Shulou(Shulou.com)06/03 Report--

1.1 deployment and configuration of Exchange server 2013 server

Install Exchange 2013 under windows server 2012:

1) system component preparation (execute the following command in Windows Server 2012 PowerShell)

Install-WindowsFeature AS-HTTP-Activation, Desktop-Experience, NET-Framework-45-Features, RPC-over-HTTP-proxy, RSAT-Clustering, RSAT-Clustering-CmdInterface, Web-Mgmt-Console, WAS-Process-Model, Web-Asp-Net45, Web-Basic-Auth, Web-Client-Auth, Web-Digest-Auth, Web-Dir-Browsing, Web-Dyn-Compression, Web-Http-Errors, Web-Http-Logging, Web-Http-Redirect, Web-Http-Tracing, Web-ISAPI-Ext, Web-ISAPI-Filter, Web-Lgcy-Mgmt-Console Web-Metabase, Web-Mgmt-Console, Web-Mgmt-Service, Web-Net-Ext45, Web-Request-Monitor, Web-Server, Web-Stat-Compression, Web-Static-Content, Web-Windows-Auth, Web-WMI, Windows-Identity-Foundation,RSAT-ADDS-Restart

2) Software preparation

After installing the operating system roles and features, install the following software:

◆ Microsoft Unified Communications Managed API 4.0, Core Runtime 64bit (http://www.microsoft.com/en-us/download/details.aspx?id=34992)

Install the Unified Communications Managed API 4.0:

Start-BitsTransfer-Source http://download.microsoft.com/download/2/C/4/2C47A5C1-A1F3-4843-B9FE-84C0032C61EC/UcmaRuntimeSetup.exe-Destination c:\ temp

C:\ temp\ UcmaRuntimeSetup.exe / Q

3.PrepareAD

Setup.exe / PrepareSchema / IacceptExchangeServerLicenseTerms

Setup.exe / PrepareAD / OrganizationName:NBIS / IacceptExchangeServerLicenseTerms

Setup.exe / PrepareDomain / IAcceptExchangeServerLicenseTerms

4. Install exchange 2013

Setup.exe / Mode:Install / Roles:Mailbox,ClientAccess / Mdbname:MDB01 / DbFilePath D:\ Exchange\ MDB01\ DBFiles\ MDB01.edb / LogFolderPath D:\ Exchange\ MDB01\ LogFiles / IacceptExchangeServerLicenseTerm

5. Post-Installation Tasks:

1) Creating accepted domains

New-AcceptedDomain-Name aplusnb-DomainName aplusnb.com-DomainType Authoritative

2) Creating an email address policy

New-EmailAddressPolicy-Name aplusnb-IncludedRecipients AllRecipients-EnabledEmailAddressTemplates "SMTP:@aplusnb.com"

Update-EmailAddressPolicy-Identity aplusnb

3) Configuring connectors

1. Send Connector:

New-SendConnector-Name "To Internet SendConnector"-Internet-AddressSpaces "*"-DNSRoutingEnabled:$TRUE-SourceTransportServers "NIP-Exch35"

4) Configuring SSL certificates

$Data = New-ExchangeCertificate-FriendlyName "aplusnb SSL Certificate"-GenerateRequest-SubjectName "c=CN, o=aplusnb, cn=mail.aplusnb.com"-DomainName mail.aplusnb.com,autodiscover.aplusnb.com,ca.aplusnb.com,aplusnb.com,mail.nipc.com.cn,autodiscover.nipc.com.cn,nip-exch35.nipc.com.cn,nip-exch08.nipc.com.cn,localhost,nip-exch75.nipc.com.cn,mx1.nipc.com.cn,exchange.nipc.com.cn,mail.nip.com.cn Mx1.nip.com.cn,autodiscover.nip.com.cn,exchange.nip.com.cn,nip-exch08.nipc.bid,nip-exch35.nipc.bid,nip-exch75.nipc.bid,mail.nipc.bid,nipc.bid,autodiscover.nipc.bid-PrivateKeyExportable $true

Set-Content-path "\\ NIP-Exch35\ C$\ SSLCertRequest.req"-Value $Data

You can use the contents of the SSLCertRequest.req file to request an SSL certificate from a certificate authority (CA), open web: http://NIP-S-CA/Certsrv To Request an SSL Certificate and save to\\ NIP-Exch35\ C$\ Excertnew.cer

Import-ExchangeCertificate-Server NIP-Exch35-FileData ([Byte []] $(Get-Content-Path "\\ NIP-Exch35\ C$\ Excertnew.cer"-Encoding byte-ReadCount 0)) | Enable-ExchangeCertificate-Server NIP-Exch35-Services "IIS,POP,IMAP,SMTP"

5) Configuring Outlook Anywhere

Get-OutlookAnywhere-Server NIP-Exch35 | Set-OutlookAnywhere-ExternalHostname mail.aplusnb.com-ExternalClientsRequireSsl:$true-ExternalClientAuthenticationMethod:Basic-InternalHostName NIP-Exch35.nipc.com.cn-InternalClientsRequireSsl:$true-InternalClientAuthenticationMethod:Basic

6) Enabling MapiHttp

MapiHttp is the new protocol for Outlook that was introduced in Exchange 2013 SP1. For Outlook, you need to use Outlook 2013 SP1 as well,To enable MapiHttp for Exchange 2013 SP1:

Set-OrganizationConfig-MapiHttpEnabled $true

That it can take up to three hours for the changes to take effect

Enable imap4 and pop3

Set-ADServerSettings-PreferredServer "NIP-DC05.nipc.com.cn"

[PS] C:\ Windows\ system32 > Set-ExchangeServer-Identity NIP-Exch08-StaticGlobalCatalogs "NIP-DC05.nipc.com.cn,NOS-S-DC01.nipc.com.cn"-StaticDomainControllers "NIP-DC05.nipc.com.cn,NOS-S-DC01.nipc.com.cn"-StaticConfigDomainController "NIP-D

C05.nipc.com.cn "

Get-exchangeserver-identity NIP-Exch08-status | fl current,static

Hybrid deployment: https://support.office.com/zh-cn/article/%E4%BD%BF%E7%94%A8%E7%94%B1%E4%B8%96%E7%BA%AA%E4%BA%92%E8%81%94%E8%BF%90%E8%90%A5%E7%9A%84-office-365-%E9%85%8D%E7%BD%AE-exchange-%E6%B7%B7%E5%90%88%E9%83%A8% E7%BD%B2%E5%8A%9F%E8%83%BD-26e7cc26-c980-4cc5-a082-c333de544b6d?ui=zh-CN&rs=zh-CN&ad=CN

Configure Exchange hybrid deployment using Office 365 operated by Century Interconnection step 1: create an authorized server object for your Exchange Online organization

For this process, you must specify an authenticated domain for your Exchange Online organization. This domain should be the same domain as the primary SMTP domain used by cloud-based e-mail accounts. This domain is called in the following procedure.

Run the following command in the Exchange Management Shell in your local Exchange organization.

New-AuthServer-Name "MicrosoftAzureACS"-AuthMetadataUrl https://accounts.accesscontrol.chinacloudapi.cn//metadata/json/1

New-AuthServer-Name "MicrosoftAzureACS"-AuthMetadataUrl https://accounts.accesscontrol.chinacloudapi.cn/aplusnb.com/metadata/json/1

Step 2: enable partner applications for your Exchange Online organization

Run the following command in Exchange PowerShell in your local Exchange organization.

Get-PartnerApplication |? {$_ .ApplicationIdentifier-eq "00000002-0000-0ff1-ce00-000000000000"-and $_ .Realm-eq ""} | Set-PartnerApplication-Enabled $true

Step 3: export the local authorization certificate

In this step, you must run the PowerShell script to export the local authorization certificate, which will then be imported into your Exchange Online organization in the next step.

Save the following text to a PowerShell script file, for example, name the script file ExportAuthCert.ps1.

$thumbprint = (get-authconfig) .CurrentCertificateThumbprint

If ((test-path $env:SYSTEMDRIVE\ OAuthConfig)-eq $false)

{

Md $env:SYSTEMDRIVE\ OAuthConfig

}

Cd $env:SYSTEMDRIVE\ OAuthConfig

$oAuthCert = (dir Cert:\ LocalMachine\ My) | where {$_ .Thumbprint-match $thumbprint}

$certType = [System.Security.Cryptography.X509Certificates.X509ContentType]:: Cert

$certBytes = $oAuthCert.Export ($certType)

$CertFile = "$env:SYSTEMDRIVE\ OAuthConfig\ OAuthCert.cer"

[System.IO.File]:: WriteAllBytes ($CertFile, $certBytes)

Run the PowerShell script you created in the previous step in Exchange PowerShell in your local Exchange organization. For example:

.\ ExportAuthCert.ps1

Exported certificate:

Step 4: upload the local authorization certificate to Microsoft Azure Active Directory ACS

You must use Windows PowerShell to upload the local authorization certificate exported in the previous step to the Microsoft Azure Active Directory access Control Service (ACS). To do this, the Microsoft Azure Active Directory (AD) module for Windows PowerShell cmdlet must be installed.

Install the Microsoft Azure AD module: https://www.microsoft.com/zh-CN/download/details.aspx?id=41950

Install the Microsoft Online Services Sign-In Assistant for IT Professionals RTW from the Microsoft Download Center. Then install the Azure Active Directory Module for Windows PowerShell (64-bit version), and click Run to run the installer package.

Click the shortcut to the Microsoft AzureActive Directory module for Windows PowerShell to open the Windows PowerShell workspace where Microsoft Azure AD cmdlet is installed. All commands in this step will be run through the Windows PowerShell console for Microsoft Azure Active Directory.

Install the Microsoft Azure Active Directory module for Windows PowerShell by following the steps below:

Open the promoted Windows PowerShell command prompt (run Windows PowerShell as administrator). Run the Install-Module MSOnline command. If prompted to install the NuGet provider, type Y and press the Enter key. If prompted to install the module from PSGallery, type Y and press Enter.

Install-Module MSOnline

Connect-MsolService-AzureEnvironment AzureChinaCloud

Save the following text to a PowerShell script file, for example, name the script file UploadAuthCert.ps1:

UploadAuthCert.ps1:

Connect-MsolService-AzureEnvironment AzureChinaCloud

Import-Module msonlineextended;$CertFile = "$env:SYSTEMDRIVE\ OAuthConfig\ OAuthCert.cer"

$objFSO = New-Object-ComObject Scripting.FileSystemObject

$CertFile = $objFSO.GetAbsolutePathName ($CertFile)

$cer = New-Object System.Security.Cryptography.X509Certificates.X509Certificate

$cer.Import ($CertFile)

$binCert = $cer.GetRawCertData ()

$credValue = [System.Convert]:: ToBase64String ($binCert)

$ServiceName = "00000002-0000-0ff1-ce00-000000000000"

P = Get-MsolServicePrincipal-ServicePrincipalName $ServiceName

New-MsolServicePrincipalCredential-AppPrincipalId $p.AppPrincipalId-Type asymmetric-Usage Verify-Value $credValue

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.