From: H. Hudson on
Hi,

We have a customer with a Windows 2003 Small Business Server with SP2, and
SP2 for Exchange 2003 is also installed. They have one remote user on a
laptop that is setup as a POP3 account; he is able to receive email but is
unable to send. It will repeatedly prompts for password. We have double
checked the username/passwords and tried other accounts, getting the same
results with each. Although sometimes it will give the following error
message:

“Your server has unexpectedly terminated the connection. Possible causes for
this include server problems, network problems, or a long period of
inactivity. Account: 'Email', Server: 'mail.OurEmailServer.com', Protocol:
SMTP, Port: 25, Secure(SSL): No, Error Number: 0x800CCC0F”

I've enabled logging for the default SMTP virtual server. The following are
in the logs when trying to send email:

2010-03-01 23:59:26 96.225.244.50 illidan SMTPSVC1 CWSSBS 192.168.16.2 0
EHLO - +illidan 250 0 318 12 0 SMTP - - - -
2010-03-01 23:59:26 96.225.244.50 illidan SMTPSVC1 CWSSBS 192.168.16.2 0
MAIL - +FROM:+<test> 550 0 45 17 78 SMTP - - - -
2010-03-01 23:59:26 96.225.244.50 illidan SMTPSVC1 CWSSBS 192.168.16.2 0
QUIT - illidan 240 265 45 17 78 SMTP - - - -
2010-03-01 23:59:46 96.225.244.50 illidan SMTPSVC1 CWSSBS 192.168.16.2 0
EHLO - +illidan 250 0 318 12 0 SMTP - - - -
2010-03-01 23:59:46 96.225.244.50 illidan SMTPSVC1 CWSSBS 192.168.16.2 0
MAIL - +FROM:+<test> 550 0 45 17 0 SMTP - - - -
2010-03-01 23:59:46 96.225.244.50 illidan SMTPSVC1 CWSSBS 192.168.16.2 0
QUIT - illidan 240 156 45 17 0 SMTP - - - -

I've enabled logging for MSExchangeTransport, SMTP Protocol. We have a few
entries after that in the application log:

Event Type: Warning
Event Source: MSExchangeTransport
Event Category: Authentication
Event ID: 1706
Date: 3/1/2010
Time: 3:47:13 PM
User: N/A
Computer: CWSSBS
Description:
EXPS is temporarily unable to provide protocol security with "illidan".
"CSessionContext::OnEXPSInNegotiate" called "HrServerNegotiateAuth" which
failed with error code 0x8009030c (
f:\tisp2\transmt\src\smtpsink\exps\expslib\context.cpp(a)1799 ).

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 0c 03 09 80 ...€

Event Type: Error
Event Source: MSExchangeTransport
Event Category: Authentication
Event ID: 1705
Date: 3/1/2010
Time: 3:47:18 PM
User: N/A
Computer: CWSSBS
Description:
An unexpected error is forcing EXPS to close the SMTP connection to
"illidan". "CSessionContext::OnEXPSInNegotiate" called
"HrCheckClientPermissions" which failed with error code 0x8009030c (
f:\tisp2\transmt\src\smtpsink\exps\expslib\context.cpp(a)1819 ).

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 0c 03 09 80 ...€

Event Type: Error
Event Source: MSExchangeTransport
Event Category: Authentication
Event ID: 1705
Date: 3/1/2010
Time: 5:00:11 PM
User: N/A
Computer: CWSSBS
Description:
An unexpected error is forcing EXPS to close the SMTP connection to
"cwssbs". "CSessionContext::OnEXPSInNegotiate" called
"HrCheckClientPermissions" which failed with error code 0x8009030c (
f:\tisp2\transmt\src\smtpsink\exps\expslib\context.cpp(a)1819 ).

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 0c 03 09 80 ...€

I setup the email account in Outlook Express on the server, “cwsbs” using
the server's IP address (192.168.16.2) for incoming & outgoing servers and we
get the same behavior as we do on the remote system “Illidan”. We can
receive email, but not send.

POP3, IMAP are both working, most of the users are setup on the domain and
use Exchange/Outlook 2003 together which works correctly. Webmail also is
working correctly. The remote user's POP3 account was working to send email
up until about 2 weeks ago. Nothing has been changed or installed (That we
know about).

Thank you for your time.
From: Rich Matheisen [MVP] on
On Mon, 1 Mar 2010 17:26:04 -0800, H. Hudson
<HHudson(a)discussions.microsoft.com> wrote:

>Hi,
>
>We have a customer with a Windows 2003 Small Business Server with SP2, and
>SP2 for Exchange 2003 is also installed. They have one remote user on a
>laptop that is setup as a POP3 account; he is able to receive email but is
>unable to send. It will repeatedly prompts for password. We have double
>checked the username/passwords and tried other accounts, getting the same
>results with each. Although sometimes it will give the following error
>message:
>
>�Your server has unexpectedly terminated the connection. Possible causes for
>this include server problems, network problems, or a long period of
>inactivity. Account: 'Email', Server: 'mail.OurEmailServer.com', Protocol:
>SMTP, Port: 25, Secure(SSL): No, Error Number: 0x800CCC0F�
>
>I�ve enabled logging for the default SMTP virtual server. The following are
>in the logs when trying to send email:
>
>2010-03-01 23:59:26 96.225.244.50 illidan SMTPSVC1 CWSSBS 192.168.16.2 0
>EHLO - +illidan 250 0 318 12 0 SMTP - - - -
>2010-03-01 23:59:26 96.225.244.50 illidan SMTPSVC1 CWSSBS 192.168.16.2 0
>MAIL - +FROM:+<test> 550 0 45 17 78 SMTP - - - -
>2010-03-01 23:59:26 96.225.244.50 illidan SMTPSVC1 CWSSBS 192.168.16.2 0
>QUIT - illidan 240 265 45 17 78 SMTP - - - -
>2010-03-01 23:59:46 96.225.244.50 illidan SMTPSVC1 CWSSBS 192.168.16.2 0
>EHLO - +illidan 250 0 318 12 0 SMTP - - - -
>2010-03-01 23:59:46 96.225.244.50 illidan SMTPSVC1 CWSSBS 192.168.16.2 0
>MAIL - +FROM:+<test> 550 0 45 17 0 SMTP - - - -
>2010-03-01 23:59:46 96.225.244.50 illidan SMTPSVC1 CWSSBS 192.168.16.2 0
>QUIT - illidan 240 156 45 17 0 SMTP - - - -

I don't see the response from the EHLO command in that trace, and I
don't see any AUTH commands from the client, either.

[ snip ]

>I setup the email account in Outlook Express on the server, �cwsbs� using
>the server's IP address (192.168.16.2) for incoming & outgoing servers and we
>get the same behavior as we do on the remote system �Illidan�. We can
>receive email, but not send.

Do you see any attempt at authentication in the SMTP protocol log on
the server?


>POP3, IMAP are both working, most of the users are setup on the domain and
>use Exchange/Outlook 2003 together which works correctly. Webmail also is
>working correctly. The remote user�s POP3 account was working to send email
>up until about 2 weeks ago. Nothing has been changed or installed (That we
>know about).
>
>Thank you for your time.
---
Rich Matheisen
MCSE+I, Exchange MVP
From: H. Hudson on
Hi,

I'm not seeing AUTH commands for either. Just the following for the remote
computer & right off the server:

2010-03-03 00:05:47 96.225.244.50 illidan SMTPSVC1 CWSSBS 192.168.16.2 0
EHLO - +illidan 250 0 318 12 0 SMTP - - - -
2010-03-03 00:06:31 96.225.244.50 illidan SMTPSVC1 CWSSBS 192.168.16.2 0
QUIT - illidan 240 44203 298 9 9093 SMTP - - - -
2010-03-03 00:06:50 192.168.16.2 cwssbs SMTPSVC1 CWSSBS 192.168.16.2 0 EHLO
- +cwssbs 250 0 317 11 0 SMTP - - - -
2010-03-03 00:07:00 192.168.16.2 cwssbs SMTPSVC1 CWSSBS 192.168.16.2 0 QUIT
- cwssbs 240 10016 310 9 5000 SMTP - - - -
2010-03-03 00:08:08 192.168.16.2 cwssbs SMTPSVC1 CWSSBS 192.168.16.2 0 EHLO
- +cwssbs 250 0 317 11 0 SMTP - - - -
2010-03-03 00:08:13 192.168.16.2 cwssbs SMTPSVC1 CWSSBS 192.168.16.2 0 QUIT
- cwssbs 240 5000 76 10 5000 SMTP - - - -
2010-03-03 00:08:15 192.168.16.2 cwssbs SMTPSVC1 CWSSBS 192.168.16.2 0 EHLO
- +cwssbs 250 0 317 11 0 SMTP - - - -
2010-03-03 00:08:20 192.168.16.2 cwssbs SMTPSVC1 CWSSBS 192.168.16.2 0 QUIT
- cwssbs 240 5000 76 10 5000 SMTP - - - -
2010-03-03 00:08:22 192.168.16.2 cwssbs SMTPSVC1 CWSSBS 192.168.16.2 0 EHLO
- +cwssbs 250 0 317 11 0 SMTP - - - -
2010-03-03 00:08:27 192.168.16.2 cwssbs SMTPSVC1 CWSSBS 192.168.16.2 0 QUIT
- cwssbs 240 5016 76 10 5000 SMTP - - - -
2010-03-03 00:08:28 192.168.16.2 cwssbs SMTPSVC1 CWSSBS 192.168.16.2 0 EHLO
- +cwssbs 250 0 317 11 0 SMTP - - - -
2010-03-03 00:08:33 192.168.16.2 cwssbs SMTPSVC1 CWSSBS 192.168.16.2 0 QUIT
- cwssbs 240 5016 76 10 5016 SMTP - - - -

I'm trying to send email to an outside domain using an account on their
server, setup as a POP3 account in Outlook Express. “My server requires
authentication” is checked within Outlook Express. Outlook Express just
repeatedly prompts for username & password when trying to send the email.

These appear in the Application log when trying to send email:

Event Type: Error
Event Source: MSExchangeTransport
Event Category: Authentication
Event ID: 1705
Date: 3/2/2010
Time: 2:37:41 PM
User: N/A
Computer: CWSSBS
Description:
An unexpected error is forcing EXPS to close the SMTP connection to
"illidan". "CSessionContext::OnEXPSInNegotiate" called
"HrCheckClientPermissions" which failed with error code 0x8009030c (
f:\tisp2\transmt\src\smtpsink\exps\expslib\context.cpp(a)1819 ).

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 0c 03 09 80 ...€

Webmail and Outlook setup with Exchange Server all works correctly.

Thank you for your time.



"Rich Matheisen [MVP]" wrote:

> On Mon, 1 Mar 2010 17:26:04 -0800, H. Hudson
> <HHudson(a)discussions.microsoft.com> wrote:
>
> >Hi,
> >
> >We have a customer with a Windows 2003 Small Business Server with SP2, and
> >SP2 for Exchange 2003 is also installed. They have one remote user on a
> >laptop that is setup as a POP3 account; he is able to receive email but is
> >unable to send. It will repeatedly prompts for password. We have double
> >checked the username/passwords and tried other accounts, getting the same
> >results with each. Although sometimes it will give the following error
> >message:
> >
> >“Your server has unexpectedly terminated the connection. Possible causes for
> >this include server problems, network problems, or a long period of
> >inactivity. Account: 'Email', Server: 'mail.OurEmailServer.com', Protocol:
> >SMTP, Port: 25, Secure(SSL): No, Error Number: 0x800CCC0F”
> >
> >I've enabled logging for the default SMTP virtual server. The following are
> >in the logs when trying to send email:
> >
> >2010-03-01 23:59:26 96.225.244.50 illidan SMTPSVC1 CWSSBS 192.168.16.2 0
> >EHLO - +illidan 250 0 318 12 0 SMTP - - - -
> >2010-03-01 23:59:26 96.225.244.50 illidan SMTPSVC1 CWSSBS 192.168.16.2 0
> >MAIL - +FROM:+<test> 550 0 45 17 78 SMTP - - - -
> >2010-03-01 23:59:26 96.225.244.50 illidan SMTPSVC1 CWSSBS 192.168.16.2 0
> >QUIT - illidan 240 265 45 17 78 SMTP - - - -
> >2010-03-01 23:59:46 96.225.244.50 illidan SMTPSVC1 CWSSBS 192.168.16.2 0
> >EHLO - +illidan 250 0 318 12 0 SMTP - - - -
> >2010-03-01 23:59:46 96.225.244.50 illidan SMTPSVC1 CWSSBS 192.168.16.2 0
> >MAIL - +FROM:+<test> 550 0 45 17 0 SMTP - - - -
> >2010-03-01 23:59:46 96.225.244.50 illidan SMTPSVC1 CWSSBS 192.168.16.2 0
> >QUIT - illidan 240 156 45 17 0 SMTP - - - -
>
> I don't see the response from the EHLO command in that trace, and I
> don't see any AUTH commands from the client, either.
>
> [ snip ]
>
> >I setup the email account in Outlook Express on the server, “cwsbs” using
> >the server's IP address (192.168.16.2) for incoming & outgoing servers and we
> >get the same behavior as we do on the remote system “Illidan”. We can
> >receive email, but not send.
>
> Do you see any attempt at authentication in the SMTP protocol log on
> the server?
>
>
> >POP3, IMAP are both working, most of the users are setup on the domain and
> >use Exchange/Outlook 2003 together which works correctly. Webmail also is
> >working correctly. The remote user's POP3 account was working to send email
> >up until about 2 weeks ago. Nothing has been changed or installed (That we
> >know about).
> >
> >Thank you for your time.
> ---
> Rich Matheisen
> MCSE+I, Exchange MVP
> .
>
From: Rich Matheisen [MVP] on
On Tue, 2 Mar 2010 16:36:01 -0800, H. Hudson
<HHudson(a)discussions.microsoft.com> wrote:

>Hi,
>
>I�m not seeing AUTH commands for either. Just the following for the remote
>computer & right off the server:

Probably the quickest wayt to see what's going on would be to put
Wireshark on the client machine and get a network trace. E2K3's SMTP
protocol log won't show you the EHLO response so you'll need to get it
some place else. You'll then be able to see the stuff the client sends
and what the server sends back. From the log file it doesn't look like
the client's doing very much.

[ snip ]

>I�m trying to send email to an outside domain using an account on their
>server,

What does that mean? Are you using YOUR SMTP server as a relay and
trying to AUTH with an account in some other AD forest?

>setup as a POP3 account in Outlook Express. �My server requires
>authentication� is checked within Outlook Express.

And that's all? You haven't provided an alternative user name and
password? Are you using SPA?
---
Rich Matheisen
MCSE+I, Exchange MVP