When the installations of both the internal Exchange
organization and the Edge Transport Server are finished, the "post
setup" configuration can be started. As in Exchange Server 2007, there
are a couple of additions and changes in the configuration that have to
be made to the Exchange Server 2010 instance before mail can be sent or
received from the Internet:
Enter an Exchange Server 2010 license key.
Enter accepted domains and setup email address policies.
Configure a Send Connector to send email to the Internet.
Configure the Hub Transport Server to accept anonymous SMTP if an Edge Transport Server is not used.
Add a Certificate to the Client Access Server role.
Configure the Client Access Server role.
1 Exchange Server 2010 license key
The public Exchange Server 2010
Release Candidate does not need a license key, but the version that's
available from the Microsoft download site at the time of writing has a
lifetime of 120 days. Entering a license key is not possible in this
Release Candidate version, but this will obviously change when Exchange
Server 2010 gets to the Release To Manufacturing (RTM) stage.
2 Accepted domains
The first thing for
Exchange Server 2010 to configure is the accepted domains. In order to
receive SMTP messages from the Internet, an Exchange server has to know
what domains it will be receiving email for, as well as which domains it is responsible for. These are called "accepted domains," and there are three types:
Authoritative Domain
– For this type of domain, the Exchange organization is fully
responsible and there will be no other messaging environment
responsible. This Exchange organization will also generate NDR (Non
Delivery Report) messages when mailboxes are not available.
Internal Relay Domain
– The Exchange organization will receive mail for this type of domain,
but it will relay all messages to an Exchange organization within the
company.
External Relay Domain
– For this type of domain, the Exchange organization will receive mail,
but it will relay all messages to a messaging platform outside the
company.
For all three
scenarios the MX records for the domain will be pointing to your
Exchange organization, and mail will be initially delivered to your
Exchange servers.
Accepted domains are configured
on the organization level and, as such, are known by all Hub Transport
Servers. If you are using an Edge Transport Server as well, the accepted
domain information will also be synchronized to the Edge Transport
Servers.
To configure accepted domains follow these steps:
Log on to an Exchange Server 2010 server with domain administrator credentials and open the Exchange Management Console.
Expand the "Microsoft Exchange On-Premises."
Expand the Organization Configuration.
Click on Hub Transport in the left pane.
In the middle pane there are eight tabs; click on the Accepted Domains one.
One
entry will appear, and the name will be the local domain (FQDN) that's
used when installing the Active Directory. In the Actions pane click on
New Accepted Domain.
In the New Accepted Domain Wizard enter a (friendly) name and the Accepted Domain itself, for example yourdomain.com.
When entered, select the type of Accepted Domain in your Exchange
Organization. In this example select the "Authoritative Domain." Click
New to continue.
The Accepted Domain will now be created, and you can now click Finish on the Completion window.
You have just created an
accepted domain in your Exchange organization; the Exchange server will
accept messages for this domain and, if no recipients are found, a NDR
(Non Delivery Report) will be generated.
3 Email Address Policies
Exchange recipients clearly
need an email address for receiving email. For receiving email from the
Internet, recipients need an email address that corresponds to an
accepted domain. Recipients are either assigned an email address using
an Email Address Policy, or it is also possible to manually assign email
addresses to recipients.
To configure Email Address Policies follow these steps:
Log on to an Exchange Server 2010 server with domain administrator credentials and open the Exchange Management Console.
Expand the "Microsoft Exchange On-Premises."
Expand the Organization Configuration.
Click on Hub Transport in the left pane.
In the middle pane there are eight tabs; click on the one labeled "Email Address Policies."
There
will be one default policy that will be applied to all recipients in
your organization. For now the default policy will be changed so that
recipients will have the email address corresponding to your Accepted
Domain. Click on "New Email Address Policy" to create a new policy.
On
the Introduction page enter a new friendly name. Click the Browse
button to select a container or Organizational Unit in Active Directory
where you want to apply the filter. Select the Users container. Click
Next to continue.
On
the Conditions page you can select conditions on how the recipients in
the container will be queried, for example on State, Province,
Department, Company, etc. Do not select anything for this demonstration,
and click Next to continue.
On
the Email Addresses tab click the Add button, the SMTP Email Address
pop-up will be shown. Leave the local part default (Use Alias) and
select the "Select the accepted domain for the email address" option and
click Browse.
Select the Accepted Domain you entered earlier (in Section 2.7.2), click OK twice and click Next to continue.
On
the Schedule page you have the option to apply the policy immediately
or schedule a deploy during, for example, non-office hours. This is
useful when you have to change thousands of recipients. For now leave it
on Immediately and click Next to continue.
Review the settings and, if everything is OK, then click New to create the policy and apply it immediately.
When finished successfully, click the Finish button.
You can check the email address on
a recipient through the EMC to confirm your policy has been correctly
applied. Expand the Recipient Configuration in the left pane of the
Exchange Management Console and click on "Mailbox." In the middle pane a
list of recipients should show up, although right after installation
only an administrator mailbox should be visible. Double-click on the
mailbox and select the Email Addresses tab. The Administrator@ yourdomain.com should be the primary SMTP address.
4 Configure a Send Connector to the Internet
Exchange Server 2010 cannot
send out SMTP messages to the Internet by default. To achieve this
you'll need to create an SMTP connector, which is a connector between
one or more Hub Transport Servers and the Internet. Since this
information is stored in Active Directory, all Hub Transport Servers in
the organization know of its existence and know how to route messages
via the SMTP connector to the Internet.
To create an SMTP connector to the Internet, follow these steps:
Log on to the Exchange Server 2010 server using a domain administrator account, and open the Exchange Management Console.
Expand "Microsoft Exchange On-Premises" and then expand the Organization Configuration.
Click on the Hub Transport, and then click on the "Send Connectors" tab in the middle pane.
In the Actions Pane click on "New Send Connector."
On
the Introduction page enter a friendly name, "Internet Connector" for
example, and in the "Select the intended use for this Send connector"
drop-down box select the Internet option. Click Next to continue.
On
the Address Space page, click on the Add button to add an address space
for the Internet Connector. In the address field enter an asterisk *,
leave the cost on default and click OK. Click Next to continue.
On
the Network settings page you can select if the Send Connector will use
its own network DNS settings to route email to other organizations, or
to use a smart host. Change this according to your own environment and
click Next to continue.
On
the source server page you can choose multiple source servers for the
Send Connector. You can compare this to Bridgehead Servers in Exchange
Server 2003. When you enter multiple Hub Transport Servers, the Exchange
organization will automatically load balance the SMTP traffic between
the Hub Transport Servers. Since we have only one Hub Transport Server
installed we can leave this as default. Click Next to continue.
Check the Configuration Summary, and if everything is OK click on New to create the Send Connector.
On the Completion page click Finish.
You have now created a Send Connector that routes messages from the internal Exchange Server 2010 organization to the Internet.
