On #Exchange2013 I am getting the error message as follows, 

generated the error '[{LRT=};{LED=450 4.7.25 Client host rejected: cannot find your hostname, [xxx.xxx.xxx.130]};{FQDN=};{IP=}]'.

I am getting this error message only when the user sends email to a particular domain.

I have recently configured SPF, DKIM, DMARC records on DNS Level by requesting the ISP.

FQDN which I am using for sending emails is mx1.xyz.com.ab which is associated with the public IP - xxx.xxx.xxx.131

I have checked the PTR records for the IP ending with.131 on mxtoolbox.com, they do exist.

I have also checked the PTR records for the IP which is mentioned in the error message, i.e. .130. Also for this IP the PTR records exist.

I have verified the PTR records throughnslookup also and the results are all same as shown in mxtoolbox.com.

Further information, I have configured the SPF Record as follows,

xyz.com.ab. IN TXT "v=spf1 mx a ptr ip4:xxx.xxx.xxx.131 ip4:xxx.xxx.xxx.130 ~all" 

The mails are getting delivered to Gmail, Hotmail, and other domains. Only to a particular domain, users are not able to send the emails.

Any help would be much appreciated because this issue is now eating up my brains.

Thanks.

Faraz.

Webmail is working fine in office 365 But facing issue in outlook configure. Show below error.

Error "we are having trouble connecting to your account. verify the settings below outlook 2013"

Regards,

Satish

Satish Chaturvedi Mob-9990806001

Hi TechNet Experts,

Out Mail Server is using Exchange Server 2013 and we currently have 2 of Exchange (somehow not setup as DAG, as it is configured by unprofessional vendor previously).

Recently we confront an issue that certain incoming mail from various customer & certain outgoing mail from our internal to external user, unable to receive or send.

Outbound email usually receive error message below after 2 days delay:

The server has tried to deliver this message, without success, and has stopped trying. Please try sending this message again. If the problem continues, contact your helpdesk. 

#550 4.4.7 QUEUE.Expired; message expired ## 

X-MS-Exchange-Transport-Rules-Defer-Count: 24

After investigation I realized that over 40+ emails stuck in Queue of old server's shadow redundancy with "Ready" status, and caused message expired after 2 days.

anyone here with Exchange Server knowledge could advice?

as we have no very professional knowledge on Exchange Server, bottleneck on technical part...

Attached below is Transcript for our Exchange Server properties (domain name replaced by "domain"), and queue information for better troubleshooting.

Appreciate.

**********************
Windows PowerShell transcript start
Start time: 20200708091115
Username: domain\administrator
RunAs User: domain\administrator
Machine: EXHG (Microsoft Windows NT 6.3.9600.0)
Host Application: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -noexit -command . 'C:\Program Files\Microsoft\Exchange Server\V15\bin\RemoteExchange.ps1'; Connect-ExchangeServer -auto -ClientApplication:ManagementShell 
Process ID: 26212
**********************
Transcript started, output file is log1.txt
 E:\Diagnosis>

PS>Get-OabVirtualDirectory | fl server, Name, *URL*, *auth*


Server                        : EXHG
Name                          : OAB (Default Web Site)
InternalUrl                   : https://exhg.domain.local/OAB
ExternalUrl                   :
BasicAuthentication           : False
WindowsAuthentication         : True
OAuthAuthentication           : False
InternalAuthenticationMethods : {WindowsIntegrated}
ExternalAuthenticationMethods : {WindowsIntegrated}

Server                        : PANDORA
Name                          : OAB (Default Web Site)
InternalUrl                   : https://pandora.domain.local/OAB
ExternalUrl                   :
BasicAuthentication           : False
WindowsAuthentication         : True
OAuthAuthentication           : True
InternalAuthenticationMethods : {OAuth, WindowsIntegrated}
ExternalAuthenticationMethods : {OAuth, WindowsIntegrated}



 E:\Diagnosis>

PS>Get-WebServicesVirtualDirectory | fl server, name, *URL*, *auth*, *mrs*


Server                        : EXHG
Name                          : EWS (Default Web Site)
InternalNLBBypassUrl          :
InternalUrl                   : https://exhg.domain.local/EWS/Exchange.asmx
ExternalUrl                   :
CertificateAuthentication     :
InternalAuthenticationMethods : {Ntlm, WindowsIntegrated, WSSecurity, OAuth}
ExternalAuthenticationMethods : {Ntlm, WindowsIntegrated, WSSecurity, OAuth}
LiveIdNegotiateAuthentication :
WSSecurityAuthentication      : True
LiveIdBasicAuthentication     : False
BasicAuthentication           : False
DigestAuthentication          : False
WindowsAuthentication         : True
OAuthAuthentication           : True
AdfsAuthentication            : False
MRSProxyEnabled               : False

Server                        : PANDORA
Name                          : EWS (Default Web Site)
InternalNLBBypassUrl          :
InternalUrl                   : https://pandora.domain.local/EWS/Exchange.asmx
ExternalUrl                   :
CertificateAuthentication     :
InternalAuthenticationMethods : {Ntlm, WindowsIntegrated, WSSecurity, OAuth}
ExternalAuthenticationMethods : {Ntlm, WindowsIntegrated, WSSecurity, OAuth}
LiveIdNegotiateAuthentication :
WSSecurityAuthentication      : True
LiveIdBasicAuthentication     : False
BasicAuthentication           : False
DigestAuthentication          : False
WindowsAuthentication         : True
OAuthAuthentication           : True
AdfsAuthentication            : False
MRSProxyEnabled               : False



 E:\Diagnosis>

PS>Get-EcpVirtualDirectory | fl server, Name, *URL*, *auth*


Server                        : EXHG
Name                          : ecp (Default Web Site)
InternalUrl                   : https://exhg.domain.local/ecp
ExternalUrl                   : https://mail.domain.com/ecp
InternalAuthenticationMethods : {Basic, Fba}
BasicAuthentication           : True
WindowsAuthentication         : False
DigestAuthentication          : False
FormsAuthentication           : True
LiveIdAuthentication          : False
AdfsAuthentication            : False
OAuthAuthentication           : False
ExternalAuthenticationMethods : {Fba}

Server                        : PANDORA
Name                          : ecp (Default Web Site)
InternalUrl                   : https://mail.domain.com/ecp
ExternalUrl                   : https://mail.domain.com/ecp
InternalAuthenticationMethods : {Basic, Fba}
BasicAuthentication           : True
WindowsAuthentication         : False
DigestAuthentication          : False
FormsAuthentication           : True
LiveIdAuthentication          : False
AdfsAuthentication            : False
OAuthAuthentication           : False
ExternalAuthenticationMethods : {Fba}



 E:\Diagnosis>

PS>Get-ActiveSyncVirtualDirectory | fl server, Name, *URL*, *auth*


Server                              : EXHG
Name                                : Microsoft-Server-ActiveSync (Default Web Site)
MobileClientCertificateAuthorityURL :
InternalUrl                         : https://exhg.domain.local/Microsoft-Server-ActiveSync
ExternalUrl                         :
MobileClientCertificateAuthorityURL :
BasicAuthEnabled                    : True
WindowsAuthEnabled                  : False
ClientCertAuth                      : Ignore
InternalAuthenticationMethods       : {}
ExternalAuthenticationMethods       : {}

Server                              : PANDORA
Name                                : Microsoft-Server-ActiveSync (Default Web Site)
MobileClientCertificateAuthorityURL :
InternalUrl                         : https://pandora.domain.local/Microsoft-Server-ActiveSync
ExternalUrl                         :
MobileClientCertificateAuthorityURL :
BasicAuthEnabled                    : True
WindowsAuthEnabled                  : False
ClientCertAuth                      : Ignore
InternalAuthenticationMethods       : {}
ExternalAuthenticationMethods       : {}



 E:\Diagnosis>

PS>Get-OutlookAnywhere | fl server, Name, *URL*, *hostname*, *auth*


Server                             : EXHG
Name                               : Rpc (Default Web Site)
XropUrl                            :
ExternalHostname                   : mail.domain.com
InternalHostname                   : mail.domain.com
ExternalClientAuthenticationMethod : Basic
InternalClientAuthenticationMethod : Basic
IISAuthenticationMethods           : {Basic}

Server                             : PANDORA
Name                               : Rpc (Default Web Site)
XropUrl                            :
ExternalHostname                   : mail.domain.com
InternalHostname                   : mail.domain.com
ExternalClientAuthenticationMethod : Basic
InternalClientAuthenticationMethod : Basic
IISAuthenticationMethods           : {Basic, Ntlm, Negotiate}



 E:\Diagnosis>

PS>Get-OwaVirtualDirectory | fl server, Name, *URL*, *auth*


Server                        : EXHG
Name                          : owa (Default Web Site)
Url                           : {}
SetPhotoURL                   :
Exchange2003Url               :
FailbackUrl                   :
InternalUrl                   : https://exhg.domain.local/owa
ExternalUrl                   : https://mail.domain.com/owa
ClientAuthCleanupLevel        : High
InternalAuthenticationMethods : {Basic, Fba}
BasicAuthentication           : True
WindowsAuthentication         : False
DigestAuthentication          : False
FormsAuthentication           : True
LiveIdAuthentication          : False
AdfsAuthentication            : False
OAuthAuthentication           : False
ExternalAuthenticationMethods : {Fba}

Server                        : PANDORA
Name                          : owa (Default Web Site)
Url                           : {}
SetPhotoURL                   :
Exchange2003Url               :
FailbackUrl                   :
InternalUrl                   : https://mail.domain.com/owa
ExternalUrl                   : https://mail.domain.com/owa
ClientAuthCleanupLevel        : High
InternalAuthenticationMethods : {Basic, Fba}
BasicAuthentication           : True
WindowsAuthentication         : False
DigestAuthentication          : False
FormsAuthentication           : True
LiveIdAuthentication          : False
AdfsAuthentication            : False
OAuthAuthentication           : False
ExternalAuthenticationMethods : {Fba}



PS>Get-ClientAccessServer | fl Name, OutlookAnywhereEnabled, AutodiscoverServiceInternalUri


Name                           : EXHG
OutlookAnywhereEnabled         : True
AutoDiscoverServiceInternalUri : https://exhg.domain.local/Autodiscover/Autodiscover.xml

Name                           : PANDORA
OutlookAnywhereEnabled         : True
AutoDiscoverServiceInternalUri : https://pandora.domain.local/Autodiscover/Autodiscover.xml





 E:\Diagnosis>

PS>Get-ExchangeCertificate | fl FriendlyName, Subject, CertificateDomains, Thumbprint, Services, Issuer, *not*


FriendlyName       : Veeam Agent Certificate
Subject            : CN=cc4ce6c1-f3f4-40b2-a6ad-xxx
CertificateDomains : {cc4ce6c1-f3f4-40b2-a6ad-xxx}
Thumbprint         : 20940DE7BF92BE06E4F0A1F8AAxxx
Services           : None
Issuer             : CN=Veeam Backup Server Certificate
NotAfter           : 6/7/2030 2:08:04 AM
NotBefore          : 6/6/2020 2:08:04 AM

FriendlyName       : *.domain.com
Subject            : CN=*.domain.com, OU=Domain Control Validated
CertificateDomains : {*.domain.com, domain.com}
Thumbprint         : 8E0E0E81765825B0182DBE64635xxx
Services           : IIS, SMTP
Issuer             : CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/,
                     O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US
NotAfter           : 3/30/2022 10:46:38 AM
NotBefore          : 3/17/2020 7:00:23 PM

FriendlyName       : Exchange Delegation Federation
Subject            : CN=Federation
CertificateDomains : {Federation}
Thumbprint         : 4C87B75C354C7601763E25EFD904E42xxxx
Services           : SMTP, Federation
Issuer             : CN=Federation
NotAfter           : 11/7/2024 12:13:11 PM
NotBefore          : 11/7/2019 12:13:11 PM

FriendlyName       : Microsoft Exchange Server Auth Certificate
Subject            : CN=Microsoft Exchange Server Auth Certificate
CertificateDomains : {}
Thumbprint         : E8ABF7AC6024FB5906F5D43A87E73D2Exxxx
Services           : SMTP
Issuer             : CN=Microsoft Exchange Server Auth Certificate
NotAfter           : 2/8/2024 10:55:49 AM
NotBefore          : 2/8/2019 10:55:49 AM

FriendlyName       : Microsoft Exchange
Subject            : CN=pandora
CertificateDomains : {pandora, pandora.domain.local}
Thumbprint         : E74BADCDD7C7E3FDDF03CCA77BB3AC9Fxxxx
Services           : IMAP, POP, IIS, SMTP
Issuer             : CN=pandora
NotAfter           : 7/31/2023 11:22:28 PM
NotBefore          : 7/31/2018 11:22:28 PM

FriendlyName       : WMSVC
Subject            : CN=WMSvc-PANDORA
CertificateDomains : {WMSvc-PANDORA}
Thumbprint         : CBA7A95F414420D91DD916AC69D4E0xxxx
Services           : None
Issuer             : CN=WMSvc-PANDORA
NotAfter           : 7/28/2028 9:18:47 PM
NotBefore          : 7/31/2018 9:18:47 PM



 E:\Diagnosis>

PS>Get-MapiVirtualDirectory | fl server, Name, *URL*, *auth*


Server                        : PANDORA
Name                          : mapi (Default Web Site)
InternalUrl                   : https://pandora.domain.local/mapi
ExternalUrl                   :
IISAuthenticationMethods      : {Ntlm, OAuth, Negotiate}
InternalAuthenticationMethods : {Ntlm, OAuth, Negotiate}
ExternalAuthenticationMethods : {Ntlm, OAuth, Negotiate}



 E:\Diagnosis>

PS>Get-ClientAccessArray | fl
 E:\Diagnosis>

PS>Get-OutlookProvider

Name                          Server                        CertPrincipalName             TTL
----                          ------                        -----------------             ---
EXCH                                                                                     1
EXPR                                                                                     1
WEB                                                                                      1


 E:\Diagnosis>

PS>Get-ExchangeServer | fl *version*

Name: EXHG
AdminDisplayVersion : Version 15.0 (Build 516.32)
ExchangeVersion     : 0.1 (8.0.535.0)

Name:: PANDORA
AdminDisplayVersion : Version 15.0 (Build 1367.3)
ExchangeVersion     : 0.1 (8.0.535.0)



 E:\Diagnosis>

PS>Get-OrganizationConfig | fl *mapi*


MapiHttpEnabled : False



 E:\Diagnosis>

PS>Stop-Transcript
**********************
Windows PowerShell transcript end
End time: 20200708091457
**********************

**********************
Windows PowerShell transcript start
Start time: 20200708230441
Username: domain\administrator
RunAs User: domain\administrator
Machine: PANDORA (Microsoft Windows NT 6.3.9600.0)
Host Application: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -noexit -command . 'C:\Program Files\Microsoft\Exchange Server\V15\bin\RemoteExchange.ps1'; Connect-ExchangeServer -auto -ClientApplication:ManagementShell 
Process ID: 11320
**********************
Transcript started, output file is queuePANDORA8July2020-11pm.txt
 C:\Windows\system32>

PS>get-queue

Identity                   DeliveryType Status MessageCount Velocity RiskLevel OutboundIPPool NextHopDomain
--------                   ------------ ------ ------------ -------- --------- -------------- -------------
pandora\Submission         Undefined    Ready  0            0        Normal    0              Submission
pandora\Shadow\163         ShadowRed... Ready  41           0        Normal    0              exhg.domain.local


 C:\Windows\system32>

PS>Get-Queue -Identity "pandora\shadow\163" | fl


RunspaceId                       : 1c303a68-6bbb-496a-a66a-4431e86662d5
DeliveryType                     : ShadowRedundancy
NextHopDomain                    : exhg.domain.local
TlsDomain                        :
NextHopConnector                 : 00000000-0000-0000-0000-000000000000
Status                           : Ready
MessageCount                     : 42
LastError                        :
RetryCount                       : 0
LastRetryTime                    :
NextRetryTime                    :
FirstRetryTime                   :
DeferredMessageCount             : 0
LockedMessageCount               : 0
MessageCountsPerPriority         :
DeferredMessageCountsPerPriority :
RiskLevel                        : Normal
OutboundIPPool                   : 0
NextHopCategory                  : Internal
IncomingRate                     : 0
OutgoingRate                     : 0
Velocity                         : 0
OverrideSource                   :
QueueIdentity                    : pandora\Shadow\163
PriorityDescriptions             : {High, Normal, Low, None}
Identity                         : pandora\Shadow\163
IsValid                          : True
ObjectState                      : New



 C:\Windows\system32>

PS>Get-ExchangeServer -Identity exhg.domain.local | Format-List


RunspaceId                      : 1c303a68-6bbb-496a-a66a-4431e86662d5
Name                            : EXHG
DataPath                        : C:\Program Files\Microsoft\Exchange Server\V15\Mailbox
Domain                          : domain.local
Edition                         : Standard
ExchangeLegacyDN                : /o=domain/ou=Exchange Administrative Group
                                  (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=EXHG
ExchangeLegacyServerRole        : 0
Fqdn                            : exhg.domain.local
CustomerFeedbackEnabled         : True
InternetWebProxy                :
IsHubTransportServer            : True
IsClientAccessServer            : True
IsExchange2007OrLater           : True
IsEdgeServer                    : False
IsMailboxServer                 : True
IsE14OrLater                    : True
IsE15OrLater                    : True
IsProvisionedServer             : False
IsUnifiedMessagingServer        : True
IsFrontendTransportServer       : True
NetworkAddress                  : {ncacn_vns_spp:EXHG, netbios:EXHG, ncacn_np:EXHG, ncacn_spx:EXHG,
                                  ncacn_ip_tcp:exhg.domain.local, ncalrpc:EXHG}
OrganizationalUnit              : domain.local/EXHG
AdminDisplayVersion             : Version 15.0 (Build 516.32)
Site                            : domain.local/Configuration/Sites/Default-First-Site-Name
ServerRole                      : Mailbox, ClientAccess
ErrorReportingEnabled           :
StaticDomainControllers         : {}
StaticGlobalCatalogs            : {}
StaticConfigDomainController    :
StaticExcludedDomainControllers : {}
MonitoringGroup                 :
CurrentDomainControllers        : {}
CurrentGlobalCatalogs           : {}
CurrentConfigDomainController   :
ProductID                       : 02064-004-0074037-02498
IsExchangeTrialEdition          : False
IsExpiredExchangeTrialEdition   : False
MailboxProvisioningAttributes   :
RemainingTrialPeriod            : 00:00:00
Identity                        : EXHG
IsValid                         : True
ExchangeVersion                 : 0.1 (8.0.535.0)
DistinguishedName               : CN=EXHG,CN=Servers,CN=Exchange Administrative Group
                                  (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=domain,CN=Microsoft
                                  Exchange,CN=Services,CN=Configuration,DC=domain,DC=local
Guid                            : b4997e56-2290-4904-8247-7f6f31f339d3
ObjectCategory                  : domain.local/Configuration/Schema/ms-Exch-Exchange-Server
ObjectClass                     : {top, server, msExchExchangeServer}
WhenChanged                     : 11/4/2019 10:37:21 AM
WhenCreated                     : 3/25/2014 2:42:55 PM
WhenChangedUTC                  : 11/4/2019 2:37:21 AM
WhenCreatedUTC                  : 3/25/2014 6:42:55 AM
OrganizationId                  :
Id                              : EXHG
OriginatingServer               : pandora.domain.local
ObjectState                     : Unchanged



 C:\Windows\system32>

PS>Stop-transcript
**********************
Windows PowerShell transcript end
End time: 20200708230611
**********************

I have a single multi-role Exchange 2013 server and it would appear that it's not properly maintaining the temp files for the transport service.  I still have all those folder locations at their default and the problem folder is c:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\data\Temp

I never had a problem with this in Exchange 2007 but I am used to running a PowerShell script nightly to clean up the IIS log files.  Do I need to do something similar for this temp folder?  Is there a setting I can adjust so that Exchange will limit the size of this folder itself?  If I stop the transport service and delete the files here will I lose anything?

Any suggestions or insight would be greatly appreciated.

HI Team,

Unable to select smtp optin in certificate.Please help.

A special Rpc error occurs on server GURHYBRID01: Could not grant Network Service access to the certificate with thumbprint EDB8557C3F525C8F5D4E67433D82089930D676BD because a cryptographic exception was thrown.

Satish Chaturvedi Mob-9990806001

Hi,

Can you help Me?

I would like insert Image(Logo) into Signature?  Can you share the code for me?

Brgds

Liu Wei

can someone explain to me why this is being dropped?

Hi Team,

When open  OWA and ECP its showing error Please help me 

Secure Connection Failed

An error occurred during a connection to inowa.aricent.com. Peer’s Certificate has been revoked.

Error code: SEC_ERROR_REVOKED_CERTIFICATE

Satish Chaturvedi Mob-9990806001

Hi Team,

Need help below cmd only fetech  single user region detail i need cmd for all user.

Satish Chaturvedi Mob-9990806001

Hi everyone,

a basic question about Hybrid mail flow setting:

- I have an SMTP Gateway (Antispam), incoming and outgoing emails should be pass through it;

In this scenario, I must create a Incoming Connector in EXO to receive emails from my SMTP Gateway, right?

And, I must create a Receive Connector in my E2K13 server, is that right?

Thank you.

Best Regards.

Hi Team,

How to Enable TLS 1.2 from Exchange 2010 to O365 .

Please prepare a plan to enable TLS 1.2 from Exchange 2010 to O365.

Regards,

Satish

Satish Chaturvedi Mob-9990806001

Hi Team,

i need mail flow diagram exchange 2010 and o365

Satish Chaturvedi Mob-9990806001

Hi

How to find out in o365 who has admin roles.

Please provide the Powershell CMD and GUI option

Satish Chaturvedi Mob-9990806001

Hey

We have an external system sending mail invites to our users (as them self)

When the users recieve the invites - it goes directly into the deleted items folder. (because Outlook "thinks" the user is the meeting planner)

Is it possible to change this behavior? (so the invite goes to the inbox) - (not a rule on every mailbox)

Mike

Satish Chaturvedi Mob-9990806001

Hi

All access has been provide but still issue is same

Satish Chaturvedi Mob-9990806001

Hi, 

I am setting up an Edge Synchronisation for mail flow to Exchange Online (Hybrid). I would like the email destined for Office 365 to route via my new Exchange 2016 Mailbox servers  and then to the Edge Transport servers, and not use the old 2010 Hub Transport servers, however there doesn't seem to be a way to achieve this from what I can tell? How can I force the Edge to Internet send connector to route email via my new 2016 Transport servers before sending to the edge? 

Thanks.

Mike. 

dears , 

currently we have migrated our exchange server from 2013 (two node ) to 2016 (two node ), before demoting the old exchange we have shutdown old exchange 2013 to make sure all are ok , and we are facing issue that specific domain is not receiving emails from outside when power-on the exchange start receiving .

any idea how to fix this issue  before remove the old exchange totally .

appreciate your help team .

thanks 

Today, we had an individual reply to an email that wasn't sent to them.  The sender checked and said he didn't send that user the email message.  When searching the message tracking logs, I can find where the individual replied to the unexpected email but I cannot find where the sender sent the message to that particular recipient.  I can find where he sent it to his intended recipients with no problem.  I have used get-messagetrackinglogs quite frequently and have pretty much always been able to find what I'm looking for but this one has me baffled.

I've narrowed the search to just the hours around when the email was sent accounting for UTC.  I've narrowed by subject, recipient, and various eventID's.  Nothing turns up the original email and when and who sent it to them.  I've also checked for every email message sent by the original sender and every email message received by the individual from before the original email was sent to the present time.  Nothing but the response to the original message is found.  Nothing shows up indicating the email was ever sent to the unexpected recipient by the sender or received from the sender by the unexpected recipient.  I'm at a loss here.

Has anyone ever experienced exchange "accidentally" dropping an email in a mailbox that wasn't a recipient of that particular email?  I think Microsoft would make absolutely sure that could never happen because lawsuits would be bad if people received information in an email that they weren't supposed have access to.

HALP!!

Hi,

E2K13CU1 with default settings added to working existing E2K10SP3 organization.

Mail doesn't leave Drafts folder (sent form OWA).

Telnet to server at port 25 responds after MAIL FROM: with:

421 4.3.2 Service not active (exactly - didn't found anything like this anywhere)

I checked DNS (also set custom DNS config in E2K13 ecp, all services are running, no custom AV, no low disk space, no events.

Thank you

Richard