Planning Tech

Here I want to teach you how to manage your Exchange 2010 from a remote computer with windows Power Shell V2.  In some cases as administrator you may need to manage your server without the need in Exchange Management Tolls installed. To allow the Remote Management Access you will need to work with Power Shell V2 and above.

For this demonstration we will work with two computers:

E10 – Exchange2010 Server.

PC1 – Windows 7

Let’s start our demonstration:

1. Log-in into PC1
2. Click Start -> All Programs->Accessories->Windows Power Shell-> Windows Power Shell

Now you need to type the following command:

$UserCredential = Get-Credential

After you type the above command a Credential window will open, here you should provide credentials of a user that have the correct access into your Exchange 2010 server

For example:

Planning\administrator

Note!

By using this command you can enter a different credentials from the user logged on the remote computer!

1. At the PS ,type the following :

$rs = New-PSSession –ConfigurationName Microsoft.Exchange –ConnectionUri http://E10.planning.local/powershell -Credentials $UserCredential

1. At the PS,type the following :

Invoke-command {Get-MailboxDatabase} –Session $rs

Note!

Now you can see many details related to your infrastructure, take a look it’s nice to know…

1. At the PS,type the following :

Enter-PSSession $rs

Now after you understand the way you connect into your Exchange2010 server we can actually start working on it, let’s give example:

Creating a new Resource Mailbox:

1. At the PS,type the following :

Set-Executionpolicy Unrestricted

1. At the PS,type the following :

Import-PSSession $rs

1. Create the Resource Mailbox , At the PS,type the following :

New-Mailbox –Alias TVsite1 –name “TV Responsible” –FirstName “TVroom” –Lastname “Site1” –DisplayName “TV Responsible” –UserPrincipalName TV@planning.com –OrganizationalUnit Users –Room

Congratulation s you can open you Exchange 2010 and verify you can see the new user!!

Well we going to make the final step, we going to Remove Exchange2007 Server

Here we want to move the last legacy Exchange2007 server from our site, in this step we must move the remaining services of our Exchange2007 into the new Exchange2010

1.       Setting up the default PF Database on our new installed Exchange2010

1. Log-In Exchange2010
2. EMC-> Organization Configuration ,Click Mailbox
3. Right click on the Mailbox Database->Properties ->Client Setting Tab
4. Under Default public folder database, click Browse
5. In the select PF Database window, you must verify that your Exchange2010 PF Database is the default selected.

2.       Now we have one of the most important issue Moving the Offline Address Book into Exchange2010

1. Log-in to Exchange2007
2. Open EMC->Organization Configuration, Click Mailbox
3. In the result pane,Nevigate to Offline Address Book
4. Under the OAB, Right click Default OAB book and then click Move.
5. In the move OAB Book wizard, Click Browse
6. In the select Mailbox Server Window, Click Xch2010,Click OK
7. Click Move to move the OAB, Click Finish

3.       Now you need to Update the Default OAB distribution location (Exchange2010)

1. Log-in to Exchange2010 /2007
2. Open EMC->Organization Configuration, Click Mailbox
3. In the result pane, Double-Click Offline Address Book
4. In the Properties window , Click Distribution Tab
5. Under the Distribute the OAB from these Virtual directories, click OAB (Default Web Site) and Remove the associated Exchange2007 Server.
6. Now we need to add the Exchange Server 2010 as our distributer :

Add->Chose Xch2010->Ok

1. After you finish add\Remove the Distributer you need to Update the new settings:

Right Click OAB ->Update

4.       Now we need to Update the Default PF database on Exchange2007

1. Open EMC
2. Server Configuration->Mailbox
3. In the work pane ,Click Mailbox Database
4. In the Action pane, under Mailbox Database, click Properties
5. In the Mailbox Database Properties window , Click the Client Settings tab
6. Under Default Public Folder database. Click Browse
7. In the select PF Database windows, verify that Xch2010 PF Database is the selected server

5.       Remove the Xch2007 PF Database

1. Open EMS (Exchange2007)

1. Type the following on PS:

Get-PublicFolderStatistics | Remove-PublicFolder

1. Read the message and type A, Enter.

1. Open EMS (Exchange2010)

1. Type the following on PS:

Get-PublicFolderDatabase –Server Xch2007 | Remove-PublicFolderDatabase

6.       Remove the Exchange2007 Mailbox Database

1. Open Xch2007 
2. Open EMC ,Click Refresh

Note!

You must NOT see the PF database after you refresh the page.

1. In the Work pane , under First Storage Group , Right click Mailbox Database and then Remove

7.       We finally arrive  into the final step , removing the last Exchange2007 Server

1. Log-in Xch2007
2. Open Control Panel -> Add\Remove Programs
3. Click Microsoft Exchange Server 2007  and then click Remove
4. In the Exchange Server 2007 SP2 setup wizard, click Next
5. On the Server Role Selection page, clear all server role check boxes and the  Managmant Tools check box and then click next

It’s time to transfer the Public Folder Database

1.       Set the PF Replication Topology interval

1. Log-In to your Exchange2007 server
2. Open EMC
3. Expend Server Configuration -> Mailbox
4. In the work pane, under Second Storage Group , right-click Public Folder Database and the click Properties
5. In the PF database properties windows, Click the Replication  tab
6. Under Limits, in the Replication interval for “Always run” (Minutes) field, type 1 and then click OK.

2.       Create PF Database on the Exchange2010

1. Log-In into Exchange2010 server
2. Open EMC
3. Organization Configuration ,Click Mailbox
4. In the Action pane, click new PF Database
5. On the Introduction page, in the PF database name field, type Xch2010 PB Database
6. Under Server name ,click Browse, Verify XCH2010 is selected, click OK, Click Next
7. On the set paths page, review database paths, and clear the Mount this database Check box.

Note! 

The Database should not be mounted darning the replication

h.     On the PF database page, review the configuration, Click new

i.      On the Completion page, click Finish.

3.       Dismount and Mount the PF database (Exchange2007)

1. Log-in into Exchange2007
2. In the Work pane, under Second Storage Group, Right-click Public Folder Database and then click Dismount Database.
3. After the store dismounts, right-click PF Database and then click Mount Database.

Note!

We dismount and mount the Database in order to trigger the PF replication and start the new PF database.

4.       Set the Replication Intervals and mount the new PF database(Exchange2010)

1. Log-in Xch2010
2. Navigate into your newly created PF database -> Properties-> Replication
3. In the  Replication Interval for “Always Run ” (Min) field,  change the value to 1 ,Click OK
4. Mount the new PF Database

5.       Now you need to Configure the Exchange Scripts directory in the System Path variable

1. Log-in Exchange2010
2. Open Server Manager
3. Click  Change System Properties -> Advanced
4. Navigate into Environment Variables
5. Under  System variables field, add the following syntax to the Existing value:

;C:\Program Files\Microsoft\Exchange Server\V14\Scripts

Note!

Make sure you type with the correct syntax!

6.       Now we need to Discover PF Replicas

1. Open EMS

Start->All Programs->Microsoft Exchange 2010 – EMC

1. Now you must insert the following Command:

Get-PublicFolder –Server Xch2007(your Exchange Name) –Recurse | FL Name,Replicas

        Note!

        You need to understand the all Replicas are currently located on the Exchange2007

7.       Now we need to create the actual Moving of PF to Xch2010

1. Open EMC ,type the following:

Moveallreplicas.ps1 –Server Xch2007 –NewServer Xch2010–06–08

After you finish with the above command, Type:

  Get-PublicFolder –Recurse | FL Name,Replicas

Note!

You must verify that all PF are now located on XCh2010, it can take up to 15 minutes,

In case it’s take more the 15 minutes ,Run both commands again.

8.       Now we need to make sure that PF content has been moved

Teat 1 :

1. Open EMS,type the following :

Get-PublicFolderStatistics

1. Open EMC.
2. Open Toolbox
3. In the result pane, Double-Click PF Management Console
4. Navigate to the Default Public Folders
5. Navigate to the Finance Folder , Click Properties->Replication

Her you must verify that you have only the Xch2010 Server listed.

Test 2 :

1. Open IE (On you Exchange Server)
2. Login with OWA address :

https://mail.planning-tech.com/Owa

1. Navigate to your PF folders
2. Verify you can see all changes you created on the PF Database

Moving Exchange Server2007 User Mailboxes into the new installed Exchange2010

In this step we going to make the real issue and that means we going to transfer our Mailbox Database between our old and new Exchange servers.

Note!

To make sure and validate the transfer take one of your users and create items (PB & Outlook) and check them after you moving the user Mailbox.

1.       Create new items for a user

1. Log-on to ClientPC with one of your users
2. Open your user outlook 2007/2010 account
3. Create the following items so you can check it after you move user mailbox:

Outlook:

• Create new folders with Rules on that folder.
• Create new Meeting on your Calendar and Invite anther users

Outlook PB:

• Create new Public Folder  
• Create on that folder a new post.

2.       Move test user Mailbox from Exchange2007 to Exchange2010

1. Log-in Xch2010
2. Open run -> Services.msc  :

Now you need to check all service (Belonging to Exchange2010) set on Automatic mode and follow the net role:

Every Server set on Auto must be started before we proceed.

1. Open EMC – > Recipient Configuration, Click Mailbox
2. On the Action pane on the Right, Click View, and the click add/Remove Columns, add the Database Coolum.
3. Under Displayed Columns verify the selection of the database; click Move up until its location will be below Allies, Click OK.
4. In the results pane, click the Database Column to sort the users by Database.
5. Select all users who’s mailboxes in the First Storage Group\Mailbox Database
6. In the Action ,click  New Local Move Request -> Click Browse
7. In the select Mailbox Database Window, click the mailbox database associated with your Exchange2010, Click OK, and then click next.
8. On the Move Options page, accept all default selection, Click Next
9. On the New Local Move Request page , review the mailboxes to be moved , Click New
10. On the Completion page, click Finish
11. In the navigation pane , under Recipient Configuration , Click move Request
12. Review the current move requests, in the Move Request Status column, Verify that the move request is completed
13. In the Navigation pane, under Recipient Configuration ,click Mailbox
14. In the Action pane , click Refresh and confirm that the all mailboxes is transfer to the new location Databases\Mailbox Database<ID Number>

3.       Verify that all the settings you created on the user mailbox has pass after you transfer users mailboxes

You need to check the following:

Outlook:

• Press and hold the CTRL button down, in the system tray, Right-Click the Outlook icon, chose Connection Status. Now verify the connection set to : XCh2010.planning-tech.com
• Verify you can see the folders with the Rules on that folder.
• Verify you can see the new Meetings on your Calendar.
• Verify you can Send\Receive massages Internal and External

Here we going to test the Mail Flow and the new Certificate changes

Here we going to use an External computer (ExternalPC) to test our OWA configuration and the SMTP mail flow from outside of our domain (Planning-tech.com).why testing you asking..?

Because we must be ensure that users whose mailboxes are still in the old Exchange (Xch2007) are able to access their accounts using OWA.the second issue you want to be sure to work is that Messages will be routed correctly to Exchange2007 users.

1.       Verify we can access the old Exchange 2007 Server using OWA

1. Log-in ExteranlPC
2. Open IE and type the following address:

HTTPS:// Mail.Planning-Tech.com /Owa

1. Now enter your Credentials with your domain name

User: planning\David

Pass: @! #!#!@#

Note!

Notice that the authentication is confirm in the Exchange2010 CAS and then routhed to the user Exchannge2007 server Mailbox.

1. Now open OWA with different user and send Messages between users to verify Mail Flow

In this following step we need to create security for our new Exchange 2010 installation, to receive this requirement we need to create a new Certificate using the Exchange Management Console .after we create the new Certificate we need to import the new Certificate and assignee all the appropriate Services .

1. 1.       Create the new Certificate Request using EMC
   1. Log-in to the Exchange 2010 server
   2. Open EMC
   3. Navigate to Server Configuration
   4. On the Right panel-> New Exchange Certificate
   5. On the Introduction page Click your Host for the new Certificate ,in our case we can use Mail.Planning-Tech.com
   6. On the Domain Scope, Next.
   7. Now when you arrive to the “Exchange Configuration” we can chose many different options ,I recommended to follow the next configuration :

• Client Access Server(Outlook Web App)

Here you need to choose both the Internal and the External (Mark both checkboxes)

Internal Configuration:                                 Xch2010.planning.local

External Configuration:                Mail.Planning-Tech.com

• Active Synch(Used For Phones connections)

Configuration:                                  Mail.Planning-Tech.com

1. After we click next,

We will arrive to the “Certificate Domain” here we need to perform the following:

• Select and Remove the old address “Xch2007.Planning-Tech.com”
• You need to put the following records :

Xch2010 (NetBIOS name)

Xch2010.planning-tech.Local (Server FQDN)

Mail.planning-tech.com (External Address) – For this record I have two notes for you:

• This is your External record configured at your internet host (Go-Daddy…) as the MX record.
• This address needs to be set as the primary address.

Autodiscover.planning-tech.com (External Address so we need to set it on our internet host as additional record)

Autodiscover.planning.local

1. In the Organization and Location, fill your Organization specifications.

After you finish filling all tabs, click on Browse

Now chose a location for the .REQ certificate.  In our case we save it on the Root drive:\planning\Cert.req. Click Save.

1. Organization and Location page, Click Next
2. Certificate Configuration page, Click New
3. Completion page, Click Finish

1. 2.       Submit the new Certificate Request to an online Certificate authority

1. Go to the saved file location (c:\planning)and Double-Click on the Cert.req
2. In the Windows dialog, select “Select a program from a list of installed programs”, Click OK.
3. Chose Notepad, OK.
4. Select all records on the file and copy them.
5. Close Notepad.
6. Open IE and type the following address:

http://dc1.planning-tech.com/certsrv 

Note!

The address points to Dc1 because it’s olds our CA server

1. A new window will open called “Active Directory Certificate Services”, here you need to chose ,  Request a Certificate  
2. On the next page chose, Advanced Certificate request
3. On the next page Chose, submit a certificate request by using a base……
4. On the submit a Certificate Request or Renewal Request page, Right-Click in the Saved Request field and click Paste
5. Under Certificate Template, click the Drop-Down list, click Web Server, and the click Submit
6. On the Certificate Issued page, select base 64 Encoded and click the Download Certificate link.
7. In the File Download – Security Warning dialog box, click Save.
8. in the save As window, in the File name ,type c:\Cert.cer,click Save

1. 3.       Import a Certificate using the Exchange Management Console
   1. In the Exchange Management Console ,click on the new Certificate

Note!

You need to refresh the console before you can see the new Cert.

1. Right-Click on the Certificate and choose “Complete Pending Request ”
2. On the introduction page, click Browse.
3. Navigate to the place you put the Certificate and choose it, click Complete

1. 4.       Assign services to the Certificate
   1. In the Work pane, Under Exchange Certificates, select the new installed Certificate.
   2. In the Action pane, under your selected Certificate ,click Assign Services to Certificate
   3. on the select Server page, Verify  that Xch2010 is the only server listed
   4. on the Select Services page, select the IIS(Internet Information Services)
   5. on the Assign Services page, click Assign
   6. f.        Finish!!!

Updating the Send and Receive Connectors (Exchange2010)

Because we don’t have in our scenario any Mail Relay and we need to Receive Messages from the cloud we need to make the changes on the local Exchange Server. After this step our environment can Send and Receive Messages both in the Internal and the External sites.

1. 1.       Allow Messaging from the External Cloud

1. Log-In Exchange 2010 Server(With admin Credentials)
2. Open Exchange Management Console
3. Server Configuration->Hub Transport
4. Chose Default Receive Connector ->Properties
5. Navigate to Permission Groups
6. Mark Anonymous Check box.

Note!

Your Exchange Server now can receive Messages from the External Cloud!

1. 2.       Modify Send connectors to use the new Exchange 2010

1. Open Exchange Management Console
2. organization Configuration->Hub Transport-Send Connectors
3. Right click on “External Mail Connector” -> Properties
4. Source Server Xch2007 ->Remove
5. Click ADD – > Chose the new XCh2010 server.

Note!

You are ready to send Messages to the cloud!

In the following post I will explain you how to make all the infrastructure changes you need to make after you finish install Exchange2010 in a coexistence Exchange 2007 upgrading method.

Dunning this post we will Change the DNS existing records (pointing today to Exchange2007),changing the existing Send Connectors (Exchange2007) to work with the new Exchange 2010 , install a new wildcard Certificate working with the IIS .

After we finish understanding (and dirty our hands…)we will do the  most important thing that we need to do before we start to move the Exchange 2007 mailbox to the new server ,that’s mean we need to TEST the new server communication with two simple tests  :

• SMTP (Simple Mail Transfer Protocol) communication mail flow from outside and inside the organization.

• Microsoft Office Outlook Web App (OWA).

After we finish install the new Exchange2010 server and make all tests we can proceed to the new step in the process and that’s mean we can start transfer the user Mailbox from the Exchange 2007 into the new Exchange2010 Database .in that process we also going to transfer the Public Folder Database(If you have this kind of Database…).

After we finished the three steps:

1. Install Exchange2010.
2. Test Communication (External and Internal).
3. Move Mailboxes From 2007 ->2010.

We can finally go to the Fourth step, that’s mean, we going to remove the old Exchange2007 Server.

 Here are the key points we will accomplish in the Fourth steps plan I teach you:

Step 1:

• Change current DNS records pointing to the new Exchange2010.
• Updating Exchange Send and Receive Connectors.

Step 2:

• Test communication

Step 3:

• Move Databases (Mailboxes & PF)

Step 4:

• Remove the old Exchange 2007 from your org.  

Servers in our organization:

• Xch2007 – Exchange2007 (SP2). 
• Xch2010 – Exchange 2100(SP1).
• ClientPC– Server 2008(X64).
• DC1 – DC\DNS\CA.
• ExternalPC – Server2008(X64).

Step1:

Changing DNS Records

First you need to know current host record Mail.Planning-Tech.com, this record is used for a few Exchange features like our OWA feature we going to test. When we enter that address with a browser the address points to the CAS (Client Access Server) of the Exchange2007, we need to change it to point to the new installed Exchange 2010.after we crate the Redirection of the Exchange CAS, we will verify that our MX records points to the new Exchange 2010 server

1.        Updating the Host Record info in your DNS

1. Log on DC1 (Administrative Account …no needed to say…)
2. Run-> dnsmgmt.msc
3. Expend Forward Lookup Zones-> Click on your Domain <Planning-Tech.com>
4. Click on the Mail record -> change it to the Newoly Exchange 2010 IP address.

2.       Verify the MX Record

1. Log on DC1 (Administrative Account …no needed to say…)
2. Run-> dnsmgmt.msc
3. Expend Forward Lookup Zones-> Click on your Domain <Planning-Tech.com>
4. Look for the org MX record and verify the address of Mail.Planning-Tech.com

1. On EX2010, in the Exchange Management Console, in the Navigation pane, click Toolbox.
2. In the Results pane, double-click Best Practices Analyzer.
3. On the Update and Customer Feedback page, select do not check for updates on startup, select I don’t want to join the program at this time, and then click Go to Welcome Screen.
4. On the Welcome page, click Select Options for a new scan.
5. On the Connect to Active Directory page, verify that the Active Directory Server field lists your Server name, and then click Connect to the Active Directory server.
6. On the Start a New Best Practices scan page, under Specify the scope for this scan. Under Specify the scope for this scan, select the EX2010 check box.
7. Chose the test type you need (HC in our case) click Start Scanning. Wait for the Best Practices Analyzer tool to scan Ex2010.
8. In View Best Practices Report, click the All Issues tab.

After you generate the report you can save it by Export it to a file, here are the steps to work it out:

        i.            Click Export Report.

      ii.            l. In the Export Report window, in the File Name field, type C:\Contoso-Post-Install-report

    iii.            m. In the Save as type drop-down list, select HTM and then click Save.

     iv.            n. Click the Informational Items tab and review the detailed information that was gathered.

       v.            Open Windows Explorer, navigate to C:\, and then double-click planning EXBA report

     vi.            p. View the report.

   vii.            q. Close Microsoft Internet Explorer® and Windows Explorer.