350 likes | 518 Views
Exchange Server 2010 SP2 Training. Best New Features in Exchange 2010 SP2. J. Peter Bruzzese: Microsoft MVP for Exchange with current certification acronyms including the following: Triple-MCSE (MCSE for NT 4.0/2000/2003) MCITP: Enterprise Messaging (2007 and 2010)
E N D
J. Peter Bruzzese: Microsoft MVP for Exchange with current certification acronyms including the following: • Triple-MCSE (MCSE for NT 4.0/2000/2003) • MCITP: Enterprise Messaging (2007 and 2010) • MCTS for SharePoint Server • A+, Network+, iNet+ • CIW, CNA, CCNA… and others • I’m a Microsoft Certified Trainer, a technical author with over a dozen books sold internationally to my credit, and a technical speaker for conferences like TechMentor, TechEd, Connections and others • A Modest Bio of Your Instructor
Exchange is my passion! • I’ve been working with and teaching Exchange for 10+ years • Exchange Instructor for many years with a variety of different training agencies and private corporations • Contributed to Exchange 2007 Administrator’s Companion (Microsoft Press) • Wrote “Exchange 2007 SP1: How-To” by Sams (Pearson) • Author of Exclusively Exchange column for Realtime and founder of the site www.exclusivelyexchange.com • Participated in the Microsoft TAP program for Exchange 2010, for Exchange 2010 SP2 and for E15 • Speaker for TechMentor, TechEd • Journalist for InfoWorld (Enterprise Windows column) • The Extended Exchange Bio Photo: Visiting Microsoft
The Hybrid Configuration Wizard • Address Book Policies • Outlook Web App Mini • Cross Site Silent OWA Redirection • New Method for Enabling the Mailbox Replication Service • Disabling Outlook Mailbox Auto-Mapping • Multi-Valued Custom Attributes • Litigation Hold Adjustment • Best New Features
Most folks are used to either an on-premises deployment or a cloud-only deployment and even if they have a mixture of the two they don’t consider managing them through the same tools by any means • Exchange 2010 combined with a cloud-based solution like Office 365 offers an opportunity to manage both through a single set of tools • You may want a hybrid deployment for a variety of practical reasons • Cost • Management • The Purpose of a Hybrid Deployment of Exchange
The current set of instructions for Exchange 2010 SP1 is about 50 manual steps (according to the Exchange Team) • Everything from configuring single sign on to configuring federated delegation • The new Hybrid Configuration Wizard Takes the former 50 step process and makes it a wizard that requires a few clicks and some information to automate the process • It sounds easy but it isn’t… planning is the key • The Hybrid Configuration Wizard
The wizard will verify the following: • Both on-premises and Office 365 meet the prereqs • Establishes the on-premises federation trust • Creates organization relationships • Configures free/busy calendar sharing, message tracking and MailTips • Configures secure mail flow between the two • Enables archiving support • The Hybrid Configuration Wizard (cont.)
Even within one organization there are times when administrators want to control or provide alternate views of the Global Address List (GAL) • This segmentation is valuable in larger organizations because it gives a user the ability to see an address list of persons who are local instead of the entire GAL, by default • Address Book Policies is a solution that will allow for Global Address Segmentation capabilities • Provides sub-divided address books • ‘Virtual’ organizations within a single Exchange Organization • Control Over the Global Address List View
Replaces the traditional ACL-based GAL segmentation method • ABPs can be managed through the EMC and EMS • Allows you to control access based upon attributes (custom, company, or department – but not distribution list) • Planning is the key to ABPs • First you create your Address Lists (ALs), Offline Address Book (OAB) and additional GAL (if you wish… remember, this is only done through the EMS) • Then you associate the ALs, OAB and GAL to a policy • Finally you apply the policy to users • Address Book Policies (ABPs)
OWA Mini is a super lightweight browser-based client for mobile devices and it goes right to bare-bones simplicity • OWA Mini is not a new feature at all, it was in Exchange 2003 as Outlook Mobile Access (OMA) although the code is brand new (no reused code from the older version apparently) • OMA does the basics for us: • Access to email, calendar, contacts, tasks and the GAL • Ability to respond to emails, handle meeting requests, create contacts and tasks and configure Out of Office message (and more) • The Purpose of Outlook Web App Mini
Comparison: OWA Light vs Mini OWA Light OWA Mini
There are several reasons why a user may need to be redirected within Exchange when working with Outlook Web App and these include: • Manual Redirection: When a CAS server has to redirect a user to another CAS server within the proper AD site that the user’s mailbox is located • Temporary Manual Redirection: When the client’s web browser has old DNS entries where direction is provided • Legacy Silent Redirection: Silent redirection is used to connect a user to a mailbox on a legacy version of Exchange • Three Redirection Occurrences
The Pre-SP2 Redirection Process CAS Site A Mailbox Site B
If a user attempts to access OWA through browser using a URL that connects to a CAS server in a site that is different from the AD site where the user’s mailbox is being held the redirection will point the user off to the proper server without manual intervention • This is enabled through the Exchange Management Shell using the following parameter (which supports two values, manual or silent):Set-OWAVirtualDirectory -Identity “Globomantics\owa(Default Web site)" -CrossSiteRedirectType Silent • The Fourth Redirection Process: Cross-Site Silent
To move mailboxes from your on-premises Exchange environment to Outlook.com or another forest you had to manually enable the MRSProxy service on the remote Client Access Server • To enable the MRSProxy service you had to go into the config.web file which is located under “c:\Program Files\Exchange Server\V14\Client Access\exchweb\ews” and change the parameter to “true” • It facilitates mailbox move requests and is essential to enable for cross-forest moves or even to connect to Office 365 for migration or coexistence scenarios • Pre-SP2 MRSProxyService Configuration
With SP2 you don’t have to go crawling around the config.web file to enable the service • With the cmdlets New-WebServicesVirtualDirectory and Set-WebServicesVirtualDirectory you can enable the service using the –MRSProxyEnabled parameter • You can also use the –MRSProxyMaxConnections parameter to establish a connection limit • Here is an example of the cmdlet you type in:Set-WebServicesVirtualDirectory -Identity “EWS (Default Web Site)” -MRSProxyEnabled $true –MRSProxyMaxConnections50 • SP2 Changes to MRSProxy Enabling
With Exchange 2010 SP1 if a user is granted full access to mailboxes other than his/her own, the Autodiscover service locates that mailbox (which may be in a different database or even on a different server entirely) and loads it for the Outlook user • If a user were to be granted full access to many mailboxes or shared mailboxes then performance and stability would come into question with Outlook • Mailbox Auto-Mapping
With SP2 administrators can disable the auto-mapping feature by using the Exchange Management Shell (EMS) • To turn the feature off you use the Add-MailboxPermissioncmdlet with the new –Automapping parameter and setting it to $false • Here is an example of the full command where a person is given full access to another user’s mailbox but the auto-mapping is turned off:Add-MailboxPermission “Shared Mailbox” –User <delegate>-AccessRightFullAccess –InheritanceType All –Automapping $false • Disabling Auto-Mapping with SP2
There have been 15 custom attributes for a while now • There are 5 new multi-valued custom attributes that you can use to store additional information for mail recipient objects • The five attributes are ExtensionCustomAttribute1 to ExtensionCustomAttribute5 and each of these can hold up to 1,300 values • You can specify values as a comma-delimited list • Multi-Valued Custom Attributes
The following cmdlets support the new parameters: • Set-DistributionGroup • Set-DynamicDistributionGroup • Set-Mailbox • Set-MailContact • Set-MailPublicFolder • Set-RemoteMailbox • Cmdlets that Support the New Parameters
As a result of both regulatory compliance with a variety of legislation (ie. Sarbanes Oxley, et. al. ) and the need for easy discovery in the event of a lawsuit, Microsoft added a feature into Exchange called Litigation Hold (aka Legal Hold) • The purpose of Litigation Hold is to prevent a user from deleting important email correspondence from their own account to avoid the discovery process • The negative with regard to the feature is that it must be enabled so by default users can remove or delete email • Legal Hold, as an emerging science, required some tweaking, which is what SP2 provides • Discovery and Litigation Hold
With SP2 you can no longer disable or remove a mailbox that has been placed on litigation hold (that is the new default behavior) • This restriction can, however, be bypassed by an administrator but not without some effort • An administrator can either remove the hold or can use the new –IgnoreLegalHold switch parameter when removing or disabling the mailbox through the Exchange Management Shell (EMS) • Note: This will be auditable (sort of) • Litigation Hold and SP2
Here is a list of cmdlets that now allow for the new –IgnoreLegalHold switch parameter • Disable-Mailbox • Remove-Mailbox • Disable-RemoteMailbox • Remove-RemoteMailbox • Disable-MailUser • Remove-MailUser • Cmdlets with the New Parameter
• The Hybrid Configuration Wizard • Address Book Policies • Outlook Web App Mini • Cross Site Silent OWA Redirection • New Method for Enabling the Mailbox Replication Service • Disabling Outlook Mailbox Auto-Mapping • Multi-valued Custom Attributes • Litigation Hold Adjustment • Review of the Best New Features
Want to learn more about Exchange 2010? Watch one of these training courses from TrainSignal: • Exchange 2010 Administration Training (with SP1 and SP2) • Exchange 2010 Design and Deployment • Exchange 2010 Backup and Recovery • Exchange 2010 Unified Messaging Training • Read my InfoWorld column on Enterprise Windows at: • http://www.infoworld.com/blogs/j-peter-bruzzese • Email J. Peter Bruzzese at peter@trainsignal.com and follow me on Twitter @JPBruzzese • Contact Information