Exchange Online

Objective

• Capabilities of Exchange Online• How to migrate to Exchange Online• Sign up for Office 365 BETA

Outlook 2003*, 2007, 2010

Outlook Anywhere Autodiscover Outlook Web

Access Custom OWA URL Entourage 2004*,

2008*, WS edition POP• Windows Mobile• iPhone• Other ActiveSync

devices• BlackBerry

Enterprise Server (add-on)

• Remote device wipe

• Delegates (“send on behalf of”)

• Shared mailboxes (“send as”)

• Server-side forwarding

• Out of Office• WebReady

document viewing• Conference rooms• Resource booking

attendant• Conference room

delegation• Tasks

Personal contacts Shared contacts Personal

distribution groups Shared

distribution groups Global address list Offline address

book

[not available] Forefront Online Protection for Exchange (AS/AV)

Forefront for Exchange (AV)

Route inbound mail on-premises for filtering

Safe senders Blocked senders Forced TLS S/MIME

• GUI for managing some features

• Exchange Personal Archive

• E-Discovery (Multi-Mailbox Search)

• Message Retention (Archive and Delete Policies)

• Message Retention (Legal Hold Policy)

• Compliance Auditing

• Transport rules• Custom

disclaimers

• S/MIME in OWA

• Speech-enablement of directory and auto-attendant

• Conversation view• Ignore/move

conversation• MailTips• Mail aggregation• Shared nickname

cache across OWA and mobile

• Message tracking (user self-service)

• Free-busy interop with on-premise

• Free/busy sharing with other orgs

• Share full calendar detail with other orgs

• Publish calendar for anonymous access

• Dynamic distribution groups

• Restricted distribution groups

• Moderated distribution groups

• Share personal contacts

• Contact info update (user self-service)

• Hosted voicemail (integration with PBX)

• Outlook Voice Access

• “Play on phone” button

• Missed call notifications

• Caller ID• Company auto-

attendant• Self-service PIN

reset• Message waiting

indicator• Voicemail preview• Call answering

rules• Protected

voicemail

• Sign in using AD credentials

• Route outbound mail on-premise for filtering

• Multi-factor auth (smartcard, soft cert)

• Integration with on-premise RMS (for search, pre-licensing)

• RMS transport rules

• Journal decryption of RMS messages

• Outlook Protection Rules

Client Access E-mail,Calendaring

Contacts,Directory UM, Fax Security Compliance/

Archiving

Applications/Developer

Administration

Journal e-mail to external archive

Journal e-mail to EHA

• PST import and export

• Provision users in multiple datacenters

Exchange Web Services (EWS)

EWS Managed API for .NET

SMTP relay

• MAPI/CDO access• Custom code/dlls• Transport agents• Custom OWA

themes, colors, add-ins

• Public folders

Web-based management

Active Directory sync

Bulk user activation

Deleted item recovery

Deleted mailbox recovery• Remote PowerShell

• Role Based Access Controls (RBAC)

• Exchange Management Console (x-premise management)

• Enhanced migration tools

• No OST resync after migration

• Offboarding tools• Support for orgs

>30,000 users

• IMAP• Customize

ActiveSync security policies

• Full OWA support in Firefox/Safari

• IM and presence in OWA

• OWA side-by-side calendar view

• Mobile free/busy lookup

• Mobile reply status

• Mobile SMS sync• Over-the-air

update for Outlook mobile

• OWA login: public/ private radio buttons

• Exchange 2007-style Managed Folders

• Multi-mailbox search export to PST

• GUI for some features

• Hierarchical address book

• GAL segmentation

Exchange Online : BPOS vs. Office 365

Outlook 2003*, 2007, 2010

Outlook Anywhere Autodiscover Outlook Web

Access Custom OWA URL Entourage 2004*,

2008*, WS edition POP• Windows Mobile• iPhone• Other ActiveSync

devices• BlackBerry

Enterprise Server (add-on)

• Remote device wipe

• Delegates (“send on behalf of”)

• Shared mailboxes (“send as”)

• Server-side forwarding

• Out of Office• WebReady

document viewing• Conference rooms• Resource booking

attendant• Conference room

delegation• Tasks

Personal contacts Shared contacts Personal

distribution groups Shared

distribution groups Global address list Offline address

book

[not available] Forefront Online Protection for Exchange (AS/AV)

Forefront for Exchange (AV)

Route inbound mail on-premise for filtering

Safe senders Blocked senders Forced TLS S/MIME

Exchange Online - What’s Not Available?

• Speech-enablement of directory and auto-attendant

• S/MIME in Outlook Web App• S/MIME certificate synchronization

• MAPI/CDO access• Server-side code, .dlls, transport agents• Custom Outlook Web App themes,

logos, add-ins• Public folders

• Hierarchical address book• Global Address List segmentation

• Outlook 2003 support• Outlook Web App login: public/private

buttons• Blackberry application push; advanced

settings

Client Access

Directory

Voice mail

Applications/ Developer

• .pst file import and export• Provisioning of users in multiple data

centers• Multiple on-premise Active Directory

forests • Resource forest topologies

Administration

• Managed folders similar to those in Exchange 2007

• Graphical user interface for creating retention policies

• Multi-mailbox search: export to .pst files• Third-party add-ins for transport rules

Compliance/Archiving

Security

95% of workers have used technology they purchased themselves for work

-IDC 2011

Consumerisation of IT

Calendaring Email Contacts Tasks Company Directory Mobility Offline Access

Anywhere AccessBusiness-Class Messaging

• Rich client access via Outlook • Premium web email experience via OWA• Support for a broad range of mobile devices• Large mailbox sizes (25GB)

PCs PhonesBrowsers

• Seamless mobile access through Exchange ActiveSync® • Support for popular mobile devices• Self-service remote device wipe

Anywhere AccessMobile Messaging

AppleWindows® Phone Palm/HP Nokia

Exchange Online

Outlook Web App (OWA)

Online Exchange UM Architecture

PBX

SIP gateway

SIP gatewayExchange 2010 UM Servers

Active Directory

Contoso Corporation (Office 365 Customer)Internet

SBC SBC

Mediation Server

Fabrikam Corporation (Office 365 Customer)

Exchange Online

Access Edge Server

SIP gateway

A/V Edge Server

Lync Server 2010

Access Edge Server

A/V Edge ServerSIP/TLS/SRTP

SIP/TLS/SRTP

SIP/

TLS/

SRTP

SIP/TLS/SRTP

SIP/

TLS/

SRTP SIP/TLS/SRTP

SIP/T

LS/S

RTP

172.42.23.12

172.42.23.13

Acme Packet Net-Net 4500 in HA config: at

least 1 per datacenter

Edge server pool is operated by Lync Online

• High-accuracy spam filtering• Multiple virus-scanning engines• Included with Exchange Online subscription• Admin center provides advanced policy rules and reporting

External Email

Protection and CompliancePremium Anti-Spam and Antivirus Protection

Exchange Online

Exchange Control Panel (ECP)

Protection and ComplianceNative Exchange Archiving

• Allows easy migration to a managed archive solution• User experience for managing mailbox does not change • Provides a way to centralised data currently stored in .pst files

Protection and ComplianceRetention Policies and Legal Hold

• Custom policies automatically delete or archive content • Integrates with personal archive• Legal hold policy captures user edits and deletions

Protection and ComplianceMulti-Mailbox Search

• Web-based search capabilities can be delegated to specialists• Empowers legal and compliance staff to conduct e-discovery• Search works across on-premise and Exchange Online mailboxes

Exchange Online

Multi-Mailbox Search

Visibility and ControlRole Based Access Control

• Delegate administrative tasks within IT and beyond• Granular control over scope and permissions

Andy RyanSystems Administrator

Organiation Management

All employees

Help Desk

All employees in Europe

Discovery Management

All employees in the U.S.

• Multi-mailbox search• Set legal hold

• Create users• Edit retention

policies• Create transport

rules• Configure UM

• Set legal hold• Edit mobile security

policies• Manage dynamic

distribution lists

• Track messages• View-only recipients

• Mobile device wipe• Manage groups

Donna ScottCompliance Officer

Joanna RybkaTier 1 Support (Europe)

The ToolsExchange Management Console

“Microsoft Online Portal”Exchange Management Shell

Exchange Control Panel

21 | Microsoft Confidential

Exchange Online

Remote PowerShell and EMC

Exchange Online

Migration

Cutover Exchange

31

• Courier-IMAP, Cyrus, Dovecot anything IMAP

Cutover Exchange

32

• <= 1k mailboxes• <= 50k object count• Enable Outlook Anywhere (RPC/HTTP)

on source server

• ~150 to ~250 User Organisation• ~2 Weeks for Planning and Migration

Staged Exchange

33

34

Staged Exchange

35

Staged Exchange

• Uses Directory Sync (DirSync)• Enable Outlook Anywhere

(RPC/HTTP) on source server

Staged Exchange• Up to ~5000 Users• ~4 Weeks for Planning and Migration

Exchange Online

Email Migration Demo

Lync Server

IM/Presence & UM

Lync Federation

IM/PresenceIM/Presence& UM

IM/Presence

OnlineOn-prem

Exchange/SharePoint

Lync Online

Exchange/SharePoint Online

On-premise \ cloud coexistence

Exchange Rich Coexistence

Rich CoexistenceStaged Migration vs. Hybrid feature-set

Feature Staged Rich

Mail routing between on-premise and cloud (recipients on either side)

Mail routing with shared namespace (if desired) - @company.com on both sides

Unified GAL

Free/Busy and calendar sharing cross-premise

Mailtips, messaging tracking, and mailbox search work cross-premise

OWA Redirection cross-premise (single OWA URL for both on-premise and cloud)

Exchange Online Archive

Exchange Management Console used to manage cross-premise relationship & mailbox migrations

Native mailbox move supports both onboarding and offboarding

No outlook reconfiguration or OST resync required after mailbox migration

Online Mailbox Move allows users to start logged into their mailbox while it is being moved to the cloud

Secure Mail ensure emails cross-premise are encrypted, and the internal auth headers are preserved

Centralised mailflow control, ensures that all email routes inbound/outbound via On premise

Exchange Sharing

Secure Transport

Mailbox Move

Hybrid Server Roles2 Required Server Roles:• Office 365 Directory Sync• Exchange Server 2010 SP1 CAS/HUB/MBX*

Exchange Server 2010 SP1 CAS/HUB

Unified Global Address ListOffice 365 Directory Sync

Exchange SharingADFS v2

Single Sign On

1 Optional Server Role:• Active Directory Federation Services

Mailbox Move

Secure Transport

* MBX role is required for legacy Public Folder based Free/Busy support

MX for service.contoso.com = Exchange Online

DC

On Premises AD Forest

Exchange 2003 FE/BE Server

MX for contoso.com = On Premises

External Recipient(joe@foo.com)

Internet

Exchange Online

Email is forwarded to ben@service.contoso.com

Shared SMTP Namespace

Email from joe@foo.com to ben@contoso.com

Exchange Deployment Assistant

http://technet.microsoft.com/exdeploy2010

• Currently supports hybrid configuration with Exchange Server 2003

• Exchange Server 2007 content in technical review for GA

• Exchange Server 2010 SP1 support before GA

Hybrid Exchange Migration• Administrator uses EMC on-premise tool to manage mailbox

moves and other administrative cross-premise tasks– Note: There is no requirement to move mailboxes on-premise to an

Exchange Server 2010 server prior to moving them to the cloud

• Dirsync keeps GAL in sync as mailboxes are moved

Exchange Server

2007

Exchange Server

2010 SP1

Exchange Server 2010 SP1 CAS

Exchange

Server 2003

Mailbox migration

Take Away• Community Website: Blogs and Forums• Office 365 Deployment Guide

– http://community.office365.com/modg/default.aspx

• Office 365 Deployment Tool– http://community.office365.com/en-us/f/183/p/2285/8155.aspx

• Exchange Deployment Assistant– http://

technet.microsoft.com/en-gb/exdeploy2010/default.aspx#DeploymentCheckList/gg507575/coexist

• Service Descriptions• And of course Sign Up for the BETA..!

© 2008 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Thank you..!