Posts

Showing posts from 2012

E14 LAB: RBAC for Recipient Management

    http://sysadmin-talk.org/2010/04/5-steps-to-heaven-creating-a-custom-rbac-role-in-exchange-2010/ http://www.networkworld.com/community/node/47428

E14 Ref: CAS array only resolve internally

Image
    http://technet.microsoft.com/en-us/library/ee332317.aspx

E14 Ticket: RBAC delgate permission (database/ recipient management) to child domain

問題定義 : 1. RBAC delgate permission (database/ recipient management) to child domain 服務範圍 : 1. Provide how to setup RBAC delegate permission (database/ recipient management) to child domain 原因說明 : 解決方式 : Symptom ===== RBAC delegation permission (database/ recipient management) to child domain Resolution ============== Commands 1.            New-ManagementScope -Name "ServerInContoso" -ServerList  EX1, EX2, EX3 2.            New-ManagementScope -name "RecipientInContoso" -RecipientRoot "Contoso.msft.corp" -RecipientRestrictionFilter {name -like '*'} –verbos 3.            $RoleGroup = Get-RoleGroup "Server Management" 4.            New-RoleGroup "Server Management - Contoso" -Roles $RoleGroup.Roles 5.            $RoleGroup = Get-RoleGroup "Recipient Management" 6.            New-RoleGroup "Recipient Management - Contoso" -Roles $RoleGroup.Roles 7.            We open the ECP

E14 Ref: Add-ADPermission (Organization Management Group)

  http://social.technet.microsoft.com/Forums/en-US/exchange2010/thread/3d408093-5026-470d-92d5-33575ec365dd/   By default, only member of Organization Management group can run the cmdlet. Add-ADPermission http://technet.microsoft.com/en-us/library/bb124403.aspx Please also run the Exbpa in the Toolbox to do "Permission Check".

Ref: E2010 WSB does not support passive database copies (DAG)

    http://exchangeserverpro.com/exchange-2010-passive-database-copies-included-backups-dag-members   So what do we learn from this? Reminder, the below should be read in conjunction with the notice at the start of the article, as backing up passive database copies using Windows Server Backup is not a supported scenario Yes, passive database copies stored on a volume are backed up by Windows Server Backup Yes, this allows backups of passive database copies to be restored, although not directly Yes, this would allow a backup of a passive database copy to be used for disaster recovery of a database No, the backup time stamp is not written when a passive database copy is backed up, so any monitoring of backups that involves checking that time stamp needs to take that into consideration http://blog.chrislehr.com/2010/03/exchange-2010-dag-backups-using-windows.htm

LAB: Exchange 2010 Recovery by WSB

Image
  http://www.simple-talk.com/sysadmin/exchange/restoring-exchange-server-2010-using-windows-server-backup/ http://exchangeserverpro.com/restore-individual-mailbox-exchange-2010                                   http://technet.microsoft.com/en-us/library/bb125218.aspx    

E14 Ticket: Unable to Download OAB after Exchange 2010 SP2–Part2

Image
  (*Final Answer*) OAB issues after simplifying the OWA 2010 URL? http://blogs.msexchange.org/walther/2010/03/22/oab-issues-after-simplifying-the-owa-2010-url/ http://social.technet.microsoft.com/wiki/contents/articles/simplify-the-outlook-web-app-url-in-exchange-server-2010.aspx     http://social.technet.microsoft.com/Forums/sk/exchange2010/thread/0e2e73a1-73ca-4d0c-a5a3-3434be8ebd73 Perhaps you are seeing the same thing.  Check the OAB directory (%ExchangeInstallPath%\ClientAccess\OAB) for a web.config file.  If it exists you can do one of two things.  Delete it (I usually rename it) or grant NT Authority\Authenticated Users READ access to the web.config file. You may have to reset IIS after making the change; not 100% on that.

E14 Ticket: Unable to Download OAB after Exchange 2010 SP2

Image
    ======================================================================= Part 3 ======================================================================= 1. 2. 3. Get the value of OAB Container OAB Server: BQT-MBX01 [PS] Get-OfflineAddressBook –Server BQT-MBX01 | fl DistinguishedName : CN=BQT-MBX01 OAB,CN=Offline Address Lists,CN=Address Lists Container,CN=MSFT,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=corp,DC=com 4. Set $TenantOAB [PS] C:\>$TenantOAB="CN=BQT-MBX01 OAB,CN=Offline Address Lists,CN=Address Lists Container,CN=MSFT,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=corp,DC=com" 5. Add-ADPermission -User “Domain Users” (Security Group) [PS] C:\>Add-ADPermission $TenantOAB -User "MSFT\Domain Users" -ExtendedRights "MS-EXCH-DOWNLOAD-OAB"| Identity User Deny Inherited -------- ---- ---- --------- \BQT-MBX01 OAB MSFT\Domain Users False False 6. Che

E14 Ticket: REDIRECTING OWA URLS IN EXCHANGE 2010

    http://www.howexchangeworks.com/2012/04/redirecting-owa-urls-in-exchange-2010.html   http://www.n2networksolutions.com/2011/01/13/redirect-port-80-on-exchange-2010-to-ssl-or-443-for-owa-or-outlook-web-access/

E14–Autodiscover overwrites Outlook “MSSTD” setting

Image
  1. Keywords Autodiscover Outlook Provider MSSTD mutual autentication disable mutual authentication exchange 2010   2. Question http://social.technet.microsoft.com/Forums/en-US/exchange2010/thread/25d2188c-37eb-4d72-952a-2f8ca9e461bd http://www.agileit.com/Blog/Lists/Posts/Post.aspx?List=c12b6877-9140-4536-b226-b3e11ff929a3&ID=278&RootFolder=%2A&Web=b8624129-0cec-4b70-9743-b27ca84c4802   What you need to do is to configure the Outlookprovider EXPR. Set-OutlookProvider EXPR -CertPrincipalName msstd:bleum.com You can also set the CertPrincipleName to a value of none to disable mutual autentication, but I really don't recommend that. Example: Set-OutlookProvider EXPR -CertPrincipalName none When that has been done, recycle the applicationpool MSExchangeAutodiscoverAppPool in IIS 3. Before recycle IIS Pool   4. Recycle IIS Pool   5. EXRCA after recycle IIS pool http://technet.mic

E14– Windows Server Backup on DAG–Part6-BalanceDbsByActivationPreference

Image
    1. @echo off For /f "tokens=1-3 delims=/ " %%a in ('date /t') do (set date=%%a-%%b-%%c) For /f "tokens=1-2 delims=: " %%a in ('time /t') do (set time=%%a:%%b) rem echo The date is %date% rem echo The time is %time% set backuplog="c:\batch\WSB\BackupLog\"%computername%-WSB.txt"" echo. Start:%date%  %time%  >> %backuplog% echo. ================================== >> %backuplog% Rem ================================== wbadmin start backup  -backupTarget:B: -include:P:,S:,T:,U:,V:,W:  -vssFull -quiet >> %backuplog% Rem ================================== echo. ================================== >> %backuplog% echo. End    >> %backuplog% For /f "tokens=1-3 delims=/ " %%a in ('date /t') do (set

E14– Windows Server Backup on DAG–Part5–Process WSB on DAG active node

Image
  1.   2. @echo off For /f "tokens=1-3 delims=/ " %%a in ('date /t') do (set date=%%a-%%b-%%c) For /f "tokens=1-2 delims=: " %%a in ('time /t') do (set time=%%a:%%b) rem echo The date is %date% rem echo The time is %time% set backuplog="c:\batch\WSB\BackupLog\"%computername%-WSB.txt"" echo. Start:%date%  %time%  >> %backuplog% echo. ================================== >> %backuplog% Rem ================================== wbadmin start backup  -backupTarget:B: -include:P:,S:,T:,U:,V:,W:  -vssFull -quiet >> %backuplog% Rem ================================== echo. ================================== >> %backuplog% echo. End    >> %backuplog% For /f "to

E14– Windows Server Backup on DAG–Part4–Process WSB on DAG passive node

Image
  1. echo off For /f "tokens=1-3 delims=/ " %%a in ('date /t') do (set date=%%a-%%b-%%c) For /f "tokens=1-2 delims=: " %%a in ('time /t') do (set time=%%a:%%b) rem echo The date is %date% rem echo The time is %time% Rem ================================== PowerShell.exe -command ". C:\Batch\WSB\PS_RedistributeActiveDatabase_before-WSB.ps1" Rem ================================== Cscript C:\Batch\WSB\DB_Active_Notify.vbs Rem ================================== del  "C:\Batch\WSB\DB_Activation_Log\DB_Activation.txt" Timeout /T 100 Rem ================================== Rem ================================== set backuplog="c:\batch\WSB\BackupLog\"%computername%-WSB.txt"" echo. Start:%date%  %time%  >> %backuplog%