MapiExceptionNetworkError: Unable to make connection to the server. (hr=0x80004005, ec=2423)

When performing a new-moverequest you receive the error MapiExceptionNetworkError: Unable to make connection to the server. (hr=0x80004005, ec=2423)

New-MoveRequest -Identity "CN=miguser7,OU=FromILM,OU=GALSync,DC=corp,DC=dom" -RemoteLegacy -TargetDatabase "mdb01 tier1" -RemoteGlobalCatalog "dcfcdc03.ipcfcdom.inphonic.com" -RemoteCredential $Remote -TargetDeliver
yDomain "company.com"

MapiExceptionNetworkError: Unable to make connection to the server. (hr=0x80004005, ec=2423)
Diagnostic context:
......
Lid: 15000 dwParam: 0x6BA Msg: EEInfo: prm[2]: Pointer val: 0x2910810A00000000
Lid: 16280 dwParam: 0x6BA Msg: EEInfo: ComputerName: n/a
Lid: 8600 dwParam: 0x6BA Msg: EEInfo: ProcessID: 3260
Lid: 12696 dwParam: 0x6BA Msg: EEInfo: Generation Time: 2010-11-16 19:40:52:880
Lid: 10648 dwParam: 0x6BA Msg: EEInfo: Generating component: 18
Lid: 14744 dwParam: 0x6BA Msg: EEInfo: Status: 10060
Lid: 9624 dwParam: 0x6BA Msg: EEInfo: Detection location: 318
Lid: 13720 dwParam: 0x6BA Msg: EEInfo: Flags: 0
Lid: 11672 dwParam: 0x6BA Msg: EEInfo: NumberOfParameters: 0
Lid: 45169 StoreEc: 0x977
Lid: 52465 StoreEc: 0x977
Lid: 60065
Lid: 33777 StoreEc: 0x977
Lid: 59805
Lid: 52209 StoreEc: 0x977
Lid: 19778
Lid: 27970 StoreEc: 0x977
Lid: 17730
Lid: 25922 StoreEc: 0x977
+ CategoryInfo : NotSpecified: (0:Int32) [New-MoveRequest], RemoteTransientException
+ FullyQualifiedErrorId : 9CEC0AD3,Microsoft.Exchange.Management.RecipientTasks.NewMoveRequest


In this instance, the issue was that their was a firewall prevening the target forest communicating to the source forest for the required ports for mailbox move.

In addition if you are getting error code:

(hr=0x80040115, ec=-2147221227)

This may be due to ISA installed on or between the servers.


Port Protocol
808 (TCP) Mailbox Replication Service uses to communicate
53 (TCP) DNS
135 (TCP) RPC End Point
389 (TCP) LDAP
3268 LDAP
1024 > (65535) if mailbox store is not statically configured then 1024 higher ports need to be open. We don’t have static ports configured for 2007 only 2010 currently so we need this big port range.
88 (TCP) Kerberos
445 (TCP) Microsoft-DS Service
443 (TCP) Mailbox Replication Proxy service uses port 443 to communicate with other Exchange 2010 client access server via HTTPS.


James Chong
MCITP | EA | EMA; MCSE | M+, S+
Security+, Project+, ITIL
msexchangetips.blogspot.com