JaapWesselius.com http://www.jaapwesselius.com Microsoft UC Specialist Sun, 19 May 2013 11:12:40 +0000 en-US hourly 1 http://wordpress.org/?v=3.5.1 Jaapwesselius-comhttp://feedburner.google.com KEMP Edge Security Pack, Endpoint Security and Microsoft TMG Q&A with Bhargav Shukla http://feedproxy.google.com/~r/Jaapwesselius-com/~3/bRNNmhJknNk/ http://www.jaapwesselius.com/2013/05/19/kemp-edge-security-pack-endpoint-security-and-microsoft-tmg-qa-with-bhargav-shukla/#comments Sun, 19 May 2013 11:10:13 +0000 jaapwess https://www.jaapwesselius.com/?p=3149 Continue reading →]]> image

There has been a lot of interest in the upcoming release of the KEMP Technologies v7.0-4 including the Edge Security Pack (ESP). The Edge Security Pack enables a lot of added flexibility to help supplement and fill the gap left after Microsoft announced the End of Life of Forefront TMG.

Kemp is organizing a Twitter Q&A event with their Director of Product Research & Innovation, Microsoft MCM Bhargav Shukla to help guide you through any questions you have.

What You will Learn About KEMP Endpoint Security and Microsoft TMG

Bring your questions around our newest release which includes Edge Security Pack (ESP). Bhargav Shukla will be answering your ESP related questions including burning reverse proxy questions related to Exchange and Lync 2010/2013 workloads.

Where & when

Where: The event will be a twitter Q&A using the hashtag #KempESP. Just follow the hashtag. And make sure your Questions include it. Also follow @KempTech as Bhargav will be taking over the helm for that period. Follow @Bhargavs for more info on Load Balancing, KEMP and MS Lync and Exchange.

When: Thursday 23rd May – 10:30am – 1pm EST, 7:30am – 10am PST, 3:30 – 6pm GMT, 4:30 – 7pm CET

clip_image002

Add to outlook

Twitter: https://twitter.com/KempTech/status/335074319573057536

Facebook: https://www.facebook.com/permalink.php?story_fbid=10151449176953181&id=45213068180

Google+: https://plus.google.com/107327342883336044932/posts/Kw46uJv83UN

]]> http://www.jaapwesselius.com/2013/05/19/kemp-edge-security-pack-endpoint-security-and-microsoft-tmg-qa-with-bhargav-shukla/feed/ 0 http://www.jaapwesselius.com/2013/05/19/kemp-edge-security-pack-endpoint-security-and-microsoft-tmg-qa-with-bhargav-shukla/#utm_source=feed&utm_medium=feed&utm_campaign=feed The server cannot be removed because… http://feedproxy.google.com/~r/Jaapwesselius-com/~3/occQNxs2j9w/ http://www.jaapwesselius.com/2013/05/18/the-server-cannot-be-removed-because/#comments Sat, 18 May 2013 08:36:10 +0000 jaapwess https://www.jaapwesselius.com/?p=3081 Continue reading →]]> While uninstalling Exchange Server 2003 (after a successfull migration to Exchange Server 2010) I ran into the dreaded “The server cannot be removed because” issue:

The server <servername> cannot be removed because:

- One or more users currently use a mailbox store on this server. These users must be moved to another mailbox store on a different server or be mail disabled before uninstalling this server.

Facility: Exchange System Manager

ID no: c103f492

image

Since I moved all resources from Exchange 2003 to Exchange 2010 I was sure there were no mailboxes left on Exchange 2003. Heck, the Mailbox databases and the Public Folder databases were already removed one day earlier so it had to be something else.

Open Active Directory Users and Computers (on the Exchange 2003 Server) and start the Find option. In the Advanced tab select Exchange Home Server in the Field drop-down box, select Ends with in the condition drop-down box and in the value type the last part of the Exchange 2003 server name.

image

In my case some users were returned that used to have a mailbox a long time ago but these were not used anymore.

image

Right click the user, select Exchange Tasks and select Remove Exchange Attributes. Now all Exchange (2003) related properties will be removed. Wait for replication to finish (in a larger environment) and the server be removed from the Exchange System Manager.

]]> http://www.jaapwesselius.com/2013/05/18/the-server-cannot-be-removed-because/feed/ 0 http://www.jaapwesselius.com/2013/05/18/the-server-cannot-be-removed-because/#utm_source=feed&utm_medium=feed&utm_campaign=feed MapiExceptionUnexpectedMailboxState: Unable to delete mailbox http://feedproxy.google.com/~r/Jaapwesselius-com/~3/WvTgnB8M0EA/ http://www.jaapwesselius.com/2013/05/09/mapiexceptionunexpectedmailboxstate-unable-to-delete-mailbox/#comments Thu, 09 May 2013 18:50:17 +0000 jaapwess https://www.jaapwesselius.com/?p=3067 Continue reading →]]> When moving mailboxes from Exchange 2003 or Exchange 2007 to Exchange 2010 the move request finishes, but with a status of CompletedWithWarning:

image

The mailbox is moved to Exchange 2010, but the time to finish the actual migration takes a long time. But from an end-user perspective the move is successful, aft er the move the user can open his/her mailbox. The first reports of this issue I’ve seen came with Exchange 2010 SP2 RU3.

When you check the move request you’ll see the following message:

Warning: Failed to clean up the source mailbox after the move.

Error details: MapiExceptionUnexpectedMailboxState: Unable to delete mailbox. (hr=0x80004005, ec=2634)

When requesting the log of the move request you’ll get even more information and at the end of the log file you’ll see something like:

 5/8/2013 2:08:48 PM [server] Post-move cleanup failed. The operation will try again in 30 seconds (5/6).

5/8/2013 2:06:41 PM [server] Move has completed and final clean up has started.

5/8/2013 2:06:41 PM [server] Source mailbox 'Primary (0e09f09f-1e1f-41d0-982a-d8c8e34ef804)' was successfully cleaned up after the move.

5/8/2013 2:06:41 PM [server] Relinquishing job.

5/8/2013 2:06:46 PM [server] The Microsoft Exchange Mailbox Replication service server.contoso.com' (14.2.297.0 caps:07) is examining the request.

5/8/2013 2:06:46 PM [server] Connected to target mailbox 'Primary (0e09f09f-1e1f-41d0-982a-d8c8e34ef804)', database 'DB01', Mailbox server server.contoso.com' Version 14.2 (Build 309.0).

5/8/2013 2:06:46 PM [server] Mailbox move is already finished.

5/8/2013 2:06:46 PM [server] Move has completed and final clean up has started.

5/8/2013 2:06:46 PM [server] Failed to clean up the source mailbox 'Primary (0e09f09f-1e1f-41d0-982a-d8c8e34ef804)' after the move. Attempt 1/6.

Error details: MapiExceptionUnexpectedMailboxState MapiExceptionUnexpectedMailboxState: Unable to delete mailbox. (hr=0x80004005, ec=2634)

Further down the log file you’ll find the 6th attempt:

5/8/2013 2:09:19 PM [server] Failed to clean up the source mailbox 'Primary (0e09f09f-1e1f-41d0-982a-d8c8e34ef804)' after the move. Attempt 6/6.

Error details: MapiExceptionUnexpectedMailboxState MapiExceptionUnexpectedMailboxState: Unable to delete mailbox. (hr=0x80004005, ec=2634)

5/8/2013 2:09:19 PM [server] Request is complete.

Solution, fix and workaround

Obviously it takes a long time because the Mailbox Replication Service is retrying the clean-up of the source mailbox six time (the first normal clean-up plus five additional retries). To change this behavior it is possible to edit the MSExchangeMailboxReplication.exe.config file which can be found in the directory C:\Program Files\Microsoft\Exchange Server\V14\Bin.

At the end of this config file, under MRSConfiguration you can decrease the MaxCleanupRetries to “0” or “1”.

 <MRSConfiguration

MaxRetries = "60"

MaxCleanupRetries = "5" <-- change this value to “1” or “0”

MaxStallRetryPeriod = "00:15:00"

RetryDelay = "00:00:30"

MaxMoveHistoryLength = "2"

MaxActiveMovesPerSourceMDB = "5"

To remove the ‘non-deleted’ mailbox you can use the following command:

Get-MailboxStatistics -Database <MAILBOXDATABASE> | Where { $_.DisconnectReason -eq "SoftDeleted" } | Format-List DisplayName, MailboxGUID, DisconnectReason
Remove-StoreMailbox -Database <MAILBOXDATABASE> -Identity <MAILBOXGUID> -MailboxState Softdeleted

I haven’t got any formal confirmation yet from Microsoft, but it looks like this issue is solved in Exchange 2010 SP3 (although I heard rumors it should be fixed in Exchange 2010 SP3 RU1). In our own environment (approx. 6000 mailboxes) I’m currently moving mailboxes to Exchange 2010 SP3 and I haven’t seen one mailbox failing at this point. Once confirmed I’ll update my blog.

 

]]> http://www.jaapwesselius.com/2013/05/09/mapiexceptionunexpectedmailboxstate-unable-to-delete-mailbox/feed/ 1 http://www.jaapwesselius.com/2013/05/09/mapiexceptionunexpectedmailboxstate-unable-to-delete-mailbox/#utm_source=feed&utm_medium=feed&utm_campaign=feed Kemp Edge Security Pack for Exchange 2013 http://feedproxy.google.com/~r/Jaapwesselius-com/~3/oWnBEB8pjds/ http://www.jaapwesselius.com/2013/05/08/kemp-edge-security-pack-for-exchange-2013/#comments Wed, 08 May 2013 19:55:29 +0000 jaapwess https://www.jaapwesselius.com/?p=3057 Continue reading →]]> Now that Microsoft TMG2010 no longer is available it’s time to look for other alternatives. Reverse proxy solutions is not a problem, there are various solutions for this. Microsoft itself has the ARR (Application Request Routing) on top of IIS available. This can perform reverse proxy, but for load balancing you still have to rely on NLB. Another ‘drawback’ is that ARR does not do pre-authentication.

With the new software version for the Kemp LoadMaster series (V7.0-4) it is now possible to do reverse proxy and pre-authentication out of the box. The new module is called ESP or Edge Security Pack. The idea is the same as before, clients hit the Kemp LoadMasters and the requests are distributed across multiple Exchange Client Access Servers. But before the requests are sent to the Client Access Servers they are authenticated. Kemp uses an authentication provider for this, in a normal scenario this would an Active Directory Domain Controller.

image

The advantage of pre-authentication is evident. In case of a (brute force) attack the CAS servers are only bothered with normal authentication traffic, the attacks are handled by the Kemp and these never reach the CAS servers. ESP is specifically designed to handle this kind of traffic. With ESP the CAS servers only handle normal user authentication.

In my lab environment I have two multi-role Exchange 2013 CU1 servers and a Kemp Loadmaster (VLM). One NIC is connected to the Internet (behind a Juniper firewall) and one NIC is connected to the internal network so this is a dual-arm setup. Initially the Load Master is configured with a VIP for webmail.exchange15.nl so when we try to access OWA the following login page is displayed (as expected):

image

The Kemp LoadMaster software version 7.0-4 needs a different approach when it comes to load balancing in combination with pre-authentication. Instead of one Virtual Server on the load balancer 7 Sub Virtual Servers are used, one for every service (OWA, ECP, EWS, OAB, RPC, Autodiscover and ActiveSync). These seven services are still using one IP address and content matching rules are used to differentiate between the services based on the virtual directory part in the URL request.

For Exchange 2013 Microsoft recommends using a layer-4 load balancer (where Exchange 2010 would use a layer-7 load balancer). A layer-4 load balancer is a relatively ‘dumb’ device, it only forwards (SSL) requests to the pool of load balancers. A layer-7 load balancer is a ‘smart load balancer’. The SSL connection is terminated at the load balancer and the load balancer can perform all kinds of routing logic, changes header information etc. A layer-7 load balancer can also separate traffic based on virtual directories for example, so the load balancer is aware of traffic destined to OWA, ECP, RPC or ActiveSync virtual directories, monitor on the various services and take appropriate action when only one service fails. An L4 load balancer only knows source and destination and that’s it. For more information regarding L4 load balancer I would recommend an earlier blogpost on this topic: http://www.jaapwesselius.com/2012/12/17/load-balancing-in-exchange-2013-2/

Kemp’s ESP is using layer-7 loadbalancing to perform the actions needed for pre-authentication based on the individual services. To achieve layer-7 load balancing the SSL certificate needs to be imported on the LoadMaster:

image

The first step is to create a Single Sign-On (SSO) domain. This is where the ESP module is connected to the Active Directory Domain Controller.

image

Step 2 is to create content matching rules. These rules will be used by the virtual service (VIP) to identify the virtual directories in a URL the client is trying to access, for example /OWA, /ECP, /RPC etc. Use the following settings to create all content matching rules:

Name Match Type Options Pattern
Auth_Proxy RegEx Ignore Case ^/lm_auth_proxy*
ActiveSync RegEx Ignore Case ^/Microsoft-Server-ActiveSync*
Autodiscover RegEx Ignore Case ^/autodiscover*
ECP RegEx Ignore Case ^/Ecp*
EWS RegEx Ignore Case ^/Ews*
OAB RegEx Ignore Case ^/OAB*
OWA RegEx Ignore Case ^/Owa*
RPC RegEx Ignore Case ^/rpc*

When configured the Content Matching Rules in the LoadMaster should look something like this:

image

Since the new Virtual Service than my existing one I deleted this one and recreated a new one. When creating a new Virtual Service give it a name and make sure that the enable layer-7 is checked and that the Transparency option is unchecked:

image

In the SSL Properties section enable SSL acceleration and assign the certificate we imported earlier to the virtual service. Since Exchange 2013 does not support SSL offloading make sure to check the Reencrypt option.

image

Before enabling the ESP option we are going to create multiple Sub Virtual Servers (under Real Servers), one for every Exchange service. Under Real Servers click Add SubVS. A new SubVS is created automatically, click Modify to add values to the new SubVS.

The first SubVS is for OWA, so enter OWA as the name of the SubVS and enable the ESP options. In the SSO Domain drop down box select the SSO domain that was created in the first step. Enter the allowed virtual hosts (multiple entries are possible, space delimited), enter the allowed virtual directories according to table 2 and enter the pre-authorization excluded directories. The latter one is in the format of “/owa/<exchangeGUID>*”

The Exchange GUID is unique for every Exchange deployment and can be retrieved using the Exchange Management Shell:

Get-Mailbox -Arbitration | where {$_.PersistedCapabilities -like "OrganizationCapabilityClientExtensions"} | fl exchangeGuid, primarySMTPAddress

Which will return the ExchangeGUID and the Primary SMTP Address:

ExchangeGuid : 87e01e08-081d-4539-84fd-f9b52776fe75

PrimarySmtpAddress : SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@contoso.com

image

So the string needed for the pre-authorization excluded directories can be constructed like this:

/owa/87e01e08-081d-4539-84fd-f9b52776fe75*

For the Client Authentication Mode select Form Based from the drop-down box and the server authentication mode should be set to Basic Authentication. On the Exchange 2013 Client Access Servers set the authentication for the OWA virtual directory to Basic Authentication as well.

In the Real Server Check Parameters section enter /owa/healthcheck.htm in the URL field and for the HTTP method select GET in the drop-down box.

image

Repeat these steps for the remaining six SubVS’s according to the table below. For all SubVS’s the the same SSO domain and the same Allowed Virtual Hosts can be used for now. If needed an additional host autodiscover.contoso.com can be entered in the Allowed Virtual Hosts for the Autodiscover SubVS.

SubVS Name Allowed Vdir Pre-authorization excluded directories Client Authentication Server Authentication
OWA /owa*/lm_auth_proxy* /owa/guid* Form Based Basic Authentication
ECP /ecp* Form Based Basic Authentication
EWS /ews* None None
OAB /oab* None None
RPC /rpc* None None
Autodiscover /autodiscover* None None
ActiveSync /Microsoft-Server-ActiveSync Basic Authentication Basic Authentication

 

Now that everything is configured the Content Switching can be enabled. Open the Virtual Service and under the Advanced Properties click on the Enable button next to Content Switching. Next to all SubVS’s a new column of Rules buttons will appear. For every SubVS select the accompanying Content Switching Rule except for OWA where both the OWA and the Auth_Proxy rule need to be added.

When finished the Virtual Service in the LoadMaster GUI should look something like this:

image

This is all it takes to configure the pre-authentication module in the new Kemp LoadMaster. When OWA is accessed in a browser we’ll see the following logon screen:

image

Enter the credentials and you’re logged on to OWA.

For more information regarding the new Kemp V7.0-4 firmware please visit the Kemp Technologies website at http://www.kemptechnologies.com/en/loadmaster-documentation#c7.0 or visit the site of Bhargav Shukla at http://www.bhargavs.com/index.php/2013/05/08/whats-new-in-loadmaster-release-7-0-4/

]]> http://www.jaapwesselius.com/2013/05/08/kemp-edge-security-pack-for-exchange-2013/feed/ 9 http://www.jaapwesselius.com/2013/05/08/kemp-edge-security-pack-for-exchange-2013/#utm_source=feed&utm_medium=feed&utm_campaign=feed UC Technical Rollup May 2013 http://feedproxy.google.com/~r/Jaapwesselius-com/~3/bVGMcTbfnq8/ http://www.jaapwesselius.com/2013/05/08/uc-technical-rollup-may-2013/#comments Wed, 08 May 2013 11:03:08 +0000 jaapwess https://www.jaapwesselius.com/?p=3033 Continue reading →]]> News

Premier

Antigen & Forefront

Exchange

Lync, Office Communication Server & LiveMeeting

Outlook

Other

Documents

Office 365

Identity and Authentication in the cloud: Office 2013 and Office 365 (Poster)

This poster illustrates and explains the new world of identity and authentication in Office 2013 and Office 365. Two scenarios illustrate how identities are provisioned and how those identities are authenticated completely in the Microsoft cloud…

 FREE

Release Date:

4/26/2013
Microsoft Office 365 Enterprise Volume License Activation Guide (Enterprise Agreement)

The guides include step-by-step instruction to activate Office 365 licenses purchased through Enterprise Agreement.

 FREE

Release Date:

4/24/2013

Downloads

Lync, Office Communication Server & LiveMeeting
Microsoft Lync Phone Edition for Aastra 6721ip and Aastra 6725ip

Microsoft® Lync™ Phone Edition for Aastra 6721ip and Aastra 6725ip is the first generation of software designed specifically for the phones from Aastra to interoperate with Microsoft® Lync™ Server 2010 or Microsoft® Lync™ Server 2013…

 FREE

Release Date:

4/18/2013
Microsoft Lync Phone Edition for Polycom CX500, Polycom CX600 and Polycom CX3000

…Lync™ Phone Edition for Polycom® CX500, Polycom® CX600 and Polycom® CX3000 is the first generation of software designed specifically for the phones from Polycom to interoperate with Microsoft® Lync™ Server 2010 and Microsoft® Lync™ Server…

 FREE

Release Date:

4/18/2013
Microsoft Lync Phone Edition for Polycom CX700 and LG-Nortel IP Phone 8540

…Microsoft® Lync™ Phone Edition for Polycom® CX700 and LG-Nortel IP Phone 8540 is the next generation of software designed for the phones from Polycom and LG-Nortel to interoperate with Microsoft® Lync™ Server 2010 or Microsoft® Lync™ Server…

 FREE

Release Date:

4/18/2013
Microsoft Lync Phone Edition for HP 4110 and HP 4120

Microsoft® Lync™ Phone Edition for HP 4110 and HP 4120 is the first generation of software designed specifically for the phones from HP to interoperate with Microsoft® Lync™ Server 2010. and Microsoft® Lync™ Server…

 FREE

Release Date:

4/18/201

New Knowledgebase articles

Antigen & Forefront

  • Microsoft Online – FOPE-FOSE-EHA: Outgoing message delivery is delayed or rejected in Forefront Online Protection for Exchange and you receive a “Greylisting in action, 451 4.7.1″ nondelivery report
    http://support.microsoft.com/kb/2624610/EN-US

Exchange

Microsoft Online

Lync, OCS & LiveMeeting

Outlook

As always you can download this Technical Rollup in PDF format: http://www.jaapwesselius.com/wp-content/uploads/2013/05/uc-technical-rollup-may-2013.pdf

]]> http://www.jaapwesselius.com/2013/05/08/uc-technical-rollup-may-2013/feed/ 0 http://www.jaapwesselius.com/2013/05/08/uc-technical-rollup-may-2013/#utm_source=feed&utm_medium=feed&utm_campaign=feed Lync Hosting Pack v2 Summit http://feedproxy.google.com/~r/Jaapwesselius-com/~3/dlW4OIueVeE/ http://www.jaapwesselius.com/2013/04/26/lync-hosting-pack-v2-summit/#comments Fri, 26 Apr 2013 12:33:59 +0000 jaapwess https://www.jaapwesselius.com/?p=3026 Continue reading →]]> This week I’m attending the Lync Hosting Pack (LHP) V2 summit in Washington DC. The Lync Hosting Pack is Microsoft’s solution for hosters to offer a fully multi-tenant Lync solution. The summit is a joint development between Microsoft and implement.com.

The solution is based on one Active Directory, but every customer has its own Organizational Unit, fully separated from other OU’s, thus preventing information leakage. LHPv2 itself is based on Lync Server 2013.

Compared to LHPv1 the solution is much better. The only servers right now that are exposed to the Internet are the Lync 2013 Edge Servers and the Reverse Proxy servers. In the hands-on part of the Summit IIS ARR is used for Reverse Proxy but in real life you might want to use a hardware load balancer for this. I know F5 has a reverse proxy solution for Lync and Kemp Technologies is working on it. All other Lync servers are on the internal (datacenter) network. The director server in LHPv1 was also used and connected directly to the Internet, but in LHPv2 the director server is only used in very large deployments where multiple front-end pools are used.

image

Segregation in Lync Server 2013 is based on certain properties in Active Directory which are set during provisioning of the organization (i.e. creating the OU) and when Lync enabling the users.

Provisioning is done using standard Powershell commands and working in the hands-on lab with this gives a tremendous amount of insight into the solution. Provisioning can be automated as well of course. Although it is possible to create a control panel yourself it is a lot of work, especially when you want to offer a self-service portal to your customers. A better solution (but that’s my personal opinion) is to work with a control panel vendor which does all the plumbing in the background. Can’t find any Lync specific info on this on the Microsoft site, but this is for multi-tenancy in Exchange which comes close.

During the hands-on lab a complete LHPv2 environment was built, complete with Exchange 2013 Unified Messaging for voicemail functionality. Although the summit was held in Washington DC the actual servers were in located in the MPSC (Microsoft Partner Solution Center) in Redmond, just like a real world datacenter solution :-) This worked pretty well, even the (SNOM 821) IP phones were working perfectly and the audio quality was very good.

The training was very well prepared (thanks Vladd, Todd, Jason and Steve) and had good technical content without too much Powerpoint, well done! If you ever get lucky to attend one of these trainings you won’t regret it.

]]> http://www.jaapwesselius.com/2013/04/26/lync-hosting-pack-v2-summit/feed/ 4 http://www.jaapwesselius.com/2013/04/26/lync-hosting-pack-v2-summit/#utm_source=feed&utm_medium=feed&utm_campaign=feed Exchange 2013 coexistence, EAC and ECP http://feedproxy.google.com/~r/Jaapwesselius-com/~3/MbCaL-afALo/ http://www.jaapwesselius.com/2013/04/21/exchange-2013-coexistence-eac-and-ecp/#comments Sun, 21 Apr 2013 09:21:16 +0000 jaapwess https://www.jaapwesselius.com/?p=3020 Continue reading →]]> When you introduce Exchange 2013 into an existing Exchange 2010 environment and you want to open the Exchange Admin Center (using https://localhost/ecp or using https://webmail.contoso.com/ecp) it ‘fails’ and it opens the Exchange 2010 ECP instead.

image

This is caused by the fact that the administrator mailbox is still on Exchange 2010 and the ECP is tied to the administrator mailbox. You can move the mailbox to Exchange 2013 but instead you can also add the suffix /?ExchClientVer=15, like this https://localhost/ecp/?ExchClientVer=15

This will open the Exchange Admin Center in Exchange 2013 while the administrator mailbox is still on Exchange 2010:

image

]]> http://www.jaapwesselius.com/2013/04/21/exchange-2013-coexistence-eac-and-ecp/feed/ 1 http://www.jaapwesselius.com/2013/04/21/exchange-2013-coexistence-eac-and-ecp/#utm_source=feed&utm_medium=feed&utm_campaign=feed UC Technical Rollup April 2013 http://feedproxy.google.com/~r/Jaapwesselius-com/~3/SZQV_id22wE/ http://www.jaapwesselius.com/2013/04/17/uc-technical-rollup-april-2013/#comments Wed, 17 Apr 2013 21:39:37 +0000 jaapwess http://www.jaapwesselius.com/?p=3011 Continue reading →]]> News

Premier

Antigen & Forefront

Exchange

Lync, Office Communication Server & LiveMeeting

Outlook

Other

Documents

Exchange

Microsoft Exchange Server 2013 Help

This download contains the Help content for Microsoft Exchange Server 2013 Hybrid Deployments and Cumulative Update 1 of Microsoft Exchange Server 2013.

 FREE

Release Date:

4/4/2013
Microsoft Exchange Online Help

This download contains the Help content for Microsoft Exchange Online, the cloud-based email and voice mail service that’s available as part of Microsoft Office 365. Administrators are the intended audience for this Help content.

 FREE

Release Date:

4/3/2013
Exchange Server 2003 to Exchange Server 2010 Active Directory Schema Changes Reference, March 2013

This download includes the Exchange Server Active Directory Schema Reference, which provides information about the changes that Microsoft Exchange Server 2003 to Exchange Server 2010 makes to the Active Directory schema when it is installed.

 FREE

Release Date:

3/21/2013
Achieving Immutability with Exchange Online and Exchange Server 2013

With Exchange Server and Exchange Online, Microsoft enables organizations to immutably preserve mailbox items for eDiscovery using an in-place strategy.

 FREE

Release Date:

3/11/2013
Exchange Server 2010 SP3 Help

This download contains a standalone version of Microsoft Exchange Server 2010 SP3 Help.

 FREE

Release Date:

3/5/2013

Lync, Office Communication Server & LiveMeeting

Lync 2013 Rollout and Adoption Success Kit (RASK) User Education and Training Resources

The Lync 2013 Rollout and Adoption Success Kit (RASK) User Education and Training Resources download contains Quick Reference Cards, Training Modules, Videos, and links to online articles.

 FREE

Release Date:

3/21/2013
Lync 2013 Rollout and Adoption Success Kit (RASK) Resources

This Lync 2013 Rollout and Adoption Resources package is a collection of tools, documentation, and templates designed to help project teams plan, pilot, deploy, and evaluate the success of their Lync rollout. These resources are intended for…

 FREE

Release Date:

3/20/2013
Lync 2013 Rollout and Adoption Success Kit (RASK) Core Planning Resources

The Lync 2013 Rollout and Adoption Success Kit (RASK) Core Planning Resources download contains three pivotal documents designed to help plan and execute your rollout and adoption strategy for Lync 2013, when used alongside the Lync 2013 Rollout and Adoption Success Kit (RASK).

 FREE

Release Date:

3/20/2013

Downloads

Exchange

Microsoft Exchange 2013 Public Folders Directory Sync Support Scripts

Scripts to enable creation of public folder related objects in the O365 Active Directory and synchronization of public folder related Active Directory objects between on-premise and O365 directories.

 FREE

Release Date:

4/9/2013
Microsoft Exchange 2013 Public Folders Migration Scripts

These scripts are required while migrating Public Folders from Exchange 2010/2007 to O365 Exchange 2013 Public Folders.

 FREE

Release Date:

4/9/2013
Cumulative update 1 for Exchange Server 2013 (KB2816900)

Cumulative update 1 for Exchange Server 2013 (KB2816900)

 FREE

Release Date:

4/2/2013
Microsoft Exchange Server Jetstress 2013 Tool

Simulate Exchange disk I/O load on a server to verify the performance and stability of your disk subsystem before putting your server into a production environment.

 FREE

Release Date:

3/18/2013
Lync, Office Communication Server & LiveMeeting
Lync 2010 Attendee Hotfix KB 2815354 (Admin level install)

This download includes all available updates for Lync 2010 Attendee.

 FREE

Release Date:

4/9/2013
Microsoft Lync 2010 Attendee – Admin Level Install

Microsoft Lync 2010 Attendee is a conferencing client that allows users without Microsoft Lync 2010 installed, to participate in online meetings. A user with an administrator account on the computer can install Lync 2010 Attendee so that users…

 FREE

Release Date:

4/9/2013
Lync 2010 Hotfix KB 2815347 (32 bit)

This download includes all available updates for Lync 2010.

 FREE

Release Date:

4/9/2013
Lync 2010 Hotfix KB 2815347 (64 bit)

This download includes all available updates for Lync 2010.

 FREE

Release Date:

4/9/2013
Microsoft Lync 2010 Attendee – User Level Install

Microsoft Lync 2010 Attendee is a conferencing client that allows users without Microsoft Lync 2010 installed, to participate in online meetings. If you are not an administrator on the computer but an administrator has allowed you to perform…

 FREE

Release Date:

4/9/2013
Lync 2010 Attendee Hotfix KB 2815352 (User level install)

This download includes all available updates for Lync 2010 Attendee.

 FREE

Release Date:

4/9/2013
Lync Server 2010 Hotfix KB 2493736

This download includes all available updates for Lync Server 2010.

 FREE

Release Date:

3/14/2013
Lync Server 2010 Group Chat Hotfix KB 2803651

This download includes all available updates for Lync Server 2010 Group Chat.

 FREE

Release Date:

3/14/2013
Lync Server 2013 Stress and Performance Tool

The Lync Server 2013 Stress and Performance Tools (LSS) can be used to prepare, define and validate performance targets of user scenarios of an on-premise Lync Server 2013 deployment. LSS includes multiple modules and can simulate simultaneous…

 FREE

Release Date:

3/8/2013
Update for Microsoft Lync 2013 (KB2760556) 32-Bit Edition

Microsoft has released an update for Microsoft Lync 2013 32-Bit Edition. This update provides the latest fixes to Microsoft Lync 2013 32-Bit Edition. Additionally, this update contains stability and performance improvements.

 FREE

Release Date:

3/8/2013
Update for Microsoft Lync 2013 (KB2760556) 64-Bit Edition

Microsoft has released an update for Microsoft Lync 2013 64-Bit Edition. This update provides the latest fixes to Microsoft Lync 2013 64-Bit Edition. Additionally, this update contains stability and performance improvements.

 FREE

Release Date:

3/8/2013

Office 365

product name, link and description price and details
IdFix DirSync Error Remediation Tool

IdFix is used to perform discovery and remediation of identity objects and their attributes in an on-premises Active Directory environment in preparation for migration to Office 365. IdFix is intended for the Active Directory…

 FREE

Release Date:

4/10/2013
Identity and Authentication in the cloud: Office 2013 and Office 365 (Poster)

This poster illustrates and explains the new world of identity and authentication in Office 2013 and Office 365. Two scenarios illustrate how identities are provisioned and how those identities are authenticated completely in the Microsoft cloud…

 FREE

Release Date:

4/5/2013
Office 365 IPv6 Test Plan

Plan to test IPv6 connectivity to Office 365. This test plan is recommended for all Enterprise and Government SKUs.

 FREE

Release Date:

3/28/2013
SharePoint Server 2013 Client Components SDK

The SharePoint Server 2013 Client Components SDK can be used to enable remote and local development with SharePoint Server 2013

 FREE

Release Date:

3/27/2013
Information Protection and Control (IPC) in Office 365 with Windows Azure AD Rights Management whitepaper

Information Protection and Control (IPC) in Office 365 with Windows Azure AD Rights Management whitepaper

 FREE

Release Date:

3/25/2013
Microsoft Office 2013 Volume License Pack

…Office 2013 client products require activation. This download enables IT administrators to set up a Key Management Service (KMS) or configure…Active Directory-Based activation. Either of these volume activation methods can locally activate…

 FREE

Release Date:

3/22/2013
IT Showcase On: Microsoft IT’s Hybrid Cloud Strategy

Microsoft IT Has Cloud Power. Learn how Microsoft IT is using Windows Azure to move existing applications to the cloud and creating new applications for the cloud.

 FREE

Release Date:

3/11/2013
Microsoft SharePoint SDK for Windows Phone 8 – English

This SDK installs SharePoint client libraries and templates for Windows Phone 8

 FREE

Release Date:

3/4/2013

Outlook

Update for Microsoft Outlook 2013 (KB2738013) 64-Bit Edition

Microsoft has released an update for Microsoft Outlook 2013 64-Bit Edition. This update provides the latest fixes to Microsoft Outlook 2013 64-Bit Edition. Additionally, this update contains stability and performance improvements.

 FREE

Release Date:

4/4/2013
Update for Microsoft Outlook 2013 (KB2738013) 32-Bit Edition

Microsoft has released an update for Microsoft Outlook 2013 32-Bit Edition. This update provides the latest fixes to Microsoft Outlook 2013 32-Bit Edition. Additionally, this update contains stability and performance improvements.

 FREE

Release Date:

4/4/2013
Microsoft Outlook Configuration Analyzer Tool 2.0

The Outlook Configuration Analyzer Tool 2.0 (OCAT ) has been replaced by the Office Configuration Analyzer Tool (OffCAT). The OffCAT tool provides all of the same functionality as the OCAT tool, but it also allows you to scan more Office…

 FREE

Release Date:

3/19/2013
Update for Microsoft Outlook 2013 (KB2727079) 32-Bit Edition

Microsoft has released an update for Microsoft Outlook 2013 32-Bit Edition. This update provides the latest fixes to Microsoft Outlook 2013 32-Bit Edition. Additionally, this update contains stability and performance improvements.

 FREE

Release Date:

3/8/2013
Update for Microsoft Outlook 2013 (KB2727079) 64-Bit Edition

Microsoft has released an update for Microsoft Outlook 2013 64-Bit Edition. This update provides the latest fixes to Microsoft Outlook 2013 64-Bit Edition. Additionally, this update contains stability and performance improvements.

 FREE

Release Date:

3/8/2013

Events/Webcasts

Introducing Microsoft Lync  

Starts:  Thursday, April 25, 2013 9:00 AM     Ends:  Thursday, April 25, 2013 10:00 AM   Time zone: (GMT-08:00) Pacific Time (US & Canada) | Duration: 1 hour(s)

Primary Language:   English

Welcome to Microsoft Lync! Learn how Lync integrates instant messaging, audio and video calling, and online meeting functionality into one easy-to-use unified platform that will contribute to greater collaboration and more effective communication. This 60 minute virtual, instructor-led session introduces the new and enhanced messaging, audio, video, and meeting features available with Microsoft Lync. Topics covered include: Collaborating with the new features in Lync. Organizing and viewing contact information. Starting a Lync IM or Audio Conversation. Scheduling Lync Meetings from Outlook. Setting Online Meeting options. Additional Lync resources will be shared.  (more)

https://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032548819&culture=en-US
Best Practices for Microsoft Lync 2010 Conferencing  

Starts:  Thursday, April 25, 2013 7:00 AM     Ends:  Thursday, April 25, 2013 8:00 AM   Time zone: (GMT-08:00) Pacific Time (US & Canada) | Duration: 1 hour(s)

Primary Language:   English

Learn best practices for managing Online Meetings using Microsoft Lync. From scheduled conferences to instant application sharing, discover how easy it is to collaborate successfully! This 60 minute virtual, instructor-led session introduces best practices for conferencing and collaboration using Microsoft Lync. Topics covered include: Collaborating from a Lync Conversation. Scheduling Online Meetings from Outlook. Best Practices for managing Online Meetings. Additional Lync resources will also be shared.  (more)

https://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032548679&culture=en-US
Best Practices for Microsoft Lync 2010 Conferencing  

Starts:  Wednesday, April 24, 2013 11:00 AM     Ends:  Wednesday, April 24, 2013 12:00 PM   Time zone: (GMT-08:00) Pacific Time (US & Canada) | Duration: 1 hour(s)

Primary Language:   English

Learn best practices for managing Online Meetings using Microsoft Lync. From scheduled conferences to instant application sharing, discover how easy it is to collaborate successfully! This 60 minute virtual, instructor-led session introduces best practices for conferencing and collaboration using Microsoft Lync. Topics covered include: Collaborating from a Lync Conversation. Scheduling Online Meetings from Outlook. Best Practices for managing Online Meetings. Additional Lync resources will also be shared.  (more)

https://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032548798&culture=en-US
Moving from Live Meeting to Lync: Making the Most of your Online Meetings  

Starts:  Wednesday, April 24, 2013 9:00 AM     Ends:  Wednesday, April 24, 2013 10:00 AM   Time zone: (GMT-08:00) Pacific Time (US & Canada) | Duration: 1 hour(s)

Primary Language:   English

An introduction to Microsoft Lync for users making the move from Office Live Meeting.  This 60 minute virtual, instructor-led session introduces the new and enhanced collaboration and online meeting features available with Microsoft Lync. Topics covered include: Using Lync for a variety of familiar conferencing needs. Scheduling Lync Meetings from Outlook. Presenting meeting content and using collaboration tools. Tips for successfully managing a variety of meeting scenarios. Additional Lync resources will be shared.  (more)

https://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032548810&culture=en-US
Introducing Microsoft Lync  

Starts:  Tuesday, April 23, 2013 7:00 AM     Ends:  Tuesday, April 23, 2013 8:00 AM   Time zone: (GMT-08:00) Pacific Time (US & Canada) | Duration: 1 hour(s)

Primary Language:   English

Welcome to Microsoft Lync! Learn how Lync integrates instant messaging, audio and video calling, and online meeting functionality into one easy-to-use unified platform that will contribute to greater collaboration and more effective communication. This 60 minute virtual, instructor-led session introduces the new and enhanced messaging, audio, video, and meeting features available with Microsoft Lync. Topics covered include: Collaborating with the new features in Lync. Organizing and viewing contact information. Starting a Lync IM or Audio Conversation. Scheduling Lync Meetings from Outlook. Setting Online Meeting options. Additional Lync resources will be shared.  (more)

https://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032548817&culture=en-US
Introducing Microsoft Lync  

Starts:  Thursday, April 18, 2013 9:00 AM     Ends:  Thursday, April 18, 2013 10:00 AM   Time zone: (GMT-08:00) Pacific Time (US & Canada) | Duration: 1 hour(s)

Primary Language:   English

Welcome to Microsoft Lync! Learn how Lync integrates instant messaging, audio and video calling, and online meeting functionality into one easy-to-use unified platform that will contribute to greater collaboration and more effective communication. This 60 minute virtual, instructor-led session introduces the new and enhanced messaging, audio, video, and meeting features available with Microsoft Lync. Topics covered include: Collaborating with the new features in Lync. Organizing and viewing contact information. Starting a Lync IM or Audio Conversation. Scheduling Lync Meetings from Outlook. Setting Online Meeting options. Additional Lync resources will be shared.  (more)

https://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032548818&culture=en-US
Best Practices for Microsoft Lync 2010 Conferencing  

Starts:  Thursday, April 18, 2013 7:00 AM     Ends:  Thursday, April 18, 2013 8:00 AM   Time zone: (GMT-08:00) Pacific Time (US & Canada) | Duration: 1 hour(s)

Primary Language:   English

Learn best practices for managing Online Meetings using Microsoft Lync. From scheduled conferences to instant application sharing, discover how easy it is to collaborate successfully! This 60 minute virtual, instructor-led session introduces best practices for conferencing and collaboration using Microsoft Lync. Topics covered include: Collaborating from a Lync Conversation. Scheduling Online Meetings from Outlook. Best Practices for managing Online Meetings. Additional Lync resources will also be shared.  (more)

https://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032548678&culture=en-US
Best Practices for Microsoft Lync 2010 Conferencing  

Starts:  Wednesday, April 17, 2013 11:00 AM     Ends:  Wednesday, April 17, 2013 12:00 PM   Time zone: (GMT-08:00) Pacific Time (US & Canada) | Duration: 1 hour(s)

Primary Language:   English

Learn best practices for managing Online Meetings using Microsoft Lync. From scheduled conferences to instant application sharing, discover how easy it is to collaborate successfully! This 60 minute virtual, instructor-led session introduces best practices for conferencing and collaboration using Microsoft Lync. Topics covered include: Collaborating from a Lync Conversation. Scheduling Online Meetings from Outlook. Best Practices for managing Online Meetings. Additional Lync resources will also be shared.  (more)

https://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032548797&culture=en-US
Moving from Live Meeting to Lync: Making the Most of your Online Meetings  

Starts:  Wednesday, April 17, 2013 9:00 AM     Ends:  Wednesday, April 17, 2013 10:00 AM   Time zone: (GMT-08:00) Pacific Time (US & Canada) | Duration: 1 hour(s)

Primary Language:   English

An introduction to Microsoft Lync for users making the move from Office Live Meeting.  This 60 minute virtual, instructor-led session introduces the new and enhanced collaboration and online meeting features available with Microsoft Lync. Topics covered include: Using Lync for a variety of familiar conferencing needs. Scheduling Lync Meetings from Outlook. Presenting meeting content and using collaboration tools. Tips for successfully managing a variety of meeting scenarios. Additional Lync resources will be shared.  (more)

https://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032548809&culture=en-US
Introducing Microsoft Lync  

Starts:  Tuesday, April 16, 2013 7:00 AM     Ends:  Tuesday, April 16, 2013 8:00 AM   Time zone: (GMT-08:00) Pacific Time (US & Canada) | Duration: 1 hour(s)

Primary Language:   English

Welcome to Microsoft Lync! Learn how Lync integrates instant messaging, audio and video calling, and online meeting functionality into one easy-to-use unified platform that will contribute to greater collaboration and more effective communication. This 60 minute virtual, instructor-led session introduces the new and enhanced messaging, audio, video, and meeting features available with Microsoft Lync. Topics covered include: Collaborating with the new features in Lync. Organizing and viewing contact information. Starting a Lync IM or Audio Conversation. Scheduling Lync Meetings from Outlook. Setting Online Meeting options. Additional Lync resources will be shared.  (more)

https://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032548816&culture=en-US

New Knowledgebase articles

Antigen & Forefront

Exchange

Office 365

Lync, OCS & LiveMeeting

Outlook

As always you can download this Technical Rollup in PDF format: http://www.jaapwesselius.com/wp-content/uploads/2013/04/uc-technical-rollup-april-2013.pdf

]]> http://www.jaapwesselius.com/2013/04/17/uc-technical-rollup-april-2013/feed/ 0 http://www.jaapwesselius.com/2013/04/17/uc-technical-rollup-april-2013/#utm_source=feed&utm_medium=feed&utm_campaign=feed Edge Server SSL Certificate http://feedproxy.google.com/~r/Jaapwesselius-com/~3/lF7yzF30pKo/ http://www.jaapwesselius.com/2013/04/15/edge-server-ssl-certificate/#comments Mon, 15 Apr 2013 14:22:18 +0000 jaapwess http://www.jaapwesselius.com/?p=3007 Continue reading →]]> Installing an SSL Certificate on an Exchange 2010 Edge Transport Server (for domain security or TLS) is a bit different than on a Client Access Server. You cannot use the Management Console and thus need to use the Management Shell to create the certificate request file:

$data = New-ExchangeCertificate -GenerateRequest -SubjectName "c=NL, o=Jaapwesselius.nl bv, cn=smtphost.exchangelabs.nl" -PrivateKeyExportable $true

Set-Content -Path "c:\temp\mailhost.req" -Value $Data

image

The request file can now be used for submission at your Certificate Authority, in this example the Digicert CA:

image

After approval Digicert returns the certificate in a .CER format. Store the .CER file on the hard drive of the Edge Transport Server and enter the following command:

Import-ExchangeCertificate -FileData ([Byte[]]$(Get-Content -Path c:\temp\smtphost_exchangelabs_nl.cer -Encoding Byte -ReadCount 0))

image

To assign the SMTP service to the certificate you have to get the thumbnail of the certificate first (this is the unique identifier for the certificate) and pipe the output to the Enable-ExchangeCertificate cmdlet:

Get-ExchangeCertificate -Thumbprint 18A5F6909F8E2668D7E884FBD31D0F87FDCB20E2 | Enable-ExchangeCertificate -Services SMTP

Confirm the overwrite of the existing default (self-signed) certificate and you’re done!

image

image

It is useful to create a backup of the certificate and store this in a safe location. It can also be used to import on other devices, for example a load balancer if you happen to use on. To export the certificate enter the following command in the Exchange Management Shell:

$file = Export-ExchangeCertificate -Thumbprint 18A5F6909F8E2668D7E884FBD31D0F87FDCB20E2 -BinaryEncoded:$true -Password (Get-Credential).password

Set-Content -Path "c:\temp\smtphost.pfx" -Value $file.FileData -Encoding Byte

Use the Start-EdgeSynchronization to restart the synchronization between the Hub Transport Servers and the Edge Transport Server:

image

How do you know that the certificate is actually working correcty?

Enable protocol logging on the Receive Connector. The log files will be stored in the directory C:\Program Files\Microsoft\Exchange Server\V14\TransportRoles\Logs\ProtocolLog\SmtpReceive on the Edge Transport Server and will be stored in a format like RECVyyyymmdd-1.log format.

If you open a log file you’ll find something similar like:

 2013-04-15T11:46:35.997Z,SMTPHOST2\Default internal receive connector SMTPHOST2,08D007CC3E8D4B96,18,176.62.196.251:25,194.165.34.111:36385,<,STARTTLS,

2013-04-15T11:46:35.997Z,SMTPHOST2\Default internal receive connector SMTPHOST2,08D007CC3E8D4B96,19,176.62.196.251:25,194.165.34.111:36385,>,220 2.0.0 SMTP server ready,

2013-04-15T11:46:35.997Z,SMTPHOST2\Default internal receive connector SMTPHOST2,08D007CC3E8D4B96,20,176.62.196.251:25,194.165.34.111:36385,*,,Sending certificate

2013-04-15T11:46:35.997Z,SMTPHOST2\Default internal receive connector SMTPHOST2,08D007CC3E8D4B96,21,176.62.196.251:25,194.165.34.111:36385,*,"CN=smtphost.exchangelabs.nl, OU=RND, O=Jaapwesselius.nl bv, L=EMMELOORD, S=Noord Holland, C=NL",Certificate subject

2013-04-15T11:46:35.997Z,SMTPHOST2\Default internal receive connector SMTPHOST2,08D007CC3E8D4B96,22,176.62.196.251:25,194.165.34.111:36385,*,"CN=DigiCert High Assurance CA-3, OU=www.digicert.com, O=DigiCert Inc, C=US",Certificate issuer name

2013-04-15T11:46:35.997Z,SMTPHOST2\Default internal receive connector SMTPHOST2,08D007CC3E8D4B96,23,176.62.196.251:25,194.165.34.111:36385,*,0D23E291E7CDD499E2944E7BD333CD60,Certificate serial number

2013-04-15T11:46:35.997Z,SMTPHOST2\Default internal receive connector SMTPHOST2,08D007CC3E8D4B96,24,176.62.196.251:25,194.165.34.111:36385,*,7563C12CE5BA2882D8EA392DA2EE7E5794E511D7,Certificate thumbprint

2013-04-15T11:46:35.997Z,SMTPHOST2\Default internal receive connector SMTPHOST2,08D007CC3E8D4B96,25,176.62.196.251:25,194.165.34.111:36385,*,smtphost.exchangelabs.nl,Certificate alternate names

Clearly visible that the SMTP service is using the new smtphost.exchangelabs.nl certificate.

]]> http://www.jaapwesselius.com/2013/04/15/edge-server-ssl-certificate/feed/ 0 http://www.jaapwesselius.com/2013/04/15/edge-server-ssl-certificate/#utm_source=feed&utm_medium=feed&utm_campaign=feed Exchange 2010 SP3 on Windows Server 2012 http://feedproxy.google.com/~r/Jaapwesselius-com/~3/cG-vJ9bazTQ/ http://www.jaapwesselius.com/2013/04/07/exchange-2010-sp3-on-windows-server-2012/#comments Sun, 07 Apr 2013 08:19:09 +0000 jaapwess http://www.jaapwesselius.com/?p=2987 Continue reading →]]> Now that Exchange 2010 SP3 is available it’s also possible to install it on Windows Server 2012. Normally that’s not a problem, but you have to be careful with the prerequisite software. Windows Server 2012 comes with .NET Framework 4.5 and Management Framework 3.0 (including Powershell 3.0) but Exchange 2010 still requires .NET Framework 3.5 and Powershell 2.0. Luckily Powershell 2.0 and Powershell 3.0 can coexist on the same box with any issues.

Install .NET Framework 3.5 and Powershell 2.0

To install .NET Framework 3.5 (which automatically includes Powershell 2.0 on Windows Server 2012) you can use Server Manager, but there’s a little snag because Server Manager does not know where the install files are located :-)

  • Open Server Manager, click Manage in the top right menu and select Add Roles and Features.
  • Click Next and select Role-based or feature-based installation. Click Next to continue.
  • Select the server you want to manage, click Next and you’ll get in the Select server roles window. The .NET Framework is a feature so don’t select anything and click Next to get to the Select features window. Expand the .NET Framework 3.5 Features option and select the .NET Framework 3.5 (includes .NET 2.0 and 3.0) option. Also select the HTTP Activation option and in the additional Add features that are required for HTTP Activation pop-up click Add Features. Personally I also install the Telnet Client at this point since this client can be extremely useful for troubleshooting purposes. Click Next three times to continue.
  • Now pay attention. For some reason you have to specify the location where setup can find the installation files, by default this is D:\Sources\SXS (where D:\ is the DVD that contains Windows 2012 but this can also be a share on the network of course).
  • In the confirm installation selections window click on Specify an alternate source path and enter the location of the source files. Click OK to continue and click Install to install the .NET feature.

It is also possible to install the .NET Framework 3.5 and Powershell 2.0 from an (elevated privileges!) command line:

dism /online /enable-feature /featurename:NetFx3 /All /Source:d:\sources\sxs

image

My personal experience: this is way faster than the Server Manager ;-)

When installing Exchange 2010 on Windows Server 2008 R2 you can use the XML files found on the DVD in \Scripts or in \Setup\Serverroles\Common directories, but unfortunately these don’t work on Windows Server 2012 so the XML files need to be converted to something the Server Manager in Windows 2012 accepts. To install a typical Exchange 2010 SP3 server (MBX, CAS and HUB) you can use the following Powershell commands:

Import-Module ServerManager

Install-WindowsFeature RSAT-ADDS, Web-Server, Web-Basic-Auth, Web-Windows-Auth, Web-Metabase, Web-Net-Ext, Web-Lgcy-Mgmt-Console, WAS-Process-Model, RSAT-Clustering, Web-Mgmt-Console, Web-Mgmt-Service, Web-ISAPI-Ext, Web-Digest-Auth, Web-Dyn-Compression, Web-WMI, Web-Asp-Net, Web-ISAPI-Filter, Web-Client-Auth, Web-Dir-Browsing, Web-Http-Errors, Web-Http-Logging, Web-Http-Redirect, Web-Http-Tracing, Web-Request-Monitor, Web-Static-Content, NET-HTTP-Activation, RPC-over-HTTP-proxy, Telnet-Client

Note. The difference is that the RSAT-Web-Server is now replaced by Web-Mgmt-Console and Web-Mgmt-Service. The Telnet-Client is optional of course.

Although the Server Manager does not report back to reboot the server I personally do prefer to reboot the server at this point. After rebooting install the Microsoft Office 2010 Filter Packs which can be downloaded from http://go.microsoft.com/fwlink/?LinkID=191548

To prepare Active Directory (when needed of coure) you can use the following commands:

Setup.com /PrepareSchema

Setup.com /PrepareAD

Setup.com /PrepareDomain

Note. When this is a green-field installation of Exchange Server 2010 you have to use the /PrepareAD parameter in combination with the /OrganizationName parameter.

To install the actual (typical) server you can use the following command:

Setup.com /mode:install /roles:ca,mb,ht /ExternalCASServerDomain:webmail.contoso.com

image

Of course you can use the graphical setup (without the separate AD preparation commands) as well and just like the unattended setup it does not differ from previous Exchange 2010 deployments.

The previous example was for a typical Exchange 2010 deployments, i.e. a server with the Client Access, Hub Transport and Mailbox Server role installed. Below are the Server Manager commands you can use for dedicated server roles. Not mentioned below, but for all server roles you have to enable .NET Framework 3.5 and Powershell 2.0 as outlined in the beginning of this blog.

Exchange 2010 CAS Prerequisites

This can be used for a dedicated CAS server as well as a combined CAS and HUB server.

Import-Module ServerManager

Install-WindowsFeature Web-Server, Web-Basic-Auth, Web-Windows-Auth, Web-Metabase, Web-Net-Ext, Web-Lgcy-Mgmt-Console, WAS-Process-Model, RSAT-Clustering, Web-Mgmt-Console, Web-Mgmt-Service, Web-ISAPI-Ext, Web-Digest-Auth, Web-Dyn-Compression, Web-WMI, Web-Asp-Net, Web-ISAPI-Filter, Web-Client-Auth, Web-Dir-Browsing, Web-Http-Errors, Web-Http-Logging, Web-Http-Redirect, Web-Http-Tracing, ,Web-Request-Monitor, Web-Static-Content, NET-HTTP-Activation, RPC-over-HTTP-proxy

Exchange 2010 HUB Prerequisites

 Import-Module ServerManager

Install-WindowsFeature Web-Server, Web-Basic-Auth, Web-Windows-Auth, Web-Metabase, Web-Net-Ext, Web-Lgcy-Mgmt-Console, WAS-Process-Model, Web-Mgmt-Console, Web-Mgmt-Service

Exchange 2010 MBX Prerequisites

 Import-Module ServerManager

Install-WindowsFeature Web-Server, Web-Basic-Auth, Web-Windows-Auth, Web-Metabase, Web-Net-Ext, Web-Lgcy-Mgmt-Console, WAS-Process-Model, RSAT-Clustering, Web-Mgmt-Console, Web-Mgmt-Service

Exchange 2010 UM Prerequisites

 Import-Module ServerManager

Install-WindowsFeature Desktop-Experience, Web-Server, Web-Basic-Auth, Web-Windows-Auth, Web-Metabase, Web-Net-Ext, Web-Lgcy-Mgmt-Console, WAS-Process-Model, Web-Mgmt-Console, Web-Mgmt-Service

Exchange 2010 Edge Prerequisites

 Import-Module ServerManager

Install-WindowsFeature ADLDS
]]> http://www.jaapwesselius.com/2013/04/07/exchange-2010-sp3-on-windows-server-2012/feed/ 3 http://www.jaapwesselius.com/2013/04/07/exchange-2010-sp3-on-windows-server-2012/#utm_source=feed&utm_medium=feed&utm_campaign=feed