Archive

Archive for August, 2014

Microsoft Exchange 2013 Virtual Directory Configuration (Internal and External URL’s)


After Installing and configuring your new Exchange 2013 servers, you have to configure Exchange virtual directory settings like Outlook Web Access, AutoDiscover, ActiveSync and Outlook anywhere.

All the Virtual Directories must configure under a valid public domain name.

To start the configuration you have log in to the Exchange 2013 portal and follow below steps.

1. Go to Servers –> Virtual Directories

image

2. Configure Outlook Web Access (OWA)

Click on OWA (Default Web Site) and select Edit icon. Then you will see the Virtual Directory window for OWA. Edit Internal and External URL’s accordingly.

Internal OWA URL – https://webmail.valakulu.net/OWA

External OWA URL – https://webmail.valakulu.net/OWA

image

Once you click on the save button you will get a warning as below. But don’t worry about the warning as we are going to take care about it soon

image

3. Configure Exchange Control Panel (ECP)

Click on ECP (Default Web Site) and select Edit icon. Then you will see the Virtual Directory window for ECP. Edit Internal and External URL’s accordingly.

Internal ECP URL – https://webmail.valakulu.net/ECP

External ECP URL – https://webmail.valakulu.net/ECP

image

4. Configure Active Sync

Click on Microsoft-Server-ActiveSync (Default Web Site) and select Edit icon. Then you will see the Virtual Directory window for ActiveSync. Edit Internal and External URL’s accordingly.

Internal ActiveSync URL – https://webmail.valakulu.net/Microsoft-Server-ActiveSync

External ActiveSync URL – https://webmail.valakulu.net/Microsoft-Server-ActiveSync

image

5. Configure Offline Address Book (OAB)

Click on Offline Address Book (Default Web Site) and select Edit icon. Then you will see the Virtual Directory window for OAB. Edit Internal and External URL’s accordingly.

Internal OAB URL – https://webmail.valakulu.net/OAB

External OAB URL – https://webmail.valakulu.net/OAB

image

6.Configure Exchange Web Services (EWS)

Click on Exchange Web Services (Default Web Site) and select Edit icon. Then you will see the Virtual Directory window for EWS. Edit Internal and External URL’s accordingly.

Internal EWS URL – https://webmail.valakulu.net/EWS/Exchange.asmx

External EWS URL – https://webmail.valakulu.net/EWS/Exchange.asmx

image

7. Configure AutoDiscover

AutoDiscover feature allows client applications such as Outlook to connect to Exchange server automatically. You have to configure AutoDiscover setting using Exchange Management Shell.

PowerShell command to configure AutoDiscover URL is,

Set-ClientAccessServer -Identity CASServer -AutoDiscoverServiceInternalUri https://webmail.valakulu.net/Autodiscover/Autodiscover.xml

To check the current URI type below command on Management Shell

Set-ClientAccessServer |FL

image 

8. Enable Outlook Anywhere

Outlook Anywhere allows you to use Outlook to connect to your Exchange server from remote locations without first connecting to the VPN.

To enable Outlook Anywhere go to Server –> Double click server name –> Outlook Anywhere

image

You can use below PowerShell commands to configure virtual directories with out using the UI

AutoDiscover

Set-ClientAccessServer -Identity CASServer -AutoDiscoverServiceInternalUri https://webmail.valakulu.net/Autodiscover/Autodiscover.xml

Setup Exchange Web Services
Set-WebServicesVirtualDirectory -Identity “CASServer\EWS (Default Web Site)” -InternalURL https://webmail.valakulu.net/EWS/Exchange.asmx -ExternalURL https://webmail.valakulu.net/EWS/Exchange.asmx -BasicAuthentication:$true

Setup OAB
Set-OABVirtualDirectory -Identity “CASServer\OAB (Default Web Site)” -InternalURL https://webmail.valakulu.net/OAB -ExternalURL webmail.valakulu.net/OAB -RequireSSL:$true

Enable Outlook Anywhere
Enable-OutlookAnywhere -Server CASServer -ExternalHostname “webmail.valakulu.net” -ClientAuthenticationMethod “Basic” -SSLOffloading:$False

ActiveSync
Set-ActiveSyncVirtualDirectory -Identity “CASServer\Microsoft-Server-ActiveSync (Default Web Site)” -ExternalURL https://webmail.valakulu.net/Microsoft-Server-Activesync

Unified Messaging  
Set-UMVirtualDirectory -Identity “CASServer\UnifiedMessaging (Default Web Site)” -InternalURL https://webmail.valakulu.net/UnifiedMessaging/Service.asmx -ExternalURL https://webmail.valakulu,net/UnifiedMessaging/Service.asmx -BasicAuthentication:$true

Categories: Exchange

How to create a SSL certificate for Exchange 2013


 

In this Demo LAB I will show you how to create a SSL certificate for below Subject Alternative Names from internal CA.

  • webmail.valakulu.net
  • autodiscover.valakulu.net
  • VE2K13.valakulu.net
  • valakulu.net

1. Access Exchange Control Panel

image 

 

2. Navigate to Servers –> Certificate

image

 

3. Click “+” mark to start the certificate creation wizard –> Click Next

image

 

4. Enter a friendly name for the certificate

image

 

5. Do not choose wildcard option, just hot next button

image

 

5. Browse to choose the Exchange server. This is the server which holds the pending certificate until Internal Certificate Authority issue a valid certificate –> Next

image

 

6. Click edit icon and enter domain names which we have selected –> Click ok –> Next

image

 

7. CA will not issue any certificate for server NETBIOS name so you should remove the NETBIOS name from the below list –> Click Next

image

 

image

 

8. Fill required information and click Next

image

 

9. Provide the UPN path to save the .Req file

image

 

You can see the pending certificate on the certificate TAB

image

 

10. You can view the .REQ file using a notepad as below.

image

Note: As the best practice you have to purchase a public SSL certificate from a certificate provider such as Digicert.

 

11. Go to Internal Certificate Authority

image

 

12. Click Request a Certificate –> Advance Certificate Request

image

 

13. Select Submit a certificate request by using a base-64-Encoded CMC

image

 

14. Copy Certificate Request code to “Base-64-encoded certificate request
(CMC or PKCS #10 or PKCS #7)”

Select Web Server under certificate template row then click Submit

image

 

15. Let’s download the certificate by selecting “Base64 Encoded” radio button

image

 

16. Copy the created certificate to the Exchange server

17. To complete the certificate assigning process click complete link as below

image

 

18. Provide the UNC path of the saved certificate

image

 

19. Once the certificate is successfully installed you can see the status as Valid,

 

image

Categories: Exchange

Office365 – Setup user password to never expire

August 5, 2014 2 comments

10556458_10154368776145487_4319056439434303375_n

Below article describes you how to setup user password to never expire for your Office 365 user accounts. Microsoft do not recommend to perform this task for standard office 365 users unless you have service accounts.

Software Requirements

1. Operating System –

Windows 7, Windows 8, Windows Server 2008 R2, or Windows Server 2012 with the default version of Microsoft .NET Framework and Windows PowerShell.

 

2. Microsoft Online Services Sign-in Assistant

It is mandatory to install the appropriate version of the Microsoft Online Services Sign-in Assistant from the Download Center

 

3. Install Windows Azure AD module 

You must install Windows Azure AD Module for Windows PowerShell prior to go head with configuration.

    Installation Steps

image

    image

     

    image

     

    image

     

    How to set a password to never expire for single user and for all users

    For single user

    Connect to Windows PowerShell using Admin credentials

     

    Connect-MsolService

     

    image

     

    Set-MsolUser -UserPrincipalName <user ID> -PasswordNeverExpires $true

     

    image

     

    For all users

    Get-MSOLUser | Set-MsolUser -PasswordNeverExpires $true

     

    image

     

    How to check whether the password is set to never expire

    For single user

    Get-MSOLUser -UserPrincipalName <user ID> | Select PasswordNeverExpires

     

    image

     

    For all users

    Get-MSOLUser | Select UserPrincipalName, PasswordNeverExpires

    Categories: Exchange