Exchange 2016

Installation

• Exchange 2016 prerequisites https://technet.microsoft.com/en-us/library/bb691354(v=exchg.160).aspx
• Exchange 2016 Cumulative Update 3 or later is required if you want to install Exchange on Windows Server 2016.
• Exchange Server Updates: build numbers and release dates https://technet.microsoft.com/en-us/library/hh135098%28v=exchg.160%29.aspx
• You can't access OWA or ECP after you install Exchange Server 2016 CU6 https://support.microsoft.com/en-us/help/4036163/you-can-t-access-owa-or-ecp-after-you-install-exchange-server-2016-cu6
• Installing Cumulative Updates in Exchange 2016 http://ehloexchange.com/installing-cumulative-updates-in-exchange-2016/

Exchange Admin Center

AD domain name (corp.alphabook.cn) is different from public domain name (alphabook.cn)

• mail flow -> accepted domains -> new
  • Name: alphabook.cn
  • Accepted domain: alphabook.cn
  • Authoritative
  • Make this the default domain
• mail flow -> email address policies -> new
  • Policy name: Corporation Policy
  • Email address format
    • Select an accepted domain: alphabook.cn
    • Enter a custom address type: SMTP
    • Email address parameters: @alphabook.cn
    • Make this formate the reply email address
  • Save
  • Apply

Email outgoing

• mail flow -> send connectors -> new
  • Name: Email outgoing
  • Internet (For example, to send internet mail)
  • Next
  • MX record associated with recipient domain
  • Next
  • Address space -> new
    • Type: SMTP
    • Full qualified Domain Name (FQDN): *
    • Cost: Default
    • Save
  • Source server -> new
    • Select the server, add, then OK
  • Finish

Email incoming

• A default inbound Receive connector is created when Exchange 2016 is installed. This Receive connector accepts anonymous SMTP connections from external servers. You don't need to do any additional configuration if this is the functionality you want. If you want to restrict inbound connections from external servers, modify the Default Frontend <Mailbox server> Receive connector on the Mailbox server.

Mailbox Enable/Disable/Re-enable

• recipients -> mailboxes -> add -> user mailbox
• Existing user -> Browse... -> Select the user -> OK
• Save
• Enable-Mailbox for multiple users with PowerShell
  • (Get-ADUser -Filter {Department -eq "IT"}).SamAccountName | Enable-Mailbox
• Disable-Mailbox
  • (Get-ADUser -Identity Yun.Zhao).SamAccountName | Disable-Mailbox
• Re-enable Mailbox
  • Get-MailboxDatabase -Identity MailboxDB01 | Get-MailboxStatistics | Select-Object DisplayName,MailboxGuid,DisconnectDate,DisconnectReason,TotalItemSize | Format-Table
  • Connect-Mailbox -Identity 97eaffc9-a5b6-4f43-a2f5-d04a30cecfeb -User "Yun Zhao" -Database MDB01
• Disable or delete a mailbox in Exchange 2016 https://technet.microsoft.com/en-us/library/jj863434(v=exchg.160).aspx
  • Disable mailbox -> all Exchange attributes are removed from the associated user account in Active Directory
  • Disable mailbox -> The disconnected mailbox is hidden and marked for removal (MailboxRetention 30 days by default)
  • Delete mailbox -> the account is removed from Active Directory
  • Delete mailbox -> The disconnected mailbox is hidden and marked for removal (MailboxRetention 30 days by default)

Mailbox Delegation (recipients -> mailboxes -> User -> Edit)

• • Send As (The Send As permission allows a delegate to send email from this mailbox. The message will appear to have been sent by the mailbox owner.)
  • Send on Behalf ( The Send on Behalf permission allows the delegate to send email on behalf of this mailbox. The From line in any message sent by a delegate indicates that the message was sent by the delegate on behalf of the mailbox owner.)
  • FullAccess (In UserBeingGrantedPermission's Outlook, will see both)
    • Add-MailboxPermission -Identity UserWhoseMailboxIsBeingConfigured -User UserBeingGrantedPermission -AccessRights 'FullAccess'
  • In Outlook, New email -> Options -> From

Email Groups

• recipients -> groups -> add
  • Distribution Group (Owner approval is required - Enable)
  • Security Group (Mail-enabled security group, Owner approval is required - Enable)
  • Dynamic Distribution Group (Based on defined rules, such as OU)

Room Mailbox (Conference Room Booking)

• recipients -> resources -> add
  • room mailbox (A room mailbox is resource mailbox that is assigned to a physical location for users to reserve.)
    • Room Name / Alias / OU / Location / Phone / Capacity

Mail Contact

• recipients -> contacts -> add
• mail contact (First Name / Last Name / Display Name / Name / Alias / External email address)

Shared Mailbox

• recipients -> shared -> add
  • shared mailbox (allow a group of users to view and send email from a common mailbox and share a common calendar)
• Send from shared mailbox in Outlook 2016
  • New Email -> Options -> From (From field is hidden by default)
  • New Email -> From -> Other Email Address...

• Send from shared mailbox in OWA
  • New Email -> ... -> Show From -> Right click on the current sender -> Delete -> Input the shared mailbox address

Quere Viewer

• From Exchange server, open Exchange Toolbox, then Queue Viewer
• To manage Exchange email queues

Outlook AutoDiscover

• SRV record
  • Service: _autodiscover
  • Protocol: ._tcp
  • Port Number: 443
  • Host: mail.alphabook.cn
  • Priority: 0
  • Weight: 0
• Reference https://technet.microsoft.com/en-us/library/bb124251(v=exchg.160).aspx

OWA (Outlook Web App)

• https://192.168.200.50/owa

Message size limits in Exchange 2016

• Types of message size limits
  • Whole message size limit (33% larger than actual size)
  • Attachment size limit (single attachment)
  • Message header size limit
  • Recipient limit (including To,Cc and Bcc. A distribution group counts as a single recipinent)
• Organizational limits
  • Mail flow -> Receive connectors -> More options More Options icon -> Organization transport settings -> Limits
  • Get-TransportConfig | Format-List MaxReceiveSize,MaxSendSize,MaxRecipientEnvelopeLimit
• Connector limits
  • Mail flow -> Receive connectors
  • Mail flow -> Send connectors
  • Get-ReceiveConnector | Format-Table Name,Max*Size,MaxRecipientsPerMessage; Get-SendConnector | Format-Table Name,MaxMessageSize; Get-AdSiteLink | Format-Table Name,MaxMessageSize; Get-DeliveryAgentConnector | Format-Table Name,MaxMessageSize; Get-ForeignConnector | Format-Table Name,MaxMessageSize
• Recipient limits
  • Get-Mailbox <MailboxIdentity> | Format-List MaxReceiveSize,MaxSendSize,RecipientLimits
  • Apply to messages sent between authenticated senders and recipients (typically, internal senders and recipients)
• Server Limits
  • Maximum size for a message sent by Outlook on the web clients - 35MB (default)
  • Maximum size for a message sent by Exchange ActiveSync clients - 10MB (default)
  • Maximum size for a message sent by Exchange Web Services clients - 64MB (default)
• https://technet.microsoft.com/en-us/library/bb124345(v=exchg.160).aspx

Configure storage quotas for a mailbox

• Set-Mailbox -Identity "Yun Zhao" -IssueWarningQuota 9gb -ProhibitSendQuota 9.5gb -ProhibitSendReceiveQuota 10gb -UseDatabaseQuotaDefaults $false
• https://technet.microsoft.com/en-us/library/aa998353(v=exchg.160).aspx

HA (High Availibity)

• NLB (Network Load Balance)
• DAG (Data Availibity Group)

Edge Transport server (Workgroup)

• Prerequests
  • Configure the primary DNS suffix on the sever(Full computer name will be like: Edge.corp.alphabook.cn)
  • Install-WindowsFeature ADLDS
• Install Exchange 2016 Edge Transport Role
• Configure Internet mail flow through a subscribed Edge Transport server
  • Creat A record for Edge Transport server manually in AD DNS
  • Run below command from Exchange manage shell on Edge Transport server
    • New-EdgeSubscription -FileName "D:\EdgeSubscriptionInfo.xml" -Force
  • Run below command from Exchange manage shell on Mailbox server
    • New-EdgeSubscription -FileData ([byte[]]$(Get-Content -Path "D:\EdgeSubscriptionInfo.xml" -Encoding Byte -ReadCount 0)) -Site "Default-First-Site-Name"
  • Network ports required https://technet.microsoft.com/en-us/library/bb331973(v=exchg.160).aspx#MailFlowEdge
• Reference https://technet.microsoft.com/en-us/library/bb738158(v=exchg.160).aspx

PublicDeligates

• PublicDeligates: Secretary
• PublicDeligatesBL: Manager
• Secretary has access to Manager's mailbox (send on behalf)

Recover deleted messages in a user's mailbox (Outlook)

• Select Deleted Items -> Home -> Recover Deleted Items from Server -> Select the email -> Restore Seleted Items
• Keep deleted items for (days): 14 (by default)

Offline Address Book

• How frequently are the offline address book files generated on the Exchange computer?
  • For Exchange Server 2013 and later versions, the default schedule is to process the OAB every 8 hours over a period of 1 hour. OAB generation can run at different times based on resource availability.
• Update-OfflineAddressBook -Identity "Default Offline Address Book"

Port

• SMTP 25
• MAPI 135
• SSL 443

http error 500

• When we access ecp / owa by browser, get http error 500
• Set-Location C:\Program Files\Microsoft\Exchange Server\V15\Bin
• UpdateCas.ps1
• iisReset.exe

Search-Mailbox cmdlet not recognized

• Use the ECP to add the user to the Discovery Management role group

Search for and delete messages in Exchange 2016

• Get-Mailbox | Search-Mailbox -SearchQuery 'subject:"*Action needed for your bank account*"' -EstimateResultOnly | Select-Object Identity,ResultItemsCount,ResultItemsSize,Success
• Get-Mailbox | Search-Mailbox -SearchQuery 'subject:"*Action needed for your bank account*" -DeleteContent
• Or
• New-ComplianceSearch -Name "Remove Phishing Message" -ExchangeLocation all -ContentMatchQuery 'subject:"*Action needed for your bank account*"'
• Start-ComplianceSearch -Identity "Remove Phishing Message"
• Get-ComplianceSearch -Identity "Remove Phishing Message"
• New-ComplianceSearchAction -SearchName "Remove Phishing Message" -Purge -PurgeType SoftDelete
• Get-ComplianceSearchAction
• https://technet.microsoft.com/en-us/library/ff459253(v=exchg.160).aspx

Mail-Enable or Mail-Disable a Security Group

• Enable-DistributionGroup -Identity "ADGroup01"
• Disable-DistributionGroup -Identity "ADGroup01"

Anonymous relay

• https://docs.microsoft.com/en-us/exchange/mail-flow/connectors/allow-anonymous-relay?view=exchserver-2019

Best Practices for virtualizing

• https://techtalk.gfi.com/best-practices-for-virtualizing-exchange-part-1-vmware/

Troubleshooting

• nslookup
• Event log
• Get-SystemHealth
• Test-ServiceHealth
• Test-MailFlow
• Get-MessageTrackingLog
• Exchange Troubleshooting Assistant
• C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\data\Queue

Error Code

• https://technet.microsoft.com/en-us/library/bb232118.aspx