Exchange Server 2010 Tips and Tricks EXL313

1. Exchange Server 2010 Tips and TricksEXL313 Scott Schnoll scott.schnoll@microsoft.com Principal Technical Writer Microsoft Corporation

2. Agenda • Announcements • The Basics • Planning and Deployment Tools • Scripts and Troubleshooters • The Power of PowerShell • What’s News?

3. announcements

4. Exchange Virtualization Guidance Changes • Now Supported with Exchange 2010 SP1 • Combining DAGs with hypervisor-based clustering or migration • Virtualizing Unified Messaging Role • Requires minimum of 4 virtual processors and 16 GB memory • Can handle 40 concurrent calls with VP preview and 65 concurrent calls without • UM must be only Exchange guest VM on physical host (may change by TechEd) • Consider network requirements (low latency, high bandwidth) • Role is susceptible to poor voice quality if undersized

5. Exchange Virtualization Guidance Changes • See http://bit.ly/ke0lbwfor more info • Attend these sessions for more details and Q&A: • EXL306- Best Practices for Virtualization of Microsoft Exchange 2010 (May 17 @ 10:15am in B206) • EXL376-INT- Hewlett-Packard & Microsoft Q&A on Exchange Virtualization (May 17 @ 1:30pm in B303)

6. The Basics

7. Exchange Server 2010 Is… • RTM’d October 8, 2009 • GA since November 9, 2009 • Downloadable from Microsoft Download Centerhttp://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=05741f65-2a7b-4070-879f-d74208d6171d • Hosting ~ 70 million mailboxes in the cloud!

8. Exchange Server 2010 SP1 Is… • Signed off for RTM at 11:08 AM PST on August 23, 2010 • RTW at 9:00 AM PST on August 25, 2010 • Available for download athttp://go.microsoft.com/fwlink/?LinkID=199950 • Build no. 14.01.0218.015 • Supporting more languages than ever before • Unified Messaging languages: 25 • Client languages: 55 • Server languages: 15

9. Exchange Server 2010 SP1 Is… • Available in three Server Editions • Standard Edition (retail and volume) • MPC: 0264-385 • Enterprise Edition (volume only) • Includes all Exchange 2010 Standard features, plus support for up to 100 databases per server • MPC: 0264-2871 • Hybrid Edition • This is a Standard Edition SKU designed to be a “gateway” for upgrading from previous versions of Exchange to Exchange Online • MPC: 0264-2942 (offered for free)

10. Exchange 2010 Hybrid Edition • Can be used only for connecting on-premises environment with Office 365 • If you move a mailbox to it, or leverage any features outside the scope of a hybrid deployment, you must purchase regular license and CALs • Multiple Hybrid Edition servers can be deployed, if needed • Cannot be licensed during Office 365 Beta • Customers should use Exchange 2010 SP1 trial bits during Beta • At commercial release of Office 365, request a key from Office 365 support • Not available for trial customers

11. Exchange Server 2010 SP1 Hosting Mode • For licensed hosters only! • Installed using Setup.com /hosting switch • No GUI Setup for Hosting Mode • Requires new forest in Windows 2008 FFL • Supported in a virtualized environment • Includes cmdlets for creating and configuring Tenant Organization • Uses Service Plans to enable/disable specific features for Tenant Organizations • Uses Mailbox Plans during user provisioning to automatically populate user properties and assign default permissions

12. Exchange Server 2010 SP1 Hosting Mode • Features not available in Hosting Mode • Co-existence with Exchange 2003 or Exchange 2007 • Exchange Management Console • Public Folders • Unified Messaging or Edge Transport roles • Federation • Cross-premise message tracking or calendar sharing • IRM • Support for Outlook 2003 • Active Directory: Split Permissions; Multi-domain forests • Setup switches related to above features • See http://social.technet.microsoft.com/wiki/contents/articles/exchange-2010-sp1-information-for-hosted-service-providers.aspx

13. Exchange Server 2010 Updates • Latest SP1 update • Update Rollup 3 for Exchange Server 2010 SP1 (14.1.289.7) • Released April 6, 2011 (MSKB 2529939) • Latest RTM update • Update Rollup 5 for Exchange Server 2010 (14.0.726.0) • Released December 13, 2010 (MSKB 2407113) • See TechNet Wiki for more info -http://social.technet.microsoft.com/wiki/contents/articles/exchange-server-and-update-rollups-builds-numbers.aspx

14. PLANNING AND DEPLOYMENT Tools

15. Exchange Server Pre-Deployment Analyzer • http://msexchangeteam.com/archive/2010/02/24/454083.aspx • Focuses on overall topology readiness • Performs analysis of Exchange 2003/2007 • Supported on • Windows 7 • Windows Vista SP2 • Windows Server 2008 SP2 • Windows Server 2008 R2 • Windows Server 2003 SP2

16. Exchange Server Deployment Assistant • http://technet.microsoft.com/en-us/exdeploy2010 • On-Premises Only • Upgrade from Exchange 2003 • Upgrade from Exchange 2007 • Upgrade from Exchange 2003/2007 • New Exchange 2010 Org • Cloud Only • Microsoft Office 365 for Enterprises - http://go.microsoft.com/fwlink/?LinkId=203981 • Hybrid Environment (On Premises + Cloud) • Exchange 2003 and 2007 now; Exchange 2010 coming soon!

17. Mailbox Server Requirements Calculator • http://blogs.technet.com/b/exchange/archive/2009/11/09/3408737.aspx • Latest Version – v14.4 • User profile • High availability architecture • Server's CPU platform • Storage architecture • Backup architecture • Network architecture • Attend EXL312 - Designing Microsoft Exchange 2010 Mailbox High Availability for Failure Domains for some exciting news about the calculator

18. Scripts AND troubleshooters

19. Exchange Remote Connectivity Analyzer • https://www.TestExchangeConnectivity.com • Used to verify a variety of client protocol connectivity from outside the organization • Exchange ActiveSync • Exchange Web Services • Autodiscover (ActiveSync and Outlook) • Outlook Anywhere • Inbound and Outbound SMTP scott@contoso.com

20. Mailbox Assistants Troubleshooter (SP1) • Mailbox Assistants perform event-based and time-based functions (e.g., free/busy, resource booking, conversations, calendar repair, etc.) • Test-AssistantHealth can be used to verify the health of the Microsoft Exchange Mailbox Assistants services, to recover from health issues, and to report on the diagnosis or recovery action • Includes ResolveProblems parameter which can • Start the service if it is not running • Restart the service if it is hung or deadlocked for more than 15 minutes

21. Database Log Growth Troubleshooter (SP1) • Troubleshoot-DatabaseSpace.ps1 detects excessive log growth issues and takes action • By default • Runs every 15 minutes to determine available free space • If free space < 25%, tools runs an algorithm to determine if excessive log growth is cause • If it is cause, the tool quarantines or throttles mailboxes causing excessive growth, as appropriate • Defaults defined in StoreTSConstants.ps1

22. Database Log Growth Troubleshooter (SP1) • Tracks a variety of metrics, such as log generation rate and available disk space for database and log file disks • Determines top 25 users that accessed mailbox database during the last one-hour period • Quarantines mailboxes for 6 hours (users have no access to email) • If it cannot drop the generation rate, it logs an event, removes the database from provisioning

23. Database Latency Troubleshooter (SP1) • Troubleshoot-DatabaseLatency.ps1 used by SCOM, but can be used outside of SCOM as a schedule task • Defaults defined in StoreTSConstants.ps1 • Checks for database latencies above value of LatencyThreshold (default is 70 ms) • Checks disk’s transfer rate against read rate and read latency performance counters • Checks to see if any user is using more than one thread for duration of TimeInServerThreshold (default is 10 min)

24. Database Latency Troubleshooter (SP1) • Disk’s transfers-per-second rate < DiskReadRateThreshold • Disk’s seconds-per-transfer rate > DiskReadLatencyThreshold • If both conditions are true, it indicates that disk has high latency under low load, which often means the disk is going bad and needs replacing • User using more than one thread for duration of TimeInServerThreshold • Mailbox quarantined for 6 hours

25. Content Index Troubleshooter • Troubleshoot-CI.ps1 detects problems with content index catalogs • -Action Detect is default setting • Use -Action DetectAndResolve or -Action Resolve to optionally attempt to fix different issues • Deadlock • Corruption • Stall • Backlog Troubleshoot-CI.ps1 -database DB1 -Symptom Corruption -Action Resolve

26. Easily Move the Transport Databases • No need to modify EdgeTransport.exe.config file to change location of transport databases • Move-TransportDatabase.ps1 moves the queue database, the IP filter database and the temporary storage locations • Same parameters as config file • QueueDatabasePath • QueueDatabaseLoggingPath • IPFilterDatabasePath • IPFilterDatabaseLoggingPath • TemporaryStoragePath

27. Easily Move the Transport Databases • Move-TransportDatabase.ps1 performs the following tasks • If moving to another drive, it validates free disk space • Creates the specified paths, if they don’t already exist • Permissions the paths • Full control for NetworkService, LocalSystem and BuiltinAdministrators • Stops the Transport service • Backs up the original config file • Moves the databases and associated files • Starts the Transport service

28. the Power ofPowerShell

29. Using Exchange Management Tools • Exchange Management Shell • Get-Command • Get-ExCommand • Findparams (e.g., findparams *mailbox*) • Wildcards (e.g., get-excommand *mailbox*) • Pipelining (e.g., get-pssnapin *exchange* | add-pssnapin • Get-tip (random tip of the day) • Exchange Management Console • Use Ctrl+C to copy scripts that are run by Wizards

30. Speaking of scripts… • In the Exchange Management Shell you can quickly navigate to the Scripts folder, no matter where your Exchange binaries are installed cd $exscripts

31. What Edition am I running? • Quick, easy way to tell Edition of each Exchange ServerGet-ExchangeServer | ft Name, EditionGet-ExchangeServer <Server> | fl Edition

32. What Version am I running? • Get version information for all Exchange serversGet-ExchangeServer | ft Name, *Version* • Get version information for specific Exchange serverGet-ExchangeServer<Server> | ft Name, *Version*

33. Handy and Powerful One-Liners • List servers by AD site and Server RoleGet-ExchangeServer | Sort Site,ServerRole,Name | ft -GroupBy Site -Property Name,ServerRole,AdminDisplayVersion –Auto • Create a shortcut for a cmdletNew-Alias -Name "get-opr" -Value "Get-OutlookProtectionRule" • Check service startup setting Get-WMIObjectwin32_service -filter "name = 'msExchangeRepl'"

34. Handy and Powerful One-Liners • List non-empty transport queues"$(date)"; Get-TransportServer | Get-Queue -filter {MessageCount -gt 0} | ft –Auto • View Remote Receive Connector IP Ranges Get-ReceiveConnector“<Server>\<Connector>" | select remoteipranges | % {$_.remoteipranges} | % {$_.Lowerbound.tostring()}

35. Removing a Bulk Message • Delete one bulk message that’s clogging the systemGet-Queue | Get-Message | where{$_.MessageSubject -eq "Subject"} | Remove-Message • Optionally include the WithNDRparameter to specify whether a non-delivery report (NDR) is returned to the sender

36. Block Mode or File Mode (SP1) • Determine if continuous replication is operating in block mode or file modeGet-Counter -ComputerName<DAGMemberName> -Counter "\MSExchange Replication(*)\Continuous replication - block mode Active“ Timestamp CounterSamples --------- -------------- 5/11/2011 1:50:14 PM \\ex1\\msexchange replication(db9)\continuous replication - block mode active : 1 \\ex1\\msexchange replication(db8)\continuous replication - block mode active : 1 \\ex1\\msexchange replication(db6)\continuous replication - block mode active : 1 \\ex1\\msexchange replication(db5)\continuous replication - block mode active : 1 \\ex1\\msexchange replication(db3)\continuous replication - block mode active : 1 \\ex1\\msexchange replication(db2)\continuous replication - block mode active : 1 \\ex1\\msexchange replication(db7)\continuous replication - block mode active : 0 \\ex1\\msexchange replication(db4)\continuous replication - block mode active : 0 \\ex1\\msexchange replication(db1)\continuous replication - block mode active : 0

37. Transport Dumpster Statistics get-date;Get-MailboxServer | for each {get-databasecopystatus -MailboxServer $_.identity -DumpsterStatistics | ? {$_.SummaryCopyStatus -ne 'Mounted'}} | foreach {$_.DumpsterStatistics} Server : E14EX2 OldestItem : 4/21/2011 4:24:36 PM QueueSize : 1200 NumberOfItems : 28

38. How much whitespace is in the database? • Save the following as Get-Whitespace.ps1 Get-Whitespace.ps1 <ServerName> Function Get-DatabaseWhitespace ($ComputerName) { PROCESS { $wmi = Get-WmiObject Win32_ntlogevent -Filter "Logfile='Application' AND EventCode='1221'" –ComputerName $ComputerName | Select-Object ComputerName,InsertionStrings,TimeGenerated ForEach ($Log in $wmi) { $obj = New-Object PSObject $obj | Add-Member NoteProperty ComputerName ($Log.ComputerName) $obj | Add-Member NoteProperty StorageGroup ($($Log.InsertionStrings[1])) $obj | Add-Member NoteProperty "Whitespace (MB)" ($($Log.InsertionStrings[0])) $obj | Add-Member NoteProperty TimeGenerated $([System.Management.ManagementDateTimeConverter]::ToDateTime($Log.TimeGenerated)) Write-Output $obj } } } Get-DatabaseWhitespace $args

39. Getting All Logon Statistics from Outlook • Use Get-LogonStatistics to retrieve data such as logon time, last access time, client version, and adapter speed Get-LogonStatistics -Server <ServerName> • By default, Outlook 2010 and Outlook 2007 SP3 don’t transmit IP address, MAC address, username or machine name because it is considered PII • Check “Enable troubleshooting logging” checkbox or add registry entry to Outlook client to get this info HKCU\Software\Policies\Microsoft\Office\14.0\Outlook\CancelRPC\EnablePerfTrackingHKCU\Software\Microsoft\Office\14.0\Outlook\CancelRPC\EnablePerfTracking DWORD, Value: 0x00000028

40. What’s news?

41. Enable Kerberos Auth for MAPI Clients • We recommend enabling Kerberos authentication for MAPI clients • We’ve made it easier to do this in Exchange 2010 SP1 • Why? • Exchange 2010 leverages a load-balanced namespace (RPC Client Access array) for MAPI access to mailbox data • By default, Outlook and other MAPI clients that are configured to use Negotiate ultimately end up using NTLM authentication • As the number of MAPI connections increases, there is potential for a bottleneck in handling of NTLM authentication

42. Enabling Kerberos Auth for MAPI Clients • Solution leverages an alternate service account (ASA) credential mechanism • The Microsoft Exchange Service Host service that runs on CAS has been extended to use a shared credential for Kerberos authentication • Monitors the local machine and when credentials are added or removed, the Kerberos authentication package on the local system and the network service context is updated and all client access services can use it for Kerberos authentication • See http://t.co/fpd6sNa for complete details on how to implement (uses rollalternateserviceaccountpassword.ps1)

43. SSL Offloading for Exchange Web Services • Using SSL Offloading requires you to disable SSL on CAS • In Exchange 2010 RTM, enabling or disabling SSL for EWS virtual directory required you to use IIS Manager and to modify the web.config file • In Exchange 2010 SP1, you only use IIS Manager • If you modify the web.config file, you’ll likely see WebHost Error 3 in the event log • See http://technet.microsoft.com/en-us/library/ee633481.aspx for details

44. Jetstress Field Guide Updated • April 2011 - 1.0.0.11 • Updated for version 14.01.225.017 of Jetstress • Added Exchange Server 2003 instructions • Added more troubleshooting information • Added guidance for running Jetstress on a production Exchange Server • Included guidance for testing Raid Arrays • Included information and guidance on Background Database Maintenance • General corrections and clarity improvements

45. Exchange Management Console and IE9 • After installing Internet Explorer 9 on a system running the Exchange Management Tools, the console may fail to close • You must close all dialog boxes before you can close Exchange Management Console • Workaround: Use Task Manager to terminate mmc.exe • This is an IE bug, not an Exchange or MMC bug • May only repro when console is focused on Org Config | Mailbox • May not manifest in other MMC apps

46. Exchange Team Blog Updates • Moved to a new home on TechNet • http://blogs.technet.com/exchange • Old namespace still works and should map to moved articles • Click the + symbol next to Library to get • Downloads • Scripts • Videos • Exchange Documentation Library

47. Exchange Team Blog for Windows Phone 7 • Get the Exchange Team Blog on your Windows Phone 7 • Search for EHLO in Zune Marketplace Apps

48. Required Slide Speakers, please list the Breakout Sessions, Interactive Discussions, Labs, Demo Stations and Certification Exam that relate to your session. Also indicate when they can find you staffing in the TLC. Related Content • EXL302 | Archiving and Discovery in Microsoft Exchange 2010 SP1 and Exchange Online • EXL306 | Best Practices for Virtualization of Microsoft Exchange 2010 • EXL307 | Load Balancing with Microsoft Exchange Server 2010 • EXL312 | Designing Microsoft Exchange 2010 Mailbox High Availability for Failure Domains • EXL401 | Exchange Server 2010 High Availability Management and Operations • EXL327 | Real-World Site Resilience Design in Microsoft Exchange Server 2010

49. Required Slide Track PMs will supply the content for this slide, which will be inserted during the final scrub. Track Resources • Exchange Team Blog – http://blogs.technet.com/b/exchange • Exchange TechCenter– http://technet.microsoft.com/en-us/exchange/default.aspx • LyncTechCenter – http://technet.microsoft.com/en-us/lync • Lync Team Blog– http://blogs.technet.com/b/lync/

50. Resources • Connect. Share. Discuss. http://northamerica.msteched.com Learning • Sessions On-Demand & Community • Microsoft Certification & Training Resources www.microsoft.com/teched www.microsoft.com/learning • Resources for IT Professionals • Resources for Developers • http://microsoft.com/technet • http://microsoft.com/msdn