Module 13
Implementing Microsoft Exchange Online with
Microsoft Office 365
Module Overview
• Introduction to Exchange Online
• Deploying Exchange Online
• Implementing Federated Delegation
Lesson 1: Introduction to Exchange Online
• What Is Office 365?
• Exchange Online Features
• Exchange Online User Subscriptions
• What Is Forefront Online Protection for Exchange?
• Exchange Online Deployment Scenarios
Use Exchange email, calendar, and contacts with built-in functionality to help protect against virus and spam
Use instant messaging, presence availability, and PC-audio, video conferencing and screen-sharing
Create SharePoint sites without the need to set up a datacenter
Use Office Professional Plus 2010 client applications
Create, view, edit, and share Microsoft Office documents on the web
What Is Office 365?
Office 365 is a suite of five Microsoft products that are available in an online version in the cloudOffice 365 is a suite of five Microsoft products that are available in an online version in the cloud
Exchange Online Features
Exchange Online provides the following messaging features:
• Compliance and archiving
• Migration and hybrid deployment
• Multiple management tools
• Enhanced web experience
• Advanced routing options
• Forefront Online Protection for Exchange
• Hosted voicemail with Unified Messaging
Exchange Online User Subscriptions
Exchange Online Kiosk is the most basic user subscription and includes only Outlook Web App or POP3 access to the mailbox
Exchange Online Kiosk is the most basic user subscription and includes only Outlook Web App or POP3 access to the mailbox
Exchange Online Plan 2 includes advanced features such as legal hold and voicemailExchange Online Plan 2 includes advanced features such as legal hold and voicemail
The available Exchange Online user subscriptions are:
• Exchange Online Kiosk for mailbox size up to 500 MB
• Exchange Online Plan 1 for 25 GB combined primary and archive mailboxes
• Exchange Online Plan 2 for 25 GB primary mailbox plus unlimited Personal Archives
What Is Forefront Online Protection for Exchange?
Forefront Online Protection for Exchange is an antivirus and anti-spam service that is included with Exchange Online or can be purchased separately
Forefront Online Protection for Exchange is an antivirus and anti-spam service that is included with Exchange Online or can be purchased separately
Core Product Capability
Description
Edge • Connection analysis (IP-based edge blocks)
• Reputation analysis
Antivirus • Protect businesses from receiving email viruses and other malicious code
• Multiple scan engines and heuristic detection
Anti-spam • Anti-spam filter can detect all types of spam before it reaches the corporate network
Policy • Policy rules to regulate email for compliance
• Forced TLS option for encrypted messages
Exchange Online Deployment Scenarios
PC
PHONEWEB
Consistent User Experience
On-Premises Cloud Service
Choose the type of deployment that best fits your business needsChoose the type of deployment that best fits your business needs
HybridDeployment
HybridDeployment
Lesson 2: Deploying Exchange Online
• Exchange Online Migration Options
• Migrating to Exchange Online
• Implementing a Hybrid Deployment
• What Is the Hybrid Configuration Wizard?
• Managing a Hybrid Deployment
• Exchange Online Management Tools
Exchange Online Migration Options
IMAP migration
Exchange migration
Coexistence with Exchange
Rich coexistence with Exchange
IMAP Migration
Cutover
Staged
Hybrid
Deployment
Exchange 5.5 X
Exchange 2000 X
Exchange 2003 X X X X
Exchange 2007 X X X X
Exchange 2010 X X X X
Notes/Domino X
GroupWise/Other
X
Migration
IMAP Migration • Supports wide range of email platforms
• Email only (no calendar, contacts, or desks)
Cutover Exchange Migration
• Good for fast, direct migrations
• No server required on-premises
Coexistence
Staged Exchange Migration
• Allows staged migrations
• No server required on-premises
Hybrid Deployment
• Enables cross premises free/busy
• Smooth move- mailbox
• Automatic redirect of clients
Migrating to Exchange Online
To migrate to Exchange Online:
Connect directory and message routing to Exchange Online
Migrate the mailboxes
11
22
Finalize the migration and remove the old Mailbox servers44
Switch the DNS MX record so that it points to Exchange Online33
Implementing a Hybrid Deployment
To connect Exchange On-Premises to Exchange Online:
Configure AD FS
• Provides centralized user management• Provides single-sign-on and security policies
Implement Active Directory Synchronization
• Eliminates the need to manage users, groups and contacts in two locations
• Provides a unified GAL• Simplifies user provisioning
11
22
Run Hybrid Configuration Wizard
• Enables hybrid deployment features such as mailbox-move, free-busy, MailTips, and so on
33
What Is the Hybrid Configuration Wizard?
Use the Hybrid Configuration Wizard to configure your on-premises Exchange organization and Exchange Online for hybrid deployment
Use the Hybrid Configuration Wizard to configure your on-premises Exchange organization and Exchange Online for hybrid deployment
The Hybrid Configuration Wizard configures the following:
Allows you to enable/disable the following features:
• Federated Delegation• Enable MRS proxy• Add <domain>.mail.onmicrosoft.com to
accepted domains• Configure secure mail flow between premises
• Free/busy sharing• Mailbox moves • Message tracking • MailTips• Online archiving• OWA redirection• Secure mail
Managing a Hybrid Deployment
A hybrid deployment is a complex configuration that needs monitoring to make sure all components work correctlyA hybrid deployment is a complex configuration that needs monitoring to make sure all components work correctly
Key areas to consider for a hybrid deployment:
• Make sure your Directory synchronization tool is reliably running• Manage your users, distribution lists and contacts from
your on-premises Exchange only• Monitor message routing between on-premises and cloud• Use monitoring software to monitor your Federated
Delegation• Regularly run Microsoft Remote Connectivity Analyzer to
verify your configuration• Monitor your middle-tier components
On-Premises
Exchange Online Management Tools
Exchange Control PanelExchange Control PanelMicrosoft Online Services PortalMicrosoft Online Services Portal
Exchange Management ConsoleExchange Management Console Exchange Management ShellExchange Management Shell
Lesson 3: Implementing Federated Delegation
• What Is Federated Delegation?
• Components Required for Federated Delegation
• How Federation Delegation Works for Exchange Online
• Configuring a Federation Trust
• Configuring Organizational Relationships and Sharing Policies
What Is Federated Delegation?
Federated Delegation:
• Requires Microsoft Federation Gateway as a trust broker
• Is supported for all messaging clients
• Requires each organization to establish and manage its trust
Federated Delegation uses standard federation technologies to establish trusted relationships between organizations Federated Delegation uses standard federation technologies to establish trusted relationships between organizations
Components Required for Federated Delegation
Federated Delegation requires:
• Organization identifier that identifies which domains areavailable for federation
• Federation trust with Microsoft Federation Gateway
• Establishment of a organizational relationship with another federated organization to enable sharing of availability information.
• Sharing relationships that define the organizations withwhich your users will share data, and the type of data theycan share
Exchange Online Contoso.com
How Federation Delegation Works for Exchange Online
Client AccessServer
Client AccessServer
MicrosoftFederationGateway
MicrosoftFederationGateway
Client AccessServer
Client AccessServer
DomainControllerDomain
Controller
DomainControllerDomain
Controller22
33
44
77
88
MailboxServer
MailboxServer
6611 55
Configuring a Federation Trust
Before configuring a federation trust:
When configuring the federation trust:
• Obtain a trusted certificate
• Configure the authoritative domains
• Configure external DNS records
• Ensure the server has Internet access
• Ensure that the server has the certificate installed
• Provide the certificate thumbprint
Configuring Organization Relationships and Sharing Policies
Organization relationships determine the organizations you want to share information with, and what types of information you will share
Organization relationships determine the organizations you want to share information with, and what types of information you will share
Sharing policies define which users can share information with other organizations, and what types of information those users can share
Sharing policies define which users can share information with other organizations, and what types of information those users can share
Can be configured to allow calendar sharing including or excluding free/busy and contacts to be shared between users
Can be configured to allow calendar sharing including or excluding free/busy and contacts to be shared between users
Can be configured to allow free/busy, MailTips and message tracking using delivery reports to be shared between two organizations
Can be configured to allow free/busy, MailTips and message tracking using delivery reports to be shared between two organizations
Module Review and Takeaways
• Review Questions
• Common Issues and Troubleshooting Tips
• Tools
Course Evaluation