five major roles :
Client Access : All client access requests are connected to the CAS server, authenticated, and then forwarded to the appropriate mailbox server by proxy.
Hub Transport: The primary role of the Hub Transport role is to complete the application of mail delivery, mail transfer rules, message log rules, and so on, within the organization, the Hub Transport role is responsible for the delivery of messages between different MBX, If you do not have the Edge Transport server role installed, the Hub Transport role will also forward and receive Internet mail. If you have the Edge Transport server role installed, external mail from the Internet is responsible for this role, but intra-organization messages are always handled by the Hub Transport role. The high availability of the Hub Transport role does not need to be configured separately, and it is possible to automatically load-balance multiple servers if multiple Hub Transport role servers are deployed in the same AD site.
Mailbox Database : The primary role of this role is to mount the mailbox database, the public folder database, the responsible generation of offline contacts, and the mailbox database-level management of address lists, message retention policies, and so on. The high availability of this role is implemented by a DAG deployed on a Windows cluster , where one dag can deploy a copy of the mailbox database and replicate data between replicas.
Edge Transport server role : the Edge Transport server role is typically deployed in the DMZ area, which is responsible for sending and receiving messages from all over the Internet, and when sending messages externally Messages are forwarded to the Edge Transport server role by the Hub Transport role within the organization to complete external mail delivery. When an external message is received, it is delivered to the Edge Transport server role, which is forwarded to the internal Hub Transport role after anti-spam and anti-virus checks. This role must exist as a standalone server role
Unified Communications Server role : The role is responsible for combining messages with voice.
Before you install the The AD DS schema is extended to provide the related properties that are required for Exchange to store data. The account information in exchange is stored in the ad ad database, on the other hand , the configuration information for Exchange is not stored on this computer, but is stored in the configuration directory partition of AD DS. when Exchange needs to obtain data on AD DS, it connects to the DC through DNS name resolution to access the data on it. The Client Access server role needs to connect to a global catalog server when locating the mailbox database for the client mailbox and when the client is using the Global address list. Therefore, you should ensure that at least one GC is assigned to each AD site.
Extended AD Schema
If there is an older version of Exchange, the SETUP/PL is executedand not executed if none.
Extended Domain Schema:setup/ps ( requires exchange2010 installation package )
Extended Forest Schema:setup/p, if it is a new installation: setup/p/organizationname: Organization name ( e.g. Radiant)
AD Domain preparation:SETUP/PD
installation CA,HT:
Import-module Servermanager
Add-windowsfeature Net-framework,rsat-adds,web-server,web-basic-auth,web-windows-auth,web-metabase,web-net-ext, Web-lgcy-mgmt-console,was-process-model,rsat-web-server,web-isapi-ext,web-digest-auth,web-dyn-compression, Net-http-activation,web-asp-net,web-client-auth,web-dir-browsing,web-http-errors,web-http-logging, WEB-HTTP-REDIRECT,WEB-HTTP-TRACING,WEB-ISAPI-FILTER,WEB-REQUEST-MONITOR,WEB-STATIC-CONTENT,WEB-WMI, Rpc-over-http-proxy–restart
will be Net.TCP the startup type of the Port sharing service is set to "automatic"
installation CA,HT role
Create CAS Array:
installation NLB, new NLB cluster, verifying NLB
Create CAS array:new-clientaccessarray-fqdn mail.uec.com-name casarray.uec.com–site default-first-site-name
View CAS array:Get-clientaccessarray
Delete CAS array:remove-clientaccessarray-identitymail.uec.com
Update DNS Records ( both intranet and extranet ):
autodiscover.uec.com mail.uec.com MX record
Configuration PowerShell virtual directory Permissions for the IIS site . Enable Windows Authentication, disable anonymous authentication
installation MBX:
Import-module Servermanager
Add-windowsfeature Net-framework,rsat-adds,web-server,web-basic-auth,web-windows-auth,web-metabase,web-net-ext, Web-lgcy-mgmt-console,was-process-model,rsat-web-server–restart
will be Net.TCP the startup type of the Port sharing service is set to "automatic"
installation MBX Role
Configuration PowerShell virtual directory Permissions for the IIS site . Enable Windows Authentication, disable anonymous authentication
Create a cluster Dag
Validation Dag
Disk I/O testing
installation CA Server
Create a multi-domain certificate
Download the certificate and install and export the import certificate
Assigning Services to Certificates
Create a Send connector
Modify the receiving server to allow anonymous users
Enable Outlook Anywhere
Set OWA Redirection
You can create a new offline address book as needed
enable as needed POP3 and IMAP protocols
Basic Mailbox Management:
Distribution Group ( if the extranet user fails to send a message to the distribution group, the Mail flow settings item in the group mailbox properties->Message Delivery Restrictions->require all senders to authenticate is selected, When this option is canceled, the extranet can send messages to the mailbox group normally. )
Dynamic Distribution Groups
Create a new mailbox, move a mailbox, disable a mailbox, delete a mailbox ( will be deleted with AD account )
To create a mailbox in bulk: Get-user-organizationalunit "Branch" | Enable-mailbox–database "Branch"
Set mailbox size, single message size ( organization configuration, server configuration, User Configuration ) .
Import and export of user mailboxes
set Automatic replies:HTTPS://SERVER1.UEC.COM/ECP
Regulatory Compliance:
Monitoring user mail: Log rules ( Annex ) and the Transport Rules (BCC)
Multi-Mailbox Search:
automatically add legal notices !
upload Download size limit for OWA (web. config file):
change requestlimits maxallowedcontentlength and httpruntimemaxrequestlength values to increase or decrease message size
Database Maintenance :
To view the size of the database and the amount of free space :
Get-mailboxdatabase-status | Ftname,databasesize,availablenewmailboxspace-auto
This article is from the It DreamWorks blog, so be sure to keep this source http://fly520.blog.51cto.com/2181586/1694272
EXCHANGE2010 Installation and Configuration