Professional Documents
Culture Documents
What are the storage group and database size limitations in Exchange 2007, compared with Exchange 2003?
Exchange Server 2003 Standard edition supported 1 Storage Group and 2 Stores one Mailbox and one Public Folder Store (when excluding the Recovery Storage Group of course). Exchange Server 2003 Enterprise Edition supported a total of 4 Storage Groups each containing a maximum of 5 store databases per Storage Groups (thus maximum 20 databases per server). The limit of a database size in Exchange Server 2003 Standard edition was 16 GB (although raised to 75 GB when Exchange 2003 Service Pack 2 was applied). There was no limit on a database size when talking about Exchange Server 2003 Enterprise edition (well actually there is a 16 Terabyte limit but this limit is caused by hardware). Exchange Server 2007 comes in two flavours, a standard edition and an enterprise edition, just like previous versions of Exchange. The Mailbox Server when talking about the Exchange Server 2007 Standard edition supports a total of 5 Storage Groups and 5 databases. Unlike Exchange 2003 and previous versions of Exchange theres no longer a database storage limit in the standard edition. The Mailbox server in the Exchange 2007 Enterprise edition supports up to 50 Storage groups and a maximum of 50 databases per server. Exchange 2007 allows you to create up to 5 databases in each Storage Group as is the case with Exchange 2003, but best practice is to create 1 database per Storage Group. So why should you have a one to one relationship between storage groups and databases? Well primarily because youll be up and running a lot faster considering disaster recovery scenarios, etc. No Storage Groups In Exchange 2010 Exchange 2010 has only mailbox databases and they are organizational objects in EMC. Mailbox databases no longer connected to the server object they become *Peers*. Database management has also been moved from Server configuration node in exchange console EMC. The mailbox databases are placed in the Organization Configuration ->Mailbox location in the console rather than the server level in exchange 2007. The database names has to be unique through out the exchange organization as well. This means that we cant have duplicate mailbox database names like in 2007 (in different storage groups, of course). As there are no storage groups, this will also mean that the database will have its own logs as well One of the goals of ESE in Exchange 2010 is to reduce the cost of maintaining and managing a database. Database maintenance is comprised of several tasks that manage and keep the integrity of your mailbox database. Database maintenance is divided into the following: Store mailbox maintenance ESE database maintenance In Exchange 2007, ESE database maintenance was disk-intensive. In Exchange 2010, improvements have been made to increase performance. In Exchange 2010, on large or very heavy profile servers, the store mailbox maintenance task only lasts approximately 45 minutes, while ESE database maintenance usually took from six to eight hours per Created by Aslam Kader
night to complete on large Exchange 2007 databases (2 GB quotas). In Exchange 2010, improvements have been made to support both large mailboxes as well as to support JBOD storage and storage without the use of RAID. Microsoft Exchange Server 2010 includes many improvements to the Exchange database architecture: Public folder reporting has been enhanced. Databases are no longer associated with storage groups. Storage groups have been removed. Investments in store schema and Extensible Storage Engine (ESE) optimizations have reduced IOPS by 70 percent.
Describe the differences in the permission model between Exchange 2003 and Exchange 2010.
Exchange 2003 Security and Permissions Model To help simplify management of permissions, Exchange Server 2003 provided predefined security roles that were available in the Exchange 2003 Administrative Delegation Wizard. These roles were a collection of standardized permissions that could be applied at either the organization or the administrative group level. In Exchange 2003, the following security roles were available through the Delegation Wizard in Exchange System Manager: Exchange Full Administrator Exchange Administrator Exchange View Only Administrator This model had the following limitations: A lack of specificity. The Exchange Administrator group was too large, and some customers wanted to manage their security and permissions model at the individual server-level. A perception that the Exchange Server 2003 security roles only differed in subtle ways. There was no clear separation between administration of users and groups by the Windows (Active Directory) administrators and Exchange recipient administrators. For example, to perform Exchange recipient related tasks, you had to grant Exchange administrators high level permissions (Account Operator permissions on Windows domains). Exchange 2007 Security and Permissions Model To improve the management of your Exchange administrator roles, which were called "security groups" in Exchange 2003, the following new or improved features have been made to the Exchange security and permissions model: New administrator roles that is similar to the built-in Windows Server security groups. You can use the Exchange Management Console (formerly Exchange System Manager) and the Exchange Management Shell to view, add, and remove members from any administrator role.
Recover Deleted Items Local Distribution List S/MIME feature Public Folder Rules Monthly view New themes
What are the major changes in the way Exchange 2010 stores work? Name some of the changes in comparison with Exchange 2003 and Exchange 2007.
The following is a list of core store functionality that's included or has been changed in Exchange 2010: Deprecated storage groups Mailbox databases no longer connected to the server object Improvements in Extensible Storage Engine (ESE) for high availability, performance, and database mobility Flattened Outlook store schema Enhanced reporting with public folders
In Exchange 2010, the store schema has been changed to remove the dependency of mailbox databases on the server object. In addition, the new schema has been improved to help reduce database I/O per second (IOPS) by refactoring the tables used to store information. Refactoring the tables allows higher logical contiguity and locality of reference. These changes reduce the store's reliance on the secondary indexes maintained by ESE. As a result, the store is no longer sensitive to performance issues related to the secondary indexes. Created by Aslam Kader
Store resilience and health has also been improved by adding several features related to detecting and correcting errors and providing alerts, such as the following: Mailbox quarantine on rogue mailboxes Transport cut-off to databases with less than 1 GB of space Thread time-out detection and reporting
Name the system prerequisites for installing Exchange 2007 in your existing Active Directory forest.
Windows Server 2003/R2 x64 SP2 Windows Server 2008 x64 Microsoft .NET Framework Version 3.0/Microsoft .NET Framework Version 2.0 (with update/SP1) Microsoft Windows PowerShell Microsoft Management Console (MMC) 3.0 Network News Transfer Protocol (NNTP) service must not be installed. Simple Mail Transfer Protocol (SMTP) service must not be installed. IIS (for OWA)
Web-Digest-Auth Web-Windows-Auth Web-Dyn-Compression Net-HTTP-Activation RPC-over-HTTP-Proxy 3- Software Prerequisites: For Hub Transport or Mailbox server role, Microsoft Filter Pack is required to be installed. You can download the Microsoft Filter Pack from the Microsoft website.
How would you easily install all the Windows Server 2008 R2 roles and features required for Exchange 2010?
Exchange Server 2010 Service Pack 1 allows us to install all Operating System prerequisites using just the Exchange Setup wizard. When we use the Exchange Server 2010 SP1 Setup wizard, there is a new option called Automatically install Windows Server roles and features required for Exchange Server. Just by clicking on that option will be installed all prerequisites automatically. Installing Exchange Server 2010 Pre-Requisites on Windows Server 2008 First, install the following software components. 1. 2. 3. 4. .NET Framework 3.5 Service Pack 1 .NET Framework 3.5 Family Update Windows Remote Management and Windows PowerShell 2.0 2007 Office System Converter: Microsoft Filter Pack (for Hub Transport and Mailbox Server roles only)
Run the following from an elevated command prompt. C:\>sc config NetTcpPortSharing start= auto Next we need to install the operating system components. The Exchange source files contain a series of ServerManagerCmd.exe answer files in XML format that can be used to install the operating system pre-requisites for each of the server roles. Each file relates to a specific Exchange 2010 deployment scenario. exchange-all.xml all server roles exchange-base.xml only the requirements for Forest and Domain prep operations exchange-cadb.xml Central Admin Database role exchange-cas.xml Client Access Server role exchange-eca.xml Central Admin role exchange-edge.xml Edge Transport Server role exchange-hub.xml Hub Transport Server role exchange-mbx.xml Mailbox Server role exchange-typical.xml Typical Exchange server (Client Access, Hub Transport, and Mailbox Server roles) exchange-um.xml Unified Messaging role Execute any of the answer files using ServerManagerCmd.exe and the -inputPath parameter (that can be shortened to -ip). Here I am installing the pre-requisites for a Typical Exchange 2010 server. Created by Aslam Kader
servermanagercmd -ip exchange-typical.xml restart -restart option used to restart server automatically
How would you check your Exchange configuration settings to see if theyre right?
Run Microsoft Exchange Best Practices Analyzer tool.
Looking to install Exchange 2007 on Windows Server 2008. What SP version do you need? And for R2?
Exchange Server 2007 SP1 required for installation on Windows Server 2008 and Exchange Server 2007 SP3 required for Windows Server 2008 R2.
Whats a Rollup Update? Whats the latest RU for Exchange 2007 2010?
An update rollup is a tested, cumulative set of hotfixes, security updates, critical updates, and updates that are packaged together for easy deployment. A rollup generally targets a specific area, such as security, or a component of a product. At the time of this writing, Update Rollup 4 for Exchange Server 2007 Service Pack 2 and Update Rollup 10 for Exchange Server 2007 Service Pack 1 are available.
How can you easily integrate a RU in the Exchange 2007 2010 installation media?
The Exchange installation folder includes an Updates folder. When you perform a new Exchange installation, you can copy an update rollup to the Updates folder. In this scenario, the update rollup package is applied during the installation of Exchange. The Updates folder supports only new installation of Exchange server.
Name a few reasons for using 64-bit hardware and OS version for Exchange 2007 2010.
64-bit hardware provides the system architecture that is required to support the increased memory, storage, and enhanced security requirements in a more cost-effective manner. Trends indicate that demands on messaging systems will continue to grow and 64-bit servers provide the system architecture to meet these demands while reducing costs within organizations through server and disk storage consolidations. With a larger addressable space, the Exchange servers can utilize more memory thereby reducing the required input/output per user (IOPS), enabling the use of larger disks as well as low cost storage such as SATA2 drives.
Exchange 2007 came in both 32-bit and 64-bit versions. Name a couple of reasons for ever needing the 32-bit version.
You need exchange 2007 32bit to export mail box into PST file.
Wanting to manage Exchange 2007 2010 from a remote computer, name a few of your management options.
There are a few options for managing Exchange 2007 servers remotely. First off, you can install the Exchange 2007 management tools onto a separate machine from your Exchange server, as long as that machine is running either the 32-bit or 64-bit version of Windows Server 2003 Service Pack 1 (SP1) or later, Windows Server 2003 R2, or Windows XP SP2 or later. Note that installing any of the server roles (client access, mailbox, edge, and so on) on 32bit hardware is not supported in production environments, but is supported for installing the management tools on a Created by Aslam Kader
32-bit machine. Also note that as of the initial release of Exchange Server 2007, the management tools are not supported on Windows Vista. In some organizations, the IT department creates a single server to be the management server, installing all the necessary management tools for various products on this server. Then the administrators who need to use those tools access the management server via Terminal Server so they can perform remote administration. In other settings, users install the management tools on their own desktops. From the console or shell you can perform operations on the servers in your organization. In the console, the servers are visible so you can perform operations on any of them remotely. In the shell, many of the tasks support a filtering flag like -server if you want to scope an operation to a single server. There are a few exceptions, however, for commands that must be run locally, such as the Get-NetworkConnectionInfo command.
Background Jobs : Also called a PSJob, it allows a command sequence (script) or pipeline to be invoked asynchronously. Jobs can be run on the local machine or on multiple remote machines. A PSJob cannot include interactive cmdlets. Transactions : Enable cmdlet and provider developers to perform transactional operations. PowerShell 2.0 includes transaction cmdlets for starting, committing, and rolling back a PSTransaction as well as features to manage and direct the transaction to the participating cmdlet and provider operations. The PowerShell Registry provider supports transactions. ScriptCmdlets: These are cmdlets written using the PowerShell scripting language. NOTE: The preferred name for script cmdlets is now Advanced Functions. SteppablePipelines: This allows the user to control when the BeginProcessing(), ProcessRecord() and EndProcessing() functions of a cmdlet are called. Modules : This allows script developers and administrators to organize and partition PowerShell scripts in selfcontained, reusable units. Code from a module executes in its own self-contained context and does not affect the state outside of the module. Modules can define a restricted runspace environment by using a script. They have a persistent state as well as public and private members. Data Language : A domain-specific subset of the PowerShell scripting language, that allows data definitions to be decoupled from the scripts and allow localized string resources to be imported into the script at runtime (Script Internationalization). Script Debugging : It allows breakpoints to be set in a PowerShell script or function. Breakpoints can be set on lines, line & columns, commands and read or write access of variables. It includes a set of cmdlets to control the breakpoints via script. Eventing: This feature allows listening, forwarding, and acting on management and system events. Eventing allows PowerShell hosts to be notified about state changes to their managed entities. It also enables PowerShell scripts to subscribe to ObjectEvents, PSEvents, and WmiEvents and process them synchronously and asynchronously. Windows PowerShell Integrated Scripting Environment (ISE) : PowerShell 2.0 includes a GUI-based PowerShell host (formerly known as Graphical Windows PowerShell) that provides integrated debugger, syntax highlighting, tab completion and up to 8 PowerShell Unicode-enabled consoles (Runspaces) in a tabbed UI, as well as the ability to run only the selected parts in a script. Network File Transfer : Native support for prioritized, throttled, and asynchronous transfer of files between machines using the Background Intelligent Transfer Service (BITS). New Cmdlets : Including Out-GridView, which displays tabular data in the WPF GridView object. New Operators : -Split, -Join, and Splatting (@) operators. Exception Handling with Try-Catch-Finally : Unlike other .NET languages, this allows multiple exception types for a single catch block. Nestable Here-Strings : PowerShell Here-Strings have been improved and can now nest. Block Comments : PowerShell 2.0 supports block comments using <# and #> as delimiters. New APIs : The new APIs range from handing more control over the PowerShell parser and runtime to the host, to creating and managing collection of Runspaces (RunspacePools) as well as the ability to create Restricted Runspaces which only allow a configured subset of PowerShell to be invoked. The new APIs also support participation in a Windows PowerShell managed transaction.
In the installation folder root you see setup.com and setup.exe. Which would you use and when?
Setup.com is used for all preparation work; basically it calls different backend procedures. Setup.com is also used in disaster recovery to reinstall all ex2k7 roles. Setup.exe is used for GIU installation.
server and place each role, or a combination of roles, on different servers in the organization. With current Exchange servers you can make a server a Front-End server, or a Back-End server and that is about it. Exchange 2007 introduces five roles to the Exchange organization. Edge Transport - The last hop of outgoing mail and first hop of incoming mail, acting as a "smart host" and usually deployed in a perimeter network, Edge Transport provides mail quarantine and SMTP service to enhance security. One advantage of this role is that is does not require Active Directory access, so it can function with limited access to the corporate network for increased security. Hub Transport - The Hub Transport role handles mails by routing them to next hop: another Hub Transport server, Edge server or mailbox server. Unlike Exchange 2003 Bridgehead that needs Exchange admin defined routing groups, Exchange 2007 Hub Transport role uses AD site info to determine the mail flow. The Hub Transport and Edge Transport servers are very similar and in fact, one can forgo the Edge Transport server and configure the Hub Transport to accept mail from, and send mail to, the Internet. Client Access - The Client Access server role provides the other mailbox server protocol access apart from MAPI. Similar to Exchange 2003 FrontEnd server, it enables user to use an Internet browser (OWA), 3rd party mail client (POP3/IMAP4) and mobile device (ActiveSync) to access their mailbox. Mailbox - The Mailbox server role is responsible for hosting mailbox and public folder data. This role also provides MAPI access for Outlook clients. Note that there is also a variation of this role called Clustered Mailbox role, for use with high-availability MSCS clustering of mailbox data. When Clustered Mailbox role is selected, other server roles cannot be combined on the same physical server. Unified Messaging - This role enables end users to access their mailbox, address book, and calendar using telephone and voice. IP-PBX or VoIP gateway needs to be installed and configured to facilitate much of the functionality of this server role.
What are the benefits of using roles, vs. the way Exchange 2000/2003 worked?
Server role is a logical concept used to organize Exchange 2007 services and features across one or more servers. While Exchange 2003 provided primitive server roles called BackEnd server and FrontEnd server, Exchange 2007 has more granular divisions. Dividing Exchange features among several server roles has advantages: More flexible deployment topology: For a small or medium company that has only hundreds of mailboxes and all users are centralized, customer can install all required roles on one physical server. For a large enterprise where tens of thousands of mailboxes span multiple physical locations, customer can choose to deploy each role on a separate server or even multiple servers per role to provide better performance and fault tolerance. Better hardware utilization and scalability: Because each role only installs binaries and runs services for a specific feature set. Unlike older versions of Exchange, configuring a server that has only one or two roles will reduce Memory, CPU and disk space requirements for this server. In addition, roles are scalable so admin can load balance work of one role to multiple servers. Easy to maintain: Upgrading, applying hotfix, or other server changes that could cause server outage can be isolated to one server role. This reduces maintenance down time and end user impact. Admin can also install or uninstall roles on a server as needed.
What are the Exchange 2003 equivalents of the various Exchange 2007-2010 roles?
Exchange 2007 Exchange 2003 Created by Aslam Kader
/PrepareLegacyExchangePermissions The next command will prepare the schema, and this means the account you run this command from, must be a member of the Schema Admins group as well as the Exchange Admins group. Setup.com /PrepareSchema The third command that you need to run preps the current domain, adds the Exchange Universal Security Groups and configures the Exchange objects with AD. Setup.com /PrepareAD The final step is optional and is only required to run if you have multiple domains within the forest. This command configures the other domain, or domains, in the forest. It does not need to be run on the domain that you run /PrepareAD in, but any additional domains will need this command run. You have three command line options with this command. Setup.com /PrepareDomain Prepares the current domain Setup.com /PrepareDomain:FQDN of target domain to be prepped Setup.com /PrepareAllDomains Prepares all domains in the forest.
What type or permissions do you need in order to install the first Exchange server in a forest? In a domain?
The following permissions are required:
To run the Setup /PrepareLegacyExchangePermissions command, you must be a member of the Enterprise Admins security group.
Why Run Setup /PrepareLegacyExchangePermissions Essentially, you must run the setup /PrepareLegacyExchangePermissions command so that the Exchange 2003 or Exchange 2000 Recipient Update Service functions correctly after you update the Active Directory schema for Exchange 2007.
To run the Setup /PrepareSchema command, you must be a member of the Schema Admins and Enterprise Admins security groups. To run the Setup /PrepareAD command, you must be a member of the Enterprise Admins security group.
To run the Setup /PrepareDomain, setup /PrepareDomain:<FQDN> command or the Setup /PrepareAllDomains command, you must be a member of the Enterprise Admins group or you must be a member of the Domain Admins group in any domain that you will prepare.
You have an Exchange 5.5 organization and finally decided to move forward and upgrade to Exchange 2007/2010. Whats your next obvious step?
Install an intermediary Exchange 2003 server. Then move mailboxes from Exchange 5.5 to Exchange 2003 using Exchange 2003's toolset, and then move from Exchange 2003 to Exchange 2010 using its toolset.
Youre looking to install Exchange 2007 2010 and Outlook on the same machine. Should you do that? Why?
We need Exchange 2007/2010 32bit and Outlook 2003 Service Pack 2 (SP2) or Outlook 2007 installed on same machine to export mailbox data to a .pst file.
How would you verify that the schema was in fact updated?
Created by Aslam Kader
You can verify that you are ready to start installing Exchange 2007 by looking for the following. 1. The Microsoft Exchange Systems Objects container contains a global group called Exchange 12 Domain Servers 2. The ESUG has the Exchange 12 Domain Servers global group as a member. 3. The ESUG will have permissions to the Manage Auditing and Security Log settings on all DCs in all domains that the commands were run against.
How would you check your Exchange configuration settings to see if theyre right? What types of permissions are configurable for Exchange?
1)Exchange full admin full control over the exchange organization including permission 2)Exchange Admin Manage everything within the organization except org permission. 3)Exchange view only administrator read only administrative access to Exchange organization
How can you grant access for an administrator to access all mailboxes on a specific server?
Grant permissions on a single mailbox Use the following command to grant access to just one mailbox: Add-MailboxPermission -Identity "" -User <UserorGroupIdentity> -AccessRights Fullaccess -InheritanceType all
Note: the User parameter can in fact be either users or groups, the parameter name User is a bit misleading! Example: Add-MailboxPermission -Identity "Test" -User Administrator -AccessRights Fullaccess -InheritanceType all
Or If I want to add the security Group Group2: Add-MailboxPermission -Identity "Test" -User Group2 -AccessRights Fullaccess -InheritanceType all
Example:
Get-Mailbox | Add-MailboxPermission -User Administrator -AccessRights Fullaccess -InheritanceType all
Note: In the screenshot below I received a message saying that Administrator already have access to the mailbox Test (Yellow text message).
In Outlook, users will receive the following errors when attempting to send a message on behalf of a mailbox that is hidden from address lists: Online mode When users press Send, they will receive the following error: "You do not have permission to send on behalf of the specified user." Cached Exchange Mode Outlook initially sends the message, but users will receive a non-delivery report (NDR) containing the following message: "You are not allowed to send this message because you are trying to send on behalf of another user without permission to do so. Please verify that you are sending on behalf of the correct sender, or ask your system administrator to help you get the required permission."
Mail-enabled universal security group - A mail-enabled Active Directory security group object that can be used to grant access permissions to resources in Active Directory and can also be used to distribute messages. Microsoft Exchange recipient - A special recipient object that provides a unified and well-known message sender that differentiates system-generated messages from other messages. It replaces the System Administrator sender used for system-generated messages in earlier versions of Exchange. Room mailbox - A resource mailbox that's assigned to a meeting location, such as a conference room, auditorium, or training room. Room mailboxes can be included as resources in meeting requests, providing a simple and efficient way of organizing meetings for your users. Shared mailbox - A mailbox that's not primarily associated with a single user and is generally configured to allow logon access for multiple users. User mailbox - A mailbox that's assigned to an individual user in your Exchange organization. It typically contains messages, calendar items, contacts, tasks, documents, and other important business data. Linked user - New in Exchange 2010, a linked user is a user that resides in one forest while their mailbox resides in another forest.
What type of groups would you use when configuring distribution groups in a multiple domain forest?
Use Universal distribution groups in a multiple-domain environment. The membership of universal distribution groups is replicated to each global catalog server in each domain.
You created a mailbox for a user, yet the mailbox does not appear in ESM. Why?
Generally when you create a mailbox for a user, the user's e-mail address will be updated in the GAL during the regular update interval. But in order to be able to view the mail box, the user has to access the Exchange server (either through MS outlook or OWA). Then you will be able to view the user's mail box. OR if you send a test mail to that id then the mailbox will be populated in the ESM This situation happens because the securityDescriptor object (msExchMailboxSecurityDescriptor) is not read from Active Directory until the user first logs on to the mailbox or the mailbox is sent an item of mail.
You wanted to change mailbox access permissions for a mailbox, yet you see the SELF permission alone on the permissions list. Why?
In Microsoft Exchange 2000 Server or Microsoft Exchange Server 2003, when you create new mailbox-enabled accounts in Active Directory, they do not have inherited mailbox rights. The only object that is granted permission is Self, which is granted full mailbox access and read rights. To view mailbox rights, follow these steps: In Active Directory Users and Computers, click Advanced Features on the View menu. Note: This is not necessary on Exchange Server 2003 because of the fact that the Exchange Advanced tab is exposed by default. Under Active Directory Users and Computers, click the account, click the Exchange Advanced tab, and then click Mailbox Rights. The rights are displayed in the Permissions for account name dialog box. = Bad! This behavior occurs because the mailbox security descriptor is not read from the Active Directory account object until the user logs on or gets mail. The Recipient Update Service (RUS) does not stamp the inherited permissions when the mailbox is created. After the mailbox is created in the store, the store calculates inherited mailbox rights. To resolve this behavior perform one of the following actions: Log on to the mailbox you've created. You can do so by opening an Outlook profile for the new user and running Outlook, or by opening a OWA session the the destination mailbox by typing http://servername/exchange/username in the address bar of your browser. Note: Opening Outlook requires you to be logged on as the destination user, while OWA does not require you to be logged on as the user. However, both methods require that you know the destination user's password. Send a message to the mailbox. Note: The second method is quicker and easier to perform, that's why you'll need to know how to Send Mail from Script and to Test SMTP Service in IIS and Exchange. When the mailbox is created in the store, the store itself calculates the inherited permissions and stamps them on the store's copy of the mailbox security descriptor. = Good!
In Exchange Server 2003, dynamic distribution groups were called query-based distribution groups. Dynamic distribution groups provide the same functionality as mail-enabled distribution groups. However, instead of containing a static group of recipients, the membership list for dynamic distribution groups is calculated based on their configuration each time they are used. When a message is sent to a dynamic distribution group, it's delivered to all recipients in the organization that match the criteria defined for that dynamic distribution group.
How can you grant access for an administrator to access all mailboxes in your organization?
Get-Mailbox -OrganizationlUnit MyOU | Add-MailboxPermssion -User UserOrGroup -AccessRights FullAccess Add-MailboxPermission -identity Joe Adams -AccessRights FullAccess -user janea Besides FullAccess, the following mailbox permissions can be granted using Add-MailboxPermission: 1. SendAs 2. ExternalAccount 3. DeleteItem 4. ReadPermission 5. ChangePermission 6. ChangeOwner
What type of groups would you use when configuring distribution groups in a multiple domain forest?
Universal Distribution Group.
What are System Public Folders? Where would you find them?
System public folders (also known as the Non_IPM_Subtree) Users can't access these folders directly by using conventional methods. Client applications such as Outlook use these folders to store information such as free and busy data, OABs, and organizational forms. Other system folders contain configuration information used by custom applications or by Exchange. The public folder tree contains additional system folders, such as the EFORMS REGISTRY folder, that don't exist in general purpose public folder trees. System folders include the following:
EFORMS REGISTRY and Events Root By default, one content replica of each of these folders resides in the default public folder database on the first Exchange server installed in the first administrative group. This is the location where organizational forms are stored for legacy Outlook clients (clients using an Outlook version earlier than Outlook 2007). Offline Address Book and Schedule+ Free Busy The Offline Address Book folder and the Schedule+ Free Busy folder automatically contain a subfolder for each administrative group (or site) in your topology. By default, a content replica of a specific administrative group folder resides on the first server installed in the administrative group. These folders are used to store legacy free and busy information and OAB data for legacy Outlook clients. Legacy Outlook clients don't support the new features in Exchange 2010 or Exchange 2007 that manage free and busy information and OAB data. (These features include the Availability service, the Autodiscover service, and OAB distribution on Client Access servers.) OWAScratchPad Each public folder database has an OWAScratchPad folder, which is used to temporarily store attachments that are being accessed by using Microsoft Office Outlook Web App. Don't modify this folder. StoreEvents Each public folder database has a StoreEvents folder, which holds registration information for custom Exchange database events. Don't modify this folder. Other folders To support internal Exchange database operations, a tree may contain several other system folders, such as schema-root. Don't modify these folders.
How would you plan and configure Public Folder redundancy? How can you immediately stop PF replication? How can you prevent PF referral across slow WAN links? What types of PF management tools might you use?
Created by Aslam Kader
What are the differences between administrative permissions and client permissions in PF? How can you configure PF replication from the command prompt in Exchange 2003? What are the message hygiene options you can use natively in Exchange 2003? What are the configuration options in IMF? What are virtual servers? When would you use more than one? Name some of the SMTP Virtual Server configuration options.
Replace smtp virtual server on exchange 2003 backend with 2010 hub transport. The hub server will perform this role. But if you like it can do it also immidiatly, just create a send connector and permit the server to connect to servers on the internet on port 25.
What is a Mail Relay? Name a few known mail relay software or hardware options.
Often referred to as an e-mail server, a device and/or program that routes an e-mail to the correct destination. Mail relays are typically used within local networks to transmit e-mails among local users. (For example, all of the student and faculty e-mail of a college campus.) Mail relays are particularly useful in e-mail aliasing where multiple e-mail addresses are used but the mail relay forwards all messages to the specified e-mail addresses to one single address. A mail relay is different than an open relay, where an e-mail server processes a mail message that that neither originates or ends with a user that is within the servers local domain (i.e., local IP range).
What are Routing Groups? When would you use them? What are the types of Connectors you can use in Exchange? What is the cost option in Exchange connectors? What is the Link State Table? How would you view it? How would you configure mail transfer security between 2 routing groups? What is the Routing Group Master? Who holds that role? Explain the configuration steps required to allow Exchange 2003 to send and receive email from the Internet (consider a one-site multiple server scenario). What is DS2MB? What is Forms Based Authentication? How would you configure OWAs settings on an Exchange server? What is DSACCESS?
Exchange needs access to Active Directory domain controllers for a variety of reasons. Configuration information for the organization. Recipient information in the Global Catalog. Recipient information in a domain.
An Exchange service called DSAccess has the task of finding domain controllers and Global Catalog servers suitable for use by Exchange. DSAccess keeps an open connection to each server in the DSAccess profile. This avoids the expensive chore of building up and tearing down RPC and TCP connections each time the Exchange server needs information. Other Exchange services, such as the SMTP Routing Engine Categorizer and DSProxy, send their LDAP and NSPI requests to DSAccess, which selects a target domain controller or Global Catalog server from its profile and forwards the request to that server. It uses a round robin selection process for load balancing. Because all LDAP queries funnel through DSAccess, Exchange dramatically improves performance by caching the query results. By default, Exchange gives 4MB of physical memory to the DSAccess cache. DSAccess uses DNS to locate domain controllers and Global Catalog servers.
Relationship of EAP and Accepted Domains in Exchange 2007 EAP defines the e-mail proxy addresses that are stamped onto recipient objects. Accepted domains define the SMTP namespaces for which an Exchange organization routes e-mail. Any accepted domain added to the system can be linked to an EAP so that it will generate recipient e-mail addresses for this accepted domain. And every EAP must link to an existing accepted domain so that e-mails sent to e-mail addresses that are defined by the EAP can be routed by Exchange 2007 transport servers. In Exchange 2007, authoritative and relay domains are managed together as accepted domains. In Exchange Management Console, the Accepted Domains tab of Hub Transport node under Organization Configuration work center is used to manage all accepted domains defined in the organization. E-Mail Address Policy wizard provides the console GUI used to select an accepted domain for which a new e-mail address policy applies. Only accepted domains defined in the Exchange 2007 organization can be added to the list in the EAP.
How would you work with multiple recipient policies? What is the issue with trying to remove email addresses added by recipient policies? How would you fix that? What is the RUS? When would you need to manually create additional RUS? What are Address Lists? How would you modify the filter properties of one of the default address lists? How can you create multiple GALs and allow the users to only see the one related to them? What is a Front End server? In what scenarios would you use one? What type of authentication is used on the front end servers? When would you use NLB? How would you achieve incoming mail redundancy? What are the 4 types of Exchange backups? What is the Dial-Tone server scenario?
A dial tone recovery involves creating an empty database on a server to replace a failed database. This empty, or dial tone, database allows users to send and receive e-mail while the failed database is recovered. By using a dial tone recovery approach, you can restore basic e-mail service to users (providing them with a "dial tone") and then restore users' previous data as it becomes available. Created by Aslam Kader
Basic steps: 1. Create a new empty dial tone database to replace the failed database This new database will allow users who had mailboxes on the failed database to send and receive new messages. Exchange 2007 has a feature called dial tone portability that allows you to point a user to a different database without moving the mailbox. If you created the dial tone database on a different server than the server that housed the failed database, you will need to move the mailbox configuration to that new server. 2. Restore the old database Use whatever backup and recovery software you typically use to restore the failed database. If there is no backup of the failed database, recover the failed database. If you are using the same server for dial tone recovery, you need to restore the database to a recovery storage group. 3. Swap the dial tone with the restored database After the failed database has been restored, swap it with the dial tone database. This gives the users the ability to send and receive e-mail and access all the data in the restored database. If users were moved to a dial tone database on another server, you then need to move the mailbox configuration back to the original server. Merge the databases To get the data from the dial tone database into the restored database, merge the data. You can do this with the Database Recovery Management tool included in the Exchange Management Console. When would you use offline backup? How do you re-install Exchange on a server that has crashed but with AD intact?
Eseutil can be used against any ESE database in Exchange Server 2007. In the past, Eseutil could only be used with mailbox and public folder ESE databases, but with Exchange 2007, Eseutil can be used with ESE databases on the Exchange 2007 Hub Transport and Edge Transport server roles as well. Eseutil can be run on one database at a time from the command prompt. You can use Eseutil to perform a range of database tasks including repair, offline defragmentation, and integrity checks. Table 1 lists the most common Eseutil switches. Eseutil examines the structure of the database tables and records at the low level of the database (Ese.dll). You can use the defragmentation mode to compact a database offline. Other Eseutil modes such as repair, recovery, and restore can be used to repair a corrupt or damaged database. Modes like integrity, file dump, and checksum can be used to verify the state of a database. Eseutil switches Eseutil mode Switch Description
Defragmentation /D Defragments the database offline but leaves the new, defragmented database in the temporary location with or without overwriting the original database. This mode reduces the gross size on the disk of the database (.edb) by discarding most empty pages and by rebuilding indexes. Repair /P Repairs a corrupt offline database by discarding any pages that cannot be fixed. In repair mode, the Eseutil tool fixes individual tables but does not maintain the relationships between tables. Use the Information Store Integrity Checker (Isinteg.exe) tool to check and fix links between tables if the repaired database is a mailbox or public folder database. Restore /C Displays restore log file (Restore.env file) and controls hard recovery after restoration from legacy online backups. Recovery /R Replays transaction log files or rolls them forward to restore a database to internal consistency or to bring an older copy of a database up to date. Integrity /G Verifies the page level and ESE level logical integrity of the database. Does not verify integrity at the application level. Application-level logical integrity can be verified with Isinteg for mailbox and public folder databases. File Dump /M Displays headers of database files, transaction log files, and checkpoint files. Also displays database page header information, and database space allocation and metadata. Checksum Copy File /K /Y Verifies checksums on all pages in the database, log files, and checkpoint files. Performs a fast copy of very large files.
To run Isinteg.exe to fix and to check the integrity of the information store, run the following line from a command prompt: c:\program files\exchsrvr\bin>isinteg -s servername -fix -test alltests For example: exchsrvr\bin\isinteg -s server1 -fix -test alltests NOTE: You need to first start the information store service and dismount the databases; you can only check databases that are offline. Switch -? -pri -pub -fix Result Usage is displayed. Check private information store (default). Check public information store. Repair information store.
-l [logfilename] Store log information in logfilename.Default is isinteg.pri or isinteg.pub. -patch Offline backup restore patch.
How would you monitor Exchanges services and performance? Name 2 or 3 options.
Enhance your messaging environment by using the many tools available with Microsoft Exchange Server. This tools documentation provides detailed information about tools that can help you plan, install, manage, and troubleshoot Exchange Server.
Microsoft Exchange Server Analyzer Articles Exchange Remote Connectivity Analyzer Tool Auto Accept Agent Deployment and Administration Guide Microsoft Exchange Server Intelligent Message Filter v2 Operations Guide Microsoft Exchange Server User Monitor Microsoft Exchange Server Quota Message Service Deploying Exchange ActiveSync Certificate-Based Authentication Microsoft Exchange ActiveSync Mobile Administration Web Tool Microsoft Exchange Server MAPI Editor Microsoft Exchange Server Stress and Performance Tool Microsoft Exchange Load Generator Microsoft Exchange Server Public Folder DAV-based Administration Tool Microsoft Exchange Server Profile Analyzer Microsoft Exchange 2007 Anti-Spam Migration Microsoft Exchange Server Jetstress 2010 Microsoft Exchange Server Jetstress 2007 Inter-Organization Replication Tool Application Analysis Envisioning Process Microsoft Application Analyzer 2006 for Lotus Domino Exchange Server 2003 Coexistence and Migration for Lotus Domino Mail Migrating from Lotus Notes to the Microsoft Collaboration Platform Exchange 2010 UM Troubleshooting Tool Created by Aslam Kader
Operations Manager Management Pack for Exchange 2010 Operations Manager Management Pack for Exchange 2010 Guide Operations Manager Management Pack for Exchange 2007
By default, Direct Push is enabled in Exchange 2010. Mobile phones that support Direct Push issue a long-lived HTTPS request to the server running Microsoft Exchange. The Exchange server monitors activity on the user's mailbox and sends a response to the device if there are any changes, such as new or changed e-mail messages or calendar or contact items. If changes occur within the lifespan of the HTTPS request, the Exchange server issues a response to the device that states that changes have occurred and the device should initiate synchronization with the Exchange server. The device then issues this request to the server. When synchronization is complete, a new long-lived HTTPS request is generated to start the process again. This guarantees that e-mail, calendar, contact, and task items are delivered quickly to the mobile phone, and the device is always synchronized with the Exchange server.
Note: To perform a remote device wipe on a device by using the Exchange Management Console, the user must be assigned to an Exchange ActiveSync mailbox policy. For more information about how to add users to an Exchange ActiveSync mailbox policy, see How to Add Users to an Exchange ActiveSync Mailbox Policy. Procedure To use the Exchange Management Console to perform a remote device wipe 1. 2. 3. 4. Open the Exchange Management Console. Under Recipient Configuration, click Mailbox. In the Mailbox window, select the user. In the action pane, click Manage mobile device or right-click the user's mailbox, and then click Manage mobile device. 5. Select the mobile device from which you want to clear all data. 6. In the Actions section, click Clear. 7. Click Clear again. To use Outlook Web Access to perform a remote device wipe 1. 2. 3. 4. 5. 6. 7. 8. Open Outlook Web Access. Log on to the device owner's mailbox. Click Options. In the navigation pane, select Mobile Devices. Select the ID of the device that you want to wipe and remove from the list. Click Wipe all data from device. Click OK. Click Remove Device from List.
To use the Exchange Management Shell to perform a remote device wipe 1. Run the following command to obtain the identity of the device: Get-ActiveSyncDeviceStatistics - Mailbox jeffhays | fl Identity 2. Run the following command: Clear-ActiveSyncDevice -Identity WM_jeffhayes Note: In these commands, <jeffhayes> represents the actual identity of the device owner.
What are the issues with connecting Outlook from a remote computer to your mailbox? What is RPC over HTTP? What are the requirements to run it?
In Microsoft Exchange Server 2010, the Outlook Anywhere feature, formerly known as RPC over HTTP, lets clients that use Microsoft Office Outlook 2010, Outlook 2007, or Outlook 2003 connect to their Exchange servers from outside the corporate network or over the Internet using the RPC over HTTP Windows networking component. Outlook Anywhere and Exchange 2010 Created by Aslam Kader
The Windows RPC over HTTP Proxy component, which Outlook Anywhere clients use to connect, wraps remote procedure calls (RPCs) with an HTTP layer. This allows traffic to traverse network firewalls without requiring RPC ports to be opened. In Exchange 2010, as in Exchange 2007, it's easy to deploy and manage this feature. To deploy Outlook Anywhere in your Exchange 2010 messaging environment, you need to enable Outlook Anywhere on at least one Client Access server using the Enable Outlook Anywhere wizard in the Exchange Management Console. Benefits of Using Outlook Anywhere Outlook Anywhere offers the following benefits to clients that use Outlook 2010, Outlook 2007, or Outlook 2003 to access your Exchange messaging infrastructure:
Users have remote access to Exchange servers from the Internet. You can use the same URL and namespace that you use for Outlook Web App and Microsoft Exchange ActiveSync. You can use the same Secure Sockets Layer (SSL) server certificate that you use for both Outlook Web App and Exchange ActiveSync. Unauthenticated requests from Outlook can't access Exchange servers. You don't have to use a virtual private network (VPN) to access Exchange servers across the Internet. You don't have to configure anything in Exchange 2010 when you're using SSL session ID load balancing on the Client Access server with Outlook Anywhere. If you already use Outlook Web App with SSL or Exchange ActiveSync with SSL, you don't have to open any additional ports from the Internet. You can test end-to-end client connectivity for Outlook Anywhere and TCP-based connections by using the Test-OutlookConnectivity cmdlet.
Deploying Outlook Anywhere Deploying Outlook Anywhere for your organization is straightforward. The following recommendations should be followed to successfully deploy Outlook Anywhere:
Use at least one Client Access server per site In Exchange 2010, a site is a network location with highbandwidth connectivity between all computers. We recommend that you install at least one Client Access server in each site to provide client access to the Mailbox server. However, you can have multiple Client Access servers in each site for increased performance and reliability. Enable Outlook Anywhere on at least one Client Access server We recommend that you have one Client Access server in each site that has Outlook Anywhere enabled. This lets clients that use Outlook 2010 or Outlook 2007 connect to a user's mailbox through the Client Access server in the site. Users will connect by using HTTPS to the Client Access server that's in the site where the user's mailbox is located. This reduces the risk associated with using RPCs across the Internet. Using RPCs across the Internet can adversely affect performance.
Cached Exchange Mode, available in Outlook 2010, 2007, and 2003, is similar to offline folders in previous versions of Outlook, though easier to use. Cached Exchange Mode allows you to work with your Exchange account data when your connection to the Exchange server is interrupted or unavailable. Cached Exchange Mode stores a copy of your mailbox on your computer by automatically creating and using an offline folder file (an .ost file), into which it downloads and maintains a synchronized copy of the items in all the folders of your mailbox. Outlook automatically manages your server connection and data updates; when your connection is restored, Outlook synchronizes your cached mailbox with your mailbox on the server.
What are the benefits and issues when using cached mode? How would you tackle those issues?
By default Cached Exchange Mode is on for mailbox and off for public folder favorites. Benefits: Cached Exchange Mode isolate the customer from intermittent connectivity issues from the Exchange & GC servers. Since the user is primary working out of the offline address book and OST, it means fewer round trips to the server when looking at the same message lots of times. Less round tripping to the server means that one should be able to have a higher user per server count. Cached mode is also required in order for the junk email feature to work in Outlook. Issues: The biggest drawback is that it can take up to 24 hours before the end user sees a change to the global address list. This is because the default behavior of Outlook 2003 is to update the OAB once a day. If your organization have frequent address book changes than it is recommended to turn off Cached Exchange Mode.
What is S/MIME? What are the usage scenarios for S/MIME? What are the IPSec usage scenarios for Exchange 2003? How do you enable SSL on OWA? What are the considerations for obtaining a digital certificate for SSL on Exchange? What are SAN certificates?
Subject Alternative Names protect multiple host names with a single SSL certificate. It allows specifying a list of host names to be protected by a single SSL certificate. The Subject Alternative Name extension has been a part of the X509 certificate standard since before 1999, but only recently achieved widespread use with the launch of Microsoft Exchange Server 2007-which makes good use of Subject Alternative Name to simplify server configuration. What can a Subject Alternative Names do? Secure host names on different base domains in one certificate. Virtual Host Multiple SSL sites on a single IP address. Hosting multiple SSL-enabled sites on a single server typically requires a unique IP address per site, but a certificate with Subject Alternative Names can solve this problem. Microsoft IIS 6 and Apache are both able to Virtual Host HTTPS sites using Unified Communications SSL certificate, also known as SAN certificates. SAN Certificates can secure:
Multiple fully qualified domain names (FQDN) with a single certificate. SAN Certificates are often needed to secure Exchange 2007 Server or Office Communications Server 2007. Instances where there is a need to secure multiple domains that resolve to a single IP address (such as in a shared hosting environment). Using a SAN certificate saves the hassle and time involved in configuring multiple IP addresses on Exchange 2007 server, binding each IP address to a different certificate, and running a lot of low level PowerShell commands just to piece it all together.
Name a few 3rd-parties CAs. What do you need to consider when using client-type AV software on an Exchange server? What are the different clustering options in Exchange 2003? Which one would you choose and why. Why log file size reduced in exchange server 2010?
The transaction log files are a record of every transaction performed by the database engine. All transactions are written to the log first, and then lazily written to the database. Unlike Exchange Server 2003, the transaction log files in Exchange 2010 have been reduced in size from 5 MB to 1 MB. This change was made to support the continuous replication features and to minimize the amount of data loss if primary storage fails.
What is SCC?
Created by Aslam Kader
A single copy cluster (SCC) is a clustered mailbox server that uses shared storage in a failover cluster configuration to allow multiple servers to manage a single copy of the storage groups. This feature is similar to the clustering features in previous versions of Microsoft Exchange. However, there are some significant changes and improvements that have been made. The way in which you build, manage, and troubleshoot an SCC is completely different from the way in which previous versions of Exchange clusters were built and managed. In addition, the out-of-box failover behavior has changed significantly in Microsoft Exchange Server 2007. SCCs require the use of a shared-nothing architecture, which includes shared disk storage. In a shared-nothing architecture, although all nodes in the cluster can access shared data, they cannot access it at the same time. For example, if a physical disk resource is assigned to node 1 of a two-node cluster, node 2 cannot access the disk resource until node 1 is taken offline, fails, or the disk resource is moved to node 2 manually. In an SCC, an Exchange 2007 Mailbox server uses its own network identity, not the identity of any node in the cluster. This network identity is referred to as a clustered mailbox server. If the node running a clustered mailbox server experiences problems, the clustered mailbox server goes offline for a brief period until another node takes control of the clustered mailbox server and brings it online. This process is known as failover. The storage hosting the clustered mailbox server's storage groups and databases is hosted on shared storage that is available to each possible host node of the clustered mailbox server. As the failover occurs, the storage associated with the clustered mailbox server is logically detected from the failed node and placed under the control of the new host node of the clustered mailbox server. In addition to failover, an administrator can manually move a clustered mailbox server between nodes in a cluster. This process is known as a handoff. A handoff should only be performed using the Move-ClusteredMailboxServer cmdlet in the Exchange Management Shell, or, if running Exchange 2007 SP1, by using the Manage Clustered Mailbox Server wizard in the Exchange Management Console.
You have installed Exchange 2007 RTM and are looking to enable SCR but cannot find the option to do so in the EMC or in PS. Why?
Standby continuous replication (SCR) is introduced with Service Pack 1, you have to install SP1 of higher to use SCR.
5. 6.
7.
The database page appears with the name of the database in the storage group. Use Browse to specify the path for the LCR database file. Click Next to continue. Review the Configuration Summary information on the Enable page, and verify that the correct paths have been configured. After you have verified the paths, click Enable to enable LCR for the storage group. After the storage group and database have been enabled for LCR, click Finish to close the wizard.
8.
9.
To use the Exchange Management Shell to enable LCR for an existing storage group 1. 2. Open the Exchange Management Shell. Run the following command: Enable-DatabaseCopy -Identity <Server><StorageGroup><Database> CopyEDBFilePath:<FullPathIncludingDatabaseFileName> 3. After the Enable-DataBaseCopy command has successfully completed, run the following command: Enable-StorageGroupCopy -Identity CopySystemFolderPath:<FullPath> <Server><StorageGroup> -CopyLogFolderPath:<FullPath> -
Note: The account you use to perform this operation must be delegated the Exchange Server Administrator role and local Administrators group for the target server. After LCR has been enabled for a storage group, it will initially report a status of Initializing. The storage group will change from a status of Initializing to a status of Healthy after one transaction log file has been generated. LCR cannot be enabled on a Mailbox server that contains one or more standby continuous replication (SCR) targets. Although LCR can be enabled on a Mailbox server that is configured as an SCR source, LCR and SCR targets cannot be combined on the same Mailbox server.
What Exchange edition version do you need for LCR? What Windows edition version do you need for LCR?
Exchange 2007 RTM or higher SP level, Windows 2003 or higher.
How do you recover from a store corruption when using LCR? Name the procedures you would use.
To bring the LCR replica database online right-click on the (Sever Configuration => Mailbox => Database Management) storage group and choose Restore Storage Group Copy. Complete the wizard to enable the passive copy. This process checks that the replica log files have been brought completely up to date and replayed into the replica database so that it is ready to be mounted. Before the passive copy can be brought online it must be placed in the location of the original production database. For a large database file copying it from one location to the other would be very time consuming. Instead you should modify the drive letter and folder path of the passive copy so that it matches the original active copy. For example, if the passive copy was in F:SG1Data-LCR, use Disk Manager to re-assign that volume to the drive letter E: and then rename the path to SG1Data.
Note that this is not necessary if during the Restore Storage Group Copy wizard you ticked the box to update the database paths to match the passive copy location. This method means that you can immediately mount the database without having to remap any volumes, however it may cause confusion for administrators later on when they encounter an active database in what they thought was a passive replica location. The activation of the passive copy is completed by simply mounting the database. Once the database is back online you then need to re-enable LCR to protect it from future failure situations
Considering DAGs in Exchange 2010, why does Microsoft claim that you can run raidless?
Exchange 2010 has a new I/O pattern that results in 70 percent lower I/O requirements than Exchange 2007 (and Exchange 2007 had 70 percent lower I/O requirements than Exchange 2003!). This reduced I/O pattern, thanks to optimizations that make it so writes don't come in bursts anymore, combined with advancements in SATA drives, means SATA is now a realistic storage platform for Exchange 2010. SATA was previously just for desktop systems. In addition, with the new database availability group (DAG) for high availability of mailboxes, the new guidance from Microsoft is that if you have databases replicated on at least three servers in the DAG, you don't even need RAID on the storage anymore. Because you have backups of the data in essentially real time on the mailbox duplicates and Hub Transport dumpster, you can use just a bunch of disks (JBOD) configurations. If you don't use DAG or have only two servers replicating a database, you should still use RAID for the database. RAID was previously used for I/O purposes in addition to high availability, but because of the drop in I/O requirements, single disks are now an option. Microsoft is suggesting one disk per database/transaction log going forward, providing you have the database replicated between at least three servers.
Would you run Backup-less even when implementing DAGs in Exchange 2010? Why?
For a backup-less environment to be feasible you must: Have at least three DAG members across two physical locations Have at least one lagged database copy (this is a copy that lags behind at a set interval before committing replication data to the database) Have circular logging enabled for all of the databases Have your archive and retention settings fully implemented and optimized to prevent permanent deletion of data Have your Role-Based Access Control fully locked down to prevent inexperienced administrators from destroying the DAG itself through error or malicious intent. Created by Aslam Kader
Not be using Public Folders (which are not protected by DAGs) Obviously that all becomes complex in its own right, not to mention potentially very expensive. Multiple physical locations mean more data-centre costs, and the number of DAG members increases the number of expensive Enterprise Edition licenses required for Windows Server 2008. Even with all of the complexities understood and the expenses affordable for an organization, there still remains some risk of complete loss of email data through a disaster. With that in mind it is more feasible that a less complex DAG deployment can simply be used to reduce the frequency of backups, rather than eliminate them entirely.
Add-MailboxPermission -Identity <mailboxUser> -AccessRights FullAccess -user <admin>@<domain.ext> Now Run as Exchange Management Shell with admin user id (to whom access rights granted in previous command) and run the following command Export-Mailbox Identity <mailboxUser> -PSTFolderPath <pathToSavePST> PSTFolderPath must be a full path pointing either to a directory or to a (.pst) file.
How would you backup Exchange 2007 / 2010 on a Windows Server 2008 / R2 machine without using 3rd-party tools?
Exchange 2007 Service Pack 2 (also available with Exchange 2010) includes a VSS plug-in for Windows Server Backup to support Exchange backups. Once SP2 is installed, you can use Windows Server Backup to back up and restore your Exchange 2007 SP2 databases. The new plug-in is delivered in the form of a single executable called WSBExchange.exe. This plug-in is automatically installed by SP2 on all Exchange 2007 Mailbox servers. The plug-in enables Windows Server Backup to be able to make Exchange-aware VSS backups.
The Recover Storage Group (RSG) feature, which was originally introduced back in Exchange 2003, gives you as the Exchange administrator, the option of mounting a second copy of a mailbox database (typically a mailbox database restored from backup) so that you can extract data from one or more mailboxes in the respective database without affecting the production databases if you need to do so during working hours. RSG is created using the Exchange Troubleshooting Assistant (ExTRA) in Exchange 2007, which is launched via the Database Recovery Management tool, which is found under the Exchange Toolbox work center, or by using the Exchange Management Shell (EMS). When mounting a copy of a Mailbox database to an RSG you can extract the data from a mailbox and then merge the data with another mailbox located in a mailbox database in a production Storage Group, but you can also extract the data and then copy it to a specific folder in another mailbox.
What built-in tool do you have to allow you to manage Exchange store recoveries?
The following built-in tools are available with Microsoft Exchange Server 2007: 1. Database Recovery Management The Database Recovery Management tool uses the same engine as the Exchange Troubleshooting Assistant to programmatically execute a set of troubleshooting steps to identify issues with the database that you specify. It then provides multiple wizards to guide you through possible solutions for already identified issues. 2. Database Troubleshooter The Database Troubleshooter also uses the same engine as the Exchange Troubleshooting Assistant (ExTRA) to programmatically execute a set of troubleshooting steps to identify the root causes of database mounting issues. The tool automatically determines the set of data that is required to troubleshoot the identified symptoms and collects configuration data, performance counters, event logs, and live tracing information from Exchange Server and other appropriate sources. Then, it provide guidance for possible solutions with links to related database recovery management wizards. 3. Exchange Server Database Utilities Exchange Server Database Utilities (Eseutil.exe) is a command-line tool that works with the Extensible Storage Engine (ESE), database files, and log files that are associated with an Exchange database. You can use Eseutil to verify, modify, and repair an Exchange database file. When a database is corrupt or damaged, you can restore data from backup or repair it using Eseutil. 4. Information Store Integrity Checker The Information Store Integrity Checker (Isinteg.exe) finds and eliminates errors from the public folder and mailbox databases at the application level. Isinteg is not intended for use as a part of routine information store maintenance; it is provided to assist in disaster recovery situations. Because the Isinteg tool works at the logical schema level, it can recover data that Eseutil cannot recover. This is because data that is valid for the Eseutil tool at the physical schema level can be semantically invalid at the logical schema level. The Isinteg tool performs two main tasks: It patches the information store after a restore from an offline backup. It tests and optionally fixes errors in the information store. Created by Aslam Kader
These tools comprise the core disaster recovery applications for Exchange 2007. You can find the Database Recovery Management tool and the Database Trouble-shooter in the Toolbox of the Exchange Management Console. These tools provide a graphical user interface (GUI) for many of the command-line tools used to troubleshoot Exchange databases.
In Exchange 2010, is there any change in the way online and offline defrags are used (or should be used)?
In Exchange 2010, the architecture for online defragmentation has changed. Online defragmentation was moved out of the Mailbox database maintenance process. Online defragmentation now runs in the background 247. You don't need to configure any settings for this feature. Exchange monitors the database as its being used, and small changes are made over time to keep it defragged for space and contiguity. Online defragmentation is also throttled so it doesn't have a negative impact on client performance
It is important to note the Exchange Control Panel is RBAC-aware, meaning that administrative options are available only to those who have the appropriate permissions to utilize them. ECP can show a user logged in with full administrative access several administrative tasks (note the Select What to Manage option in the top-left corner and the Manage your Organization option in the bottom-right corner) which show the same interface as viewed by a standard user.
A user opens an OWA session from an external computer. Which role does that user connect to?
Client Access server role.
What ports do you need to open between the DMZ holding the Edge role and your internal network?
The recommended practice is to put the Edge Transport server within a perimeter network. To make sure that the server can send and receive e-mail and receive recipient and configuration data updates from the Microsoft Exchange Edge-Sync service, you must allow communication through the ports that are listed in the following table. Communication port settings for Edge Transport servers Network interface Inbound from and outbound to the Internet mail flow to and from the Internet. Inbound from and outbound to the internal network mail flow to and from the Exchange organization. Local only local connection to AD LDS. Inbound from the internal network Edge-Sync synchronization. Open port 25/TCP Protocol SMTP Note This port must be open for
25/TCP
SMTP
50389/TCP
LDAP
50636/TCP
Secure LDAP
Inbound from the internal network 3389/TCP RDP Opening this port is optional. It provides more flexibility in managing the Edge Transport servers from inside the internal network by letting you use a remote desktop connection to manage the Edge Transport server.
In the event of a failover, the passive copy of the databases can be automatically mounted by the Microsoft Exchange Information Store service if the number of lost logs is fewer than the allowable amount as configured by an administrator. An administrator determines the maximum number of logs that can be lost before the database cannot be mounted on a failover by setting the AutoDatabaseMountDial parameter. This parameter, which is represented in the Active Directory directory service by an Exchange attribute called msExchDataLossForAutoDatabaseMount, has three values: Lossless, Good Availability, and Best Availability. Lossless is 0 logs lost, Good Availability is 3 logs lost, and Best Availability, which is the default, is 6 logs lost.
In the Actions pane click New Edge Subscription Choose active directory site, if you have multiple sites though, then you should make the Edge Transport server a member of the site that has the fastest (or most reliable) network connectivity to the perimeter network. Use the Browse button to browse for and select the subscription.xml file. Verify that the Automatically Create A Send Connector for this Edge Subscription checkbox is selected, then click the New button to import the XML file and create the Edge Subscription.
How to turn on/off Exchange Cached Mode in Outlook 2003/2007 Deploying Exchange Server 2007 and Office Communications Server 2007 R2 (Part 1) Bare metal environment Database Availability Group (DAG) -Exchange 2010 Why Do You Need ForestPrep and DomainPrep? Difference between windows 2003 and windows 2008 Discontinued Features from Exchange 2003 & 2007 to Exchange 2010 RTM What to Check When Exchange Cannot Send Email to Certain Domains Dial tone recovery 2010 using EMC Dial Tone Recovery 2010 using Powershell Dumpster OR Single Item Recovery in Exchange Server 2010 Prepare Active Directory and Domains Download Microsoft Exchange Troubleshooting Assistant v1.1 Microsoft Exchange Server 2010 Transport Server Role Architecture Diagrams Exchange 2007 Interview Created by Aslam Kader
Exchange 2010 and Symantec Backup Exec Restore Scenarios Deploying Symantec Backup Exec Off-host Backups for Exchange Server 2007 Symantec Backup Exec (TM) 12.5 for Windows Servers Administrator's Guide (English) Corporate like Wipro, HP & HCL Interview Question and Answer Interview Question of 2003 / 2007