LEARN EXCHANGE PART 2 Managing your Exchange Architecture

Transcription

1 LEARN EXCHANGE PART 2 Managing your Exchange Architecture Niels Engelen System Engineer, Veeam Software niels.engelen@veeam.com Johan Huttenga System Engineer, Veeam Software johan.huttenga@veeam.com 2014 Veeam Software. All rights reserved. All trademarks are the property of their respective owners.

2 Recap: Last Session We ve discussed: Exchange 2013 Architecture Deployment Planning Installing Exchange 2013 Last Time our session on the 21 st of August

3 Session Overview We ll be discussing: Exchange Management Troubleshooting Mail Flow Compliance Policies (including DLP and Archiving) Monitoring Exchange (Events, SCOM, and Best Practice Analyzer)

4 Popular Question from last session Co-Existence 2014 Veeam Software. All rights reserved. All trademarks are the property of their respective owners.

5 Co-Existence with Exchange 2010 and 2007 You ll need to plan carefully (will need Exchange 2010 SP3 or higher, Exchange 2007 SP3 rollup 10 or higher and Exchange 2013 CU2 or higher) Make sure that you ve verified DNS namespaces, and that Outlook Anywhere is enabled on the older Exchange servers.

6 Exchange Management 2014 Veeam Software. All rights reserved. All trademarks are the property of their respective owners.

7 Exchange 2013 Management Tools Exchange Admin Center ( Exchange Management Shell

8 Exchange 2013 PowerShell baby! Mailbox management: New-Mailbox, Get-Mailbox, Enabl box, Remov box,... Mailbox configuration: New-MailboxFolder, Get-MailboxFolder, New-MailMessage Remember: Get-Help <cmdlet> For example, Get-Help Get-Mailbox

9 Exchange 2013 PowerShell baby! Active Directory Anti-spam and anti-malware Client Access Cmdlet extension agent address and address book Federation and hybrid High availability Mail flow Mailbox Mailbox database Mailbox server Move and migration Organization Permissions Policy and compliance Security Server health, monitoring, and performance Sharing and collaboration Unified Messaging Users and groups

10 Exchange 2013 Certificate Management You ll need to configure split brain DNS, UPN (User Principal Names) accepted domains, and then setup certificates for public facing CAS servers. You can have a look at the details here:

11 Exchange 2013 DAG Management A single NIC for DAG members is supported, but members must have the same networks (for MAPI and Replication traffic). Remember binding order! Don t use circular logging for VSS support. Having a few DAGs that are smaller instead of really large ones (improved DAG replication), but having less disks reduces snapshot creation time for VM backup. Remember witness file shares! You can change heartbeats to avoid cluster failover (multi-site deployments): cluster /prop

12 Exchange 2013 Maintenance Mode for Mailbox Servers Ensures that your users wont be affected by patching and hardware maintenance. Set-ServerComponentState <server> -Component HubTransport -State Draining -Requester Maintenance Restart-Service MSExchangeTransport #if server is multi-role: Restart-Service MSExchangeTransport Restart-Service MSExchangeFrontEndTransport Redirect-Message -Server <server> -Target <MailboxServerFQDN> Suspend-ClusterNode <server> Set-MailboxServer <server> -DatabaseCopyActivationDisabledAndMoveNow $True Get-MailboxServer <server> Select DatabaseCopyAutoActivationPolicy Set-MailboxServer <server> -DatabaseCopyAutoActivationPolicy Blocked Set-ServerComponentState <server> -Component ServerWideOffline -State Inactive -Requester Maintenance

13 Troubleshooting Mail Flow 2014 Veeam Software. All rights reserved. All trademarks are the property of their respective owners.

14 Exchange 2013 Mail Transport SMTP is used to transfer messages (send and receive) in and out of the organization.

15 Troubleshooting Mail Flow Oh no, something is wrong Delivery reports can be run in the Exchange Admin Center

16 Troubleshooting Mail Flow PowerShell baby! Exchange 2013 is all about PowerShell Test health and functionality of your servers All cmdlets start with Test- Get-Command -Verb Test Where Module -match $env:computername Pre-defined scripts! C:\Program Files\Microsoft\Exchange Server\V15\scripts Or using PS: cd $exscripts

17 Troubleshooting Mail Flow PowerShell baby! Creating the test user:.\new-testcasconnectivityuser.ps1 Testing the mailflow: Test-MailFlow Testing DAG replication: Test-ReplicationHealth Identity <server> Get-MailboxDatabaseCopyStatus

18 Troubleshooting Mail Flow PowerShell baby! Testing the Outlook Web Service Test-OutlookWebServices Testing if all the Mailbox Databases are ok Test-MAPIConnectivity Server <server> Testing if you can use a mobile device to a mailbox Test-ActiveSyncConnectivity

19 Compliance Policies 2014 Veeam Software. All rights reserved. All trademarks are the property of their respective owners.

20 Compliance Management Messaging policy and compliance In-place ediscovery & hold Auditing Data Loss Prevention Retention Policies Journaling

21 Compliance Management In-place ediscovery & hold In-place ediscovery Search mailbox data Copy them to a Discovery mailbox In-place hold: preserve ESI! Search mailbox data Preserve messages from deletion, modification and tampering

22 Compliance Management Auditing Reports to find changes made Mailboxes Configuration settings Even log administrators mailboxes! Enabled per mailbox Set-Mailbox -Identity Johan" -AuditEnabled $true Set-Mailbox -Identity Niels" -AuditEnabled $false

23 Compliance Management Data Loss Prevention Protect sensitive data from being send or deleted Comes pre-defined with regulatory standards

24 Compliance Management Retention policies MRM: Messaging Records Management How long should messages be retained? Where should the messages be retained? Should all messages be retained for the same period?

25 Compliance Management Journaling Not the same as archiving! Record all communications via a transport agent Can be configured on internal, external or all messages Reports can be generated for audits

26 Archiving 2014 Veeam Software. All rights reserved. All trademarks are the property of their respective owners.

27 Exchange archiving Making sure the Exchange server runs smoothly Exchange 2013 is designed to use less IOPS.

28 Exchange archiving What do we need? An archive database Enable the archive option per mailbox Optional: multiple archives (used in most cases) Optional: automated archival Easy setup: all done via the Exchange Administration Center PowerShell is also supported!

29 Exchange archiving What do we need? Creating the archive database

30 Exchange archiving What do we need? Enabling archiving for a user

31 Monitoring Exchange 2014 Veeam Software. All rights reserved. All trademarks are the property of their respective owners.

32 Exchange monitoring Using Event Viewer An overview of logs for monitoring, compliance and troubleshooting.

33 Exchange monitoring Using SCOM An overview of all components: state, health, and performance

34 Exchange monitoring Using BPA Is integrated with Office 365, and allows you to review your environment for issues, and provides additional information where necessary.

35 Further Reading and References We will be doing a third part of this series, and will publish some supporting material as well at veeam.com. However if you d like there is a lot more detailed information available (some of which we used to create this series): (you had me at EHLO)

36 Next time We ll be discussing: Exchange Security High Availability and Recovery Built-in and Veeam Instant Recovery as well Item-level recovery Exchange patch testing with Veeam s Virtual Lab Questions? Niels Engelen System Engineer, Veeam Software niels.engelen@veeam.com Johan Huttenga System Engineer, Veeam Software johan.huttenga@veeam.com