Exchange Server 2010 - Smith.n - Smith.N Studio

2010
Microsoft Vit Nam

Truong Van Quang

[Company E-mail]
QUN TR EXCHANGE SERVER 2010

Smith Nguyen Studio.
https:/ / www.facebook.com/ SmithNguyenStudio
1
Qun tr Exchange server 2010 | Lu hnh ni b

1 Module 1: Chuyn i Active Directory t Windows Server 2003 sang Windows Server 2008 |
Microsoft Vit Nam

Ni dung
Part 1: Nng cp & chuyn i AD 2003 sang 2008 v Exchange 2003 sang 2010
Module 1: Chuyn i Active Directory t Windows Server 2003 sang Windows Server 2008 .................. 2
Module 2 Chuyn i Exchange server 2003 sang Exchange server 2010 ................................................ 29
Module 3 G b EXCHANGE 2003 v ACTIVE DIRECTORY 2003 ra khi h thng ..................................... 74

Part 2: Qun tr Exchange 2010
Module 4 Qun l MAILBOX SERVERS ........................................................................................................ 99
Module 5 Qun l RECIPIENT .................................................................................................................... 115
Module 7 Qun l CLIENT ACCESS ROLE ................................................................................................... 154
Module 8 Qun l MESSAGE TRANSPORT ................................................................................................ 236
Module 9 Trin khai MESSAGING SECURITY ............................................................................................. 247
Module 10 Trin khai HIGH AVAILABILITY ................................................................................................ 278
Module 11 Trin khai BACKUP v RECOVERY ......................................................................................... 308
Module 12 Bo v EXCHANGE SERVER 2010 ............................................................................................ 344

2

Microsoft Vit Nam

Module 1: Chuyn i Active Directory t Windows Server 2003 sang
Windows Server 2008

I. Gii Thiu
Vi s ra i ca Windows Server 2008 cng vi nhng tnh nng ci thin ni bt
cng nh cc yu t lin quan n bo mt l mt vn tt yu. Chnh v vy trong
bi lab ny chng ti s hng dn bn cc bc chun b v nng cp h thng AD
hin ti trong doanh nghip ca bn ln h thng AD mi vn hnh trn nn MS
Windows Server 2008 m vn gi nguyn c cu trc t chc h thng AD hin ti
trong doanh nghip ca bn.
II. Mc ch
Chuyn i cu trc h thng AD hin ti ang vn hnh trn nn MS Windows Server
2003 sang MS Windows Server 2008
III. M Hnh
1. Trc khi nng cp

3

Microsoft Vit Nam

2. Sau khi nng cp

IV. Yu Cu
1. Yu cu h thng hin ti
OS: MS Windows Server 2003 SP2
Domain functional level: Windows Server 2003

2. Yu cu phn cng
Minimum Recommended
Processor 1.0Ghz 2.0Ghz or faster
Memory 512MB 2.0GB or greater
Hard disk 10GB 40GB or greater

3. Yu cu phn mm
DVD: MS Windows Server 2008 cng phin bn vi h thng hin ti (Enterprise
hoc Standard)

4

Microsoft Vit Nam

V. Thc Hin

Trong bi lab ny ta s s dng 3 my:
- DC2003: my DC ang chy trn nn Windows Server Enterprise 2003 SP2
- EX2003: my Exchange Server 2003 chy trn nn Windows Server Enterprise
2003 SP2
- DC2008: my dng ci t Windows Server Enterprise 2008 v s lm Addition
Domain Controller

1. Join domain
Server DC2008 Sau khi ci t cn phi c join vo domain 2003.
ng nhp v server mi sau khi ci t vi username: administrator v password:
p@ssw0rd m Server Manager

Click Change System Properties s xut hin hp thoi nh hnh di click change
5

Microsoft Vit Nam

Sau khi click change s xut hin hp thoi nh hnh bn di chn domain v nhp
vo tn domain hin ti ca h thng ca bn.

Click OK v s xut hin hp thoi hi thng tin ca mt user no c quyn join
domain. y chng ti s nhp username: administrator v password: p@ssw0rd

6

Microsoft Vit Nam

Sau khi nhp thng tin xong v click OK th s xut hin hp thoi cho mng nh bn
di click OK 2 ln click close v h thng s yu cu khi ng li

7

Microsoft Vit Nam

3. M rng schema v quyn hn cn thit cho forest v domain c th chy
trn nn windows server 2008
B a source ca windows server 2008 vo DVD tray ca server DC hin ti v chy
ln lt cc lnh bn di
Start CMD chuyn ti a cha source windows server 2008 v g lnh
Sources\adprep\adprep.exe /forestprep: m rng schema master cho forest nhp
c v nhn enter tip tc

Ch mt khong thi gian cho vic thc thi ny v s xut hin kt qu nh bn
di

8

Microsoft Vit Nam

Ti CMD tip tc g tip lnh Sources\adprep\adprep.exe /domainprep /gpprep: lnh
ny s chnh sa cc i tng trn AD hin ti cho ph hp vi cu trc AD ca
windows server 2008

Tip tc g lnh Sources\adprep\adprep.exe /rodcprep

4. Sau khi chun b xong cc bc trn ta tin hnh nng cp server windows
server 2008 va ci thnh mt Additional Domain Controller trn h thng
Start g dcpromo enter v xut hin hp thoi nh hnh bn di

9

Microsoft Vit Nam

Click next tip tc

Hp thoi gii thiu v DC ca windows server 2008 xut hin click next tip tc

10

Microsoft Vit Nam

Click chn existing forest add a domain controller to an existing domain click next

11

Microsoft Vit Nam

Hp thoi khai bo thng tin domain s ci t DC mi v thng tin chng thc
install DC mi. mc nh v click next

Chn domain mc inh v click next tip tc
12

Microsoft Vit Nam

Chn site mc nh v click next tip tc

13

Microsoft Vit Nam

Trong yu cu ca bi lab ny s dung server ny thay th h thng DC hin ti nn
ta chn 2 dch v DNS Server v Global Catalog click next tip tc

mc nh v click next

14

Microsoft Vit Nam

Nhp mt mt khu dung bo v domain trong trng hp cn phc hi click next

Hp thoi thng tin tng qut ca DC mi s xut hin nh hnh bn di click next

15

Microsoft Vit Nam

Sau khi click next th qu trnh ci t mt Additional DC bt u

Ch mt khong thi gian ci t th server s xut hin hp thoi nh hnh bn
di v click finish han tt. Server s yu cu khi ng li.
16

Microsoft Vit Nam

17

Microsoft Vit Nam

5. Sau khi nng cp server mi thnh Additional DC ta s tin hnh di chuyn
role t server DC chnh sang Additional DC

Cc role cn di chuyn l:
- Schema master role
- Domain name master role
- RID master
- PDC Emulator
- Infrashtructure

Ti my DC 2003:

a. Transfer Schema Master role
Start run nhp regsrv32 schmmgmt.dll

Start run mmc enter chn menu file Add/remove snap-in
18

Microsoft Vit Nam

Click Add chn Add Active Directory Schema click Add click close OK

Mn hnh Active Directory Schema s xut hin
19

Microsoft Vit Nam

Click phi ln Active Directory Schema chn change domain controller

20

Microsoft Vit Nam

Hp thoi change domain controller xut hin. Chn specify name v nhp tn y
ca server Additional DC click OK

Click phi ln Active Directory Schema chn Operation Master

21

Microsoft Vit Nam

Click change

Click yes: ng chuyn i

Click OK: hon tt qu trnh change
22

Microsoft Vit Nam

b. Transfer domain master role
Click Start Programs Administrative Tools -> Active Directory and Trusts

23

Microsoft Vit Nam

Click phi ln Active Directory Domain and Trusts chn connect to Domain
Controller

Chn DC2008.mshome.com click OK

24

Microsoft Vit Nam

Click phi ln Active Directory Domain and Trusts chn Operation Master...

Click change click yes xc nhn
Click
OK han tt qu trnh transfer.
25

Microsoft Vit Nam

c. Transfer RID, PDC Emulator, Infrastructure
Click start Programs Active Directory User and Computers

Click phi ln domain mshome.com click chn connect to domain controller
26

Microsoft Vit Nam

Click chn dc2008.mshome.com click OK

Click phi ln mshome.com chn operation masters
27

Microsoft Vit Nam

Ti tab RID ln lt chn change yes OK hon tt qu trnh change

28

Microsoft Vit Nam

Tng t ti tab PDC v Infrastructure

n y coi nh ta tin hnh chuyn i chc nng domain controller chnh trong h
thng sang server DC2008. Tuy nhin do h thng cn tn ti EX2003 nn ta tm thi
cha remove server DC2003 ra khi h thng m s tin hnh cc bc nng cp h
thng EX2003 thnh EX2010 trc ri sau s tin hnh remove sau. Phn ny s
c trnh by trong cc lab tip theo.
29

29 Module 2 Chuyn i Exchange server 2003 sang Exchange server 2010 | Microsoft Vit Nam

Module 2 Chuyn i Exchange server 2003 sang Exchange server 2010

I. Gii Thiu
Nh trong bi lab trc chng ti gii thiu cc bn cch thc chuyn i
mt h thng AD ang vn hnh trn nn windows server 2003 sang server
windows 2008. Tip tc bi lab ny chng ti s hng dn cc bn cch
chuyn i h thng exchange server 2003 ca doanh nghip cc bn sang
h thng exchange server 2010 vi y tnh nng ca mt exchange
server 2003 v bn cnh l nhng tnh nng mi ni tri khc so vi cc
phin bn exchange 2000, exchange 2003 hoc exchange 2007

II. Mc ch
- Ci t exchange 2010 trong cng mt h thng vi exchange 2003
- Di chuyn cu trc mailbox, public folder v system folder ca exchange 2003
ti exchange 2010

III. M Hnh
1. Trc khi transition

30


2. Sau khi transition

IV. Yu Cu
1. Yu cu h thng hin ti
Trong bi lab ny s tip tc vi h thng bi lab trc nn cu trc h thng khng
thay i v bt buc phi ging cu trc h thng trc.
Domain functional level windows server 2003
Active Directory forest windows server 2003
Exchange Server 2003 organization native mode, version SP2
Link state trn exchange server 2003 disable
OS Global catalog Servers windows server 2003 SP1 or later
OS Active Directory Schema Master windows server 2003 SP1 or later

Do k tip bi lab trc nn ta s kim tra cc yu t cn li
Active Directory forest: Windows Server 2003
31


Exchange Server 2003 organization: Native Mode

Disable link state:
- Di chuyn ti
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RESvc\Parameters
32


- To mi mt registry DWORD Value vi tn SuppressStateChanges

- V t cho gi tr ny bng 1

2. Yu cu phn cng

CPU Support 64 bit
Memory
4GB nu ci 3 role Hub Transport, Client Access, v Mailbox chung trn
mt server.
33


2GB cho mi role Edge Transport, Hub Transport, Client Access, v
Mailbox nu ci ring tng role.
4GB cho role Unified Messaging role. Ngoi ra ta cn cn t 2 n 4MB
cho mi mailbox.
HDD
t nht 1.7 GB (1.2 GB cho a ci Exchange Server 2010 v 500MB cho
a h thng)
File format NTFS

3. Yu cu phn mm
- DVD source Microsoft Windows Server 2008 R2 64bit
- DVD source exchange server 2010

V. Thc Hin
1. Chun b
V tnh cht yu cu ca exchange 2010 bt buc phi c ci t trn nn
windows server 2008 64 bit nn bt buc chng ta phi chun b mt server
ci t OS server windows server 2008 R2 64bit. Sau khi ci t th ta s
tin hnh join domain ny vo h thng hin ti v ng nhp vo server ny
vi quyn domain admin. ci t windows server 2008 v join domain vui
lng xem li bi lab trc.

2. Ci t thnh phn yu cu ca exchange 2010
Trc khi ci t exchange 2010 ta phi ci t cc thnh phn yu cu ca
exchange. Cc thnh phn yu cu ca exchange nh bn di

a. Web Server
o Security
Basic Authentication
Windows Authenticaton
Digest Authentication
o Performance
Static content compression
Dynamic content compression
o Management Tools
IIS Management console
o IIS 6 Management Compatibility
IIS 6 metabase compatibility
IIS 6 WMI compatibility
34


IIS 6 scripting tools
IIS 6 management console
ci t web server v cc module ca web server ta vo start Server
Manager

Click Add Roles click Next
35


Chn Web Server click Next 2 ln

Chn cc services nh yu cu bn trn
36


Click Next click install bt u ci t click close ng ca s add
role.

37


b. Server Feature
o Net Framework 3.5 SP1
o HTTP activation
o RPC Over HTTP Proxy
o Remote server administration tools
AD DS and AD LDS Tools
Ti server manager click Features click Add Features

Chn cc features lit k trn click next 3 ln click install
38


Click close v h thng s yu cu khi ng li khi ng li my.

39


c. Net Tcp Port Sharing mode automatic

3. Ci t exchange 2010
a. Ci t exchange 2010
Trc khi ci t exchange 2010 ta phi tin hnh chun b qua nhiu giai on
khc nhau v c l y l giai on lin k v cng l cui cng trc khi tin
hnh ci t mt exchange 2010. ci t exchange 2010 ngai cc
component yu cu ta phi chun b mi trng cho exchange. Mi trng
y c cp l g ? chi tit hn ta hy lm cc bc tip theo ca bi lab
ny.

M CMD chuyn ti th mc cha source exchange 2010 ln lt g cc
lnh sau:

Setup.com /PrepareLegacyExchangePermissions : exchange 2003 s dng
Receipient Update Service (RUS) cp nhp danh sch a ch v a ch email
trong AD nhng trong exchange 2010 tnh nng ny c thay th bi Email
40


Address Policy. Tham s /PrepareLegacyExchangePermissions dng
chun b cho 2 h thng exchange cng c th tn ti trn cng mt AD.

Setup.com /PrepareSchema : lnh ny dng m rng AD schema cho
exchange 2010
41


Setup.com /PrepareAD : lnh ny s update h thng exchange hin ti v lu
thng tin cu hnh trn AD h tr exchange 2010. Trong exchange 2003 thng
tin c lu trong First Administrative Group. V tng t exchange 2010 s
to mt Administrative Group vi tn Exchange Administrative Group
(FYDIBOHF23SPDLT) lu thng tin ca exchange 2010. V phn ny s
c hin th thng qua System Manager ca exchange 2003.
42


43


Setup.com /PrepareDomain : y l bc cui cng to cc nhm cn thit
cho exchange 2010 trn Active Directory

Ti y ta c th tin hnh ci t exchange 2010 trn h thng cng vi
exchange 2003.
a DVD source exchange 2010 v DVD tray v double click trn file setup.exe
click choose exchange language option click install only languages from the
DVD
44


Click Install Microsoft Exchange

Mn hnh cho mng xut hin click next
45


Click I accept the term click next 2 ln

46


Ti y nu ci t mc nh ta chn Installation Type l Typical, ti y ta
khng chn Custom click next

Trong m hnh bi lab ny ta chn 3 role cn ci t l mailbox role, client
access role v hub transport role click next

47


Ti y ta tick chn The Client Access server role will v nhp tn domain
m ta dng phc v cho client truy cp check mail thng qua web. click next

Ti Mail Flow settings ta nhn chn browse v ch ra server EX2003 click next

48


Cc thng s cn li ta mc nh cho ti qu trnh ci t exchange 2010

49


Ti y ta hon thnh vic ci t exchange 2010 trong cng mt h thng
vi exchange 2003.

Sau khi ci t xong exchange 2010 ta s kim tra qua h thng xem c nh
hng n vic gi/nhn mail ca user khng ?
Login vo webmail ca user sales01 v gi 1 email cho nhm sales
50


ng nhp vo user sales02 kim tra xem c nhn c email t user sales01
khng ?

51


Kt qu t user sales02:
- Nhn c mail t sales01 gi cho nhm sales.
- Calendar meeting ca user sales02 vn hot ng.

Quan st kt qu v cho thy ti y vic gi/nhn mail ca cc user c mailbox
thuc h thng c khng c vn g.

b. Cu hnh Hub Transport
Cu hnh Send Connectors gi email

to mi send connectors ta m Exchange Management Console
Organization Configuration Hub Transport click Send Connectors tab
click phi chn New Send Connectors nh hnh bn di
52


Sau khi click s xut hin ca s New Send Connector wizard nhp Internet
ti phn Name click Next

53


Trang tip theo s xut hin phn address space click add ti mc Address
g du * v click OK

Click Next

54


Sau khi click next th cc thng s cn li mc nh n cui cng v nhn
New finish

Cu hnh Receive Connectors nhn email
Cng ti Exchange Management Console di chuyn ti Server Configuration
Hub Transport click phi ln Default receive connector (Default EX2010)
chn Properties

Tab authentication b chn Offer Basic authentication only after starting TLS
55


Di chuyn qua tab Permission Groups check Anonymous users click OK

56


4. Transition database t exchange 2003 sang exchange 2010
a. Moving public folders & system folders
Trc khi bt u phn ny chng ti t ra mt cu hi: trong h thng ca bn
my client c s dng MS Outlook 2003 hoc cc phin bn c hn khng ?

NOTE: Nu client ca bn ch dng MS Outlook 2007 hoc cc bn sau ny th
b qua bc ny. Bi v trong cc b office sau ny c tch hp dch v
Auto Discover i km theo.

Trong phn ci t trc c mt thng bo sau khi ci t xong nh bn di.
Warning:
If Microsoft Office 2003 is in use, you should replicate the free/busy folder on this
server to every other free/busy server in the organization. This step should be
performed once setup completes.

Chnh v vy ta phi thc hin bc ny trc tin sau qu trnh ci t han tt.
Replicate System Folders
M Exchange System Manager m rng Administrativ Groups First
Administrative Group Folders click phi ln Public Folders chn View
System Folders

57


Sau khi chn view system folders di chuyn ti SCHEDULE + FREE BUSY
click phi ln First Administrative Groups nh hinh bn di Properties

Ti y chn tab Replication click Add

T public store chn public folder database ca server Exchange 2010 click
OK
58


Chnh replication interval v replication priority nh hnh bn di click OK

Replicate Public Folders
59


Tng t nh replicate system folder, i vi public folders ta cng thc hin
tng t. Trong trng hp h thng ca bn khng s dng public folder th c
th b qua bc ny.

Ti Exchange System Manager m rng Administrative Groups First
Administrative Group Folders click phi ln Public Folders chn View
Public Folders

Sau khi chn view public folder th ta s thy cc public folder hin c trong h
thng ca chng ta. Trong trng hp bi lab ny ti ly v d i vi public
folder Sales

Click phi ln public folder Sales chn properties

60


Click chn tab Replication click Add

T public store chn public folder database ca server Exchange 2010 click
OK
61


Sau khi chn public folder database ta chnh li replication interval v replication
priority nh hnh bn di click OK

b. Moving mailbox database
62


Nh vy l ta cu hnh replicate public folder xong. Trong phn ny chng ta
s tm hiu v cch thc move mt mailbox v cch thc move nhiu mailbox
mt lc.

- Move mt mailbox ring l

move mt mailbox ta m Exchange Management Console Recipient
Configuration Mailbox Click phi ln mailbox cn move chn New Local
Move Request

Mt ca s New Local Move Request s xut hin click browse
63


Sau khi click browse s xut hin bng la chn Mailbox Database nh hnh bn
di, ti y ta chn mailbox database ca server EX2010 click OK

Click Next Next New Finish hon thnh vic move mailbox cho user.
64


Ti hnh di ta c th quan st v thy rng nu user thuc mailbox ca server
EX2010 s c Recipient Type l User Mailbox, ngc li s l Legacy Mailbox

- Move ng thi nhiu mailbox
65


Nh hnh trn ta thy c 4 user: sales01, sales02, tech01 v tech02 thuc
mailbox ca server EX2003. Trong phn ny ta s thc hin move ton b cc
user c mailbox trn server EX2003 qua server EX2010.

Trc tin ta cn xc nh mailbox database ca user s c move ti. Trong
exchange management console Server Configuration Mailbox: Ti y ta
c th d dng thy c tn cc mailbox hin c trn server EX2010

ly tn y ca mt mailbox ta click phi ln mailbox cn ly tn v qut
khi nh hnh bn di
66


Sau ta m Exchange Management Shell v g dng lnh sau tin hnh
move mailbox cho hang lot user:
Get-Mailbox RecipientTypeDetails legacyMailbox | New-MoveRequest TargetDatabase
Mailbox Database 1128590833

Dng lnh trn s truy vn tan b trn exchange organization ca EX2003 v
s gi kt qu t lnh New-MoveRequest. Lnh ny s a vo hng i v x
67


l trong ch ngm. Sau mt thi gian bn c th s dng lnh Get-
MoveRequest xem trng thi ca cc jobs move mailbox ngm trn h
thng.

Sau khi hon tt bn c th remove cc request bng lnh Remove-
MoveRequest trong Exchange Management Shell

c. Move Offline Address List
68


di chuyn offline address list trong exchange management console ta m
organization configuration mailbox tab Offline Address Book

Click phi ln Default Offline Address List chn Move

Bng Move Offline Address Book xut hin click browse
69


Chn Mailbox server EX2010 click OK

Click move click finish hon tt qu trnh move OAB.
70


d. Update Email Address Policy
71


update email address policy ta khng th dung exchange management
console m phi g lnh trc tip trong exchange management shell. M
exchange management shell v g lnh sau:
Get-EmailAddressPolicy | where {$_.RecipientFilterType eq Legacy} |
Set-EmailAddressPolicy IncludedRecipients AllRecipients

e. Update Address List
update address list ta ngay ti shell ta g ln lt 5 lnh sau, tr li Y khi
c hi.
Set-AddressList All Users IncludedRecipients MailboxUsers

Set-AddressList All Groups IncludedRecipients Mailgroups

Set-AddressList All Contacts IncludedRecipients MailContacts
72


Set-AddressList "Public Folders" -RecipientFilter {RecipientType -eq
'PublicFolder' }

Set-GlobalAddressList "Default Global Address List" -RecipientFilter
{(Alias -ne $null -and (ObjectClass -eq 'user' -or ObjectClass -eq
'contact' -or ObjectClass -eq 'msExchSystemMailbox' -or ObjectClass -
eq 'msExchDynamicDistributionList' -or ObjectClass -eq 'group' -or
ObjectClass -eq 'publicFolder'))}

73


n y l ta tin hnh ci t v chuyn i cc database t exchange 2003
qua exchange 2010. Vic cn lm tip theo l cu hnh li cc record DNS trong
h thng cho ph hp vi doanh nghip ca mnh. Trong sut cc bi lab ti s
s dng record https://webmail.mshome.com/owa phc v vic truy cp web
cho client.

74

74 Module 3 G b EXCHANGE 2003 v ACTIVE DIRECTORY 2003 ra khi h thng | Microsoft
Vit Nam

Module 3 G b EXCHANGE 2003 v ACTIVE DIRECTORY 2003 ra khi h
thng

I. Gii Thiu
Trong 2 bi lab trc chng ti hng dn cc bn cch ci t ci t v
chuyn i cu trc ca mt h thng AD trn nn Windows Server 2003 qua AD
trn nn Windows Server 2008 v Exchange Server 2003 qua Exchange Server
2010. Tuy nhin trong h thng vn tn ti server AD 2003 v Exchange 2003.
Trong bi lab ny chng ti s tip tc hng dn cc bn cch thc g b 2
server ny ra khi h thng hin ti ca chng ta.

II. Mc ch
- G b server Exchange 2003 ra khi h thng hin ti
- G b server AD 2003 ra khi h thng hin ti
- Kim tra cc tnh nng sau khi g b 2 server AD 2003 v Exchange 2003

III. M Hnh
1. Trc khi remove

75

Vit Nam

2. Sau khi remove

IV. Yu cu
- thc hin 2 bi lab 1 v lab 2
- M hnh lab s bao gm 4 my:
o DC2003: ng vai tr server AD 2003
o EX2003: ng vai tr server Exchange 2003
o DC2008: ng vai tr server AD2008 c chuyn i cc role t DC2003
qua
o EX2010: ng vai tr server EX2010 trong h thng v c chuyn i
cc mailbox, public folder v system folder t EX2003 qua.

V. Thc Hin
1. G b server exchange 2003 ra khi h thng
Trong phn ny chng ta s tin hnh g b exchange 2003 ra khi h thng.
Trc khi thc hin ta phi kim tra xem public folder v system folder sync
hon tt cha.

76

Vit Nam

Ti system manager ca exchange 2003 ta chn view public folder v chn
folder cu hnh replicate trong phn lab trc chuyn ti tab replicate v
nu thy kt qu nh hnh bn di ngha l folder ang trong trng thi sync
data.

Nu nh nhn thy replication status l Local Modified hoc Remote
Modified tc l replicate thnh cng.
77

Vit Nam

78

Vit Nam

Sau khi replicate xong ta kim tra ti EX2010 thng qua public folder
management console xem c cc public folder c ca EX2003 cha.

Hoc ta cng c th kim tra bng cch ng nhp vo webmail vi mt user
no c quyn xem ti public folder kim tra xem cc ch din ra ti
c cn khng ?
79

Vit Nam

n y ta c th tin hnh g b exchange 2003 ra khi h thng.

a. G b cc component ca exchange 2003

Dng exchange system manager Administrative Groups First
Administrative Group Folders click phi ln tng folder replicate trong
cc phn trc chn Properties tab replication chn Public Folder
Store ca exchange 2003 click remove click OK

80

Vit Nam

Lp li cc bc trn cho tt c cc public folder v system folder.

Remove kt ni ca exchange 2003 v exchange 2010

81

Vit Nam

Mc d exchange 2010 khng dng recipient update service nhng ta cn khai
bo trn exchange 2003 l exchange 2010 ph trch cng vic ny. Bi v ta
khng th remove exchange 2003 t mt server ang cung cp dch v ny.
M exchange system manager recipients recipient update services

Click phi ln tng recipient services chn properties
82

Vit Nam

Trong phn Exchange Server click browse chn server EX2010 v click OK

83

Vit Nam

Bc tip theo ta cn dismount mailbox store ca exchange 2003 ra khi h
thng sau tin hnh delete mailbox store ca EX2003. dismount v
delete mailbox store ta lm theo cc bc sau.

Confirm yes

84

Vit Nam

Sau khi dismount mailbox store th delete mailbox store ra khi h thng hp
thoi thng bo nhc nh v yu cu xc nhn xut hin, click yes 2 ln
thc thi.

b. Remove exchange 2003
n y ta c th g b exchange 2003 ra khi h thng ca chng ta. g
b exchange 2003 m start setting control panel

85

Vit Nam

Click add or remove programs Microsoft Exchange click remove ch
mt lc th ca s wizard remove exchange xut hin click Next

Chn remove click next 2 ln remove exchange 2003

86

Vit Nam

Click finish. Ti y hon tt qu trnh remove exchange 2003 ra khi h
thng

87

Vit Nam

2. G b server AD 2003 ra khi h thng
Ti server DC2003 vo menu start run g dcpromo

Sauk hi g dcpromo th ch mt lc ca s active directory wizard s xut hin
click next

Hp thoi thng bo s xut hin v click OK

88

Vit Nam

Sau khi click OK bng thng bo mi xut hin, ti y ta c 2 la chn:
- Nu ta mc nh, khng chn This server is the last th s chuyn i
server ny thnh mt member server ca h thng domain hin ti.
- Nu chn This server is the last th s chuyn i server ny thnh mt
standalone server bnh thng.
V yu cu ca bi lab ny nn ta s mc nh v click next

Bc tip theo s yu cu cung cp mt khu mi gn cho ti khon
administrator click next
89

Vit Nam

Hp thoi thng bo kt qu tng qut ca cc la chn trc click next

Sau khi click next th qu trnh g b server DC2003 ra khi h thng s bt u
v sau khi hon thnh th server s yu cu khi ng li.
90

Vit Nam

n y ta hon thnh 2 vic chnh:
- G b server exchange 2003 ra khi h thng hin ti.
91

Vit Nam

- G b server AD 2003 ra khi h thng hin ti.

3. Kim tra cc chc nng ca h thng sau khi g b 2 server DC2003 v
EX2003

Ta cn kim tra cc task sau ca h thng:
- Vic gi/nhn mail ca user.
- Vic trao i trong public folder.
- Join thm mt my bt k vo h thng domain mshome.com hin ti.

a. Kim tra tnh nng trao i mail ca user
Ti bt k my no trong h thng m webmail https://webmail.mshome.com/owa v
truy cp vi quyn ca user sales01 v gi 01 mail cho nhm tech@mshome.com
v CC cho nhm sales@mshome.com click send

Sau khi send xong th kim tra xem user sales01, sales02, tech01 v tech02
c nhn c mail khng.

Sales 01:
92

Vit Nam

Sales 02:

Tech 01:
93

Vit Nam

Tech 02:

94

Vit Nam

b. Kim tra tnh nng trao i trong public folder
Ti webmail ca user sales02 to new post trong folder sales

Dng user sales01 kim tra xem c post ca user sales02 khng v reply li
post cho user sales02

Post reply
95

Vit Nam

Qua user sales02 v thy c reply ca user sales01

c. Join my PC01 vo domain mshome.com
ng nhp vo my PC01 click phi My Computer properties tab
computer name click change
96

Vit Nam

Hp thoi computer name changes xut hin, chn domain v nhp vo
mshome.com click OK
97

Vit Nam

Sau khi click OK th s xut hin hp thoi yu cu username v password cho
php join domain nhp thng tin v click OK

98

Vit Nam

Sau khi click OK th hp thoi cho mng bn join domain mshome.com xut
hin click OK 3 ln v restart li my.

n y ta hon thnh vic join domain cho my PC01 vo domain
mshome.com trn my DC2008
Kt lun: Nh vy ta hon thnh vic nng cp h thng Exchange 2003 ln
Exchange 2010 v Active Directory trn server DC2003 ln Active Directory trn
server DC2008 m vn gi nguyn c cu trc hin ti ca h thng c,
khng gy nh hng n h thng hin ti.

99

99 Module 4 Qun l MAILBOX SERVERS | Microsoft Vit Nam

Module 4 Qun l MAILBOX SERVERS
I. Gii Thiu
Trong cc bi lab trc chng ti hng dn cc bn cch ci t ci t,
nng cp v g b exchange 2003 ra khi h thng. Trong bi lab ny chng ta
s tip tc tm hiu v cng c qun l ca exchange, cch thc cu hnh
mailbox servers role, cu hnh public folders.

II. Mc ch
- Tm hiu v cng c qun l exchange management console v exchange
management shell
- Cu hnh mailbox server roles
- Cu hnh public folders

III. M Hnh

IV. Yu cu
M hnh lab s bao gm 3 my:
qua
100


o EX2010-2: ng vai tr server exchange th 2 trong h thng

V. Thc Hin
1. Tm hiu cng c qun l exchange
Cng c exchange management console cung cp cho bn giao din thn thin
h tr bn qun l exchange server 2010. Ngi qun l chuyn nghip cn
hiu c cc thnh phn cu hnh ca exchange server 2010 v c bn v
exchange management shell. Trong phn ny chng ta s tm hiu v cc cng
c qun l ny
a. Exchange management console
Cng c exchange management console dng m hnh MMC bao gm 4 ca
s. Trong thanh bn tri l phn qun l chnh, bao gm 4 thnh phn:
Organization Configuration, Server Configuration, Recipient Configuration v
Toolbox. Mi phn ny c tng chc nng ring bit.

Organization Configuration
Trong organization configuration cha cc thng s cu hnh ca tng server
role m n nh hung ln tng h thng c lin quan n n. Trong phn ny
101


cho php bn qun l database, activesync policy, journal rules v transport
rules, thng s nh dng email, qun l email domain

Server Configuration
Ni lu thng tin cu hnh cho mi exchange server trong ton b h thng.
Cu hnh m bn c th qun l y nh: cu hnh phn tch log h thng,
qun l license exchange server, qun l cu hnh my ch phc v vic truy
cp outlook web.

Recipient Configuration
Ti recipient configuration dng qun l mailbox, to mi mailbox, cu
hnh distribution groups v contact. Bn cng c th dng di chuyn hoc
ti to kt ni mt mailbox ti y.

Toolbox
Trong toolbox cha nhiu cng c ti y ta c th theo di, x l v qun l
exchange server. Nhng cng c ny bao gm nh exchange best practices
analyzer, public folder management console, messaging tracking, database
recovery management

b. Exchange management shell
Exchange management shell v exchange management console chy trn
nn windows powershell 2.0. Chng dng cmdlet, y l lnh chy trn
windows powershell. Mi cmdlet cha mt chc nng thc thi c lp, bn c
th kt hp nhiu cmdlet thc thi nhiu lnh phc tp.

102


Trong exchange management shell c khong 700 cmdlet thc thi cc cng
vic qun l ca exchange. Exchange management shell ging nh mt giao
din dng lnh CMD ca windows dng qun l exchange server 2010.

Exchange management shell l mt shell qun l hon thin cung cp mt
cng c qun l phc tp, script engine, cc bin v cc chng trnh gip
to ra cc kch bn qun l c nhanh chng v tin li hn.

2. Cu hnh mailbox servers role
a. To database cho nhm sales
to mi mt mailbox di chuyn ti organization configuration click new
mailbox database nh trong hnh bn di

Ca s new mailbox database wizard xut hin nhp sales trong mailbox
database name.
103


Trong server name click browse chn server EX2010 click next

Sau khi click next th h thng s yu cu nhp ng dn lu database file
v log file, ti y ti lu th mc C:\MailBox click next click new
tin hnh to database
104


Sau khi to xong database sales th ta quan st th mc mailbox s c
cc file & folder nh trong hnh

b. Cu hnh gii hn mailbox sales
105


M exchange management console organization configuration mailbox
click phi ln mailbox sales va to chn properties

Ti sales properties chn tab limit khai bo cc thng s sau:
- Issue warning at (KB): 850000 thng bo user khi dung lng mailbox
ca h t ti 850MB
- Prohibit send at (KB): 1024000 khng cho gi mail khi mailbox at
ngng 1GB
- Prohibit send and receive at (KB): 1024000 khng cho gi v nhn
mail khi mailbox t ngng 1GB
- Warning message interval chu k a ra thng bo warning khi user
t ti ngng issue warning trn
- Keep deleted item for (days) gi li message trong deleted th mc
ca tng c nhn trong bao nhiu ngy.
- Keep deleted mailbox for (days) gi li mailbox trong bao nhiu ngy
sau khi delete.

Click OK sau khi khai bo cc thng s.
106


c. Di chuyn mailbox database ti mt ni lu tr khc
M exchange management console organization configuration mailbox
chn tab database management click chut phi ln database sales va
to chn move database path

Ca s move database path s xut hin ti database path v log folder
path nhp ng dn mi cho database sales v log ca database sales
click move
107


Sau khi click move th s xut hin hp thoi thng bo move database
sales phi trng thi dismount, vn ny s nh hng n vic truy cp
ca cc user ang s hu mailbox ti database sales click yes ng
move.

Click finish hon tt qu trnh move database sales qua ni lu tr mi.
108


3. Cu hnh public folders
a. Kim tra trng thi public folder Sales
M exchange management console Toolbox public folder management
console

Sau khong 1 lc th phn qun l public folder s m ra click chut phi
ln public folder nh trong hnh bn di chn connect to server
109


Click connect

Click browse chn server EX2010 click connect

Sau khi kt ni m rng public folder chn default public folders click
phi ln folder sales nh trong hnh chn properties
110


Ca s sales properties s xut hin ti tab General kim tra s lng size
v item c trong folder ny. y l s c s kim tra sau khi replicate
thnh cng.

nguyn public folder management console ti , trong mc C tip theo
chng ta s lm tip.

111


b. To public folder database trn server EX2010-2
Ti EX2010-2 m exchange management console organization
configuration mailbox click phi chn new public folder database

Ca s new public folder database xut hin in tn Pub_On_EX2010_2
vo public folder database name click browse chn server EX2010-2
click OK

112


Click next next new finish to public folder trn server EX2010-2

c. To ng b cho public folder Sales trn EX2010-2
M li ca s public folder management console m phn a trc y
public folder default public folder click phi ln sales folder chn
properties chn tab replication click Add

Ca s select public folder database xut hin chn Pub_On_EX2010_2
click OK 2 ln hon tt bc cu hnh replicate.
113


Qu trnh replicate c th mt mt khong thi gian ph thuc vo s lng
item v size trn folder ta thc hin.

d. Kim tra sau khi qu trnh replication din ra

Sau mt khong thi gian th qu trnh replicate din ra, bit c cu
trc folder sales c replicate qua public folder mi ny ta cha s phi
kim tra li mt ln na.

kim tra ti public folder management console chn public folder
click connect to server chn server EX2010-2.mshome.com click OK
click connect

Sau khi kt ni m rng public folder default public folder click phi
ln sales folder chn properties ti tab general kim tra s lng size v
item c ng vi nh sales folder trn EX2010 khng ? Qua hnh ta c th
thy kt qu ng vi nh sales folder trn EX2010. (Size = 1, Items = 3)

114


Nh vy cho n y l chng ta nm c cc bc qun l mt mailbox
database nh th no? Qun l public folder database ra lm sao ? Lm th
no replicate public folder gia nhiu server trong cng h thng. Hy vng
qua bi lab ny s gip ch c nhiu cho cc bn.

115

115 Module 5 Qun l RECIPIENT | Microsoft Vit Nam

Module 5 Qun l RECIPIENT
I. Gii Thiu
Trong bi lab ny chng ta s tip tc tm hiu v cch qun l cc loi mailbox,
cu hnh email address policies, to address list trong h thng ca mnh

II. Mc ch
- Qun l cc loi recipient
- Cu hnh email address policies
- Cu hnh address lists

III. M Hnh

IV. Yu cu
qua
o CLI01: ng vai tr client trong h thng, my ny join domain

116


V. Thc Hin

1. Qun l cc loi recipient

a. To mi mailbox question
Dng exchange management console recipient configuration mailbox
click phi chn new mailbox

Ca s new mailbox wizard s xut hin chn user mailbox click next

117


Kim tra chc chn new user c chn click next

Ti name, user logon name nhp question nhp mt khu vo
password v nhp li mt khu ln na vo confirm password click next

Sau khi click next ca s mailbox setting s xut hin click specify the
mailbox database rather than. click browse v chn database trn server
EX2010 click OK
118


Ti alias nhp tn question click next

Click next click next click finish hon tt qu trnh to mailbox cho
user question
119


b. To mi mailbox resource tn phonghop dnh cho mc ch t phng
trc khi hp
Dng exchange management console recipient configuration mailbox
click phi chn new mailbox chn room mailbox click next

Click new user click next
120


in thng tin:
Name: phonghop
User logon name: phonghop
Password: p@ssw0rd
Click next

121


Ti alias nhp thng tin phonghop click chn specify the mailbox database
rather than using a database.. click browse v chn database mailbox trn
server EX2010 click OK click next

Click next click new sau click finish hon tt qu trnh to mailbox
resource phonghop

Sau khi to xong mailbox resource ta phi m tnh nng resource
booking
Ti mailbox chn mailbox phonghop click properties
122


Chn tab resource general chn enable the resource booking
attendant click OK

c. To mail-enable contact cho user marketing01
Ti recipient chn mail contact click phi chn new mail contact
123


Click new contact click next

Nhp cc thng tin nh sau:
Name: marketing01
Alias: marketing01
124


Click edit nhp email address ca user marketing01 l
marketing01@yahoo.com click OK
Click next

Click new click finish hon tt qu trnh to mail contact cho user
marketing01

Note: user marketing01 khng phi l nhn vin chnh thc ca cng ty, ch
l partner nn khng dng email chnh thc trong cng ty. Mi lin lc vi
nhn vin ny u thng qua email c nhn ca h.

d. To mi nhm cho cc nhn vin thuc vn phng chnh ti HCM v gn
quyn qun l nhm cho user Director
To mi nhm cho vn phng HCM, trong nhm ny s cha cc nhn vin
sales01, sales02, tech01, tech02 v director.
Ti recipient configuration click phi chn new distribution group
125


Kim tra new group c chn click next

Sau khi click next khai bo cc thng tin sau:
Group type: Distribution
Name: HCM
Name (pre-windows 2000): HCM
Alias: HCM
Click next
126


Click next click new click finish hon tt qu trnh to nhm

Ti ngay Distribution Group chn nhm HCM click phi chn
properties

127


Ca s HCM Properties xut hin chn tab member click add

Nhn Ctrl v chn ln lt cc user Director, sales01, sales02, tech01 v
tech02 click OK

Click Mail Flow Setting tab chn message moderation chn
properties
128


Chn message sent to this group have to be approved by a moderator
trong specify group moderators click add

129


Chn Director click OK 2 ln hon tt phn lab ny.

e. Kim tra sau cc qu trnh to bn trn

- ng nhp vo my CLI01 vi user administrator
- M Microsoft Outlook 2007
- Click New Meeting Request

130


- Click To click chn HCM click required
- Tng t click phonghop click resource
- Click OK

Nhp cc ni dung nh hnh bn di v click send

- Log off CLI01
- Ti EX2010 m Internet Explorer https://webmail.mshome.com/owa
- ng nhp vi username mshome\sales01 v password: p@ssw0rd
131


Ti y ta s nhn c mt invitation t user administrator nhp i
chut ln email vi subject hop toan cong ty click accept send the
response now

Tng t ng nhp vo user tech02 cng s nhn c thng bo nhc
nh i hp.

132


133


2. Cu hnh email address policies
a. To email address cho cc user thuc cng ty MSHOME
Ti my EX2010 m exchange management console organization
configuration hub transport click phi chn new email address policy

134


Trong name nhp Format name click browse chn OU Users nh
trong hnh chn All recipient types click next

Chn recipient is in a company click specified click next

Nhp mshome click add click OK
135


Click next chn Add SMTP Address

Click chn first name.last name (john.smith) chn select the accepted
domain for the e-mail address click browse
136


Chn mshome.com click OK

Cc bc cn li mc nh, click next next new finish hon tt
qu trnh to
137


b. Kim tra li email address sau qu trnh to policy
Ti recipient configuration click mailbox double click trn user tech01
chn email address tab v xem a ch email hin ti

Chn organization tab v nhp thng tin vo trng Company l MSHOME
click Apply

138


Click li email address tab v ta s thy s thay i theo policy m ta va
to trn.

3. Cu hnh address lists

a. To mt address list trng cha 2 b phn Sales Dept v Tech Dept
Dng exchange management console organization mailbox chn
tab Address List click phi chn New Address List

Ca s New Address List xut hin v nhp cc thng tin sau:
Name: Companies
139


Display Name: Companies
Click Next

Chn None click Next

Click New click Finish hon tt qu trnh to danh sch cha address
list ca 2 nhm Sales Dept v Tech Dept
140


b. To address list cho b phn Sales
Trc khi to address list cho b phn Sales ta phi ch nh cho cc user
sales c thuc tnh thuc b phn Sales

Dng exchange management console recipient configuration
mailbox click phi ln user Sales01 chn Properties chn tab
organization v nhp Sales vo Department click OK

Tng t nh vy khai bo thng tin cho user Sales02
141


Ti exchange management console di chuyn ti organization
configuration mailbox chn tab address list click chn New
Address List ca s New Address List xut hin v khai bo cc thng
s sau:
Name: Sales Dept
Display Name: Sales Dept
Container: click browse v chn Companies to trn
Click Next
142


Ca s Filter Settings xut hin chn All recipient types click Next

Ca s Conditions xut hin chn Recipient is in a Department click
specified
143


Nhp Sales v click Add click OK

Quay li ca s Conditions click Next
144


Ti ca s Schedule chn Immediately click Next

145


Click New click Finish hon tt qu trnh to address list cho b phn
Sales

c. To address list cho b phn Technical

Tng t cc bc trn to address list cho b phn Technical

Thm thng tin Department cho user Tech01

Tng t cho user Tech02
146


Khai bo thng tin nh trong hnh bn di click Next

Chn All recipient types click Next
147


Chn recipient is in a company click Specified v nhp Technical
click Next

Cc gi tr cn li mc nh click Next Click New click finish
hon tt qu trnh to address cho b phn Technical

d. Kim tra sau khi to address list
148


Ti my CLI01 ng nhp vi user administrator m Microsoft Outlook
2007 vo menu Tools chn Address Book
Ti ca s Address Book click mi tn tr xung ta s thy c danh sch
Companies trong ny v trong danh sch ny s cha 2 address list l Sales
Dept v Technical Dept

Chn address list Sales Dept ta s thy c 2 user l Sales01 v Sales02
149


Chn address list Tech Dept ta s thy c 2 user l Tech01 v Tech02

150


e. To Offline Address Book cho b phn Sales v Technical
Trong exchange management console chn organization configuration
mailbox click phi chn New Offline Address Book

Ca s New Offline Address Book xut hin nhp Everybody vo
Name click Browse

Chn EX2010 click OK
151


Click chn Include the following address lists click Add

152


Ca s Select Address List xut hin chn Companies click OK
click Next

Ti Distribution Points chn Enable Web-based distribution v Enable
public folder distribution click Add

Chn OAB (Default Web Site) click OK
153


Click Next click New click Finish hon tt qu trnh to Offline
Address Book

154

154 Module 7 Qun l CLIENT ACCESS ROLE | Microsoft Vit Nam

Module 7 Qun l CLIENT ACCESS ROLE
I. Gii Thiu
Trong bi lab ny chng ti s hng dn cch qun l, cu hnh cc dch v
phc v cho mc ch truy cp ca ngi dung cui.

II. Mc ch
- Cu hnh Client Access Server
- Cu hnh Outlook Anywhere
- Cu hnh Outlook Web App
- Cu hnh Exchange Activesyns

III. M Hnh

IV. Yu cu
qua
155


V. Thc Hin
1. Cu hnh Client Access Server
a. Ci t CA server cung cp certificate trong h thng

Trong phn ny chng ta s tin hnh ci t server CA trong h thng
phc v cho vic cung cp v request certificate trong h thng. Ta s dng
server DC2008 phc v cho vic ny. Ti server DC2008 m Server Role
Role Add Role ca s Add Role Wizard s xut hin click Next

Ti ca s Select Server Roles chn Active Directory Certificate Services
click Next
156


Trong ca s Introduction to AD Certificate Services click Next

Trong ca s Select Role Services chn 3 dch v Certification Authority,
Certification Authority Web Enrollment, Online Responder click Next
157


Ti ca s Specify Setup Type chn Enterprise click Next

158


Cc thng s cn li mc nh cho n mn hnh Confirm Installation
Selections click Install qu trnh ci t bt u.

Sau khi ci t xong th s hin ra mn hnh Installation Results click
Close ng mn hnh li.

Sau khi ci t xong CA ta cn enable CA server cung cp certificate vi
nhiu Subject Alternative Names

159


Click Start trong search box g CMD enter v g ln lt cc lnh sau:
certutil -setreg policy\EditFlags +EDITF_ATTRIBUTESUBJECTALTNAME2

Ti CMD tip tc g 2 lnh sau: net stop certsvc & net start certsvc

b. Cu hnh External Client Access Domain cho server EX2010-2
Ti EX2010-2 m Exchange Management Console click Server
Configuration click Client Access click phi chn Configure External
Client Access Domain
160


Ti mn hnh Configure External Client Access Domain nhp
mail.mshome.com click Add

Ti mn hnh Select Client Access Server chn server EX2010-2 click OK
161


Click Configure click Yes sau click Finish

162


Sau khi to xong click chn EX2010-2 click phi OWA (Default Web Site)
chn Properties

Ti tab General kim tra External URL thay i thnh
https://mail.mshome.com/owa --> click OK
163


c. Chun b certificate request trn server EX2010-2
Trong Exchange Management Console click phi EX2010-2 chn New
Exchange Certificate

Ca s New Exchange Certificate xut hin nhp MSHOME Mail
Certificate vo Enter a friendly name for the certificate click Next
164


Ti Domain Scope kim tra check box Enable wildcard certificate c
b click Next

Trong trang Exchange Configuration m rng Client Access Server
(Outlook Web App) v chn Outlook Acces App is on the Intranet v
165


Outlook Acces App is on the Internet kim tra mail.mshome.com c
trong text th 2

M rng Client Access Server (Exchange ActiveSync) chn Exchange
ActiveSync is enabled

166


M rng Client Access server (Web Services, Outlook Anywhere, and
Autodiscover nhp mail.mshome.com ti External host name

Kim tra Autodiscover used on the Internet v Long URL c chn

Click Next

Ti Certificate Domain click Next

Trong Organization and Location khai bo cc thng tin sau:
Organization: MSHOME
Organization Unit: Messaging
Country/region: Vietnam
City/locality: HCM
State/province: HCM
Click Browse v ch ng dn vo th mc C:\Cert vi tn certrequest.req
167


Click Next

Click Finish hon tt qu trnh chun b certificate trn server EX2010-2

d. To certificate t server DC2008

M My Computer vo th mc C:\Cert click ln file certrequest.req va
to trn click phi ln certrequest.req chn Open
168


Chn Select a program from a list of installed programs click OK

Trong mn hnh Open with chn Notepad click OK
169


Trong ca s notepad nhn Ctrl + A chn ht nhn Ctrl + C copy
ton b vo clipboard close notepad

Dng Internet Explorer m trang web request CA
http://dc2008.mshome.com/certsrv ng nhp vi username Administrator v
mt khu P@ssw0rd

Ti trang Welcome click Request a certificate
170


Ti trang Request a Certificate click advance certificate request

Ti trang Advance Certificate Request click Submit a certificate request
by using a base-64-encoded CMC or PKCS#10 file, or submit a renewal
request by using a base-64-encoded CMC or PKCS#7 file
171


Ti trang Submit a Certificate Request or Renewal Request click Saved
Request nhn Ctrl + V dn on on m va copy trc vo.

Ti Certificate Template chn Web Server click Submit click Yes

Ti trang Certificate Issued click Download certificate chain
172


Trong hp thoi File Download click Save trong hp thoi Save As
ch ti th mc C:\Cert click Save
Ti hp thoi Download Complete click Open
Ti hp thoi Certificate chn tab Details click Subject Alternative
Name kim tra thng tin ti field ny cha nhiu Subject Alternative Names
Click OK

173


e. Import v assign certificate vo IIS Exchange Service
Ti Exchange Management Console chn Server Configuration Chn
server EX2010-2 nhn xung di v click phi ln MSHOME Mail
Certificate chn Complete Pending Request

Ti trang Complete Pending Request click Browse

Di chuyn ti th mc C:\Cert v chn file certnew download trong phn
trc v click Open
174


Click Complete v click Finish hon tt qu trnh import certificate vo
server exchange

175


Cng ti mn hnh ang lm vic click phi ln MSHOME Mail Certificate chn
Assign Services to Certificate

Ti trang Select Servers kim tra server EX2010-2 hin th ti click
Next
176


Ti trang Select Services chn service Internet Information Services click
Next

Click Assign v click Finish han tt qu trnh import certificate vo IIS ti
server EX2010-2
177


178


2. Cu hnh Outlook Anywhere
a. Cu hnh DNS record mail.mshome.com cho server EX2010-2
Ti server DC2008 click Start click Administrative Tools click DNS

Trong ca s DNS Manager m rng Forward Lookup Zones m rng
zone mshome.com click phi chn New Host (A or AAAA)

Trong hp thoi New Host khai bo cc thng tin sau:
179


Name: mail
IP address: 192.168.1.114
Sau click Add Host

Click OK ng ca s thng bo click Done close DNS Manager

b. Cu hnh Outlook Anywhere trn server EX2010-2
Ti server EX2010-2 click Start Administrative Tools chn Server
Manager

180


Click Features trong Features Summary kim tra RPC Over HTTP Proxy
c ci t.

Ti server EX2010-2 m Exchange Management Console Server
Configuration Client Access click phi ln server EX2010-2 chn
Enable Outlook Anywhere

Trong ca s Enable Outlook Anywhere nhp mail.mshome.com vo
External host name chn NTLM authentication click Enable
181


Trong trang Completion click Finish

Ti y ng tt c cc ca s li v restart server EX2010-2 !!!!!

182


c. Cu hnh Outlook profile dung Outlook Anywhere
Ti my CLI01 ng nhp vi user Tech02 click Start Control Panel
click phi Mail chn Open

Trong ca s Mail Setup chn Email Accounts

Trong ca s Email Accounts click chn tech02@mshome.com click
Change
183


Trong trang Microsoft Exchange Settings chn More Settings

Trong hp thoi Microsoft Exchange chn Connection tab chn
Connect to Microsoft Exchange using HTTP click Exchange Proxy

Settings
Trong Microsoft Exchange Proxy Settings khai bo cc thng s sau:
184


Use this URL: https://mail.mshome.com
Connection using SSL only: enable
On fast networks: enable
On slow networks: enable
Proxy authentication settings: NTLM Authentication
Click OK 2 ln ng ca s Microsoft Exchange li

Trong ca s Microsoft Exchange Settings click Next
Trong trang Change E-mail Account click Finish
Trong trang E-mail Accounts click Close 2 ln ng cc ca s hin ti
li

d. Kim tra kt ni sau khi cu hnh
Kim tra server EX2010-2 boot vo ti mn hnh Welcome sau ng
nhp vo EX2010-2 vi username Administrator v mt khu P@ssw0rd
Ti my CLI01 m Office Outlook 2007 nu hp thoi Outlook xut hin
click No
Kim tra di gc phi m hnh hin th dng ch Connect to Microsoft
Exchange
185


Sau nhn v gi phm Ctrl ln icon Office Outlook di thanh taskbar v
click phi chn Connection Status

Kim tra trng thi kt ni ti ct Conn l HTTPS click Close
186


Sau nhn v gi phm Ctrl ln icon Office Outlook di thanh taskbar v
click phi chn Test Email AutoConfiguration

187


Trong ca s Test Email AutoConfiguration nhp mt khu ca user Tech02
click Test

Xem thng tin kt qu ti mn hnh Results bn di

Click tab Log xem qu trnh user hon thnh qu trnh Autodiscover nh th
no.
188


Nh vy l qu trnh cu hnh Client Access Server v Outlook Anywhere
thnh cng. Trong phn tip theo chng ta s tin hnh cu hnh Outlook Web
App v cu hnh Exchange ActiveSync

3. Cu hnh Outlook Web App

a. Cu hnh IIS dng CA certificate ni b
Ti server EX2010-2 click Start Administrative Tools Internet
Information Service (IIS) Manager
189


Sau m rng EX2010-2 m rng Sites Default Web Site click chn
OWA nhp i chut ln SSL Setting

Kim tra Require SSL c chn
190


Bn di Sites click phi Default Web Site chn Bindings

191


Trong hp thoi Site Bindings click chn https click Edit

Trang Edit Site Binding s xut hin trong hp thoi SSL certificate
chn MSHOME Mail Certificate click OK click close sau ng IIS
li.

b. Cu hnh Outlook Web App cho tt c user

Ti server EX2010-2 m Exchange Management Console Server
Configuration Client Access click chn EX2010-2 nhn xung bn
di ta s thy OWA (Default Web Site) click phi ln OWA (Default Web
Site) chn Properties
192


Ti owa
(Default Web Site) Properties chn tab Authentication kim tra Use
forms-based authentication c chn
Di Logon format chn User name only click Browse chn
mshome.com v click OK

Click tab Segmentation click Tasks chn Disable click Rules chn
Disable click OK 2 ln
193


M Exchange Management Shell v g ln lt cc cu lnh bn di:
set-owavirtualdirectory owa (Default Web Site) ForceSaveFileTypes .doc
194


set-owavirtualdirectory owa (Default Web Site) GzipLevel Off

Set-OwaVirtualDirectory -identity Owa (Default Web Site) -
FilterWebBeaconsAndHtmlForms ForceFilter

Tip tc g IISReset /noforce, nu bn nhn c thng bo IIS khng th
start th dng trc tip IIS Manager start li service World Wide Web
Publishing Service

c. Cu hnh Outlook Web App mailbox policy cho cc user ngoi tr user
question
195


Ti Exchange Management Console click Organization Configuration
Client Access click phi chn New Outlook Web App Mailbox Policy

Ti New Outlook Web App Mailbox Policy nhp MSHOME Policy chn
Change Password click Disable

196


Click New click Finish hon tt qu trnh to policy cho Outlook Web App
service

Sau khi hon tt tr li mn hnh lm vic ca Exchange Management
Console click phi MSHOME Policy chn Properties

Ti tab Public Computer File Acccess b chn cc check box
197


Ti tab Private Computer File Access b chn cc check box click OK

198


Ti Exchange Management Console chn Recipient Configuration
chn Mailbox nhn gi phm Ctrl v click phi ln cc user Administrator,
Director, Sales01, Sales02, Tech01 v Tech01 chn Properties

Chn tab Mailbox Features chn Outlook Web App chn Properties

Ti hp thoi Outlook Web App Properties click chn Outlook Web App
mailbox policy click Browse
199


Chn MSHOME Policy click OK 4 ln

d. Kim tra sau khi cu hnh Outlook Web App
Ti my EX2010 m Internet Explorer truy cp trang web
https://mail.mshome.com/owa

ng nhp vi user Question v mt khu p@ssw0rd click Sign in

200


Kim tra Tasks Folder khng hin th trong webmail ca user Question

201


Trong Outlook Web App click Options kim tra user Question khng th
to rule thng qua webmail

Ti webmail click Sign out ng nhp vi user Tech01

202


Ta thy Tasks Folder vn hin th trong webmail ca user Tech01

Trong webmail click Options click Settings v kim tra l user Tech01
khng c la chn thay i mt khu

203


4. Cu hnh Exchange ActiveSync
a. Disable SSL cho Exchange ActiveSync
Ti EX2010-2 click start Administrative Tools click chn Internet
Information Services (IIS) Manager.

M rng EX2010-2 Sites Default Web Site MicrosoftServer-
ActiveSync click SSL Settings

B chn Require SSL click Apply
204


b. Kim tra cu hnh Virtual Directory ca Exchange ActiveSync
Ti EX2010-2 click Exchange Management Console Server
Configuration Client Access chn EX2010-2 click phi Microsoft-
Server-ActiveSync chn Properties

205


Chn tab Authentication kim tra check box Basic authentication
c chn click OK

c. Kt ni ti server dng Exchange ActiveSync
Ti my CLI01 ng nhp vi ti khon Administrator v mt khu
P@ssw0rd

Click Start All Programs click Windows Mobile 6 SDK Standalone
Emulator Images US English WM 6.1.4 Professional

Ch cho chng trnh o ha mobile trn PC khi ng sau click File
Configure
206


Chn tab Network chn Enable NE2000 PCMIA network adapter and bind
click OK

Trong Windows Mobile 6 Professional click Start Settings
207


Click tab Connection double click ln icon Network Cards

208


Trong Configure Network Adapters phn My network card connects to: chn
The Internet sau click chn NE2000 Compatible Ethernet Driver

Click chn Use specify IP address v khai bo cc thng tin sau:
IP address: 192.168.1.115
Subnet mask: 255.255.255.0
Default gateway: 192.168.1.1

Chn tab Name Servers v khai bo IP server DNS vo DNS: 192.168.1.112
Click OK 2 ln v ng trang cu hnh li.
209


Trong Windows Mobile 6 Professional click start Programs

Click ActiveSync
210


Trong ca s ActiveSync click set up your device to sync with it

211


Trong Email address nhp tech01@mshome.com click Next

Ti mn hnh User Information khai bo cc thng s sau:
Username: tech01
Password: P@ssw0rd
Domain: mshome
Sau khi khai bo xong thng tin click Next chuyn qua bc tip theo

212


Ti Edit Server Settings nhp ex2010-2.mshome.com vo Server
address v b chn This server requires an encrypted (SSL) connection

Mt ca s thng bo nh s xut hin click OK click Next

213


Ti phn Choose the data you want to synchronize click chn Calendar
click Settings

Di phn Synchronize only the past chn All click OK

214


Tr li trang Choose the data you want to synchronize click chn Email
click Settings

Trong phn Download the past chn All click OK

215


Kim tra Contacts, Calendar, E-mail, v Tasks c chn click Finish

Trong ActiveSync click OK sau khi sync xong click du X trn gc phi ng
ca s hin ti li.

216


Ti my CLI01 m Internet Explorer v ng nhp vi user Tech02 to mt
mail mi v gi cho user Tech01

Quay li mn hnh gi lp Windows Mobile 6 Professional ta s thy thng bo
c mail mi

217


Click Outlook Email ta s thy email m user Tech02 gi ti

Click Reply tr li email cho user Tech02 nhp ni dung Test reply from
tech01 v click Send

Qua webmail ca user Tech02 th ta thy s nhn c email t Tech01 tr li.
218


d. To policy cho Exchange ActiveSync
Ti Exchange Management Console click Organization Configuration
click Client Access click phi vo vng lm vic gia mn hnh chn New
Exchange ActiveSync Mailbox policy

219


Trong New Exchange ActiveSync Mailbox Policy nhp EAS Policy 1 vo
Mailbox policy name
Chn Allow non-provisionable devices v Allow attachments to be
downloaded to device

Di mc Require password chn Enable password recovery

Click New to Exchange ActiveSync Mailbox Policy

Kim tra li thng tin v click Finish
220


Sau khi to xong ti ngoi mn hnh lm vic click phi ln EAS Policy 1
chn Properties

Kim tra cc tab ging nh cu hnh trong cc hnh bn di
Tab General
221


Tab Password

Tab Device
222


Tab Other

Click OK ng ca trang EAS Policy 1 Properties
223


Trong Exchange Management Console chn Recipient Configuration
Mailbox click phi ln user Tech01 chn Properties

Chn tab Mailbox Features chn Exchange ActiveSync click
Properties

Trong Exchange ActiveSync Properties click Browse chn EAS Policy 1
click OK 2 ln apply thng tin thay i.
224


e. Kim tra Exchange ActiveSync policy
Ti CLI01 trong Windows Mobile 6 Professional click Start ActiveSync

Click Sync

Ca s Update Required xut hin click OK
225


Trong Password v Confirm Password nhp 12345 click OK

f. Ci t Root CA trn mobile
226


Ti CLI01 m Internet Explorer truy cp trang web
http://dc2008.mshome.com/certsrv
Trong trang Welcome click Download a CA certificate, certificate change,
or CRL

Ti trang Download a CA certificate, certificate change, or CRL click
Download CA certificate chain.

Trong hp thoi File Download click Save
227


Trong hp thoi Save As click Save

Sau ng nhp vi user Administrator v gi certificate ny cho user
Tech01

Trn thit b mobile ca user Tech01 s nhn thng bo c mail mi
228


M mail ca Administrator gi v double click ln file certificate download v
my
Trong hp thoi Certificate Installer click OK

229


Vo menu Start Administrative Tools Internet Information Services
(IIS) Manager m rng Sites Default Web Site Microsoft-Server-
ActiveSync double click ln SSL Settings

Chn Require SSL click Apply

Ti mn hnh Outlook Email ca Windows Mobile 6 Professional click
Menu click Tools Options
230


Click Outlook Email

Click chn The server requires an encrypted (SSL) connection
231


Click Next 2 ln sau click Finish

232


Click Menu click Send/Receive kim tra qu trnh sync din ra vi SSL
thnh cng.

g. Xa d liu trn mobile t xa thong qua Exchange Control Panel
T my EX2010 m Internet Explorer truy cp trang web
https://ex2010.mshome.com/ecp ng nhp vi user Tech01 click Phone ta
s thy thit b PocketPC hin th trong phn Device

233


Ti Exchange Management Console Recipient Configuration Mailbox
click phi ln user Tech01 chn Manage Mobile Phone

Trong Manage Mobile Phone chn Perform a remote wipe to clear mobile
phone data click Clear

Ti ca s cnh bo ca Microsoft Exchange click Yes
234


Sau click Finish

Ti Windows Mobile 6 Professional tin hnh sync tr li thng qua ActiveSync
th s tin hnh thc thi xa data trn mobile sau khi xa data xong th my
s yu cu reboot li.
235


Vo kim tra li email trn thit b mobile th data xa hon ton.

236

236 Module 8 Qun l MESSAGE TRANSPORT | Microsoft Vit Nam

Module 8 Qun l MESSAGE TRANSPORT
I. Gii Thiu
Trong bi lab ny chng ti s gip cc bn tm hiu cch thc vn chuyn email
trong Exchange 2010. Hiu c cc component m nhim trch nhim vn
chuyn email trong Exchange 2010. Trin khai cc component ny h thng
gi v nhn email xuyn sut.

II. Mc ch
- Cu hnh Send Connector gi email
- Cu hnh Receive Connector nhn email
- M tnh nng Anti-Spam trn Hub Transport server
- Kim tra sau khi cu hnh

III. M Hnh

IV. Yu cu
o DC2008: ng vai tr server AD2008 c chuyn i cc role t DC2003 qua
o EX2010: ng vai tr server EX2010 trong h thng v c chuyn i cc
mailbox, public folder v system folder t EX2003 qua.

237


V. Thc Hin
1. Cu hnh Send Connector
Xem li phn cu hnh Send Connector trong mc V.3.b ti bi lab s 2

2. Cu hnh Receive Connector
Ti server EX2010 m Exchange Management Console Server
Configuration Hub Transport chn server EX2010 di chuyn mouse
xung di v click phi chn New Receive Connector

Ca s New Receive Connector xut hin ti trang Introduction khai bo
cc thng s sau:

Name: Internet Receive Connector
Select the intended use for this Receive connector: Custom
Click Next

238


Ti trang Local Network Settings click Next

239


Ti trang Remote Network Settings click du X xa entry hin ti sau
click Add

Ti hp thoi Add IP Addresses of Remote Servers nhp range IP
192.168.1.0/24 click OK

Click Next click New sau click Finish hon tt bc to mi Receive
Connector
240


241


Sau khi to xong Receive connector ta tin hnh cu hnh receive connector
ti exchange management console click phi Internet Receive
Connector chn Properties

Ti tab General phn Protocol logging level chn Verbose

Click chn tab Permission Groups chn Anonymous Users click OK
242


3. M tnh nng Anti-Spam trn Hub Transport server
Ti exchange management console chn Server Configuration Hub
Transport click chn EX2010 ti bn di ta kim tra ch c duy nht tab
Receive Connector

243


Ti server EX2010 m exchange management shell v chuyn n th mc
cd c:\Program Files\Microsoft\Exchange Server\v14\scripts

Ti mn hnh command line nhp .\install-AntispamAgents.ps1 nhn
Enter

Tip tc g Restart-Service MSExchangeTransport nhn Enter

244


Ti exchange management console Server Configuration Hub
Transport click phi chn Refresh click chn server EX2010 kim tra
li ta s thy hin th tab Anti-Spam

4. Kim tra sau khi cu hnh
Ti my CLI01 m Internet Explorer truy cp web
https://webmail.mshome.com/owa --> ng nhp vi user mshome\sales01 v
mt khu P@ssw0rd gi mt email ti a ch info@internet.com vi tiu
Test mail to internet
Sau ti my EX2010 m exchange management console Toolbox
double click Queue Viewer

245


Ti Queue Viewer chn tab Queues v kim tra Message Count thy c 1
message

Quay tr li my DC2008 click Start trong hp tm kim g CMD Enter

Ti CMD nhp telnet ex2010 smtp nhn Enter

Ti mn hnh CMD sau khi telnet vo g tip cc lnh sau:
helo nhn enter
mail from:info@internet.com enter
rcpt to:WeiYu@adatum.com enter
246


data enter
Subject: Test from Internet enter
Nhp ni dung test from internet enter v s nhn c thng bo
message rejected as spam by Content Filtering

Nh vy l ta cu hnh xong phn gi v nhn mail trn exchange 2010.
Bn cnh phn gi v nhn mail th ta cng m thm tnh nng ngn chn
spam mail trn exchange 2010. Tuy nhin trin khai su hn v h thng
ngn chn spam ta hy xem qua bi lab tip theo.

247

247 Module 9 Trin khai MESSAGING SECURITY | Microsoft Vit Nam

Module 9 Trin khai MESSAGING SECURITY
I. Gii Thiu
Trong bi lab ny chng ti s hng dn cc bn cch thc qun l v cu
hnh mt Edge Transport server. Thc thi v cu hnh cc c ch bo mt trong
h thng ca mnh

II. Mc ch
- Cu hnh Edge Transport server
- Cu hnh Forefront Protection 2010 cho Exchange Server 2010
- Trin khai gii php chng spam trn Edge Transport server

III. M Hnh

IV. Yu cu

o SVR1: ng vai tr server Edge Transport trong h thng

248


V. Thc Hin

1. Cu hnh Edge Transport server
a. Ci t Edge Transport server role trn server SVR1
Ti server SVR1 m CMD chuyn ti th mc cha source exchange
2010 v g Setup /mode:install /role:EdgeTransport

Sau khi ci t xong g Exit tt CMD v restart li server SVR1

Sau khi restart li server th ng nhp vo vi ti khon Administrator v mt
khu P@ssw0rd.

Ti server SVR1 click start All Programs Microsoft Exchange
Server 2010 Exchange Management Console

Trong Exchange Management Console quan st bn tri ta s thy c
component Edge Transport nh trong hnh bn di
249


b. Cu hnh Edge Transport Synchronization
Ti server SVR1 m Exchange Management Shell v g lnh sau:

New-EdgeSubscription -FileName c:\mshome-svr1.xml

Nhn Enter ti mn hnh Confirm nhp Y nhn Enter

Click menu Start trong hp thoi tm kim g \\EX2010\c$
250


Sau copy file mshome-svr1.xml t C: ca my SVR1 qua C: trn my
EX2010

251


Qua my EX2010 m Exchange Management Console Organization
Configuration Hub Transport click chn tab Edge Subscription click
phi chn New Edge Subscription

Ti trang New Edge Subscription trong mc Active Directory Site click
Browse

Trong ca s Select Active Directory Site click chn Default First Site
Name click OK
252


Bn di Subscription file click Browse v ch n file mshome-svr1.xml
trong a C: click Open

Sau click New
253


Ti trang Completion click Finish
s
254


c. Kim tra EdgeSync hot ng v Active Directory Lightweight
Directory Services c cha thng tin ca AD
Ti server EX2010 click Start All Programs Microsoft Exchange
Server 2010 Exchange Management Shell

Ti Exchange Management Shell g lnh Start-EdgeSynchronization
Enter

Ti Exchange Management Shell tip tc g Test-EdgeSynchronization
Enter

Ti command promt g tip Get-User -Identity sales01 | ft Name, GUID

255


Ghi li 8 k t u tin trong ct GUID bt u kim tra.
Chuyn ti server SVR1 m CMD v g LDP Enter

Trong ca s LDP click Connection click Connect

Trong ca s Connect khai bo cc thng s sau:
Server: svr1
256


Port: 50389
Click OK

Click Connection click Bind
Trong ca s Bind click chn Bind as currently logged on user click
OK

Trong ca s LDP click chn View Tree
257


Trong ca s Tree View xa ht cc entry trong phn BaseDN click OK

Trong ca s LDP double click OU=MSExchangeGateway m rng ra

258


Double click CN=Recipients,OU=MSExchangeGateway m rng mc ny.

Ti y ta tm phn CN=[GUID], GUID y l 8 k t m ta ly c ti
Exchange Management Shell trn server EX2010 lc ny.

Double click ln recipient m ta tm c v quan st thng tin ca recipient
ny. Ta thy ly c thng tin t h thng AD.

Close LDP

d. Kim tra qu trnh gi mail vn hot ng bnh thng sau khi cu hnh
Edge Transport
Ti server EX2010 m Exchange Management Console Organization
Configuration Hub Transport click chn tab Send Connectors
double click EdgeSync - Default-First-Site-Name to Internet
259


Chn tab Network v chn Route mail through the following smart hosts
click Add

260


Trong ca s Add smart host click chn IP address nhp IP ca Edge
Transport server 192.168.1.115 click OK 2 ln

M Exchange Management Shell g Start-EdgeSynchronization Enter

M Internet Explorer v ng nhp vi ti khon mshome\sales01 v mt
khu P@ssw0rd tin hnh gi mt email ti a ch info@internet.com vi
tiu test gui mail ra ngoai internet click Send
261


Ch mt lc v kim tra trong Inbox ca user sales01 chc chn rng khng
nhn c email thng bo non-delivery report message

2. Cu hnh Forefront Protection 2010 cho server EX2010
a. Ci t Forefront Protection 2010 for Exchange Server
Ti server SVR1 double click ln file ci t forefrontexchangesetup.exe

Ti trang License Agreement click chn I agree to the terms of the
license agreement and privacy statement click Next

262


Trong ca s Service Restart click Next

Ti ca s Installation Folders click Next

Trong trang Proxy Information click Next
263


Ti trang Antispam Configuration click Enable antispam later click
Next

Trong trang Microsoft Update click chn I dont want to use Microsoft
Update click Next
264


Trong trang Customer Experience Improvement Program click Next

Ti ca s Confirm Settings click Next v ch cho qu trnh ci t bt u.
Qu trnh ci t c th din ra trong vng 5 pht.
265


Ti ca s Installation Results click Finish

b. Cu hnh Forefront Protection 2010 for Exchange Server
Ti server SVR1 click Start All Programs Microsoft Forefront Server
Protection click Forefront Protection for Exchange Server Console.
266


Ti ca s Evaluation License Notice click OK

267


Trong ca s Forefront Protection 2010 for Exchange Server Administrator
Console click chn Policy Management di Antimalware click
Edge Transport
Trong trang Antimalware - Edge Transport di phn Engines and
Performance click chn Scan with all engines
Trong phn Scan Actions chn Delete trong phn Action i vi mc Virus
Ti trang Antimalware - Edge Transport Click Save

Ti trang Policy Management m rng Global Settings click Advanced
Options.Trong trang Global Settings - Advanced Options phn Threshold
Levels chnh sa cc gi tr cho cc tham s sau:
Maximum nested depth compressed files: 10
Maximum nested attachments: 50
268


Di phn Intelligent Engine Management chn Manual trong hp la chn Engine
management

Trong bng Update scheduling click Norman Virus Control sau click
Edit Selected Engines
269


Trong hp thoi Edit Selected Engine phn Update frequently chn Daily
kim tra mc Check for updates every c chn nhp 01:00 trong
trong mc bn di click Apply and Close.

Ti trang Global Settings - Advanced Options click save
270


3. Trin khai gii php chng spam trn Edge Transport server
a. Cu hnh DNS cho vic vn chuyn email
Ti server DC2008 click Start Administrative Tools click DNS.

Ti DNS Manager m rng Forward Lookup Zones m rng domain
mshome.com di chuyn qua vng gia mn hnh click phi mouse chn
New Mail Exchanger (MX)
271


Ti ca s New Resource Record nhp SVR1.mshome.com trong mc
Fully qualified domain name (FQDN) of mail server
Click OK v nhn nt X trn gc phi ng DNS Manager

272


b. Cu hnh global SCL cho vic vn chuyn junk mail
Ti server SVR1 m Exchange Management Console Edge Transport click
chn server SVR1 chn tab Anti-spam bn di double click ln mc Content
Filtering

Trong ca s Content Filtering Properties chn tab Action b chn Reject
messages that have an SCL rating greater than or equal to v click OK
273


Ti server EX2010 m Exchange Management Shell ti Exchange
Management Shell g lnh Set-OrganizationConfig -SCLJunkThreshold 6
v nhn Enter

Sau ng nhp vo user sales02 v gi mt email cho user sales01 vi ni
dung XJS*C4JDBQADN1.NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-
TEST-EMAIL*C.34X

Sau khi gi xong email th logout v ng nhp vo mailbox ca user sales01
th ta s thy email ca user sales02 va gi b lit vo hp Junk E-Mail

c. Cu hnh Content Filtering t chi junk messages
274


chn server SVR1 chn tab Anti-spam bn di double click ln mc Content
Filtering

Trong ca s Content Filtering Properties chn tab Action chn Reject
messages that have an SCL rating greater than or equal to v cu hnh cho mc
ny l 7 click OK

275


Sau ng nhp vo user sales02 v gi mt email cho user sales01 vi ni
dung XJS*C4JDBQADN1.NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-
TEST-EMAIL*C.34X

Sau khi gi xong email th logout v ng nhp vo mailbox ca user sales01
th ta s khng thy email ca user sales02 va gi bi v email ny b
reject trong qu trnh kim tra chng spam.

d. Cu hnh IP Allow List
chn server SVR1 chn tab Anti-spam bn di double click ln mc IP Allow
List

Trong ca s IP Allow List Properties click chn tab Allowed Addresses click
Add trong ca s Add Allowed IP Address nhp 192.168.1.0/24 click OK 2 ln
276


e. Cu hnh Block List Provider
chn server SVR1 chn tab Anti-spam bn di double click ln mc IP Block
List Providers

277


Trong ca s IP Block List Properties chn tab Providers click Add

Ti ca s Add IP Block List Provider khai bo cc thong s sau:
Provider name: Spamhaus
Lookup domain: zen.spamhaus.org
Click Ok 2 ln

n y ta hon tt cu hnh cc gii php chng spam mail cho h thng
ca doanh nghip chng ta.

278

278 Module 10 Trin khai HIGH AVAILABILITY | Microsoft Vit Nam

Module 10 Trin khai HIGH AVAILABILITY
I. Gii Thiu
Nh chng ta bit, k t phin bn Microsoft Exchange server 2007, mt t
chc Exchange c th c nhiu server vt l v mi server vt l c th c mt
hoc nhiu vai tr khc nhau m nhn cng vic khc nhau, ta gi l
server role. Mailbox server role l mt trong nhng server role c vai tr rt
quan trng trong vic qun l mailbox database. Mt khi mailbox server role c
nhng s c ng tic xy ra khng bo trc nh a cng lu tr mailbox
database b h, hoc mailbox server role khng hot ng c ,.... cc user
khng th xem mail, hoc gi v nhn mail. tng cng kh nng d phng
ca mailbox server role, ti phin bn Microsoft Exchange server 2007 a
ra cc khi nim LCR ( Local Continuous Replication), CCR (Cluster
Continuous Replication) , SCC ( Single Copy Cluster), v SCR (Standby
Continuous Replication - Microsoft Exchange Server 2007 SP1)
cc phin bn Exchange c, tng kh nng d phng trong Exchange,
bn phi xy dng "cm mailbox server role" (cluster mailbox server role) v
ci t Microsoft Exchange vi Windows failover cluster. iu ngha l bn
phi ci t failover cluster trc, sau mi ci t Exchange. Trong trng
hp bn ci Exchange trc trn 1 server khng thuc "cm mailbox server
role" (cluster mailbox server role) , sau mi ci t cluster mailbox server
role, th bn cn phi ci t li Exchange trn mt my server vt l khc
ci t failover cluster trc, sau move mailbox sang my server vt l
hoc bn phi uninstall Exchange server hin ti, ci t failover clustering , ci
t li Exchange server sau restore database li t bn backup. Qu tht l
vt v nu khng c k hoch trc trong vic xy dng h thng Exchange
server vi sn sng cao.
Kin trc ca Microsoft Exchange server 2010 c s thay i nhm tng cng
kh nng sn sng ca mailbox server role m bo h thng mail hot ng
lin tc. Khi nim "cluster mailbox server role" trong Exchange server 2010
khng cn na. Microsoft Exchange server 2010 tng cng vic trin khai cc
tnh nng cho php bn truy cp cc dch vu, d liu ca cc mailbox server
role ngay c khi Exchange server c ci t trc.Mt trong nhng tnh
nng mi b sung trong Exchange Server 2010 l Database Availability Groups
(DAG) v Database Copies gip bn t c tnh d phng ca dch v v d
liu. Bng so snh bn di cho thy :
- Exchange 2010 kt hp CCR v SCR vo trong tnh nng di ng ca
database trong khi Exchange server 2007 l 2 tnh nng ring bit.
- C ch bo v t ng khi c s c c thc hin trn tng mailbox
279


database trong khi Exchange server 2007 trn tng storage group.
- C th trin khai c ch d phng d liu trn 2 servers trong khi Exchange
server 2007 t nht phi 4 server
- Tng cng tnh sn sng cao m khng cn cluster servers.

II. Mc ch
- Trin khai mt Database Availability Group
- Deploying Highly Available Hub Transport and Client Access Servers
- Kim tra sau khi cu hnh High Available

III. M Hnh

280


IV. Yu cu

o EX2010-2: ng vai tr mt server Exchange 2010 trong domain mshome.com
o EX2010-3: ng vai tr mt server Exchange 2010 trong domain mshome.com

V. Thc Hin
1. Trin khai mt Database Availability Group
a. To DAG tn DAG1
M Exchange Management Shell (gi tt l EMS) v g lnh sau
New-DatabaseAvailabilityGroup Name DAG1 WitnessServer DC2008 -
WitnessDirectory C:\FSWDAG1 -DatabaseAvailabilityGroupIPAddress
192.168.1.120 nhn Enter

Ti EMS g tip lnh: Add-DatabaseAvailabilityGroupServer DAG1
MailboxServer EX2010

Ti server EX2010 m Exchange Management Console (gi tt l EMC) di
chuyn ti Organization Configuration click Mailbox chn tab
Database Availability Groups
281


Ti tab Database Availability Groups ta s thy c DAG1 click phi ln
DAG1 chn Manage Database Availability Group Membership

Ti ca s Manage Database Availability Group Membership click Add

Trong hp thoi Select Mailbox Server click chn EX2010-2 click OK
282


Trong mn hnh Manage Database Availability Group Membership click Manage
click Finish hon tt qu trnh

b. To mt mailbox database copy ca database mailbox hin ti
283


M EMC Organization Configuration Mailbox chn tab Database
Management click phi ln Mailbox DB On EX2010 chn Add Mailbox
Database Copy

Ti trang Add Mailbox Database Copy click Browse

Trong ca s Select Mailbox Server chn EX2010-2 click OK
284


Ti trang Add Mailbox Database Copy click Add to bn copy ca
database Mailbox DB On EX2010 trn server EX2010-2

Ti trang Completion xem li kt qu v click Finish
c. Kim tra sau khi to bn sao ca mailbox database hin ti
285


Ti EX2010 m EMC Organization Configuration Mailbox chn tab Database
Management click chn database Mailbox DB On EX2010 nhn xung bn
di v theo di ct Copy Status ca mi database th ta s thy database ca
mailbox trn server EX2010 l Mounted v database trn server EX2010-2 l Heathy

Click phi ln database c copy status l Heathy chn Properties ti tab General
xem li cc thng s: Status, Copy queue length, v Replay queue length

d. Suspend mailbox database copy trn server EX2010-2
286


Ti tab Database Management click phi ln database Mailbox DB On
EX2010 c status l Heathy chn Suspend Database Copy

Trong phn comment ca hp thoi Suspend Mailbox Database Copy nhp
thng tin Software Update being Applied click Yes

Sau khi click Yes th ta quan st li ct Copy Status ta s thy bn copy ca
database ta va copy trn server EX2010-2 c trng thi l Suspended
287


2. Deploying Highly Available Hub Transport and Client Access Servers
a. To v cu hnh hnh client access array cho newmail.mshome.com
Ti server EX2010 m EMS v g dng lnh sau:
New-ClientAccessArray FQDN newmail.mshome.com Name
newmail.mshome.com Site Default-First-Site-Name

Xem li kt qu va to array:

b. Gn client access array va to vo database
Ti EMS tip tc g lnh Get-MailboxDatabase xem cc database hin c

Sau g tip lnh Get-MailboxDatabase |Set-MailboxDatabase
RpcClientAccessServer newmail.mshome.com

288


3. Kim tra sau khi cu hnh High Available
a. To mt SMTP Connector kt hp vi EX2010 v EX2010-2
Ti server EX2010-2 m EMC Organization Configuration Hub Transport
chn tab Send Connectors click phi chn New Send Connector

Trong trang New Send Connector nhp cc thng tin sau:
Name: Internet Mail
Select the intended: chn Internet
Click Next
Ti trang Address Space click Add trong ca s SMTP Address Space khai bo
* trong Address click OK click Next
289


Ti trang Network Settings chn Route mail through the following smart hosts
click Add
Trong hp thoi Add smart host click Fully qualified domain name
(FQDN)
Trong Fully qualified domain name (FQDN) nhp DC2008.mshome.com click
OK click Next
290


Ti trang Configure smart host authenticates settings chn None v click
Next

Ti trang Source server click Add
291


Ti ca s Select Hub Transport or Subscribed Edge Transport Server
nhn gi phm Ctrl v chn 2 server EX2010 v EX2010-2 click OK

Ti trang Source Server click Next
292


Click New to mi connector v click Finish hon tt qu trnh to
connector

b. Stop SMTP Connector trn server DC2008
Ti server DC2008 m Server Manager Configuration Services sau
tm Simple Mail Transfer Protocol (SMTP) nhn qua bn phi click
More Actions click Stop

293


c. Gi mt email ra ngai internet
Ti server EX2010 m Internet Explorer truy cp trang web
https://webmail.mshome.com/owa v ng nhp vi username mshome\sales01 v mt
khu P@ssw0rd sau gi mt email ra ngoi Internet ti a ch
contact@trungnghia.info v sales@vnsolution.vn v tiu Test sending email out

d. Dng Queue Viewer xem trng thi message trong hng i
Ti server EX2010-2 m EMC Toolbox Queue Viewer
294


Ti tab Queues click Connect to Server trong hp thoi Connect to Server click
Browse

Trong hp thoi Select Exchange Server click chn EX2010 click OK click
Connect
295


Trong tab Queues ta s thy c record dc2008.mshome.com ti ct Next Hop
Domain

Ti Queue Viewer click Connect to Server click Browse
296


Ti ca s Select Exchange Server chn server EX2010-3 click OK
click Connect

Trong mn hnh Queue Viewer click Create Filter
297


Trong hp chn u tin chn Delivery Type, hp la chn th hai chn
Equals v cui cng chn Shadow Redundancy click Apply Filter

Sau quan st queue Shadow Redundancy

Click chn tab Message ti tab message chnh cc thng s sau:
Trong box la chn u tin chn From Address, option box th 2 chn
Equals v option box cui cng nhp sales01@mshome.com click Apply
Filter v xem kt qu

Double click ln email sales01@mshome.com trong queue v tham kho thm
ni dung ti tab General
298


Click chn tab Recipient Information v tham kho thng tin click OK
ng ca s Test sending email out Properties li

e. Start SMTP trn server DC2008 cho php gi mail i
Ti server DC2008 m Server Manager Configuration Services sau
tm Simple Mail Transfer Protocol (SMTP) click phi chn Start
299


f. Kim tra messaga c remove khi shadow redundancy queue
Sau khi start service SMTP trn server D2008 ch mt lc v chuyn qua
server EX2010-2 ti Queue Viewer chn tab Queues v chc rng phn
filter trong Shadow Redundancy vn cn ch mt lc v quan st th thy
rng message ca user sales01@mshome.com gi ra ngoi s khng cn
Shadow Redundancy na.
300


g. Kim tra li trng thi copy status ca database trn 2 server v phc hi
tnh nng database copy
Qua server EX2010 m EMC Organization Configuration Mailbox
chn Mailbox DB On EX2010 di chuyn xung bn di v chn Mailbox
DB On EX2010 c status l Suspended click phi v chn Properties

Ti tab General quan st cc thng s Status, Copy queue length, Replay
queue length
301


Click chn tab Status quan st cc thng s v click OK quay tr v mn hnh
EMC
302


Click phi ln database c status l Suspended v chn Resume Database Copy

Hp thoi Resume Mailbox Database Copy xut hin click Yes
303


Ch mt lc v refresh li mn hnh th ta s thy database lc ny c status l
Suspended chuyn qua trng thi Heathy

h. Switchover qua database trn server EX2010-2
Ti tab Database Management trn server EX2010-2 click phi database c
status l Heathy chn Active Database Copy
304


Trong hp thoi Activate Database Copy chn None v click OK

Sau quan st li status ca database trn server EX2010-2 chuyn sang
trng thi l Mounted v database trn server EX2010 chuyn v trng thi l
Heathy
305


Sau ta ng nhp vo webmail https://webmail.mshome.com/owa vi user
sales01@mshome.com click New gi mt email cho user
sales02@mshome.com

Ta khai bo cc thng tin sau:
To: sales02@mshome.com
306


Subject: test gui mail truoc khi server EX2010-2 down
Body: test gui mail truoc khi server EX2010-2 down
Click Send

Sau ng nhp vo webmail vi user sales02 kim tra th thy nhn c
email t user sales01 gi ti click X v click logout thot khi webmail

i. Gi lp server EX2010 h v theo di trng thi hot ng trn server
307


Ta tin hnh shutdown server EX2010-2 v quan st mt lc th s thy ti database
ti tab Database Management trn server EX2010-2 chuyn qua trng thi l
ServiceDown

Sau ta ng nhp li webmail vi ti khon mshome\sales02 th ta thy
rng mail ca user sales01 gi cho user sales02 vn tn ti.

n y ta tin hnh xong cc bc cu hnh v kim th theo mc ch
ca bi lab a ra ban u.
308

308 Module 11 Trin khai BACKUP v RECOVERY | Microsoft Vit Nam

Module 11 Trin khai BACKUP v RECOVERY

I. Gii Thiu
Trong bi lab ny chng ti s hng dn cc bn cch thc s dng tnh nng
backup v phc hi trong Exchange Server 2010 khi xy ra s c.

II. Mc ch
- Backup Exchange Server 2010
- Phc hi data ca Exchange Server 2010
- Phc hi Exchange Server 2010

III. M Hnh

IV. Yu cu

o SVR1: ng vai tr standard alone server v s dng phc hi exchange server
2010
309


V. Thc Hin
1. Backup Exchange Server 2010
a. Gi mt email trc khi tin hnh backup
Ti my EX2010 m Internet Explorer v ng nhp vi ti khon
mshome\tech01 sau gi mt email cho nhm Tech vi cc thng tin bn
di:
To: tech@mshome.com
Subject: test truoc khi backup
Body: test truoc khi backup
Click Send

Sau ti mailbox ca user tech01 ta s nhn c chnh email ca user
tech01 va gi
310


Ti chnh server EX2010 m EMS v g lnh sau Restart-Service
MSExchangeIS

b. Tin hnh backup exchange server 2010
Ti server EX2010 m Server Manager click Features Add Features
311


Trong ca s Add Features Wizard m rng Windows Server Backup
Features chn Windows Server Backup v click Next

312


Trong hp thoi Confirm Installation Selections click Install

Ti mn hnh Installation Results xem qua thng tin v click Close

Click Start click All Programs click Administrative Tools click
Windows Server Backup
313


Ti Windows Server Backup click Backup Once

Trong Backup Once Wizard trong trang Backup Options chn Different
Options v click Next
314


Ti trang Select Backup Configuration chn Custom v click Next

Ti trang Select Items for Backup click Add Items
315


Trong hp thoi Select Items chn mc Local disk (C: ) click OK

316


Ti trang Select Items for Backup click Advanced Settings

Ti Advanced Settings chn tab VSS Settings chn VSS full Backup
click OK sau click Next

Ti trang Specify Destination Type chn Remote shared folder v click Next
317


Ti trang Specify Remote Folder trong phn Location in
\\DC2008\c$\Backup click Next

Ti trang Confirmation click Backup
318


Sau khi click Backup th qu trnh backup s din ra v ta c th click Close
ng ca s Backup Progress li v qu trnh ny s chy ngm trn server

319


c. Xa email sau khi tin hnh backup
Ti server EX2010 m Internet Explorer v truy cp website
https://webmail.mshome.com/owa. ng nhp vi ti khon mshome\tech02
v xa email m user Tech01 gi trc . Chn email test truoc khi
backup v click du X bn trn xa email ny.
Mailbox ca user Tech02 trc khi xa email

Mailbox ca user Tech02 sau khi xa email:
320


Di chuyn sang bn tri click phi ln Deleted Items v chn Empty Deleted
Items

Hp thoi Empty Deleted Items xut hin chn Yes
321


T webmail logout khi user Tech02 v logon vi user Tech01, tng t
delete email trong Inbox, Send Items v Deleted Items

322


2. Phc hi data ca Exchange Server 2010
a. Restore database bng Windows Backup
T server EX2010 m Windows Server Backup click Recover

Trong Recovery Wizard ti trang Getting Started chn This Server (EX2010)
click Next
323


Ti trang Select Backup Date click Next

Ti trang Select Recovery Type chn Applications v click Next
324


Ti trang Select Application click chn Exchange sau click Next

Ti trang Specify Recovery Options chn Recover to another location v
click Browse
325


Ti ca s Browse For Folder m rng Computer Local Disk (C:) click
Make New Folder to mi folder DBBackup ti C: click OK

Quay tr li trang Specify Recovery Options click Next
326


Ti trang Confirmation click Recover

327


Ti trang Recovery Progress click Close ng li.

b. To recovery database t file backup
Ti server EX2010 m EMS v g lnh sau:
New-MailboxDatabase -Name RecoverDB -Server EX2010 -EDBFilePath
C:\DBBackup\C_\Program Files\Microsoft\Exchange
Server\V14\Mailbox\Mailbox Database 0069891456\Mailbox Database
0069891456.edb -Logfolderpath C:\DBBackup\C_\Program
Files\Microsoft\Exchange Server\V14\Mailbox\Mailbox Database
0069891456-Recovery

Ti EMS tip tc g lnh
cd C:\DBBackup\C_\Program Files\Microsoft\Exchange
Server\V14\Mailbox\Mailbox Database 0069891456

Sau ti EMS g lnh eseutil /R E02 /i /d
328


Nu gp thng bo li th ta g tip lnh bn di:
eseutil /r E01 /l "C:\DBBackup\C_\Program Files\Microsoft\Exchange
Server\V14\Mailbox\Mailbox Database 0069891456" /d
"C:\DBBackup\C_\Program Files\Microsoft\Exchange
Server\V14\Mailbox\Mailbox Database 0069891456" /a

mount database va phc hi ln th ta dng lnh Mount-Database
RecoverDB

G lnh Get-MailboxStatistics -Database RecoverDB xem trng thi
ca database va mount ln

c. Phc hi mt mailbox t recovery database
phc hi mailbox cho user Tech01 th ta dng lnh sau
329


Restore-Mailbox -Identity tech01 -RecoveryDatabase RecoverDB
BadItemLimit 1000
Ti hp thoi Confirm nhp A v enter

Sau ta ng nhp webmail vi ti khon mshome\tech01 th ta thy li
email m ta xa trc .

330


Double click ln tiu email v kim tra li ni dung email

remove database va recover ra khi h thng ti EMS ta g lnh Remove-
Mailboxdatabase -Identity RecoverDB
Ti hp thoi Confirm tr li Y v nhn Enter

3. Phc hi Exchange Server 2010
a. Shutdown server EX2010 v reset computer account.
Ti server EX2010 ta tin hnh shutdown server ny. Sau chuyn qua
server DC2008 m Active Directory Users and Computers click m rng
mshome.com Computers click phi ln server EX2010 chn Reset
Account
331


Trong hp thoi confirm click Yes

Sau click OK

ng Active Directory Users and Computers li

b. Chun b server SVR1 nh server EX2010
ng nhp vo server SVR1 vi ti khon administrator click Start click
phi ln My Computer chn Properties
Trong ca s System Properties ti tab Computer Name click Change
332


Trong ca s Computer Name/Domain Changes nhp EX2010 trong
Computer name sau click OK

Sau khi click OK click Close th h thng s yu cu restart li my click
Restart Now restart li my

Sau khi server SVR1 khi ng li ng nhp vo vi ti khon administrator
click Start click phi ln My Computer chn Properties
Ti tab Computer Name click Change, di Member Of chn Domain v
nhp mshome.com click OK
333


Ca s Windows Security xut hin nhp thng tin ti khon administrator
v click OK

Hp thoi Welcome xut hin click OK 2 ln

Ti ca s System Properties click OK click Close click Restart Now
restart li server SVR1

c. Ci t exchange server 2010 di dng RecoverServer
Ti y server SVR1 c i tn thnh EX2010 ng nhp vo server
EX2010 vi ti khon administrator v ci t cc component cn chun b
trc khi ci t server mt server exchange 2010. Phn ny xem li bi lab s
2.
Ti server EX2010 m CMD v chuyn ti th mc cha source exchange
2010 sau g lnh setup /m:RecoverServer ci t exchange 2010 di
mode RecoverServer
334


Qu trnh ci t s din ra trong vng khong 15 n 20 pht, sau khi ci t
th s hin kt qu nh bn di

Ti server EX2010 m EMC Organization Configuration Mailbox
click phi ln database Mailbox Database 0069891456 chn Properties
335


Ti ca s Mailbox Database 0069891456 Properties chn tab
Maintenance chn This database can be overwritten by a restore click
OK

336


Lm tng t cho cc mailbox database cn li v public folder cn li trong
trng hp trn h thng ca bn nu c.

d. Phc hi mailbox database t bn backup
Ti server EX2010 m Windows Server Backup click Recover

Trong Recovery Wizard ti trang Getting Started chn A backup stored
on another location v click Next
337


Ti trang Specify Location Type chn Remote Shared Folder v click Next

Trong trang Specify Remote Folder nhp \\DC2008\C$\Backup v click Next
338


Ti trang Select Backup Date click Next

Ti trang Select Recovery Type chn Applications sau click Next
339


Ti trang Select Application chn Exchange v click Next

Ti trang Specify Recovery Options chn Recover to original location sau
click Next
340


Trong trang Confirmation click Recover

Trong trang Recovery Progress click Close
341


e. Kim tra sau khi phc hi
Ti server EX2010 m EMC Organization Configuration Mailbox chn
tab Database Management th ta s thy database Mailbox Database
0069891456 ang trng thi Dismounted

Click phi ln database ny v chn Mount Database
342


Sau ti my EX2010 ta m Internet Explorer v truy cp vi ti khon
mshome\tech01

Sau khi kim tra li th ta thy rng user tech01 c th truy cp c
mailbox sau khi phc hi server Exchange 2010
343


344

344 Module 12 Bo v EXCHANGE SERVER 2010 | Microsoft Vit Nam

Module 12 Bo v EXCHANGE SERVER 2010
I. Gii Thiu
Trong phn ny chng ta s tm hiu v thc hin cch phn quyn cho cc user
trong h thng Exchange Server 2010

II. Mc ch
- Phn quyn qun l cc cu hnh trn exchange server 2010
- Phn quyn qun l thng tin mailbox v distribution group

III. M Hnh

IV. Yu cu
qua

V. Thc Hin
1. Phn quyn qun l server Exchange cho user Tech03
345


Ti server EX2010 m Active Directory Users and Computers click
Microsoft Exchange Security Groups click phi ln Server Management
chn Properties

Ti hp thoi Server Management Properties chn tab Members click
Add

346


Trong hp thoi Select Users, Contacts, Computers, Service Accounts, or
Groups g tech03 di trong Enter the object names to
select(examples) click Check Names click OK

Ti ca s Server Management Properties click OK hon tt qu trnh
add user tech03 vo nhm Server Management

2. Cu hnh quyn qun l mailbox, group cho user Tech01 v Tech02
Ti server EX2010 m Exchange Management Shell v g lnh bn di
New-RoleGroup Name SupportDesk roles Mail Recipients, Mail
Recipient Creation, Distribution Groups nhn Enter

M Exchange Management Console Tools Box double click ln Role
Based Access Control (RBAC) User Editor
347


ng nhp vi ti khon mshome\administrator chn SupportDesk click
Details

Di phn Members click Add
348


Ti hp thoi xut hin chn user Tech01 v Tech02 click Save

349


3. Kim tra sau khi cu hnh
Ti server EX2010-2 ng nhp vi user Tech03 v m Exchange
Management Console Organization Configuration Mailbox click
phi ln database trn server EX2010 v chn Properties

Chn tab Limits v b chn Issue warning at(KB) click OK th ta thy rng
user Tech03 c th chnh sa tnh nng cu hnh trn Exchange Server 2010

350


Ti EMC click chn Hub Transport di phn Organization Configuration.
Ti tab Accepted Domains click phi ln domain mshome.com chn
Properties

Ti y ta c th thy rng user Tech03 khng th chnh sa cc thng tin
cu hnh ti y
Click Cancel thot ra

Ti EMC m rng phn Recipient Configuration Mailbox double click
ln user Sales01 v th chnh sa mt s thng s th ta thy rng user
Tech03 khng th chnh sa thng tin ca cc mailbox ti y.

Click du X trn gc phi mn hnh ng EMC li v logout server
EX2010-2
351


Ti server EX2010 m Internet Explorer truy cp trang website
https://webmail.mshome.com/ecp ng nhp vi ti khon mshome\tech01
trong phn Mailboxes click sales01 sau click Details

Trong phn Organization nhp thng tin Sales Dept vo Department
click Save

Click Public Groups chn nhm sales v click Details
352


Trong phn Description nhp Sales Dept click Save

Sau khi chnh sa maibox v public groups th ta thy rng qu trnh chnh
sa thng tin khng gp li bt k li no. n y ta c th kt lun qu trnh
cu hnh v phn quyn cho cc user ph hp theo yu cu a ra.

Exchange Server 2010 - Smith.n - Smith.N Studio

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Exchange Server 2010 - Smith.n - Smith.N Studio

Uploaded by

Copyright:

Available Formats

2010

Microsoft Vit Nam

You might also like