1. If you use the Library feature in Windows 7 on remote files/folders, it requires indexing on the file/folder server which is only supported in Windows Server 2008(R2) or on Windows Server 2003 with Desktop Search 4.0. This is because the library feature needs to have a indexed source folder in order to know where your files are located. To have your Windows 7 client do this, will mean that you need to have 24*7 access to these folders and that's usually not the case.What you can do to have it work is to enable offline folder synchronization on the share you will need to access. This will make a offline copy of the share on the Windows 7 client, so that your client can do the indexing on the folder. Unfortunately this means that you will need a time to time replication to your share on your NAS device.In my understanding i have never seen a third party NAS device with CIFS sharing that can index on your file/folders and have Windows understand it.


2. The library feature is not deploy-able via a GPO. This makes the Central Management of Libraries in Windows 7 a hard one. The philosophy behind Libraries i think is that it's a user feature. If users know what the advantages of properly set libraries are, they will need to create and manage them there own.

1. Genereer een nieuwe Certificate Request (CSR) via Exchange Management Shell doormiddel van de volgende command line:

1. Vraag bij www.sslcertificaat.nl een Comodo MobileSSL certificaat voor 3 jaar aan;


2. Installeer de Extra Certificaten voor Trusted Root en Intermediate Root in de Certificate Store op de Exchange Server


3. Kopieer het via de mail aangeleverde SSL certificaat naar d:\install\ssl op de Exchange Server en geïmpor het in de Exchange Management Shell met commandline:

1. Certificaat geschikt maken voor OWA en mogelijk ook SMTP

1. Exporteer het SSL cetificaat voor OWA met private key op de Exchange Server

• First you will need to logon to a Windows 7 or Windows Server 2008 R2 domain member machine;


• Now open the certificates mmc snap-in using mmc.exe.

• Next expand Certificates > Personal and right click on Certificates and choose for All Tasks > Advanced Operations > Create Custom Request;

• In the Certificate Enrollment Wizard click Next on the Before you Begin page;


• In the Select Certificate Enrollment Policy page, choose Custom Request > Proceed without enrollment policy and click Next;


• In the Custom Request page the Template (No template) CNG key is selected. Change this to (No template) Legacy key and click Next. (You can leave the Suppress default extensions checkbox empty and the Request format to PKCS #10);


• In the Certificate Information page click on Details on the right site next to Custom Request to fold it down and click on the Properties button;


• In the General Tab fill in a Friendly name of the certifiate and a Description for the purpose of the certificate. This information is visible when your viewing a certificate. You can fill in whatever you like, although it's recommended to use recognizable information such as *.contoso.com;


• In the Subject Tab you will need to fill in the following information under Subject name. The following table shows you the Type and Values you will need to fill in. (These values are examples)

• In the Extensions Tabselect:
  
  
  
  • Under Key usage select the options Digital Signature and Key encipherment. Deselect the option Make these keys usages critical.
  
  
  • Under Extended Key Usage (application policies) select the option Document Signing;
  
  
  
  


• In the Private Key Tabselect:
  
  
  
  • Under Key options select the Key Size (depending on how secure you want the encryption. Default in Microsoft Environments is a key size of 2048). Because you want to be able to export the certificate for backup purposes select the option Make private key exportable. Leave the other options cleared.
  
  
  • Under Key type change the value to Exchange.
  
  
  
  


• After you have filled in all information click OK;


• Back in the Certificate Information page click Next;


• Now fill in the path and filename where to save the certifcate request file (It's recommended to save the file with the extension *.txt because you need to copy the information in the file with a text editor such as notepad) and leave the file format Base64 and click Finish;


• Now the request is created. Browse with explorer to the file and open it with your default text editor;


• Select all information in there and copy it;


• Open a new browser session (preferably Internet Explorer) and browse to your Certification Authirity Web Service (example: https://server1.contoso.com/cersrv);


• On the page click on the task Request a Certificate;


• Click on the task  advanced certificate request;


• Click on the task Submit a certificate request by using a base-64-encoded CMC or PKCS #10 file, or submit a renewal request by using a base-64-encoded PKCS #7 file;


• Paste the copied information in the Saved Request field;


• Under Certificate Template select Web Server and click Submit;


• In the next screen download the certificate. (If you are going to use the certificate on a domain machine you don't need to download the certificate chain because te CA is already in the Trusted Root Certification Authorities);

• Don’t think Exchange 2003 or Exchange 2007 like;

A lot of engineers or IT administrators think that if they have 1 Exchange 2003 server in their current environment, it will automatically does the trick when implementing 1 Exchange 2010 Server in their new environment. In some cases this can actually be true, in most cases however it isn’t. Because Exchange Server 2010 is using 64-bit architecture, the load of the server(s) running Exchange on it will automatically be higher.

The other fact you see a lot is the quote “Hey I have this set-up in Exchange Server 2007, let’s do the same thing in Exchange Server 2010”. Why this is wrong thinking? Well first of all Exchange Server 2010 is not Exchange Server 2007. As Exchange Server 2007 was considered as a pretty unstable messaging system, especially when working with CCR clusters, Exchange Server 2010 is not. Microsoft made a lot of improvements in for example database optimization by removing SIS (Single Instance Storage). Because of this, Microsoft realized a IOPS win of 85%. Another mayor improvement is the realization of DAG (Database Availability Groups). Creating a DAG to fore fill your HA needs is pretty simple, however designing the optimal DAG configuration does take some consideration.

• Don’t install all Exchange roles on as many servers you can find;

When it comes to Exchange Server 2010 it is best practice to deploy multi-role servers in almost all circumstances. The great thing about Exchange Server 2010, also mentioned in the previous remark, is that because of the mayor improvement of IOPS load it is not needed anymore to install all roles separately. Another advantage of multi-role servers, is that if for one reason you need an extra server, you can just install a new one which is exactly the same as your current Exchange servers. This makes your administration and documentation easier and hey we all want that right.

• Think to easy about HA (High Availability);

Never think to easy about HA. Installing two CAS or HUB servers, doesn’t automatically gives you HA. You always need to consider a proper load-balancing solution. Best practice is a hardware load balancer, or when running virtual a virtual hardware load balancer. Why? All clients are using your CAS server(s) to contact their mailbox and Exchange organization information. Think about what happens when a client is switched to another IP by switching to wireless or when a client is connected via outlook anywhere and gets a new IP address from it’s provider or when the request is going to one CAS server and the reply is coming from another. You don’t want this. Another reason to think about load balancing is service provided failover. When a services of one Exchange CAS or HUB transport server is not available, a hardware load balancer is aware of this and will automatically redirect traffic to the remaining servers in the load balancing server. This could also be nice if you want to put one server into maintenance to update or something else.

• Don’t forget security from outside boundaries;

A lot of Exchange admins think hey Exchange Server 2010 is secure, why the need of a reverse proxy? Well pretty simple. Your CAS server for example are domain joint servers which are in all cases located in your internal network. What happens when a potential unwanted individual is able to use a backdoor on your system? Right this individual is now on the internal network with access to your complete Active Directory and all the information what’s in it. You don’t want this. Therefore always implement a proper reverse proxy solution like Forefront TMG or UAG to protect your internal network.

• Design by need;

Before deciding on how many servers, how much storage, how much memory and how many CPU is needed, always write down the following facts:

• How much mailboxes do you have in your organization?


• What is the total amount of mail data in your organization?


• How many e-mail does an average user receives / send per day?


• Do you have any quota’s or does you organization wants any?


• Is your organization using pst files as archives?


• If yes how much storage do all pst files take?


• Is there any way to clean up all mailboxes before migration?


• Are you still using an older version of Outlook then Outlook 2007?


• Etcetera…

Having these facts written down gives you a better understanding in the circumstances that you need to consider when creating you design.

•  When you're companies history lacks correct user registration (names are not correct);


•  When a user changes their lastname when he/she get's married and wants to use that name when logging in.

1. Login on the primary federation server;


2. Open powershell;


3. Import the MSonline powershell module "import-module msonline";


4. Run the change UPN cmdlet "Set-MsolUserPrincipalName -UserPrincipalName [CurrentUPN] -NewUserPrincipalName [NewUPN]"

• In part 1 I will describe the new features and changes that this new version of Exchange is going to offer;


• In part 2 I will guide you through the installation of Exchange Server 2013;


• In part 3 we will have a deeper look into the management of Exchange Server 2013.

• Client Access server role This role proxies connectivity for all clients, such as Microsoft Office Outlook, Outlook Web App, mobile devices, POP, and SMTP and also accepts mail from and delivers mail to other mail hosts on the Internet. Client access servers can be organized into Client Access server arrays.


• Mailbox server role This role stores mailbox data, performs processing and rendering for client connections proxied by the Client Access server, and handles Unified Messaging requests. Mailbox servers can be organized into back-end clusters that use database availability groups (DAGs).

• Provides a unified namespace, authentication, and network security.


• Handles all client requests for Exchange.


• Routes requests to the correct Mailbox server.


• Proxies or redirects client requests for legacy servers, such as Exchange 2007 and Exchange 2010 Client Access.


• Enables the use of layer 4 (TCP affinity) routing.

• Protocol level filtering Performs connection, recipient, sender, and protocol filtering


• Network protection Centralized, load-balanced egress and ingress point for the organization.


• Mailbox locator Avoids unnecessary hops by determining the best Mailbox server to deliver the message to.


• Load-balances client and application SMTP requests.

• Host mailbox databases.


• Provide email storage.


• Host public folder databases.


• Calculate email address policies.


• Conduct multi-mailbox searches.


• Provide high availability and site resiliency.


• Provide messaging records management and retention policies.


• Handle connectivity because clients don't connect directly to the Mailbox servers.


• Provide all core Exchange functionality for a given mailbox where that mailbox's database is currently activated.


• Fails over mailbox access when a database fails over.

• Transaction log code has been refactored for fast failover with deep checkpoint on passive database copies.


• To support enhanced site resiliency, servers can be in different locations.


• Exchange 2013 Preview now hosts some Client Access components, the Transport components, and the Unified Messaging components.


• Exchange 2013 Preview Store has been re-written in managed code to improve performance in additional IO reduction and reliability.


• Each Exchange 2013 Preview database now runs under its own process.


• Smart Search has replaced the Exchange 2010 multi-mailbox search infrastructure.

• Outlook 2013 Preview


• Outlook 2010 SP1 with April 2012 Cumulative Update


• Outlook 2007 SP3 with July 2012 Cumulative Update


• Entourage 2008 for Mac, Web Services Edition


• Outlook for Mac 2011

• You can only run this script by using elevated permissions of User Account Control is turned off;


• You need the Exchange cmdlets, therefore you either run the script from within the Exchange Management Shell or you'll need to import the cmdlets for Exchange in your current powershell session.

New-PSSession -Name remote #Creates a new local pssession to avoid cmdlets conflicts

Enter-PSSession -Name remote #Enters the new pssession to proces commands
    $cred = Get-Credential ""
    #creating a new remote powershell session to Microsoft Online
    $Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://ps.outlook.com/powershell/ -Credential $cred -Authentication Basic -AllowRedirection
        Import-PSSession $Session
    # Recieving ExchangeGUID of all mailboxes in Microsoft Online and exports it to a CSV file
        $temp = Get-Mailbox -ResultSize unlimited | select userprincipalname,exchangeguid
        $temp | export-csv -Path d:\temp\export-o365-boxes.csv -NoTypeInformation
Exit-PSSession

Start-Transcript -Path D:\temp\transcript.txt #writes all output into a transscript file
$csv = Import-Csv -Path d:\temp\export-o365-boxes.csv #imports the created CSV file
    foreach ($item in $csv) { # create a loop to check if ExchangeGUID matches the MSonline Mailbox GUID. If not this script sets the value ExchangeGUID
        $mbtemp = get-remotemailbox $item.userprincipalname
            Write-Host $item.ExchangeGuid "is cached from csv file" -ForegroundColor Green
            Write-Host $mbtemp.ExchangeGuid "is cached from get-mailbox"-ForegroundColor Magenta
        if ($mbtemp.exchangeguid -ne $item.exchangeguid) {
            Write-Host "No match. Writing GUID" $item.exchangeguid "into user" $mbtemp.userprincipalname -ForegroundColor Red
            set-remotemailbox $mbtemp.userprincipalname -ExchangeGuid $item.exchangeguid
        }
}
Stop-Transcript

<# 
MS Online sets local Exchange 2010 remotemailbox ExchangeGUID

Author: Cor (C.J.H.) Reinhard
Copyright: 2012, Unauthorized use from author prohibited

Version: 1.0
Create date: 14-08-2012
Last modification date: 14-08-2012

Notes:  Make sure script execution is set to unrestricted by running "Set-ExecutionPolicy -ExecutionPolicy unrestricted -Force"
  Make sure to run this script from within the Exchange Server 2010 Management Shell

Change history:
13-08-2012: First version, v0.1
14-08-2012: Added pssessions, v1.0

Nice to have:
#>

New-PSSession -Name remote #Creates a new local pssession to avoid cmdlets conflicts

Enter-PSSession -Name remote #Enters the new pssession to proces commands
 $cred = Get-Credential ""
 #creating a new remote powershell session to Microsoft Online
 $Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://ps.outlook.com/powershell/ -Credential $cred -Authentication Basic -AllowRedirection
  Import-PSSession $Session
 # Recieving ExchangeGUID of all mailboxes in Microsoft Online and exports it to a CSV file
  $temp = Get-Mailbox -ResultSize unlimited | select userprincipalname,exchangeguid
  $temp | export-csv -Path d:\temp\export-o365-boxes.csv -NoTypeInformation
Exit-PSSession 

Start-Transcript -Path D:\temp\transcript.txt #writes all output into a transscript file
$csv = Import-Csv -Path d:\temp\export-o365-boxes.csv #imports the created CSV file
 foreach ($item in $csv) { # create a loop to check if ExchangeGUID matches the MSonline Mailbox GUID. If not this script sets the value ExchangeGUID
  $mbtemp = get-remotemailbox $item.userprincipalname
   Write-Host $item.ExchangeGuid "is cached from csv file" -ForegroundColor Green
   Write-Host $mbtemp.ExchangeGuid "is cached from get-mailbox"-ForegroundColor Magenta
  if ($mbtemp.exchangeguid -ne $item.exchangeguid) {
   Write-Host "No match. Writing GUID" $item.exchangeguid "into user" $mbtemp.userprincipalname -ForegroundColor Red
   set-remotemailbox $mbtemp.userprincipalname -ExchangeGuid $item.exchangeguid
  }
}
Stop-Transcript

• Microsoft wants the new MCSM's to be current. Therefore after finishing your MCSM program you need to do an update exam every 3 years.


• 
  
  To join the program you need to be certified on:
  
  
  
  
  • MCSA (Microsoft Certified Solutions Associate) on Windows Server 2012
  
  
  • MCSE (Microsoft Certified Solutions Expert) on Messaging
  
  
  
  


• You also need to have proven experience in deploying Exchange Server 2013

• MCSA: Windows Server 2008


• MCITP: Virtualization Administrator


• MCITP: Enterprise Messaging Administrator


• MCITP: Lync Server Administrator


• MCITP: Sharepoint Administrator


• MCITP: Enterprise Desktop Administrator

1. The word "project" is often misunderstood and misinterpreted. If the project is handled as a project then the points in case of investments should go to the most economic friendly solution over the complete life cycle.


2. The tender rules are often misinterpreted by all people involved in a project. There is nothing mentioned in the regulations about initial investments. If you want the give both solutions an equal chance you should calculate the TCO and ROI of both solutions as equals, so during the complete life cycle.

• 10 jaar ondersteuning (5 jaar algemene ondersteuning en 5 jaar uitgebreide ondersteuning) op het ondersteunde service pack niveau voor zakelijke- en developer producten en desktop besturingssystemen.
• 5 jaar algemene ondersteuning op het ondersteunde service pack niveau voor consumenten producten, multimedia producten en hardware.
• 3 jaar algemene ondersteuning voor producten met een jaarlijkse verschijning (Bijvoorbeeld Money, Encarta, Picture It!, Streets & Trips)

1. You'll probably need backup to perform a point in time restore based on a single item or complete mailbox.
2. In any enterprise production environment you'll need a solution that provides you a solution to recover your data in case of an emergency.

1. RPO (Recovery Point Objective) and
2. RTO (Recovery Time Objective).

• It saves you a lot of time to backup single items with any software;
• It saves you storage in case of snapshot backups on storage level;
• It saves you storage on your backup tapes;
• It saves your IT Helpdesk the burden to answer call's about restore of single items;
• And last but probably the most important, users don't have to call the IT department anymore. They can do it themselves! And that means, one step forward in pissing of users ;).

Updates

Show-Command

Out-Gridview

Easy insert

Module Auto-Loading

Check your tenant status

 Check your Exchange Online Organization status

Verifying mailbox version

Import-Module MSOnline
Connect-MsolService -Credential (Get-Credential)
Get-MsolSubscription

Get-MsolSubscription -SubscriptionId  | select-object -ExpandProperty servicestatus

Import-Module MSOnline
Connect-MsolService -Credential (Get-Credential)
$GlobalLog = "D:\Scripts\Logs\$(gc env:computername)_$(get-date -format hhmm_ddMMyyyy).log"
$Date =  get-date -Format "hh:mm:ss - dd MMMM yyyy"
$Users = Get-MsolUser -All
$Location = "NL"
$LicOptions = 'SHAREPOINTWAC_EDU','MCOSTANDARD','SHAREPOINTSTANDARD_EDU'

#Faculty members
$Faculty = "<TenantID>:STANDARDWOFFPACK_FACULTY"
$PlanFc = New-MsolLicenseOptions -AccountSkuId $Faculty -DisabledPlans $LicOptions 

#Students
$Student = "<TenantID>:STANDARDWOFFPACK_STUDENT"
$PlanSt = New-MsolLicenseOptions -AccountSkuId $Student -DisabledPlans $LicOptions

function LogLine {
 Param(
 [string]$LogInput
 )
 Add-content $GlobalLog -value $LogInput
}

function LogHeader {
 LogLine "--------------------------------------------------------------------------------"
 LogLine "Adding user licenses:"
 LogLine "Time: $Date"
 LogLine "--------------------------------------------------------------------------------"
}

function LicAdd {
$Users | ForEach-Object -Begin {Clear-Host;$i=0;$Stu=0;$Fac=0} -Process `
{ 
 if ($_.IsLicensed -ne "TRUE")
 {
 Set-MsolUser -UserPrincipalName $_.Userprincipalname -UsageLocation $Location
   if ($_.Office -ne $null) 
   {  
       $User = $_.UserPrincipalName
    Set-MsolUserLicense -UserPrincipalName $User -AddLicenses $Student -LicenseOptions $PlanSt
    LogLine "Added student license for user $User"
    Write-Host "Added student license for user" $User -ForegroundColor 'Gray'
    #Start-Sleep -Milliseconds 30
     $Stu++
   }
   else 
   {  
    $User = $_.UserPrincipalName
    Set-MsolUserLicense -UserPrincipalName $User -AddLicenses $Faculty -LicenseOptions $PlanFc
    LogLine "Added faculty license for user $User"
    Write-Host "Added faculty license for user" $User -ForegroundColor 'Green'
    #Start-Sleep -Milliseconds 30
     $Fac++
   }
 }
 write-progress -activity "Adding licenses" -status "Progress:" -percentcomplete ($i/$users.count*100)
 $i = $i+1
} `
-end {}
LogLine "--------------------------------------------------------------------------------"
LogLine "Number licenses added for students: $Stu"
LogLine "Number licenses added for faculty employees: $Fac"
LogLine "--------------------------------------------------------------------------------"
LogLine ""
}

LogLine
LogHeader
LicAdd

What is Office 365?

Productivity Services

• Mail (Exchange Online)
• Communication (Lync Online)
• Collaboration (SharePoint Online)
• Social (Yammer)
• Document editing (Office Online)

Productivity Applications

• Office 365 Pro Plus. This is a desktop version of Office like Office 2013 only with a subscription service to activate or de-activate based on the users permission or license. With a typical Office 365 Pro Plus license you can install Office 365 Pro Plus on five different devices and on both PC and MAC.
• Project Online with Project Pro for Office 365. Project Online is a flexible online solution for project portfolio management (PPM) and everyday work. Delivered through Office 365 and designed for people who need to manage with full project management capabilities on the desktop as well as work online from virtually anywhere on almost any device
• Visio for Office 365. Visio for Office 365 requires a separate subscription. With a Visio for Office 365 subscription you can provide users who need Visio a possibility to install Visio on their client. This is the same way as users install Office 365 Pro Plus.
• Mobile Apps. Microsoft is providing several mobile apps (like OneNote for Business, Yammer, OWA and Office 365) to all main mobile platforms Android, iOS, Blackberry and Windows Phone*

Baseline

• Hardware
• Microsoft Software and Services
• Third-Party Software and Services
• Operations
• Deployment and Migration
• Disaster Recovery

Hardware

Microsoft Software and Services

• Licensing costs for the messaging solution (Exchange)
• Licensing costs for the communication solution (Lync)
• Licensing costs for the collaboration solution (SharePoint)
• Licensing costs for the clients (Office)

Third-Party Software and services

Operations

Deployment and Migration

Disaster Recovery

Advantages of Office 365

Scalable

High Availability

Accessibility

• Is or are your datacenter(s) available in the region where the user is?
• What is the user experience if the user is on a location which has limited internet connectivity?
• Are the Service Level Agreements met? For most subscriptions Microsoft guarantees 99,9% (in 2013 it was 99,6%) availability.

Complexity

Disadvantages of Office 365

Highly Configurable - Not Customizable

Data Location and Transfers

No Customer Right to Audit

Comfortable with the Office 365 Roadmap

Less complexity or more

Governance

Conclusion

Now using Outlook app for mail

Battery drains like hell

Calendars are now handled in the Outlook App

Keyboard layout is changed (confusing)

SIM Pincode screen is a bit buggy

Installed apps keep on loading

Terribly slow on current phones

Cortana is still only available in English