microsoft exchange server aministrator work

Microsoft Exchange Server 2010 Administrative Work

Copyright©2013hrinc.com.kh,Inc.

WITH AN INTRODUCTION BY Mr. EK Reatha

Wednesday,May22nd,2013

HRINC (Cambodia) Co., Ltd. Address: House #10, Oknha Peich Avenue (Street 242), Sangkat Chaktomuk, Khan Daun Penh, Phnom Penh, Cambodia

Mailing Address: GPO Box 1560, Phnom Penh, Cambodia Tel: +855 (23) 211437 Email: [email protected] Website: www.hrinc.com.kh

Contents Organization Configuration ............................................................................................................................ 4

Mailbox ......................................................................................................................................................... 6

Database Management ............................................................................................................................... 6

Address Lists .............................................................................................................................................. 7

Offline Address Book .............................................................................................................................. 11

Retention and Archive ............................................................................................................................. 16

ClientAccess .............................................................................................................................................. 25

Outlook Web App Mailbox Policy .......................................................................................................... 26

Exchange ActiveSync Mailbox Policy .................................................................................................... 27

HubTransport .......................................................................................................................................... 28

Send Connectors ...................................................................................................................................... 29

Accepted Domain ..................................................................................................................................... 30

E-mail Address Policy ............................................................................................................................. 31

Transport Rules ........................................................................................................................................ 33

Journal Rules ............................................................................................................................................ 38

Server Configuration ..................................................................................................................................... 45

ClientAccess .............................................................................................................................................. 47

Enable Outlook Anywhere ....................................................................................................................... 47

Outlook Web App .................................................................................................................................... 48

Offline Address book distribution ........................................................................................................... 52

Recipient Configuration ................................................................................................................................ 54

Mailbox ....................................................................................................................................................... 58

Type of mailbox ....................................................................................................................................... 58

Configure group of room mailbox ........................................................................................................... 60

User mailbox properties ........................................................................................................................... 61

User mailbox policy ................................................................................................................................. 90

Upload picture to outlook ...................................................................................................................... 106

Recall or replace an email message that you sent .................................................................................. 109

Import PST file to Exchange server 2010 .............................................................................................. 111

Auto-Signature ....................................................................................................................................... 121

Active Directory Right Management Service ........................................................................................ 125

Apply Right Management Policy by using Transport Rules ................................................................. 126



TypeofDistributionGroup .................................................................................................................. 129

Distribution Group ................................................................................................................................. 129

Dynamic Distribution Group ................................................................................................................. 131

Toolbox.......................................................................................................................................................... 133

ConfigurationManagementTools ...................................................................................................... 134

MailFlowTools ....................................................................................................................................... 134

PerformanceTools ................................................................................................................................ 135

UnifiedMessagingTools ....................................................................................................................... 135

ConfigurationManagementTools ...................................................................................................... 136

Public Folder Management console ....................................................................................................... 136

Best practice analyzer ............................................................................................................................ 145

Mailflowtool .......................................................................................................................................... 149

Mail flow troubleshooter ........................................................................................................................ 149

Message tracking ................................................................................................................................... 150

Queue Viewer ........................................................................................................................................ 152

Tracking log explorer ............................................................................................................................. 152

Performancetool ................................................................................................................................... 153

Performance monitor ............................................................................................................................. 153

Performance Troubleshooter .................................................................................................................. 155



OrganizationConfigurationUsetheOrganizationConfigurationnodetomanagefederationsandorganizationrelationship.Youcanalsomodifytheconfigurationdomaincontrollerfromthisnode.

TheOrganizationConfigurationnodecontainsthefollowingsub‐nodes:

MailboxUsethisnodetomanageMailboxserverrolesettingsthatapplytoyourentire

organization.Youcanmaintainexistingorcreatenewaddresslists,managedcustomfolders,messagingrecordsmanagement(MRM)mailboxpolicies,andofflineaddressbooks(OABs).

ClientAccessUsethisnodetomanageClientAccessserverrolesettingsthatappliestoyourentireorganization.YoucanmaintainexistingorcreatenewExchangeActiveSyncmailboxpoliciesandOutlookWebAppmailboxpolicies.

HubTransportUsethisnodetomanageHubTransportserverrolesettingsthatappliestoyourentireorganization.Youcanmaintainexistingorcreatenewremotedomains,accepteddomains,e‐mailaddresspolicies,transportrules,journalrules,Sendconnector,globalsettings,andEdgesubscriptions.

UnifiedMessagingUsethisnodetomanageUnifiedMessaging(UM)serverrolesettingsthatapplytoyourentireorganization.YoucanmaintainexistingorcreatenewUMdialplans,UMIPgateways,UMmailboxpolices,andUMAutoAttendants.

WhenyouselecttheOrganizationConfigurationnode,thefollowingactionsareavailableeitherbyright‐clickingOrganizationConfigurationorbyusingtheactionpane.Term DefinitionModifyConfigurationDomainController

ClickModifyConfigurationDomainControllertoselectthedomaincontrollerthatyouwanttouseforserverandorganizationconfiguration.Formoreinformation.

NewFederationTrust

UsetheNewFederationTrustwizardtocreateanewfederationtrust.AfederationtrustestablishestrustwithWindowsLiveasaprerequisiteforenablingsharingofcalendarfree/busyinformationandcontactsbetweentwoExchangeorganizations,orallowinguserstosharewithexternalrecipients.Formoreinformation.

ManageFederation UsetheManageFederationwizardtoconfigurethefederationtrustandfederatedorganizationidentifier.ThefederatedorganizationidentifierspecifiestheaccepteddomainsinanExchangeServerorganizationthatareavailableforfederation.Onlyuserthathase‐mailaddresseswithdomainsconfiguredwiththefederatedorganizationidentifiercanparticipateinfederatedsharing.Thefirstdomainspecifiedwiththeorganizationidentifieriscalledtheaccountnamespace.Additionaldomainscansubsequentlybeaddedtotheorganizationidentifier.

Note:



Thisactionisonlyavailablewhenafederationtrustisselectedintheresultpane.Formoreinformation.

NewOrganizationRelationship

UsetheNewOrganizationRelationshipwizardtodefineapartnershipforfederatedsharingwithanexternalExchangeorganization.ThepartnershipisdefinedbyspecifyingthedomainsconfiguredforfederatedsharingintheexternalExchangeorganization.Featurescanbeenabledforanorganizationrelationship,allowingyoutocontroltheinformationthatissharedwiththeexternalorganization.

ExportList ClickExportListtoopentheExportListdialogbox.Youcanusethisdialogboxtosavethelistofrecipientsintheresultpantoatextfile.ForinstructionsabouthowtousetheExportListfeature.

View ClickViewintheactionpanetomodifyhowobjectsaredisplayedintheconsoleandtorecordandviewtheExchangeManagementShellcommandsthatrunintheconsole.Thefollowingoptionsmayvarydependingonyourlocationintheconsoletree:

ViewExchangeManagementShellCommandLogClickViewExchangeManagementShellCommandLogtoviewtheShellCommandLogdialogbox.TheCommandLogallowsyoutoviewalltheShellcommandsthathavebeenexecutedintheconsole.Formoreinformation.

Add/RemoveColumnsClickAdd/RemoveColumnstoselectwhichcolumnsyouwanttodisplayintheresultpaneandtochangetheorder.Theavailablecolumnsdependonthenodethatyouselect.TheMMCautomaticallysavesyoursettings.Toreverttothedefaultcolumnview,clickRestoreDefaultsintheAdd/RemoveColumnsdialogbox.Formoreinformation.

VisualEffects ClickVisualEffectstosetthevisualeffectstobeneveronor

automatic.UsethevisualeffectssettingtoconfigurehowExchangewizardsaredisplayed.Ifyourconnectionisslowwhenrunningwizards,youcanincreaseperformancebyturningoffvisualeffects.UsetheAutomaticsettingtohavetheconsoledetectifyoursystemshouldhavevisualeffectsturnedonoroff.

SaveCurrentFilterasDefaultClickSaveCurrentFilterasDefaulttomaketheexistingfilterthedefaultfilterfortheserverslistedintheresultpan.

CustomizeClickCustomizetoselecttheconsolecomponentsandsnap‐instodisplayorhide.Thesesettingsapplytotheentireconsole.

Refresh ClickRefreshtorefreshtheinformationdisplayedintheresultpane.



MailboxUsethisnodetomanageMailboxserverrolesettingsthatapplytoyourentireorganization.Youcanmaintainexistingorcreatenewaddresslists,managedcustomfolders,messagingrecordsmanagement(MRM)mailboxpolicies,andofflineaddressbooks(OABs).

DatabaseManagementExchangeServer2010isavailableasStandardEditionandEnterpriseEdition.TheStandardEditionissupportedonlyfivedatabases.However;TheEnterpriseEditioncansupportuptoone‐hundredmailboxdatabases.

CreateDatabaseYoucancreateMailboxDatabaseusingeithertheEMCortheEMS.TheproceduretocreateMailboxDatabaseinEMCisasthefollowing:

- Intheconsoletree,clickMailboxunderOrganizationConfiguration.- IntheActionpane,clickNewMailboxDatabase.- Ontheintroductionpageofthenewmailboxdatabasewizard,typethenameforthenew

databaseinthemailboxdatabasenamebox.

ChangeDatabasePath



Bydefaultafteryoucreatenewmailboxdatabaseitspathislocatedin“C:\ProgramFiles\Microsoft\ExchangeServer\V14\Mailbox”.Bytheway,youcanchangethemailboxdatabasepathtothepartitionwhereyouarepreferredeitherinlocaldriveorexternalharddisk.YoucanchangemailboxdatabasepathbyusingtheNewMailboxWizardfromExchangeManagementConsole(EMC).ToruntheNew‐MailboxWizard,performthefollowinggeneralsteps:

- OpentheEMCandnavigatetothemailboxsub‐nodeinOrganizationConfigurationnode.- InResultPane,Rightclickonthemailboxdatabasewhichyouwanttochangepath.- InDatabasefilepath,pastethenewpath.

AddressListsAnaddresslistisacollectionofrecipientandotherActiveDirectoryobjects.Eachaddresslistcancontainoneormoretypesofobjects(forexample,users,contacts,groups,publicfolders,androomandequipmentresources).Youcanuseaddressliststoorganizerecipientsandresources,makingiteasiertofindtherecipientsandresourcesyouwant.Addresslistsareupdateddynamically.Therefore,whennewrecipientsareaddedtoyourorganization,they'reautomaticallyaddedtotheappropriateaddresslists.



CreateAddressListYoucancreatetheaddresslistbyusingExchangeManagementConsole.InOrganizationConfigurationnodeselectonMailboxsub‐node

- RightclickonResultpane,ClickonNewAddressList…- IntheNewAddressListwizardpage,typenameofyourAddressListinnamebox.- TypethenameinDisplayNamebox.

- InFilterSettings,BrowsetotheOUinActiveDirectorywhereyouwanttoapplytheaddress

listfor.ItmeansthattheentireuserinthisOUwillbedisplayedmailaddressinthisaddresslistgroup.



- Astheresultinoutlook2010,whenIcreateanewmail,ifIselectAddressBookandchoosethecurrentlynewAddressListthatwejustcreated.YouwillseetheaddresslistinaddressbookwillretrieveonlythemailaddressinthatOU.

HideAddressListBydefaulttheaddresslistisvisibletoeveryonewhoisintheorganizationofyourExchangeServer2010.Butyoucanhidebyassigningthepermissiontowhomyoudonotwantthemtoseethespecificaddresslist.ByusingADSIEditinActiveDirectoryyoucanconnecttotheExchangeconfigurationserviceandassignthepermissionbyallowordeny.Youcandoitbyfollowingthebelowscenario:

- InAD,clickStart>AdministrativeTools>ADSIEdit- RightclickonADSIEdit,in“Selectawell‐knownNamingContext”optionof“Connection

Setting”youneedtoscrolldownandthenselect“Configuration”- Expand:Configuration>CN=Configuration,DC=…,DC=..>CN=Services>CN=Microsoft

Exchange>CN=Global>CN=AddressListContainer>Rightclickonthecontainerthatyouwanttohideandthenselect“Properties”



- Forthisscenarioinordertohidetheaddresslistfromtheotherinyourorganization,youcanassignthepermissiontodemyforauthenticationUsersas“Read=Deny”and“Openaddresslist=Deny”

- Inoutlook2010,theauthenticationuserinyourActiveDirectorywillbenotabletoseeyour

addresslistthatyoujustdenyfromthem.



OfflineAddressBookTheofflineaddress‐book(OAB)isacopyoftheExchangeaddressbookthattheusercandownloadviatheirOutlookclient.Itismainlyusedtoallowaccesstotheaddressbookwhentheuserisdisconnectedfromthenetworkorisincachedmode.

CreateOfflineAddressBookTheofflineaddress‐book(OAB)isacopyoftheExchangeaddressbookthattheusercandownloadviatheirOutlookclient.Itismainlyusedtoallowaccesstotheaddressbookwhentheuserisdisconnectedfromthenetworkorisincachedmode.

- InConsoleTree,clickmailboxsub‐nodeinOrganizationConfigurationnode.- InActionpane,ClickNewOfflineAddressBook.- Typethenameinnamebox.

- InDistributionPoints,addtheOAB(DefaultWebSite).

- SetthenewofflineaddressbookasDefault.



- RemovethedefaultOfflineaddressbookExchange2010.

- ApplytheOfflineaddressbooktothemailboxdatabase.

- SelectthescheduletoupdatetheofflineaddressbookofyourExchangeServer2010.



- UpdatingthedatabaseifyouhavesomethingchangeinyourMailboxDatabase.

- InExchangeServer2010,gotorunandthentype“services.msc”inordertorestartMicrosoft

ExchangeFileDistribution.



- Finally,typeiisresetincommandprompt

- Openyouroutlook2010andthenun‐plugyournetworkcable,youwillnotbeabletoretrieve

anye‐mailaddresslistfromyourExchangeServer,becauseyouroutlook2010isdisconnectfromExchangeServer.

- Openyouroutlook2010,clickonFile>Infor>AccountSettings>DownloadAddressBook…



- Backagain,youcandisconnectyournetworkcable,butyoustillcanretrieveyourexchange

mailaddress.



RetentionandArchive

DefaultRetentionandArchiveAsadministrator’s,wecancontrolthelengthoftimethatusersareallowedtokeepitemsintheirprimarymailbox.ThisisanextensionoftheManagementFolder’sfeaturefromExchange2007.In2007however,usershadtoplaceemailsincertainfolders,beitinbox,oracreatedfolder,sothatthepolicieswereenactedproperly.2010usestheconceptofRetentionPolicy’saswellasRetentionPolicyTag’stoenforcethesesettings.

RetentionPolicyTagsareclassificationsthataresetforafolderoratypeofitem.ForinstanceyoucancreateaRetentionPolicyTagfortheinbox,andsetittoarchiveanythingover90days.YoucouldalsosetaRetentionPolicyTagforanycalendaritemover180daystodeleteandnotarchive.

Youwouldthengroupthistag’sintoaRetentionPolicy,whichwouldthenbeappliedtoamailbox.

Bydefault,Exchange2010comeswithtworetentionpolicies,DefaultArchivePolicy,andArbitration.

TheDefaultArchivePolicycomeswithpredefinedtags:

- Personalnevermovetoarchive- Personal1yearmovetoarchive- Personal5yearmovetoarchive- Default2yearmovetoarchive

Youcancheckthesesettingsbyenteringthefollowingpowershellcommand:

Get‐RetentionPolicy*default*|fl



RetentionpolicyformovingtoarchiveYoucancreatetheRetentionPolicyTagsandpoliciesbyusingExchangeManagementConsole(EMC).

RetentionPolicyTags:

- SelectmailboxunderOrganizationConfigurationnode- Select“RetentionPolicyTags”- RightclickonresultpaneandthenclickNewRetentionPolicytags- Naming“TagName”- Select“TagType”



RetentionPolicies:

- SelectmailboxunderOrganizationConfigurationnode- Select“RetentionPolicies”- RightclickonresultpaneandthenclickNewRetentionPolicy- Namingthepolicy- AddRetentiontagtoRetentionPolicy

- SelectMailboxestowhichthisretentionpolicyapplies.Oryoucanalsoapplytheretention

policytomailboxesatalatertime.



- OpenExchangeManagementShell(EMS).Typecmdlet“Get‐Mailbox|Start‐

ManageFolderAssistant”toforcethesetting.

ApplyRetentionPolicyTagtotheselectingMessage:

- YouseetheAssignPolicyisaddedtotheMicrosoftOutlookandthenyoucanselectanyretentionpolicytagwhateveryouwant.Youseeonlypolicytagwhichappliedtoyourmailboxes.

ApplyRetentionPolicyTagtoallmessages:

- OpenMicrosoftOutlook- SelectAccountSettinginNavigationPane- Click“SetFolderPolicy”inAssignPolicy



- Click“Policy”- ChoosetheRetentionPolicytag

- Youseeallmessagesinyouroutlookareassignedautomaticallytotheretentionpolicytag.



Retentionpolicyfordeleting

RetentionpolicyformanuallydeleteTheretentionpolicyisnotonlyallowingyoutomovetheoldmessagestoarchivebutyoucansetthepolicytodeleteitforpermanentlyorrecoverabledelete.Thisscenariowillguideyouthesteptoassignretentionpolicyforpermanentlydeletemessages.RetentionPolicyTag:

- OpenMicrosoftExchangeManagementConsole(EMC)andthenselectMailboxinOrganizationConfiguration.

- Select“RetentionPolicyTags”- RightclickinResultPaneandthencreateRetentionPolicyTags



RetentionPolicies:

- Under“Mailbox”inOrganizationConfigurationnode- Select“RetentionPolicies”tapeandthenrightclickontheresultpane- CreateNewRetentionPolicy- Assigntagstothepolicy

- OpenMicrosoftExchangeManagementShell(EMS).Type“Get‐Mailbox|Start‐

ManageFolderAssistant”toforceupdate.

- Inoutlook2010byselectingon“AssignPolicy”,youcanseethenewretentionpolicytagwhich

isusingforpermanentlydeletemessagesfromyououtlook.

- Afterweappliedtheretentionpolicytothee‐mailalready,youwillseethemessagedisplayon

theretentionpolicymessagetotellyouabouttheactionofthispolicyonyoure‐mail.



RetentionpolicyfordeletingonspecificitemThisscenarioyouwillseethewaytodeletealle‐mailinJunkE‐mailpermanentlybyusingretentionpolicy.YoucanuseMicrosoftExchangeManagementConsoletoperformthis.

- Under“Mailbox”inOrganizationConfigurationnode,Selecton“RetentionPolicy”- RightClickonresultpaneandthencreatenewretentionpolicy- NamethenewRetentionpolicy- In“TagType”,Select“JunkE‐mail”,(Itmeansthatthisnewretentionpolicywillapplyonlyto

theJunkE‐mailiteminyouroutlook.)- Assigntheageforretentionpolicy- Select“Actiontotakewhentheagelimitisreached”

- Select“RetentionPolicies”Tapeandthenrightclickonresultpane- Selecttheexist“Retentionpolicy”ifyouwanttocombineretentionpolicy- Addthenewretentionpolicytag



- OpenMicrosoftExchangeManagementShell(EMS).Type“Get‐Mailbox|Start‐

ManagedFolderAssistant”

- OpenMicrosoftOutlook,allthemessagesinJunkE‐mailisappliedbyretentionpolicyto

permanentlydelete.

ClientAccess



OutlookWebAppMailboxPolicyOWA(OutlookWebApp)canallowyoutoreadyoure‐mailbyusingwebbrowser.Bytheway,ExchangeServer2010hasthefeaturetorestrictontheOWAaccessbyblockingonanyextensions.

BlockMP3inOWAInthisscenario–youneedtoblock.mp3inOWAthatwillberestrictedtoanye‐mailaccounttoplaymusicwith.mp3extensiononOWA.YoucanuseExchangeManagementConsoletoperformthistask.

- In“”ClientAccess”under“OrganizationConfiguration”,select“OutlookWebAppMailboxPolicies”

- Rightclickontheresultpane,CreateNewOutlookWebAppMailboxPolicy

- Rightclick“BlockMP3”>Propertise>PublicComputerfileAccess>Block>Removeany

extensionandthenkeeponly.mp3

- In“Mailbox”Under“RecipientConfigurationnode”- RightclickonmailboxwhichyouwanttoapplytheOutlookWebAppMailboxPoliciesandthe

thechooseperpertise.- Select“MailboxFeatures”,Select“OutlookWebApp”>Propertise- InOutlookWebAppPropertise,browsetotheOutlookWebAppMailboxPolicies.



ExchangeActiveSyncMailboxPolicy

UnderstandingExchangeActiveSyncExchangeActiveSyncisthefeaturethatallowsyoutoconnectyourmobilephonetocommunicationwithExchangeServer.Formoredetailyoucangotobellowlink:

http://technet.microsoft.com/en‐us/library/bb123484%28v=exchg.141%29.aspxDenyBrowserinActiveSync ThisscenarioyoucandenybrowserinActiveSync:

- In“ClientAccess”under“OrganizationConfiguration”,CreatenewExchangeActiveSyncMailboxPolicies

- Doubleclickandgoto“DeviceApplications”- Uncheckon“Allowbrowser”



- ClickonMailboxunderRecipientConfigurationnodeandthenapply“ExchangeActiveSync

MailboxPolicies”tothemailboxuser.

HubTransportDeployedinsideyourActiveDirectoryforest,theHubTransportserverrolehandlesallmailflowinsidetheorganization,appliestransportrules,appliesjournalingpolicies,anddeliversmessagestoarecipient'smailbox.MessagesthataresenttotheInternetarerelayedbytheHubTransportservertotheEdgeTransportserverrolethat'sdeployedintheperimeternetwork.MessagesthatarereceivedfromtheInternetareprocessedbytheEdgeTransportserverbeforethey'rerelayedtotheHubTransportserver.Ifyoudon'thaveanEdgeTransportserver,youcanconfiguretheHubTransportservertorelayInternetmessagesdirectlyorutilizeathird‐partysmarthost.YoucanalsoinstallandconfiguretheEdgeTransportserveragentsontheHubTransportservertoprovideanti‐spamandantivirusprotectioninsidetheorganization,althoughthisisn'trecommended.



YoucaninstalltheHubTransportserverroleonthesamehardwarewithanyotherinternalserverroleoronaserverthat'sdedicatedtotheHubTransportserverrole.YoumustdeployaHubTransportserverroleineachActiveDirectorysitethatcontainsaMailboxserverrole.DeployingmorethanoneHubTransportserverpersiteprovidesredundancy.WhenyouinstallmorethanoneHubTransportserverinanActiveDirectorysite,theconnectionsaredistributed.

SendConnectorsSendconnectorsareconfiguredoncomputersthatarerunningMicrosoftExchangeServer2010andthathavetheHubTransportserverroleorEdgeTransportserverroleinstalled.TheSendConnectorrepresentsalogicalgatewaythroughwhichoutboundmessagesaresent.TocreatetheSendConnectorinExchangeServer2010:‐In“HubTransport”underOrganizationConfigurationnode‐Select“SendConnectors”,Rightclickonresultpane‐CreateNewSendConnector

- Select“Network”,Choose“UsedomainnameSystem(DNS)“MX”recordstoroutemail

automatically”

- Click“SourceServer”andthenaddyourexchangeServer



AcceptedDomainAnaccepteddomainisanySMTPnamespaceforwhichaMicrosoftExchangeServer2010organizationsendsorreceivesemail.AccepteddomainsincludethosedomainsforwhichtheExchangeorganizationisauthoritative.AnExchangeorganizationisauthoritativewhenithandlesmaildeliveryforrecipientsintheaccepteddomain.AccepteddomainsalsoincludedomainsforwhichtheExchangeorganizationreceivesmailandthenrelaysittoanemailserverthat'soutsidetheorganizationfordeliverytotherecipient.

Note:Youneedtoaccepteddomainwhileyouhavemultipledomainsinyourexchangeserver2010.Createmultipledomains:

- OpenMicrosoftExchange2010ManagementConsole- Select“HubTransport”underOrganizationConfigurationnode- Select“AcceptedDomain”- Rightclickonresultpane,andthenCreateNewAcceptedDomains- NamingtheNewAcceptedDomain- In“AcceptedDomain”Option,givethenewdomainthatyouneed



- HereisMicrosoftExchangeServer2010hastwodifferentdomains.

E‐mailAddressPolicyAccepteddomainandE‐mailaddresspoliciesbothofthemarenearlyworkingaltogetherinExchangeServer2010.StepbysteptoconfigureE‐mailAddressPolicies:

- Select“HubTransport”underOrganizationConfiguration- Select“E‐mailAddressPolicies”- Inresultpane,rightclickandCreateNewE‐mailAddressPolicy- Namingthepolicy- Selecttherecipientcontainerwhereyouwanttoapplythefilter



- SelecttheSMPTE‐Mailaddress



- HerearetheE‐mailaddresspoliciesthatapplytodifferentAcceptedDomaininExchangeServer2010

TransportRulesInMicrosoftExchangeServer2010,transportrulesallowyoutoapplymessagingpoliciestomessagesinthetransportpipeline.Actionssuchasredirectingamessageoraddingrecipients,rights‐protectingmessages,andrejectingorsilentlydeletingamessagecanbetakenonmessagesthatmatchtheconditionsandnoneoftheexceptionsdefinedintherule.

RejectMessagefromExternal

CreatemailcontactYoucancreatemailcontactbyfollowingstep:

- Select“MailContact”underRecipientConfiguration- RightClickontheresultpane,CreateNewMailcontact- Addresse‐mailcontacttotheexternale‐mail



CreateandapplyHubTransportRuleTocreatethetransportruleinExchangeServer2010,youcancreateitbyusingExchangeManagementConsole(EMC).

- Select“HubTransport”under“OrganizationConfiguration”- Select“TransportRules”,rightclickontheresultpane- CreateNewTransportRules- Namingthenewrule

- InStep1of“Condition”,tick“fromPeopleandSenttopeople”- InStep2of“Condition”,applyruletomessagesfromandsendto

- InStep1of“Actions”,Select“Deletethemessagewithoutnotifyinganyone”- InStep2of“Action”,Applyruletomessagesfromandsentto



- ThenewTransportRuleiscreatedandapplied

- Thisnewe‐mailmessagewillbedeletewithoutnotifyingtothesender,becausethissenderis

meettothetransportrulepolicyinexchangeserver2010.



Blocksendse‐mailfrominternaltointernalThewaytoblocke‐mailfrominternaltointernal,youcanusingtransportruleinHubTransporttoperformitaswell.Youcanfollowthefollowingstep:

- InStep1of“Condition”,tickfrompeopleandsenttopeople- InStep2of“Condition”,Applyruletomessagesfrom…andsentto…

- Instep1of“Action”,ticksendrejectionmessagetosenderwithenhancedstatuscode- Instep2of“Action”,tickApplyruletomessagefrom…andsentto…



- Theruleiscreatedandapplied.

- Youcanseethewarningmessagesendbacktoyouwhileyourmailboxisappliedtotherule

thatdonotallowyoutosende‐mailthespecificmailboxthatrestrictyouinthetransportrule.



Blocksendse‐mailfrominternaltoexternalToblocke‐mailfrominternaltoexternal,youstillcouldapplyitbyusingtransportruleinexchangeserver2010.Thisscenarioyoucancompleteitbythisstep:

- SelectHubTransportunderOrganizationConfigurationnode- Createrule- Completethreestep(Condition,ActionandException)

- Hereisthewarningmessagebacktothesenderwhileshe/hetriestosende‐mailtothe

specificmailaccountthathasrestricted.

JournalRulesJournalingcanhelpyourorganizationrespondtolegal,regulatory,andorganizationalcompliancerequirementsbyrecordinginboundandoutbounde‐mailcommunications.Whenplanningformessagingretentionandcompliance,it'simportanttounderstandjournaling,howitfitsinyourorganization'scompliancepolicies,andhowMicrosoftExchangeServer2010helpsyousecurejournaledmessages.



Createandapplyjournalruletosinglemailbox

ApplyforallmessagesforsinglemailboxCreatejournalrule:

- UnderOrganizationConfigurationnode,selectHubTransportsub‐node- Rightclickonresultpane,CreateNewJournalRule- Namingtherule- Set“SendJournalreportstoe‐mailaddress”(Themailboxthatwillreceiveacopyofreport)- Set“Journalmessagesforrecipient”

Testingtosendmailfrominternaltointernale‐mailaddress:

- OpenMicrosoftOutlookandtesttosende‐mailbyusinge‐mailaddressthattheexchangeadministratorappliestheruletotrackingrecord.

- Hereisane‐mailthatthejournalrulereportedthee‐mailmessagetothetrackingmail.



- Hereisthesamemessagethattherecipientgotfromthesender

Testingtosende‐mailinternaltoexternal:

- OpenMicrosoftOutlookandthentestingtosende‐mailfromthesenderwhowasassignedthejournalruletotrackingon.

- Hereisane‐mailthatyoureceivedfromexchangeserver



- Themessagewasreportedtothetrackinge‐mailaccountbyjournalruleinMicrosoftExchangeServer2010.

ApplyforinternalmessageonlyCreatejournalrule:

- Select“HubTransport”underOrganizationConfigurationnode- RightClickontheresultpane,CreateNewJournalRule- NamingtheNewRule- Sete‐mailaddressin“SendJournalreportstoe‐mailaddress”- Sete‐mailaddressin“Journalmessagesforrecipient”

Applyforexternalmessagewithanexternalsenderorrecipient



Applytransportrulefortrackingonexternale‐mailpurpose:

- OpenMicrosoftExchangeManagementShell(EMS).- In“HubTransport”underOrganizationConfigurationnode,Rightclickonresultpane- CreateNewTransportRule- In“SendJournalreportstoe‐mailaddress”,browsethee‐mailaddressofpersonwhomgeta

copyofmessagereport- In“Journalmessageswithanexternalsenderorrecipient”,browsetothee‐mailaddressthat

willmakeatrackingon.

- Sendinge‐mailfromthee‐mailaccountwhoistrackingon.



- Acopyofe‐mailissenttothee‐mailaccountwhomcontrolthetracking

- Theoutsiderecipientthatgettingane‐mailfromexchange.

CreateandapplyjournalruletomailboxdatabaseInthepreviousstepwehavediscussalreadyaboutthejournalrulethatapplytothesinglemailboxaccount.Inthisscenario,youwillseehowtoapplyjournalruletothemailboxdatabasethatwillapplytoallmailboxaccountindatabase.Followingthissteptocompletethetask:

- OpenExchangeManagementConsole- Select“Mailbox”underOrganizationConfiguration- Select“DatabaseManagement”- Inresultpane,selectthedatabasethatyouwanttoapplyjournalrule- RightClickthedatabase- Propertise- In“Maintenance”tape,Tick“JournalRecipient”andthenbrowsetothemailboxthatyouwant

totrackingon.



- OpenExchangeManagementShell(EMS).Andthentype“Get‐MailboxDatabase–Identify

“Database_Name”|Get‐Mailbox”toviewalltherecipientmailboxesthatapplythejournalrule.

- Sendinge‐mailfrommailboxaccountthatwastrackedbyjournalrule.

- Sendinge‐mailfrommailboxaccountthatwastrackedbyjournalrule.



- Thesearethemessagesthatgotacopyfromthejournalrule

ServerConfigurationThenodesthatappearunderServerConfigurationshowonlytheMicrosoftExchangeserversthathaveaspecificserverroleinstalled.TheServerConfigurationnodecontainsthefollowingsub‐nodes:

MailboxUsethisnodetomanagethefeaturesofMailboxservers,includingviewingthepropertiesofdatabasecopies.



ClientAccessUsethisnodetomanagethefeaturesofClientAccessservers,includingPOP3andIMAP4,ExchangeActiveSync,OutlookWebApp,theExchangeControlPanel,andofflineaddressbook(OAB)distribution.

HubTransportUsethisnodetomanagethefeaturesofHubTransportserverandreceiveconnectors.

UnifiedMessagingUsethisnodetomanagethefeaturesofUnifiedMessaging(UM)servers,includingenablinganddisablingUM.

WhenyouselecttheServerConfigurationnode,thefollowingactionsareavailableeitherbyright‐clickingServerConfigurationorbyusingtheactionpane.

ModifyConfigurationDomainController

ClickModifyConfigurationDomainControllertoselectthedomaincontrollerthatyouwanttouseforserverandorganizationconfiguration.

ExportList

ClickExportListtoopentheExportListdialogbox.Youcanusethisdialogboxtosavethelistofrecipientsintheresultpanetoatextfile.

View

ClickViewintheactionpanetomodifyhowobjectsaredisplayedintheconsoleandtorecordandviewtheExchangeManagementShellcommandsthatrunintheconsole.Thefollowingoptionsmayvarydependingonyourlocationintheconsoletree:

ViewExchangeManagementShellCommandLogClickViewExchangeManagementShellCommandLogtoviewtheShellCommandLogdialogbox.TheCommandLogallowsyoutoviewalltheShellcommandsthathavebeenexecutedintheconsole.Formoreinformation.

Add/RemoveColumnsClickAdd/RemoveColumnstoselectwhichcolumnsyouwanttodisplayintheresultpaneandtochangetheorder.Theavailablecolumnsdependonthenodethatyouselect.TheMMCautomaticallysavesyoursettings.Toreverttothedefaultcolumnview,clickRestoreDefaultsintheAdd/RemoveColumnsdialogbox.

VisualEffectsClickVisualEffectstosetthevisualeffectstobeneveronorautomatic.UsethevisualeffectssettingtoconfigurehowExchangewizardsaredisplayed.Ifyourconnectionisslowwhenrunningwizards,youcanincreaseperformancebyturningoffvisualeffects.UsetheAutomaticsettingtohavetheconsoledetectifyoursystemshouldhavevisualeffectsturnedonoroff.

SaveCurrentFilterasDefaultClickSaveCurrentFilterasDefaulttomaketheexistingfilterthedefaultfilterfortheserverslistedintheresultpane.




Refresh

ClickRefreshtorefreshtheinformationdisplayedintheresultpane.

ClientAccessUsethisnodetomanagethefeaturesofClientAccessservers,includingPOP3andIMAP4,ExchangeActiveSync,OutlookWebApp,theExchangeControlPanel,andofflineaddressbook(OAB)distribution.

EnableOutlookAnywhereInMicrosoftExchangeServer2010,theOutlookAnywherefeature,formerlyknownasRPCoverHTTP,letsclientsthatuseMicrosoftOfficeOutlook2010,Outlook2007,orOutlook2003connecttotheirExchangeserversfromoutsidethecorporatenetworkorovertheInternetusingtheRPCoverHTTPWindowsnetworkingcomponent.ToenableOutlookAnywhereinExchangeServer2010:

- OpenExchangeManagementConsole(EMC)- Select“ClientAccess”under“ServerConfigurationnode”- InResultPane,SelectyourExchangeServerandRightClick>EnableOutlookAnywhere

- Thewizardpageisdisplayed,givetheExternalhostnameforyourOutlookAnywhere- ChooseClientauthenticationmethod



OutlookWebAppBydefault,whenyouinstalltheClientAccessserverroleonacomputerthat'srunningMicrosoftExchangeServer2010,youenableOutlookWebApp.MicrosoftOfficeOutlookWebAppletsyouaccessyourExchangemailboxfromalmostanyWebbrowser.

InternalandExternalURLYoucanenabletheinternalandexternaladdressofyourOutlookWebApp(OWA)accordingtoyourprefer.YoucangivethedifferentURLforinternalandexternaladdressofyourOWA.FollowthebelowsteptoconfiguretheinternalandexternalURLinyourExchangeServer2010:

- OpenExchangeManagementConsole(EMC)- SelectClientAccessunder“ServerConfigurationnode”- InResultpane,selectyourExchangeServerandrightclick>properties- Under“General”tape,assigntheInternalURLandExternalURL



AuthenticationonOutlookWebAppOutlookWebApp(OWA)isthewebmailinterfaceforExchangeServer2010.MostofyouwillalreadybefamiliarwiththeacronymOWAfrompreviousversionsofExchangeServerwherewebmailwasnamedOutlookWebAccess.

OutlookWebAppishostedontheClientAccessServerroleforExchangeServer2010andintegratedwithIIS7.TheOWAURListypicallysomethinglikethis:

ExchangeServer2010OutlookWebAppAuthenticationTypes

TherearefourauthenticationmethodsavailableforExchangeServer2010OWA.Theyare:

IntegratedAuthentication–thisallowsdomainuserswhoareloggedontodomaincomputerstoautomaticallylogontoOutlookWebApp.ThisisusefulforinternalOutlookWebAppaccessasitsimplifiesthelogonprocessfordomainusers(theydon’tneedtologononcetothecomputerandthenasecondtimeforOWA).HoweverIntegratedAuthenticationisnotsuitableforremoteaccessbypeopleusingnon‐domainmembercomputers,orpeoplewhoareconnectingviaproxyservers.

BasicAuthentication–thisusestheHTTPprotocoltosendthelogoncredentialstotheserver.Becausethecredentialsaresent“intheclear”theuseofSSLishighlyrecommendedforsecuringthem.Also,becauseBasicAuthenticationcredentialscanbecachedinwebbrowsersitisrecommendedtouseanadditionalauthenticationfactor(egaone‐timepasswordfromatoken)to



preventunauthorizedaccessfrompublickioskcomputersusingthecachedcredentials.

DigestAuthentication–thismethodsolvestheproblemwithBasicAuthenticationwherecredentialsaresent“intheclear”bysendingahashedpasswordinstead.DigestAuthenticationalsoworksthroughaproxyserverunlikeIntegratedAuthentication.HoweverDigestAuthenticationdoeshavesomeotherconfigurationrequirements,suchastheuseofreversibleencryptionforpasswordstorageinActiveDirectory.Thesemaymakeitanundesirableoptionformanyorganiztions.

Forms‐BasedAuthentication–thismethodusesasign‐inwebpageontheservertocollectlogoncredentials.aswithBasicAuthenticationtheuseofSSLwithForms‐BasedAuthenticationishighlyrecommendedtoprotecttheusercredentials.



Forms‐BasedAuthenticationhasthreeadditionalconfigurationoptionsforhowtheusercredentialsaresubmitted.

Domain\Username–usersentertheircredentialsintheformatDomain\Username,usingeithertheNETBIOSorFQDNforthedomainname.

UserPrincipalName(UPN)–ifthisoptionischosenonlyuserswhohaveaUPNspecifiedthatmatchestheiremailaddresswillbeabletologontoOutlookWebApp.

UsernameOnly–withthisoptiontheExchangeadministratorspecifiesadefaultdomainforOWAlogons,andusersinthatdomaincanlogonwithusernameonly.UsersinotherdomainsmuststilluseDomain\Username.

ConfiguringOutlookWebAppforForms‐BasedAuthentication

InthisexampletheExchangeServer2010OWAvirtualdirectoryisbeingconfiguredforForms‐BasedAuthentication.

UsingtheExchangeManagementConsolenavigatetoServerConfiguration‐>ClientAccess,andchoosetheserveryouwishtoconfigure.SelecttheOutlookWebApptab,thenright‐clicktheOWAvirtualdirectoryandchooseProperties.

- Select“Useforms‐basedauthentication”- Select“Usernameonly”- LogonDomain,browsetothedomain



SegmentationSegmentationletsyouenableanddisablefeaturesthatareavailabletousersintheversionofMicrosoftOfficeOutlookWebAppreleasedwithMicrosoftExchangeServer2010.Bydefault,anymail‐enableduserinyourExchange2010organizationcanaccesstheirmailboxusingOutlookWebApp.Dependingontheneedsofyourorganization;youcanusesegmentationtodothefollowing:

RestrictaccesstoOutlookWebAppforspecificusers. ControlaccesstocertainOutlookWebAppfeaturesforspecificusers. DisableanOutlookWebAppfeaturecompletely.

ThisscenarioyoucandisableorenableanyfeaturethatneedstorestrictinOutlookWebApp(OWA).

PublicComputerFileAccessFormoredetail,youcangotothepreviousstepinBlockMP3inOWAonpage23.

OfflineAddressbookdistribution

DefaultRollingInterval



- OpenEMC‐>ServerConfiguration‐>ClientAccess‐>ClickontheClientServerontheRightpanel

- InthebottommenuselecttheOfflineAddressBookDistributionandgotopropertiesbyright

clickonthedefaultOAB.

- IntheGeneralTabyoucanconfigurethePollinginterval.ThePollingintervalistheintervalOABchecksifthereareupdatesintheAddressBook.Ifyouneedtochangethisjusttypeanewnumberandclickapply.

- ChangethePollinginternalto1oranynumberasyouareprefertomakeanupdatingonyou

OfflineAddressBook(OAB).

- RightClickonGlobalOABandselectupdate.



- Gotosearchtype“services.msc”andthenrestarton“MicrosoftExchangeFileDistribution”

- UpdateIIS,bytypecommand“iisreset”

RecipientConfigurationUsetheRecipientConfigurationnodeforseveralrecipientmanagementtasks.Specifically,youcanviewtherecipientsinyourMicrosoftExchangeServer2010organization,createnewrecipients,andmanageexistingmailboxes,mailcontacts,mailusers,anddistributiongroups.



Tofocusonasetofitemsintheresultpanethathavespecificattributes,youcanuseavarietyofexpressionstofilterthelist.

TheRecipientConfigurationnodecontainsthefollowingsub‐nodes:

MailboxUsethisnodetomanagemailboxes,users,andresourcemailboxes(resourcemailboxesincluderoomandequipmentmailboxes).Youcancreatenewmailboxesandremove,disable,ormoveexistingmailboxes.Youcanalsoconfiguremailboxproperties,enableanddisableUnifiedMessaging(UM),andmanagemobiledevices.

DistributionGroupUsethisnodetomanagemail‐enableddistributiongroups(whichincludesecuritygroups)anddynamicdistributiongroups.Youcancreatenewdistributiongroups,andremove,disable,orconfigureexistingdistributiongroups.

MailContactUsethisnodetomanagemailcontactsandmailusers.Youcancreate,delete,orconfiguremailcontactsandmailusers.

DisconnectedMailboxUsethisnodetoviewandconnectdisconnectedmailboxes.

Note:Disconnectedmailboxesareretainedbasedontheconfiguredmailboxdatabaselimits.Youseeonlythemailboxesthathavebeendisconnectedwithintheretentionperiodthatisspecifiedforthemailboxdatabase.

MoveRequestUsethisnodetomanagemailboxmoverequests.

WhenyouselecttheRecipientConfigurationnode,thefollowingactionsareavailableeitherbyright‐clickingRecipientConfigurationorbyusingtheactionpane.

ModifyRecipientScope

ClickModifyRecipientScopetoopentheRecipientScopedialogboxbox.

Changingtherecipientscopechangesthenumberofrecipientsthataredisplayedintheresultpane.Therecipient‐specificdialogboxeswithinvariouswizardsandpropertypagesalsoworkwithinthesamescope.

Youcansetthescopetoincludeallrecipientsintheforestorlimitittoallrecipientsinaspecificorganizationalunit(OU).TherecipientscopeallowsadministratorstofocusonallrecipientsthatareinaspecificlocationinActiveDirectoryDomainServices(ADDS).Selectingalimitedrecipientscopereducesthenumberofrecipientsthatarereturned,andconsequentlyimprovestheperformanceoftheExchangeManagementConsole.

ModifytheMaximumNumberofRecipientstoDisplay

ClickModifyMaximumNumberofRecipientstoDisplaytoopentheMaximumNumberofRecipientstoDisplaydialogbox.Youcanusethisdialogboxtosetthemaximumnumberofrecipientstodisplayintheresultpane.



Bydefault,amaximumof1,000recipientsisdisplayed.Increasingthisvaluecanbebeneficialinlargeenvironments.However,increasingthevaluealsoincreasesthetimeittakestodisplaytheresults.Dependingonthesizeofyourorganization,itmayalsohaveaperformanceimpactonthedomaincontrollertowhichyouareconnected.

Find

ClickFindtoopentheFinddialogbox.YoucanusetheFinddialogtosearchforrecipientsinyourorganization.

NewMailbox

ClickNewMailboxtoopentheNewMailboxwizard.Thiswizardhelpsyoucreateanewuser,room,equipment,orlinkedmailbox.

NewMailContact

ClickNewMailContacttoopentheNewMailContactwizard.Mailcontactsaremail‐enabledActiveDirectoryobjectsthatcontaininformationaboutpeopleororganizationsthatexistoutsideyourExchangeorganization.

NewMailUser

ClickNewMailUsertoopentheNewMailUserwizard.Mailusersaremail‐enabledActiveDirectoryusersthatdon'thaveamailboxinyourExchangeorganization.

NewRemoteMailbox

ClickNewRemoteMailboxtoopentheNewRemoteMailboxwizard.Usethiswizardtocreateamail‐enableduserinyourExchange2010on‐premisesorganizationwithanassociatedmailboxinthecloud‐basedservice.

NewDistributionGroup

ClickNewDistributionGrouptoopentheNewDistributionGroupwizard.Thiswizardhelpsyoucreatebothdistributionandsecuritygroups.Distributiongroupsaremail‐enabledActiveDirectoryobjectsthatcontaininformationaboutpeoplewithinanExchangeorganization.Alldistributiongroupscanbeusedfore‐maildistribution.Securitygroupscanalsobeusedtoassignpermissionstosharedresources.

NewDynamicDistributionGroup

ClickNewDynamicDistributionGrouptoopentheNewDynamicDistributionGroupwizard.Thiswizardhelpsyoucreateanewdynamicdistributiongroup.

InExchangeServer2003,dynamicdistributiongroupswerecalledquery‐baseddistributiongroups.Dynamicdistributiongroupsprovidethesamefunctionalityasmail‐enabled



distributiongroups.However,insteadofcontainingastaticgroupofrecipients,themembershiplistfordynamicdistributiongroupsiscalculatedbasedontheirconfigurationeachtimetheyareused.Whenamessageissenttoadynamicdistributiongroup,it'sdeliveredtoallrecipientsintheorganizationthatmatchthecriteriadefinedforthatdynamicdistributiongroup.

ExportList

ClickExportListtoopentheExportListdialogbox.Youcanusethisdialogboxtosavethelistofrecipientsintheresultpanetoatextfile.

View

ClickViewintheactionpanetomodifyhowobjectsaredisplayedintheconsoleandtorecordandviewtheExchangeManagementShellcommandsthatrunintheconsole.Thefollowingoptionsmayvarydependingonyourlocationintheconsoletree:

ViewExchangeManagementShellCommandLogClickViewExchangeManagementShellCommandLogtoviewtheShellCommandLogdialogbox.TheCommandLogallowsyoutoviewalltheShellcommandsthathavebeenexecutedintheconsole.

Add/RemoveColumnsClickAdd/RemoveColumnstoselectwhichcolumnsyouwanttodisplayintheresultpaneandtochangetheorder.Theavailablecolumnsdependonthenodethatyouselect.TheMMCautomaticallysavesyoursettings.Toreverttothedefaultcolumnview,clickRestoreDefaultsintheAdd/RemoveColumnsdialogbox.

VisualEffectsClickVisualEffectstosetthevisualeffectstobeneveronorautomatic.UsethevisualeffectssettingtoconfigurehowExchangewizardsaredisplayed.Ifyourconnectionisslowwhenrunningwizards,youcanincreaseperformancebyturningoffvisualeffects.UsetheAutomaticsettingtohavetheconsoledetectifyoursystemshouldhavevisualeffectsturnedonoroff.

SaveCurrentFilterasDefaultClickSaveCurrentFilterasDefaulttomaketheexistingfilterthedefaultfilterfortheserverslistedintheresultpane.


Refresh

ClickRefreshtorefreshtheinformationdisplayedintheresultpane.



MailboxUsethisnodetomanagemailboxes,users,andresourcemailboxes(resourcemailboxesincluderoomandequipmentmailboxes).Youcancreatenewmailboxesandremove,disable,ormoveexistingmailboxes.Youcanalsoconfiguremailboxproperties,enableanddisableUnifiedMessaging(UM),andmanagemobiledevices.

TypeofmailboxFormoreunderstandinggotothiswebsite:http://technet.microsoft.com/en‐us/library/bb201680%28v=exchg.141%29.aspx

UserMailboxUsermailboxisamailboxthat’sassignedtoanindividualuserinyourExchangeorganization.Ittypicallycontainsmessages,calendaritems,contacts,tasks,documents,andotherimportantbusinessdata.Tocreatethemailboxuser:

- OpenExchangeManagementConsole(EMC)- SelectMailboxunderRecipientConfiguration- Rightclickonresultpane,andthenCreateNewMailbox- Select“UserMailbox”

Roommailbox



Roommailboxisaresourcemailboxthat’sassignedtoameetinglocation,suchasaconferenceroom,auditorium,ortrainingroom,Roommailboxescanbeincludedasresourcesinmeetingrequests,providingasimpleandefficientwayoforganizingmeetingsforyourusers.Tocreatetheroommailbox:

- OpenExchangeManagementConsole(EMC)- SelectMailboxunderRecipientConfiguration- Rightclickonresultpane,andthenCreateNewmailbox- Select“RoomMailbox”

EquipmentmailboxEquipmentmailboxisaresourcemailboxthat’sassignedtoanon‐locationspecificresource,suchasaportablecomputerprojector,microphone,oracompanycar.Equipmentmailboxescanbeincludedasresourcesinmeetingrequests,providingasimpleandefficientwayofutilizingresourcesforyourusers.Tocreatetheequipmentmailbox:

- OpenExchangeManagementConsole(EMC)- SelectMailboxunderRecipientConfiguration- RightClickonresultpane,andthenCreateNewmailbox- SelectEquipmentMailbox



ConfiguregroupofroommailboxGroupofroommailboxesarethegroupingthatallowuserseasierinsendingandschedulingtotheroomwhichisavailableornotinyourcalendar.Inordertocreateagroupforroommailboxesyouneedtohaveatleasttworoommailboxesaccountasbellow.

Inordertomanagecreateandmanagegroupingforroommailboxes,youcannotcreatebyusingExchangeManagementConsole(EMC).ItmeansthatyouneedtouseExchangeManagementShell(EMS).

- OpenExchangeManagementShell(EMS)- Typethecmdlet“New‐DistributionGroup–Name“MeetingRoom”–Membersboardroom,

room1,room2,room3‐RoomList”

OpenExchangeManagementConsole(EMC)andselectDistributionGroupunderRecipientConfigurationnode,youwillseethenewgroupofyourroommailbox.InEMC,youcanmakeamodificationonthegroupofroommailboxsuchasaddnewmember.



UsermailboxpropertiesUsermailboxpropertiesarethefeaturesorfunctionalitythatcanassignandapplyanychangetomailboxuser.Therearemanyfeaturesinmailboxpropertiessuchas:

General- HidefromExchangeaddresslists- CustomAttribute UserInformation- SetFirstname- SetLastname- SetName- SetSimpledisplayname- SetWebpage AddressandPhone- SetStreetaddress- SetCity- SetState/Province- SetZIP/Postalcode- SetCountry/Region- SetPhonenumbers Organization- SetTitle- SetCompany- SetDepartment- SetOffice- SetManager Account- SetUserlogonname(UserPrincipalName)- SetUserlogonname(pre‐Windows2000) MailFlowSettings



- DeliveryOptions- MessageSizeRestrictions- MessageDeliveryRestrictions MailboxFeatures- OutlookWebApp- ExchangeActiveSync- MAPI- POP3- IMAP4- Archive CalendarSettings- EnabletheCalendarAttendant MemberOf- Displayanymembers E‐MailAddress- Canaddanysmtpe‐mailaddress(alias) MailboxSettings- MessagingRecordsManagement- SharingPolicy- StorageQuotas- ArchiveQuota- RoleAssignmentPolicy

MailFlowSettingMailflowsettingisoneoffeaturesinmailboxpropertiesthatcanmanagethemailboxaccountsuchasforwarde‐mailaddress,RestricttothemessagesizeandanyMessageDeliveryRestrictiononthemailbox.

MessageSizeRestrictionsTomanagethemessagesizerestriction:

- OpenExchangeManagementConsole(EMC)- SelectMailboxunderRecipientnode- Selectmailboxaccountandrightclick>properties- Select“MailFlowSettings”- SelectMessageSizeRestriction- Andthensetthe“Sendingmessagesize”and“Receivingmessagesize”inKB



- OpenMicrosoftOutlookandthentesttosende‐mailwithinattachmentfilethatmeetthe

MessagesizeRestriction.Ontheaboveofyourmessage,youcanseethedisplaymessagethatwarningyoutotheattachmentormessagesize.

DeliveryOptions

SendonbehalfBydefaultExchangeServer2010donotalloworgrantthepermissiontomailboxesaccounttosende‐mailonbehalfeachother.However;ExchangeServer2010,youcanmanagemailboxaccounttosende‐mailonbehalfofsomeoneelseaswell.



Toallowsomeoneelsetosende‐mailonbehalf,pleasefollowthisstep:

- OpenExchangeManagementConsole- Select“Mailbox”underRecipientConfigurationnode- Selectmailboxaccount- Rightclick>properties- SelectMailFlowSettingstab- DoubleclickonDeliveryOption- InSendonbehalf,grantpermissionto:addmailboxaccountwhichyouwanttoallowto

sende‐mailinsteadofthisaccount.

- OpenMicrosoftOutlookandthen- CreateNewE‐mail- SelectOptions- SelectFrom- In“From”browsetotheaddressthatyouwanttosende‐mailfor



ForwardingaddressForwardingaddressoptionallowyoutoforwardacopyofe‐mailmessagetosomeoneelsee‐mailaccount.ExchangeServer2010providesyouafeaturetoforwarde‐mailaddressfromoneusertootheruserinyourorganization.

ForwardingaddressfrominternalaccounttointernalaccountByusingExchangeManagementConsole,youwillhaveawindowswizardtomanagetheforwardinge‐mailaddress.

- OpenExchangeManagementConsole- SelectMailboxunderRecipientConfigurationnode- Selectmailboxaccountandthenrightclick>properties- SelectMailflowSetting,andthenselectDeliveryOptions- In“Forwardingaddress”,Select“Forwardto”andthenbrowsetothemailboxaccount- Select“Delivermessagetobothforwardingaddressandmailbox”

ForwardingaddressfrominternalaccounttoexternalaccountYoucanuseExchangeManagementShell(EMS)tomanagetheforwardingaddressfromyourinternalaccounttotheexternale‐mailaccount.Tocompletethisscenario,youcanfollowthisstep:



- OpenExchangeManagementShell- Typecmdletcommand“Set‐Mailbox–Identify“mailbox_account”–forwardingaddress

[email protected]–delivertomailboxandforward$true”

- Now,testingtosende‐mailfromsomeoneelsetothee‐mailaccountthatsettingaforwarding

e‐mailaddresson.

- Inmailboxaccountthatwasforwardedon,youcanreceiveanye‐mailasusual.

- Hereisacopyofe‐mailmessagefromtheforwardere‐mailaddress.

MessageDeliveryRestrictions



AcceptMessagefromallsendersBydefaultMicrosoftExchangeServer2010allowallsendersandnorestrictiononrejectmessagefrom.Toviewthesettingofthatoptiongoesto:

- OpenExchangeManagementConsole- SelectMailboxunderRecipientConfigurationnode- SelectMailboxaccount,rightclick>Properties- SelectMailflowSettingandproperties- MessageDeliveryRestriction

AcceptMessageonlyfromthefollowinglistYoucanrestrictthee‐mailinyourorganizationtolimittherecipientmailboxaccount.Inthisscenariorestrictthesendertoonlyspecificmailboxaccount.

- OpenExchangeManagementConsole(EMC)- SelectMailboxunderRecipientConfiguration- Selectmailboxaccountandthenrightclick>properties- SelectMailFlowSetting,SelectMessageDeliveryRestriction- In“Acceptmessagefrom”>Onlysendersinthefollowinglist- Addmailboxaccount



- Thewarringmessageisdisplayedwhileyoutrytosende‐mailfrommailboxthatrestricts

sendinge‐mail.

RejectMessagefrominternal

- OpenExchangeManagementConsole(EMC)- SelectMailboxunderRecipientConfiguration- Selectmailboxaccountandthenrightclick>properties- SelectMailFlowSetting,SelectMessageDeliveryRestriction- In“Rejectmessagesfrom”>Sendersinthefollowinglist- Addmailboxaccountthatwillreject



- Youdon’thavepermissiontosendtothise‐mailaddress

Mailboxfeature

BlockOutlookWebAppExchangeServer2010candisableanOWAofmailboxaccount.Youcanfollowthissteptocompletethattask:

- OpenExchangeManagementConsole(EMC)- SelectMailboxunderRecipientConfigurationnode



- Selectmailboxaccountandthenclick>Properties- SelectMailboxFeatures- SelectOutlookWebAppandthendisable

- NowtheaccountthatwasdisabledOWAisnotavailabletoreade‐mailthroughOutlookWeb

App(OWA).

GeneralOption

HideMailboxAccountNormallyallthee‐mailaddressinExchangeServer2010isavailabletoshowe‐mailaddresstoallrecipientmailboxinorganization.BydefaultinGlobalAddressListyoure‐mailaddresslistwillbeappearing.Youcanalsohideyoure‐mailaddressfromothermailbox.



- OpenExchangeManagementConsole(EMC)- SelectMailboxunderRecipientConfigurationnode- Selectmailboxandthenrightclick>Properties- SelectGeneraltabandthenclickon“HidefromExchangeaddresslists”

- TheaddresscoulddisplaytotherecipientmailboxinyourMicrosoftOutlookandOutlookWeb

App(OWA).



HideMailContactMailContactismailaddressthathassmtptotheexternale‐mailaddress.Youcanalsohidethemailcontactfromyourorganizationbyfollowbellowstep:

- OpenExchangeManagementConsole(EMC)- Select“RecipientConfiguration”andexpandtothe“MailContact”- Inresultpane,selectmailcontactthatyouneedtohide- RightClickonmailcontact>Properties- Click“HidefromExchangeaddresslists”

- Thee‐mailaddressthathidedisnotdisplayedinMicrosoftOutlookandOutlookWebApp

(OWA).



HideDistributionGroupDistributionGroupisthegroupofmailboxes.TherearetwotypeofDistributionGroup“DynamicDistributionGroupandDistributionGroup”.HideDistributionGroup:

- OpenExchangeManagementConsole- Expand“RecipientConfigurationnode”andthenselectDistributionGroup- Inresultpane,rightclickonDistributionGroup>properties- Select“HidegroupfromExchangeaddresslists”

MailboxSetting

StorageQuotation

InExchangeServer2010StorageQuotascanbeappliedtoanentiredatabaseorpermailbox.Whenastoragequotaisappliedtoanindividualmailboxitwillover‐ridethequotasetatthedatabaselevel.

Howtoapplystoragequotatothedatabase(EMC)

- IntheExchangeManagementConsole,expandthe'OrganizationConfiguration'nodethenselect'Mailbox'



- Inthemainpane,right‐clickthedatabaseyouwanttoworkwithandthenselect'Properties'- Selectthe'Limits'tab- Configurethestoragelimitsasrequiredandclick'OK'toapplythechanges.

Howtoapplyastoragequotetoanindividualmailbox(EMC)- IntheExchangeManagementConsole,expandthe'RecipientConfiguration'nodethen

select'Mailbox'- Inthemainpane,right‐clicktheuser'smailboxyouwanttoworkwithandthenselect

'Properties'- Selectthe'MailboxSettings'tabthen'StorageQuotas'.Thenselect'Properties'- Un‐tick'Usermailboxdatabasedefaults'andtickeachrequiredsettingandspecifyan

amountinmegabytes- Click'OK'then'OK'tosavethechanges.



- OpenMicrosoftOutlook2010andthenclickFile>Info>MailboxCleanup

Note:BydefaultinExchange2010afteryouincreaseordecreasethequotationsettingitwillspent2hourstobeeffectonit.However,youcanforceupdatebyfollowingthelink:http://n3ilb.wordpress.com/2011/05/19/user‐mailbox‐quota‐limit‐changes‐may‐take‐up‐to‐2‐hours‐to‐take‐effect/Afteryoufollowthislinkitwillspent5minutestobeeffective.MSExchangeISitmeansMicrosoftExchangeInformationStore.



HowtoConfigureQuotalimitsfromtheExchangeManagementShell(EMS)

UsingtheExchangeManagementShell,youcanconfiguremailboxquotasusingthe'Set‐Mailbox'commandlet.

Thefollowingcommandwillsetthefollowingformailbox'SEANPhyrun':

Issuewarningat4048MB Prohibitsendat5000MB Prohibitsendandreceiveat5000MB

Set‐Mailbox‐[email protected]‐IssueWarningQuota4244635648‐ProhibitSendQuota5242880000‐ProhibitSendReceiveQuota5242880000‐UseDatabaseQuotaDefaults$false

Tip:WhenusingtheExchangeManagementShellthevaluesareinbytes.Toconvertamegabytevalueintobytes,simplymultiplyitby1048576

Forexample,5000MBx1048576=5242880000bytes

ArchiveQuotation

Archivemailboxeshaveunlimitedstoragebydefaultandnoadminwantsthat.Youcanconfiguretwosettings,archivewarningquotaandarchivequota.

Asthenameimplies,thearchivewarningquotaisalimitsetbytheadmintowarntheuserthattheyareveryneartoreachingthemaximumallowedlimitfortheirarchivemailbox.Whenauserreachesthearchivewarningquota,exchangelogsaneventfortheadministratorandfiresanemailtotheuser.YoucanusebothEMCandShelltoconfigurethesetting.LaunchEMC,taketheuserproperties,navigateto“MailboxSettings”tab,select“ArchiveQuota”andclickproperties.SetthelimitinMB.Theoption“ArchiveQuota”intheuserpropertiesshouldideallybe“ArchiveQuotaWarning”inmyopinion.



IfyouareaPowershellguy,runSet‐Mailbox–identity“user”–ArchiveWarningQuota”900MB

ArchiveQuotaisthelimitsetbytheadminasthemaximumamountofstorageallottedforauser’sarchivemailbox.Whenauserreachesthequotalimit,amessageisfiredtotheuserandhe/shewon’tbeabletomoveanymoremessagesintothearchivemailbox.ThislimitcanonlybesetbyusingtheShell.Tosetthelimitto1Gb,runSet‐Mailbox–identity“user”–ArchiveQuota1GB.

RoleAssignmentPolicyAmanagementroleassignmentpolicyisacollectionofoneormoreend‐usermanagementrolesthatenablesenduserstomanagetheirownMicrosoftExchangeServer2010mailboxanddistributiongroupconfiguration.Roleassignmentpolicies,whicharepartoftheRoleBasedAccessControl(RBAC)permissionsmodelinExchange2010,enableyoutocontrolwhatspecificmailboxanddistributiongroupconfigurationsettingsyourenduserscanmodify.Differentgroupsofuserscanhaveroleassignmentpoliciesspecializedtothem.

Note:ThistopicfocusesonadvancedRBACfunctionality.IfyouwanttomanagebasicExchange2013permissions,suchasusingtheExchangeAdministrationCenter(EAC)toaddandremovememberstoandfromrolegroups,createandmodifyrolegroups,orcreateandmodifyroleassignmentpolicies.Moredetailvisitthislike:http://technet.microsoft.com/en‐us/library/dd638100%28v=exchg.150%29.aspx



TomanagetheRoleBasedAccessControl(RBAC)UserEditor:

- OpenExchangeManagementConsole(EMC)- SelectToolbox- SelectRoleBasedAccessControl(RBAC)UserEditor

- ManagetheRoleBasedAccessControlbyusingOutlookWebApp(OWA).- SelectRoles&Auditing- CreatenewRoleGroupsorassigntotheexistinggroup

- InthisscenariotheExchangeadministratoruseRBACthatallowtheExchangeadministrator

cangrantpermissionforanend‐usertomanageanautoreplymailforotherinorganization.



Therolesthatallownormalmailboxaccounttoopenothermailboxis“UserOptions”thebellowfigureisshownyou.

- ByusingOutlookWebApp(OWA),youcanuse“AnotherUser”andthenbrowsetotheuser

thatyouwouldliketoworkfor.



- Thisfigureshowsyouabouttheotheruserthatwasaccessbyend‐userthatassignspermissionbyRBAC.

- HereistheOutlookWebAppofotheruserthatmanagesbyRBACend‐usetoputanautoreply

mailfor.

MessageRecordManagement

Userssendandreceiveemaileveryday.Ifleftunmanaged,thevolumeofemailgeneratedandreceivedeachdaycaninundateusers,impactuserproductivity,andexposeyourorganizationtorisks.Asaresult,emaillifecyclemanagementisacriticalcomponentformostorganizations.



Messagingrecordsmanagement(MRM)istherecordsmanagementtechnologyinMicrosoftExchangeServer2013thathelpsorganizationsmanageemaillifecycleandreducethelegalrisksassociatedwithemail.DeployingMRMcanhelpyourorganizationinseveralways:

MeetbusinessrequirementsDependingonyourorganization’smessagingpolicies,youmayneedtoretainimportantemailmessagesforacertainperiod.Forexample,auser’smailboxmaycontaincriticalmessagesrelatedtobusinessstrategy,transactions,productdevelopment,orcustomerinteractions.

MeetlegalandregulatoryrequirementsManyorganizationshavealegalorregulatoryrequirementtostoremessagesforadesignatedperiodandremovemessagesolderthanthatperiod.Storingmessageslongerthannecessarymayincreaseyourorganization’slegalorfinancialrisks.

IncreaseuserproductivityIfleftunmanaged,theever‐increasingvolumeofemailinyourusers’mailboxescanalsoimpacttheirproductivity.Forexample,althoughnewslettersubscriptionsandautomatednotificationsmayhaveinformationalvaluewhenthey’rereceived,usersmaynotremovethemafterreading(oftenthey’reneverread).Manyofthesetypesofmessagesdon’thavearetentionvaluebeyondafewdays.UsingMRMtoremovesuchmessagescanhelpreduceinformationclutterinusers’mailboxes,therebyincreasingproductivity.

ImprovestoragemanagementDuetoexpectationsdrivenbyfreeconsumeremailservices,manyuserskeepoldmessagesforalongperiodorneverremovethem.Maintaininglargemailboxesisincreasinglybecomingastandardpractice,andusersshouldn’tbeforcedtochangetheirworkhabitsbasedonrestrictivemailboxquotas.However,retainingmessagesbeyondtheperiodthat’snecessaryforbusiness,legal,orregulatoryreasonsalsoincreasesstoragecosts.

InExchange2013(andalsoinExchange2010),MRMisaccomplishedthroughtheuseofretentiontagsandretentionpolicies.RetentiontagsareusedtoapplyretentionsettingstoanentiremailboxanddefaultmailboxfolderssuchasInboxandDeletedItems.YoucanalsocreateanddeployretentiontagsthatOutlook2010andlaterandOutlookWebAppuserscanusetoapplytofoldersorindividualmessages.Afterthey’recreated,youaddretentiontagstoaretentionpolicyandthenapplythepolicytousers.TheManagedFolderAssistant,amailboxassistantthatrunsonExchange2013Mailboxservers,processesmailboxesandappliesretentionsettingsintheuser’sretentionpolicy.

Whenamessagereachesitsretentionagespecifiedintheapplicableretentiontag,theManagedFolderAssistanttakestheretentionactionspecifiedbythetag.Messagescanthenbedeletedpermanentlyordeletedwiththeabilitytorecoverthem.Ifanarchivehasbeenprovisionedfortheuser,youcanalsouseretentiontagstomoveitemstotheuser’sIn‐PlaceArchive.

ApplyRetentionpolicy

- Intheconsoletree,expandtheforestyouwant,andthennavigatetoRecipientConfiguration>Mailbox.

- Intheresultpane,selectthemailboxtowhichyouwanttoapplytheretentionpolicy.YoucanselectmultiplemailboxesbyusingtheShiftorCtrlkeys.

- Intheactionpane,clickProperties.



- In<MailboxUser>Properties,ontheMailboxSettingstab,selectMessagingRecordsManagement,andthenclickProperties.

- InMessagingRecordsManagement,selecttheApplyRetentionPolicycheckbox,andthenclickBrowsetoselecttheretentionpolicyyouwanttoapplytothemailbox.

- ClickOK,andthenin<MailboxUser>Properties,clickApply.

- OpenMicrosoftOutlook2010,youfoundanretentionpolicywasappliedtothemailboxsetting

asthepictureshownbelow.

Formoredetailaboutthistopic,youcangotoprevioussteponpage14“RetentionandArchive”.

LitigationHold

Whenareasonableexpectationoflitigationexists,organizationsarerequiredtopreserveelectronicallystoredinformation(includinge‐mail)that'srelevanttothecase.Thisexpectationcanoccurbeforethespecificsofthecaseareknown,andpreservationisoftenbroad.Organizationsmaypreservealle‐mailrelatedtoaspecifictopic,oralle‐mailforcertainindividuals.Dependingonthe



organization'selectronicdiscovery(eDiscovery)practices,someofthemeasuresadoptedbyorganizationstopreservee‐mailincludethefollowing:

Endusersmaybeaskedtopreservee‐mailbynotdeletinganymessages.However,usersmaystilldeletee‐mailknowinglyorinadvertently.

Automateddeletionmechanismssuchasmessagingrecordsmanagement(MRM)maybesuspended.Thiscouldresultinlargevolumesofe‐mailclutteringtheusermailbox,andthusimpactinguserproductivity.Suspendingautomateddeletionalsodoesn'tpreventusersfrommanuallydeletinge‐mail.

Someorganizationscopyormovee‐mailtoanarchivetomakesureitisn'tdeleted,altered,ortamperedwith.Thisincreasescostsduetomanualeffortsrequiredtocopyormovemessagestoanarchive,orthird‐partyproductsusedtocollectandstoree‐mailoutsideMicrosoftExchange.

Failuretopreservee‐mailmayexposeanorganizationtolegalandfinancialriskssuchasscrutinyoftheorganization'srecordsretentionanddiscoveryprocesses,adverselegaljudgments,sanctions,orfines.

InExchangeServer2010,youcanuselitigationholdtoaccomplishthefollowinggoals:

Enableuserstobeplacedonholdandkeepmailboxitemsinanunalteredstate Preservemailboxitemsthatmayhavebeendeletedoreditedbyusers PreservemailboxitemsautomaticallydeletedbyMRM KeepthelitigationholdtransparentfromtheuserbynothavingtosuspendMRM Enablediscoverysearchesofitemsplacedonhold

EnableLitigationHold


- Intheresultpane,selectthemailboxtowhichyouwanttoapplytheretentionpolicy.YoucanselectmultiplemailboxesbyusingtheShiftorCtrlkeys.

- Intheactionpane,clickProperties.- In<MailboxUser>Properties,ontheMailboxSettingstab,selectMessagingRecords

Management,andthenclickProperties.- InMessagingRecordsManagement,selecttheEnableLitigationHoldcheckbox.- ClickOK,andthenin<MailboxUser>Properties,clickApply.



- Thewarningmessageshowsyouthat“Theholdsettingmaytakeupto60minutestotake

effect”.

Orwecantypecommand“Set‐[email protected]–LitigationHoldEnabled$true”Forforcingtoeffect



- “Get‐[email protected]|Start‐ManageFolderAssistant”(forapplytoonemailbox)

- “Get‐Mailbox|Start‐ManageFolderAssistant”(forapplytowholeorganization)

TrackinguserbyusingLitigationHoldfeature

InExchangeServer2010theadministratorcaneDiscoverytheend‐usertotheolde‐mailthattheywassenttoanydestinationback.Normally,Litigationisusedtotrackingonillegale‐mailthatsendingorcheatinge‐mailinyourorganization.SometimeLitigationHoldisusedtopreventonthepermanentlydeletee‐mailbyend‐userandtheyneedtheire‐mailback.Inthistopic,wewilldiscusshowtomanageLitigationHoldinyourExchangeServer2010.Havealookatthefollowingstep:

CreatelitigationholdmailboxaccountYouneedtocreateamailboxandnameitasLitigationHold(oranynameasyouprefer).

AssigngroupmemberThemembershipthatyouneedtoassignforyourlitigationholdusersuchas:

- DiscoveryManagement- OrganizationManagement- RecordManagement



GrantpermissionforLitigationHoldmailboxInordertoallowyourLitigationHoldaccounttosearchonothermailboxyouneedtograntpermissiononittofullmanageon“DiscoverySearchMailbox”.


- Intheresultpane,rightclickonDiscoverySearchMailbox.- SelectManageFullAccessPermission

- Addlitigationholdmailbox



UsingLitigationHoldtorecovere‐mailIncase,yourstaffsinorganizationaccidenttodeletee‐mailoryouhavementionthatcurrentlyyourstafftrytosendconfidentiale‐mailout,soyoucanuselitigationholdtorecovere‐mailthatwasdeletedback.Inthisscenario,theExchangeAdministratortesttodeletepermanentlye‐mailandthenshe/heusingLitigationHoldtodiscoverye‐mailback.

- InMicrosoftOutlook,Deleteane‐mail

Torecovere‐mailthatwasdeletedback,youneedtologintoOutlookWebAppbyusingane‐mailaccountwhichhasfullpermissiononDiscoverySearchMailbox.Thefollowingstepwillguideyouhowtomanageit.



- LoginasLitigationHoldane‐mailaccount- Click“Option”andthenselect“SeeAllOptions”

- In“Mail>Option”,Select“ManageMyOrganization”- SelectMailControl>Discovery

- Click“New”- Inputkeywordin“Keywords”- Selectmailboxaddressto“MessageToorFromSpecificE‐MailAddresses”- In“DateRange”Specificthedaterangeforthesearch



- In“MailboxestoSearch”selectthespecificmailboxesorthemailboxesofmembersofdistributiongroups.

- Hereistheresultafterthesearchingiscompleted.Andthenyoucanclickon“Open”toreadthe

Discoverye‐mailofLitigationHold.

- Thee‐mailthatwasdeletedfromend‐userbyaccidentlyisdiscoveryback.



Usermailboxpolicy

ContactspolicyContactisthegroupore‐mailaddresslistsinMicrosoftOutlook.TherearetwokindsofcontactlistinMicrosoftOutlooksuchas,ContactsandSuggestedContacts.Contactsislistedalltheaddressthataddedmanuallybytheend‐user.Otherwise,SuggestedContactsiscachedallthee‐mailaddressthatwassentoutfromyouroutlook.BydefaultContactsandSuggestedContactsdoesnotallowanyonetoaccessibleorvisibleonitwithoutthepermissionfromtheMicrosoftOutlookowner.BelloissometipsrelatedhowtosharingthecontactslistinMicrosoftOutlookeitherbyExchangeAdministratororend‐userwhoisownerofMicrosoftOutlook.

SharingcontactsbyadministratorBydefaultinMicrosoftOutlook2010,theownerhastherightcontroltoassignandallowpermissiontosomeoneelseintheirorganization.However,theExchangeadministratoralsohasthewaytolookoverandgrantpermissioninsteadoftheend‐user.Surely,inthiscase,youwillseehowassistend‐userworkfromExchangeAdministrator.Beforeyoucansharecontactofend‐userbyExchangeAdministratoryouneedtoperformthistask:

- GotodownloadExFoldertoolfromthiswebsite:http://gallery.technet.microsoft.com/office/Exchange‐2010‐SP1‐ExFolders‐e6bfd405

- InstallExFolderbyreadinganintroduction

Note:



AfteryouconnectExFolderstothemailboxdatabaseofyourExchangeServeralready,youstillgotanerrormessagewhileyoutrytopropertiesone‐mailaccount.InordertosolvethisproblemyouneedtoManageFullAccessPermissiontotheExchangeAdministratortothemailboxthatyouneedtoworkfor.

MangeFullAccessPermissionforExchangeAdministrator


- Intheresultpane,RightClick>propertiesthemailboxtowhichyouwanttoManageFullAccessPermissiontoExchangeAdministrator.

- SelectManageFullAccessPermission‐AddyourAdministratormailboxaccount



ToshareandassignpermissiononsomeoneoutlookbyExchangeAdministrator,youcanfollowthefollowingsteps:

- LogintoyourExchangeServer- UsingExFolderstocontacttomailboxdatabasewhereisyourmailboxstoring- Selectmailboxthatyouwanttomanageon- RightclickonTopofInformation>Folderpermission



- Thepermissionconsolewillpopup,byusingthatpermissionconsoletoaddandassignpermissiontothemailboxwhichyouneedtograntpermissionfor.

- ToshareSuggestedContacts,SelectSuggestedContactsandthenaddmailboxaccountand

assignpermission.

OpenMicrosoftOutlookoftheuserthatwillaccessthesharingontheothermailboxaccountandthenaddanadditionalmailbox(mailboxthatgrantspermissionforyoutoaccesstheircontacts)intheadditionaladdress.InMicrosoftOutlook2010,youcanfollowthefollowingsteps:

- ClickFile>AccountSetting>DoubleClickonyouraccountprofile- InServerSettings,ClickMoreSettings- InMicrosoftExchange,ClickAdvancedtab- Andthenaddmailboxaccount,ClickOK



- Now,Innavigationpane,clickContact- YoucanseetheSuggestedContactsisshared

Sharingcontactsbyend‐userTheend‐usercansharetheircontactsbyusingher/himMicrosoftOutlook.ThefollowingstepistheguidetosharingcontactsinOutlook2010:

- OpenMicrosoftOutlook2010



- InNavigationpane,Rightclickonane‐mailaccountsetting- SelectFolderPermissions

- InAccountSettingProperties,SelectPermissiontab- Addandassignpermissionleveltothemailboxwhichyouwantthemtoaccessyourcontacts

- SelectSuggestedContacts,andassignpermission



OpenMicrosoftOutlookoftheuserthatwillaccessthesharingontheothermailboxaccountandthenaddanadditionalmailbox(mailboxthatgrantspermissionforyoutoaccesstheircontacts)intheadditionaladdress.InMicrosoftOutlook2010,youcanfollowthefollowingsteps:

- ClickFile>AccountSetting>DoubleClickonyouraccountprofile- InServerSettings,ClickMoreSettings- InMicrosoftExchange,ClickAdvancedtab- Andthenaddmailboxaccount,ClickOK

- InnavigationpaneofOutlook,SelectonContactsyouwillseetheSuggestedContactsisshared

foryou.



Calendarpolicy

TheMicrosoftOutlook2010CalendaristhecalendarandschedulingcomponentofOutlook2010andisfullyintegratedwithemail,contacts,andotherfeatures.ByusingtheCalendaryoucan:

Createappointmentsandevents

Justasyouwriteinanotebook,youcanclickanytimeslotintheOutlookCalendarandstarttotype.Youcanopttohaveasoundormessageremindyouofappointments,meetings,andevents,andyoucancoloritemsforquickidentification.

Organizemeetings

SelectatimeontheCalendar,createameetingrequest,andselectthepeopletoinvite.Outlookhelpsyoufindtheearliesttimewhenalltheinviteesarefree.Whenyousendthemeetingrequestbyemail,theinviteesreceivetherequestintheirInbox.Whentheinviteesopentherequest,theycanaccept,tentativelyaccept,ordeclineyourmeetingbyclickingasinglebutton.Ifyourrequestconflictswithanitemontheinvitees'Calendar,Outlookdisplaysanotification.Ifyou,asthemeetingorganizer,allowthis,inviteescanproposeanalternativemeetingtime.Astheorganizer,youcantrackwhoacceptsordeclinestherequestorwhoproposesanothertimeforthemeetingbyopeningtherequest.

BookingameetingroomYoucanuseMicrosoftOutlook2010tocreateanappointmentasthefollowingsteps:

- InNavigationpane,clickCalendar- ClickNewAppointment- Inviteattendeeandthemeetingroomthatisavailable

Note:YoucanseetheSuggestedtimesandAvailableroombyusingRoomFinderinMicrosoftOutlook2010.



CheckingonschedulingassistantByusingMicrosoftOutlook2010,youcanseethevaluabletimeandmeetingroombyusingtheSchedulingAssistantinyourAppointmentmeeting.Havealooktheshowingpicturebelow.

- OpenMicrosoftOutlook2010- InNavigationpane,SelectCalendar- CreateNewAppointment- SelectSchedulingAssistant- SelectRoomFinder

Now,youwillseealltheschedulingavailableorunavailableinyourappointmentmeeting.

SharingcalendarbyadministratorTosharecalendarbyExchangeAdministrator,itisnotdifferentfromsharingcontactsinExchangeServer.ItusesExFoldersthatinstallonExchangeServerandthenusingthattooltoconnecttothemailboxdatabasethatstoreyourmailboxes.

- InExFoldersunderTopofInformationStore- Rightclickandselectpermission- Addmailboxandassignthepermission



- OpenMicrosoftOutlook2010- InNavigationPane,SelectCalendar- NowthesharingCalendarisaddedtoyourCalendar

Sharingcalendarbyend‐userTocompletethesharingCalendarbyend‐user,youcallfollowthisstep:

- OpenMicrosoftOutlook2010- InNavigationPane,RightClickonyourCalendar>properties- InCalendarProperties,SelectPermissiontab- Andmailboxandassignpermission



OpenMicrosoftOutlookoftheuserthatwillaccessthesharingontheothermailbox.InMicrosoftOutlook2010,youcanfollowthefollowingsteps:

- OpenMicrosoftOutlook2010- InNavigationpane,SelectCalendar- YoucanseetheCalendarissharedforyou

InboxpolicyInMicrosoftOutlook2010,inboxfolderisthefolderthatkeepsalle‐mailmessagesthatyougotfromanysenderfromyourorganizationoranysourcefromoutside.YoucancreateSubFolderundertheInboxfolderandyoucancreateormanageruleandAlerttocontrolabouttheincomingmaininyourinboxaswell.Thistopicyouwillseehowtosharingyourinboxorsub‐folderunderyourinboxtotheotherstaffsinyourorganization.



SharinginboxbyadministratorToshareinboxfolderinyourMicrosoftOutlook2010tootherstaffinyourorganization,youcanfollowthefollowingstep:

- OpenExFoldersinyourExchangeServer- Under“TopofInformationStore”,SelectInboxandthenaddandassignpermission

- Astheresultyoucanseetheinboxissharedtoyou.



SharingSubFolderunderInboxbyadministratorTosharesubfolderunderinboxfolderinyourMicrosoftOutlook2010tootherstaffinyourorganization,youcanfollowthefollowingstep:

- OpenExFoldersinyourExchangeServer- Under“TopofInformationStore”,SelectInboxandthenselectSubFolderunderinbox,addand

assignpermission

- OpenMicrosoftOutlook2010,youwillseethesubfolderunderinboxissharedforyou.



Sharinginboxbyend‐userToshareinboxfolderinyourMicrosoftOutlook2010tootherstaffinyourorganization,youcanfollowthefollowingstep:

- OpenyourMicrosoftOutlook2010- InNavigationPane,RightClickonaccountsettingandthenselectFolderPermission



- Atthepopupaccountproperties,selectPermissiontabandthenadde‐mailaccountandassignpermission

- InordertoshareonlyInboxofyourstotheother,youneedbackagaintoNavigationpane- RightClickonspecificfolderwhichyouwanttoshare(Inbox)andthenproperties- SelectPermissiontab- Addandassignpermissiontothee‐mailaccountthatwillcanaccessyoursharefolder

OpenMicrosoftOutlookoftheuserthatwillaccessthesharingontheothermailboxaccountandthenaddanadditionalmailbox(mailboxthatgrantspermissionforyoutoaccesstheirinbox)intheadditionaladdress.InMicrosoftOutlook2010,youcanfollowthefollowingsteps:

- ClickFile>AccountSetting>DoubleClickonyouraccountprofile



- InServerSettings,ClickMoreSettings- InMicrosoftExchange,ClickAdvancedtab- Andthenaddmailboxaccount,ClickOK

- Youwillseeinboxfolderissharedforyouafteryouaddanadditionale‐mailaccountandyou

canaccessbecauseyoure‐mailaccountwasassignedpermissionfromtheuserwhoallowyoutoaccesstheirmailboxtothespecificfolderasbellow.



UploadpicturetooutlookOvertheyears,displayingrecipientphotographsintheGlobalAddressList(GAL)hasbeenafrequently‐requestedfeature,highonthewishlistsofmanyExchangefolks.Particularlyinlargeorganizationsorgeographicallydispersedteams,it'sgreattobeabletoputafacetoanameforpeopleyou'venevermetordon'tfrequentlyhavefacetimewith.Employeesarecommonlyphotographedwhenissuingbadges/IDs,andmanyorganizationspublishthephotosonintranets.

Therehavebeenquestionsaboutworkaroundsorthird‐partyadd‐insforOutlook,andyoucanalsofindsomesamplecodeonMSDNandelsewhere.Afewyearsago,anunnamedITpersonwroteASPcodetomakeemployeephotosshowupontheintranetbasedontheEmployeeIDattributeinActiveDirectory‐whichwasimportedfromthecompany'sLDAPdirectory.Afunprojecttosatisfythecoderalter‐egoofthesaidITperson.

Luckily,youwon'tneedtoturntoyouralter‐egotodothis.Exchange2010andOutlook2010makethistaskasnap,withhelpfromActiveDirectory.ActiveDirectoryincludesthePictureattribute(we'llrefertoitusingitsldapDisplayName:thumbnailPhoto)tostorethumbnailphotos,andyoucaneasilyimportphotos—notthehigh‐resonesfromyour20megapixeldigitalcamera,butsmall,less‐than‐10K‐ishones,usingExchange2010'sImport‐RecipientDataPropertycmdlet.

PhotosinActiveDirectory?Really?

ThefirstquestionmostITfolkswouldwanttoaskis—What'simportingallthosephotosgoingtodotothesizeofmyActiveDirectorydatabase?AndhowmuchActiveDirectoryreplicationtrafficwillthisgenerate?ThethumbnailPhotoattributecanaccomodatephotosofupto100Kinsize,buttheImport‐RecipientDataPropertycmdletwon'tallowyoutoimportaphotothat'slargerthan10K.(Note,theattributelimitwasstatedas10Kearlier.Thishasbeenupdatedtostatethecorrectvalue.‐Bharat)

Theoriginalpictureusedinthisexamplewas9K,andyoucancompressitfurthertoamuchsmallersize‐let'ssayapproximately2K‐2.5K,withoutanynoticeabledegradationwhendisplayedatthesmallersizes.IfyoustoreusercertificatesinActiveDirectory,the10Korsmallersizethumbnailpicturesarecomparableinsize.Storingthumbnailsfor10,000userswouldtakecloseto100Mb,andit'sdatathatdoesn'tchangefrequently.

Note:Therecommendedthumbnailphotosizeinpixelsis96x96pixels.

Uploadpicturetooutlookforasingleuser

- Ifyouhaven'tregisteredtheSchemaMMCsnap‐inontheserveryouwanttomakethischangeon,goaheadanddosousingthefollowingcommand:regsvr32schmmgmt.dll



- FireupaMMCconsole(Start‐>Run‐>MMC)andaddtheSchemasnap‐in- IntheActiveDirectorySchemasnap‐in,expandtheAttributesnode,andthenlocatethe

thumbnailPhotoattribute.(TheSchemasnap‐inlistsattributesbyitsldapDisplayName).- InthePropertiespage,selectReplicatethisattributetotheGlobalCatalog,andclickOK.

- YoucankeepyourpicturesinthelocaldriveofyourMicrosoftExchangeServer2010.

Note:Youneedtomakesurethatyourpicture’snameisthesamenametoyoure‐mailaccountinyourExchangeServer2010.



LoadingsinglepictureintoActiveDirectory

NowyoucanstartuploadingpicturestoActiveDirectoryusingtheImport‐RecipientDataPropertycmdlet,asshowninthisexample:

Import‐RecipientDataProperty–IdentityReatha–Picture–FileData([Byte[]]$(Get‐Content–path“C:\Photos\reatha.jpg”–EncodingByte–ReadCount0))InordertoviewthepicturethatyouuploadedtotheExchangeServerforOutlook,youcangoto:

- OpenMicrosoftOutlook2010>File>Info>AccountSettings



LoadingmultiplepicturesintoActiveDirectory

YoucanuploadyourpicturetoActiveDirectorybyusingthe.ps1file.Forexample:

.\UploadPhoto.ps1–all

RecallorreplaceanemailmessagethatyousentTherecallfeatureinMicrosoftOutlooktriestostopdeliveryand,optionally,replaceanemailmessagethatyouhavealreadysenttoanotherMicrosoftExchangeServeruserwithinyourorganization.MessagerecallisavailableafteryouclickSendandthenrealizethatyouforgottoattachafile,includeinformationinthemessage,orwanttorevisewhatwasoriginallysent.Youcan’trecallmessagessenttoemailaddressesoutsideyourorganization.

NoteAMicrosoftExchangeServeraccountisrequired.

Inthisarticle

Recallamessage Recallandreplaceamessage Scenariosthataffectrecallsuccess

RecallamessageTorecallamessagewithoutsendingarevisedmessage,dothefollowing:

- InMail,intheNavigationPane,clickSentItems.- Openthemessagethatyouwanttorecall.- OntheMessagetab,intheMovegroup,clickActions,andthenclickRecallThisMessage.- ClickDeleteunreadcopiesofthismessage.

NoteIfyoudon’tseetheMessagetab,makesurethatyouhaveopenedasentmessageasdescribedinprevioussteps



NoteIfyouaresendingthemessagetomanypeople,youmaywanttocleartheTellmeifrecall

succeedsorfailsforeachrecipientcheckbox.- Hereistheresultofthesuccessfulre‐callmessageback.

RecallandreplaceamessageInadditiontotryingtorecallamessage,youcansendareplacementmessage.Forexample,ifyouforgottoincludeanattachment,youcantrytorecallthemessage,andthensendareplacementmessagethathastheattachment.Theoriginalmessageisremovedfromthemailboxesoftherecipientswhohavenotyetopenedit,andthenisreplacedwiththeupdatedmessage.

Torecallamessageandthensendarevisedmessage,dothefollowing:

- InMail,intheNavigationPane,clickSentItems.- Openthemessagethatyouwanttorecallandreplace.- OntheMessagetab,intheMovegroup,clickActions,andthenclickRecallThisMessage.



- ClickDeleteunreadcopiesandreplacewithanewmessage.

NoteIfyouaresendingthemessagetomanypeople,youmaywanttocleartheTellmeifrecallsucceedsorfailsforeachrecipientcheckbox.

- ClickOK,andthenupdatethenewmessage.Youcanalsoremoveoraddfileattachments.- ClickSend.

Formoreinformationpleasevisitthiswebsite:http://office.microsoft.com/en‐us/outlook‐help/recall‐or‐replace‐an‐email‐message‐that‐you‐sent‐HA010354931.aspx

ImportPSTfiletoExchangeserver2010

MergingMultiplePSTFilesinOutlookintooneMasterArchiveThisscenariodescribeyouaboutthemergingmultiplePSTfilesinOutlookintooneMasterArchive.AndthenimportthePSTfilesintoExchangeServer.

Atanyrate,IwaslookingforawaytocombinemultiplePSTfilesintoone—inordertoconsolidatealloftheoldAuto‐Archives(someofwhichhadthankfullybeenmovedtothenetworkdrivepriortoherharddrivecrashing)frompreviousOutlookprofilesintoonemasterarchivefile.

Formytest,Icreatedthreearchivefiles:OutlookDataFile‐1,OutlookDataFile‐2andOutlookDataFile‐3.



Createa“Master”PSTonthenetworkdrivethatistocontainthemergedcontentsofarchivesOutlookDataFile‐1,OutlookDataFile‐2andOutlookDataFile‐3:

ChoosepathtosaveyourMasterDatafilethatusetocombinemultipleOultookDatafilesin.



HereistheblankMasterdatafilethatwejustcreateinMicrosoftOutlook2010.

So,with“Master”highlightedinmyFolderListview,IwenttoFile>Open>Import:

Ithensaid“Importfromanotherprogramorfile”:

…and“OutlookDataFile(.pst)”:



Unfortunately,asIdiscovered,youhavetoclosethePSTfilefirst:

…soafterclosingthefile:

…Runthesamestepsagain,makingsuretoselect“Donotimportduplicates”:



…andmatchtheoptionsbelow:







AstheresultafterwemergeallthemultipleOutlookDatafileinasinglefile“Master”,havealookthepicturebellow.



Formoreinformationvisitthiswebsite:http://www.cwps.com/2011/02/25/how‐to‐merging‐multiple‐pst‐files‐in‐outlook‐into‐one‐master‐archive/

HowtoImportPSTFilesintoMailboxeswithExchange2010SP1InExchangeServer2010SP1importingPSTfilesintomailboxesisperformedusingMailboxImportRequests.ThesearesimilartoexportrequestsinthattheyareprocessedbyaClientAccessserver.

BecausemultipleClientAccessserverscanexistinasitethereisnowaytodeterminewhichonewillprocesstherequest,thereforethePSTfiletoimportmustbeaccessibleviatheUNCpathofsharedfolder.

Theaccountthatisperformingtheimportalsoneedstobeexplicitlygrantedtherightstodoso,asnoaccountshavethisrightbydefault(evenOrganizationadministrators).

CreategroupthathasrightpermissiontomanageonimportingthePSTfileintoExchangeServer2010.

CreatethegroupthathasrightpermissiontoimportPSTfile



AddMailbox_ImportgrouptobememberofExchangeAdministrator

GrantingUserRightsforMailboxImportsinExchange2010SP1

Thefirststepistogranttherighttoimportmailboxestoanaccountinyourorganization.IntheExchangeManagementShellrunthefollowingcommand.

CreatingaNetworkShareforMailboxImportsinExchange2010SP1

NextweneedtocreatethenetworksharethatwillbeusedasthefilepathforthePSTfilestobeimported.AllthatisrequiredhereisanetworksharethattheExchangeTrustedSubsystemgroup



hasread/writepermissionto.TheentirePSTfilethatyouneedtoimporttothemailboxaccountinExchangeServeryoucankeepthemallinthissharefolder.

GivetheModifypermissionfortheauthenticationtothesharefolderwithinPSTfiles.

ToimportthePSTfilesintoExchangeServer,youcanfollowthefollowingstep:

- OpenExchangeManagementShell(EMS)- Andthenfollowthecmdlet:

Seetheexample:Dir\\exsrv01\Outlook_pst\*.pst|%(New‐MailboxImportRequest–NameBulkPSTImport–BatchNameRecoverd–Mailbox$_.BaseName–FilePath$_.FullName)

Andthentype:



Get‐MailboxImportRequest–StatusCompleted

OpenOutlookWebApp(OWA)andthenloginasthemailboxthatyoujustimportthePSTfile.

Hereisthee‐mailmessagesthatwereimportedfromPSTfiletotheExchangeServerthenewmailboxaccount.



Auto‐Signature

CodingtheVBScriptforSignatureTemplateVBScript(VisualBasicScriptingEdition)isanActiveScriptinglanguagedevelopedbyMicrosoftthatismodeledonVisualBasic.Itisdesignedasa“lightweight”languagewithafastinterpreterforuseinawidevarietyofMicrosoftenvironments.VBScriptusestheComponentObjectModeltoaccesselementsoftheenvironmentwithinwhichitisrunning;forexample,theFileSystemObject(FSO)isusedtocreate,read,updateanddeletefiles.

VBScriptisascriptinglanguage Ascriptinglanguageisalightweightprogramminglanguage VBScriptisalightversionofMicrosoft'sprogramminglanguageVisualBasic

Inthisscenario,theExchangeAdministratoruseVBScripttogatheringattributioninformationfromActiveDirectoryforcreatingasignaturefortheusersintheorganization.



ManageGroupPolicyforAutoSignatureLogintoDomainControllerandthenfollowtheinstruction:

- Start>AdministrativeTools>GroupPolicyManagement- ExpandForest>Domain>GroupPolicyObject- AndthencreatenewGroupPolicy- LinktheGroupPolicytotheOUwhereyouwanttoapplyfor

NowgototheclientsideandthenopenMicrosoftOutlook2010,letcreatenewe‐mailorreplye‐mailthattimetheautosignatureisappliedtothemessage.



ActiveDirectoryRightManagementServiceByusingActiveDirectoryRightsManagementServices(ADRMS)andtheADRMSclient,youcanaugmentanorganization'ssecuritystrategybyprotectinginformationthroughpersistentusagepolicies,whichremainwiththeinformation,nomatterwhereitismoved.YoucanuseADRMStohelppreventsensitiveinformation—suchasfinancialreports,productspecifications,customerdata,andconfidentiale‐mailmessages—fromintentionallyoraccidentallygettingintothewronghands.

RightManagementPolicyItisverysimplewaytocreatetheRightManagementPolicyinwindowsServer2008R2.MakesureyouhaveinstalledtheActiveDirectoryRightManagementService(ADRMS)alreadyonyourServer.LogintoActiveDirectory>Start>AdministrativeTools>ActiveDirectoryRightManagementServices.

- ExpandyourADRMScluster- Select“RightsPolicyTemplate”- AttheActionpane,ClickonCreateDistributedRights- Andthenselecttherightsthatyouwillapplytothetemplate

Forthisscenario,theExchangeAdministratorisallowonlyviewtothetemplate



ApplyRightManagementPolicybyusingTransportRulesRightsManagementPolicyisworkingfinewiththeTransportRuleinExchangeServer2010.ThisarticletheExchangeAdministratorwillguideyouhowtoapplyRightManagementPolicybyusingTransportRules.

- OpenExchangeManagementConsole(EMC)- UnderOrganizationConfigurationnode,SelecttheHubTransportsub‐node- SelectTransportRuletabandthenrightclickontheresultpanetocreatethenewTransport

Rule

- IntheConditionsofTransportRule,pleaseselecttheconditionthatyouneedyourtransport

ruleapplyfor(Hereweshowyouhowtofiltersubjectormessagebodycontainsspecificwords.)



- IntheActions,pleaseselectoneormoreactionsthatyouneed(Hereweshowyouhowto

applyRightManagementServicetemplatetoyourtransportrule)

- AttheSender,Testinganewe‐mailmessagewiththespecificsubjectormessagebodytothe

transportrulethatwasfilterandblock.



- Atthereceiver,OpenMicrosoftOutlook2010andthenviewyourmessagethatwascomewith

thesubjectandbodymessagefilteringbyTransportrule.Atthefirsttime,yourmessagecouldnotviewanditwillneedyourexchangecredentialandauthenticatione‐mailtoreadit.

- Youcanviewthepermissionofyourmessageandhereyourmessageisonlyviewpermission.

- Thismessagecouldnotallowyouto“Reply/RepyAll/Forward/Copy/Print…”BecausetheAD

RMSpolicyisallowedonlyviewpermission.



Note:

NotonlythispolicythattheExchangeAdministratorwasshownyouiscouldwork,butyoucanmanagemorepolicythanthisaccordingtoyourneed.

TypeofDistributionGroupInyourMicrosoftExchangeServer2010hastwokindsofDistributionGroupsuchasDistributionGroup(SecurityDistributionGroup,SecurityDistributionGroup)andDynamicDistributionGroup.

DistributionGroupDistributiongroupsaremail‐enabledActiveDirectorygroupobjectsthatarecreatedtoexpeditethemasssendingofe‐mailmessagesandotherinformationwithinanExchangeorganization.

Therearetwotypesofdistributiongroups:

Mail‐enableduniversaldistributiongroupscanbeusedonlytodistributemessages. Mail‐enableduniversalsecuritygroupscanbeusedtodistributemessagesaswellastogrant

accesspermissionstoresourcesinActiveDirectory.

It'simportanttonotetheterminologydifferencesbetweenActiveDirectoryandExchange2010.InActiveDirectory,adistributiongroupreferstoanygroupthatdoesn'thaveasecuritycontext,whetherit'smail‐enabledornot.Incontrast,inExchange2010,allmail‐enabledgroupsarereferredtoasdistributiongroups,whethertheyhaveasecuritycontextornot.



CreateDistributionGroupYoucancreateDistributionGroupbyusingExchangeManagementConsole(EMC).Youcancompletethistaskbythefollowingsteps:

- OpenExchangeManagementConsole- UnderRecipientConfiguration,selectDistributionGroup- Inresultpane,RightClickandthencreateNewDistributionGroup

- InGrouptype,Select“Security”- SpecifyanOrganizationUnitratherthanusingadefaultone- Namingyourgroup

- PropertiesyourDistributionGroupandthenaddmembertoyourgroup



Note:

DistributionGroupcanbeusedforGroupofContactsList,butthememberismanuallyaddedbyanExchangeAdministratororgroupofExchangeAdministratorinyourorganization.

UserDistributionforgroupforwarder

InthistopicofDistributionGroup,ThisExchangeAdministratorusesittomanagethegroupofforwarderinthisorganization.Forexample:

TheExchangeadministratorhasaDistributionGroupnameasEKReathawithe‐[email protected]:[email protected]@[email protected]

Accordingtohisscenario,TheExchangeAdministratorinthisorganizationhasforwarde‐[email protected]@itlink.com.kh,[email protected],[email protected]

DynamicDistributionGroupDynamicdistributiongroupsaremail‐enabledActiveDirectorygroupobjectsthatarecreatedtoexpeditethemasssendingofe‐mailmessagesandotherinformationwithinanExchangeorganization.



Unlikeregulardistributiongroupsthatcontainadefinedsetofmembers,themembershiplistfordynamicdistributiongroupsiscalculatedeachtimeamessageissenttothegroup,basedonthefiltersandconditionsthatyoudefine.Whenane‐mailmessageissenttoadynamicdistributiongroup,it'sdeliveredtoallrecipientsintheorganizationthatmatchthecriteriadefinedforthatgroup.

CreateDynamicDistributionGroup- OpenExchangeManagementConsoleandthenselectDistributionGroupunderRecipient

Configurationnode.RightclickontheresultpaneandthencreateNewDynamicDistributionGroupasbellow.

- GivethenameandAliasnameforNewDynamicDistributionGroup

UseDynamicDistributionGroupforGroupofContactsListDynamicDistributionGroupnormallyisusedtodistributeallthespecificgroupofuserse‐mailcontactsinyourorganization.Generally,DynamicDistributionGroupiscreatedtomounttothespecificOrganizationUnit(OU)inyourorganizationandthenalltheusersaccountinthatOU



distributetheire‐mailaddresstotheGroup.Allthee‐mailaccountisautomaticallyaddtogroupaftertheiraccountintheOUhasenablemailboxaccountinExchangeServer.

ToolboxTheToolboxisacollectionofdiagnostic,troubleshooting,andrecoverytoolsinstalledwithMicrosoftExchange.ThetoolsavailableintheToolboxworkcenteraredividedintotwocategories:

DedicatedMicrosoftManagementConsole(MMC)3.0toolssometools,suchasQueueViewer,areself‐hostedinanMMCconsole.TheExchangeManagementConsole(EMC)doesn'thavetoberunningtousetheMMCtools.

IndependenttoolsIndependenttools,suchastheExchangeBestPracticesAnalyzer,aren'tintegratedwiththeEMCandfunctionasseparateexecutablefileswhenrunfromtheToolbox.ThesetoolshavetheirownHelpfilecontent.Formoreinformationabouthowtousethetools,refertotheHelpfileforeachtool.

WhenyouclicktheToolboxnodefromtheMicrosoftExchangeOn‐Premisesnode,allthetoolsdiscussedinthistopicaredisplayedintheresultpane.Youcanopenthetoolbydouble‐clickingthetoolname,byclickingOpenToolfromtheactionpane,orfromtheright‐clickmenu.

WhenyouclicktheToolboxnodefromaremoteforestnode,onlythefollowingtoolsaredisplayed:

RoleBasedAccessControl(RBAC)UserEditor



MessageTracking CallStatistics UserCallLogs

ConfigurationManagementToolsThefollowingconfigurationmanagementtoolsareavailableintheToolbox:

BestPracticesAnalyzerTheExchangeBestPracticesAnalyzerautomaticallyexaminesanExchangedeploymentanddetermineswhethertheconfigurationisinlinewithMicrosoftbestpractices.WerecommendrunningtheExchangeBestPracticesAnalyzerafteryouinstallanewExchangeserver,upgradeanexistingExchangeserver,ormakeconfigurationchanges.

DetailsTemplatesEditorTheDetailsTemplatesEditorcontrolstheappearanceoftheobjectpropertiesaccessedbyusingaddresslistsinMAPI32‐bitclientapplications,suchasMicrosoftOutlook.Forexample,whenauseropensanaddresslistinOutlook,thepropertiesoftherecipientsinthataddresslistaredisplayedinaccordancewiththedetailstemplatethatexistsinyourExchangeorganization.

PublicFolderManagementConsoleThePublicFolderManagementConsoleisanMMC3.0‐basedinterfacethatprovidesyouwithagraphicaluserinterface(GUI)forcreating,configuring,andmanagingpublicfolders.

RemoteConnectivityAnalyzerTheExchangeRemoteConnectivityAnalyzerisaWeb‐basedtoolthathelpsyoutroubleshootconnectivityissues.Thetoolsimulatesseveralclientlogonandmailflowscenarios.Whenatestfails,manyoftheerrorshavetroubleshootingtipstoassistyouincorrectingtheproblem.

RoleBasedAccessControl(RBAC)UserEditorTheRBACUserEditorallowsyoutoadduserstomanagementrolegroups.Whenyouopenthistool,youneedtosignintoMicrosoftOfficeOutlookWebAppasauserwhohaspermissiontoperformthistask.Afteryousignin,youaredirectedtotheAdministratorRolestab.

MailFlowToolsThefollowingmailflowtoolsareavailableintheToolbox:

MailFlowTroubleshooterTheMailFlowTroubleshooterassistsyouintroubleshootingcommonmailflowproblems.Youcandiagnoseaproblembyselectingthesymptomsobserved.Basedonthesymptoms,thetoolwalksyouthroughthecorrecttroubleshootingpath.Itshowsananalysisofpossiblerootcausesandprovidessuggestionsforcorrectiveactions.

MessageTrackingTheMessageTrackingtoolhelpsyouaccessandconfiguredeliveryreports.Whenyouopenthistool,youneedtosignintoOutlookWebAppasauserwhohaspermissiontoperformthistask.Afteryousignin,youaredirectedtotheDeliveryReportstab

QueueViewerQueueViewerhelpsyoumonitormailflow,andinspectqueuesandmessages.Youcanalsoperformactionstothequeuingdatabasessuchassuspendingorresumingaqueue,orremovingmessages.



RoutingLogViewerRoutingLogViewerisatoolyoucanusetoopenaroutinglogfilethatcontainsinformationabouttheroutingtopology.Youcanalsoopenasecondroutinglogandcompareittothefirstlogopened.Thetoolconsistsofaparserandapublicuserinterface.TousetheRoutingLogViewertoviewlogsofroutingtableconfigurationchanges,youmustconnecttoanExchangeserverthathastheHubTransportserverroleortheEdgeTransportserverroleinstalled.

TrackingLogExplorerTrackingLogExplorerprovidesadetailedlogofallmessageactivityasmessagesaretransferredtoandfromanExchangeserverthathastheHubTransportserverrole,theMailboxserverrole,ortheEdgeTransportserverroleinstalled.ExchangeserversthathavetheClientAccessserverroleorUnifiedMessaging(UM)serverroleinstalleddon'thavemessagetrackinglogs.Messagetrackinglogscanbeusedformessageforensics,mailflowanalysis,reporting,andtroubleshooting.

PerformanceToolsThefollowingperformancetoolsareavailableintheToolbox:

PerformanceMonitorPerformanceMonitorisatoolyoucanconfiguretocollectinformationabouttheperformanceofyourmessagingsystem.Specifically,youcanuseittomonitor,creategraphs,andlogperformancemetricsforcoresystemfunctions.YoucanalsousePerformanceMonitortomonitorExchange‐specificparameters,suchasthenumberofinboundoroutboundmessagesperhourorthenumberofdirectorylookupsperformedbyExchange.PerformanceMonitoriscommonlyusedtoviewkeyparameterswhiletroubleshootingperformanceproblems.It'salsousedtogatherbaselineperformancedatatoperformhistoricaltrendanalysisandmeasuretheimpactofchangestoyourExchangeenvironment.

PerformanceTroubleshooterPerformanceTroubleshooterhelpsyoutolocateandidentifyperformance‐relatedissuesthatcouldaffectanExchangeserver.Youcandiagnoseaproblembyselectingthesymptomsobserved.Basedonthesymptoms,thetoolwalksyouthroughthecorrecttroubleshootingpath.PerformanceTroubleshooteridentifiespossiblebottlenecksandsuggestscorrectiveactions.

UnifiedMessagingToolsThefollowingUnifiedMessagingtoolsareavailableintheToolbox:

CallStatisticsTheCallStatisticstoolprovidesaggregatedstatisticalinformationaboutcallsforwardedtoorplacedbyUnifiedMessagingservers.Thisinformationcanbeusedifyou'reinterestedinoverallstatisticsfortheExchange2010UnifiedMessagingserversinyourorganization.Whenyouopenthistool,youneedtosignintoOutlookWebAppasauserwhohaspermissiontoperformthistask.Afteryousignin,youaredirectedtotheCallStatisticspage.Formoreinformation,seethefollowingtopics:

o ReviewtheUMCallsforYourOrganizationo UsingUnifiedMessagingTools



UserCallLogsTheUserCallLogstooldisplaysthecalldatarecordsforaselectedUM‐enableduser.TheselogsareusefulinHelpdesksituationswheretheHelpdeskemployeemustgatherinformationaboutspecificcallsforaUM‐enabledusertoassistthemindiagnosingandfixingissues.Whenyouopenthistool,youneedtosignintoOutlookWebAppasauserwhohaspermissiontoperformthistask.Afteryousignin,youaredirectedtotheUserCallLogspage.Formoreinformation,seethefollowingtopics:

o ReviewtheUMCallsforaUsero UsingUnifiedMessagingTools

ConfigurationManagementToolsInthepreviousstepyoudiscussalreadyabouttheConfigurationManagementToolsthathassomenodesuchasBestPracticeAnalyzer,DetailsTemplatesEditor,PublicFolderManagementconsole,RemoteConnectivityAnalyzer,RoleBaseAccessControl(RBAC)UserEditor.

PublicFolderManagementconsoleThePublicFolderManagementConsoleisaMicrosoftManagementConsole(MMC)3.0‐basedinterfacethatprovidesyouwithagraphicaluserinterface(GUI)tocreate,configure,andmaintainpublicfolders.YoucanaccessthePublicFolderManagementConsolefromtheToolboxintheExchangeManagementConsole(EMC).

CreatePublicFolderDatabase

- OpenExchangeManagementConsole(EMC)- SelectMailboxunderOrganizationConfigurationnode- SelectDatabaseManagementtab- Rightclickontheresultpane,CreateNewPublicFolder



CreateautoreplytemplateInPublicFolderManagementconsoleyoucancreatethefoldertopostanythingornewstothewholeorganization.Moreover;youcanuseittoenablee‐mailforthepublice‐mailthateveryExchangemailusercanreadthee‐mailmessageaspublicplace.Butinthisstep(Createautoreplytemplate).TheExchangeAdministratorinthisorganizationwillshowyouonlyabouthowtopostnewsorthinginpublicfolder.Thisscenarioweguideyouhowtopostautoreplye‐mailtemplatetotheorganization.Seethebellowsteps:

- OpenExchangeManagementConsole- SelectToolboxnode- InConfigurationManagementtools,OpenPublicFolderManagementConsole- WhenthePublicFolderManagementConsoleappear,SelectDefaultPublicFolders- RightClickontheresultpane,CreateNewPublicFolder

- OpenMicrosoftOutlook2010withthee‐mailuserwhoishaspermissiontothePublicFolder

andnowyoucanpostanythingornewssuchasthetemplatefortheautoreplye‐mail.



Assignpermission

AssignfullcontroltospecificmailboxaccountInPublicFolderManagementconsoleyoucanassignthepermissiontothenewpublicfolderbyassigntothemailboxaccount.BydefaultthenewpublicfolderthatcreateithasgrantpermissiontothetwouseraccountsuchasAnonymouswithdefaultpermissionasCustom(Createitem)andDefaultaccountasAuthor(Createitem,Readitem,EditOwn,DeleteOwn).

- ToallowsomeonetomanageonthePublicFolderyoucanaddtheirmailboxandthenassign

permissionasbellow.



- OpenMicrosoftOutlookwiththeuserthattheirmailboxisassignedpermissiontothePublicFolderastheownersothatusercanpost,

…Deleteordoanythingastheownerfolder.



WhenotheruserwhohasnopermissiononthePublicFoldertheycannotdeleteorpostnewstothepublicfolder

TheMicrosoftOutlookwarningmessageisdisplay“Someitemscannotbedeleted.Theywereeithermovedoralreadydeleted,oraccesswasdenied”



DenynormalusertopostneweventIfyouneedtodenyforotheruserintheorganizationtodeleteorpostanythinginthepublicfolder,itisaneasywaytodothatjustgiveonlyReviewerpermissiontotheDefaultuserandnonepermissiontotheAnonymoususer.Seethefollowingscenarios:



- Now,theuserwhohasnopermissiondoesnothaverightprivilegetodeleteanypostiteminthepublicfolderofExchangeServer2010.

- TheOutlookwarningmessageisdisplay“Youdon’thavepermissiontocreateanentryinthis

folder.Rightclickthefolder,andthenclickpropertiestocheckyourpermissionsforthefolder.Seethefolderowneroryouradministratortochangeyourpermissions.”

PublicCalendarPublicCalendarisnotfarawayfromanypostiteminpublicfolderthatwehavediscussedalreadyinthepreviouspoint.UnderthePublicFoldermanagementyoucancreateanyoutlookpublicitemsaswell.ThisscenariotheExchangeAdministratorinthisorganizationwillperformapubliccalendarunderpublicfolder.

CreatePubliccalendarfolderTodothatyoucanperformtocreatethehierarchicalstructureofyourpubliccalendarunderthepublicfolderdependentontheneededinyourorganization.

- SelectToolboxnodebyusingExchangeManagementConsole- OpenPublicFolderManagementConsole- CreatethePublicCalendarfolder



CreatePublicCalendaritemItisverysimplewaytocreatethepubliccalendariteminthepublicfolder.Seethebelowsteps:

- OpenyourMicrosoftOutlook- OpenthepublicfolderinOutlook- ExpandtothePublicCalendarFolder- RightclickonthePublicCalendarFolderwhichyouneedtocreatenewcalendaritem- SelectNewFolder



- Atthepopupconsole,Namingthenewcalendaritem- InFoldercontainers,selectCalendarItems- SelecttheParentfolderandthenOK

- HereisthenewPublicCalendarItemsinthePublicfolder,soeveryonewhoisinthegrouphas

thepermissiontocreateandreadthiscalendar.



BestpracticeanalyzerBestPracticesAnalyzerTheExchangeBestPracticesAnalyzerautomaticallyexaminesanExchangedeploymentanddetermineswhethertheconfigurationisinlinewithMicrosoftbestpractices.WerecommendrunningtheExchangeBestPracticesAnalyzerafteryouinstallanewExchangeserver,upgradeanexistingExchangeserver,ormakeconfigurationchanges.

- OpenExchangeManagementConsole- SelectToolboxnode- InConfigurationmanagementtools,SelectBestPracticesAnalyzer

- TheMicrosoftExchangeBestPracticesAnalyzerwizardisappearingandthenyoucanclickon

Selectoptionsforanewscan.

- InSelectthetypeofscantoperform:Youcanselectthetaskwhichyouwanttoscan“Health

Check”



- ClickViewareportofthisBestPracticesscan

- NowyouwillseeanyCriticalIssues.TheMicrosoftExchangeBestPracticesAnalyzerwilltell

youaboutthesolutiontosolveit.Youjustclickonthe“Tellmemoredetailaboutthisissueandhowtoresolveit.”



- YoucanfollowtheguidebooktotroubleshootingtotheproblemofyourExchangeServer.

- OpenExchangeManagementShell(EMS)andthentypethecmdlet“Get‐TransportConfig”



- TosoletheissueyoucanfollowtheresolutionbellowthatallowsyoudecreasetheMaximum

andminimumtosendandreceivemessagefromyourExchangeServer.



MailflowtoolMailflowtoolisthetoolthatallowstheExchangeAdministratortotrackingandtroubleshootinginExchangeServer.ThereissometoolunderMailflowtoolsuchasMailFlowTroubleshooter,MessageTracking,QueueViewer,RoutingLogViewer,andTrackingLogExplorer.

MailflowtroubleshooterMailFlowTroubleshooterTheMailFlowTroubleshooterassistsyouintroubleshootingcommonmailflowproblems.Youcandiagnoseaproblembyselectingthesymptomsobserved.Basedonthesymptoms,thetoolwalksyouthroughthecorrecttroubleshootingpath.Itshowsananalysisofpossiblerootcausesandprovidessuggestionsforcorrectiveactions.

- OpenExchangeManagementConsole- SelectToolboxnode- UnderMailflowtools,OpenMailFlowTroubleshooter

- ClickonGototheWelcomescreen

- ClickNext



- Astheresultissueisnotoccurred

MessagetrackingMessageTrackingTheMessageTrackingtoolhelpsyouaccessandconfiguredeliveryreports.Whenyouopenthistool,youneedtosignintoOutlookWebAppasauserwhohaspermissiontoperformthistask.Afteryousignin,youaredirectedtotheDeliveryReportstab

Trackingonspecificsubjectline

- OpenExchangeManagementConsole- SelectToolbox,underMailflowtoolsopenMessageTracking- OutlookWebAppwillbeappear- LoginwiththeExchangeAdministratoraccount



- InMailOptions,selectManageMyOrganization- SelectMailControl- DeliveryReports- Browsetothemailboxwhichyouwanttosearche‐mailfor- Ifyouneedtosearchonspecificsubject,youcantype“Keyword”in“Searchforthesewordsin

thesubjectline”

TrackingforallmessagesTrackingforallmessagesbyusingMessageTrackingisnotdifferentfromtrackinginthespecificsubjectline.Youmanagethesamework,butjustleavethe“Searchforthesewordsinthesubjectline”blankisready.Havealooktothescenariobellow:



QueueViewerQueueViewerQueueViewerhelpsyoumonitormailflow,andinspectqueuesandmessages.Youcanalsoperformactionstothequeuingdatabasessuchassuspendingorresumingaqueue,orremovingmessages.ToperformtaskontheQueueViewer,Youcanfollowthefollowingsteps:

- OpenExchangeManagementConsole- SelectToolbox,underMailflowtoolopenQueueViewer

TrackinglogexplorerTrackingLogExplorerTrackingLogExplorerprovidesadetailedlogofallmessageactivityasmessagesaretransferredtoandfromanExchangeserverthathastheHubTransportserverrole,theMailboxserverrole,ortheEdgeTransportserverroleinstalled.ExchangeserversthathavetheClientAccessserverroleorUnifiedMessaging(UM)serverroleinstalleddon'thavemessagetrackinglogs.Messagetrackinglogscanbeusedformessageforensics,mailflowanalysis,reporting,andtroubleshooting.

- OpenExchangeManagementConsole- SelectToolbox,underMailflowtoolsopenTrackinglogexplorer- InMessageTrackingParameters,youcancompletesomefieldasbellow



- HereistheresultofTrackinglogexplorerinExchangeServer2010thatlogyoutothe

messagesoftheuserthatyoutrackingon.

PerformancetoolPerformancetoolisatoolintheToolboxofExchangeServerthatallowsyoutocheckingontheperformanceonyourExchangeServer.TherearetwofeaturesinPerformancetoolsuchasPerformanceMonitorandPerformanceTroubleshooter.

Performancemonitor



PerformanceMonitoringisoneofthedarkartswhichadministratorsarerarelygiventhetimetomaster.PerformanceMonitoronaWindowsServer,inparticularonceExchangeServerisinstalled,givesusthecapabilitytocollectenormousamountsofdata;ensuringthatanyunderstandingofhowourparticularExchangeServerisperformingisinvariablylostbeneathaseaofprettybutunintelligiblepeaksandtroughs.Howeveritisn’tactuallyverydifficultatalltoconfigurePerformanceMonitoronyourExchangeServer,collectsomeusefuldataandtheninterprettheresults.ItisoftenthenveryeasytomakechangestoyourserverswhichcanhavequiteadramaticeffectontheperformanceoftheserverandtheexperienceofOutlookclientsalike.Thereisnowanenormousamountofinformationwhichcanassistyouinunderstandingwhatinformationtocollectandhowtointerprettheresults.

Systemmonitor

Addnewitemsformonitoring Tomonitoringontheperformanceofyourserveryoucanaddanyitemsasrequire.Forexample,theExchangeAdministratoraddsProcesstomonitoronitsperformance.

- NowtheSystemMonitorisdisplayedtheProcesserperformanceforyou.



PerformanceTroubleshooterInthisblogwewillbelearningexchangeperformancetroubleshooterwiththehelpofbuilt‐intoolEXTRA.WorkingwithperformanceissueisoneofthecriticaltroubleshootingareasforanExchangeadministrator.

Datacollectionrequiresextremepatience.Understandingsymptomscanresolvetheissuemostofthetime.Inordertominimizetheeffortwhiletroubleshootingsuchissues.MicrosofthasintroducedEXTRAtool(PrettyOld).ThetoolisuserfriendlyandcanhelpanyonewhoisnewtoExchangeserver.

Formoreinformationvisitthiswebsite:

http://msexchangeteam.in/exchange‐performance‐troubleshooter‐extra/

microsoft exchange server aministrator work

Documents