Versionen fra 19. mar 2010, 13:23

Exchange 2010 Install on Server 2008 R2

How to Install Exchange Server 2010 Beta

Installing Exchange Server 2010 (Beta) (Part 1)

Enable Anti-Spam Functionality on a Hub Transport Server

Anti spam (Hub transport)

http://johanveldhuis.nl/?page_id=288&lang=en

set-recipientfilterconfig -RecipientValidationEnabled $true

set-senderfilterconfig -BlockedSenders @() -BlockedDomains @() -BlockedDomainsAndSubdomains @() -BlankSenderBlockingEnabled $true

set-contentfilterconfig -SCLRejectThreshold '5' -SCLDeleteThreshold '7' -SCLDeleteEnabled $true

add-IPBlockListProvider -Name 'zen.spamhaus.org' -LookupDomain 'zen.spamhaus.org' -Enabled $true -BitmaskMatch $null -IPAddressesMatch @() -AnyMatch $true -Priority '1' -RejectionResponse ''
add-IPBlockListProvider -Name 'dnsbl.sorbs.net' -LookupDomain 'dnsbl.sorbs.net' -Enabled $true -BitmaskMatch $null -IPAddressesMatch @() -AnyMatch $true -Priority '2' -RejectionResponse ''
add-IPBlockListProvider -Name 'bl.spamcop.net' -LookupDomain 'bl.spamcop.net' -Enabled $true -BitmaskMatch $null -IPAddressesMatch @() -AnyMatch $true -Priority '3' -RejectionResponse ''
add-IPBlockListProvider -Name 'dnsbl-1.uceprotect.net' -LookupDomain 'dnsbl-1.uceprotect.net' -Enabled $true -BitmaskMatch $null -IPAddressesMatch @() -AnyMatch $true -Priority '4' -RejectionResponse ''

Shared hosting

Forudsætter Exchange 2010 er installeret på Windows 2008 R2 Server. Der bliver ikke forklaret hvorfor du skal gøre som vist, dette er kun som "vi" sætter det op og ved der virker. Hvis du vil læse lidt mere forklaring så tjek msexchange.org lidt længere nede.

Forberede Exchange til Hosting

Ændre dsHeuristics

Åben ADSIEdit
->
CN=Configuration
->
CN=Services
->
CN=Windows NT
->
CN=Directory Service.
->
Højre klik på CN=Directory Service vælg Properties.
->
Vælg attribute dsHeuristics
->
Ændret den til 001, hvis der står <not set>, ellers kun ændre det sidste tal til 1.

Klik OK og luk Properties.

PowerShell

Active Directory Module for Windows PowerShell

Fjerne adresselister

Exchange Mangement Console -> Organization Configuration -> Mailbox -> Address Lists

Exchange Mangement Shell

remove-addresslist "All Contacts"
remove-addresslist "All Groups"
remove-addresslist "All Rooms"
remove-addresslist "All Users"
remove-addresslist "Public Folders"

Gemme adresse lister i AD

$container = "CN=All Global Address Lists,CN=Address Lists Container,CN=First Organization,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=tekture,DC=hosting" Add-ADPermission -Identity $container -User "Authenticated Users" -AccessRights ListObject

step 2

$container = "CN=All Address Lists,CN=Address Lists Container,CN=First Organization,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=tekture,DC=hosting" Add-ADPermission -Identity $container -User "Authenticated Users" -AccessRights ListObject

step 3

$container = "CN=Offline Address Lists,CN=Address Lists Container,CN=First Organization,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=tekture,DC=hosting" Add-ADPermission -Identity $container -User "Authenticated Users" -AccessRights ListObject

Oprette grupper i AD

I Active Directory Users and Computers, opret ny OU, "Hosting", under denne oprettes de forskellige kunder der skal køre på Exchangen.

Under Hosting OU laver du igen en OU, "FirmaEt", under denne laves igen 2 OU'er "Groups" og "Users" (Se billede).
Gentag dette for alle de kunder der skal køre på systemet.

PowerShell

New-ADOrganizationalUnit -Name Hosting -Path "DC=MyDomain,DC=local"
New-ADOrganizationalUnit -Name FirmaEt -Path "OU=Hosting,DC=MyDomain,DC=local"
New-ADOrganizationalUnit -Name Groups -Path "OU=FirmaEt,OU=Hosting,DC=MyDomain,DC=local"
New-ADOrganizationalUnit -Name Users -Path "OU=FirmaEt,OU=Hosting,DC=MyDomain,DC=local"

Oprette firma

alternative UPN suffixes

Tilføj UPN for de domæner der skal hostes, til brug under logon.

http://theessentialexchange.com/blogs/michael/archive/2009/04/07/handling-the-userprincipalname-in-powershell.aspx

Ny kunde adresse liste

Exchange Shell

Exchange Management Shell command completed:

new-AddressList -Name 'FirmaEt' -RecipientContainer 'MyDomain.local/Hosting/FirmaEt/Users' -IncludedRecipients 'MailboxUsers' -ConditionalCustomAttribute1 'FirmaEt' -Container '\' -DisplayName 'FirmaEt'

Ny kunde Global Adresse liste

Kan det ikke laves via GUI?

PowerShell

New-GlobalAddressList -Name "FirmaEt GAL" -ConditionalCustomAttribute1 "FirmaEt" -IncludedRecipients AllRecipients

Ny kunde accepted mail domain

Organization Configuration
->
Hub Transport
->
Klik på New accepted domain.
->
Skrive domæne navnet.
->
Vælg Authoritiative domain (den øverste).
->
Klik New.

Exchange Shell

new-AcceptedDomain -Name 'FirmaEt' -DomainName 'FirmaEt.dk' -DomainType 'Authoritative'

E-mail Address policy

Exchange Shell

new-EmailAddressPolicy -Name 'FirmaEt EAP' -IncludedRecipients 'MailboxUsers' -ConditionalCustomAttribute1 'FirmaEt' -Priority 'Lowest' -EnabledEmailAddressTemplates 'SMTP:%[email protected]'

Distribution Group

new-DistributionGroup -Name 'FirmaEt-mail' -Type 'Security' -OrganizationalUnit 'MyDomain.local/Hosting/FirmaEt/Groups' -SamAccountName 'FirmaEt-mail' -Alias 'FirmaEt-mail'
Set-DistributionGroup -BypassSecurityGroupManagerCheck -CustomAttribute1 'FirmaEt' -Identity 'MyDomain.local/Hosting/FirmaEt/Groups/FirmaEt-mail'

Oprette brugere

New-Mailbox -Name 'Fornavn Efternavn' -Alias 'FE' -OrganizationalUnit 'MyDomain.local/Hosting/FirmaEt/Users' -UserPrincipalName '[email protected]' -SamAccountName 'FE.FirmaEt' -FirstName 'Fornavn' -Initials '' 

-LastName 'Efternavn' ***-Password 'System.Security.SecureString'*** -ResetPasswordOnNextLogon $false
*** Mangler ***

Set-Mailbox -CustomAttribute1 'FirmaEt' -Identity 'MyDomain.local/Hosting/FirmaEt/Users/Fornavn Efternavn'

Add-DistributionGroupMember -Identity 'MyDomain.local/Hosting/FirmaEt/Groups/FirmaEt-mail' -Member 'MyDomain.local/Hosting/FirmaEt/Users/Fornavn Efternavn' -BypassSecurityGroupManagerCheck

$user = ([ADSI]"LDAP://PDC.MyDomain.local/CN=Fornavn Efternavn,OU=Users,OU=FirmaEt,OU=Hosting,DC=MyDomain,DC=local").psbase;
$user.Properties["msExchQueryBaseDN"].Value = "OU=FirmaEt,OU=Hosting,DC=MyDomain,DC=local";
$user.CommitChanges();

Modifying Permissions for the Address Lists Containers

Nu skal der ændres nogle ting i AD som Microsoft ikke anbefaler eller supportere. For at gøre det nemt, så læs fra "Modifying Permissions for the Address Lists Containers".

Ekstra

Storage styring

Læs mere

[1] [2] [3]

Most notably, on the second part, I didn't have to modify all the OWA stuff to hide the address lists...

[4]

Tak

Tak til Martin B.

Mere info

Andre gode links

Exchange 2007: Distribution Group – User Unknown Bounceback

Catch-all for 2010 HUB only setup

Bøger

Exchange Server 2010 Unleashed

Windows Server 2008 R2 Unleashed