Course CLD209.1x Microsoft Exchange Server 2016 Hybrid Topologies

Size: px

Start display at page:

Download "Course CLD209.1x Microsoft Exchange Server 2016 Hybrid Topologies"

Matthew Barnett
6 years ago
Views:

1 Course CLD209.1x Microsoft Exchange Server 2016 Hybrid Topologies Getting a lab for the lab exercises The lab exercises in this course require you to log on to the Microsoft Labs Online environment to do the lab steps in a real Exchange Server 2016 environment. Please follow the instructions in the Student Lab User Guide on how to access Microsoft virtual hands-on labs from within edx. NOTE: During this lab you will see many references to AdatumXXYYZZ and XXYYZZa, you will need to replace these values with your uniquely assigned values in the lab interface. If you just copy and paste the command to the lab interface the steps in the exercises will fail. For example, your assigned Office 365 Blob could be AdatumAB1234 and your assigned UPN could be AB1234a. In this case your domain will be AB1234a.xtremelabs.us Lab 1: Setup an Office 365 trial tenant. You have Exchange Server 2016 deployed in a lab. In this lab you have to sign up for a new trial tenant in Office 365 to setup a hybrid topology with your Exchange 2016 server. Create the tenant account 1. On LON-DC1, log on as ADATUM\Administrator and password Pa$$w0rd. 2. Open Internet Explorer, click on the gear icon ( ) in the top right corner. 3. Choose Internet Options. 4. Click on the Security tab. 5. Click Internet. Click Custom Level. Scroll down and under the Downloads section, under File download, select Enable. Click OK 6. Click Yes to confirm you want to change the settings for this zone. 7. Click on Trusted sites and click on Sites. 8. Type in click on Add. 9. Type in click on Add. 10. Type in click on Add (where xxyyzza is your unique UPN name). 11. Type in click on Add and Close. 12. Click Ok. 13. Go to the following URL: Click Free trial. 15. For Step 1, in the Welcome, let s get to know you page, complete the following fields. Regardless of your location, use the following information: Country: United Kingdom First name: Holly Last name: Dickson

2 Business address: (use your new Windows Live account that you created for this course) Business phone number: Your mobile phone number, including international code for your current country Company name: A. Datum Organization size: people 16. Click on Just one more step to continue. 17. For Step 2, you have to create a unique domain for the Company name to use in the course. Use the Office 365 blob name provided in the lab interface. For the rest of the fields, use the following information: User name: Holly Company name: AdatumXXYYZZ (where XXYYZZ is your unique Adatum O365 Blob) Password: Pa$$w0rd Confirm password: Pa$$w0rd 18. Click Create my account. 19. For Step 3, you have to confirm your identity by using your mobile phone. Select Text me, from the drop-down box, select the code for the country that you are now in. 20. In the Phone number box, enter your correct mobile phone number and click Text me. 21. When you receive the confirmation text on your mobile phone, enter the code provided in the Enter your verification code box and click Next. 22. Wait until the Office 365 tenant is provisioned, and then click You re ready to go 23. Click the Admin tile to go to the Office 365 admin center. 24. On the update your admin contact info page, provide your phone number and Microsoft account address to verify your account. Note: If you are connected to the previous Office 365 admin center when you connect to Office 365, click the banner at the top of the page to connect to the new admin center. Add the custom domain 1. If not signed in already, on LON-DC1 log on as ADATUM\Administrator and password Pa$$w0rd. 2. Run the following commands in PowerShell to create a new Zone in DNS (remember to change xxyyzza to your unique UPN name): dnscmd /zoneadd xxyyzza.xtremelabs.us /DsPrimary 3. Open Internet Explorer and then browse to login.microsoftonline.com. 4. If necessary, sign in as Holly@AdatumXXYYZZ.onmicrosoft.com with the password Pa$$w0rd (where XXYYZZ is your unique Adatum O365 Blob). 5. Click Admin, 6. In the left-hand navigation, go to Settings or select the gear icon ( ) and select Domains. 7. Select Add domain to start the domain setup wizard. 8. In the text box on the Enter a domain you own, enter your domain name in the form of XXYYZZa.xtremelabs.us (where XXYYZZa is your unique UPN name). 9. Click Next. 10. Use a TXT record to verify you own this domain.

3 11. Write down the TXT record shown in the TXT value column. This entry will be similar to MS=msXXXXXXXX. Record this value below: MS= 12. Open DNS Manager, expand the DNS zone called xxyyzza.xtremelabs.us (where xxyyzza is your unique UPN name). 13. Right-click xxyyzza.xtremelabs.us, and click Other New Records (where xxyyzza is your unique UPN name). 14. Under Select a resource record type, scroll down to Text (TXT), and click Create Record. 15. In the New Resource Record box, leave the Record name field blank. 16. In the Text field, enter MS=msXXXXXXXX that you recorded in Step Click OK to create the record. 18. In the Resource Record type dialog box, click Done. 19. Switch back to the Office 365 admin center, click Verify. 20. Next click the check box Skip this step and click on Skip. 21. Click Finish to complete the new Domain setup. 22. On LON-DC1, switch back to the DNS Manager. 23. In DNS Manager, expand Forward Lookup Zones, expand xxyyzza.xtremelabs.us (where xxyyzza is your unique UPN name) zone, 24. Create following records: Host record (A) (same as parent folder) pointing to <The IP Address given in the lab interface> Mail Exchanger (MX) - xxyyzza.xtremelabs.us (where xxyyzza is your unique UPN name). Alternatively, you can run the following commands in PowerShell to add the DNS records (remember to change xxyyzza to your unique UPN name and to your unique IP address provided to you): dnscmd /recordadd xxyyzza.xtremelabs.us '@' A dnscmd /recordadd xxyyzza.xtremelabs.us '@' MX 10 xxyyzza.xtremelabs.us

4 Lab 2: Setup Azure AD Connect. You now have trial tenant setup and are ready to start the directory synchronization process. In this lab exercise you to first make sure your local Active Directory is ready to start the directory synchronization process by adding a custom domain to the forest and configuring Exchange to use the new custom domain. Configure UPN 1. On LON-DC1, log on as ADATUM\Administrator and password Pa$$w0rd. 2. Using Windows PowerShell, update the UPN suffix for the domain and on the UPN on every user in AD DS (where xxyyzza is your unique UPN name) for the domain name. To do this, run the following commands (remember to change xxyyzza to your unique UPN name): Set-ADForest -identity "adatum.com" Get-ADUser Filter * -Properties SamAccountName foreach { Set-ADUser $_ UserPrincipalName ($_.SamAccountName + "@xxyyzza.xtremelabs.us" )} 3. On LON-EX1, log on as ADATUM\Administrator and password Pa$$w0rd. 4. Open the Exchange Management Shell and run the following commands to enable Exchange for the lab domain (remember to change xxyyzza to your unique UPN name): New-SendConnector -Name "To Internet" -AddressSpaces "*" New-AcceptedDomain -DomainName "xxyyzza.xtremelabs.us" -DomainType Authoritative -Name "A.Datum" Set- AddressPolicy -Identity "Default Policy" -EnabledPrimarySMTPAddressTemplate "SMTP:%m@xxyyzza.xtremelabs.us" Update- AddressPolicy -Identity "Default Policy" Get-ExchangeCertificate Where-Object { $_.RootCAType -eq "ThirdParty" } EnableExchangeCertificate -Services POP,IMAP,SMTP,IIS 5. Press Enter to accept the operation to Overwrite the existing default SMTP certificate. Continue to enter the following command in the Exchange Management Shell (remember to change xxyyzza to your unique UPN name): Set-OwaVirtualDirectory -Identity "LON-EX1\OWA (Default Web Site)" -ExternalUrl Set-EcpVirtualDirectory -Identity "LON-EX1\ECP (Default Web Site)" -ExternalUrl Set-ActivesyncVirtualDirectory -Identity "LON-EX1\Microsoft-Server-ActiveSync (Default Web Site)" -ExternalUrl Set-WebServicesVirtualDirectory -Identity "LON-EX1\EWS (Default Web Site)" -ExternalUrl -InternalUrl

5 Set-OabVirtualDirectory -Identity "LON-EX1\OAB (Default Web Site)" -ExternalUrl Set-OutlookAnywhere -Identity "LON-EX1\Rpc (Default Web Site)" -ExternalHostname xxyyzza.xtremelabs.us -ExternalClientsRequireSsl $true ExternalClientAuthenticationMethod NTLM Set-OutlookProvider EXPR -CertPrincipalName:*.xtremelabs.us Enable Directory Synchronization 1. On LON-DC1, log on as ADATUM\Administrator and password Pa$$w0rd. 2. Open Internet Explorer and then browse to login.microsoftonline.com. 3. Sign in as with the password Pa$$w0rd (where XXYYZZ is your unique Adatum O365 Blob). 4. Click Admin, 5. In the left-hand navigation, select the user s icon ( ) and select Active users, click on More on the top menu and choose Directory Synchronization. 6. Click on the Go to the DirSync readiness wizard. 7. On the next screen choose for the number of users you will move to the cloud, click Next. 8. Click Next on the Sync your local directory with the cloud screen. 9. Click continue manually to skip checking your directory. The local Active Directory for the lab does not have any issues at this time, but it will be wise to check your Active Directory in your environment before you configure directory synchronization. 10. Click Next to configure the domains. 11. Click Ok I ve added and verified all my domains to continue. 12. Click Next to continue the process (Skip IdFix). 13. Click on Download to go to the download page for Azure AD Connect. 14. Click Download again to download Azure AD Connect application. 15. Click Save and Run the download. Setup Azure AD Connect 1. On the Welcome screen, click in the check box I agree to the license terms and privacy notice. 2. Click on Continue. 3. Click on Use express settings. 4. On the Connect to Azure AD screen enter your Office 365 admin username holly@adatumxxyyzz.onmicrosoft.com with password Pa$$w0rd (where XXYYZZ is your unique Adatum O365 Blob) and click Next. 5. On the Connect to AD DS screen enter your domain administrator ADATUM\Administrator and password Pa$$w0rd and click Next. 6. Click Next on the Azure AD sign-in configuration screen. 7. On the Ready to configure screen click the check box for Exchange Hybrid deployment and click on Install. 8. Wait for the installation to complete. 9. Click on Exit. 10. Click on Start, search for the Synchronization Service application and open it.

6 11. Monitor the synchronization process by looking at the operations tab. Wait for the Export profile to complete (Status: success) 12. Return to the Run Azure Active Directory Connect screen in Internet Explorer and click on Next. Note: The web page should say Directory synchronization enabled. If it doesn t then refresh the page to see the that the Directory synchronization is enabled. If status does not update continue to the next step if the export was successful. 13. Click Next on the Make sure sync worked as expected screen. 14. Click Next on the Activate users screen. 15. Click Finish on the You re all set up screen.

7 Lab 3: Implement the Hybrid Configuration Wizard. You now have directory synchronization configured and ready to setup Exchange for the Hybrid Configuration wizard. Setup Hybrid Configuration Wizard 1. On LON-EX1, log on as ADATUM\Administrator and password Pa$$w0rd. 2. Open Internet Explorer, click on the gear icon ( ) in the top right corner. 3. Choose Internet Options. 4. Click on the Security tab. 5. Click Internet. Click Custom Level. Scroll down and under the Downloads section, under File download, select Enable. Click OK 6. Click Yes to confirm you want to change the settings for this zone. 7. Click on Trusted sites and click on Sites. 8. Type in click on Add 9. Type in click on Add 10. Type in click on Add (where XXYYZZ is your unique Office 365 Blob name). 11. Type in click on Add and Close. (where xxyyzza is your unique UPN name). 12. Click on the Privacy tab. 13. Move the slider down to Low. 14. Click Ok. 15. Enter to the following URL: (where xxyyzza is your unique UPN name). 16. Sign in as ADATUM\Administrator and password Pa$$w0rd. 17. Click on hybrid on the left side of the Exchange Admin Center. 18. Click on configure. 19. Next click on sign in the Office 365. If necessary, sign in using holly@adatumxxyyzz.onmicrosoft.com and password Pa$$w0rd (where XXYYZZ is your unique Adatum O365 Blob). 20. Click on configure to start the hybrid configuration wizard. 21. On the Microsoft Office 365 Hybrid Configuration Wizard Download screen click on click here to start the Hybrid Configuration Wizard setup. 22. Click on Install and click on Run. 23. Click on next. 24. Wait for the server detection to complete and then click on next. 25. On the next screen enter your Office 365 tenant administrator account name and password: holly@adatumxxyyzz.onmicrosoft.com (where XXYYZZ is your unique Adatum O365 Blob) and password Pa$$w0rd and click on next. 26. Click next. 27. Click on enable to allow federation trusts. Wait for the task to complete and write down the required value given in the Hybrid Configuration Wizard. 28. Switch to LON-DC1 and open the DNS Manager.

8 29. In DNS Manager, expand Forward Lookup Zones, expand xxyyzza.xtremelabs.us (where xxyyzza is your unique UPN name) zone, 30. Right click on list of record and choose Other New Records 31. For the resource record type select Text (TXT) and select Create Record 32. For the new text record enter the value just written from the hybrid configuration wizard in the Text field and click Ok. 33. Click Done. 34. Switch back to LON-EX Click on the check box I have created a TXT record for each token in DNS. Then click on verify domain ownership. 36. Verify that Configure my Client Access and Mailbox server for secure mail transport (typical) is selected and then click on next. 37. Choose LON-EX1 for the Receive Connector Configuration and click on next. 38. Choose LON-EX1 for the Send Connector Configuration and click on next. 39. Choose the *.xtremelabs.us certificate for the Transport Certificate and click on next. 40. Type xxyyzza.xtremelabs.us (where xxyyzza is your unique UPN name) for the Organization FQDN and click on next. 41. Click on update. 42. Wait for the configuration process to complete. 43. Click on close. 44. Sign out and close Internet Explorer. Use the Hybrid topology 1. On LON-DC1, log on as ADATUM\Administrator and password Pa$$w0rd. 2. Open Internet Explorer and then browse to 3. Sign in as Holly@AdatumXXYYZZ.onmicrosoft.com (where XXYYZZ is your unique Adatum O365 Blob) with the password Pa$$w0rd. 4. If necessary, select your language and time zone. Click Save. 5. Create a new test and send it to April Reagan. 6. Open a new tab in Internet Explorer and browse to (where xxyyzza is your unique UPN name). 7. Sign in as ADATUM\April and password Pa$$w0rd. 8. Select your language and time zone. Click Save. 9. Read your test message from Holly and reply to the message. 10. Return to Holly s mailbox and check that you have received the reply. 11. Sign out of both mailboxes and close Internet Explorer. Assign license to a user 1. On LON-DC1, log on as ADATUM\Administrator and password Pa$$w0rd. 2. Open Internet Explorer and then browse to 3. Sign in as Holly@AdatumXXYYZZ.onmicrosoft.com (where XXYYZZ is your unique Adatum O365 Blob) with the password Pa$$w0rd. 4. Click Admin, In the left-hand navigation, select the user s icon ( ) and select Active users. 5. Select April Reagan and click on Edit next to Product licenses on the right.

9 6. Choose United Kingdom as the location. 7. Click next to the Office 365 Enterprise E3 to enable the license and click on Assign. 8. Click Close and Close again. 9. Repeat steps 5 to 8 for user Brad Sutton. 10. Sign out and close Internet Explorer. Start a migration 1. On LON-EX1, log on as ADATUM\Administrator and password Pa$$w0rd. 2. Open Internet Explorer and then browse to (where xxyyzza is your unique UPN name) and sign in as ADATUM\Administrator and password Pa$$w0rd. 3. Go to recipients and find April Reagan. 4. On the right scroll down to find Move Mailbox To Exchange Online. 5. An information pop-up screen will ask to sign in to Office Sign in as Holly@AdatumXXYYZZ.onmicrosoft.com (where XXYYZZ is your unique Adatum O365 Blob) with the password Pa$$w0rd. Note: If you get a pop-up critical error message, click Ok on the error message. Then click on hybrid on the left-side and click on modify. Sign in if required. Ensure that Enterprise is selected in the top left corner, before you continue to the next step. If it is not selected at the top, close your browser and start again at step 1 of this exercise. 7. Go to recipients again and find April Reagan. 8. On the right scroll down to find Move Mailbox To Exchange Online again. 9. Enter ADATUM\Administrator as the account with privileges and enter the password Pa$$w0rd. 10. Click Next. 11. On the next screen accept Remote MRS proxy server as xxyyzza.xtremelabs.us (where xxyyzza is your unique UPN name) and click on Next. 12. Use First migration as the migration batch name and click Next. 13. Select Automatically complete the migration batch and click on New. 14. On the information window, Do you want to go to the migration dashboard to see the status of your migration batch? Click Yes. 15. Monitor the migration. It will start on Syncing and eventually go to Completed. 16. Sign out of Office 365 and close Internet Explorer. Sign and use a newly migrated mailbox 1. On LON-EX1, log on as ADATUM\Administrator and password Pa$$w0rd. 2. Open Internet Explorer and then browse to and sign in as April@xxyyzza.xtremelabs.us (where xxyyzza is your unique UPN name) and password Pa$$w0rd. 3. Select your language and time zone. Click Save. 4. Create a new test and send it to Brad Sutton. 5. Open a new tab in Internet Explorer and browse to (where xxyyzza is your unique UPN name) sign in as ADATUM\Brad and password Pa$$w0rd 6. Select your language and time zone. Click Save. 7. Read your test message from April and reply to the message. 8. Return to April s mailbox and check that you have received the reply. 9. Click on the top menu in the browser ( ) and choose the calendar. 10. Create a new meeting with a subject Test.

10 11. Add Brad Sutton as a meeting attendee, then click on Scheduling Assistant. 12. The display of both calendars will show that both users are free. Click Ok to accept the time and then click on Send to send the meeting request to Brad. 13. Go to Brad s mailbox and Accept the meeting request and choose Send the response now. 14. Go back to April s mailbox and create another meeting request with a subject Test Add Brad Sutton as a meeting attendee again, then click on Scheduling Assistant. Note: Brad s calendar should now show him busy for the first meeting request. 16. Click Ok to accept the time and then click on Send to send the meeting request to Brad. 17. Sign out of both mailboxes and close Internet Explorer. Configuring OneDrive for Business attachments for on-premises mailboxes 1. On LON-EX1, log on as ADATUM\Administrator and password Pa$$w0rd. 2. Open the Exchange Management Shell and run the following commands to enable Exchange for the lab domain (Remember to change AdatumXXYYZZ to your unique O365 Blob name): Set-OwaMailboxPolicy Default -InternalSPMySiteHostURL -ExternalSPMySiteHostURL Set-CasMailbox Brad -OwaMailboxPolicy Default Restart-WebAppPool MSExchangeOWAAppPool 3. Open Internet Explorer and browse to (where AdatumXXYYZZ to your unique O365 Blob name) 4. Sign in as brad@xxyyzza.xtremelabs.us and password Pa$$w0rd (where xxyyzza is your unique UPN name). 5. On the Welcome to OneDrive for Business splash screen click Next to open the OneDrive for Business site. 6. Open a new tab and browse (where xxyyzza is your unique UPN name) 7. Sign in as ADATUM\Brad and password Pa$$w0rd 8. Use Wordpad on LON-EX1 to create a new test document and save the file as Cloud Attachment.docx in the Documents folder. 9. Create a new test to April Reagan and click Attach, Note: If the attachment screen does not show Attachments just got better with OneDrive for Business, then refresh the browser and go back to step 9 to create a new message. If this still does not work, then go back to step 1 and run the configuration steps again. 10. Click Computer and choose Cloud Attachment.docx. 11. Click Upload and attach as a OneDrive file. 12. Click Send. 13. Go back to the OneDrive for Business tab in Internet Explorer. Refresh the page and notice the new folder called Attachments. 14. Open the Attachments folder and notice the Cloud Attachment.docx document is shared to April Reagan. 15. Sign out of the OneDrive for Business, the mailbox and close Internet Explorer. 16. On LON-DC1, log on as ADATUM\Administrator and password Pa$$w0rd.

11 17. Open Internet Explorer and then browse to and sign in as (where xxyyzza is your unique UPN name) and password Pa$$w0rd. 18. Click on the Cloud Attachment.docx document from Brad to view it. 19. Sign out of the mailbox and close Internet Explorer. End of lab

Course CLD221x: Enabling Office 365 Clients

Course CLD221x: Enabling Office 365 Clients Student Lab Manual Lab Design There are five exercises in this lab, each of which contains one or more tasks. For a successful outcome to the lab, the exercises