Exchange 2010 - Mod 03 - Upgrade and Coexistence

Microsoft®ExchangeServer2010:UpgradingfromandCoexistingwithExchangeServer2003/2007Exchange2010IgniteModule03MicrosoftCorporationAgenda•DiscussthechangesbetweenExchangeServer2003/2007andExchange2010•DiscusstheprerequisitesforupgradingandthearchitecturalbestpracticesforExchange2010•Walkthroughtheupgradescenarios–ClientAccess–Transport–UnifiedMessaging(UM)–Mailbox2NewfromExchangeServer2003toExchangeServer2007Front-End(FE)/Back-End(BE)-ClientAccess/Mailbox/HubTransport(Hub)/EdgeTransport/UnifiedMessaging64-bitserversonlyActiveDirectory®DomainServices(ADDS)sitesreplaceRoutingGroupsAutodiscoverRemovesOutlook®2007+needforpublicfolders•AvailabilityService:Free/Busyinformationreaddirectfrommailboxes,notfrompublicfolders•OfflineAddressBookdownloadfromCASNewadmintools•ExchangeManagementConsoleandExchangeManagementShellUnifiedMessaging–VoicemailinyourinboxNewDeveloperAPI:EWS3NewfromExchangeServer2007toExchange2010RunExchangeServeryourself,oruseExchangeOnline?Highavailabilitysolutionformailboxesisdatabasemobility•Composedofdatabaseavailabilitygroupanddatabasecopies•Providessiteresilienceanddisasterrecovery•30-secondswitchover/failoverwithsimplifiedadminexperience•Improvestheflexibilityinstoragechoices(e.g.SATAdisks,JBODconfigurations)•ReplacesSCR,LCR,SCC,andCCRfromExchangeServer2007ManagementToolsare64-bitonlyRPCClientAccessandAddressBookservices•ImprovedHighAvailabilitysolution:OutlookMAPIconnectsdirectlytoClientAccessServersformailbox-relateddataanddirectoryrequestsExOLEDB,WebDAV,andCDOExaregone•“EntourageEWS”usesEWS4SupportedClientAccessMethods5Outlook2003Outlook2007POP/IMAPUpgradePrerequisitesLegacyExchangeVersionRequirementsExchangeServer2003ServicePack2(SP2)and/orExchangeServer2007SP2arerequired•SP2isrequiredonallCAS2007andUM2007serversintheorganizationpriortoExchange2010introduction•SP2isrequiredonallExchangeServer2007serversinanADDSsitepriortoExchange2010introductionExchangeServer2007SP2addsimprovementslike•Exchange2010coexistencesupport•Exchange2010schemaextensions•Auditingcapabilities•Optionalschemaextensioncapabilities•VSSbackupplug-in6UpgradePrerequisitesADDSandDNSRequirementsActiveDirectoryDomainServices•WindowsServer®2003SP2globalcatalogserver(orlater)ineachExchangeADDSsite–NohardrequirementforWindowsServer2008ADDS•WindowsServer2003forestfunctionallevelSupportednamespaces•Disjoint•Single-labeldomains•Discontinuous7Exchange2010InstallationPrerequisitesWindowsServer2008SP2orR264-biteditions•Standard,EnterpriseWindowsManagementFramework•WindowsPowerShellv2.0•WindowsRemoteManagementv2.0.NETFramework3.5SP1IISSee(EXCHG.140).aspx8SetupStep-by-stepinstructionsinsetupapplicationSetup.comwithparametersgivesunattendedsetup9•Setupprovidesspecificsettingsforconfiguringyourenvironment•ExternalCAShostname:mail.contoso.com•externalUrlparameterdeterminesautodiscoverconfigforclients•ExchangeServer2003routinggroupconnector(RGC):ExchangeServer2003serverNamespacesandURLsHostnamesandServicesExposedtoInternetExchangeServer2003mail.contoso.comOutlookWebAccess/owaExchangeWebServices/ewsOfflineAddressBook/oabUnifiedMessaging/unifiedmessagingOutlookMobileAccess/omaAutodiscover.contoso.comAutodiscover/autodiscoverExchange2010Updatesmail.contoso.comOutlookWebAccessOutlookWebAppExchangeControlPanel/ecpUnifiedMessaging/unifiedmessaginglegacy.contoso.comExchangeServer2003/ExchangeServer2007services10mail.contoso.comOutlookWebAccess(OWA)/exchange,/exchweb,/publicExchangeActiveSync/microsoft-server-activesyncOutlookAnywhere/rpcPOP/IMAPOutlookMobileAccess/omasmtp.contoso.comClientsandSMTPserversExchangeServer2007UpdatesDeployingExchange2010TopologyDecisions–SSLCertificatesUseSANcertificatewhichcancovermultiplehostnames•OutlookAnywherewillnotconnectifthePrincipalNameonthecertificatedoesnotmatchthevalueconfiguredinmsstd:(defaultmatchesOARPCEndPoint)•Set-OutlookProviderEXPR-CertPrincipalNamemsstd:pioneer.exchange.microsoft.comSiteresiliencescenario:Ifleveragingacertificateperdatacenter,thenensurethattheCertificatePrincipalNameisthesameonallcertificates•OCSrequirescertificateswith=1024bitkeys,andtheservernameinthecertificateprincipalnameDonotlistmachinehostnamesincertificatehostnamelist,ifatallpossible•1certificateforallCASservers+reverseproxy+Edge/Hub•AdditionalcertificateifusingOCSBestpractice:minimizethenumberofcertificates11CertificatesStepbystepNew-ExchangeCertificate•-GenerateRequest•-SubjectNamec=US,o=AndakerInc,cn=mail1.andaker.com“•-DomainNamemail.andaker.com,autodiscover.andaker.com,legacy.andaker.com•-PrivateKeyExportable$trueCreatesaCertificateRequestfileSendRequestfiletocertificateauthorityyouarebuyingfromUseImport-ExchangeCertificatetomakeExchangeusethecertificateyougetbackUseEnable-ExchangeCertificatetoenablethecertificateforusewithaparticularExchangeservice12CertificatesCertificateWizardExchange2010includesacertificatewizard•AccessedintheServerConfigurationnodeWalksyouthroughallthescenarioswhichrequireacertificateHandles•Certificaterequestcreation•Certificateimportandservicese