MIGRATING/MOVING EXISTING EXCHANGE SERVER FROM A DC INSTALLATION TO A NEW HARDWARE MEMBER SERVER For Internal training/projects only by www.latiffesa.com Time frame: 1 to 6 Days depending on the network scale. Personal: 2 Systems Engineer, 1 technician, 1 Project Manager. Number of servers: 1 New member server and 2 existing Domain Controller Server 1
TABLE OF CONTENTS INTRODUCTION 3 TIME FRAME 4 CHECKLIST 5 INSTALLING EXCHANGE ON THE NEW SERVER 6 MIGRATING USER MAILBOX 6 MIGRATING PUBLIC FOLDERS MANUALLY REMOVE REPLICATIONS PARTNERS SETTING FOR PUBLIC FOLDERS 7 REHOME THE SERVER THAT IS RESPONSIBLE FOR GENERATING THE OFFLINE ADDRESS LIST 9 REHOME THE RECIPIENT UPDATE SERVICES 9 TROUBLESHOOTING 9 UNINSTALL EXCHANGE SERVER ON EXC 10 BACKUP/EXPORT YOUR CERTIFICATE 11 INSTALL THE NEW CERTIFICATE TO SUPPORT OWA ON EXCNEW 11 VERIFY SSL IS UP AND WORKING 11 REMOVE ALL OTHER INSTALLED COMPONENTS ON THE OLD EXCHANGE SERVER (EXC) 11 CREATE A STARTUP SCRIPT 12 LOAD THE CREATE THE STARTUP SCRIPT AT BOOTUP 12 2
INTRODUCTION The reason for the removal of the first Exchange Server from a site/organization maybe due to server hardware replacement or the exchange was mistakenly installed on a DC. The first Exchange Server in a Site has unique functionality and proper procedural removal is required. The following step assumes that the first exchange server is already running. A new exchange server will be commissioned and the old faithful hardware is than retired from service. The following steps (Proof of Concept) were verified and tested successfully by Abdul Latiff Esa, Chief Technical Officer, of LatiffEsa Technologies, Malaysia. BEFORE SETUP AFTER COMPLETION 3
TIMA FRAME DAY 1: VERIFYING AD HEALTH STATUS DAY 1: INSTALLING AND UPDATING DAY 1:VERIFYING CONNECTIVITY DAY 2: SYNCHRONIZING DAY 2: MAILBOX MIGRATION DAY 2: MOVING PUBLIC FOLDERS DAY 2:REPLICATING DAY 2: TESTING DAY 3 : DISABLING EXISTING EXCHANGE SERVER DAY 3 : DECOMMISIONNING EXCHANGE SERVER 4
CHECK LIST EXISTING SERVER EXC/EXCFSMO CHECKLIST: Check the existing AD and Exchange Server Health Status Backup System state and DNS folder Upgrade Forest Functional Level to highest level Create a test user, verify all is working fine. Install SUPTOOLS.MSI and run netdom query fsmo, dcdiag & netdiag Replicate AD from ADSS, ensure success Check/Record Event Viewer logs Copy/Backup the OWA Certificate to install on the new server(excnew) Verify nslookup with MX and A record is responding successfully NEW SERVER SETUP CHECKLIST: Install Server 2003 SP2. New Server name is ExcNew. Old Server name is Exc. Ensure The Time Zone and clock is synchronized on all servers. Ensure that the service packs are the same on both servers Install Antivirus software Add the Server 2003(EXCNEW) to the latiffesa123.com Domain as Member Server. Log on to the Domain latiffesa123.com as Administrator. Precede to the section Install IIS and SMTP to setup the new exchange server and at the same time add it to the existing Exchange Organization. NOTE and CARE: PDC & RID on Same Server (avoid with GC) Infrastructure Master & GC OK on same server(if one domain only) Run ipconfig /registerdns on all related servers NO user should be logged on to AD or EXCH during the migration process Decide on an IP address and inform the firewall staffs to update 5
INSTALLING EXCHANGE ON THE NEW SERVER Setup IIS and SMTP Control Panel Add remove program Add remove Windows Components Highlight Application Server details Highlight Select IIS details select SMTP and NNTP OK Select ASP.net OK Next Finish. Setup the new Exchange Server 2003 From Setup\i386 folder run Setup.exe Continue and continue again Welcome to the MS exchange Installation Wizard, click Next I agree and Next Component Selection: Next or change the Path here Licensing Agreement: I agree and Next Installation Summary: Next Wait for the installation to complete Finish This new exchange server will automatically join the existing exchange 2003 First Organization once setup completed Install exchange service pack 2 by running update.exe from the E3SP2ENG folder, and click Finish once done. Start the POP3 and SMTP (default started already) service. Verify the New Exchange Server Setup Create a DNS MX record to support this new mail server Ensure the cost of the new server(mx=9) is lower than the existing(mx=10) Create two new user from ADUC named latiffesa and anitaesa select the new exchange server as the mail server Try to send and receive email between both users. MIGRATING USER MAILBOX Migrating the existing mailbox to the new server Start All Programs Microsoft Exchange System Manager Servers Sever name:exc First Storage Group Mailbox Store (EXC) Mailboxes Right click User01 Exchange Tasks Next Move Mailbox Same Administrative Group Move Next The New Exchange Server name should appear here: Next Configure how move mailbox handles corrupted messages in a mailbox: Create a failure report Task Schedule: Next Completing the Exchange Task Wizard: Finish. 6
To confirm Successful user Mailbox migration Start All Programs Microsoft Exchange System Manager Servers Sever name: EXC First Storage Group Mailbox Store (EXC) Mailboxes: notice the user is no longer listed under the old server, verify that it s now listed in the new server. Once successful move the others. Don t forget to also move the administrator mailbox or you will get an error while uninstalling the exchange server in the final step. MIGRATIING PUBLIC FOLDERS Moving the entire Public Folder Store (EXC to EXCNEW) This will generate a high Volume of Traffic. First Organization Servers EXC Right click Public Folder Store (EXC) Move All Replicas New Server name: EXCNEW OK All the public folder replicas will now be moved to EXCNEW: OK. Please wait a while (test lab environment with 6 exchange users will take at least 45 min to complete). Once done, everything from EXC will appear in EXCNEW. Moving will be completed once the Public Folder Instances and Replication status folder is empty. 7
To confirm Successful Public Folder Store Migration First Organization Servers EXC Right click Public Folder Store (EXC) Public Folders: No object displayed. Have a look at the screen capture below. 8
MANUALLY REMOVE REPLICATIONS PARTNERS SETTING FOR PUBLIC FOLDERS First Organization Servers EXCNEW Public Folder Store (EXCNEW) Public Folders Right click Offline Address Book Properties Replication tab Select EXC Remove. Repeat this for each folder in the Public Folders directory. REHOME THE SERVER THAT IS RESPONSIBLE FOR GENERATING THE OFFLINE ADDRESS LIST First Organization Recipients Offline Address Lists Properties Browse and select EXCNEW. REHOME THE RECIPIENT UPDATE SERVICES First Organization Recipients Recipient Update Service Right click Recipient update service (Enterprise Configuration) Properties Browse: EXCNEW OK. Leave the First Exchange 2003 Server powered off (or disable all the services) for at least 3 days before totally removing the Exchange Server from the Domain Controller. Then remove its MX record from DNS. Monitor that all is fine and well within this period of time. If all is fine proceed to uninstall the Exchange Server as in the following steps. TROUBLESHOOTING a. If the 2 nd DC running the old Exchange Server is shut down, user will experience delay connection from outlook. Ensure a GC role is available on the online server. b. Ensure the Client DNS is pointing to the online server. c. Error in Sync Issues in Microsoft Outlook Microsoft Exchange Offline address book 0x8004010F 9
d. Solution: In Exchange System Manager, expand the Recipients container. Click the Offline Address Lists container. In the right side of the pane, right-click the offline address list object, and then click Properties. On the General tab, verify that a valid address list is populated under Address lists. If a valid address list is not populated under Address lists, you must add one. Note the default address is the global address list. Click OK. Right-click the offline address list object again, and then click Set as New Default if the offline address list object is not set. If you made any changes, right-click the offline address list object again, and then click Rebuild. Also ensure that the recipient Update Service in First Organization recipients Container is pointing to an online DC server. e. OWA client error. Users who connect to OWA is able to create new email but could not compose any message in the message box. The message compose is displayed but editing was not possible. Solution: Install the exchange Exchange2003-KB911829-v3-x86-ENU patch. f. Error regarding the Certificate not vailid/expire when moving public folder. Solution: temporary disable SSL on both new server and old. g. Ensure that no users are connected to their mailbox. h. The following error appears when moving mailbox Failed to copy messages to the destination mailbox store. Error: The MAPI call failed. MAPI or an unspecified service provider. ID no: 80004005-0000-00000000. Solution: a) Choose the skip corrupted message option when moving mailbox or b) dismount the store run isinteg -s servername -fix -test alltests or c) Ask the mailbox user to selfarchive the message before moving their mailbox OR try moving the mailbox a few days later(yup, sometimes its possible). i. Cannot connect to OWA from WAN but possible from LAN. Check on the firewall that NAT is updated and the SSL port is opened. Use the telnet <ip address> 443 command, where IP address is the mail server ip. j. Check the Routing group members. Ensure that the master server is configured on the new exchange server, otherwise outgoing email(smtp) will not be possible although incoming is OK. a. Routing group b. First routing group c. connector members (master or member) d. Right click and select set as master k. Check the SMTP connector (Routing Groups). Select the General tab and ensure that Use dns to route to each address space on this connector is selected. Also ensure that the local bridgehead is pointed to the new exchange server as the Default SMTP virtual server. 10
UNINSTALL EXCHANGE SERVER ON EXC Disconnect all users. a. To uninstall Exchange, You can then run the Exchange Server 2003 Installation Wizard (setup.exe). In the wizard, click the Remove option for the installed components on the Component Selection screen as follows: Close all opened window I left all the exchange services in automatic startup and Start status i386\setup Click continue if the Known compatibility window appear Next Action: Remove next next again wait a while Finish. View the following screen capture. Its shows installing but its actually uninstalling that single server (EXC) while leaving the new server(excnew) online. b. or do the following steps: Click Start, click Control Panel, and then click Add or Remove Programs. In the Currently installed programs list, right-click Microsoft Exchange, and then click Change/Remove. In Microsoft Exchange Installation Wizard, click Next. In the Action list on the Component Selection page, click the down arrow next to each component that has been installed, and then click Remove. Note Installed components have a check mark in the Action list. When you click Remove, the check mark is replaced by the word Remove. Click Next two times. Click Finish. 11
BACKUP/EXPORT YOUR CERTIFICATE Default Web Site Properties Directory Security Server Certificate Next Export the current certificate to a.pfx file Next Location: c:\exc_w3svc1_cert.pfx Next Key in password Next Finish. Default Web Site Properties Directory Security View Certificate Certification Path: Identify the Certificate name here OK and OK Close Internet Information Services (IIS) Manager. Start Search All or part of the file name: certificate_name copy and save the crt file. INSTALL THE NEW CERTIFICATE TO SUPPORT OWA ON EXCNEW Note: OWA without SSL is already enabled and accessible by default upon installation. Start Administrative Tools Internet information Services (IIS) Manager web sites right click default web site Properties Directory security Server certificate Next Import a certificate from a.pfx file Next Browse: point to your.pfx file (exc_w3svc1_cert.pfx) open mark cert as exportable Next Key in your password Next 443: Next Next Finish. Click on Edit at the Directory Security tab Require secure channel (SSL) OK all the way out. VERIFY SSL IS UP AND WORKING From the client PC open a web browser: https://excnew.latiffesa123.com. A Security Alert window should appear Do you want to proceed? Click View the certificate and ensure it s the certificate you own is displayed OK Yes Login using your username: user01@latiffesa123.com and password. REMOVE ALL OTHER INSTALLED COMPONENTS ON THE OLD EXCHANGE SERVER (EXC) 1. Remove Certification Authority: Control Panel Add/Remove programs Add/Remove windows components select certificate services Next and Finish. 2. Remove Internet Information Services (IIS) Manager: Control Panel Add/Remove programs Add/Remove windows components Highlight Application Server: Details Select Internet Information Services ASP.net: Is it ok to remove this components as well?: Yes OK Next Finish. CREATE A STARTUP SCRIPT Use the example below to create a startup script for Exchange Information Store service to load automatically at bootup. LOAD THE STARTUP SCRIPT AT BOOTUP. Use the Group Policy Editor to load the script automatically. Start gpedit.msc Computer Configuration windows Settings Scripts Startup Add Browse: C:\EXC_IStore.bat Open OK. 12
You are all done. Please feel free to ask help and consultancy from me should you need any of my service. 13