Configure External Client Access Domain


Many articles on (re)configuring Exchange 2007’s internet-facing Client Access Server contain steps to (re)configure all external URLs. Most of the times this is a list of one or more of the following cmdlets to execute:

  • Set-OWAVirtualDirectory –Identity <CASSERVER>\OWA (default web site) -ExternalURL https://someURL/OWA
  • Set-OABVirtualDirectory –Identity <CASSERVER>\OAB (default web site) -ExternalURL https://someURL/OAB
  • Set-WebServicesVirtualDirectory –Identity <CASSERVER>\EWS (default web site) -ExternalURL https://someURL/ews/exchange.asmx
  • Set-ActiveSyncVirtualDirectory –Identity <CASSERVER>\Microsoft-Server-ActiveSync (default web site) -ExternalURL https://someURL

In Exchange 2010 this process has been made easier because Exchange 2010 setup will ask you if it’s an “external facing” Client Access Server, after which it will configure externalURLs for you. But what if you want to reconfigure the setting afterwards? Exchange 2010’s Configure External Client Acess Domain to the rescue! To access it, start Exchange Management Console, expand Server Configuration and select Client Access node. Now either click Configure External Client Access Domain in the right pane or select it after right-clicking.

After entering the new external domain and adding the Client Access Server(s) to which to apply the setting, click Configure.

As you can see from the progress windows, the new URL will be set as ExternalURL for the virtual directories. Note that you can ignore the warning on setting the ExternalURL identical for ‘owa’ and ‘ecp’ to the same value using Set-ECPVirtualDirectory, because the wizard will do that for us.

Exchange 2010 Mailbox Role Calculator 3.5


The Microsoft Exchange Team released an update of the Exchange 2010 Mailbox Server Role Requirements Calculator. The new version is 3.5 and it includes the following features/improvements since 3.2:

Version 3.5
Improved the text on the input tab with regards to the number of database copy instances you would like for both HA and lagged copies. Also fixes an issue where in a high availability architecture the calculator may size the solution based on activating more database copies during a second server failure event than the total number of database copies deployed on the server.

Version 3.4
Corrects a memory and CPU utilization issue where you deploy a site resilient architecture with multiple mailbox servers and a single database copy in the primary datacenter.  Specifically, the calculator would determine the active database copy configuration after a single server failure and then size the CPU and memory requirements. However, since there is only a single database copy in the primary datacenter, the solution cannot survive with all copies hosted in the primary datacenter.  Therefore, the copies need to be activated in the secondary datacenter.  Version 3.4 corrects this scenario by ensuring there are at least 2 database copies in the primary datacenter in order  to calculate the active database count after a single server failure.

You can download the calculator here.

70-663 Design/Deploying Exchange 2010 exam


As of today the exam “70-663 PRO: Designing and Deploying Messaging Solutions with Microsoft Exchange Server 2010” is  live at Prometric. Click here for info on preparing for 70-663 or to schedule this exam at Prometric.

On a side note, I checked the MCP site to see if the results of 71-663 (beta) were in. I passed! Wasn’t too hard though. That’s exam 28 on my list of MS exams since 1996.

Identity Lifecycle Manager 2007 FP1 SP1 released


Today Microsoft released Service Pack 1 for Service Pack 1 Identity Lifecycle Manager 2007 Feature Pack 1. Besides many hotfixes and features already contained in rollups, ILM 2007 FP1 SP1 also supports the long awaited support to provision Exchange Server 2010. The article states the following in relation to provisioning Exchange 2010:

You can use the GALSync management agent or a customized Active Directory management agent to perform provisioning for Exchange Server 2010. To use this feature, the following conditions must be true:

  • The ILM 2007 Synchronization service account must be a domain account.
  • The ILM 2007 Synchronization server must be joined to a domain. However, the server does not have to be joined to the domain in which the provisioning occurs.

For more information on using GALSync for provisioning Exchange 2010, consult this TechNet website. Click here to see the SP1 knowledgebase article.

Identity Lifecycle Manager is a metadirectory product and is a successor to the MIIS (Microsoft Identity Integration Server) and MMS (Microsoft Metadirectory Services). MMS was acquired by Microsoft from ZoomIt back in 1999. ILM matches the concept of Identity Management in organizations, where identities (e.g. accounts) exist in many places, e.g. directories and applications. ILM provisions (creation, changes and removed) identities in these directories and applications in their “native format” through agent technology. If you’re interested in ILM check out the Microsoft product page here.

Exchange 2010 & Outlook 2003 Notifications


Update (13 apr 2011): Rollup 3 for Exchange 2010 SP1 contains UDP support. To enable it, apply RU3 and set HKLM\SYSTEM\CurrentControlSet\Services\MSExchangeRPC\ParametersSystem\EnablePushNotifications to 1 (REG_DWORD). More information in support article kb2009942.

New e-mail notifications from Exchange to Outlook, we receive them all the time. Most of us never look at the technique, because in most cases this works so there’s no need. But what if it doesn’t or you are experiencing delays? With Exchange 2010 this situation is more likely to occur than with earlier versions of Exchange, because many people are still using Outlook 2003 or earlier clients.  To understand why this happens, you need to understand how these notifications work (or should I say worked).

Note: To improve readability, you should read “Outlook 2003 or earlier versions in online mode” when it reads “Outlook 2003” from here on, unless states otherwise.

When Outlook 2003 connects to Exchange, it tries to register itself to receive notifications. If registration is successful, Outlook 2003 tells Exchange on what port it expects (UDP) packages to arrive, and it by default this is in the port range 1024-65535. When sending notifications, the Exchange server will also open a dynamic port in this range and connect to the registered client port. After receiving the notification, Outlook 2003 will retrieve the message, will display it in the appropriate folder, make a sound, show a systray icon, change your cursor, etc. When the registration for new mail notifications fails, Outlook 2003 will use a polling mechanism the check for changes.

Now, with Exchange 2010 this behavior has changed because Exchange 2010 does not send these kind of notifications to Outlook 2003 (i.e. UDP notifications were removed). Therefor, Outlook 2003 will revert to polling, which by default is set to 1 minute. This means in worst case users will be notified of new e-mail after approximately 1 minute, where (sort of) real-time feedback is expected. To make things worse in terms of user experience, this also means delays in visible feedback on any folder updates, e.g. e-mail seems to stay in outbox, deleted items not being deleted, moved items not being moved, etc.

The related knowledge base article (kb2009942) mentions two solutions. One solution is a mere pretext and explains increasing the polling frequency. To do so, it requires applying Exchange 2010 Rollup 1 on the CAS server and configuring the following registry key on that CAS server:

HKLM\CurrentControlSet\Services\MSExchangeRPC\ParametersSystem\Maximum Polling Freqeuency (DWORD, range 5000-120000)

The reason for performing this step on the CAS server is that Exchange 2010 will determine the polling frequency, not the client. The setting will work immediately, but clients need to reconnect in order for the new value to become effective. Note that setting this value lower than 5000 has no effect because Outlook 2003’s minimum poll rate is 5000.

Another solution is to enable cached mode for Outlook 2003 clients. This will not solve the delay in receiving new e-mail notifications, but it will solve the most annoying issue, being the delay in visual feedback. In cached mode users won’t notice the delay because they’re working with a local copy of their mailbox. Any changes (sends, deletes, moves) will happen in the local cached file (OST), and Outlook will update their Exchange mailbox in the background.

The article fails to mention the third solution: upgrade! The reason Outlook 2007 doesn’t have this issue is that Outlook 2007 (and later) support a third method: asynchronous (push notification). And as you’ve probably guessed, Exchange 2010 (and Exchange 2007) supports this method as well.