UNC203: What's New in Microsoft Exchange Server 2010 SP1?

2. UNC203: What's New in Microsoft Exchange Server 2010 SP1? Scott Schnoll scott.schnoll@microsoft.com Principal Technical Writer Microsoft Corporation

3. Agenda • Setup and Deployment Improvements • Client Access Server Improvements • Unified Messaging Improvements • Transport Server Improvements • Mailbox Server Improvements • Policy and Compliance Improvements • Mailbox and Recipient Improvements High Availability Improvements Covered in UNC401 Thursday, November 11 | 10:30 AM - 11:30 AM | Hall 7.2a Helsinki

4. Setup and Deployment Improvements Install required Windows Roles and Features Apply Split Permissions Model to New Org

5. Install Required Roles and Features • Exchange Setup can now install required Windows roles and features • RTM -> SP1 Upgrade • Setup.com /m:upgrade /installwindowscomponents

6. Apply strict split permissions security model • Typically used by large orgs that completely separate responsibility for management of Exchange and Active Directory between different groups of people • Removes ability for Exchange servers and admins to create Active Directory objects, such as users, groups and contacts, as well as the ability to manage non-Exchange attributes on those objects

7. Client Access Server Improvements Federation Certificates Exchange Control Panel Information Rights Management Improvements Outlook Web App Improvements Reset virtual directories wizard

8. Federation Certificates • Previously a certificate from a public CA was required to establish a federation trust with the Microsoft Federation Gateway (MFG) • SP1 enables support for using a self-signed certificate to establish the trust with MFG • A self-signed certificate is automatically created and installed on Exchange servers in your organization when you use the New Federation Trust wizard • Using a self-signed certificate is now the recommended best practice

9. Exchange Control Panel (ECP) • UI enhancements • Create and configure transport rules • Create and configure journaling rules • Manage Exchange ActiveSync policies • Manage RBAC Roles Groups and User Roles • Create and manage resource mailboxes • Create and manage security groups • Create and manage Allow/Block/Quarantine policies • Admins no longer need to have a mailbox to be able to access ECP

10. Exchange Control Panel (ECP)

11. Information Rights Management • Exchange ActiveSync mailbox policies support IRM • IRM is enabled when creating a new ActiveSync policy • Allows non-Windows Mobile devices to receive and view IRM-protected messages • When enabled, IRM-protected messages will be decrypted by the Client Access Server (CAS) before they are downloaded to mobile device • Mobile device must use SSL to connect to CAS • Message includes additional properties that indicate the restrictions sent with original message

12. Outlook Web App (OWA) Improvements • Improved management of relationship between OWA and Office Communications Server (OCS)/Lync Server • Now managed using cmdlets • Configuration information now stored in Active Directory instead of web.config file • 27 new themes available! • Set a default theme for all users • Create custom themes by modifying existing themes • Control the order of themes listed in OWA UNC212-LNCLearn How to Customize OWA with Microsoft Exchange Server 2010 SP1 Thursday, November 11 | 1:20 PM - 2:05 PM | Hall 7.2a Helsinki

13. Outlook Web App (OWA) Improvements • Users can change expired passwords! • Can be enabled on per-user basis • Registry entry must be configured on each CAS server used for OWA access • REG_DWORD: ChangeExpiredPasswordEnabled • Value: 1 • HKLM\System\CCS\Services\MSExchange OWA\

14. Reset Client Access Virtual Directory Wizard • New Reset Client Access Virtual Directory wizard makes it easy to reset one or more Client Access server virtual directories • Wizard also creates a log file that includes the settings for each virtual directory that you reset

15. Unified Messaging Improvements UM Reporting UM Management Outlook Voice Access Dial-plan improvements Call answering rules

16. Unified Messaging Improvements • UM reporting • The reports for Call Statistics and User Call Logs found in the Exchange Management Console are displayed in the Exchange Control Panel • UM management in the Exchange Control Panel • Use ECP to manage UM components in a cross-premises environment • Cross-Forest UM-enabled mailbox migration • Use New-MoveRequest to move a UM-enabled mailbox within a local forest and multiple forests in an enterprise

17. Unified Messaging Improvements • Outlook Voice Access sorting • Outlook Voice Access users can log on to their Exchange 2010 mailbox and choose the order to listen to unread voice mail messages, from the oldest message first or the newest message first • Caller Name Display support • Support for enhanced caller ID resolution for displaying names for voice mails from unresolved numbers using Caller Name Display (CND) • Test-ExchangeUMCallFlowcmdlet • Use to test UM connectivity and call flow

18. Unified Messaging Improvements • New UM Dial Plan wizard • An additional page has been added to the New UM Dial Plan wizard that allows you to add a UM server to the dial plan • Secondary UM dial plan support • You can add a secondary UM dial plan for a UM-enabled user • Lync Server 2010 Support • Migrating SIP URI dial plans and Message Waiting Indicator (MWI) notifications in a cross-premises environment has been added

19. Unified Messaging Improvements • UM language packs added • Spanish (Spain) (es-ES) UM language pack for SP1 includes Voice Mail Preview • New Unified Communications Managed API/speech platform • UM server relies on UCMA 2.0 for its underlying SIP signaling and speech processing • UM auto attendant update • UM auto attendant will play only the holiday greeting on a holiday

20. Unified Messaging Improvements • Call answering rules behavior • In RTM, Call Answering Rules required a caller to explicitly select an option. If they don’t, UM times out after 10 seconds, and then prompts again for input. • In SP1, the timeout value is now 5 seconds, and the caller is prompted with "To leave a voice message, press the pound key or wait for the tone.“ • If the caller doesn't press a key, UM prompts the caller to record a voice mail message instead of waiting for them to press a key

21. Unified Messaging Improvements • Call answering rules behavior • In RTM, when a caller greeted by a call answering rule selects the voice mail option, a UM server first plays the called party's voice mail greeting before prompting the caller with the instruction to leave a voice message • This can be confusing if the user has created custom greetings • In SP1, the voice mail greeting is skipped if the caller has chosen to leave a voice message via a call answering rule

22. Unified Messaging Improvements • Call answering rules behavior • In SP1, a missed call notification won't be left for a user if the inbound call reaches the called party using the Find Me feature, if a call transfer succeeds, or if a voice message is successfully left for the user

23. Transport Server Improvements Message tracking improvements Message throttling improvements Shadow redundancy promotion SMTP failover and load balancing improvements Send connector changes to reduce NDRs over well-defined connections

24. Message Tracking Improvements • Improved error messages for delivery reports for situations where a user attempts to access delivery reports for a specific message but is unable to view the report • Message tracking monitoring and troubleshooting • New KHI, including event log entries, alerts, and performance monitor counters • Message tracking trace levels • When you're troubleshooting message tracking, you can now request complete logs of every operation that was executed bya server processing a delivery report request

25. Message Throttling Improvements • If a user keeps sending costly messages, such as those addressed to large audiences or with large attachments, Transport servers start to give priority to other messages with lower cost before processing messages from that sender • If a Hub Transport server detects that a Mailbox server is under RPC resource pressure, it'll scale back the RPC sessions it opens to that server. Interactive client connections to the Mailbox server take precedence over message delivery

26. Shadow Redundancy Promotion • New SP1 feature that addresses timeout scenario when transport is receiving messages from non-shadow redundancy aware host • When faced with a scenario where Transport issued acknowledgement without delivery confirmation, instead of issuing an acknowledgment without delivery confirmation, a Transport server now routes the message to any other Transport server within the site so that the message is protected by shadow redundancy

27. SMTP Failover / Load Balancing Improvements • RTM uses DNS to evenly load balance when all servers are healthy • Things become unevenly balanced when a server is unhealthy • SP1 introduces new behavior that detects and tracks unhealthy servers • For example, Hub1 needs to route several messages to another site which contains Hub2, Hub3, and Hub4. If Hub1 knows that Hub3 is unavailable, it'll remove that server from the list of possible targets and only route to Hub2 and Hub4, evenly load balancing across them

28. Send Connectors over Reliable Connections • Create dedicated Send connectors for sending messages over well-defined communication channels that are expected to be always available (e.g., Exchange Online) • On such connections, many of the typical errors that are possible on ordinary destinations on the Internet aren't expected. In this scenario, you may want to treat any communication errors as transient as opposed to issuing NDRs • You can configure a Send connector to downgrade authentication and name resolution errors to transient errors • In these cases, Exchange will try to deliver again instead of issuing an NDR

29. Mailbox Server Improvements ISINTEG Replacement Functionality Database Log Growth Troubleshooter Database Latency Troubleshooter Purge Soft-Deleted/Disconnected Mailboxes Public Folder Client Permissions

30. ISINTEG Replacement Functionality • ISINTEG was not shipped in Exchange 2010 RTM, and Exchange 2007 or earlier version cannot work with Exchange 2010 databases • SP1 rolls ISINTEG functionality into two new cmdlets that can be used to repair databases while they are still online • New-MailboxRepairRequest • Search folder corruptions (SearchFolder) • Aggregate counts on folders that aren't reflecting correct values (AggregateCounts) • Views on folders that aren't returning correct contents (FolderView) • Provisioned folders that are incorrectly pointing into parent folders that aren't provisioned (ProvisionedFolder) • New-PublicFolderDatabaseRepairRequest • Replication state corruption (ReplState)

31. Database Log Growth Troubleshooter • Troubleshoot-DatabaseSpace.ps1 detects excessive log growth issues and takes action • By default • Runs every 15 minutes to determine available free space • If free space < 25%, tools runs an algorithm to determine if excessive log growth is cause • If it is cause, the tool quarantines or throttles mailboxes causing excessive growth, as appropriate • Defaults defined in StoreTSConstants.ps1

32. Database Latency Troubleshooter • Troubleshoot-DatabaseLatency.ps1 used by System Center Operations Manager, but can be used as a scheduled task • Checks for database latencies above value of LatencyThreshold (default is 70 ms) • Checks disk’s transfer rate against read rate and read latency performance counters • Checks to see if any user is using more than one thread for duration of TimeInServerThreshold (default is 10 min)

33. Purge Soft-Deleted/Disconnected Mailboxes • New Remove-StoreMailboxcmdlet can be used to purge the mailbox and all of its message content from the mailbox database • Be aware: This results in permanent data loss for the mailbox being purged!

34. Public Folder Client Permissions • Public folder management console allows you to view and modify client permissions

35. Policy and Compliance Improvements Archive Mailbox improvements Messaging Records Management improvements Multi-Mailbox Search improvements Information Rights Management improvements Mailbox Audit Logging

36. Archive Mailbox Improvements • Import historical mailbox data to archive • Import PST file directly to the user's personal archive using the New-MailboxImportRequestcmdlet • Both the personal archive and the primary mailbox can be exported to PST files using the New-MailboxExportRequestcmdlet • Delegate access to archive • Delegates can access the delegating user's archive mailbox using Outlook 2010

37. Archive Mailbox Improvements • Provision personal archive on a different mailbox database • You can provision a user's personal archive on a different mailbox database than the one where the user's primary mailbox resides

38. Messaging Records Management Improvements • New retention policy management features in EMC • You can use the New Retention Policy Tag and New Retention Policy wizards to manage retention tags and retention policies • Support for Calendar and Tasks default folders • You can also create retention policy tags for the Calendar and Tasks default folders • Default retention and archive policy • The default archive policy and retention policy contains retention tags that move messages to the archive and remove messages from the mailbox after a certain period. The policy is automatically applied to a mailbox user when you provision a personal archive for the user • Opt-in personal tags • Users with a retention policy assigned can use the Exchange Control Panel (ECP) to select personal tags not included in their retention policy. Users can then apply these personal tags to mailbox items and custom folders

39. Multi-Mailbox Search Improvements • Multi-Mailbox Search preview • Members of the Discovery Management role group can get an estimate of the number of items returned by a discovery search before the items are copied to the selected discovery mailbox • View the number of hits the specified keywords return, and then modify the search query before messages are copied to the discovery mailbox • Annotations • Discovery managers can also add annotations to messages returned by the discovery search • Optional Data De-duplication • When selected, Multi-Mailbox Search copies only a single instance of a message returned across multiple folders within the same mailbox, or across different mailboxes

40. Information Rights Management Improvements • WebReady Document Viewing of IRM-protected attachments • IRM in OWA supports WebReady Document Viewing of supported IRM-protected attachments, allowing users to view IRM-protected attachments without having to download them • Users can preview IRM-protected documents on computers that don't have Microsoft Office installed • IRM in Exchange ActiveSync • IRM in Exchange ActiveSync allows users with supported devices to access IRM-protected messages without first having to activate the device for IRM by tethering the device

41. Mailbox Audit Logging • Mailbox audit logging enables you to log access to a mailbox by administrators, delegates, and mailbox owners • Actions taken on mailbox items such as access to a message or a folder, copying, and deletion of a message can be logged • You can search mailbox audit logs for a mailbox, and also generate reports of non-owner access to a mailbox from the Exchange Control Panel

42. Mailbox and Recipient Improvements Calendar Repair Assistant improvements Internet Calendar Publishing Import/Export PST files Distribution group naming policies Soft-delete of mailboxes after move completion

43. Calendar Repair Assistant Improvements • Calendar Repair Assistant now checks for and detects the following new scenarios: • The attendee's calendar is missing an occurrence or an exception of a meeting • The attendee's start or end time doesn't match the organizer's start or end time, including time zone inconsistencies • The attendee's meeting location is different from the organizer's meeting location • The meeting organizer's calendar is missing an item • The attendee's recurrence pattern of a meeting series is different from the organizer's recurrence pattern

44. Internet Calendar Publishing • SP1 supports Internet Calendar Publishing, which lets users in your Exchange organization share their calendars with anyone that has accessto the Internet - No Federation necessary! • No authentication credentials to access user calendars! • Users can invite their friends, family members, or business partners to view their calendar information by providing a link to their published calendar • Exchange administrators can control which users can publish their calendars and what can be shared, both organization-wide and on a per-user basis • Internet users can access calendar information without having to use a specific mail client; only an Internet browser is necessary

45. PST File Import and Export • New MailboxImportRequestand MailboxExportRequestcmdlet sets to import or export data to or from PST files • When a mailbox import or export request is initiated, the process is completed asynchronously by the by the Mailbox Replication Service (MRS) • No need to install Outlook for import/export process

46. Distribution Group Naming Policies • A group naming policy is a template that you can apply to the name of distribution groups created in the organization. You can enforce the application of a prefix, a suffix, or both to distribution groups • You can also block specific words from being used in distribution group names

47. Soft-delete of mailboxes after move completion • In RTM, when a mailbox move completed, the mailbox on the source database was deleted and wasn't recoverable. If there was a Mailbox server failover on the target database, the mailbox move was interrupted, and data loss for the in-transit mailbox could occur • SP1 soft-deletes the mailbox on the source database, so you can recover the mailbox in the event of a Mailbox server failover or data loss • You can restore a soft-deleted mailbox by using the MailboxRestoreRequestcmdlets

48. Questions? Please remember to complete your evaluations! Thank you!

49. Session Evaluations Tell us what you think, and you could win! All evaluations submitted are automatically entered into a daily prize draw*  Sign-in to the Schedule Builder at http://europe.msteched.com/topic/list/ * Details of prize draw rules can be obtained from the Information Desk.

50. © 2010 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.