Send-As a Distribution Group Exchange 2007

1. Open the Exchange Management Shell as an Administrator.

2. Type in the following command, replacing GROUPNAME and USERNAME with the name of the distribution group that you want to grant the user(s) access to send as and the username(s) of the users that will be able to send-as this distribution group.

Add-ADPermission GROUPNAME -ExtendedRights Send-As -user USERNAME

Exchane 2007: Obnova mailboxu ze zálohy

Potřebné znalosti

• eseutil
• new-storagegroup
• new-mailboxdatabase
• set-mailboxdatabase
• mount-database
• restore-mailbox

Příklad

new-storagegroup -Server SBS2008 -LogFolderPath C:\Obnova -Name Obnova  -Recovery

new-mailboxdatabase -mailboxdatabasetorecover "Mailbox Database" -storagegroup "SBS2008\Obnova" -EDBFilePath C:\Obnova\Mailbox Database.edb

set-mailboxdatabase -identity "SBS2008\Obnova\Mailbox Database" -AllowFileRestore:$True 

mount-database -identity "SBS2008\Obnova\Mailbox Database"

eseutil /p C:\Obnova\Mailbox Database.edb

mount-database -identity "SBS2008\Obnova\Mailbox Database"

Restore-Mailbox -Identity spravce -RSGDatabase "SBS2008\Obnova\Mailbox Database" -RSGMailbox uživatel -TargetFolder Recovery

Block List Provider v Exchange 2007

Doporučené

Add-IPBlockListProvider -Name bl.spamcop.net -LookupDomain bl.spamcop.net -Enabled $True
Add-IPBlockListProvider -Name zen.spamhaus.org -LookupDomain zen.spamhaus.org -Enabled $True
Add-IPBlockListProvider -Name cbl.abuseat.org -LookupDomain cbl.abuseat.org -Enabled $True
Add-IPBlockListProvider -Name b.barracudacentral.org -LookupDomain b.barracudacentral.org -Enabled $True
Add-IPBlockListProvider -Name spam.rbl.msrbl.net -LookupDomain spam.rbl.msrbl.net -Enabled $True
Add-IPBlockListProvider -Name psbl.surriel.com -LookupDomain psbl.surriel.com -Enabled $True

Ke zvážení

Add-IPBlockListProvider -Name bl.spamcannibal.org -LookupDomain bl.spamcannibal.org -Enabled $True

Vygenerování jednoho SSL certifikátu pro několik jmen (pro Exchange)

Vygenerování jednoho SSL certifikátu pro několik jmen (např. pro Exchange)

1. Na serveru s Exchange 2007 spustit "Exchange Management Shell"


2. Sestavit seznam doménových jmen pro které bude certifikát platný


3. Spustit příkaz New-ExchangeCertificate s parametry pro vytvoření žádosti o certifikát. např.
   New-ExchangeCertificate -GenerateRequest -DomainName remote.domain.com, autodiscover.domain.com, domain.com, servername, servername.domain.local, domain.local, Sites -PrivateKeyExportable:$True -Path c:\certreq.txt


4. Odeslání žádosti k potvrzení.
   certreq -submit -attrib “CertificateTemplate:webserver” c:\certreq.txt c:\certnew.cer


5. Potvrzení žádosti
   certreq -accept c:\certnew.cer


6. Najít ve výpisu příkazu Thumbprint právě vytvořeného certifikátů
   Get-ExchangeCertificate | fl


7. Aktivace ceritifkátu v Exchange 2007
   Enable-ExchangeCertificate -Thumbprint 24679E8984CFD7F03E6D0821F22D0F720C01B804 -Services "IIS, SMTP"
8. Po aktivaci certifikátu restartejeme IIS
   iisreset

Zdroj: http://blogs.technet.com/technetczsk/archive/2006/10/19/exchange-2007-tip-2-vygenerov-n-jednoho-ssl-certifik-tu-pro-n-kolik-jmen.aspx

How to Configure Exchange 2007 to Route Messages for a Shared Address Space

An organization may have to share the same SMTP address space between two or more different e-mail systems. For example, you may have to share the SMTP address space between Exchange and a third-party e-mail system, or between Exchange environments that are configured in different Active Directory forests. In these scenarios, users in each e-mail system have the same domain suffix as part of their e-mail addresses.

http://technet.microsoft.com/en-us/library/bb676395.aspx

Exchange Server 2007: Setting Message Size Limits

# Limit organizace
Set-TransportConfig -MaxReceiveSize 40MB -MaxSendSize 40MB
# Receive Connector limit
Get-ReceiveConnector | Set-ReceiveConnector -MaxMessageSize 40MB
# Send Connector limit
Get-SendConnector | Set-SendConnector -MaxMessageSize 40MB

Exchange 2007 Content FIlter Whitelist

Set-ContentFilterConfig -BypassedSenders foo@somedomain.com,foo2@somedomain.com

Working with Recovery Storage Groups in Exchange 2007

new-StorageGroup -Server 'SERVER' -Name 'RSG' -LogFolderPath 'C:\RSG' -SystemFolderPath 'C:\RSG' -Recovery

new-mailboxdatabase -mailboxdatabasetorecover 'obnova' -storagegroup SERVER\RSG -EDBFilePath "C:\PUVODNI\Mailbox Database.edb"

set-mailboxdatabase -identity SERVER\RSG\test -AllowFileRestore:$True

mount-database -identity SERVER\RSG\test

restore-mailbox -identity tomasm -rsgdatabase SERVER\RSG\test

zdroj:
http://www.msexchange.org/tutorials/Working-Recovery-Storage-Groups-Exchange-2007.html

Migrace z IMAP server na Exchange

http://home.arcor.de/armin.diehl/imapcopy/imapcopy.html

Exchange 2007 Cross-Forest Migration

http://www.wapshere.com/missmiis/exchange-2007-cross-forest-migration

Odstranění mrtvého Exchange serveru

Open ADSIEDIT.MSC (support tools) and follow the steps

Expand Configuration (Server name)--> CN=configuration,DC=.example,DC=.COM--> CN=Services --> CN=Microsoft Exchange --> CN=Organization --> CN= Administrative Groups --> CN=(Name of the RG or Admin Grop) --> CN=Servers --> Rt. Click on the server which you wannna delete and delete it.

autodiscover

1. DNS

192.168.1.2 A autodiscover.domain.com

2. Exchange

Set-OutlookProvider –Identity exch –Server remote.domain.com

3. Certifikát

Role: Služba AD CS

New-ExchangeCertificate -GenerateRequest -DomainName remote.domain.com, autodiscover.domain.com, domain.com, servername, servername.domain.local, domain.local, Sites -PrivateKeyExportable:$True -Path c:\certreq.txt

certreq -submit -attrib “CertificateTemplate:webserver” c:\certreq.txt c:\certnew.cer
certreq -accept c:\certnew.cer

Zrušení starých certifikátů

Nastavení nových

4. IIS

Remove-AutodiscoverVirtualDirectory –Identity "servername\Autodiscover (SBS Web Applications)"
New-AutodiscoverVirtualDirectory -WebsiteName "SBS Web Applications" -WindowsAuthentication $true -BasicAuthentication $true

Disable-OutlookAnywhere -identity "SERVERNAME"
enable-OutlookAnywhere -Server "SERVERNAME" -ExternalHostname 'remote.domain.com' -DefaultAuthenticationMethod 'Basic' -SSLOffloading:$false

Set-ClientAccessServer -identity "SERVERNAME" -AutodiscoverServiceInternalUri https://servername.domain.local/autodiscover/autodiscover.xml
Set-ClientAccessServer -identity "SERVERNAME" -AutodiscoverServiceInternalUri https://remote.domain.com/autodiscover/autodiscover.xml

#OAB
Set-OABVirtualDirectory -identity "SERVERNAME\OAB (SBS Web Applications)" -internalurl https://servername.domain.local/OAB -externalurl https://remote.domain.com/OAB -RequireSSL:$True

#UM
Set-UMVirtualDirectory -identity "SERVERNAME\UnifiedMessaging (SBS Web Applications)" -internalurl https://servername.domain.local/UnifiedMessaging/Service.asmx -externalurl https://remote.domain.com/UnifiedMessaging/Service.asmx -BasicAuthentication:$True


Set-WebServicesVirtualDirectory -identity "SERVERNAME\EWS (SBS Web Applications)" -internalurl https://servername.domain.local/EWS/Exchange.asmx -externalurl https://remote.domain.com/EWS/Exchange.asmx -BasicAuthentication:$True

Kontroly

Test-OutlookWebServices | fl