The basic configuration of Exchange 2016 does not differ much from the configuration of Exchange 2013. This article provides a short guide that covers the essential points:
After the Installation of Exchange 2016 I have gotten into the habit of first renaming the database and moving it to its destination, this is done via shell with the following commands:
Get-MailboxDatabase -Server FWEX2 | Set-MailboxDatabase -Name MBXDB01 Move-DatabasePath MBXDB01 -EdbFilePath c:\MBXDB01\MBXDB01.edb -LogFolderPath c:\MBXDB01
Danach kann eine neue akzeptierte Domäne angelegt werden, in meinen Fall wäre das „frankysweb.de“:
The next step is to create an address policy so that mailboxes receive the corresponding e-mail addresses:
Of course, you are free to choose how the e-mail addresses are to be structured:
Once the policy has been created, it can be applied
A send connector must be created so that e-mails can be sent:
Das es sich hierbei um den Connector für das Senden von Mails zu externen Empfängern handelt, wird der Typ „Internet“ ausgewählt:
In the next dialog you can choose how the mails are sent, either directly to the responsible mail servers (MX record connected to the recipient domain) or via a smarthost (relay at the provider or AntiSPAM gateway of the company)
Es muss immer einen Connector mit dem Adressraum „*“ geben, damit E-Mails zugestellt werden können
Finally, specify the source server(s) that use the connector
Then open the properties of the connector and define the HELO entry. The host name used for the HELO entry must also be present on the certificate.
Now the virtual directories or the access URLs can be configured, the quickest way to do this is via the shell. I have created a small script for this. Simply change the first 4 lines and execute. As I use DNS-Split Brain, there is no difference between my internal and external host names:
$servername = "FWEX2" $internalhostname = "outlook.frankysweb.de" $externalhostname = "outlook.frankysweb.de" $autodiscoverhostname = "autodiscover.frankysweb.de" $owainturl = "https://" + "$internalhostname" + "/owa" $owaexturl = "https://" + "$externalhostname" + "/owa" $ecpinturl = "https://" + "$internalhostname" + "/ecp" $ecpexturl = "https://" + "$externalhostname" + "/ecp" $ewsinturl = "https://" + "$internalhostname" + "/EWS/Exchange.asmx" $ewsexturl = "https://" + "$externalhostname" + "/EWS/Exchange.asmx" $easinturl = "https://" + "$internalhostname" + "/Microsoft-Server-ActiveSync" $easexturl = "https://" + "$externalhostname" + "/Microsoft-Server-ActiveSync" $oabinturl = "https://" + "$internalhostname" + "/OAB" $oabexturl = "https://" + "$externalhostname" + "/OAB" $mapiinturl = "https://" + "$internalhostname" + "/mapi" $mapiexturl = "https://" + "$externalhostname" + "/mapi" $aduri = "https://" + "$autodiscoverhostname" + "/Autodiscover/Autodiscover.xml" Get-OwaVirtualDirectory -Server $servername | Set-OwaVirtualDirectory -internalurl $owainturl -externalurl $owaexturl Get-EcpVirtualDirectory -server $servername | Set-EcpVirtualDirectory -internalurl $ecpinturl -externalurl $ecpexturl Get-WebServicesVirtualDirectory -server $servername | Set-WebServicesVirtualDirectory -internalurl $ewsinturl -externalurl $ewsexturl Get-ActiveSyncVirtualDirectory -Server $servername | Set-ActiveSyncVirtualDirectory -internalurl $easinturl -externalurl $easexturl Get-OabVirtualDirectory -Server $servername | Set-OabVirtualDirectory -internalurl $oabinturl -externalurl $oabexturl Get-MapiVirtualDirectory -Server $servername | Set-MapiVirtualDirectory -externalurl $mapiexturl -internalurl $mapiinturl Get-OutlookAnywhere -Server $servername | Set-OutlookAnywhere -externalhostname $externalhostname -internalhostname $internalhostname -ExternalClientsRequireSsl:$true -InternalClientsRequireSsl:$true -ExternalClientAuthenticationMethod 'Negotiate' Get-ClientAccessService $servername | Set-ClientAccessService -AutoDiscoverServiceInternalUri $aduri Get-OwaVirtualDirectory -Server $servername | fl server,externalurl,internalurl Get-EcpVirtualDirectory -server $servername | fl server,externalurl,internalurl Get-WebServicesVirtualDirectory -server $servername | fl server,externalurl,internalurl Get-ActiveSyncVirtualDirectory -Server $servername | fl server,externalurl,internalurl Get-OabVirtualDirectory -Server $servername | fl server,externalurl,internalurl Get-MapiVirtualDirectory -Server $servername | fl server,externalurl,internalurl Get-OutlookAnywhere -Server $servername | fl servername,ExternalHostname,InternalHostname Get-ClientAccessServer $servername | fl name,AutoDiscoverServiceInternalUri
After the script has been executed, all virtual directories are configured accordingly:
Now only the certificate needs to be configured. The certificate is created in the same way as for Exchange 2013. The process is described in detail here:
https://www.frankysweb.de/exchange-2013-zertifikatsanforderung-fr-ffentliche-ca-erstellen
https://www.frankysweb.de/exchange-2013-san-zertifikat-und-interne-zertifizierungsstelle-ca
