MCT U

SE ON

LY. STUD

ENT U

SE PROH

IBITED4-26 Planning and Deploying Client Access Servers

Lab: Deploying and Configuring a Client Access Server Role

Scenario

You are working as a messaging administrator in A. Datum Corporation. Your organization has decided to deploy Client Access servers so that the servers are accessible from the Internet for a variety of messaging clients. To ensure that the deployment is as secure as possible, you must secure the Client Access server, and also configure a certificate on the server that will support the messaging client connections. In addition, you have to verify options on the Client Access server, and configure Mailtips for a few users.

Objectives

At the end of this lab, you will be able to:

• Configure certificates on the Client Access server.

• Configure Client Access server options.

• Configure MailTips.

Lab Setup Estimated time: 50 minutes

Virtual machines 20341A-LON-DC1

20341A-LON-CAS1

20341A-LON-MBX1

User Name Adatum\Administrator

Password Pa$$w0rd

For this lab, you will use the available virtual machine environment. Before you begin the lab, you must complete the following steps:

1. On the host computer, click Start, point to Administrative Tools, and then click Hyper-V Manager.

2. In Hyper-V Manager, click 20341A-LON-DC1, and in the Actions pane, click Start.

3. In the Actions pane, click Connect. Wait until the virtual machine starts.

4. Log on using the following credentials:

a. User name: Adatum\Administrator

b. Password: Pa$$w0rd

5. Repeat steps 2 and 3 for the rest of virtual machines.

MCT U

SE ON

LY. STUD

ENT U

SE PROH

IBITEDMicrosoft® Exchange Server 2013, Core Solutions 4-27

Exercise 1: Configuring Certificates for the Client Access Server

Scenario As a messaging administrator in A. Datum Corporation, you have deployed the Exchange Server environment, and you are now working on configuring the Client Access servers. The organization has decided to use a certificate from the internal CA to secure all client connections to the server. You need to enable this configuration, and then you must ensure that Outlook clients can still connect to the server.

The main tasks for this exercise are as follows:

1. Make a certificate request on Exchange Server.

2. Issue a certificate from internal CA.

3. Assign certificate to Exchange services.

Task 1: Make a certificate request on Exchange Server

1. On LON-CAS1, open Internet Explorer, type https://lon-cas1.adatum.com/ecp and press Enter.

2. Sign in as Adatum\administrator with the password Pa$$w0rd.

3. Click the servers node, click on Certificates and start the wizard for creating a certificate request.

4. Provide mail.adatum.com as a friendly name for a certificate.

5. Do not use wildcard certificates.

6. Provide the name mail.adatum.com for all values that are not defined.

7. Ensure that the certificate request contains the following domain names: mail.adatum.com, lon-cas1.adatum, autodiscover.adatum.com, LON-CAS1, and Adatum.com.

8. Fill in additional data as follows:

a. Organization name: A.Datum

b. Department name: IT

c. Country/Region name: United States

d. City/Locality: Seattle

e. State/Province: WA

9. Save certificate request to \\lon-cas1\C$\windows\temp\certreq.req.

Task 2: Issue a certificate from internal CA

1. On LON-CAS1, open File Explorer and navigate to C:\windows\temp.

2. Open the certificate request file with Notepad, and copy all content to the clipboard.

3. Connect to http://lon-dc1.adatum.com/certsrv as Adatum\Administrator with the password of Pa$$w0rd.

4. Choose to perform an advanced certificate request.

5. Paste the certificate request content (from step 2) in to the appropriate field, and select Web Server template.

6. Save the certificate.

7. Open File Explorer, and create a new folder called cert on the C:\ drive. Share the folder, and give Read permission to Everyone.

8. Copy the certificate file to the cert folder.

MCT U

SE ON

LY. STUD

ENT U

SE PROH

IBITED4-28 Planning and Deploying Client Access Servers

Task 3: Assign certificate to Exchange services

1. On the LON-CAS1, open the Exchange admin center.

2. Import the mail.adatum.com Exchange certificate that you issued in Task2. Import the certificate to LON-CAS1.Adatum.com.

3. Assign the certificate to IIS service.

Results: After completing this exercise, the students will have a certificate installed on the Exchange Server Client Access server.

Exercise 2: Configuring Client Access Services Options

Scenario To prepare the Client Access server, you need to perform several configuration tasks, such as configuring the external access domain and POP3 service. The external email domain name should be mail.adatum.com. You need to ensure that POP3 users can connect securely, and that connection limits should be applied as well as proper message formatting You also need to verify authentication options for virtual directories on the Client Access server.

The main tasks for this exercise are as follows:

1. Configure Client Access.

2. Verify authentication options on Client Access server.

Task 1: Configure Client Access

1. In the Exchange admin center, set the external domain name to mail.adatum.com for LON-CAS1.

2. Open LON-CAS1 settings, and set the following for POP3 users:

a. Maximum connections: 100

b. Maximum connections from a single IP address: 20

c. Maximum connections from a single user: 2.

Task 2: Verify authentication options on Client Access server

1. On LON-CAS1 in Exchange admin center, navigate to servers, and then click virtual directories.

2. Verify authentication options for the following virtual directories:

a. Autodiscover

b. ecp

c. PowerShell

d. Microsoft-Server-ActiveSync

e. OAB

3. Do not make any changes.

Results: After completing this exercise, the students will have Client Access server configured.

MCT U

SE ON

LY. STUD

ENT U

SE PROH

IBITEDMicrosoft® Exchange Server 2013, Core Solutions 4-29

Exercise 3: Configuring Custom Mail Tips

Scenario As a method for reducing the number of that require support, A. Datum is evaluating implementation of MailTips. You have been given the task of configuring some test deployments that implement MailTips, and you must verify that MailTips can be enabled in multiple languages.

The main tasks for this exercise are as follows:

1. Configuring Mail Tips.

2. Testing Mail Tips.

3. To prepare for the next module.

Task 1: Configuring Mail Tips

1. On LON-CAS1, open Exchange Administration Center, and navigate to Mailboxes.

2. Select April Reagan mailbox object.

3. Set the MailTip text for April to be Test e-mail tip for April.

4. Open Exchange Management Shell, and set an email tip for Aidan by executing the following:

Set-Mailbox –Identity Aidan –Mailtip “this is english mail tip” –MailtipTranslation (“FR: C’est la lague francaise”)

Task 2: Testing Mail Tips

1. Open Internet Explorer, and type https://lon-cas1.adatum.com/owa

2. Sign in as Adatum\Don with the password of Pa$$w0rd.

3. Accept defaults for time and language.

4. Open new mail window, and type April Reagan in the To text box.

5. Verify that email tip appears.

6. Open new mail window and type Aidan Delaney in the To text box.

7. Verify that email tip appears in English.

8. Sign out from Outlook Web App, and sign in as Adatum\Amr.

9. Select to Francais (France) as OWA language.

10. Open new mail window, and type Aidan Delaney in the To text box.

11. Verify that e-mail tip appears in French.