Aktivace AntiSpamu v Exchange 2013

Powershell

& $env:ExchangeInstallPath\Scripts\Install-AntiSpamAgents.ps1
Restart-Service MSExchangeTransport

Doporučené

Add-IPBlockListProvider -Name bl.spamcop.net -LookupDomain bl.spamcop.net -Enabled $True
Add-IPBlockListProvider -Name zen.spamhaus.org -LookupDomain zen.spamhaus.org -Enabled $True
Add-IPBlockListProvider -Name cbl.abuseat.org -LookupDomain cbl.abuseat.org -Enabled $True
Add-IPBlockListProvider -Name b.barracudacentral.org -LookupDomain b.barracudacentral.org -Enabled $True
Add-IPBlockListProvider -Name spam.rbl.msrbl.net -LookupDomain spam.rbl.msrbl.net -Enabled $True
Add-IPBlockListProvider -Name psbl.surriel.com -LookupDomain psbl.surriel.com -Enabled $True

Export Message Tracking Results do CSV

get-messagetrackinglog -MessageId "" -resultSize unlimited | select timestamp, sender, {$_.recipients}, messagesubject, clienthostname, serverip, serverhostname, {$_.recipientstatus}, totalbytes, recipientcount, messageinfo | export-csv -Delimiter ";" c:\results.csv

Nastavení oprávnění ke kalendáří v PS

Set-MailboxFolderPermission uzivatel1:\Kalendář -User uzivatel2 -AccessRights PublishingEditor

Autodiscover pro SBS 2011

_autodiscover._tcp.domain.com

1800

SRV

0 0 443 remote.domain.com

How to Prevent the Winmail.dat File from Being Sent to Internet Users

Vygenerování jednoho SSL certifikátu pro několik jmen (pro Exchange 2010)

1. Na serveru s Exchange 2010 spustit "Exchange Management Shell" jako správce
2. Sestavit seznam doménových jmen pro které bude certifikát platný
3. Spustit příkaz New-ExchangeCertificate s parametry pro vytvoření žádosti o certifikát. např. $Data = New-ExchangeCertificate -FriendlyName 'Exchange' -GenerateRequest -KeySize '2048' -DomainName remote.domain.com, autodiscover.domain.com, domain.com, servername, servername.domain.local, domain.local, Sites -Server 'servername' -SubjectName 'CN=remote.domain.com' -PrivateKeyExportable $true -BinaryEncoded
   Set-Content -path "c:\certreq.req" -Value $Data.FileData -Encoding Byte
4. Odeslání žádosti k potvrzení. certreq -submit -attrib “CertificateTemplate:webserver” c:\certreq.req c:\certnew.cer
5. Potvrzení žádosti certreq -accept c:\certnew.cer
6. Na serveru s Exchange 2010 spustit "Exchange Management Console"
7. V nastavení "Server Configuration" najít nový certifikát a přiřadit mu služby.

Send-As a Distribution Group Exchange 2007

1. Open the Exchange Management Shell as an Administrator.

2. Type in the following command, replacing GROUPNAME and USERNAME with the name of the distribution group that you want to grant the user(s) access to send as and the username(s) of the users that will be able to send-as this distribution group.

Add-ADPermission GROUPNAME -ExtendedRights Send-As -user USERNAME

Exchane 2007: Obnova mailboxu ze zálohy

Potřebné znalosti

• eseutil
• new-storagegroup
• new-mailboxdatabase
• set-mailboxdatabase
• mount-database
• restore-mailbox

Příklad

new-storagegroup -Server SBS2008 -LogFolderPath C:\Obnova -Name Obnova  -Recovery

new-mailboxdatabase -mailboxdatabasetorecover "Mailbox Database" -storagegroup "SBS2008\Obnova" -EDBFilePath C:\Obnova\Mailbox Database.edb

set-mailboxdatabase -identity "SBS2008\Obnova\Mailbox Database" -AllowFileRestore:$True 

mount-database -identity "SBS2008\Obnova\Mailbox Database"

eseutil /p C:\Obnova\Mailbox Database.edb

mount-database -identity "SBS2008\Obnova\Mailbox Database"

Restore-Mailbox -Identity spravce -RSGDatabase "SBS2008\Obnova\Mailbox Database" -RSGMailbox uživatel -TargetFolder Recovery

Repairing Exchange 2003 Databases

Check for Clean Shutdown
Run the following commands
    Eseutil /mh priv1.edb
    Eseutil /mh pub1.edb
Check for logs needed. If the report shows Logs Required 0/0 then delete all log files.
Delete *.log
If the shutdown was clean, skip to the defrag section of this FAQ.

OK, so IF the logs required was not 0/0 then lets try and repair the database.  The text in bold that follows are the commands you need to run.

Attempt a Soft Recovery

    Eseutil /r E00

If soft recovery fails, do a hard repair

    Eseutil /p priv1.edb
    Eseutil /p pub1.edb
    Delete *.log
    Mount and then dismount stores one at a time.

OK, by now your transaction logs should all be committed.  Let's move on and defrag the database to free up the space within the database that was being used up by deleted users.

 To ignore streaming file mismatch

• To ignore a streaming file mismatch, add the /I switch to the Eseutil command line. For example:
  
  
  ESEUTIL /P priv1.edb /I
                    

 Streaming File is Missing

If the streaming database has been destroyed, or is missing, you can still successfully complete a repair, but with the loss of all data in that file. If the majority of your users are MAPI clients (Microsoft® Office Outlook® users), the data loss involved may be negligible. If most users connect via Post Office Protocol version 3 (POP3) or Internet Message Access Protocol version 4 (IMAP4), the data loss is likely to be catastrophic.
Follow this step to run Eseutil /P when a database streaming file is missing or when repair is unable to finish with the current streaming file:

 To create a new streaming file

• To create a new streaming file, use the /CREATESTM switch. For example:
  
  
  ESEUTIL /P PRIV1.EDB /CREATESTM

 
http://www.tek-tips.com/faqs.cfm?fid=5581
http://technet.microsoft.com/en-us/library/aa997215%28EXCHG.65%29.aspx

Block List Provider v Exchange 2007

Doporučené

Add-IPBlockListProvider -Name bl.spamcop.net -LookupDomain bl.spamcop.net -Enabled $True
Add-IPBlockListProvider -Name zen.spamhaus.org -LookupDomain zen.spamhaus.org -Enabled $True
Add-IPBlockListProvider -Name cbl.abuseat.org -LookupDomain cbl.abuseat.org -Enabled $True
Add-IPBlockListProvider -Name b.barracudacentral.org -LookupDomain b.barracudacentral.org -Enabled $True
Add-IPBlockListProvider -Name spam.rbl.msrbl.net -LookupDomain spam.rbl.msrbl.net -Enabled $True
Add-IPBlockListProvider -Name psbl.surriel.com -LookupDomain psbl.surriel.com -Enabled $True

Ke zvážení

Add-IPBlockListProvider -Name bl.spamcannibal.org -LookupDomain bl.spamcannibal.org -Enabled $True

Vygenerování jednoho SSL certifikátu pro několik jmen (pro Exchange)

Vygenerování jednoho SSL certifikátu pro několik jmen (např. pro Exchange)

1. Na serveru s Exchange 2007 spustit "Exchange Management Shell"


2. Sestavit seznam doménových jmen pro které bude certifikát platný


3. Spustit příkaz New-ExchangeCertificate s parametry pro vytvoření žádosti o certifikát. např.
   New-ExchangeCertificate -GenerateRequest -DomainName remote.domain.com, autodiscover.domain.com, domain.com, servername, servername.domain.local, domain.local, Sites -PrivateKeyExportable:$True -Path c:\certreq.txt


4. Odeslání žádosti k potvrzení.
   certreq -submit -attrib “CertificateTemplate:webserver” c:\certreq.txt c:\certnew.cer


5. Potvrzení žádosti
   certreq -accept c:\certnew.cer


6. Najít ve výpisu příkazu Thumbprint právě vytvořeného certifikátů
   Get-ExchangeCertificate | fl


7. Aktivace ceritifkátu v Exchange 2007
   Enable-ExchangeCertificate -Thumbprint 24679E8984CFD7F03E6D0821F22D0F720C01B804 -Services "IIS, SMTP"
8. Po aktivaci certifikátu restartejeme IIS
   iisreset

Zdroj: http://blogs.technet.com/technetczsk/archive/2006/10/19/exchange-2007-tip-2-vygenerov-n-jednoho-ssl-certifik-tu-pro-n-kolik-jmen.aspx

How to Configure Exchange 2007 to Route Messages for a Shared Address Space

An organization may have to share the same SMTP address space between two or more different e-mail systems. For example, you may have to share the SMTP address space between Exchange and a third-party e-mail system, or between Exchange environments that are configured in different Active Directory forests. In these scenarios, users in each e-mail system have the same domain suffix as part of their e-mail addresses.

http://technet.microsoft.com/en-us/library/bb676395.aspx

Exchange Server 2007: Setting Message Size Limits

# Limit organizace
Set-TransportConfig -MaxReceiveSize 40MB -MaxSendSize 40MB
# Receive Connector limit
Get-ReceiveConnector | Set-ReceiveConnector -MaxMessageSize 40MB
# Send Connector limit
Get-SendConnector | Set-SendConnector -MaxMessageSize 40MB

Exchange 2007 Content FIlter Whitelist

Set-ContentFilterConfig -BypassedSenders foo@somedomain.com,foo2@somedomain.com

Working with Recovery Storage Groups in Exchange 2007

new-StorageGroup -Server 'SERVER' -Name 'RSG' -LogFolderPath 'C:\RSG' -SystemFolderPath 'C:\RSG' -Recovery

new-mailboxdatabase -mailboxdatabasetorecover 'obnova' -storagegroup SERVER\RSG -EDBFilePath "C:\PUVODNI\Mailbox Database.edb"

set-mailboxdatabase -identity SERVER\RSG\test -AllowFileRestore:$True

mount-database -identity SERVER\RSG\test

restore-mailbox -identity tomasm -rsgdatabase SERVER\RSG\test

zdroj:
http://www.msexchange.org/tutorials/Working-Recovery-Storage-Groups-Exchange-2007.html

Migrace z IMAP server na Exchange

http://home.arcor.de/armin.diehl/imapcopy/imapcopy.html

Exchange 2007 Cross-Forest Migration

http://www.wapshere.com/missmiis/exchange-2007-cross-forest-migration

Odstranění mrtvého Exchange serveru

Open ADSIEDIT.MSC (support tools) and follow the steps

Expand Configuration (Server name)--> CN=configuration,DC=.example,DC=.COM--> CN=Services --> CN=Microsoft Exchange --> CN=Organization --> CN= Administrative Groups --> CN=(Name of the RG or Admin Grop) --> CN=Servers --> Rt. Click on the server which you wannna delete and delete it.

autodiscover

1. DNS

192.168.1.2 A autodiscover.domain.com

2. Exchange

Set-OutlookProvider –Identity exch –Server remote.domain.com

3. Certifikát

Role: Služba AD CS

New-ExchangeCertificate -GenerateRequest -DomainName remote.domain.com, autodiscover.domain.com, domain.com, servername, servername.domain.local, domain.local, Sites -PrivateKeyExportable:$True -Path c:\certreq.txt

certreq -submit -attrib “CertificateTemplate:webserver” c:\certreq.txt c:\certnew.cer
certreq -accept c:\certnew.cer

Zrušení starých certifikátů

Nastavení nových

4. IIS

Remove-AutodiscoverVirtualDirectory –Identity "servername\Autodiscover (SBS Web Applications)"
New-AutodiscoverVirtualDirectory -WebsiteName "SBS Web Applications" -WindowsAuthentication $true -BasicAuthentication $true

Disable-OutlookAnywhere -identity "SERVERNAME"
enable-OutlookAnywhere -Server "SERVERNAME" -ExternalHostname 'remote.domain.com' -DefaultAuthenticationMethod 'Basic' -SSLOffloading:$false

Set-ClientAccessServer -identity "SERVERNAME" -AutodiscoverServiceInternalUri https://servername.domain.local/autodiscover/autodiscover.xml
Set-ClientAccessServer -identity "SERVERNAME" -AutodiscoverServiceInternalUri https://remote.domain.com/autodiscover/autodiscover.xml

#OAB
Set-OABVirtualDirectory -identity "SERVERNAME\OAB (SBS Web Applications)" -internalurl https://servername.domain.local/OAB -externalurl https://remote.domain.com/OAB -RequireSSL:$True

#UM
Set-UMVirtualDirectory -identity "SERVERNAME\UnifiedMessaging (SBS Web Applications)" -internalurl https://servername.domain.local/UnifiedMessaging/Service.asmx -externalurl https://remote.domain.com/UnifiedMessaging/Service.asmx -BasicAuthentication:$True


Set-WebServicesVirtualDirectory -identity "SERVERNAME\EWS (SBS Web Applications)" -internalurl https://servername.domain.local/EWS/Exchange.asmx -externalurl https://remote.domain.com/EWS/Exchange.asmx -BasicAuthentication:$True

Kontroly

Test-OutlookWebServices | fl