Craigie's Exchange 2007 Blog

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

This threads starting to make me feel inadequate... My labs totally screwed at the moment thanks to a lack of time to run the cabling for the server up from the shed (its been banned from the house). Ah well maybe when I move next year.

At least I think I managed best value for my server box, £60 got me about £500-£600 worth of server when my brother in law wound his company up!

 

I have decided to rebuild my Lab using 32Bit OS as my laptop is throwing a few wobblies.

Will update this post when I'm back to where I was.

 

I whacked one of these SSL Certs in for a customer today on a 45 Day free trial.

We where using it for testing purposes, so I thought I would share with y'all.

Should be good for testing Outlook Anywhere or OWA connectivity.

 

Well, I now only has one Server and one XP Client.

They are all configured and patched up. In relation to Exchange 2007 install, I have ensured the folllowing:

- Server is patched
- IIS Installed, with COM+, WWW Service, RPC over HTTP (for Outlook Anywhere), ASP.NET 2 Allowed
- Certificate Authority Installed
- Group Policy Management MMC 3.0 Installed
- .NET Framework 2.0 Installed
- Powershell Installed
- Admin01 account created with Exchange, Domain, Schema, Administrator Rights
- Setup /prepareschema ran on Server
- Setup /preparead ran on Server

Need to intall Exchange next, now that all the prep work has been done.

 

Exchange 2007 installed.

- My domain was called netlab.local, so I have added another domain which is the main SMTP as netlab.com
- Made a Primary SMTP Zone called Netlab.com and added an A record for mail.netlab.com
- Configured Outlook Web Access and Outlook Anywhere to point to mail.netlab.com
- Created a Postmaster account using the Set-TransportServer -Identity 'NLSR01' -ExternalPostMasterAddress '[email protected]'
- Enabled AntiSpam using the Set-TransportServer -Identity 'NLSR01' -AntispamAgentEnabled $true

 

Just been reading about Storage Groups and Transaction Logs, they same rules seem to be there from Exchange 2003 which is to keep your Transaction Logs and Database Files on different Physical Hard Disks if possible to help with Performance. Naturally, you would want to RAID this as well.

I'm about to create another Second Virtual Hard Disk on my Lab, so I can enable Local Continous Replication, which seems pretty cool.

 

Well I haven't been doing much studying today, however, I have setup my Servers to send and recieved email even though I have Dynamic IP's from Tiscali.

Organization Configuration

- Added arcusit.com as a Accepted Domain ensuring that my Exchange 2007 Server is Authoritative
- Updated Default Email Address Policy so that @arcusit.com is the Reply Address
- Created a Send Connector with the FQDN mail.arcusit.com for all Domains, using smtp.tiscail.co.uk as a Smart Host

Server Configuration

- Created a Recieve Connector with FQDN mail.arcusit.com on Port 25.

DNS Configuration

As mentioned above, I do a Dynamic IP from Tiscali. To get around this, I created an account ZoneEdit
- Next I updated the DNS Nameservers on my domain name arcusit.com to the ZoneEdit Servers.
- Created a mailserver called mail.arcusit.com (MX Record) which is authoritative.
- Created an A Record that points to mail.arcusit.com
- Downloaded the Dynamic DNS Updated from ZoneEdit and configured this with the Username & Password for ZoneEdit Login and Host mail.acrusit.com. Set this to Run and startup and voila MX and A records updating.

 

Excellent stuff

 

I have just installed an SSL Certificate and tested this using Outlook Web Access and Outlook Anywhere.

Both are working a treat, if you go to https://mail.arcusit.com/owa you will be greeted with my OWA page.

 

Um.. not quite

 

My IP Address changed on the laptop, takes a few hours for it to replicate via DNS.

Tested and its working again

 

As I had changed the SSL Certificate for the Default Website from the Autocreated one when Exchange 2007 initial installs. You can often get the following error message on your Outlook 2007 clients:

'Security Alert, the name on the security certificate is invalid or does not match the site of the site'.

To rectify this, enter the following commands in the Exchange Management Shell:

Set-ClientAccessServer -Identity CAS_Server_Name -AutodiscoverServiceInternalUrl https://mail.arcusit.com/autodiscover/autodiscover.xml

Set-WebServicesVirtualDirectory -Identity "CAS_Server_Name\EWS (Default Web Site)" -InternalUrl https://mail.arcusit.com/ews/exchange.asmx

Set-OABVirtualDirectory -Identity "CAS_Server_name\oab (Default Web Site)" -InternalUrl https://mail.arcusit.com/oab

Set-UMVirtualDirectory -Identity "CAS_Server_Name\unifiedmessaging (Default Web Site)" -InternalUrl https://mail.arcusit.com/unifiedmessaging/service.asmx

 

Well I haven't done any studying today, as I seem to be consistantly dealing with Outlook Anywhere or Microsoft Active Synch issues.

 

So what happent to Having a Break!

I guess you just can't stop once you have the momentum going eh?

 

Gotta get balls deep mate!

OK, slight update I have done some studying.

Created three Public Folders called:

- IT
- Sales
- Marketing

Using the following cmdlets:

new-publicfolder -name "IT"

Then granted the users within the OU's IT, Sales & Marketing Publishing Editor Rights over there Public Folders using cmdlet:

Add-PublicFolderClientPermissions -Identity "\Sales" -Accessrights PublishingEditor -User Sales01

 

Created a Third Storage Group with Database and Transaction Logs on different Hard Drives.

Moved the Administrators Mailboxes to the Third Storage Group.

 

I have mainly been working on Public Folders, mail enabling them and changing the Primary SMTP addresses using the following commands:

enable-mailpublicfolder \IT
set-mailpublicfolder \IT =emailaddresspolicyenabled $False
set-mailpublicfolder \IT -primarysmtpaddress [email protected]

I have also changed the Exchange Local Continous Replication to work over a network drive, as I think this could come in handy fo a production environment, using the following commands:

Mailbox Database

enable-DatabaseCopy -Identity 'NLSR01\First Storage Group \Mailbox Database' CopyEdbFilePath 'Z:LCR\Mailbox Database.edb'

First Storage Group

enable-StorageGroupCopy -Identity 'CN=First Storage Group,CN=InformationStore,CN=NLSR01,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=netlab,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=Netlab,DC=local' -CopyLogFolderPath 'Z:\LCR' -CopySystemFolderPath 'Z:\LCR'