Exchange Ideas - Daniel Kenyon-Smith : Exchange 2007

Exchange 2010 Q&A

danielke — Sun, 06 Sep 2009 18:43:47 GMT

please Join me at this event to talk about Exchange 2010, you can register here

Exchange Server 2007 Service Pack 2

danielke — Tue, 01 Sep 2009 15:06:45 GMT

Download Exchange 2007 SP2 and see what's new:-

Deploying Exchange Server 2010
Exchange Backup Functionality
Enhanced Auditing
Dynamic Active Directory Schema Validation
Public Folder Quota Management
Centralized Organizational Settings

Combined HT and CAS

danielke — Fri, 07 Aug 2009 23:00:59 GMT

Take a look at the new guidance for combing HT and CAS and you can install both roles by running Setup.com /mode:install /role:H,C (nice and easy)

Written by Daniel Kenyon-Smith

CCR or Stretched CCR?

danielke — Fri, 07 Aug 2009 22:42:47 GMT

Having spoke with a few customers about whether a local CCR and SCR is the best solution or a stretched CCR across 2 data centres I thought I'd write a post.

There is no right and wrong answer to that question, in typical consulting style 'it depends'. There are various factors to take into consideration when designing the right solution for your customer:-

Network Infrastructure such as data centre locations, network bandwidth, latency, redundant links (including switches)
Customer requirements (do they require full site resilience without manual intervention)
Cost
Does the customer currently have the right skills to manage the environment
How many copies or the database are required, (2 with a stretched cluster, 3 with CCR and SCR)
Can a 3rd data centre be used to host the File Share Witness (FSW)

There are also some factors to think about from the client side, such as DNS refresh. If the customer doesn't have a stretched Virtual LAN (VLAN) between data centres, the cluster will be assigned 1 Network Name resource and 2 IP address resources (since both nodes are separate IP subnets). When the the clustered mailbox server (CMS)fails over the CMS will be assigned a different IP. As part of the cluster configuration in Windows 2008 we recommend the default DNS TTL value for the CMS Network Name resource should be changed.

By default the cluster service has a setting of 20mins, you need to be careful if you change the DNS TTL value through the DNS management console as this will be over written by the cluster settings. So if you want to change the default value from 20mins to our recommended setting of 5 mins you'll need to make the change through cluster administrator.

In order to make this change you'll need Local Admin on each node in the cluster and have full control permission to the cluster.

From a cmd prompt run - cluster.exe res <CMSNetworkNameResource> /priv HostRecordTTL=300 (where 300 is the recommended 5 mins as mentioned above)

Take the cluster offline by running Stop-ClusteredMailboxServer cmdlet in Power Shell

Bring the cluster back online by running Start-ClusteredMailboxServer cmdlet.

I’ve listed below a few risks and how they can be mitigated if you do decide to go with a stretched CCR over CCR + SCR

Risk	Mitigation
File Share Witness (FSW) Location	Locate the FSW at an alternate location to provide additional resilience to the cluster
Client cache IP refresh interval	this can configured on the cluster in Windows 2008, or a stretched VLAN can used
Logical corruption of the databases	SCR would provide this feature, but take into consideration your Recovery Time Objective (RTO)
Is the network link between physical locations resilient	Ensure there is alternate routes available
Does the network link between physical locations have low latency (below 50ms)	Test network latency
Network link between between physical locations has enough bandwidth	Test network bandwidth
Backup solution can backup any node in any physical location	ensure your chosen backup solution can back up both locations in the event of a site failure
Manual configuration required to control message routing within a data centre (SubmissionServerOverridelist)	Ensure your operational guides are up to date with how to configure mail routing
Control Client Access within a Datacentre	ISA Server
Querying of AD may take place across the data centre interconnect	None
Potential loss of email data in the event of a site failure	Email will be stored in the transport dumpster of the HT server in the failed site
Operational Management	Having an in-depth understanding of cluster technology and Window 2008 and Exchange 2007 experience

Written by Daniel Kenyon-Smith

A Guide to Migrating Public Folders to SharePoint

danielke — Sat, 25 Jul 2009 11:05:04 GMT

Check out the WindowsITPro ‘Guide to Migrating Public Folders to SharePoint’ well worth a read

Written By Daniel Kenyon-Smith

Relocate the ADAM (Lightweight Directory Services (AD LDS))

danielke — Fri, 24 Jul 2009 20:33:30 GMT

In order to relocate the ADAM database and logs on Edge you need edit the ConfigureAdam.PS1 to update the location of dsbutil.exe as shown below

Then for example run:-

configureAdam.PS1 –logpath:”E:\Program Files\Microsoft\Exchange Server\TRansportRoles\Data\Adam –DataPath:”D:\Program Files\Microsoft\Exchange Server\TRansportRoles\Data\Adam

This will relocate the logs and database to the locations specified

Written By Daniel Kenyon-Smith

DatabaseMaxCacheSize

danielke — Fri, 24 Jul 2009 20:21:24 GMT

In Exchange 2007 SP1 the default database cache size is set to 128MB, to allow for better cache growth. The new guidance is to increase the DatabaseMaxCacheSize from 128MB to 512MB (on Hub Transport servers with more than 4GB of RAM)

This can be done editing the EdgeTransport.exe.config file as shown below:-

More details can found on Microsoft Exchange Team Blog

Written by Daniel Kenyon-Smith

Transport Rules

danielke — Fri, 24 Jul 2009 14:46:27 GMT

Whilst working for a customer they had a specific requirement to apply a disclaimer to all outbound mail e.g. not to apply disclaimers to mail sent to other users within the Exchange organisation. Their requirement also included to only apply the disclaimer if it had not already been applied (or where it contained the same text). So i created a powershell script to do this:-

Get-TransportRulePredicate SubjectOrBodyContains

$Action = get-TransportRuleAction ApplyDisclaimer

$Action.Text = “my test disclaimer”

Get-TransportRulePredicate SubjectOrBodyContains

$Exception = Get-TransportRulePredicate SubjectOrBodyContains

$Exception.Words = @("My test disclaimer”)

$Condition = Get-TransportRulePredicate SentToScope

$Condition.Scope = "NotInOrganization"

New-TransportRule –Name “My test” –Action @($Action) –Exception @($Exception) –Condition @($Condition)

Written by Daniel Kenyon-Smith

Exchange 2007 SP1 certificate generation

danielke — Thu, 18 Jun 2009 11:35:00 GMT

I created a cert the other day for a customer so thought I'd share the Powershell command, you never know it might help!

New-ExchangeCertificate -GenerateRequest -Path c:\CompanyA.csr -KeySize 2048 -SubjectName "c=GB, s=London, l=London, o=CompanyA, cn=Mail.CompanyA.com" -DomainName Server1.CompanyA.com, Server2.CompanyA.com, Autodiscover.CompanyA.com, Server1, Server2 -PrivateKeyExportable $True

This cert will allow CompanyA to access external services to exchange, such as Exchange Active sync (EAS), Outlook Web Access (OWA), Autodiscover, Outlook Anywhere (RPC/HTTPS), etc…

Obviously in order to access these services you will need to setup ISA and publish the relevant rules. In this example Mail.CompanyA.com will be configured in ISA as a multiple path rule, allowing a single url for client access to services like OWA and EAS for example.

Written by Daniel Kenyon-Smith

Single Label Domain (SLD)

danielke — Fri, 13 Feb 2009 21:39:42 GMT

I have recently spoken with customers who have a single label domain and have asked the question whether the next version of Exchange will be supported. It's still a recommendation to move from a SLD, but we do support it, see for more details -

http://msexchangeteam.com/archive/2009/01/27/450514.aspx

Written by Daniel Kenyon-Smith

Planning Tool for Microsoft Office Communications Server 2007 R2

danielke — Fri, 13 Feb 2009 19:09:57 GMT

Take a look at the new planning tool for R2 - https://www.microsoft.com/downloads/details.aspx?FamilyID=fdf32585-c131-4832-8e27-67e70636c1e8&DisplayLang=en

Written by Daniel Kenyon-Smith

PowerShell installation Windows 2008

danielke — Fri, 06 Feb 2009 21:47:19 GMT

Before you install Exchange 2007 SP1 onto a Windows 2008 server you'll need ensure that prerequisites are installed, by default .NET Framework 2.0 and Microsoft Management Console (MMC) will be installed but you'll need to install Windows PowerShell.

Note: You won't need to go looking around on the Internet for PowerShell all you'll need to do is:-

Go to Control Panel
Programs and features
Select 'Turn windows features on or off'
From Server Manager, click on Features and 'Add Features'
Then scroll down and select WindowsPowershell (as Show below)

Written by Daniel Kenyon-Smith

Exchange 2007 security

danielke — Mon, 19 Jan 2009 22:36:00 GMT

I get asked the question ‘how can we secure our Exchange 2007 servers’ so I’ve compiled a list from the Exchange 2007 Security Guide. As you know Exchange 2007 is by design secure, but here are the services that start automatically and the ones that you’ll start manually.

Mailbox role

The Microsoft Search (Exchange Server) service and Microsoft Exchange Monitoring are set to start manual. All other services are set to start automatically. Here are list of some of the services that are automatically enabled by default when the mailbox role starts:-

Service short name	Service name
MSExchangeIS	Microsoft Exchange Information Store
MSExchangeADTopology	Microsoft Exchange Active Directory Topology
MSExchangeRepl	Microsoft Exchange Replication Service
MSExchangeMailboxAssistants	Microsoft Exchange Mailbox Assistants
MSExchangeSearch	Microsoft Exchange Search Indexer
MSExchangeServiceHost	Microsoft Exchange Service Host
MSExchangeMonitoring	Microsoft Exchange Monitoring
MSExchangeSA	Microsoft Exchange System Attendant
MSExchangeMailSubmission	Microsoft Exchange Mail Submission Service
msftesql-Exchange	Microsoft Search (Exchange Server)

Clustered Mailbox Server Role

The Cluster Service is set to start automatically:-

Service short name	Service name
ClusSvc	Microsoft Cluster Service

Hub Transport Server Role

Microsoft Exchange Monitoring is set to start manually. All other services are set to start automatically:-

Service short name	Service name
MSExchangeADTopology	Microsoft Exchange Active Directory Topology service
MSExchangeTransport	Microsoft Exchange Transport service
MSExchangeAntispamUpdate	Microsoft Exchange Anti-spam Update service
MSExchangeEdgeSync	Microsoft Exchange EdgeSync service
MSExchangeTransportLogSearch	Microsoft Exchange Transport Log Search service
MSExchangeMonitoring	Microsoft Exchange Monitoring

Edge Transport Server Role

Microsoft Exchange Monitoring and the Microsoft Exchange Transport Log Search service are set to start manually. All other services are set to start automatically:-

Service short name	Service name
MSExchangeTransport	Microsoft Exchange Transport service
MSExchangeAntispamUpdate	Microsoft Exchange Anti-spam Update service
ADAM_MSExchange	Microsoft Exchange ADAM
EdgeCredentialSvc	Microsoft Exchange Credential Service
MSExchangeTransportLogSearch	Microsoft Exchange Transport Log Search service
MSExchangeMonitoring	Microsoft Exchange Monitoring

Client Access Server Role

Microsoft Exchange Monitoring, the Microsoft Exchange POP3 service, and the Microsoft Exchange IMAP4 service are set to start manually. All other services are set to start automatically:-

Service short name	Service name
MSExchangeADTopology	Microsoft Exchange Active Directory Topology service
MSExchangePOP3	Microsoft Exchange POP3 service
MSExchangeIMAP4	Microsoft Exchange IMAP4 service
MSExchangeFDS	Microsoft Exchange File Distribution service
MSExchangeServiceHost	Microsoft Exchange Service Host
MSExchangeMonitoring	Microsoft Exchange Monitoring

Unified Messaging Server Role

Microsoft Exchange Monitoring is set to start manually. All other services are set to start automatically:-

Service name	Friendly name
MSExchangeADTopology	Microsoft Exchange Active Directory Topology service
MSSpeechService	Microsoft Exchange Speech Engine
MSExchangeUM	Microsoft Exchange Unified Messaging
MSExchangeFDS	Microsoft Exchange File Distribution Service
MSExchangeMonitoring	Microsoft Exchange Monitoring

Written by Daniel Kenyon-Smith

Planning Mailbox Quotas – Part I

danielke — Fri, 16 Jan 2009 18:57:00 GMT

When planning for storage it’s a good idea to categorise users into quota limits so you can plan your storage requirements. This calculation should be done in the High Level Design phase to allow your customer to purchase the hardware. An example of how quota limits might be categorised are shown below:-

Ø 200MB limit – Bronze limit

Ø 400MB limit – Sliver limit

Ø 600MB limit – Gold limit

Ø 2GB limit – Platinum limit

If you have mailboxes with an unlimited mailbox quota it is impossible to manage from a storage perspective as a user can effectively carry on using storage, so the unlimited users/shared mailboxes can be calculated at 2GB from a storage point of view. It’s recommended that limits are applied at something like 2GB for the following reason:-

Ø The maximum size of the .OST file (Outlook off line cache) for the unlimited mailboxes, assuming users are logging into these accounts.

Ø The .ost file performance is also another factor to consider if there are mailboxes in your organization that exceed 2 GB in size. If users of those mailboxes are running Outlook in cached mode, those users may experience degraded performance as the size of their .ost file grows above 2 GB.

Ø A limit can be set by changing the registry - http://support.microsoft.com/kb/832925 If no limit is set the default is 2GB to prevent corruption and user experience as mentioned above.

Ø Specific folders can also be synchronised (if you are using Outlook 2007) therefore limiting the amount of data that be will synchronised.

When Outlook 2003 synchronises with Exchange it uses an intelligent learning algorithm that is transparent to the user. Folders used most frequently are placed in a priority order, this gives the user a better experience. The order is listed below:-

1. Utility folders (common views, views, and security settings)

2. Calendar

3. Contacts

4. Drafts

5. Inbox

6. All other folders (defined by the user)

7. Sent Items

8. Deleted Items

9. Public Folder Favorites (added by the user)

Part II will contain details on how to plan your backend storage requirements based on quota limits.

Written by Daniel Kenyon-Smith

Outlook 2003 consolidated information

danielke — Fri, 16 Jan 2009 17:46:00 GMT

Running Outlook in Online mode

· Running Outlook in Online Mode moves the IO burden from the client to the server and doesn't address the disconnected laptop scenario.

Network impact and ability to optimize the client

· Cached Exchange Mode provides intelligent use of bandwidth. This functionality is enabled by synchronizing only headers on slow connections (connections that are slower than 128 kilobits per second [Kbps]). This functionality works only when a network connection is present.

· After messages have been cached locally, typical user operations do not cause interactions that block the server. Quickflagging, marking a message as read, replying, and editing require a small amount of data to be pushed up to the server to keep the mailboxes synchronized. However, the pushing of data occurs in the background. This behavior causes much faster access to messages and to attachments, because you work from the local copy instead of the server copy.

Outlook 2003 Cached Exchange Mode offers you the following benefits:

· Reduced server load. After messages are cached locally, re-opening the same message does not require server transactions.

· Reduced network load. After messages have been pulled over the network one time, subsequent access to those messages does not cause additional network traffic. Because messages are also compressed, there is an additional reduction on network load.

· When you turn on Cached Exchange Mode in Outlook 2003, and when the connection from your computer that is running Outlook 2003 to the Exchange Server 2003 computer is not available, Outlook switches to the Trying to connect state or to the Disconnected state. If the connection is restored, Outlook switches to the Connected state or to the Connected (Headers) state. Any changes that you made while you were offline are synchronized automatically when a connection to a server is available. You can continue to work while changes are synchronized.

· Additionally, Cached Exchange Mode causes no loss of conventional functionality. New e-mail notifications, full Global Address List details, free/busy lookup, public folder access, and delegate support function as expected. However, this is true only when a network connection to an Exchange Server computer is present.

What is the Level of Security around cached mode and how it is encrypted

The .ost file is similar to a personal folders (.pst) file, but the .ost file is automatically encrypted with compressible encryption. The encryption key is stored in two places: in the mailbox on the Exchange computer and in a local Messaging Application Programming Interface (MAPI) profile that is configured on the client workstation. If the key is lost from both locations, the .ost file is unreadable. When a client connects in Online mode, the key in the profile is checked against the key in the information store database. If the keys differ, the client copy of the key is overwritten with the key from the information store, and a new .ost file is automatically generated on the client workstation. When you reset an information store database, a new offline key is generated in each new mailbox; therefore, the current .ost file becomes unreadable at the beginning of the first successful online connection. Any changes that are made before the synchronization of the current .ost file are not uploaded.

Written by Daniel Kenyon-Smith