OFFICIAL MICROSOFT LEARNING PRODUCT 10135B Lab Instructions and Lab Answer Key: Configuring, Managing and Troubleshooting Microsoft Exchange Server

Transcription

1 OFFICIAL MICROSOFT LEARNING PRODUCT 10135B Lab Instructions and Lab Answer Key: Configuring, Managing and Troubleshooting Microsoft Exchange Server 2010 Service Pack 2

2 Information in this document, including URL and other Internet Web site references, is subject to change without notice. Unless otherwise noted, the example companies, organizations, products, domain names, addresses, logos, people, places, and events depicted herein are fictitious, and no association with any real company, organization, product, domain name, address, logo, person, place or event is intended or should be inferred. Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights under copyright, no part of this document may be reproduced, stored in or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording, or otherwise), or for any purpose, without the express written permission of Microsoft Corporation. Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property. The names of manufacturers, products, or URLs are provided for informational purposes only and Microsoft makes no representations and warranties, either expressed, implied, or statutory, regarding these manufacturers or the use of the products with any Microsoft technologies. The inclusion of a manufacturer or product does not imply endorsement of Microsoft of the manufacturer or product. Links may be provided to third party sites. Such sites are not under the control of Microsoft and Microsoft is not responsible for the contents of any linked site or any link contained in a linked site, or any changes or updates to such sites. Microsoft is not responsible for webcasting or any other form of transmission received from any linked site. Microsoft is providing these links to you only as a convenience, and the inclusion of any link does not imply endorsement of Microsoft of the site or the products contained therein Microsoft Corporation. All rights reserved. Microsoft and the trademarks listed at /Trademarks/EN-US.aspx are trademarks of the Microsoft group of companies. All other trademarks are property of their respective owners Product Number: 10135B Part Number: X Released: 05/2012

3 Lab Instructions: Deploying Microsoft Exchange Server Module 1 Lab Instructions: Deploying Microsoft Exchange Server 2010 Contents: Lab A: Installing Exchange Server 2010 Exercise 1: Evaluating Requirements for an Exchange Server Installation 3 Exercise 2: Preparing for an Exchange Server 2010 Installation 4 Exercise 3: Installing Exchange Server Lab B: Verifying an Exchange Server 2010 Installation Exercise 1: Verifying an Exchange Server 2010 Installation 6

4 2 Lab Instructions: Deploying Microsoft Exchange Server 2010 Lab A: Installing Exchange Server 2010 Lab Setup For this lab, you will use the available virtual machine environment. Before you begin the lab, you must: 1. On the host computer, click Start, point to Administrative Tools, and then click Hyper-V Manager. 2. In Hyper-V Manager, click 10135B--NYC-DC1, and in the Actions pane, click Start B- NYC-DC1: Domain controller in the Contoso.com domain. 3. In the Actions pane, click Connect. Click the CTRL+ALT+DELETE button in the top-left corner of the Virtual Machine Connection window. 4. Log on using the following credentials: User name: Administrator Password: Pa$$w0rd Domain: Contoso 5. Repeat these steps to start, and log on to the 10135B-NYC-SVR1 virtual machine B- NYC-SVR1: Member server in the Contoso.com domain. Lab Scenario You are working as a messaging administrator in Contoso Ltd. Your organization is preparing to install its first Exchange Server 2010 server. Contoso Ltd. is a large multinational organization that includes offices in Seattle, Washington, in the United States, and in Tokyo, Japan. Contoso Ltd. does not have a previous version of Exchange Server deployed so you do not have to upgrade a previous messaging system. Before installing Exchange Server 2010, you must verify that the Active Directory environment is ready for the installation. You also must verify that all computers that will run Exchange Server 2010 meet the prerequisites for installing Exchange.

5 Lab Instructions: Deploying Microsoft Exchange Server Exercise 1: Evaluating Requirements for an Exchange Server Installation Scenario The Active Directory administrators at Contoso Ltd. are testing the Exchange Server 2010 deployment by deploying a domain controller in a test environment. The server administration team has deployed a Windows Server 2008 R2 server that you can use to deploy the first Exchange Server 2010 server in the test organization. You need to verify that the Active Directory environment and the server meet all prerequisites for installing Exchange Server Use the following checklist to verify that the prerequisites are met: Prerequisite Active Directory domain controllers: Windows Server 2003 SP2 or later Active Directory domain and forest functional level: Windows Server 2003 or higher DNS requirements Exchange Server 2010 schema changes Active Directory Domain Services (AD DS) management tools Microsoft.NET Framework 3.5 or later Windows Remote Management (WinRM) Windows PowerShell Version 2 Achieved? Yes or No Yes or No Yes or No Yes or No Yes or No Yes or No Yes or No Yes or No 2010 Office System Converter: Microsoft Filter Pack Yes or No Web Server (IIS) server role along with the following role services: ISAPI Extensions IIS 6 Metabase Compatibility IIS 6 Management Console Basic Authentication Windows Authentication Digest Authentication Dynamic Content Compression.NET Extensibility Windows Server 2008 features WCF HTTP Activation RPC over HTTP Proxy Yes or No Yes or No The main tasks for this exercise are: 1. Evaluate the Active Directory requirements. 2. Evaluate the DNS requirements. 3. Evaluate the server requirements.

6 4 Lab Instructions: Deploying Microsoft Exchange Server 2010 Task 1: Evaluate the Active Directory requirements 1. On NYC-DC1, evaluate whether the domain controller requirements are met. 2. Evaluate whether the domain and forest functional level requirements are met. 3. Use Adsiedit.msc to evaluate whether the Exchange schema changes are applied. Task 2: Evaluate the DNS requirements On NYC-SVR1, use Ipconfig, Ping, and NSLookup to evaluate DNS name resolution functionality. Task 3: Evaluate the server requirements 1. On NYC-SVR1, evaluate whether the required Windows Server 2008 features, including the required AD DS administration tools, are installed. 2. Evaluate whether the Microsoft Internet Information Services (IIS) components are installed. 3. Evaluate whether the prerequisite software is installed. Results: After this exercise, you should have evaluated whether your organization meets the AD DS, DNS, and server requirements for installing Exchange Server You should have identified the additional components that need to be installed or configured to meet the requirements. Exercise 2: Preparing for an Exchange Server 2010 Installation Scenario Now that you have identified which prerequisites are not met in the current AD DS and server configuration, you need to update the environment to meet them. The main tasks for this exercise are: 1. Install the Windows Server 2008 server roles and features. 2. Prepare AD DS for the Exchange Server 2010 installation. Task 1: Install the Windows Server 2008 server roles and features 1. On NYC-SVR1, in Server Manager, install the prerequisite server roles and features for Exchange Server Configure the Net.Tcp Port Sharing Service to start Automatically.

7 Lab Instructions: Deploying Microsoft Exchange Server Task 2: Prepare AD DS for the Exchange Server 2010 installation 1. In Hyper-V Manager, connect C:\Program Files\Microsoft Learning \10135\Drives\Exchange2010SP2.iso as the DVD drive for NYC-SVR1. 2. From a command prompt, run the Exchange Server setup program with the /PrepareAD parameter. Configure an Exchange organization name of Contoso. Results: After this exercise, you should have prepared the AD DS and server configuration for the Exchange Server 2010 installation. Exercise 3: Installing Exchange Server 2010 Scenario After you prepare the environment, continue with the Exchange Server 2010 server installation. The main task for this exercise is: Install Microsoft Exchange Server Task 1: Install Microsoft Exchange Server Start the Exchange Server 2010 installation. 2. Perform a Typical Exchange Server Installation. 3. Choose to automatically install required roles and features. 4. Choose to enable access for Outlook 2003 or Entourage clients. Results: After this exercise, you should have prepared the AD DS and server configuration for the Exchange Server 2010 installation.

8 6 Lab Instructions: Deploying Microsoft Exchange Server 2010 Lab B: Verifying an Exchange Server 2010 Installation Lab Setup For this lab, you will use the available virtual machine environment. Before you begin the lab, you must: 1. On the host computer, click Start, point to Administrative Tools, and then click Hyper-V Manager. 2. Ensure that the 10135B-NYC-DC1 and the 10135B-NYC-SVR1 virtual machines are running B- NYC-DC1: Domain controller in the Contoso.com domain B- NYC-SVR1: Member server in the Contoso.com domain. 3. If required, connect to the virtual machines. Lab Scenario You have completed the installation of the first Exchange Server at Contoso Ltd. You now need to verify that the installation completed successfully. You also should ensure that the installation meets the best practices that Microsoft suggests. Exercise 1: Verifying an Exchange Server 2010 Installation The main tasks for this exercise are: 1. View the Exchange Server services. 2. View the Exchange Server folders. 3. Create a new user, and send a test message. 4. Run the Exchange Server Best Practices Analyzer Tool.

9 Lab Instructions: Deploying Microsoft Exchange Server Task 1: View the Exchange Server services 1. Open the Services console. 2. Review the status for each Exchange Server service. Task 2: View the Exchange Server folders. Using Windows Explorer, browse to C:\Program Files\Microsoft\Exchange Server\v14. This list of folders includes ClientAccess, Mailbox, and TransportRoles. The three roles were installed as part of the typical setup. Task 3: Create a new user, and send a test message 1. Open the Exchange Management Console. 2. Under Recipient Configuration, create a new mailbox with a new user account named TestUser and a password of Pa$$w0rd. 3. Using Internet Explorer, open 4. Log on as TestUser, and send a message to Administrator. 5. Log on to Outlook Web App as Administrator, and verify that the message was delivered. Task 4: Run the Exchange Server Best Practices Analyzer tool 1. Start the Exchange Server Best Practices Analyzer. 2. Run a Health Check scan with a name of Post-Installation Test. Scan only NYC-SVR1. 3. Review the information in the Exchange Server Best Practices Analyzer report. Results: After this exercise, you should have verified that the Exchange Server 2010 server installation completed successfully. To prepare for the next module When you finish the lab, revert the virtual machines back to their initial state. To do this, complete the following steps: 1. On the host computer, start Hyper-V Manager. 2. Right-click the virtual machine name in the Virtual Machines list, and then click Revert. 3. In the Revert Virtual Machine dialog box, click Revert. 4. In the Virtual Machines pane, click 10135B-VAN-DC1, and then in the Actions pane, click Start. 5. To connect to the virtual machine for the next module s lab, click 10135B-VAN-DC1, and then in the Actions pane, click Connect. Important Start the VAN-DC1 virtual machine first, and ensure that it is fully started before starting the other virtual machines. 6. Wait for 10135B-VAN-DC1 to start, and then start 10135B-VAN-EX1. Connect to the virtual machine. 7. Wait for 10135B-VAN-EX1 to start, and then start 10135B-VAN-EX3. Connect to the virtual machine.

10 Lab Instructions: Configuring Mailbox Servers 1 Module 2 Lab Instructions: Configuring Mailbox Servers Contents: Exercise 1: Configuring Mailbox Databases 3 Exercise 2: Configuring Public Folders 4

11 2 Lab Instructions: Configuring Mailbox Servers Lab: Configuring Mailbox Servers Lab Setup Important If required, start the 10135B-VAN-DC1 virtual machine first, and ensure that it is fully started before starting the other virtual machines. For this lab, you will use the available virtual machine environment. Before you begin the lab, you must: 1. On the host computer, click Start, point to Administrative Tools, and click Hyper-V Manager. 2. Ensure that the 10135B-VAN-DC1, 10135B-VAN-EX1, and the 10135B-VAN-EX3 virtual machines are running B-VAN-DC1: Domain controller in the Adatum.com domain 10135B-VAN-EX1: Exchange 2010 server in the Adatum.com domain 10135B-VAN-EX3: Exchange 2010 server in the Adatum.com domain 3. If required, connect to the virtual machines. Log on to the computers as Adatum\Administrator, using the password Pa$$w0rd. Lab Scenario You are a new messaging administrator at A. Datum Corporation, and your manager has left instructions indicating that you need to create and configure a database for the executive group, and then move the existing database for the accounting group to a new location. Additionally, you need to add an additional public folder database, and then replicate data to it.

12 Lab Instructions: Configuring Mailbox Servers 3 Exercise 1: Configuring Mailbox Databases Scenario You must configure the executive s database so that the mailbox does not send or receive messages after the mailbox size reaches 1,024 MB. Additionally, you should ensure that a warning is sent to users if their mailbox reaches 850 MB. The main tasks for this exercise are: 1. Create a new database for the Executive mailboxes. 2. Configure the Executive mailbox database with appropriate limits. 3. Move the existing Accounting database to a new location. Task 1: Create a new database for the Executive mailboxes 1. On VAN-EX1, open the Exchange Management Console. 2. Create a new database named Executive on VAN-EX1. 3. Store database files in C:\Mailbox\Executive. 4. Store log files in C:\Mailbox\Executive. Task 2: Configure the Executive mailbox database with appropriate limits Configure the limits on the Executive database: Prohibit send and receive: 1024 MB Issue warning: 850 MB Task 3: Move the existing Accounting database to a new location 1. Move the Accounting database files. 2. Store database files in C:\Mailbox\Accounting. 3. Store log files in C:\Mailbox\Accounting. Results: After this exercise, you should have created a new database, set the specified limits, and moved the existing Accounting database to a new folder.

13 4 Lab Instructions: Configuring Mailbox Servers Exercise 2: Configuring Public Folders Scenario Before creating a new public folder database and replicating it, you must check the numbers of items and size in the Executive public folder so that you can later verify that the replication was successful. The main tasks for this exercise are: 1. Check Executives public folder statistics. 2. Create a public folder database on VAN-EX3. 3. Add a replica of the Executives public folder on VAN-EX3. 4. Verify replication between VAN-EX1 and VAN-EX3. Task 1: Check Executives public folder statistics 1. On VAN-EX3, open the Exchange Management Console, and in the Toolbox node, open the Public Folder Management Console. 2. In the Public Folder Management Console, connect to VAN-EX1, and view the number of items and size in the Executives public folder on VAN-EX1. Write down Total Items Write down Size (KB) Task 2: Create a public folder database on VAN-EX3 Create a new public folder database on VAN-EX3 named PF-VAN-EX3. Store database files in C:\Mailbox\PF-VAN-EX3\PF-VAN-EX3.edb. Store log files in C:\Mailbox\PF-VAN-EX3. Task 3: Add a replica of the Executives public folder on VAN-EX3 Add PF-VAN-EX3 as a replica for the Executives public folders, and then wait for replication to complete. Note It can take up to 15 minutes for replication to complete. Task 4: Verify replication between VAN-EX1 and VAN-EX3 Verify the number and size of items in the Executives public folder on VAN-EX3. Results: After this exercise, you should have created a new public folder database on VAN-EX3 and added replicas for each public folder.

14 Lab Instructions: Configuring Mailbox Servers 5 To prepare for the next module When you finish the lab, revert the virtual machines to their initial state. To do this, complete the following steps: 1. On the host computer, start Hyper-V Manager. 2. Right-click the virtual machine name in the Virtual Machines list, and then click Revert. 3. In the Revert Virtual Machine dialog box, click Revert. 4. Repeat this step for every virtual machine that is running. 5. In the Virtual Machines pane, click 10135B-VAN-DC1, and then in the Actions pane, click Start. 6. To connect to the virtual machine for the next module s lab, click 10135B-VAN-DC1, and then in the Actions pane, click Connect. Important Start the VAN-DC1 virtual machine first, and ensure that it is fully started before starting the other virtual machines. 7. Wait for VAN-DC1 to start, and then start VAN-EX1. Connect to the virtual machine. 8. Wait for VAN-EX1 to start, and then start VAN-CL1. Connect to the virtual machine.

15 Lab Instructions: Managing Recipient Objects 1 Module 3 Lab Instructions: Managing Recipient Objects Contents: Exercise 1: Managing Recipients 3 Exercise 2: Configuring Address Policies 4 Exercise 3: Configuring Address Lists 5 Exercise 4: Performing Bulk Recipient Management Tasks 7

16 2 Lab Instructions: Managing Recipient Objects Lab: Managing Exchange Recipients Lab Setup For this lab, you will use the available virtual machine environment. Before you begin the lab, you must: 1. On the host computer, click Start, point to Administrative Tools, and click Hyper-V Manager. 2. Ensure that the 10135B-VAN-DC1, 10135B-VAN-EX1, and 10135B-VAN-CL1 virtual machines are running B-VAN-DC1: Domain controller in the Adatum.com domain B-VAN-EX1: Exchange 2010 server in the Adatum.com domain B-VAN-CL1: Windows 7 client computer in the Adatum.com domain. If required, connect to the virtual machines. Log on to the computers as Adatum\Administrator, using the password Pa$$w0rd. Lab Scenario You are the messaging administrator for A. Datum Corporation. Your company is purchasing a new company called Adventure Works. Adventure Works recipients will need to maintain a separate domain and address list. You also must create new mailboxes for the new department s employees.

17 Lab Instructions: Managing Recipient Objects 3 Exercise 1: Managing Recipients Scenario Your manager wants you to complete several tasks in preparation for the Adventure Works acquisition project. The main tasks for this exercise are: 1. Create and configure a mailbox for called Adventure Works Questions. 2. Create a resource mailbox and configure auto-accept settings for the Adventure Works Project Room. 3. Move George Schaller s mailbox to VAN-EX1\Mailbox Database Create and configure a mail-enabled contact for Ian Palangio at Woodgrove Bank. 5. Create a moderated distribution list for Adventure Works Project, and delegate an administrator. 6. Create a room list distribution group for the Adventure Works meeting rooms. 7. Verify that changes were completed successfully. Task 1: Create and configure a mailbox called Adventure Works Questions 1. On VAN-EX1, open the Exchange Management Console. 2. Create a new mailbox named Adventure Works Questions in the Mailbox Database 1 database. Configure a user logon name of AdventureWksQ and a password of Pa$$w0rd. 3. Configure the mailbox with a Company name of Adventure Works. 4. Assign George Schaller full access to the Adventure Works Questions mailbox. Task 2: Create a resource mailbox, and configure auto-accept settings for the ProjectRoom 1. In Exchange Management Console, create a new room mailbox named ProjectRoom in the Mailbox Database 1 database. Configure a user logon name of ProjectRoom. 2. Enable the Booking Attendant on ProjectRoom. 3. Configure the ProjectRoom with the Company name of Adventure Works. Task 3: Move George Schaller s mailbox to VAN-EX1\Mailbox Database 1 In Exchange Management Console, create a new local move request to move George Schaller s mailbox to VAN-EX1\Mailbox Database 1. Task 4: Create and configure a mail-enabled contact for Ian Palangio at Woodgrove Bank In Exchange Management Console, create a new mail-enabled contact for Ian Palangio, using an alias of IanPalangioWB and an address of ian.palangio@woodgrovebank.com.

18 4 Lab Instructions: Managing Recipient Objects Task 5: Create a moderated distribution list for the Adventure Works Project, and delegate an administrator 1. In Exchange Management Console, create a new Distribution group called Adventure Works Project with an alias of AdventureWorksProject. 2. Add the following recipients to the Adventure Works Project group: George Schaller Ian Palangio Wei Yu Paul West 3. Specify George Schaller as the group moderator, and enable moderation of all messages. Task 6: Create a room list distribution group for the Adventure Works meeting rooms 1. On VAN-EX1, if required, open the Exchange Management Shell. 2. At the command prompt, type $Members=Get-User -Filter {(RecipientTypeDetails -eq "RoomMailbox") -and (Company -eq "Adventure Works")} and press Enter. 3. At the command prompt, type New-DistributionGroup -Name "Adventure Works Conference Rooms" -RoomList -Members $Members and press Enter. Task 7: Verify that changes were completed successfully 1. Log on to VAN-CL1 as Adatum\Administrator, and open Outlook. 2. Create and send a new meeting request. Invite the Adventure Works Project group, and select the Adventure Works Conference Rooms room list. Specify ProjectRoom as the room. 3. On VAN-EX1, open Outlook Web App, log on as Adatum\George, using the password Pa$$w0rd, and accept the meeting request message. Send the response now. Results: After this exercise, you should have completed all of the assigned tasks, which include creating a mailbox, creating a resource mailbox, moving a mailbox, creating a contact, and creating a moderated distribution group. Exercise 2: Configuring Address Policies Scenario Adventure Works maintains a distinct identity for customers, but some functions, such as accounting, are integrated with A. Datum Corporation. To ensure that users receive all properly, they must be able to receive at all domains, but use their own domain as the reply-to address. The main tasks for this exercise are: 1. Create an address policy for Adventure Works users. 2. Verify that addresses were applied to A. Datum users.

19 Lab Instructions: Managing Recipient Objects 5 Task 1: Create an address policy for Adventure Works users 1. On VAN-EX1, open the Exchange Management Console. 2. Create a new address policy with the following configuration: a. Apply to all recipients with a company attribute of Adventure Works the Adatum.com domain. b. SMTP address: first name.last name@adventure-works.com. c. Accepted domain: Adventure-works.com. Task 2: Verify that addresses are applied correctly 1. In the Exchange Management Console, view the properties for George Schaller, and modify his company description to Adventure Works. 2. Confirm that George Schaller has an address that uses the adventure-works.com domain. Results: After this exercise, you should have created an address policy for Adventure Works users. Exercise 3: Configuring Address Lists Scenario New address lists and offline address books are necessary to organize the address books for users in the combined A. Datum and Adventure Works organization. However, each organization requires a separate address to make it easier to find users. You also must create a new offline address book that includes those address lists to support sales people with portable computers. The main tasks for this exercise are: 1. Create an empty container address list named Companies. 2. Create a new address list for Adventure Works recipients. 3. Create a new address list for A. Datum recipients. 4. Verify the new address list is available in Microsoft Office Outlook. 5. Create a new offline address book for the Adventure Works address list. 6. Create a GAL for Adventure Works users. 7. Create the address book policy for the Adventure Works users. Task 1: Create an empty container address list named Companies 1. On VAN-EX1, open the Exchange Management Console. 2. In the Mailbox node of the Organization Configuration work center, create a new address list named Companies with no recipients. Task 2: Create a new address list for Adventure Works recipients Create a new address list Adventure Works in Companies for all recipients with the Company Adventure Works.

20 6 Lab Instructions: Managing Recipient Objects Task 3: Create a new address list for A. Datum Corporation recipients Create a new address list A Datum in Companies for all recipients with the Company A. Datum. Task 4: Verify the new address list is available in Microsoft Office Outlook 1. Log on to VAN-CL1 as Administrator, and open Outlook. 2. Verify that the address book contains the address lists for A. Datum and Adventure Works. 3. Close Outlook. Task 5: Create a new offline address book for the Adventure Works address list 1. On VAN-EX1, open Exchange Management Console. 2. Create a new offline address book named Adventure Works with the Adventure Works address list, and enable distributions through Web-based distribution and public folders. Use the OAB folder on VAN-EX1 for Web-based distribution. 3. Close the Exchange Management Console. Task 6: Create a global address list for Adventure Works users At the command prompt, type New-GlobalAddressList Name Adventure Works GAL IncludedRecipients AllRecipients ConditionalCompany Adventure Works and press Enter. Task 7: Create the address book policy for the Adventure Works users In the Exchange Management Console, create a new address book policy with the following configuration: Name: Adventure Works ABP Global address list: Adventure Works GAL Offline address book: Adventure Works OAB Room list: Adventure Works Address Lists: Adventure Works Results: After this exercise, you should have created an address list for the A. Datum and Adventure Works users, and an offline address book for each organization.

21 Lab Instructions: Managing Recipient Objects 7 Exercise 4: Performing Bulk Recipient Management Tasks Scenario Your manager left you a number of recipient management tasks to complete for the new Adventure Works users: Add a header line to the.csv file exported from the Human Resources (HR) system. Modify the CreateUsersLab.ps1 script, and import Adventure Works users from a.csv file. Define mailbox limits for all users in the Adventure Works company. The main tasks for this exercise are: 1. Add a header line to the.csv file exported from the Human Resources (HR) system. 2. Modify the CreateUsersLab.ps1 script to Adventure Works users from a.csv file. 3. Create the AdventureWorks Organizational Unit in the Adatum.com domain 4. Run CreateUsersLab.ps1 to Adventure Works users from a.csv file. 5. Define mailbox limits for all Adventure Works company users. Task 1: Add a header to the.csv file exported from the Human Resources (HR) system 1. On VAN-EX1, open D:\Labfiles\Users.csv in Notepad. 2. Add a header line that defines each column: FirstName LastName Password 3. Save the changes to Users.csv, and close Notepad. Task 2: Modify the CreateUsersLab.ps1 script to import Adventure Works users from a.csv file 1. Open D:\Labfiles\CreateUsersLab.ps1 in Notepad. 2. Modify CreateUsersLab.ps1 as required to: Configure the database to create users as Mailbox Database 1. Configure the user principal name to be adatum.com. Place users in the AdventureWorks OU. Configure the.csv import file to be D:\Labfiles\Users.csv. Configure the $pwd to be based on the password field in the Users.csv. Configure the first and last name. Configure the user principal name (UPN) as first name@adatum.com. Configure the alias to be the first name and last name, with no space between the names. Configure the display name to be the first name and last name, with a space between the names. 3. Save the changes to CreateUsersLab.ps1, and close Notepad.

22 8 Lab Instructions: Managing Recipient Objects Task 3: Create the AdventureWorks Organizational Unit 1. Open Active Directory Users and Computers. 2. Create an OU named AdventureWorks. Task 4: Run CreateUsersLab.ps1 to import the Adventure Works Users 1. Open the Exchange Management Shell. 2. Run D:\Labfiles\CreateUsersLab.ps1. Task 5: Configure the Settings for the Adventure Works users 1. Use the Get-User cmdlet to retrieve all users in the AdventureWorks OU, and then pipe the results to the Set-User cmdlet to set the Company attribute to Adventure Works. 2. Run Get-Mailbox cmdlet to retrieve a list of all Adventure Works users: OrganizationalUnit: AdventureWorks 3. Set mailbox limits by piping the list of mailboxes to the Set-Mailbox cmdlet: IssueWarningQuota 4GB ProhibitSendQuota 5GB 4. Configure the Adventure Works mailboxes to use the Adventure Works ABP address book policy Results: After this exercise, you should have created all of the additional Adventure Works users with an Exchange Management Shell script, and then have set the storage quota. To prepare for the next module When you finish the lab, revert the virtual machines back to their initial state. To do this, complete the following steps: 1. On the host computer, start Hyper-V Manager. 2. Right-click the virtual machine name in the Virtual Machines list, and then click Revert. 3. In the Revert Virtual Machine dialog box, click Revert. 4. In the Virtual Machines pane, click 10135B-VAN-DC1, and then in the Actions pane, click Start. 5. To connect to the virtual machine for the next module s lab, click 10135B-VAN-DC1, and then in the Actions pane, click Connect. Note Start the VAN-DC1 virtual machine first, and ensure that it is fully started before starting the other virtual machines. 6. Wait for VAN-DC1 to start, and then start VAN-EX1. Connect to the virtual machine. 7. Wait for VAN-EX2 to start, and then start VAN-CL1. Connect to the virtual machine.

23 Lab Instructions: Managing Client Access 1 Module 4 Lab Instructions: Managing Client Access Contents: Lab A: Configuring Client Access Servers for Outlook Anywhere Access Exercise 1: Configuring Client Access Servers 3 Exercise 2: Configuring Outlook Anywhere 4 Lab B: Configuring Client Access Servers for Outlook Web App and Exchange ActiveSync Exercise 1: Configuring Outlook Web App 7 Exercise 2: Configuring Exchange ActiveSync 8

24 2 Lab Instructions: Managing Client Access Lab A: Configuring Client Access Servers for Outlook Anywhere Access Lab Setup For this lab, you will use the available virtual machine environment. Before you begin the lab, you must: 1. On the host computer, click Start, point to Administrative Tools, and then click Hyper-V Manager. 2. Ensure that the 10135B-VAN-DC1, 10135B-VAN-EX1, 10135B-VAN-EX2, and the 10135B-VAN-CL1 virtual machines are running B-VAN-DC1: Domain controller in the Adatum.com domain 10135B-VAN-EX1: Exchange 2010 server in the Adatum.com domain 10135B-VAN-EX2: Exchange 2010 server in the Adatum.com domain 10135B-VAN-CL1: Client computer in the Adatum.com domain If required, connect to the virtual machines. Log on to VAN-DC1, VAN-EX1, and VAN-EX2 as Adatum\Administrator, using the password Pa$$w0rd. Do not log on to VAN-CL1 at this point. Lab Scenario You are working as a messaging administrator in A. Datum Corporation. Your organization has decided to deploy Client Access servers so that the servers are accessible from the Internet for a variety of messaging clients. To ensure that the deployment is as secure as possible, you must secure the Client Access server, and configure a certificate on the server that will support the messaging client connections. You also need to configure the server to support Outlook Anywhere connections.

25 Lab Instructions: Managing Client Access 3 Exercise 1: Configuring Client Access Servers Scenario As a messaging administrator in A. Datum Corporation, you have deployed the Exchange Server environment, and you are now working on configuring the Client Access servers. The organization has decided to use a certificate from the internal CA to secure all client connections to the server. You need to enable this configuration, and then you need to ensure that Outlook clients can still connect to the server. The main tasks for this exercise are: 1. Configure an External Client Access Domain for VAN-EX2. 2. Prepare a Server Certificate request for VAN-EX2. 3. Request the certificate from the CA. 4. Import and assign the IIS Exchange service to the new certificate. 5. Verify Outlook connectivity to the Exchange Server. Task 1: Configure an External Client Access Domain for VAN-EX2 1. On VAN-EX2, open the Exchange Management Console and configure an External Client Access Domain named mail.adatum.com. 2. Apply the external domain name just to VAN-EX2. 3. Verify that the External Client Access Domain was applied to the owa (Default Web Site) virtual directory. Task 2: Prepare a Server Certificate request for VAN-EX2 1. On VAN-EX2, run the New Exchange Certificate Wizard using the following configuration options: Friendly name: ADatum Mail Certificate Outlook Web App is on the intranet mail.adatum.com as the server name for all services Outlook Web App is on the Internet Exchange ActiveSync is enabled Autodiscover is used on the Internet Long URL is used for AutoDiscover Organization: A Datum Organization Unit: Messaging Country/region: Canada City/locality: Vancouver State/province: BC 2. Save the file using the name CertRequest.req.

26 4 Lab Instructions: Managing Client Access Task 3: Request the certificate from the CA 1. Copy the text of the certificate request file to the clipboard. 2. Connect to and create a new certificate request using the contents of the certificate request file. Use an advanced certificate request using a base-64-encoded CMC or PKCS#10 file. Copy and paste the contents of the CertRequest.req file into the Saved Request field. Request a Web server certificate. 3. Download the certificate and save it. 4. View the certificate. Verify that the certificate includes several subject alternative names, and then click OK. Task 4: Assign the IIS Exchange Service to the new certificate 1. In the Exchange Management console, use the Complete Pending Request Wizard to import the Adatum Mail certificate. 2. In the Exchange Management console, use the Assign Services to Certificate Wizard to assign the Adatum Mail certificate to the Internet Information Services service. Task 5: Verify Outlook connectivity to the Exchange Server 1. On VAN-CL1, log on as Molly using the password Pa$$w0rd. 2. Open Microsoft Outlook 2010, and verify that a profile is automatically created for Molly. 3. In Microsoft Outlook, click File, and then click Account Settings. Verify that the Outlook profile is configured to use VAN-EX2 as the mailbox server. Results: After this exercise, you should have configured the security settings for VAN-EX2 by using the Security Configuration Wizard, and installed a server certificate from the internal CA on the server. You should have also verified Outlook client connectivity to the Exchange server. Exercise 2: Configuring Outlook Anywhere Scenario A. Datum Corporation has several users who are frequently out of the office. These users all have laptop computers, and they want to use Office Outlook to connect to their Exchange Server mailboxes while in the office or out of the office. You need to configure the Client Access server to enable Outlook Anywhere, and then configure a client to connect to the server using RPC over HTTPS. Finally, you need to verify that the connection works. The main tasks for this exercise are: 1. Configure a DNS record for Mail.Adatum.com. 2. Configure Outlook Anywhere on VAN-EX2. 3. Configure the Outlook profile to use Outlook Anywhere. 4. Verify Outlook Anywhere connectivity.

27 Lab Instructions: Managing Client Access 5 Task 1: Configure a DNS record for Mail.Adatum.com On VAN-DC1, create a new host record for Mail.adatum.com using an IP address of Task 2: Configure Outlook Anywhere on VAN-EX2 1. On VAN-EX2, verify that the RPC over HTTP Proxy feature is installed. 2. In the Exchange Management Console, enable Outlook Anywhere for VAN-EX2. 3. Configure an external host name of Mail.adatum.com, and choose NTLM authentication. 4. Restart VAN-EX2 and log back on as Administrator with the password Pa$$w0rd. Task 3: Configure the Outlook profile to use Outlook Anywhere 1. On VAN-CL1, ensure that you are logged on as Adatum\Molly. 2. Modify the profile for Molly to connect to Microsoft Exchange using HTTP. 3. Configure the Exchange Proxy server settings as follows: Use this URL ( mail.adatum.com Connect using SSL only: enable (default) On fast networks, connect using HTTP first, then connect using TCP/IP: enable On slow networks, connect using HTTP first, then connect using TCP/IP: enable (default) Proxy authentication setting: NTLM Authentication (default) 4. Close Outlook. Task 4: Verify Outlook Anywhere connectivity 1. On VAN-CL1, open Outlook and verify that you are connected to the Exchange server. 2. Press and hold Ctrl, and then right-click the Office Outlook icon in the Windows 7 notification area. Confirm that the Conn column lists HTTPS as the connection method. You may need to click the up arrow in the Windows 7 notification area to view the Office Outlook icon. 3. Use the AutoConfiguration tool to review the settings Autodiscover provided to the client. 4. Log off VAN-CL1. Results: After this exercise, you should have enabled Outlook Anywhere on VAN-EX2, and configured a client profile to use Outlook Anywhere. You also verified the Outlook Anywhere functionality. To prepare for the next lab Do not shut down the virtual machines and revert them to their initial state when you finish this lab. This module s last lab requires the virtual machines for completion.

28 6 Lab Instructions: Managing Client Access Lab B: Configuring Client Access Servers for Outlook Web App and Exchange ActiveSync Lab Setup For this lab, you will use the available virtual machine environment. Before you begin the lab, you must: 1. On the host computer, click Start, point to Administrative Tools, and then click Hyper-V Manager. 2. Ensure that the 10135B-VAN-DC1, 10135B-VAN-EX1, 10135B-VAN-EX2, and the 10135B-VAN-CL1 virtual machines are running: B-VAN-DC1: Domain controller in the Adatum.com domain B-VAN-EX1: Exchange 2010 server in the Adatum.com domain B-VAN-EX2: Exchange 2010 server in the Adatum.com domain B-VAN-CL1: Client computer in the Adatum.com domain. If required, connect to the virtual machines. Lab Scenario To enable client access to the server, your organization has decided to enable both Outlook Web App and Exchange ActiveSync for its users. However, the security officer at A. Datum Corporation has defined security requirements for the Outlook Web App and Exchange ActiveSync deployment. Therefore, you need to enable the security features for both Outlook Web App and Exchange ActiveSync.

29 Lab Instructions: Managing Client Access 7 Exercise 1: Configuring Outlook Web App Scenario A. Datum Corporation has several users who work regularly from outside the office. These users should be able to check their from any client computer, including client computers located in public areas. To provide this functionality, you must configure the server settings for Outlook Web App, and configure Outlook Web App policies. You also need to verify that the settings have been successfully applied. The main tasks for this exercise are: 1. Configure IIS to use the Internal CA certificate. 2. Configure Outlook Web App settings for all users. 3. Configure an Outlook Web App Mailbox Policy for the Branch Managers. 4. Verify the Outlook Web App configuration. Task 1: Configure IIS to use the Internal CA certificate 1. On VAN-EX2, in Internet Information Services (IIS) Manager, verify that the owa virtual directory under the Default Web Site is configured to require SSL. 2. Verify that the Default Web Site is configured to use the Adatum Mail Certificate. Task 2: Configure Outlook Web App settings for all users 1. On VAN-EX2, in Exchange Management Console, verify that the owa virtual directory is configured to use forms-based authentication. Modify the forms-based authentication to use the user name only and to use the Adatum.com domain automatically. 2. Disable the Tasks and Rules display for all users. 3. Use the set-owavirtualdirectory owa (Default Web Site) ForceSaveFileTypes.doc cmdlet to force all users to save Word documents before opening them. 4. Use the set-owavirtualdirectory owa (Default Web Site) GzipLevel Off cmdlet to disable GZip compression. 5. Use the Set-OwaVirtualDirectory -identity Owa (Default Web Site) - FilterWebBeaconsAndHtmlForms ForceFilter cmdlet to block all Web beacons and HTML forms. 6. Use the IISReset /noforce command to restart IIS. Task 3: Configure an Outlook Web App Mailbox Policy for the branch managers 1. Create a new Outlook Web App Mailbox policy, and configure the policy with the name Branch Managers Policy. 2. Configure the policy to prevent branch managers from changing their password. 3. Apply the policy to all users in the Branch Managers organization unit (OU).

30 8 Lab Instructions: Managing Client Access Task 4: Verify the Outlook Web App configuration 1. On VAN-EX1, connect to 2. Log on to Outlook Web App as Adatum\Sharon using the password Pa$$w0rd. Sharon is not in the Branch Managers OU. 3. Verify that the Tasks folder is not displayed in the user mailbox, and that Sharon cannot configure a new Inbox rule in the ECP. 4. Connect to OWA again, and log on as Adatum\Johnson using the password Pa$$w0rd. Johnson is in the Branch Managers OU. 5. Verify that the Tasks folder is listed in the user mailbox, but that Johnson is not able to change his password. Results: After this exercise, you should have configured Outlook Web App on VAN-EX2. This configuration includes assigning the internal CA certificate to the Default Web Site, and configuring Outlook Web App settings for all users, as well as for specific users. You also should have verified the Outlook Web App settings. Exercise 2: Configuring Exchange ActiveSync Scenario A. Datum Corporation has several users who use Windows Mobile devices to access their mail. You need ensure that these users can access their mailboxes using Exchange ActiveSync. To ensure that the client connection is secure, you must configure an Exchange ActiveSync policy, and apply it to a user account. You will also install a root certificate on the mobile device, and configure SSL security. Lastly, you need to manage the mobile device as both an administrator and a user using ECP. The main tasks for this exercise are: 1. Verify the Exchange ActiveSync virtual directory configuration. 2. Create a new Exchange ActiveSync mailbox policy. Task 1: Verify the Exchange ActiveSync virtual directory configuration On VAN-EX2, in Exchange Management Console, review the configuration for the Microsoft Server ActiveSync virtual directory on VAN-EX2.

31 Lab Instructions: Managing Client Access 9 Task 2: Create a new Exchange ActiveSync mailbox policy 1. On VAN-EX2, in Exchange Management Console, create a new Exchange ActiveSync Mailbox policy with the following configuration: Name: EAS Policy 1 Enable unprovisionable devices Enable attachments to be downloaded to the device Require passwords Enable password recovery 2. Review the other Exchange ActiveSync Mailbox policy settings. 3. Apply the Exchange ActiveSync Mailbox policy to Scott MacDonald. Results: After this exercise, you should have configured the Exchange server environment to support Exchange ActiveSync. You first verified that Exchange ActiveSync worked, and then enhanced the security configuration by creating a more secure Exchange ActiveSync Mailbox policy, and by enabling SSL for all Exchange ActiveSync connections. To prepare for the next module When you finish the lab, revert the virtual machines to their initial state. To do this, complete the following steps: 1. On the host computer, start Microsoft Hyper-V Manager. 2. Right-click the virtual machine name in the Virtual Machines list, and then click Revert. 3. In the Revert Virtual Machine dialog box, click Revert. 4. In the Virtual Machines pane, click 10135B-VAN-DC1, and then in the Actions pane, click Start. 5. To connect to the virtual machine for the next module s lab, click 10135B-VAN-DC1, and then in the Actions pane, click Connect. Important Start the VAN-DC1 virtual machine first, and ensure that it is fully started before starting the other virtual machines. 6. Wait for VAN-DC1 to start, and then start VAN-EX1. Connect to the virtual machine. 7. Wait for VAN-EX1 to start, and then start VAN-EX2. Connect to the virtual machine.

32 Lab Instructions: Managing Message Transport 1 Module 5 Lab Instructions: Managing Message Transport Contents: Exercise 1: Configuring Internet Message Transport 3 Exercise 2: Troubleshooting Message Transport 4 Exercise 3: Troubleshooting Internet Message Delivery 5

33 2 Lab Instructions: Managing Message Transport Lab: Managing Message Transport Lab Setup For this lab, you will use the available virtual machine environment. Before you begin the lab, you must: 1. On the host computer, click Start, point to Administrative Tools, and click Hyper-V Manager. 2. Ensure that the 10135B-VAN-DC1, 10135B-VAN-EX1, and the 10135B-VAN-EX2 virtual machines are running: B-VAN-DC1: Domain controller in the Adatum.com domain 10135B-VAN-EX1: Exchange 2010 server in the Adatum.com domain 10135B-VAN-EX2: Exchange 2010 server in the Adatum.com domain If required, connect to the virtual machines. Log on to VAN-DC1, VAN-EX1 and VAN-EX2 as Adatum\Administrator, using the password Pa$$w0rd. Lab Scenario You are a messaging administrator in A Datum Corporation., which is a large multinational organization that has offices in London, Tokyo, and Vancouver, which is its headquarters. Your organization has deployed Exchange Server 2010 in two of its sites. However, all Internet messages should flow through the main site in Vancouver. As part of your job responsibilities, you need to set up the message transport to and from the Internet and also ensure that the message flow works within and between the various sites.

34 Lab Instructions: Managing Message Transport 3 Exercise 1: Configuring Internet Message Transport Scenario Your organization has deployed Exchange Server 2010 in two of its sites. However, all Internet messages should flow through the main site. As part of your job responsibilities, you need to set up the message transport to and from the Internet. You also want to configure the Hub Transport server for anti-spam. The main tasks for this exercise are: 1. Configure a Send connector to the Internet. 2. Configure a Receive connector to accept Internet messages. 3. Enable anti-spam functionality on the Hub Transport server. 4. Verify that Internet message delivery works. To prepare for this lab 1. On VAN-EX2, click Start, right-click Network, and then click Properties. 2. Click Change adapter settings. 3. Right-click Local Area Connection, and then click Properties. 4. Click Internet Protocol Version 4 (TCP/IPv4), and then click Properties. 5. Change the IP address to , and then click OK. Click Close. 6. Click the Start button, and then click Restart. In the Comment field, type Lab restart, and then click OK. 7. After the system is restarted, log on to VAN-EX2 as Adatum\Administrator, using the password Pa$$w0rd. Note These preparation steps move VAN-EX2 to a second site defined in AD DS. Task 1: Configure a Send connector to the Internet 1. On VAN-EX1, open Exchange Management Console. 2. Create a new Send Connector with the following configuration: Name: Internet Send Connector Use: Internet Address space: * Route all messages through VAN-DC1.adatum.com

35 4 Lab Instructions: Managing Message Transport Task 2: Configure a Receive connector to accept Internet messages 1. On VAN-EX1, create a new Receive Connector with the following configuration: Name: Internet Receive Connector Use: Custom Local Network Settings: Change the configuration on the Internet Receive Connector to enable anonymous users to send and to enable verbose logging. Task 3: Enable anti-spam functionality on the Hub Transport server 1. On VAN-EX1, open the Exchange Management Shell. 2. Switch to the c:\program Files\Microsoft\Exchange Server\v14\scripts directory and use the install-antispamagents.ps1 cmdlet to install the anti-spam agents on the Hub Transport server. 3. Restart the Microsoft Exchange Transport. 4. Verify that anti-spam configuration options are now available on VAN-EX1 and at the organization level. Task 4: Verify that Internet message delivery works 1. On VAN-EX1, log on to Outlook Web App as Wei, and then send a message to Info@Internet.com. 2. From the Toolbox node in the Exchange Management Console, open the Queue Viewer. Check the queues on VAN-EX1 to verify that the message was delivered. 3. On VAN-DC1, use Telnet to verify that VAN-EX1 accepts anonymous messages. Use Telnet to send a message as Info@internet.com to WeiYu@adatum.com. Results: After this exercise, you should have configured message transport to send and receive messages to and from the Internet using a smart host. You also should have configured anti-spam functionality on a Hub Transport server. Exercise 2: Troubleshooting Message Transport Scenario You have successfully installed Exchange Server 2010 in two sites. You now need to make sure that mail flow is working correctly. The main tasks for this exercise are: 1. Check the routing log, and verify that mail delivery works correctly. 2. Troubleshoot message transport.

36 Lab Instructions: Managing Message Transport 5 Task 1: Check the routing log, and verify that mail delivery works correctly 1. On VAN-EX1, use the Routing Log Viewer to verify that VAN-EX1 is located in the Default-First-Site- Name site, and the VAN-EX2 is located in the Site2 site. 2. Log on to Outlook Web App as Wei, and send an to Anna, whose mailbox is on VAN-EX2. Verify that the mail is received and that Anna can respond to the . Task 2: Troubleshoot message transport 1. On VAN-EX1, in Exchange Management Shell, run the d:\ labfiles\lab05prep1.ps1 script. 2. Send another from Wei to Anna. Verify that the message is not delivered. 3. Use Queue Viewer to investigate mail flow problems. 4. Use Telnet to check connectivity from VAN-EX1 to VAN-EX2. 5. Re-create the receive connector to make mail flow work correctly. 6. Use Queue Viewer to force an immediate retry of message delivery. 7. Verify that Anna received the message. Results: After this exercise, you should have used the Routing Log Viewer to get an overview of your routing topology. For troubleshooting, you should have used the Queue Viewer and Telnet to investigate the mail-flow problem. Exercise 3: Troubleshooting Internet Message Delivery Scenario Your users complain that messages are not sent correctly to the internet. As part of your job responsibilities, you need to track messages to find out why message flow to the Internet is not working correctly. The main tasks for this exercise are: 1. Send a message to the Internet, and track it. 2. Implement user-based message tracking to verify mail delivery. 3. Troubleshoot Internet message delivery. Task 1: Send a message to the Internet, and track it On VAN-EX2, log on to Outlook Web App as Anna and send a message to Info@Internet.com. Task 2: Implement user-based message tracking to verify mail delivery Connect to the Exchange Control Panel as Anna, and use the Delivery Reports page to track the message she sent. Search for messages sent to Info@Internet.com.

37 6 Lab Instructions: Managing Message Transport Task 3: Troubleshoot Internet message delivery 1. On VAN-EX1, in Exchange Management Shell, verify that the shell is focused on c:\program Files\Microsoft\Exchange Server\v14\scripts, and run d:\10135\labfiles\lab05prep2.ps1. 2. On VAN-EX2, send a second message from Anna to Info@Internet.com. 3. On VAN-EX1, in the Exchange Management Console, in the Toolbox node, access Message Tracking. 4. Log on to Exchange Control Panel as Administrator, and track the message that Anna sent. Verify that the message state is pending. 5. Use Mail Flow Troubleshooter to troubleshoot mail problems. When starting the Mail Flow Troubleshooter, choose the option to troubleshoot the Messages are backing up in on one or more queues on a server. Choose VAN-EX1 as the Exchange Server. Review the information on each wizard page, and identify the proposed root cause for the issue. 6. On VAN-DC1, use nslookup to try to locate the MX records for internet.com. 7. Configure a smart host in your Send connector. 8. Verify that the messages are now delivered. Results: After this exercise, you should have used tools like Mail Flow Troubleshooter, Queue Viewer, Message Tracking, and nslookup to investigate why messages are not delivered to the Internet. To prepare for the next module When you finish the lab, revert the virtual machines back to their initial state by completing the following steps: 1. On the host computer, start Hyper-V Manager. 2. Right-click the virtual machine name in the Virtual Machines list, and then click Revert. 3. In the Revert Virtual Machine dialog box, click Revert. 4. In the Virtual Machines pane, click 10135B-VAN-DC1, and then in the Actions pane, click Start. 5. To connect to the virtual machine for the next module s lab, click 10135B-VAN-DC1, and then in the Actions pane, click Connect. Important Start the VAN-DC1 virtual machine first, and ensure that it is fully started before starting the other virtual machines. 6. Wait for VAN-DC1 to start, and then start VAN-EX1. Connect to the virtual machine. 7. Wait for VAN-EX1 to start, and then start VAN-SVR1. Connect to the virtual machine.

38 Lab Instructions: Implementing Messaging Security 1 Module 6 Lab Instructions: Implementing Messaging Security Contents: Lab A: Configuring Edge Transport Servers and Forefront Protection 2010 for Exchange Server Exercise 1: Configuring Edge Transport Servers 3 Exercise 2: Configuring Forefront Protection 2010 for Exchange Server 4 Lab B: Implementing Anti-Spam Solutions Exercise 1: Configuring an Anti-Spam Solution on Edge Transport Servers 6

39 2 Lab Instructions: Implementing Messaging Security Lab A: Configuring Edge Transport Servers and Forefront Protection 2010 for Exchange Server Lab Setup For this lab, you will use the available virtual machine environment. Before you begin the lab, you must: 1. On the host computer, click Start, point to Administrative Tools, and then click Hyper-V Manager. 2. Ensure that the 10135B-VAN-DC1, 10135B-VAN-EX1, and the 10135B-VAN-SVR1 virtual machines are running: 10135B-VAN-DC1: Domain controller in the Adatum.com domain 10135B-VAN-EX1: Exchange 2010 server in the Adatum.com domain 10135B-VAN-SVR1: Standalone server 3. If required, connect to the virtual machines. Log on to VAN-DC1 and VAN-EX1 as Adatum\Administrator, using the password Pa$$w0rd. 4. Log on to VAN-SVR1 as Administrator, using the password Pa$$w0rd. 5. On the host computer, in Hyper-V Manager, click VAN SVR1, and in the Actions pane, click Settings. 6. Click DVD Drive, click Image file, and then click Browse. 7. Browse to C:\Program Files\Microsoft Learning\10135\Drives, click EXCHANGE2010SP2.ISO, and then click Open. 8. Click OK. 9. On VAN-SVR1, dismiss the Autoplay dialog box.

40 Lab Instructions: Implementing Messaging Security 3 Lab Scenario You are a messaging administrator in A. Datum Corporation, which is a large multinational organization. Your organization has deployed Exchange Server 2010 internally, and now must extend it so that everyone within the corporation can send and receive Internet . As part of your job responsibilities, you need to set up an Edge Transport server, and then install an antivirus solution to scan all mail. Exercise 1: Configuring Edge Transport Servers Scenario Your organization has internally deployed Exchange Server 2010, and now wants to use the Edge Transport server role to replace an existing smart host. You need to deploy the Edge Transport server role, and verify that Internet message flow is working. The main tasks for this exercise are: 1. Install the Edge Transport Server role. 2. Configure Edge Synchronization. 3. Verify that EdgeSync is working and that Active Directory Lightweight Directory Services contains data. 4. Verify that Internet message delivery works. Task 1: Install the Edge Transport Server role 1. On VAN-SVR1, install the Edge Transport Server role by using the command d:\setup /mode:install /role:edgetransport in Command Prompt. 2. Restart VAN-SRV1, logon as Administrator, using the password Pa$$w0rd, and then open Exchange Management Console. Task 2: Configure Edge Synchronization 1. Create a new Edge Subscription on the Edge Transport server by using the New-EdgeSubscription - FileName c:\van-svr1.xml cmdlet. 2. Copy the xml file to C:\ on VAN-EX1. 3. On VAN-EX1, in the Exchange Management Console, add the edge subscription to the Hub Transport server by using the following configuration: Active Directory Site: Default-First-Site-Name Subscription file: c:\van-svr1.xml Automatically create a Send connector for this Edge Subscription: checked

41 4 Lab Instructions: Implementing Messaging Security Task 3: Verify that EdgeSync is working and that Active Directory Lightweight Directory Services contains data 1. On VAN-EX1, use the Start-EdgeSynchronization cmdlet to force an immediate Edge Synchronization. 2. Use the Test-EdgeSynchronization -FullCompareMode cmdlet to test Edge Synchronization. 3. Run the Get-User -Identity Wei ft Name, GUID cmdlet to obtain the globally unique identifier (GUID) for Wei Yu. 4. On VAN-SVR1, open LDP, and then connect to VAN-SVR1 using port Open the CN=Recipients,OU=MSExchangeGateway container and verify that Wei Yu s GUID is listed. Task 4: Verify that Internet message delivery works 1. On VAN-EX1, use Exchange Management Console to configure EdgeSync - Default-First-Site- Name to Internet Send Connector to use as a smart host for delivery. 2. Log on to Microsoft Outlook Web App as Adatum\Wei, and send a test message to the Internet to verify it is working. If you do not receive a non-delivery report, the message has been sent outside the organization. Results: After this exercise, you should have installed an Edge Transport server role, and configured Edge Synchronization between a Hub Transport and an Edge Transport server. Exercise 2: Configuring Forefront Protection 2010 for Exchange Server Scenario Virus prevention is critical to your organization s security. As the messaging administrator, you are required to install virus scanning software to scan every message and automatically remove viruses. To implement this functionality, you must install antivirus software and configure it accordingly. The main tasks for this exercise are: 1. Install Forefront Protection 2010 for Exchange Server. 2. Configure Forefront Protection 2010 for Exchange Server. 3. Verify antivirus functionality. Task 1: Install Forefront Protection 2010 for Exchange Server 1. On host computer, attach the c:\program Files\Microsoft Learning\10135\Drives \ForeFrontInstall.iso file to the 10135B-VAN-SVR1 virtual machine. Close the Autoplay dialog box. 2. On VAN-SVR1, install Forefront Protection 2010 for Exchange Server. Accept all defaults, except choose to enable anti-spam later.

42 Lab Instructions: Implementing Messaging Security 5 Task 2: Configure Forefront Protection 2010 for Exchange Server 1. Open the Microsoft Forefront Server Security Administration Console. 2. Configure the following antimalware settings: Scan messages with all engines. Delete messages with viruses. 3. On the Policy Management pane, expand Global Settings, and then click Advanced Options. 4. Configure the following global settings: Increase the value of Maximum nested depth compressed files to 10 and Maximum nested attachments to 50. Configure the Intelligent Engine management as manual. Change the update schedule for Norman Virus Control to update at 00:30 every day. Results: After this exercise, you should have installed Forefront Protection 2010 for Exchange Server and configured it. To prepare for the next lab Do not shut down the virtual machines and do not revert them to their initial state when you finish this lab. The virtual machines are required to complete this module s last lab.

43 6 Lab Instructions: Implementing Messaging Security Lab B: Implementing Anti-Spam Solutions Lab Setup For this lab, you will use the available virtual machine environment. Before you begin the lab, you must: 1. On the host computer, click Start, point to Administrative Tools, and then click Hyper-V Manager. 2. Ensure that the 10135B-VAN-DC1, 10135B-VAN-EX1, and the 10135B-VAN-SVR1 virtual machines are running B-VAN-DC1: Domain controller in the Adatum.com domain 10135B-VAN-EX1: Exchange 2010 server in the Adatum.com domain 10135B-VAN-SVR1: Standalone server If required, connect to the virtual machines. Lab Scenario You are a messaging administrator in A. Datum Corporation, which is a large multinational organization. After configuring the Edge Transport server and installing an antivirus solution, you must implement an anti-spam solution. Exercise 1: Configuring an Anti-Spam Solution on Edge Transport Servers Scenario In your organization, users complain that they receive too many spam messages in their inbox, and they want these spam messages automatically moved to the Junk folder. To limit the number of spam messages received by your organization, you need to increase the SCL junk threshold value for the organization and ensure that junk above a certain rating is rejected. You also want to configure a Block List Provider.

44 Lab Instructions: Implementing Messaging Security 7 The main tasks for this exercise are: 1. Configure Domain Name System (DNS) for Internet message delivery. 2. Configure global SCL for junk mail delivery. 3. Configure content filtering to reject junk messages. 4. Configure an IP Allow List. 5. Configure a Block List Provider. Task 1: Configure Domain Name System (DNS) for Internet message delivery 1. On VAN-DC1, start DNS Manager. 2. In the Adatum.com zone, create an MX record for VAN-SVR1.adatum.com. Task 2: Configure global SCL for junk mail delivery 1. On VAN-SVR1, configure the content filtering settings to not reject any messages based on SCL values. 2. On VAN-EX1, in Exchange Management Shell, use the Set-OrganizationConfig -SCLJunkThreshold 6 cmdlet to configure the global SCL levels. 3. On VAN-EX1, in the Exchange Management Shell, run d:\labfiles\lab6prep.ps1. This script will send 11 messages from VAN-SVR1 with the following SCL ratings. Mail Sender SCL Level Msg1@contoso.com 7 Msg2@contoso.com 8 Msg3@contoso.com 7 Msg4@contoso.com 7 Msg5@contoso.com 8 Msg6@contoso.com 6 Msg7@contoso.com 8 Msg8@contoso.com 7 Msg9@contoso.com 6 Msg10@contoso.com 6 Msg11@contoso.com 8 4. Log on to Outlook Web App as Wei and verify that three messages were sent to the user mailbox, and that eight messages were sent to the Junk folder. 5. View the message details for one of the messages to verify the SCL value assigned to the message.

45 8 Lab Instructions: Implementing Messaging Security Task 3: Configure content filtering to reject junk messages 1. On VAN-SVR1, configure content filtering to reject messages that have a SCL rating greater than or equal to On VAN-EX1, run the D:\labfiles\Lab6Prep.ps1 script to send the test messages again. 3. Log on to Outlook Web App on VAN-EX1 as Wei. Verify that three messages are delivered to the Inbox and no messages are delivered to the - folder in Wei s mailbox. Delete the messages in the Inbox. Task 4: Configure an IP Allow List 1. On VAN-SVR1, configure the IP Allow List to accept connections from Run the script to send the test messages again. 3. Verify that all messages are delivered to the Inbox in Wei s mailbox. The SCL rating should be -1. Task 5: Configure a Block List Provider Configure an IP Block List Provider named Spamhaus that uses zen.spamhaus.org as the lookup domain. Results: After this exercise, you should have configured different SCL levels, and verified the behavior of junk mail in user mailboxes. You should also have configured a Block List Provider. To prepare for the next module When you finish the lab, revert the virtual machines back to their initial state. To do this, complete the following steps: 1. On the host computer, start Hyper-V Manager. 2. Right-click the virtual machine name in the Virtual Machines list, and then click Revert. 3. In the Revert Virtual Machine dialog box, click Revert. 4. In the Virtual Machines pane, click 10135B-VAN-DC1, and then in the Actions pane, click Start. 5. To connect to the virtual machine for the next module s lab, click 10135B-VAN-DC1, and then in the Actions pane, click Connect. Important Start the VAN-DC1 virtual machine first, and ensure that it is fully started before starting the other virtual machines. 6. Wait for VAN-DC1 to start, and then start VAN-EX1. Connect to the virtual machine. 7. Wait for VAN-EX1 to start, and then start VAN-EX2. Connect to the virtual machine. 8. Wait for VAN-EX2 to start, and then start VAN-EX3. Connect to the virtual machine.

46 Lab Instructions: Implementing High Availability 1 Module 7 Lab Instructions: Implementing High Availability Contents: Exercise 1: Deploying a DAG 3 Exercise 2: Deploying Highly Available Hub Transport and Client Access 4 Exercise 3: Testing the High Availability Configuration 5

47 2 Lab Instructions: Implementing High Availability Lab: Implementing High Availability Lab Setup For this lab, you will use the available virtual machine environment. Before you begin the lab, you must: 1. On the host computer, click Start, point to Administrative Tools, and then click Hyper-V Manager. 2. Ensure that the 10135B-VAN-DC1, 10135B-VAN-EX1, 10135B-VAN-EX2, and the 10135B-VAN-EX3 virtual machines are running: B-VAN-DC1: Domain controller in the Adatum.com domain B-VAN-EX1: Exchange 2010 server in the Adatum.com domain B-VAN-EX2: Exchange 2010 server in the Adatum.com domain B-VAN-EX3: Exchange 2010 server in the Adatum.com domain. If required, connect to the virtual machines. Log on to the virtual machines as Adatum\Administrator, using the password Pa$$w0rd. Lab Scenario You are the messaging administrator for A. Datum Corporation. You have completed the basic installation for three Exchange servers. Now you must complete the configuration so that they are highly available.

48 Lab Instructions: Implementing High Availability 3 Exercise 1: Deploying a DAG Scenario You must complete the Mailbox server high availability configuration by creating a DAG and making the Accounting database highly available. The main tasks for this exercise are: 1. Create a DAG named DAG1 by using the Exchange Management Shell. 2. Create a mailbox database copy of the Accounting database. 3. Verify successful completion of database copying. 4. Suspend the database copy on VAN-EX2. Task 1: Create a DAG named DAG1 by using the Exchange Management Shell 1. On VAN-EX1, open the Exchange Management Shell. 2. Use the New-DatabaseAvailabilityGroup cmdlet to create a DAG with the following information: Name: DAG1 WitnessServer: \\VAN-DC1\FSWDAG1 WitnessDirectory: C:\FSWDAG1 IP Address: Use the Add-DatabaseAvailabilityGroupServer cmdlet to add VAN-EX1 as a member of DAG1. 4. On VAN-EX2, open the Exchange Management Console. 5. On the Database Availability Groups tab, add VAN-EX2 as a member of DAG1. Task 2: Create a mailbox database copy of the Accounting database 1. On VAN-EX1, open the Exchange Management Console. 2. On the Database Management tab, add a mailbox database copy of Accounting to VAN-EX2. Task 3: Verify successful completion of database copying On VAN-EX1, view the properties of the Accounting database, and ensure its status is Healthy. Task 4: Suspend the Accounting database copy on VAN-EX2 On VAN-EX1, suspend the Accounting database copy on VAN-EX2. Results: After this exercise, you should have created a DAG and a mailbox database copy of the Accounting database. The Accounting database copy on VAN-EX2 should remain in a suspended state.

49 4 Lab Instructions: Implementing High Availability Exercise 2: Deploying Highly Available Hub Transport and Client Access Servers Scenario The network team used a hardware load balancer to load balance VAN-EX1 and VAN-EX2 for Client Access connections. They have assigned a load balanced IP address of , and have created a DNS record for the name CASArray.adatum.com. Now you must complete the Client Access configuration. The main tasks for this exercise are: 1. Create and configure a client access array for CASArray.adatum.com. 2. Assign the client access array to the databases. Task 1: Create and configure a client access array for CASArray.adatum.com 1. On VAN-EX1, open Exchange Management Shell. 2. Use the New-ClientAccessArray Fqdn casarray.adatum.com Name CASArray.adatum.com Site Default-First-Site-Name cmdlet to create a new client access array named CasArray.adatum.com for the Default-First-Site-Name Active Directory site. Task 2: Assign the client access array to the databases 1. On VAN-EX1, use the Exchange Management Shell to retrieve a list of all of the databases with the Get-MailboxDatabase ft Name, Server, RPC* cmdlet. 2. Use the Get-MailboxDatabase Set-MailboxDatabase RpcClientAccessServer casarray.adatum.com cmdlet to assign each database on VAN-EX1 and VAN-EX2 the CasArray.adatum.com client access array as the RpcClientAccessServer. 3. At the PS prompt, use the Get-MailboxDatabase ft Name, Server, RPC* cmdlet to verify the correct setting. Results: At the end of this exercise, you should have created a client access array and assigned it to the databases.

50 Lab Instructions: Implementing High Availability 5 Exercise 3: Testing the High Availability Configuration Scenario You have completed the high availability configuration. You now must verify that the high availability configuration is working properly. The main tasks for this exercise are: 1. Create a SMTP connector associated with VAN-EX1 and VAN-EX2. 2. Stop the SMTP service on VAN-DC1. 3. Send an to an internal user and an external SMTP address. 4. Use Queue Viewer to locate the message in the queue. 5. Start SMTP service on VAN-DC1 to allow queued message delivery. 6. Verify that the messages were removed from the shadow redundancy queue. 7. Verify the copy status of the Accounting database copy and resume the database copy. 8. Perform a switchover on the Accounting database to make the VAN-EX2 copy active. 9. Simulate a server failure. Task 1: Create a SMTP connector associated with VAN-EX1 and VAN-EX2 1. On VAN-EX2, if required, open Exchange Management Console. 2. Create an SMTP send connector named Internet Mail, and then configure an address space of * for the connector. 3. Add VAN-DC1.adatum.com as the Smart host for the connector, and VAN-EX1 and VAN-EX2 as the source servers. Task 2: Stop the SMTP server on VAN-DC1 On VAN-DC1, stop the Simple Mail Transfer Protocol (SMTP) service. Task 3: Send an to an internal user and an external SMTP address 1. On VAN-EX1, log on to Outlook Web App as Adatum\Jason with the password Pa$$w0rd. 2. Create and send a new addressed to terry@contoso.com and jane@adatum.com. Task 4: Use Queue Viewer to locate the message in the queue 1. On VAN-EX2, open Queue Viewer. 2. Connect to VAN-EX1 and VAN-EX2 to locate which server queues the sent from Jason. 3. Make note of the server where the message is queued. 4. Examine the shadow redundancy queue on VAN-EX3.

51 6 Lab Instructions: Implementing High Availability Task 5: Start SMTP service on VAN-DC1 to allow delivery of the queued message 1. On VAN-DC1, open Server Manager. 2. Start the SMTP service. Task 6: Verify that the messages were removed from the shadow redundancy queue 1. On VAN-EX2, open Queue Viewer. 2. Connect to VAN-EX3, where the message was queued in the shadow redundancy queue, and then verify that it is no longer queued. Task 7: Verify the copy status of the Accounting database, and resume the database copy 1. On VAN-EX2, open the Exchange Management Console. 2. View the database copy health on the Suspended copy on VAN-EX2. 3. Resume the database copy on VAN-EX2, and wait until the copy status is Healthy. Task 8: Perform a switchover on the Accounting database to make the VAN-EX2 copy active 1. On VAN-EX2, open the Exchange Management Console. 2. Verify that the active Accounting database is on VAN-EX1. 3. Select the Accounting database on VAN-EX2, and then activate the copy. Task 9: Simulate a server failure 1. On VAN-EX1, open the Exchange Management Console, and view the status of the Accounting database. 2. In Hyper-V Manager, revert 10135B-VAN-EX2. 3. Verify the Accounting database is now active on VAN-EX1. Results: After this exercise, you should have verified that the mailbox databases could fail over and switch between DAG servers, and that Hub Transport shadow redundancy is working properly.

52 Lab Instructions: Implementing High Availability 7 To prepare for the next module When you finish the lab, revert the virtual machines back to their initial state. To do this, complete the following steps: 1. On the host computer, start Hyper-V Manager. 2. Right-click the virtual machine name in the Virtual Machines list, and then click Revert. 3. In the Revert Virtual Machine dialog box, click Revert. 4. In the Virtual Machines pane, click 10135B-VAN-DC1, and then in the Actions pane, click Start. 5. To connect to the virtual machine for the next module s lab, click 10135B-VAN-DC1, and then in the Actions pane, click Connect. Important Start the VAN-DC1 virtual machine first, and ensure that it starts fully before starting the other virtual machines. 6. Wait for VAN-DC1 to start, and then start VAN-EX1. Connect to the virtual machine. 7. Wait for VAN-EX1 to start, and then start VAN-SVR1. Connect to the virtual machine.

53 Lab Instructions: Implementing Backup and Recovery 1 Module 8 Lab Instructions: Implementing Backup and Recovery Contents: Exercise 1: Backing Up Exchange Server Exercise 2: Restoring Exchange Server Data 4 Exercise 3: Restoring Exchange Servers (optional) 5

54 2 Lab Instructions: Implementing Backup and Recovery Lab: Implementing Backup and Recovery Lab Setup For this lab, you will use the available virtual machine environment. Before you begin the lab, you must: 1. On the host computer, click Start, point to Administrative Tools, and then click Hyper-V Manager. 2. Ensure that the 10135B-VAN-DC1, 10135B-VAN-EX1, and the 10135B-VAN-SVR1 virtual machines are running: 10135B-VAN-DC1: Domain controller in the Adatum.com domain 10135B-VAN-EX1: Exchange 2010 server in the Adatum.com domain 10135B-VAN-SVR1: Standalone server 3. If required, connect to the virtual machines. Log on to VAN-DC1 and VAN-EX1 as Adatum\Administrator, using the password Pa$$w0rd. 4. Log on to VAN-SVR1 as Administrator, using the password Pa$$w0rd. 5. In Microsoft Hyper-V Manager, click VAN SVR1, and, in the Actions pane, click Settings. 6. Click DVD Drive, click Image file, and then click Browse. 7. Browse to C:\Program Files\Microsoft Learning\10135\Drives, click Exchange2010SP2.iso, and then click Open. 8. Click OK. 9. On VAN-SVR1, close the AutoPlay dialog box.

55 Lab Instructions: Implementing Backup and Recovery 3 Lab Scenario You are a messaging administrator for A. Datum Corporation. Your organization has deployed Exchange Server You now want to ensure that all Exchange Server-related data is backed up and that you can restore not only the full server or database, but also a mailbox or mailbox folder. Exercise 1: Backing Up Exchange Server 2010 Scenario You must create a backup of your Exchange Server 2010 mailbox database to ensure that you can restore it when necessary. The main tasks for this exercise are: 1. Populate a mailbox. 2. Perform a backup of the mailbox database by using Windows Server Backup. 3. Delete a message and a mailbox. Task 1: Populate a mailbox 1. On VAN-EX1, log on to Parna s mailbox by using Outlook Web App. Use the logon name Adatum\Parna and the password Pa$$w0rd. 2. Send a message to George with the subject Message before Backup. 3. Restart the Microsoft Exchange Information Store service. Task 2: Perform a backup of the mailbox database by using Windows Server Backup 1. Use Server Manager to install Windows Server Backup. 2. Perform a custom backup of the C:\ drive by using a VSS full backup. Store the backup files on \\VAN-DC1\Backup. Task 3: Delete messages in mailboxes 1. Log on to George s mailbox by using the logon name Adatum\George and the password Pa$$w0rd, and then delete the message from Parna. 2. Log on to Parna s mailbox by using the logon name Adatum\Parna and the password Pa$$w0rd, and then delete all messages from the Sent Items folder. Results: After this exercise, you should have created a backup of an Exchange Server database, and deleted messages.

56 4 Lab Instructions: Implementing Backup and Recovery Exercise 2: Restoring Exchange Server Data Scenario Some of your users complain that they are missing messages from their mailboxes. You now need to use the backup you created to recover their messages. The main tasks for this exercise are: 1. Restore the database by using Windows Backup. 2. Create a recovery database by using the backup files. 3. Recover a mailbox from the recovery database. Task 1: Restore the database by using Windows Backup On VAN-EX1, using Windows Server Backup, recover the Exchange Server databases to an alternate location: C:\DBBackup. Task 2: Create a recovery database by using the backup files 1. On VAN-EX1, create a recovery database by using the restored database in C:\DBBackup. Use the following command to create the recover database: New-MailboxDatabase -Name RecoverDB -Server VAN-EX1 -EDBFilePath c:\dbbackup\c_\program Files\Microsoft\Exchange Server\V14 \Mailbox\Accounting\Accounting.edb -Logfolderpath c:\dbbackup \C_\Program Files\Microsoft\Exchange Server\V14\Mailbox \Accounting -Recovery 2. In Exchange Management Shell, switch to the c:\dbbackup\c_\program Files\Microsoft \Exchange Server\v14\Mailbox\Accounting directory, enter the following command in the PS prompt, and then press Enter: eseutil /R E02 /i /d 3. Mount the recovery database by using the Mount-Database RecoverDB command. 4. List all mailboxes that are in the recovery database by using the Get-MailboxStatistics -Database RecoverDB command. Task 3: Recover a mailbox from the recovery database 1. On VAN-EX1, recover a mailbox by using the Restor box -Identity Parna -RecoveryDatabase RecoverDB cmdlet. 2. Verify that you restored the message in the Sent Items folder by logging onto Parna s mailbox. 3. Use the Remov boxdatabase -Identity RecoverDB command to remove the RecoverDB database. Results: After this exercise, you should have created a recovery database, and restored a complete mailbox from the recovery database to their original locations.

57 Lab Instructions: Implementing Backup and Recovery 5 Exercise 3: Restoring Exchange Servers (optional) Scenario After a hard-disk malfunction, one of your Exchange servers no longer is operational. You have a full backup of the computer and the mailbox databases, so you need to restore everything to a newly installed computer. The main tasks for this exercise are: 1. Shutdown VAN-EX1 and reset the computer account. 2. Prepare VAN-SVR1 as VAN-EX1. 3. Install Exchange Server 2010 with the RecoverServer mode. 4. Recover the mailbox databases from backup. 5. Test the recovery. Task 1: Shutdown VAN-EX1, and reset the computer account 1. In Hyper-V Manager, revert VAN-EX1 to the previous snapshot. 2. Using Active Directory Users and Computers, reset the VAN-EX1 computer account. Task 2: Prepare VAN-SVR1 as VAN-EX1 1. Rename VAN-SRV1 to VAN-EX1. 2. Join the computer to ADATUM domain. Task 3: Install Exchange Server 2010 with the RecoverServer mode 1. On the new VAN-EX1 server, run d:\setup /m:recoverserver. 2. In Exchange Management Console, change Database Properties to This database can be overwritten by a restore for all databases on the VAN-EX1. Task 4: Recover the mailbox databases from backup Use Windows Server Backup to recover the Exchange Server databases. Task 5: Test the recovery 1. On the restored VAN-EX1, in the Exchange Management Console, mount the mailbox databases and public folder database. 2. On VAN-DC1, open Internet Explorer and connect to Log on as Adatum\Parna with the password Pa$$w0rd, and then verify that the mailbox is accessible and that all messages have been restored. Results: After this exercise, you should have recovered a complete Exchange server by using a different Windows Server, renaming it, installing Exchange Server in /m:recoverserver mode, and recovering the Exchange Server database from a backup. You have also tested the recovery.

58 6 Lab Instructions: Implementing Backup and Recovery To prepare for the next module When you finish the lab, revert the virtual machines to their initial state. To do this, complete the following steps: 1. On the host computer, start Hyper-V Manager. 2. Right-click the virtual machine name in the Virtual Machines list, and then click Revert. 3. In the Revert Virtual Machine dialog box, click Revert. 4. In the Virtual Machines pane, click 10135B-VAN-DC1, and then in the Actions pane, click Start. 5. To connect to the virtual machine for the next module s lab, click 10135B-VAN-DC1, and then in the Actions pane, click Connect. Important Start the VAN-DC1 virtual machine first, and ensure that it is fully started before starting the other virtual machines. 6. Wait for VAN-DC1 to start, and then start VAN-EX1. Connect to the virtual machine. 7. Wait for VAN-EX1 to start, and then start VAN-EX2. Connect to the virtual machine. 8. Wait for VAN-EX2 to start, and then start VAN-CL1. Connect to the virtual machine.

59 Lab Instructions: Configuring Messaging Policy and Compliance 1 Module 9 Lab Instructions: Configuring Messaging Policy and Compliance Contents: Lab A: Configuring Transport Rules, Journal Rules, and Multi-Mailbox Search Exercise 1: Configuring Transport Rules 3 Exercise 2: Configuring Journal Rules and Multi-Mailbox Search 5 Lab B: Configuring Personal Archives and Retention Policies Exercise 1: Configuring Personal Archives 9 Exercise 2: Configuring Retention Policies 9

60 2 Lab Instructions: Configuring Messaging Policy and Compliance Lab A: Configuring Transport Rules, Journal Rules, and Multi-Mailbox Search Lab Setup For this lab, you will use the available virtual machine environment. Before you begin the lab, you must: 1. On the host computer, click Start, point to Administrative Tools, and then click Hyper-V Manager. 2. Ensure that the 10135B-VAN-DC1, 10135B-VAN-EX1, 10135B-VAN-EX2, and the 10135B-VAN-CL1 virtual machines are running: 10135B-VAN-DC1: Domain controller in the Adatum.com domain B-VAN-EX1: Exchange 2010 server in the Adatum.com domain B-VAN-EX2: Exchange 2010 server in the Adatum.com domain B-VAN-CL1: Client computer in the Adatum.com domain. 3. If required, connect to the virtual machines. Log on to VAN-DC1, VAN-EX1, and VAN-EX2 as Adatum\Administrator using the password Pa$$w0rd. 4. Log on to VAN-CL1 as Adatum\Luca using the password Pa$$w0rd. Lab Scenario You are a messaging administrator in A. Datum Corporation. Your organization has deployed Exchange Server 2010.