Exchange Server 2010 Administration: Real World Skills for MCITP Certification and Beyond (Exams 70-662 and 70-663)

By Joel Stidley and Erik Gustafson

A soup-to-nuts guide for messaging administrators

Exchange Server is the world’s leading e-mail server software. Windows 7 and Server 2008 R2 have made changes that messaging administrators need to know and understand in their daily work with Exchange Server. This Sybex guide focuses on the skills, concepts, technologies, and potential pitfalls that admins in the trenches need to understand. It also provides the information they need to earn MCITP certification.

• Updates in Exchange Server, the world’s leading e-mail server software, require messaging administrators to update their knowledge in order to provide the best possible e-mail solutions
• Highly focused and comprehensive, this guide teaches you to design a highly available e-mail messaging server, install and configure Exchange Server 2010, work with recipients, groups and mailboxes, configure public folders, secure Exchange, and more
• CD includesvideo walkthroughs of more difficult tasks, practice exams, and electronic flashcards.

Exchange Server 2010 Administration offers real-world knowledge that messaging admins need every day and helps prepare candidates for the MCITP certification exam.

CD-ROM/DVD and other supplementary materials are not included as part of the e-book file, but are available for download after purchase.

• Language: English
• Publisher: Wiley
• Release date: Oct 19, 2010
• ISBN: 9780470947357

Book preview

Title Page

Acquisitions Editor: Jeff Kellum

Technical Editor: Bob Reinsch

Production Editor: Christine O’Connor

Copy Editor: Judy Flynn

Editorial Manager: Pete Gaughan

Production Manager: Tim Tate

Vice President and Executive Group Publisher: Richard Swadley

Vice President and Publisher: Neil Edde

Media Project Manager 1: Laura Moss-Hollister

Media Associate Producer: Josh Frank

Media Quality Assurance: Shawn Patrick

Book Designers: Judy Fung and Bill Gibson

Compositor: Craig Woods, Happenstance Type-O-Rama

Proofreader: Scott Klemp and Louise Watson, Word One New York

Indexer: Robert Swanson

Project Coordinator, Cover: Lynsey Stanford

Cover Designer: Ryan Sneed

Copyright © 2011 by Wiley Publishing, Inc., Indianapolis, Indiana

Published simultaneously in Canada

ISBN: 978-0-470-62443-2

No part of this publication may be reproduced, stored in a retrieval system or transmitted in any form or by any means, electronic, mechanical, photocopying, recording, scanning or otherwise, except as permitted under Sections 107 or 108 of the 1976 United States Copyright Act, without either the prior written permission of the Publisher, or authorization through payment of the appropriate per-copy fee to the Copyright Clearance Center, 222 Rosewood Drive, Danvers, MA 01923, [phone], fax [phone]. Requests to the Publisher for permission should be addressed to the Permissions Department, John Wiley & Sons, Inc., 111 River Street, Hoboken, NJ 07030, [phone], fax [phone], or online at http://www.wiley.com/go/permissions.

Limit of Liability/Disclaimer of Warranty: The publisher and the author make no representations or warranties with respect to the accuracy or completeness of the contents of this work and specifically disclaim all warranties, including without limitation warranties of fitness for a particular purpose. No warranty may be created or extended by sales or promotional materials. The advice and strategies contained herein may not be suitable for every situation. This work is sold with the understanding that the publisher is not engaged in rendering legal, accounting, or other professional services. If professional assistance is required, the services of a competent professional person should be sought. Neither the publisher nor the author shall be liable for damages arising herefrom. The fact that an organization or Web site is referred to in this work as a citation and/or a potential source of further information does not mean that the author or the publisher endorses the information the organization or Web site may provide or recommendations it may make. Further, readers should be aware that Internet Web sites listed in this work may have changed or disappeared between when this work was written and when it is read.

For general information on our other products and services or to obtain technical support, please contact our Customer Care Department within the U.S. at [phone], outside the U.S. at [phone] or fax [phone].

Wiley also publishes its books in a variety of electronic formats. Some content that appears in print may not be available in electronic books.

Library of Congress Cataloging-in-Publication Data

Stidley, Joel, 1976- Exchange server 2010 administration : real world skills for MCITP certification and beyond / Joel Stidley, Erik Gustafson. p. cm. ISBN-13: 978-0-470-62443-2 (pbk.) ISBN-10: 0-470-62443-4 (pbk.) ISBN: 978-0-470-94733-3 (ebk.)ISBN: 978-0-470-94735-7 (ebk.)ISBN: 978-0-470-94734-0 (ebk.) 1. Microsoft Exchange server. 2. Client/server computing. 3. Electronic mail systems. 4. Electronic data processing personnel—Certification. I. Gustafson, Erik, 1971- II. Title. QA76.9.C55S797 2011 005.7’1376—dc22 2010036021

TRADEMARKS: Wiley, the Wiley logo, and the Sybex logo are trademarks or registered trademarks of John Wiley & Sons, Inc. and/or its affiliates, in the United States and other countries, and may not be used without written permission. Microsoft is a registered trademark of Microsoft Corporation in the United States and/or other countries. All other trademarks are the property of their respective owners. Wiley Publishing, Inc., is not associated with any product or vendor mentioned in this book.

10 9 8 7 6 5 4 3 2 1

Dear Reader,

Thank you for choosing Microsoft Exchange Server 2010 Administration: Real World Skills for MCITP Certification and Beyond. This book is part of a family of premium-quality Sybex books, all of which are written by outstanding authors who combine practical experience with a gift for teaching.

Sybex was founded in 1976. More than 30 years later, we’re still committed to producing consistently exceptional books. With each of our titles, we’re working hard to set a new standard for the industry. From the paper we print on, to the authors we work with, our goal is to bring you the best books available.

I hope you see all that reflected in these pages. I’d be very interested to hear your comments and get your feedback on how we’re doing. Feel free to let me know what you think about this or any other Sybex book by sending me an email at [e-mail]. If you think you’ve found a technical error in this book, please visit http://sybex.custhelp.com. Customer feedback is critical to our efforts at Sybex.

Best regards,

Neil Edde

Vice President and Publisher

Sybex, an Imprint of Wiley

This book is dedicated to our friendship, our loving families, and our friends; all of which make us who we are today.

Acknowledgments

This book, like all publications, took a lot of hard work and patience on many levels. We would like to thank Jeff Kellum, Christine O’Connor, and the others at Sybex for their commitment to this book and their vision for this new series of books. Also, a sincere thank you goes out to the entire Microsoft Exchange development team for making a truly awesome product and doing so much to meet the needs of their customers.

One of the most critical pieces of a successful technical book is the accuracy. Thankfully, we had the best editors, Judy Flynn and Bob Reinsch who worked hard to make this book accurate both technically and grammatically.

We are also indebted to a number of other people who were crucial for providing honest and direct guidance and assistance along the way: Joseph Nguyen, Brian Tirch, Joézer Cookey-Gam, Jules Yacho, Kory Sebby, and Jon Webster.

About the Authors

Joel Stidley has been working in the IT field for 15 years, and he has been a computer fanatic for much longer. He obtained his first Microsoft certification in 1999 and is currently an MCSE, MCTS, and Exchange MVP. At the beginning of his IT career, he was supporting MS-DOS and Windows for Workgroups clients on a Novell NetWare network at a small manufacturing company. Shortly thereafter, he discovered the joys of Windows NT Server. Joel worked with Microsoft Exchange on the Exchange Server 5.0 beta releases. Since that time, he has done migrations from legacy messaging systems such as Lotus cc:Mail to Exchange as well as numerous migrations from Exchange 5.5 to 2000 and 2003 versions. He also led an engineering team to create a shared Exchange 2000 hosting platform before Microsoft released guidance on how to do so. Since then, he has been working extensively with Exchange in a variety of environments.

In 2004, Joel founded ExchangeExchange.com, a Microsoft Exchange-focused community website, where he blogs and provides forums for discussing Exchange, PowerShell, certification, and general Windows topics. In the last few years, he has also been writing extensively. He contributed content to MCITP: Microsoft Exchange Server 2007 Messaging Design and Deployment Study Guide: Exams 70-237 and 70-238 (Sybex, 2007) and served as lead author on Professional PowerShell for Exchange Server 2007 SP1 (Wrox, 2008), MCTS: Windows Server 2008 Applications Infrastructure Configuration Study Guide: Exam 70-643 (Sybex, 2008), and Microsoft Exchange Server 2010 Best Practices (Microsoft Press, 2010). Currently, he is the principal systems architect at Terremark Worldwide Inc., where he works with a variety of cloud computing and messaging technologies.

Joel lives near the Dallas, Texas area with his wife and two children. You can contact him at [e-mail] or read his blog at http://exchangeexchange.com/blogs/joel.stidley/.

Erik R. Gustafson is a nine-year veteran of IT consulting and IT support. He started working professionally with Microsoft products while running a successful signage business in 1995, and after selling the business a few years later, he refocused his career on providingIT services. He obtained his first Microsoft certification in 2002 and is currently an MCSE and an MCSA. For the last few years he has helped grow an IT consulting business and set up an IT managed service provider from the ground up. Recently, he has relocated to the Dallas area with his wife, Kelly, and now works as a solutions architect for Terremark Worldwide Inc.

Erik also was a contributing author of MCTS: Windows Server 2008 Applications Infrastructure Configuration Study Guide: Exam 70-643 (Sybex, 2008) and writes Microsoft exam simulation questions for Ucertify.com.

You can contact Erik at [e-mail] or read his blog at www.blueskwer.com.

About the Contributing Authors

Joseph Tuan Nguyen, MCITP, is a systems architect with 13 years’ experience working with Exchange Server. He has worked as a system administrator, consultant, author, and trainer covering various Microsoft server technologies for messaging, communications, and collaboration. He has worked in small, medium, and enterprise organizations and is currently employed at the University of Oklahoma, where he puts his professional and technical experience to work serving the needs of the campus community. He resides in Oklahoma City with his wife, Jessica, and two daughters, Natalie and Claire.

Jules Yacho has over 13 years of IT experience. He is currently employed as a regional sales engineer at Terremark Worldwide Inc. and is responsible for designing and architecting solutions for complex challenges using his knowledge of networks, security, systems, storage, co-location, and cloud computing.

Jules has worked extensively with all versions of Exchange, from Exchange Server 5.0 all the way to Exchange Server 2010. Prior to Joining Terremark, he was an infrastructure consultant with Dell Inc. specializing in Active Directory and Exchange deployments, and prior to that, Jules was a senior messaging engineer with Turner Construction.

When he is not busy working with technology, Jules enjoys watching his sons play competitive soccer. Jules is married and currently lives in Irving, Texas, with his wife, Erin, and their four children.

Kory Sebby grew up in a small town in Illinois with two loving and supportive parents and three obnoxious younger siblings. While Kory was growing up, he was always taking things apart and rebuilding them or building new items from the parts. After being introduced to computers, things just took off. Kory learned from gaming on PCs new ways to do things and ways to reprogram the games to make them a little easier or play smoother. Korystarted his computer training in high school and continued his education at a technical school in Phoenix, Arizona. Using this technical training, Kory started his computer career working at a computer retail store and then worked hard to qualify for his current position as a technical analyst at Verity Three in the suburbs of Chicago. He has since obtained a number of certifications (MCSA, MCDST, VSTP, CCA) and has become a proud father. Kory continues to work hard and learn new technology; he is often the one analyst chosen to learn a new technology. As such, he was chosen to deploy the first Exchange Server 2007 servers for his company’s customers a few years ago.

Brian Tirch has been working in the IT field for over 11 years and currently works as a technology architect for Microsoft, where he provides guidance on a number of Microsoft technologies like Exchange Server. Brian currently holds a bachelor of science degree in computer networking and has multiple Microsoft certifications; he obtained his first in 1999.

Brian has been the technical editor of a number of Exchange books over the years: Mastering Microsoft Exchange Server 2007 (Sybex, 2007), Mastering Microsoft Exchange Server (2007 SP1 Sybex, 2009), and Microsoft Exchange Server 2007: Implementation and Administration (Sybex, 2008). He was awarded the honor of being a Microsoft MVP in Exchange Server before joining Microsoft. Brian also hosts a blog dedicated to Microsoft Exchange Server, located at http://exchange-genie.com">.

Brian’s most recent achievement is fatherhood. He has become the proud father to his son, Tyler Nicholas Tirch (TNT). He is always appreciative of his family and friends for their support. He is especially appreciative for his wife, Jodie Tirch, who makes it possible for him to spend long hours on the computer.

Joézer Cookey-Gam holds a bachelor of technology degree in electrical engineering from the Rivers State University of Science and Technology in Nigeria. He is a Microsoft Certified Systems Engineer and an IT professional with focus on messaging. He began his IT career as a network engineer and Exchange administrator, supporting medium to large enterprise networks. In this role, he provided solutions for LinkServe Limited, a leading Internet service provider in Nigeria. He joined Microsoft in 2001 and is currently a technical support lead, supporting both Microsoft vendors and partners.

Table of Exercises

Exercise 2-1 Installing Microsoft .NET Framework 3.5.1 33

Exercise 2-2 Installing Windows PowerShell 2.0 35

Exercise 2-3 Choosing Exchange Language Option 36

Exercise 2-4 Installing Required Service Roles, Features, and Updates on Windows Server 2008 R2. 37

Exercise 2-5 Verifying the Domain and Forest Functional Levels 48

Exercise 2-6 Running the /PrepareSchema Command 50

Exercise 2-7 Running the /PrepareAD Command 52

Exercise 2-8 Running the /PrepareDomain Command 55

Exercise 2-9 Running the /PrepareLegacyExchangePermissions Command 58

Exercise 2-10 Installing the First Exchange Server 2010 63

Exercise 3-1 Creating a Send Connector to the Internet with the Exchange Management Console 75

Exercise 3-2 Creating a Receive Connector 82

Exercise 3-3 Creating a New Edge Subscription 98

Exercise 3-4 Configuring Message Size Limits 105

Exercise 3-5 Configure External Client Access Domain Using the Wizard 116

Exercise 3-6 Request a New Certificate with the New Exchange Certificate Wizard 117

Exercise 3-7 Create a New Outlook Web App Mailbox Policy 129

Exercise 3-8 Modify the Automatic Replies (Out of Office) of Another Userwith Exchange Control Panel 131

Exercise 3-9 Assigning an ActiveSync Policy to a User 145

Exercise 3-10 Wiping a Mobile Phone 149

Exercise 4-1 Creating and Deleting Databases 156

Exercise 4-2 Moving Mailbox Databases with the ExchangeManagement Console 159

Exercise 4-3 Dismounting a Database and Mounting a Dismounted Database 161

Exercise 4-4 Creating a New User with the Exchange Management Console 163

Exercise 4-5 Creating a Mailbox for an Existing Account with the Exchange Management Console 167

Exercise 4-6 Creating Room Mailboxes 176

Exercise 4-7 Modifying Resource Mailbox Properties with theExchange Management Console 186

Exercise 4-8 Creating a New Distribution Group 191

Exercise 4-9 Mail-Enabling an Existing Security Group 192

Exercise 4-10 Creating a New Distribution Group 199

Exercise 4-11 Creating a New Mail Contact 204

Exercise 4-12 Mail-Enabling an Existing Contact 205

Exercise 4-13 Moving a Mailbox to a Local Database with theExchange Management Console 211

Exercise 5-1 Creating a Public Folder Database 236

Exercise 5-2 Removing a Public Folder Database 239

Exercise 5-3 Creating a Public Folder in the PFMC 242

Exercise 5-4 Creating a Public Folder in Outlook 244

Exercise 5-5 Creating a Public Folder in OWA 245

Exercise 5-6 Changing the Default Public Folder Database 250

Exercise 5-7 Creating a Public Folder Replica in ExchangeManagement Console 273

Exercise 6-1 Using the Exchange Control Panel to Allow Users toEdit Distribution Groups 282

Exercise 6-2 Creating a Default Management Role Assignment toPrevent Users from Creating Distribution Groups 283

Exercise 6-3 Using the Exchange Control Panel to Assign the DiscoveryManagement Role Group to a User 284

Exercise 6-4 Assigning a Scoped Help Desk Role Using theExchange Management Shell 286

Exercise 6-5 Creating a Managed Folder Using the ExchangeManagement Console 290

Exercise 6-6 Creating a Managed Folder Using the Exchange Management Shell 291

Exercise 6-7 Creating a Managed Content Setting Using the ExchangeManagement Console 292

Exercise 6-8 Creating a Managed Content Setting Using the ExchangeManagement Shell 293

Exercise 6-9 Creating a Managed Folder Mailbox Policy Using the Exchange Management Console 293

Exercise 6-10 Creating a Managed Folder Mailbox Policy Using the Exchange Management Shell 294

Exercise 6-11 Applying a Managed Folder Mailbox Policy Using the Exchange Management Console 295

Exercise 6-12 Applying a Managed Folder Mailbox Policy UsingExchange Management Shell 296

Exercise 6-13 Creating Retention Tags Using the Exchange Management Shell 298

Exercise 6-14 Creating and Applying a Retention Policy Using the Exchange Management Shell 299

Exercise 6-15 Apply a Personal Retention Tag Using Outlook Web App 299

Exercise 6-16 Scheduling the Managed Folder Assistant Using the Exchange Management Console 301

Exercise 6-17 Scheduling the Managed Folder Assistant Using the Exchange Management Shell 302

Exercise 6-18 Enabling and Configuring Information Rights Management 306

Exercise 6-19 Creating a Journaling Rule Using the Exchange Management Shell 307

Exercise 6-20 Creating a Journaling Rule Using the ExchangeManagement Console 308

Exercise 6-21 Perform a Multi-Mailbox Search Using the Exchange Control Panel 310

Exercise 6-22 Creating a New Transport Rule Using the ExchangeManagement Console 323

Exercise 6-23 Creating a New Transport Rule Using the ExchangeManagement Shell 324

Exercise 6-24 Creating a New Email Address Policy Using the ExchangeManagement Console 326

Exercise 6-25 Creating a New Email Address Policy Using the ExchangeManagement Shell 328

Exercise 6-26 Creating a New Address List Using the ExchangeManagement Console 329

Exercise 6-27 Creating a New Address List Using the ExchangeManagement Shell 330

Exercise 6-28 Creating an ActiveSync Mailbox Policy Using the ExchangeManagement Console 332

Exercise 6-29 Creating an ActiveSync Mailbox Policy Using the ExchangeManagement Shell 333

Exercise 6-30 Enable Content Filtering and Recipient Filtering Using theExchange Management Console 349

Exercise 6-31 Enable Content Filtering and Recipient Filtering Using theExchange Management Shell 351

Exercise 6-32 Enabling Content Filtering, Forefront DNSBL Checking,and Virus Scanning Using the Forefront Console 356

Exercise 6-33 Enabling Content Filtering, Forefront DNSBL Checking, and Virus Scanning Using the Forefront Management Shell 357

Exercise 7-1 Creating a Database Availability Group 362

Exercise 7-2 Assigning a Static IP Address to the DAG 366

Exercise 7-3 Adding a Mailbox Server to a DAG 368

Exercise 7-4 Adding EX01 to a DAG Using the Exchange Management Console 370

Exercise 7-5 Creating a Database Copy in the Exchange ManagementConsole and Replicating It 373

Exercise 7-6 Updating an Unhealthy Database Copy from theExchange Management Shell 377

Exercise 7-7 Suspending, Resuming, and Switching Over Database Copies 381

Exercise 7-8 Monitoring a DAG with Get-MailboxDatabaseCopyStatus 385

Exercise 7-9 Monitoring a DAG with the Test-ReplicationHealth cmdlet 386

Exercise 7-10 Monitoring a DAG with theCollectReplicationMetrics.ps1 Script 389

Exercise 7-11 Monitoring a DAG with the CollectOvermetrics.ps1 Script 391

Exercise 7-12 Creating a Database Copy in the Exchange Management Console 394

Exercise 7-13 Setting Up an Outlook Profile 396

Exercise 7-14 Checking Outlook Encryption Settings 400

Exercise 7-15 Creating a Client Access Server Array 401

Exercise 7-16 Creating an NLB Cluster to Respond to MAPI Requests 404

Exercise 7-17 Associating a Client Access Array with a Database 408

Exercise 7-18 Scoping RPC Client Access Ports 411

Exercise 8-1 Backing Up the Exchange Server Mailbox Database withWindows Server Backup on Windows Server 2008 R2 423

Exercise 8-2 Recovering Deleted Items in Outlook Web Access 430

Exercise 8-3 Recovering Deleted Items in Outlook 431

Exercise 8-4 Recovering a Deleted Mailbox Using the ExchangeManagement Console 432

Exercise 8-5 Recovering a Deleted Mailbox Using the ExchangeManagement Shell 433

Exercise 8-6 Recovering an Exchange Database 435

Exercise 8-7 Backing Up an Edge Transport Server 440

Exercise 8-8 Restoring an Edge Transport Server 441

Exercise 9-1 Monitoring Disk Free Space 445

Exercise 9-2 Installing the File Server Role 449

Exercise 9-3 Installing the File Server Resource Manager Service 450

Exercise 9-4 Configuring Soft Disk Quotas 452

Exercise 9-5 Using Exchange Remote Connectivity Analyzer 462

Exercise 9-6 Creating a Health Report 465

Exercise 9-7 Creating a New Mailbox 476

Exercise 10-1 Migrating Public Folders 497

Exercise 10-2 Moving the OAB Generation Server 499

Exercise 12-1 Viewing the Shadow Message Queue and Message 535

Exercise 12-2 Making the Chicago Site a Hub Site 543

Exercise 12-3 Transport Server Post-installation Tasks 555

Exercise 12-4 Disabling Link-State Updates 557

Exercise 12-5 POP3/IMAP4 Cross-site Command Proxy 573

Exercise 13-1 Considering Permissions 584

Exercise 13-2 Choosing SCLs 589

Exercise 13-3 Deciding on ActiveSync Policies 592

Exercise 14-1 Changing the Maximum Acknowledgement Delayon a Receive Connector 619

Exercise 14-2 Enabling Single Item Recovery on a Mailbox Using EMS 626

Introduction

Over the years, Exchange Server has become a complicated messaging solution that many organizations rely on. Many companies have not upgraded to Exchange Server 2007 and are still using Exchange Server 2003. With the release of Exchange Server 2010, they are now contemplating upgrading to take advantage of this new version’s larger mailbox support, advanced high availability options, and simple archiving and retention features.

Administrators who have been in the trenches supporting Exchange Server 2007 and previous versions of Exchange for the last few years must now upgrade their skills in preparation for the upgrade to Exchange 2010. For example, many administrators will be unfamiliar with the concept of server roles, PowerShell administration, and continuous replication. For Exchange Server 2007 administrators, Client Access servers, Exchange Control Panel, and the new high availability options will be new.

In addition, new Exchange administrators will need to understand the basic components of Exchange and how to perform common administrative tasks. This book aims to cover the information that both new and experienced Exchange administrators need to be successful working with Exchange Server 2010. Since this book was not rushed to market to coincide with the release of Exchange Server 2010, additional time was taken to validate the content. In fact, many chapters include features and updates included with Exchange Server 2010 Service Pack 1.

This book was written from two perspectives. First, it covers the most important design, deployment, and administrative tasks that any messaging administrator will need to perform. Second, both the book and the contents of the CD (videos and practice exams) cover the objectives for the MCITP: Enterprise Messaging Administrator 2010 exams, 70-662 and 70-663. Whether you’re preparing for these exams or preparing for your career as a messaging administrator, you’ll find this book a useful reference.

Who Should Read This Book

As you can probably tell by the title, Exchange Server 2010 Administration: Real World Skills for MCITP Certification and Beyond, this book is primarily aimed at two groups: those seeking real-world Exchange Server administration and design knowledge and those preparing for the Exchange MSITP exams.

Exchange administrators and professionals: If you are an Exchange administrator, you will find information on the day-to-day management of Exchange. The book will take you through all the steps required to prepare your environment for Exchange 2010 and deploy it. It will also cover the changes and new features included in Exchange Server 2010. If you are a professional, you will find detailed information on how to plan for deployment, securing and providing high availability of Exchange 2010 servers within your organization. You will find information for controlling change in the environment and how to evaluate new features and then deploy them.

Exam candidates preparing to take the MCITP: Enterprise Messaging Administrator 2010 exams (70-663 IT Pro: Designing and Deploying Messaging Solutions with Microsoft Exchange Server 2010; 70-662 TS: Microsoft Exchange Server 2010, Configuring). You’ll find that all of the objectives are covered when you use the complete training kit this book provides. It’s important to note that what you hold in your hands is more than just a book. The CD that accompanies this book includes video training and memory-jogging flashcards as well as practice exams and more to help you master the objectives of both MCITP exams.

As you can see, this book has been developed for a wide range of people. Both the authors as well as the contributing authors have real-world experience as administrators, so the book is written from the reader’s standpoint rather than from the perspective of how it is supposed to work or how it works in a lab environment. All of the people involved with the book also have Microsoft certifications, so we understand the testing process and how to prepare for those types of exams. We believe that this book provides a solid basis for passing the Exchange exams while preparing the reader for something far more important, the real world and being successful in your career.

What You Will Learn

This book starts out with an introduction to Exchange server and a short tour of what has changed for readers who have experience with older versions of Exchange. We encourage all readers to review this information before continuing to other chapters in the book.

The second section of the book focuses on the administrative tasks that a messaging administrator needs to know how to perform. This includes preparing Active Directory, deploying the Exchange roles, managing Exchange objects, and configuring Exchange features. Each of the chapters in this part of the book covers the how to of Exchange server.

The third section of this book covers situations in which messaging professionals are involved. The chapters in this section focus on what needs to be done and why it needs to be done rather than on the details on how it is done because the latter is covered in the second part of this book.

Throughout the book, you’ll find real-world exercises that walk you through the processes required to implement and support commonly used features of Exchange Server 2010. For many people, having this hands-on experience helps to solidify the material learned. We have provided videos on the CD for some of these exercises as well. You’ll also find notes to help you understand more detailed concepts and find more information. Additionally, the real-world scenarios provide you with insights on how to apply the information in the chapter in the real world.

This book was written to address the needs of messaging administrators and messaging professionals as they design, deploy, and manage Exchange Server 2010. The book will help you understand what you need to know to get by in the real world as well as to pass the MCITP exams.

Each chapter has the following features:

Hands-on exercises In each chapter, you’ll find exercises designed to give you important hands-on experience. The exercises support the topics of the chapter, and each exercise walks you through the steps necessary to perform a particular function.

Real-world scenarios Because reading a book isn’t enough for you to learn how to apply these topics in your everyday duties, we have provided real-world scenarios in special sidebars. They explain when and why a particular solution would make sense in a working environment you’d actually encounter.

Interactive CD This book comes with a CD complete with video training, bonus exams for both exams (70-662 and 70-663), electronic flashcards, and the book in electronic format. Details are in the following section.

Chapter essentials To highlight what you learn, you’ll find a list of chapter essentials at the end of each chapter. These sections briefly highlight the topics that need your particular attention.

Glossary Throughout each chapter, you will be introduced to important terms and concepts that you will need to know for the exams. These terms appear in italic text within the chapters. At the end of the book, a detailed glossary defines these terms as well as other general terms you should know.

What You Need

You should verify that your computer meets the minimum requirements for installing Exchange Server 2010 as listed in Table 2-1 in Chapter 2. We suggest that your computer meet or exceed the requirements for a more enjoyable experience.

The exercises in this book assume that you have performed a clean installation of Exchange Server 2010 into an empty forest. To complete all of the exercises, you will need to have multiple machines available. Rather than deploying multiple physical machines, we recommend using virtual machines with Microsoft Hyper-V R2, VMware ESXi, or another hypervisor capable of running a 64-bit operating system. If you do not have resources available, consider using an online service that allows you to run virtual machines in the cloud. Services like Terremark’s vCloud Express, Amazon’s EC2, and others may be cost-effective solutions for you to deploy virtual machines to use to complete the exercises.

If you do not already have software available for the exercises, you can obtain the software from the following resources:

You can download Microsoft’s free Hyper-V Server 2008 R2 from www.microsoft.com/hyper-v-server.

You can also download a trial version of Windows Server 2008 R2 to run as virtual machines or to run the Hyper-V role from www.microsoft.com/windowsserver2008/en/us/trial-software.aspx and create a virtual machine. We recommend using a Hyper-V machine with at least 4 GB of RAM.

You will need the Exchange Server 2010 media for installation. If you do not have a licensed copy of SQL Server 2008, you can download a trial version from Microsoft’s website at www.microsoft.com/exchange/2010/en/us/try-it.aspx.

You will also need a copy of Outlook 2010 so that you can test client connectivity. If you do not have a license for Outlook 2010 or Office 2010, you can download a trial version from Microsoft’s website at http://office.microsoft.com/en/us/try.

note.eps

We recommend signing up for a Microsoft TechNet subscription, which gives you access to evaluate most of the software Microsoft releases. You can find more information on subscribing to TechNet at http://technet.microsoft.com/en-us/subscriptions/default.aspx

Once you have the installation media available and the hypervisor or physical hardware configured, to be ready for the exercises you should create the servers listed in the following table:

Before beginning the first exercise, you will need to install the Active Directory Domain Services role on EX01 and then promote it to a domain controller for the Mailtask.com domain. Also be sure to install Outlook 2010 on the EX01 so you can test Outlook connectivity. After the domain is functional, join EX02, EX03, and EX04 to Mailtask.com.

What Is Covered in This Book

Exchange Server 2010 Administration: Real World Skills for MCITP Certification and Beyond is organized to provide you with the information you need to effectively administer your Exchange 2010 Server instances. The following list provides an overview of the topics covered in each chapter.

Part I—Introduction to Exchange Server 2010

Chapter 1—Introduction to Exchange Server 2010: This chapter starts out with a brief history of Exchange. You will then learn what is new, what has changed, and what features of Exchange have been discontinued.

Part II—Messaging Administrator’s Guide to Exchange Server 2010 (70-662)

Chapter 2—Installing and Configuring Exchange Server 2010: You will master the Exchange Server installation process by actually doing it in this chapter. You will also install the Exchange prerequisites and prepare the environment for Exchange.

Chapter 3—Configuring Connectors, Routing and Transport, and Connectivity: This chapter shows you how to configure connectors, message routing, transport and how to configure Client Access for Exchange 2010.

Chapter 4—Managing Exchange Server 2010 Mail-Enabled Objects: This chapter teaches you how to create new mailboxes and understand the differences between mailbox types. You’ll learn about the new Exchange Control Panel and how to work with move requests.

Chapter 5—Configuring and Managing Public Folders: To give you a better understanding of public folders, this chapter will help you to create, manage, and replicate your public folder environment.

Chapter 6—Configuring Security, Compliance, and Policies: In this chapter, you’ll learn how to configure Role Based Access Control (RBAC), message compliance and records management, transport rules, and address lists.

Chapter 7—Configuring High-Availability Solutions for Exchange Server: Making sure your Exchange environment is available to end users is one of the most important jobs a messaging professional has. This chapter will help you to understand high-availability solutions for Exchange.

Chapter 8—Disaster Recovery Operations for Exchange Server: You will learn to ensure that you can recover your Exchange server if a failure occurs. Configuring backups and recovering messaging data are just a few of the things covered in this chapter.

Chapter 9—Monitoring and Reporting with Exchange Server 2010: To ensure that your Exchange servers are performing at high levels, monitoring and reporting are necessary. This chapter walks you through the steps of monitoring databases and client connectivity and how to create a server report.

Part III—Messaging Professional’s Guide to Exchange Server 2010 (70-663)

Chapter 10—Planning the Exchange Server 2010 Migration and Infrastructure: Much work goes into preparing and planning for a migration or deployment. This chapter will help take some of the guesswork out of the planning stage and give you practical advice and direction for migrating or planning your Exchange environment.

Chapter 11—Designing and Deploying Mailbox Services: This chapter will help ensure that the mailbox services and public folder configuration meet and will continue to handle the needs of the users.

Chapter 12—Designing Routing and Client Connectivity: Exchange Server 2010 provides some advanced functionality right out of the box, and this chapter gives direction on how to design message routing, transport, client access and connectivity.

Chapter 13—Designing Security and Compliance: In this chapter, you will learn the importance of email security and compliance. You can use this chapter to help design your security standards.

Chapter 14—Designing High Availability and Recovery: This chapter introduces you to the process called risk management and helps you understand how designing a high-availability solution will ensure that your environment continues during and after a failure.

Appendix A—This includes a mapping of all the 70-662 and 70-663 exam objectives to the chapter where the objective is covered.

Appendix B—This appendix identifies the contents of the companion disk and how to use it.

Glossary—The final element of the book is the glossary. You’ll find definitions of important terms related to Exchange Server 2010. If you’re preparing for the exams, be sure to read the glossary on the morning of the exam. This action will ensure your understanding of the most important topics covered.

What’s on the CD

With this book, we are including quite an array of training resources. The CD offers sample videos, a PDF of the book, and bonus exams and flashcards to help you study if you’re a certification candidate. The CD’s resources are described here:

Sample videos Throughout the book, we have included numerous hands-on exercises showing you how to perform a variety of tasks. For some of these tasks, we have also included a video walk-through. Look for the CD icon for exercises that include a video walk-through.

The Sybex e-book Many people like the convenience of being able to carry their whole book on a CD. They also like being able to search the text via computer to find specific information quickly and easily. For these reasons, the entire contents of this book are supplied on the CD, in PDF form. We’ve also included Adobe Acrobat Reader, which provides the interface for the PDF contents as well as the search capabilities.

The Sybex test engine Since this book is also a supplement for MCITP: Enterprise Messaging Administrator 2010 exam candidates, we have included two bonus exams, one practice exam for the TS: Microsoft Exchange Server 2010, Configuring exam (70-662) and one for IT Pro: Designing and Deploying Messaging Solutions with Microsoft Exchange Server 2010 exam (70-663).

Sybex Flashcards The flashcard style questions offer an effective way to quickly and efficiently test your understanding of the fundamental concepts.

How to Contact the Authors

If you have any questions about your certification or administration voyage, please contact us. If you have questions or comments, you can visit http://exchangeexchange.com or feel free to send us email at [e-mail] or [e-mail]. We love hearing from our readers.

Part I: Introductionto Exchange Server 2010

Chapter 1

Introduction to Exchange Server 2010

The following topics are discussed in this chapter:

Brief history

New features

Improvements

Discontinued features

Comparison between 2007 and 2010

Client benefits

Ninety trillion. That is the estimated number of emails that were sent in 2009. Staggering isn’t it? While many of those emails were used to send jokes or argue sports, a large portion of them were used in business and deemed vital for the success of an organization.

It is no wonder, then, that Exchange Server administrators and messaging professionals are in high demand, and it is our goal, in this book, to get you comfortable with Exchange 2010. This chapter’s aim is to bring you up to speed on the latest versions of the Exchange administrator tools as well as help you understand the important changes since—and even the smallest improvements over—Exchange Server 2007.

Brief History of Exchange Servers

Exchange Server 2010 is a calendaring and email solution that runs on Windows Server, and like Exchange Server 2007, it can also integrate with your phone system. This is the seventh major release of the product, and the Exchange teams continue to make improvements and add features with every version.

Exchange started out as an upgrade to Microsoft Mail in 1996. Over the next several years, releases 5.0 and 5.5 introduced Lightweight Directory Access Protocol (LDAP), which was a precursor to what would become Active Directory (AD) in Windows 2000. To take advantage of AD in Windows 2000, Microsoft also included Exchange Server 2000, which was a robust platform that included chat and instant messaging (IM) services. In 2003, another version of Exchange was released, aptly named Exchange Server 2003. Features such as chat and IM were removed and they were marketed as separate services in Live Communications Server. The release of Exchange Server 2007 continued the tradition of adding more features and expanded the storage of this email server even more than its predecessors. Let’s look briefly at some of the historical milestones:

1996 Exchange 4.0

Client/server architecture

X.400 based

1997 Exchange 5.0 and 5.5

Clustering introduced

LDAP introduced

Standard and expression versions introduced

Connectors to allow Exchange to talk to any email server provided

Administrative console added

Support for stand-alone SMTP

Outlook introduced as the preferred client

Outlook Web Access introduced

2000 Exchange 2000

Designed to work with AD

Scheme management services for sending and receiving secure email

Enhanced storage and administrative tools

Chat and IM services introduced

2003 Exchange 2003

Exchange ActiveSync introduced support for blacklisting addresses

Enhanced Outlook Web Access module added

Enhanced spam control introduced

Management console enhanced

2006 Exchange 2007

64-bit performance

Exchange Management Shell (EMS) added

Maximum database size increased to 16 TB

Maximum number of storage groups increased to 50 per server

Why use Exchange Server? Exchange is certainly not the only email server on the market. In fact, there are dozens of email servers available, and each one would have a group of individuals who would argue strongly in their favor. There are many of small and medium-sized businesses that want an in-house email system. These businesses want to be up and running in only a few steps and with only a little maintenance.

Simplicity and ease of use are the major contributors to the success of Exchange. Exchange installs and configures simply, and anyone can be trained in a relatively short period of time to use it effectively. Because it also sets up Web access automatically for all mailboxes, it makes it easy for users to check email from home or even while on vacation. Features like these have made Exchange the choice of many organizations. This rich feature set and the ability to scale has led to its dominance in the enterprise market.

While the first version of Exchange, code-named Mercury, was just a Microsoft internal release and could not scale past 25 users, Exchange 2010 has become the mode of transport for a major chunk of the 9 billion emails sent each day.

New Features in Exchange Server 2010

Exchange Server 2010 is available in three editions, Trial, Standard, and Enterprise. The installation is the same for each. In fact, the installation media are identical; it’s the license key, or the lack thereof, that will determine what functionality is enabled. For Exchange 2010, there is no 32-bit version available, even for testing purposes.

In addition, Exchange Server 2010 comes with two client access licenses (CALs). Here is a quick breakdown of these two types:

Standard CAL will provide access to ActiveSync, email, Outlook Web App, and calendaring.

Enterprise CAL provides unified messaging and compliance functions, functionality for Exchange hosted filtering for antispam and antivirus, and Forefront Security for Exchange Server.

Whenever new versions of software such as Exchange are released, we want to know what’s new! Exchange 2010 includes some very nice changes and additions that will make an Exchange administrator’s job a little bit easier, as the following list shows:

Storage improvements In an effort to provide greater flexibility and higher performance, Microsoft has made some big adjustments in storage architecture. Estimates indicate that you will see an additional 50 to 70 percent reduction in database storage I/O from Exchange 2007. The benefit of this to you is that it will reduce the need for additional or more costly storage to retain performance levels. Also, the new high availability (HA) options may reduce the need for RAID in some deployments.

In Exchange 2007, high availability (HA) solutions used continuous replication to copy the transaction logs to another disk or server, and with SP1 you had the ability to replicate them to another site to facilitate site failovers. You might be familiar with them; these solutions were called local continuous replication, cluster continuous replication, and standby continuous replication (LCR, CCR, and SCR). These required you to put a single database within a single storage group because multiple databases within a storage group.

In Exchange 2010, all of Exchange 2007 solutions are gone. LCR, CCR, SCR, and single copy cluster (SCC) have been removed in favor of database availability groups (DAGs). DAGs is an evolution of the Exchange 2007 continuous replication features.

With DAGs, as seen in Figure 1-1, you can create up to 16 different replicas of the database across multiple servers or even sites. This will give you the additional option of not having a RAID solution in place.

Unified messaging Unified messaging (UM) has matured in Exchange 2010. For example, you now can create up to nine calls or answer rules. This provides a personal auto attendant for the user’s mailbox, which will then transfer the call to another user, another number, or voicemail. Figure 1-2 shows the UM interface.

Figure 1-1: Exchange 2010 Database Availability Groups

f0101.tif

UM also has more language-support features, and the name lookup from a caller ID has been enhanced. Third-party solutions were needed to provide a message waiting indicator in Exchange 2007, but in Exchange 2010 the feature has been added.

Another nice feature is the ability to have a voicemail preview in your inbox. UM uses Automatic Speech Recognition technology to have your voicemail translated to text, and it does an impressive job.

Role-based permissions Large organizations will see an immediate value in the new permissions structure with a variety of administrators that handle different administrative roles. This new model gives you granular control over who does what, which gives you better control over a person or group. Smaller organizations, which utilize a single administrator, will see only a small benefit.

Figure 1-2: Unified messaging interface

f0102.tif

Figure 1-3 shows the Administrator Roles control panel.

Figure 1-3: Roles and auditing interface

f0103.tif

There are also new management-role assignment policies that will define what users can configure within their own mailboxes, and every mailbox has one of these polices. This is a welcome addition because it will allow the administrator to control how much a user can change personal information, contact information, and distribution group membership. The goal of these changes is to give detailed control while also reducing the number of small changes that users need to make.

Improvements in Exchange Server 2010

With any new release of an established product like Exchange Server, Microsoft includes new (and improved) features that benefit both the administrative side of the product and the end-user experience. We briefly highlight some of the key features that are new or improved in Exchange Server 2010 (this list is certainly not all-inclusive):

Outlook Web App A major change or upgrade for end users is OWA (previously known as Outlook Web Access). It now has a seamless flow across browsers, so an OWA userrunning Safari should have the same experience as one running Internet Explorer. See Figure 1-4 to see what the new interface looks like.

Figure 1-4: Outlook Web App

f0104.tif

One of the complaints against OWA, especially in the earlier versions, was about the differences between the Outlook client and OWA. Users would complain that OWA was missing features that they needed. In an effort to provide a rich client experience and reduce the gap between the client and OWA, new features have been introduced, including favorites, attaching messages to a message, search folders, integration with Office Communicator, a new conversation view, and integration with Short Message Service (SMS) messages.

Microsoft Online Services Many providers of services are moving into the cloud, and Microsoft is no exception. With Exchange 2010, it is now possible to host mailboxes in a datacenter or host them with your own ISP or even host them with Microsoft Online Services.

Exchange 2010 provides the flexibility to be mixed between hosted and on premises, it can also be 100 percent hosted or 100 percent on site. The users will not notice any difference, but your administrators will. Instead of managing just a single environment, you will have to manage both hosted and on premises, if you have a mixed design.

Administration The Exchange Management Console (EMC) has changed to keep up with the changes to the major features, like HA. Due to the new replication functions, the mailbox database object is now tied to the Exchange Server 2010 organization and is no longer tied to the Exchange Server object.

Because storage groups are no longer used, their administration has been removed from both the EMC and the EMS. Cmdlets you might have been familiar with, such as New-StorageGroup, Get-StorageGroup, and so on, have been removed.

Exchange Server 2010 now runs on top of Windows PowerShell version 2. This version not only has a command-line interface (CLI), it also has an interactive developmentenvironment (IDE). This change allows you to easily create scripts and use variables.An output window has been added where you can quickly view the results of your cmdlet or script.

Another new feature is Send Mail, shown in Figure 1-5, which allows you to send mail directly from the EMC, which is perfect for testing purposes.

Exchange Control Panel A new options page in OWA now makes it possible to perform some basic Exchange management tasks, not just with the user’s own properties, but also at an organizational level. Using this new control panel makes it possible to create users, mailboxes, distribution groups, mail-enabled contact, management email addresses, and so forth. Figure 1-6 shows the OWA Control Panel.

Active Directory Rights Management Active Directory Rights Management Services (AD RMS) lets you have greater control with what users can do with emails that are sent to them. For example, you can disable the Forward options to prevent messages from being leaked outside the organization.

Figure 1-5: Send Mail

f0105.tif

Figure 1-6: OWA Exchange Control Panel

f0106.tif

With Exchange Server 2010, new features have been added to the AD RMS:

Integration with transport rules, which is a template for using AD RMS to protect messages over the Internet

AD RMS protection for voicemail messages coming from the UM server role

Exchange Server 2010 now has a much closer relationship with AD than previousversions of Exchange Server, which we go into greater detail in later chapters ofthis book.

Transport and routing With Exchange Server 2010 it is possible to implement cross-premises message routing. If you use a mixed hosting environment, Exchange Server2010 can route messages from a datacenter to an on-premise environment.

In Exchange Server 2010, you can create enhanced email disclaimers, making it possible to add HTML content to disclaimers. It is even possible to use AD attributes (from the user’s private property set) to create a personal disclaimer.

Shadow redundancy is now included, to create a highly available and reliable routing model, in the transport servers in Exchange Server 2010. A queued message is normally stored in a database on the transport server, and in Exchange Server 2007, the message is deleted as soon as it is sent to the next hop. Now, in Exchange Server 2010, the message is only deleted after the next hop reports a successful delivery. If this is not reported, the Hub Transport server will attempt to resend the message.

When you have HA messaging support, the messages stay in the transport dumpster on a Hub Transport server and will be deleted only if they are successfully replicated to all database copies.

Messaging policy and compliance As email continues to grow and evolve as the number one means of business-critical communication, the need to manage and enforce certain policies on email content and usage also grows.

As part of a general compliance regulation, Microsoft introduced the concept of managed folders in Exchange Server 2007. This has been enhanced in Exchange Server 2010, with new features such as the option of tagging messages, cross-mailbox searches, new transport rules and actions, and the new retention policies.

Mailbox archive Exchange Server 2010 introduces a personal archive; this is a secondary mailbox connected to a user’s primary mailbox. Because Exchange Server 2010 now supports lower cost storage options configurations, storage shouldn’t be a major issue, and the mailbox archive really is a great replacement for locally stored and easily lost PST files.

Discontinued Features

In any new release of a software product, discontinued or de-emphasized features are inevitable. Such is the case with Exchange Server 2010, although some of these items might surprise experienced Exchange administrators. The items that follow in no way represent every change that has occurred in Exchange Server 2010, but they do represent some of the most interesting ones.

Features That Have Been Removed

The following key features and functionality have been removed from Exchange Server 2010:

Storage groups are no longer a feature in Exchange Server 2010. The concepts of a database, log files, and a checkpoint file are still valid, but they are now just referred to as a database. You can think of an Exchange 2010 mailbox database as being a single database in a single storage group.

Exchange Server 2007 had LCR, CCR, and SCR—three different versions of replication. All three are no longer available in Exchange Server 2010.

Mailbox databases no longer save storage space by storing the same item in multiple mailboxes using single instance storage. This means that when you send a 1 MB message to 100 recipients, the database will potentially grow by 100 MB. This may have an impact on storage space, however the performance improvements made to the database schema that caused this feature to no longer be feasible are an excellent trade off.

Table 1-1 shows the discontinued Exchange Server protocols.

Table 1-1: Discontinued Exchange Server 2003 protocols

In addition, some of the Exchange 2003 connector features have been discontinued. Table 1-2 lists them.

Table 1-2: Discontinued Exchange Server 2003 connectors

Management features and tools that have been discontinued are listed in Table 1-3.

Table 1-3: Discontinued Exchange Server 2003 management tools and features

Discontinued Exchange OWA features are listed in Table 1-4.

Table 1-4: Discontinued OWA features

A De-emphasized Feature

Public folders, a key feature, continues to be de-emphasized in Exchange Server 2010. Starting with Exchange 2003, Microsoft has started to steer away from public folders.

If your organization requires features such as non-MAPI top-level hierarchies in public folder stores, public folder access with NNTP, or IMAP4, you will need to retain Exchange Server 2003 in your organization.

Comparison between Exchange Server 2007 and Exchange Server 2010

Table 1-5 compares Exchange 2007 and Exchange 2010.

Table 1-5: Exchange 2007 and 2010 comparison

note.eps

You can look at the entire list of new and discontinued features in Exchange Server 2010 by visiting the Microsoft Exchange product site at http://www.microsoft.com/exchange/2010/en/us/whats-new.aspx.

Client Benefits to Exchange Server 2010

Microsoft spent much time listening to its customers, consultants, and messaging professionals to find out what features were missing or needed to be enhanced from earlier version of Exchange. The benefits of this feedback are shown in the many new features and enhancements. While we will not cover every modification, we will review some of the major changes.

Large Mailbox Support

Previous versions of Exchange required a significant investment in memory and a robust storage infrastructure to make large mailbox support a reality. Even if organizations had enough memory and storage to support large mailboxes, performance degradation typically started when mailboxes grew beyond 2 GB in size or when the individual folders contained more than 5,000 items. Outlook 2007 SP2 included some changes in how the software handled large mailboxes, making it more efficient to support mailboxes that grew larger than 10 GB. These improvements were helpful but still didn’t solve all the issues or specific errors that might be encountered as mailboxes approached 20 GB in size.

Exchange 2010 reduces the I/O requirements of the underlying storage by some 70 percent over Exchange 2007. This results in optimization for mailboxes over 10 GB in size and folders with 100,000 items. Microsoft now supports, and even recommends, deploying Exchange on a properly sized, low-cost SATA-based storage. This can represent a significant cost savings and allow organizations to size Exchange for capacity instead of performance.

Native Archiving Features

With Exchange 2010, Microsoft has finally introduced basic archiving features natively within the product. Figure 1-7 shows the archiving feature enabled.

The native archiving feature of Exchange 2010 allows an administrator to create a secondary archive mailbox for each user; content can be moved automatically via backend policies or even proactively by end users. Here are a few caveats about Microsoft’s native archiving features:

Access to the archive is online only.

No automated PST ingestion tools exist yet.

The initial release of Exchange 2010 had no ability to store archive data in a different database or on different storage than the primary mailbox. Exchange