or I have to run:

set-ClientAccessService -identity EX01 -AutoDiscoverServiceInternalUri $null

on Exchange 2016 server?

Thanks a lot,
ML

Namless Shelter 216 Reputation points

2021-06-11T01:36:33.413+00:00

ANy helps please?

2 answers

Xzsssss 8,861 Reputation points Microsoft Vendor

2021-06-11T01:57:20.833+00:00

Hi @Namless Shelter ,

Good day!

Based on my knowledge, the SCP is used to locate the Autodiscover service, and it stays in AD which means you could run it on both servers that have joined the domain.
May I suppose the identity, EX2010 and EX01 are the same server? If so you could run either or them.

And you can delete the SCP with ADSI EDIT:

Best regards,
Lou

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Please sign in to rate this answer.
Namless Shelter 216 Reputation points

2021-06-11T02:00:48.083+00:00

hi Mate,

Thanks for the reply.

The thing is that I want to power off EX01 for 1 week to see any services are still pointing at the old server. So I woud like to delete SCP first.

Should I delete SCP on both Ex2016 and Ex2010 servers?

Thanks
ML

Xzsssss 8,861 Reputation points Microsoft Vendor

2021-06-11T02:14:55.813+00:00

Hi @Namless Shelter ,

No you don't have to do that, I believe that both of the commends would do the same thing. You could check it after run on EX2010.

And you could also set the AutodiscoverURL of EX2010 pointing to EX2016 to test.

Best regards,
Lou

Namless Shelter 216 Reputation points

2021-06-11T04:36:29.533+00:00

Hi Lou,

If I run

"set-ClientAccessServer -identity EX01 -AutoDiscoverServiceInternalUri $null" the old Exchange 2010 Ex01 will not have SCP. So it will update and Ex2016 server and ADSI attribute as well. Then, the new exchange 2016 server will have only SCP. Am I correct?

Thanks
Mang

Xzsssss 8,861 Reputation points Microsoft Vendor

2021-06-11T05:21:51.24+00:00

Hi @Namless Shelter ,

Yeah that's it.

But note that run the command will not delete the SCP object in ADSI EDIT, it's to remove the value of ServiceBindingInformation. Then the SCP of EX2010 was banned because it's not recording the AutodiscoverURL now.

Best regards,
Lou

Namless Shelter 216 Reputation points

2021-06-11T05:33:52.567+00:00

So after I deleted this SCP on ex2010, if I set up a new Outlook, it will still check ex2010 and get stuck for 2 minutes?

Thanks
ML

Xzsssss 8,861 Reputation points Microsoft Vendor

2021-06-11T05:58:52.237+00:00

Hi @Namless Shelter ,

Do you mean you add a EX2010 mailbox to your Outlook client?

I don't think this is gonna stuck for serval minutes, actually I think it won't affect the speed of the first time for Autodiscover to sync much. It's more based on the network environment and the hardware.

It may take a little longer time to add the account, but won't be a obstacle for daily using.

Best regards,
Lou

Namless Shelter 216 Reputation points

2021-06-11T06:03:59.82+00:00

after I run it on ex2010

The whole Email service stopped:

I received error message from Office 365:

Generating server: xxxxx.AUSP282.PROD.OUTLOOK.COM

ml@domainame.local
esa1.hc99-8.ap.iphmx.com
Remote Server returned '550 5.0.350 Remote server returned an error -> 550 #5.7.1 Your access to submit messages to this e-mail system has been rejected.'

I had to manually add SCP ex2010 back and waited for sometimes, it started working again...

Do you know where else we might have issues with? I thought SCP only does AutoDiscovery for clients to find Outlook settings for the first time?

Also, Email was still working while the server was turned off. How Deleting SCP affect Email services?

Thanks
ML

Xzsssss 8,861 Reputation points Microsoft Vendor

2021-06-11T06:42:15.66+00:00

Hi @Namless Shelter ,

Oh sorry, I should first ask the details about your environment and then decide what to do next.

Have you changed the DNS records to point to Ex2016?
And you could try change the SCP ServiceBindingInformation to Ex2016 to test.

Which means you should make sure all connections and services are now using Exchange 2016 to do their job before removing Exchange 2010.
I find these articles that may be helpful:
To keep AD FS and directory synchronization and decommission most of the Exchange servers

Best regards,
Lou

Namless Shelter 216 Reputation points

2021-06-11T06:49:24.8+00:00

That is all good.

I manually added SCP back on ex2010:

Set-ClientAccessServer -Identity EX01 -AutodiscoverServiceInternalUri https://ex2010.domainame/Autodiscover/Autodiscover.xml

It shouldn't affect anything like service order etc?

yes, we are running hybrid ex2010, ex2016 and office365.

DNS and public DNS should be all point to server2016. I actually tried powered off ex2010 server for a week, everything seemed working still.

AD FS and directory synchrozation, how does these relate to SCP?

Thanks

Xzsssss 8,861 Reputation points Microsoft Vendor

2021-06-11T07:13:28.617+00:00

Hi @Namless Shelter ,

The SCP shouldn't affect the email transporting and other services, because it's for the domain clients to find the Autodiscover URL.

But I'm still confused about the error message you received, was it send to a local Exchange 2010 mailbox? Only this user received the error?

As for the ADFS and directory synchronization, I think they are also not related to SCP.

You could change the URL to Ex2016 to let the Ex2010 users use Ex2016 AutodiscoverURL.
Set-ClientAccessServer -Identity EX01 -AutodiscoverServiceInternalUri https://ex2016.domainame/Autodiscover/Autodiscover.xml
It's same with changing ServiceBindingInformation to Ex2016.

About SCP:
https://www.blogabout.cloud/2020/11/1942/
Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.

Best regards,
Lou

Namless Shelter 216 Reputation points

2021-06-11T08:27:47.043+00:00

I am confused as well......

I actually tried sending Emails from External to two internal Office 365 users after deleted SCP ex2010. Same Errors....All users have been moved to Office 365....

I could not figure out why deleting SCP will affect Email Flow...Weirer thing now is that sometimes it get rejected, sometimes it does not...Could old Ex2010 server is working to hard and service frozen? Or ADSI Edit somehow get affected?

Can you think of any possible cause???

Thanks
ML

Namless Shelter 216 Reputation points

2021-06-12T04:47:22.677+00:00

Do you have an Email? I can send the original message to you.

Seems it works with other external Emails except my personal hotmail. I have not heard any end users complaining yet. It actually sounds like blocked by SPAM. But I cannot even see the message reached Email Security Appliance or Office 365...

Thanks a lot,
ML

Xzsssss 8,861 Reputation points Microsoft Vendor

2021-06-15T06:52:53.917+00:00

Hi @Namless Shelter ,

Good day ML, I was on a vacation the last three days.

Sorry we couldn't provide any contact details here, and kindly suggest if you wanna post any information in a open forum, please remember to cover your personal information.

I don't really understand your situation...
Do you mean you use your Hotmail account to send messages to internal O365 users and got the error messages after disabling SCP? And other external accounts could send mails right?

if so, could the Hotmail send correctly before disabling SCP?

Please check if you've deployed any transport rules to block emails from Hotmail and could you send a message to this Hotmail account?
And if the NDR refers to any credible reasons?

Best regards,
Lou

Namless Shelter 216 Reputation points

2021-06-16T04:00:47.727+00:00

Hi Lou,

Turns out it is our Cloud Email Appliance somehow blocking it due to recognised some Hotmail hosts as Blacklist...Which I am not sure why...I will removing SCP and make more tests soon.

thanks
ML

Xzsssss 8,861 Reputation points Microsoft Vendor

2021-06-16T05:25:56.523+00:00

Hi ML,

Waiting for your good news:)

Cheers,
Lou

Namless Shelter 216 Reputation points

2021-06-21T05:17:17.957+00:00

Hi Lou,

I think we are all good now. Turns out CISCO cloud security appliance is blocking some Microsoft Hotmail Servers based on Reputation. My Email went through successfully. THis whole time is just False Alarm. My apology.

So back to where we were. I just want to decommission old Exchange server 2010 from our Hybrid Environment (Ex2010, Ex2016 and Office 365).

I will remove SCP, should I remove it from ADSI Edit? Also, I do not need to touch "Hybrid Configuration Wizard" on Ex2016? The old server will automatically go away after uninstall?

Also, and then I guess we have to delete any connectors on Ex2010. And go Uninstall the program since all legacy Mailboxes have been moved to Ex2016..Sounds about right?

Thanks
ML

Xzsssss 8,861 Reputation points Microsoft Vendor

2021-06-21T05:51:13.467+00:00

Hi @Namless Shelter ,

That's OK, knowing what confused you has gone is everything for me:)

You could remove SCP, but as you have set the URL to Exchange 2016, it doesn't matter if you remove it or not.
Yes you should first remove the legacy Exchange server and re-run HCW on Exchange 2016 to deploy the hybrid/

You could follow this article: Best practices when decommissioning Exchange 2010
And this guide may help: Step-by-Step: How to upgrade a Legacy Hybrid Exchange Server to 2016

Enjoy your trip!

Cheers,
Lou

Namless Shelter 216 Reputation points

2021-06-21T06:25:50.317+00:00

HI Lou,

Thanks for the info. All DNSs are pointing to the server 2016 already.

Please be aware, I wont not remove Hybrid yet, I only want to remove Ex2010 server from the hybrid environment (Ex2010, Ex2016 and Office 365). Do I need to delete the entry of Ex2010 on ADSI Edit? Also, do I must run Mail Server Hybrid configuration wizard to delete 2010 server? Or will it should automatically after I uninstalled the Exchange software on Ex2010?

Thanks a lot,
ML

Xzsssss 8,861 Reputation points Microsoft Vendor

2021-06-21T06:41:18.773+00:00

Hi ML，

Do I need to delete the entry of Ex2010 on ADSI Edit?

No need but yes you could delete it.

Also, do I must run Mail Server Hybrid configuration wizard to delete 2010 server? Or will it should automatically after I uninstalled the Exchange software on Ex2010?

No, you should remove the Exchange 2010 server and then configure hybrid on Exchange 2016.

The steps you may take:

Follow the guide and uninstall Exchange 2010 CAS, Hub, UM, Mailbox server.

Run HCW on Exchange 2016.

Best regards,
Lou

Xzsssss 8,861 Reputation points Microsoft Vendor

2021-06-24T05:20:34.217+00:00

Hi @Namless Shelter ,

Is everything ok? If this issue has been resolved, you could choose a answer that best helped you out as Accepted, so we could close this thread.
Also please feel free to ask if you've got anything terrible or the issue still exists.

Have a good day!

Cheers,
Lou

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Namless Shelter 216 Reputation points

2021-07-01T05:56:48.557+00:00

Hi Lou,

I am not sure about this:

CAS
Remove CAS Arrays
Remove Any Exchange 2010 Client Access Arrays from Active Directory and DNS.

Do I need to run this separately on AD server automatically? or it will be deleted as I run Control Panel?

Thanks
ML

Xzsssss 8,861 Reputation points Microsoft Vendor

2021-07-01T07:18:03.43+00:00

Hi @Namless Shelter ,

I think you should run this on your Exchange 2010 server:

Remove-ClientAccessArray -Identity casarray01.contoso.com

And after that you could use ADSI EDIT to see if the arrays were deleted in AD:
Configuration > Domain Name > Microsoft Exchange > Organization Name> Administrative Group >Exchange Administrative Group > Arrays

If there are still some arrays, you could simply delete them.

Best regards,
Lou

Namless Shelter 216 Reputation points

2021-07-04T23:35:53.777+00:00

Hi Lou,

I have successfully removed ex2010 SCP. However, on ex2016 server, when I checked SCP:

[PS] C:\Windows\system32>Get-ClientAccessServer | fl AutoDiscoverServiceInternalUri

AutoDiscoverServiceInternalUri :

AutoDiscoverServiceInternalUri : https://ex2016.domain.local/Autodiscover/Autodiscover.xml

There is a gap on top as you can see, does it matter? Can I delete it?

Thanks
Mang

Xzsssss 8,861 Reputation points Microsoft Vendor

2021-07-05T03:54:02.227+00:00

Hi @Namless Shelter ,

Yes, it should be the legacy Ex2010 server
Check it using:
Get-ClientAccessService | FL Name,AutodiscoverServiceInternalUri

Best regards,
Lou

Namless Shelter 216 Reputation points

2021-07-05T04:47:56.567+00:00

yes, I checked with this command. the top one "AutoDiscoverServiceInternalUri :" is blank.

yes, I powered off ex2010 server, give a week to see if anything is sending staff to this old Exchange server 2010.

I guess next step will be:

deleting all Receive Connectors for ex2010 server

unmounted databases on ex2010 server

Uninstall the Exchange 2010 Program.

am I correct?

Thanks
ML

Xzsssss 8,861 Reputation points Microsoft Vendor

2021-07-05T08:38:58.227+00:00

Hi @Namless Shelter ,

Yes you could follow these steps, also if the mailboxes are all migrated to the Ex2016 server and all connections are now handled by Ex2016, you could directly uninstall the Ex2010.

You could use Exchange Deployment Assistant to check the steps.

For a detailed steps: Uninstall Exchange Server 2010 step by step.
Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.

Best regards,
Lou
Sign in to comment
Namless Shelter 216 Reputation points

2021-07-01T23:01:48.583+00:00

So how do I find out if we have CAS Array? We only have one Ex2010 server.

Thanks
ML
Please sign in to rate this answer.
Xzsssss 8,861 Reputation points Microsoft Vendor

2021-07-02T07:35:41.173+00:00

Hi @Namless Shelter ,

You could use Get-ClientAccessArray or use the ADSI EDIT, same path.
If there is no values in the Arrays folder, then there is no CAS Array.

Best regards,
Lou

Namless Shelter 216 Reputation points

2021-08-13T06:28:44.693+00:00

Hi Lou,

I have deleted the old SCP for exchange 2010 successfully without any problems now. I have powered it off the ex 2010 server for now to see if anything still sending to the old Ex2010 server. Ex2016 server is still running hybrid with Offic365 Mails.

My question now is can I power off the old ex 2010 server as long as I can? Or I better decommission it say end of this year?

thanks a lot
ML

Xzsssss 8,861 Reputation points Microsoft Vendor

2021-08-13T06:58:00.147+00:00

Hi @Namless Shelter ,

My suggestion is to run this for a time like one or two weeks to check if it's totally hybrided without mistakes.

And after that you can simplely decommission Exchange 2010 at any time you want, make sure the data has been migrated to the new server.

Cheers,
Lou

Namless Shelter 216 Reputation points

2021-08-13T07:01:44.867+00:00

What do you mean by "My suggestion is to run this for a time like one or two weeks to check if it's totally hybrided without mistakes."

Check if any Outlook clients onsite can pick the right setting? Or check Exchange Hybrid error?

How can I check please?

Thanks
ML

Xzsssss 8,861 Reputation points Microsoft Vendor

2021-08-13T07:15:52.877+00:00

Yes, for Outlook clients, pressing CTRL and right cliick the icon. See if the connections are come from your 2016 server.

Check the message header for the mails came from your organization(internal mails).

Generally speaking, it's OK to do it rightnow, but I think it could be better to keep the legacy server for a few days for security concerns.

Best regards,
Lou

Namless Shelter 216 Reputation points

2021-09-20T02:00:28.947+00:00

Hi Lou,

It has been a few weeks. Now when I was trying to migrate a old mailbox to office 365.

I got this error: The connection to the server 'bbe60a17-fd95-4940-990e-33ce6a6fc897.resource.mailboxmigration.his.msappproxy.net' could not be completed.

Would you think it is related to the old exchange server got powered off?

Thanks
ML
Sign in to comment