Exchange 2013 Multi-tenant managed part 6:owa Login configuration

After the completion of some of the previous content, basically from the user's use and management of the administrator has been isolated, today this piece of content we will configure multi-tenant OWA login.

First we open the EAC, and then we find the server-virtual directory, edit OWA.

650) this.width=650; "height=" 418 "title=" clip_image001[6] "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none; "alt=" clip_image001[6] "src=" http://s3.51cto.com/ Wyfs02/m01/58/b2/wkiom1s4do6gpgyfaahlkjpikpy050.jpg "border=" 0 "/>

In the OWA virtual directory authentication settings, we modify the use of forms-based authentication, and then select the user principal name.

650) this.width=650; "height=" 484 "title=" clip_image002[4] "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none; "alt=" clip_image002[4] "src=" http://s3.51cto.com/ Wyfs02/m01/58/b2/wkiom1s4do_scocmaaeio6g7htc829.jpg "border=" 0 "/>

Then restart IIS.

650) this.width=650; "height=" 288 "title=" clip_image003[4] "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none; "alt=" clip_image003[4] "src=" http://s3.51cto.com/ Wyfs02/m02/58/af/wkiol1s4d13xtmhmaacisza7wks184.jpg "border=" 0 "/>

If we want to use multi-tenancy in the intranet, we need to create a zone for all tenants in the intranet's DNS.

650) this.width=650; "height=" 484 "title=" clip_image004[4] "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none; "alt=" clip_image004[4] "src=" http://s3.51cto.com/ Wyfs02/m00/58/af/wkiol1s4d2cavh9faahqcozw4ay221.jpg "border=" 0 "/>

Basically, the domain name is the name of our tenant, depending on how the general DNS forward zone is created.

650) this.width=650; "height=" 484 "title=" clip_image005[4] "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none; "alt=" clip_image005[4] "src=" http://s3.51cto.com/ Wyfs02/m00/58/af/wkiol1s4d2ggshakaafsbpvtvyi404.jpg "border=" 0 "/>

Complete the creation of the tenant area.

650) this.width=650; "height=" 484 "title=" clip_image006[4] "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none; "alt=" clip_image006[4] "src=" http://s3.51cto.com/ Wyfs02/m01/58/b2/wkiom1s4dpms7zl1aag9rhre0f8000.jpg "border=" 0 "/>

Once the zone has been created, the intranet DNS should be able to see all of the tenant's zones.

650) this.width=650; "height=" "title=" clip_image007[4] "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none; "alt=" clip_image007[4] "src=" http://s3.51cto.com/ Wyfs02/m02/58/b2/wkiom1s4dpurx1czaago4rwblz8982.jpg "border=" 0 "/>

Next, create a mail record in each region.

650) this.width=650; "height=" "title=" clip_image008[4] "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none; "alt=" clip_image008[4] "src=" http://s3.51cto.com/ Wyfs02/m00/58/b2/wkiom1s4dp3w7lkkaahihzrzt2w249.jpg "border=" 0 "/>

When you are finished, continue to create the Autodiscover record for Outlook auto-discovery.

650) this.width=650; "height=" "title=" clip_image009[4] "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none; "alt=" clip_image009[4] "src=" http://s3.51cto.com/ Wyfs02/m01/58/af/wkiol1s4d2yhsegeaagxv39-afi690.jpg "border=" 0 "/>

Then we also need to apply for a multi-domain certificate.

650) this.width=650; "height=" 418 "title=" clip_image010[4] "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none; "alt=" clip_image010[4] "src=" http://s3.51cto.com/ Wyfs02/m02/58/af/wkiol1s4d27tuc-2aagq4c30szi513.jpg "border=" 0 "/>

Create a request to obtain a certificate from a CA.

650) this.width=650; "height=" 444 "title=" clip_image011[4] "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none; "alt=" clip_image011[4] "src=" http://s3.51cto.com/ Wyfs02/m00/58/af/wkiol1s4d3cbcjrsaae8r_vvejy538.jpg "border=" 0 "/>

650) this.width=650; "height=" 444 "title=" clip_image012[4] "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none; "alt=" clip_image012[4] "src=" http://s3.51cto.com/ Wyfs02/m00/58/b2/wkiom1s4dqpsjohjaaet-uhdmha048.jpg "border=" 0 "/>

When you have established the domains that you want to include in the certificate, click Edit.

650) this.width=650; "height=" 444 "title=" clip_image013[4] "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none; "alt=" clip_image013[4] "src=" http://s3.51cto.com/ Wyfs02/m01/58/b2/wkiom1s4dqxxbkzeaagl8z020p8492.jpg "border=" 0 "/>

Add the mail.domain.com and autodiscover.domain.com records of all tenants.

650) this.width=650; "height=" 444 "title=" clip_image014[4] "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none; "alt=" clip_image014[4] "src=" http://s3.51cto.com/ Wyfs02/m02/58/af/wkiol1s4d3otabdxaafkdynpbua425.jpg "border=" 0 "/>

Then save the certificate to a shared location and get the CA to request a certificate.

650) this.width=650; "height=" 444 "title=" clip_image015[4] "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none; "alt=" clip_image015[4] "src=" http://s3.51cto.com/ Wyfs02/m00/58/af/wkiol1s4d3wa7eeraafuote-7og883.jpg "border=" 0 "/>

Request a certificate to be saved to a shared location for Exchange to use.

650) this.width=650; "height=" 454 "title=" clip_image016[4] "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none; "alt=" clip_image016[4] "src=" http://s3.51cto.com/ Wyfs02/m00/58/af/wkiol1s4d3mjibagaaikpihnose833.jpg "border=" 0 "/>

Then complete the certificate request to the eac-server-Certificate.

650) this.width=650; "height=" 418 "title=" clip_image017[4] "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none; "alt=" clip_image017[4] "src=" http://s3.51cto.com/ Wyfs02/m01/58/af/wkiol1s4d3vi4d2daagopem41-0793.jpg "border=" 0 "/>

Specifies the certificate location.

650) this.width=650; "height=" 484 "title=" clip_image018[4] "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none; "alt=" clip_image018[4] "src=" http://s3.51cto.com/ Wyfs02/m02/58/af/wkiol1s4d3yjnhhhaae9ftjoino658.jpg "border=" 0 "/>

When you are finished, edit this certificate to adjust the usage of the certificate.

650) this.width=650; "height=" 418 "title=" clip_image019[4] "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none; "alt=" clip_image019[4] "src=" http://s3.51cto.com/ Wyfs02/m01/58/af/wkiol1s4d37ze8e6aagzmnci_po345.jpg "border=" 0 "/>

To the certificate's service, select Smtp\imap\pop\iis.

650) this.width=650; "height=" 484 "title=" clip_image020[4] "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none; "alt=" clip_image020[4] "src=" http://s3.51cto.com/ Wyfs02/m00/58/af/wkiol1s4d3_bgom3aadlp8vzv30088.jpg "border=" 0 "/>

Replace the existing certificate.

650) this.width=650; "height=" 484 "title=" clip_image021[4] "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none; "alt=" clip_image021[4] "src=" http://s3.51cto.com/ Wyfs02/m01/58/b2/wkiom1s4drpdbqofaaeqdcgzrwq309.jpg "border=" 0 "/>

Then we can let a tenant use Mail.a.com/owa login to their own mailbox, log in will use the email address as the login name.

650) this.width=650; "height=" 418 "title=" clip_image022[4] "style=" border:0px;padding-top:0px;padding-right:0px; Padding-left:0px;background-image:none; "alt=" clip_image022[4] "src=" http://s3.51cto.com/wyfs02/M01/58/B2/ Wkiom1s4drstvkfaaaepl1uavjy052.jpg "border=" 0 "/>

Okay, multi-tenant login configuration is here, in fact very simple, for multi-tenancy use is also very convenient, also very seamless, the user is almost unable to perceive their mailbox is in a multi-tenant environment.

This article is from the "Reinember" blog, make sure to keep this source http://reinember.blog.51cto.com/2919431/1604671

Exchange 2013 Multi-tenant managed part 6:owa Login configuration