BOOKS FOR PROFESSIONALS BY PROFESSIONALS® Wesselius Pro Exchange Server 2013 RELATED Administration Pro Exchange Server 2013 Administration is your best-in-class companion for gaining a deep, thorough understanding of Microsoft’s powerful enterprise collaboration and communications server. Author Jaap Wesselius is at your side as you administer every facet of Exchange Server 2013, revealing tips, tricks, and little known facts that will make your administration life simpler and more effective. Along with revealing what’s new in Exchange Server 2013, this well-paced, deeply engaging tutorial provides detailed deployment guidance, for upgraders and migrators as well as for organizations entirely new to the Exchange platform. The book details how all of the major Exchange components fit together, from SMTP messages to all kinds of clients. It also provides in-depth configuration examples with an eye toward creating scalable, reliable, and secure installations. Additionally, this guide covers the tools and techniques for monitoring an Exchange environment and troubleshooting when things go wrong. With Pro Exchange Server 2013 Administration, you will: • Learn how to install Exchange Server fresh or upgrade from a previous version • Get a comprehensive understanding of Exchange, with thorough coverage of Mailbox server and Client Access server • Understand the tools and techniques for configuring and managing your Exchange deployment to ensure scalability, reliability, efficiency and security • Learn how to monitor your deployment and prepare for any problems and how to troubleshoot any problems that do arise Shelve in ISBN 978-1-4302-4695-4 Microsoft Servers 55999 User level: Intermediate–Advanced SOURCE CODE ONLINE 9 781430 246954 www.apress.com For your convenience Apress has placed some of the front matter material after the index. Please use the Bookmarks and Contents at a Glance links to access them. Contents at a Glance About the Author ����������������������������������������������������������������������������������������������������������������xv About the Technical Reviewer ������������������������������������������������������������������������������������������xvii Acknowledgments �������������������������������������������������������������������������������������������������������������xix Introduction �����������������������������������������������������������������������������������������������������������������������xxi ■ Chapter 1: Introduction to Exchange Server 2013 ������������������������������������������������������������1 ■ Chapter 2: Installing Exchange Server 2013 �������������������������������������������������������������������21 ■ Chapter 3: Coexistence and Migration ����������������������������������������������������������������������������57 ■ Chapter 4: Client Access Server ������������������������������������������������������������������������������������105 ■ Chapter 5: Mailbox Server ���������������������������������������������������������������������������������������������129 ■ Chapter 6: Managing Exchange Server 2013 ����������������������������������������������������������������191 ■ Chapter 7: Backup, Restore, and Disaster Recovery in Exchange Server 2013 ������������247 ■ Chapter 8: Monitoring Exchange Server 2013 ���������������������������������������������������������������305 ■ Chapter 9: Troubleshooting Exchange 2013 ������������������������������������������������������������������351 Index ���������������������������������������������������������������������������������������������������������������������������������387 v Introduction It is always difficult to write a book, especially about a dynamic server application like Exchange Server 2013. Microsoft is releasing a cumulative update of Exchange Server 2013 and every update contains new features and functionality. From a product point of view this is good of course, but from a book point of view it is difficult. This book is a point in time that is currently at Exchange Server 2013 CU3. This book is aiming at the IT professionals, the Exchange administrators with a couple years of experience that need guidance in deploying and managing Exchange Server 2013 on-premises. Inside there are nine chapters, covering the following topics: • Chapter 1 - Introduction to Exchange 2013. This chapter contains an overview of Exchange Server 2013 including new and removed features, integration with Active Directory and an architectural overview of the product. • Chapter 2 - Installing Exchange Server 2013. This chapter covers the installation of Exchange Server 2013, both on Windows Server 2008 R2 and Windows Server 2012. The normal graphical setup is discussed, also the unattended setup with all the command-line switches that are available. The last part of this chapter discussses the post-installation configuration options. • Chapter 3 - Coexistence and Migration. This chapter covers installation and configuration of Exchange Server 2013 into an exisitng Exchange Server 2007 or Exchange Server 2010 environment. • Chapter 4 - Client Access Server. A theoretical chapter discussing details about the Exchange Server 2013 Client Access server. • Chapter 5 - Mailbox Server. This chapter discusses the Exchange 2013 Mailbox server. Not only the mailbox database and its database internals are discussed, but also the types of mailboxes, the database availability group (DAG), the Transport service and the UM service which are now part of the Exchange 2010 Mailbox server. • Chapter 6 - Managing Exchange Server 2013. This chapter discusses the way to manage your Exchange 2013 environment like the Exchange Admin Center (EAC) and its options as well as the Exchange Management Shell (EMS) with all the possibilities. After the basic this chapter continues with management tasks like certificate management, mailbox management and recipient management. • Chapter 7 - Backup, Restore and Disaster Recovery. A pretty important chapter. It discusses how backups are made and what options you have for restoring information. The last part of this chapter discusses the new Exchange native data protection, sometime referred to as backup-less environment. xxi ■ IntroduCtIon • Chapter 8 - Monitoring Exchange 2013. This chapter deals with various available otpions to monitor Exchange Server 2013. The Exchange Management Shell, Microsoft tools, 3rd party tools and System Center Operations Manager are discussed in this chapter. • Chapter 9 - Troubleshooting Exchange 2013. This chapter is strongly related with the previous two chapters and discusses various ways to troubleshoot your Exchange 2013 servers. I realize that I did not, and cannot cover all available options in an Exchange 2013 environment. Sometimes because the functionality is not available anymore, or is not yet available, like an Exchange 2013 Edge Transport server with anti-spam and anti-virus functionality. Things that will be added with the upcoming Service Pack 1 release of Exchange Server 2013. Other things that come to mind are Office 365 and its integration with Exchange 2013 on-premises for example, or in-depth coverage of mobile devices for a Bring Your Own Device (BYOD) implementation. Nevertheless I hope you find this book useful and a good source of information for deploying and maintaining an Exchange 2013 environment in your office. xxii Chapter 1 Introduction to Exchange Server 2013 In October 2012, Microsoft released the eighth version of its messaging and collaboration server, Exchange Server 2013. At first glance it didn’t seem like a revolutionary change, but there was more than met the eye. Exchange Server 2013 is the first version from Microsoft that was designed from the ground up, with the “cloud” in mind—in particular, Office 365, of course. This is an area where Microsoft is facing tough competition from others—for example, Google. Google Mail and Google Apps have a slick underlying infrastructure, making it possible for users to add new features quickly and have good performance figures at the same time. This ability was something that hasn’t been Microsoft’s strongest point in the last couple of years, and therefore Microsoft decided to invest heavily in its cloud infrastructure. At the same time, Exchange Server was being redesigned to take advantage of these cloud developments. What’s important in a public cloud environment like Office 365? Of course, it’s the scalability, but also it’s the architecture and manageability of the platform that are extremely important. You’ll see this in the new front-end and back-end architecture, where the front end is actually a protocol proxy. This is important in a multi-datacenter environment, perhaps in combination with a global, geographically based DNS solution. That is, in a datacenter environment, you want your application to run with as few administrators and as little administrator input as possible. A solid monitoring solution, with predefined actions and solutions, is key to achieving such an environment. Look at the JBOD (Just a Bunch of Disks) solutions that Microsoft has been promoting since its introduction of Exchange Server 2010. This is a development driven by the ongoing need to lower the operational cost of running a large Exchange Server infrastructure. Running multiple copies of a Mailbox database on just simple SATA disks is easy to manage and low in cost in terms of replacement. When a disk fails, which is not uncommon with cheap SATA disks, the Exchange Server automatically moves over to another Mailbox database on another disk. Later on, it’s a simple matter of rip-and-replace the faulty disk, reseed the Mailbox database, and you’re back in business. This ability decreases the cost of maintaining the disk infrastructure and at the same time decreases the operational cost of administrative staff. These are just a few key things for Microsoft datacenters running Office 365, and you’ll see these features in the new Exchange Server 2013 as well. Does this mean that Exchange Server 2013 is targeted toward large, multinational organizations? Well, yes and no. Yes, large, multinational organizations will certainly benefit from the new architecture with its front-end and back-end technologies. But smaller organizations, perhaps with datacenter resiliency, will certainly also benefit from Exchange Server 2013. Larger organizations can move to Office 365 and create a combination of Exchange Server 2013 on-premises and Office 365. This is called a “hybrid environment,” where the two are tightly integrated. Together they form one namespace with one address book, and yet are independent where the actual mailboxes are located. Also, e-mail sent between Exchange Server 2013 on-premises and Office 365 is fully secure because of the hybrid configuration. 1 Chapter 1 ■ IntroduCtIon to exChange Server 2013 Getting Started To begin, let’s take a general look at the Exchange Server 2013 release. First, we’ll consider the two Exchange Server 2013 editions and review their features. Then, we’ll look at the features that have been removed from Exchange Server and are not part of Exchange Server 2013. The Editions Exchange Server 2013 is available in two editions: • Exchange Server 2013, Standard Edition This is a “normal” Exchange Server 2013, limited to only five (5) Mailbox databases per Mailbox server. This edition can also be used for non-Mailbox servers. • Exchange Server 2013, Enterprise Edition This version can host up to 50 Mailbox databases per Mailbox server. (If you are familiar with Exchange Server 2010, you’ll notice that this is a decrease in the number of Mailbox databases; in Exchange Server 2010, there were up to 100 Mailbox databases per server. In Chapter 3, I discuss this “limitation.”) Except for the number of Mailbox databases per Exchange Server, there are no differences between the two versions; the binaries are the same. Entering the Exchange Server 2013 license key enforces the number of Mailbox databases per server. Besides the Exchange Server server license, there’s also a Client Access License (CAL), a license that’s required for each user or device accessing the server software. There are two types of CALs available: • Standard CAL This CAL offers standard e-mail functionality from any platform. The license is for typical Exchange and Outlook usage. • Enterprise CAL This more advanced CAL offers functionality such as integrated archiving, compliance features, and information-protection capabilities. The CAL is an add-on to the Standard CAL, so both licenses need to be purchased! This is not a complete list of all available features for the different CALs. For a complete overview, visit the Microsoft licensing page on www.microsoft.com/exchange/en-us/licensing.aspx. What’s New in Exchange Server 2013? So, what are the new features and improvements in Exchange Server 2013? There are a lot of new features, valuable both from an administrator’s point of view and from that of an enduser. Let’s discuss the most important changes here: • A new look and feel of client interfaces Exchange Server 2013 has a new appearance and tone across all messaging clients. Outlook 2013 has a new interface based on the new Microsoft design language. It’s not an overloaded amount of information but, rather, offers a consistent view on all information, easy to find and easy to work with. This interface can also be found in the Outlook Web App (OWA), as shown in Figure 1-1, and it’s obvious that the OWA team and the Outlook 2013 team have worked closely together. This new design can be seen on all kinds of devices, with all types of clients or browsers. Use Windows 8 with Outlook 2013, or Windows 7 with OWA, or Windows Phone 8 with the Outlook mobile mail client, and they all offer this consistent view and user experience. 2 Chapter 1 ■ IntroduCtIon to exChange Server 2013 Figure 1-1. The new look and feel in OWA OWA also has a great new feature: When using Internet Explorer 10 (or Firefox 12, Safari 5.1, or Chrome 18 or later), you’ll find OWA is available also in offline mode, thus giving you the option of working with OWA in an airplane, for example. Not all information is cached within the browser; it is comparable to mobile clients’ use of ActiveSync, where only a few days of data are stored. Only the default settings are different between ActiveSync and OWA offline. • Exchange Admin Center The Exchange Admin Center (EAC) is the new Web-based management interface for Exchange Server 2013 (see Figure 1-2). Built on the new design for mail clients, it offers a management interface across various types of clients and Web browsers. 3 Chapter 1 ■ IntroduCtIon to exChange Server 2013 Figure 1-2. The new EAC in Exchange Server 2013 Under the hood, EAC is using role-based access control (RBAC) so that only the management options enforced by RBAC are visible to the administrator. That is, just like the Exchange Management Console in Exchange Server 2010, not all the nitty-gritty details are available in the EAC—only the basic management functions are present. For all other management functions, the Exchange Management Shell (EMS) is available. • Exchange Management Shell It’s not really new in Exchange Server 2013, but the Exchange Management Shell (EMS) is strongly enhanced in this version. It now runs on top of PowerShell 3.0 (by default, in Windows Server 2012), with approximately 300 new cmdlets making it a very powerful management tool. • Exchange 2013 architecture There’s a new architecture when it comes to server roles. In Exchange Server 2013, only two server roles, sometimes referred to as “building blocks,” are available: • Mailbox server role: The Mailbox server role is the Exchange Server 2013 running in the back end, where all the mailboxes are stored. At the same time, the Mailbox server role contains the hub transport service and the unified messaging components. • Client Access server role: The Client Access server role is running in the front end and is the server all clients connect to. It is responsible for authenticating the connection requests and proxy (or redirect, in case of SIP traffic) the requests to the appropriate mailbox. The server also contains the Front-End Tranport (FET) and a UM call router. 4 Chapter 1 ■ IntroduCtIon to exChange Server 2013 • Managed store The “store” is the process running on the Exchange Server that’s responsible for processing the mail transactions and storing the transactions in the Mailbox databases. In Exchange Server 2013, the store process is completely rewritten in “managed code.” More important, every Mailbox database now has its own store process. So, even if one store process stops working, resulting in that particular Mailbox database to stop working, the other Mailbox databases on the same Mailbox server are unaffected. Earlier, in Exchange 2010, there was only one store process on a Mailbox server. When problems arose with the store process, all those Mailbox databases were affected. Now, this managed store is a great improvement in system stability. • Managed availability One of the best new features of Exchange Server 2013 is its managed availability. It looks like some sort of “self-healing” feature, and it is responsible for monitoring all critical services on Exchange Server 2013. When needed, it takes appropriate action. Managed availability consists of probes, monitors, and actions. Probes are constantly checking for certain services, and they feed the results into the monitors. The monitors evaluate the results from the probes. And when needed, the managed availability can perform certain actions. For example, it can check if OWA is up and running; and if it’s not, it can recycle the application pool where OWA is running or reset the Internet Information Services (IISRESET). Likewise, managed availability has probes for Mailbox databases; if a Mailbox database is found to be corrupted, managed availability can take action to automatically fail-over that Mailbox database to another Mailbox server in the DAG and perform an automatic reseed of the corrupted Mailbox database. This way, problems can be resolved even before end-users notice the failures, thereby reducing the number of calls to the help desk. • Outlook Anywhere This feature is not really new, but what’s new in the Exchange Server 2013 environment is the fact that Outlook clients no longer connect using RPC over TCP (the traditional MAPI way). All Outlook clients now use RCP over HTTPS (i.e., Outlook Anywhere, or OA). This is true for both internal and external clients. So even an internal Outlook client automatically connects to the Exchange Server 2013 Client Access server (CAS) using RPC/HTTPS. The Outlook client is authenticated on the Exchange Server 2013 CAS, and after authentication, the request is proxied (again using RPC/HTTPS) to the Mailbox server where the mailbox is located. • Anti-malware protection Exchange Server 2013 has built-in anti-malware protection available, but unfortunately it is not as feature-rich as the former Forefront Protection for Exchange (FPE), nor does it have the features that were available in the Exchange Server 2010 edge transport server. For anti-spam and anti-virus solutions for SMTP in transit, Microsoft relies heavily on Exchange Online Protection (EOP), the successor to Forefront Online Protection for Exchange (FOPE), Microsoft’s cloud solution for anti-spam and anti-virus. The good news is that both the Exchange Server 2010 and the Exchange Server 2007 edge transport server are running fine and are fully supported in combination with Exchange Server 2013, including edge synchronization. For this to work correctly, though, you need Exchange 2007 SP3 RU10 or Exchange Server 2010 SP3. • “Modern” public folders Microsoft has invested heavily in public folders after years of uncertainty about the future of public folders. Microsoft is calling the new public folders the “modern public folders.” The traditional public folder database has been discontinued in Exchange Server 2013, and the public folders have moved to the Mailbox database. Because of this, the public folders are now protected by means of the database availability group, or DAG, so that multiple copies of public folders can exist in a DAG. Public folders consist of the hierarchy (i.e., the folder structure) and the actual content. A writeable copy of the hierarchy is stored in a primary hierarchy mailbox, and there’s only one writeable copy.The public-folder content is stored in secondary hierarchy mailboxes; this is a new type of mailbox introduced in Exchange Server 2013. Besides public-folder content, the secondary hierarchy 5