370 likes | 602 Views
Exchange 2007 的 Management Shell 、 Scripting 與原則使用. 謝合宜 微軟特約技術顧問 MCSE : Security/Messaging MVP/MCT BS7799/ISO27001 Lead Auditor. Exchange 2007 WebCast 系列課程. 預備知識. 熟悉 Exchange 2000/2003 或 5.5 的系統管理與使用. Level 200. Agenda. Exchange 2007 系統管理架構 What’s PowerShell ?
E N D
Exchange 2007的Management Shell、Scripting與原則使用 謝合宜 微軟特約技術顧問 MCSE : Security/Messaging MVP/MCT BS7799/ISO27001 Lead Auditor
預備知識 • 熟悉Exchange 2000/2003或 5.5的系統管理與使用 Level 200
Agenda Exchange 2007 系統管理架構 What’s PowerShell ? GUI and using PowerShell 訊息原則的使用 各種原則的用途與設定
Exchange Management Console Result pane Console tree Work pane Actions pane
EMCConsole Tree 管理整個組織組態 管理特定角色伺服器設定 管理收件者物件設定 問題診斷與分析工具
What is PowerShell? • 延伸的”scripting”技術,提供互動、可程式撰寫以及安全與個別產品導向的環境 • Improves the developer experience by making it easier to add command-line management capabilities using Microsoft .NET • Improves the administrative experience by enabling IT Pros to write secure automation scripts that can run locally or remotely • Components • A scripting language • An interactive shell • A way to produce task-oriented commands • A set of domain-independent utility commands
Exchange Management Shell Exchange Management Shell commands use thesame syntax (verb-noun)
Exchange Server 2007管理架構 GUI CLI Setup WinForms WinForms ADO.Net Early-bound objs Monad Data Provider Monad Engine Exchange cmdlets Configuration Data Access Process boundary AD MAPI Store Meta base Registry
Exchange 2007的“管理命令介面” • Goal is to simplify an administrator’s viewof Exchange Server 2007 • A “task” is defined as an administrative operation (for example, move a mailbox) • Tasks are grouped in 4 areas: (約350個cmdlets) • Recipient management tasks • Organization management tasks • Server management tasks • Diagnostic Tasks • Tasks are further broken into categories based on server role and features • Roles: Edge/Hub Transport, CAS, Mailbox, UM • Features: AntiSpam, Managed E-mail, Transport, Rules, etc. http://www.microsoft.com/technet/prodtechnol/exchange/E2k7/ZH-TW/Help/ExchHelp/c05a8c55-fbb3-4eb6-ad02-ea5430f03132.mspx
Help! Navigating the Shell • Use help to find cmdlets and categories Get-help *User* Get-help -role *UM*Get-help –component *recipient* • Use help pages to drill into more detail Get-mailbox -? | more Help remove-storagegroup • Explore the properties of output objects using format-list Get-Mailbox TestUser | format-list Get-Mailbox TestUser | fl *quota* • Explore the property types of output objects using get-member Get-storagegroupTestUser | get-member
Searching (Finding Things) • Use client side filtering to narrow results: Get-TransportServer | where { $_.MessageTrackingEnabled –eq $false } • Wildcards are supported as well Get-Mailbox *joe*Get-ExchangeServer *North* Get-SendConnector *.ms.com • Also provide server-side filtering for tasks that return large number of objects Get-Mailbox -filter { DisplayName -like ‘*Test*’ }
Pipelining • Bulk management is possible using piping get-StorageGroup | set-StorageGroup -param1 arg1 -param2 arg2 • Piping (cmd1 | cmd2) works 100% within same noun Get-Mailbox redmond\mihaijal | remove-mailbox • And certain different nouns Get-Mailbox redmond\viveksha | Test-MapiConnectivity • Even when you can’t pipe, you can use foreachto do what you want Get-ExchangeServer | foreach { get-Storagegroup –server $_.Name }
Agenda Exchange 2007 系統管理架構 What’s PowerShell ? GUI and using PowerShell 訊息原則的使用 各種原則的用途與設定
Mailbox Role CapabilitiesPolicies for Messaging Records Management
What Are Messaging Policies? 訊息原則是規則與設定的集合,用來管理訊息的傳輸(Message Flow)與儲存 • Transport policies(傳輸原則) can restrict message flow or modify message contents as messages pass through transport components • Journaling policies(日誌原則) enable you to save a copy of all messages that meet specified criteria • Messaging Records Management policies(郵件記錄管理原則) automate and simplify message retention for mailbox contents
Agenda Exchange 2007 系統管理架構 What’s PowerShell ? GUI and using PowerShell 訊息原則的使用 各種原則的用途與設定
What Are Transport Rules? Transport rules can restrict message flow or modify message contents for messages in transit Transport rules on a Hub Transport server are: • Stored in Active Directory • Applied by all Hub Transport servers Transport rules on an Edge Transport server are: • Stored in ADAM • Unique to each Edge Transport server
Transport RulesConditions, actions, exceptions • Similar to Outlook rules, but run in transport and managed by the IT Pro • Use familiar Exchange Management Console Rules Wizard, or powerful powershell tasks • Wide array of conditions/exceptions • All e-mail, internal-only, external-only • Sender / recipient • Subject and body content • Header values
Transport RulesConditions, actions, exceptions • 可以進行的動作 • 加上免責聲明 • 加上主旨資訊 • 進行訊息分類 • 加上標頭資訊 • 捨棄訊息 • 導向其他位置 • 新增 To/Cc/Bcc 收件者
日誌(Journaling)Say goodbye to per-MDB configuration!(還是有哦) • Journaling runs on the Hub Transport role • Organization-wide configuration in AD • Reduced duplication of journal reports • Journaling conditions: • All e-mail, internal-only, external-only • Specific individuals • DL membership • Deliver journal reports to any SMTP address
詳細的日誌內容 詳細的收件者資訊 Bcc DL-expansion Forwarded mailboxes 原來信件
What’s Messaging Records Management(郵件記錄管理)? 郵件記錄管理是用來協助企業組織管理儲存在使用者信箱中的訊息的管理設定 透過郵件記錄管理: • 設定信箱的特定資料夾的內容訊息的保留天數 • 定義過期訊息的處理方式
End-User WorkflowWith selective journaling + server retention policy Receive Decide Act Retain Retain in user’s mailbox / Expire automatically later File in Managed Email Folder Business Need to Keep? Retain in user’s mailbox / Expire automatically later New Email File in a Managed Email Folder Legal/ Regulatory Need to Keep? Journal to external archive File in a user folder or leave in Inbox Short-term Need to Keep? Expire automatically after short time No Need to Keep? Delete immediately Place in Dumpster
佈署郵件記錄管理Five planning points #記得要啟用伺服器的郵件記錄管理代理器運作排程
計畫提升使用者的信箱配額大小 • 提升信箱配額 • 可降低風險 • Access Anywhere • 增加生產力 • 考量不再使用PSTs • PSTs有潛藏風險與負擔 • 依時間而不再重要 • Disabling PSTs in Outlook:(KB 896515) • HKLM\Software\Microsoft\Office\12.0\Outlook\PST\PstDisableGrow • HKLM\Software\Microsoft\Office\12.0\Outlook\DisablePST
講題總結 Exchange管理命令介面提供更方便的管理方式 請計畫有關Scripting的學習 原則的使用讓 IT Pros 能對訊息郵件的使用進行更彈性的管理措施 請平衡 ITPros, IW Users以及企業管理與法律上的需求 郵件記錄管理可以方便控管郵件伺服器的資料庫使用情形與信息保留時限 No one size fits all 使用者的教育訓練是重要關鍵!!
For More Information… • TechNet • www.microsoft.com/taiwan/technet • Exchange Server 2007 • www.microsoft.com/exchange • TechNet 技術論壇 • www.microsoft.com/taiwan/technet/forum • MVP Community社群網站 • www.microsoft.com/taiwan/community • MS Exchange Team Blog • http://msexchangeteam.com/ • Exchange 2007 online Help • http://www.microsoft.com/technet/prodtechnol/exchange/E2k7/ZH-TW/Help/ExchHelp/cb24ddb7-0659-4d9d-9057-52843f861ba8.mspx?mfr=true