Versionen fra 19. mar 2010, 15:05

Exchange 2010 Install on Server 2008 R2

How to Install Exchange Server 2010 Beta

Installing Exchange Server 2010 (Beta) (Part 1)

Enable Anti-Spam Functionality on a Hub Transport Server

Anti spam (Hub transport)

http://johanveldhuis.nl/?page_id=288&lang=en

EMS:

set-recipientfilterconfig -RecipientValidationEnabled $true

set-senderfilterconfig -BlockedSenders @() -BlockedDomains @() -BlockedDomainsAndSubdomains @() -BlankSenderBlockingEnabled $true

set-contentfilterconfig -SCLRejectThreshold '5' -SCLDeleteThreshold '7' -SCLDeleteEnabled $true

add-IPBlockListProvider -Name 'zen.spamhaus.org' -LookupDomain 'zen.spamhaus.org' -Enabled $true -BitmaskMatch $null -IPAddressesMatch @() -AnyMatch $true -Priority '1' -RejectionResponse ''
add-IPBlockListProvider -Name 'dnsbl.sorbs.net' -LookupDomain 'dnsbl.sorbs.net' -Enabled $true -BitmaskMatch $null -IPAddressesMatch @() -AnyMatch $true -Priority '2' -RejectionResponse ''
add-IPBlockListProvider -Name 'bl.spamcop.net' -LookupDomain 'bl.spamcop.net' -Enabled $true -BitmaskMatch $null -IPAddressesMatch @() -AnyMatch $true -Priority '3' -RejectionResponse ''
add-IPBlockListProvider -Name 'dnsbl-1.uceprotect.net' -LookupDomain 'dnsbl-1.uceprotect.net' -Enabled $true -BitmaskMatch $null -IPAddressesMatch @() -AnyMatch $true -Priority '4' -RejectionResponse ''

Shared hosting

Forudsætter Exchange 2010 er installeret på Windows 2008 R2 Server. Der bliver ikke forklaret hvorfor du skal gøre som vist, dette er kun som "vi" sætter det op og ved der virker. Hvis du vil læse lidt mere forklaring så tjek msexchange.org lidt længere nede.

Mangler:

• Offline Adresse Book

Forberede Exchange til hosting

Ændre dsHeuristics

Åben ADSIEdit
->
CN=Configuration
->
CN=Services
->
CN=Windows NT
->
CN=Directory Service.
->
Højre klik på CN=Directory Service vælg Properties.
->
Vælg attribute dsHeuristics
->
Ændret den til 001, hvis der står <not set>, ellers kun ændre det sidste tal til 1.

Klik OK og luk Properties.

Fjerne adresselister

Exchange Mangement Console -> Organization Configuration -> Mailbox -> Address Lists

Exchange Mangement Shell

remove-addresslist "All Contacts"
remove-addresslist "All Groups"
remove-addresslist "All Rooms"
remove-addresslist "All Users"
remove-addresslist "Public Folders"

Gemme adresse lister i AD

Modifying Permissions for the Address Lists Containers

Nu skal der ændres nogle ting i AD som Microsoft ikke anbefaler eller supportere. For at gøre det nemt, så læs fra "Modifying Permissions for the Address Lists Containers".

$container = "CN=All Global Address Lists,CN=Address Lists Container,CN=My Organization,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=mydomain,DC=local"
Add-ADPermission -Identity $container -User "Authenticated Users" -AccessRights ListObject

$container = "CN=All Address Lists,CN=Address Lists Container,CN=My Organization,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=mydomain,DC=local"
Add-ADPermission -Identity $container -User "Authenticated Users" -AccessRights ListObject

$container = "CN=Offline Address Lists,CN=Address Lists Container,CN=My Organization,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=mydomain,DC=local"
Add-ADPermission -Identity $container -User "Authenticated Users" -AccessRights ListObject

Oprette grupper i AD

I Active Directory Users and Computers, opret ny OU, "Hosting", under denne oprettes de forskellige kunder der skal køre på Exchangen.

Under Hosting OU laver du igen en OU, "FirmaEt", under denne laves igen 2 OU'er "Groups" og "Users" (Se billede).
Gentag dette for alle de kunder der skal køre på systemet.

Active Directory Module for Windows PowerShell

New-ADOrganizationalUnit -Name Hosting -Path "DC=MyDomain,DC=local"
New-ADOrganizationalUnit -Name FirmaEt -Path "OU=Hosting,DC=MyDomain,DC=local"
New-ADOrganizationalUnit -Name Groups -Path "OU=FirmaEt,OU=Hosting,DC=MyDomain,DC=local"
New-ADOrganizationalUnit -Name Users -Path "OU=FirmaEt,OU=Hosting,DC=MyDomain,DC=local"

Oprette firma

Tilføje UPN suffixes

Tilføj UPN for de domæner der skal hostes, til brug under logon.

Active Directory Sites and Services -> Højre klik på Active Directory Sites and Services -> Properties, Tilføj domænet der.

AD PowerShell

$usn = "FirmaEt.dk"
$root = [ADSI]"LDAP://rootDSE"
$conf = [ADSI]"LDAP://cn=partitions,$($root.configurationNamingContext)"
$conf.uPNSuffixes += $usn
$conf.SetInfo()

Ny kunde adresse liste

EMS

Exchange Management Shell command completed:

new-AddressList -Name 'FirmaEt' -RecipientContainer 'MyDomain.local/Hosting/FirmaEt/Users' -IncludedRecipients 'MailboxUsers' -ConditionalCustomAttribute1 'FirmaEt' -Container '\' -DisplayName 'FirmaEt'

Ny kunde Global Adresse liste

Kan det ikke laves via GUI?

EMS

New-GlobalAddressList -Name "FirmaEt GAL" -ConditionalCustomAttribute1 "FirmaEt" -IncludedRecipients AllRecipients

Ny kunde accepted mail domain

Organization Configuration
->
Hub Transport
->
Klik på New accepted domain.
->
Skrive domæne navnet.
->
Vælg Authoritiative domain (den øverste).
->
Klik New.

EMS

new-AcceptedDomain -Name 'FirmaEt' -DomainName 'FirmaEt.dk' -DomainType 'Authoritative'

E-mail Address policy

EMS

new-EmailAddressPolicy -Name 'FirmaEt EAP' -IncludedRecipients 'MailboxUsers' -ConditionalCustomAttribute1 'FirmaEt' -Priority 'Lowest' -EnabledEmailAddressTemplates 'SMTP:%[email protected]'

Distribution Group

EMS

new-DistributionGroup -Name 'FirmaEt-mail' -Type 'Security' -OrganizationalUnit 'MyDomain.local/Hosting/FirmaEt/Groups' -SamAccountName 'FirmaEt-mail' -Alias 'FirmaEt-mail'
Set-DistributionGroup -BypassSecurityGroupManagerCheck -CustomAttribute1 'FirmaEt' -Identity 'MyDomain.local/Hosting/FirmaEt/Groups/FirmaEt-mail'

Oprette brugere

Hvis du har oprettet brugere, så brug ADModify til at sætte msExchQueryBaseDN.

EMS

New-Mailbox -Name 'Fornavn Efternavn' -Alias 'FE' -OrganizationalUnit 'MyDomain.local/Hosting/FirmaEt/Users' -UserPrincipalName '[email protected]' -SamAccountName 'FE.FirmaEt' -FirstName 'Fornavn' -Initials '' 

-LastName 'Efternavn' ***-Password 'System.Security.SecureString'*** -ResetPasswordOnNextLogon $false
*** Mangler ***

Set-Mailbox -CustomAttribute1 'FirmaEt' -Identity 'MyDomain.local/Hosting/FirmaEt/Users/Fornavn Efternavn'

Add-DistributionGroupMember -Identity 'MyDomain.local/Hosting/FirmaEt/Groups/FirmaEt-mail' -Member 'MyDomain.local/Hosting/FirmaEt/Users/Fornavn Efternavn' -BypassSecurityGroupManagerCheck

$user = ([ADSI]"LDAP://PDC.MyDomain.local/CN=Fornavn Efternavn,OU=Users,OU=FirmaEt,OU=Hosting,DC=MyDomain,DC=local").psbase;
$user.Properties["msExchQueryBaseDN"].Value = "OU=FirmaEt,OU=Hosting,DC=MyDomain,DC=local";
$user.CommitChanges();

Ekstra

Storage styring

Læs mere

[1] [2] [3]

Most notably, on the second part, I didn't have to modify all the OWA stuff to hide the address lists...

[4]

Tak

Tak til Martin B.

Mere info

Andre gode links

Exchange 2007: Distribution Group – User Unknown Bounceback

Catch-all for 2010 HUB only setup

Bøger

Exchange Server 2010 Unleashed

Windows Server 2008 R2 Unleashed