Module 13

Implementing Microsoft Exchange Online with

Microsoft Office 365

Module Overview

• Introduction to Exchange Online

• Deploying Exchange Online

• Implementing Federated Delegation

Lesson 1: Introduction to Exchange Online

• What Is Office 365?

• Exchange Online Features

• Exchange Online User Subscriptions

• What Is Forefront Online Protection for Exchange?

• Exchange Online Deployment Scenarios

Use Exchange email, calendar, and contacts with built-in functionality to help protect against virus and spam

Use instant messaging, presence availability, and PC-audio, video conferencing and screen-sharing

Create SharePoint sites without the need to set up a datacenter

Use Office Professional Plus 2010 client applications

Create, view, edit, and share Microsoft Office documents on the web

What Is Office 365?

Office 365 is a suite of five Microsoft products that are available in an online version in the cloudOffice 365 is a suite of five Microsoft products that are available in an online version in the cloud

Exchange Online Features

Exchange Online provides the following messaging features:

• Compliance and archiving

• Migration and hybrid deployment

• Multiple management tools

• Enhanced web experience

• Advanced routing options

• Forefront Online Protection for Exchange

• Hosted voicemail with Unified Messaging

Exchange Online User Subscriptions

Exchange Online Kiosk is the most basic user subscription and includes only Outlook Web App or POP3 access to the mailbox

Exchange Online Kiosk is the most basic user subscription and includes only Outlook Web App or POP3 access to the mailbox

Exchange Online Plan 2 includes advanced features such as legal hold and voicemailExchange Online Plan 2 includes advanced features such as legal hold and voicemail

The available Exchange Online user subscriptions are:

• Exchange Online Kiosk for mailbox size up to 500 MB

• Exchange Online Plan 1 for 25 GB combined primary and archive mailboxes

• Exchange Online Plan 2 for 25 GB primary mailbox plus unlimited Personal Archives

What Is Forefront Online Protection for Exchange?

Forefront Online Protection for Exchange is an antivirus and anti-spam service that is included with Exchange Online or can be purchased separately

Forefront Online Protection for Exchange is an antivirus and anti-spam service that is included with Exchange Online or can be purchased separately

Core Product Capability

Description

Edge • Connection analysis (IP-based edge blocks)

• Reputation analysis

Antivirus • Protect businesses from receiving email viruses and other malicious code

• Multiple scan engines and heuristic detection

Anti-spam • Anti-spam filter can detect all types of spam before it reaches the corporate network

Policy • Policy rules to regulate email for compliance

• Forced TLS option for encrypted messages

Exchange Online Deployment Scenarios

PC

PHONEWEB

Consistent User Experience

On-Premises Cloud Service

Choose the type of deployment that best fits your business needsChoose the type of deployment that best fits your business needs

HybridDeployment

HybridDeployment

Lesson 2: Deploying Exchange Online

• Exchange Online Migration Options

• Migrating to Exchange Online

• Implementing a Hybrid Deployment

• What Is the Hybrid Configuration Wizard?

• Managing a Hybrid Deployment

• Exchange Online Management Tools

Exchange Online Migration Options

IMAP migration

Exchange migration

Coexistence with Exchange

Rich coexistence with Exchange

IMAP Migration

Cutover

Staged

Hybrid

Deployment

Exchange 5.5 X

Exchange 2000 X

Exchange 2003 X X X X

Exchange 2007 X X X X

Exchange 2010 X X X X

Notes/Domino X

GroupWise/Other

X

Migration

IMAP Migration • Supports wide range of email platforms

• Email only (no calendar, contacts, or desks)

Cutover Exchange Migration

• Good for fast, direct migrations

• No server required on-premises

Coexistence

Staged Exchange Migration

• Allows staged migrations

• No server required on-premises

Hybrid Deployment

• Enables cross premises free/busy

• Smooth move- mailbox

• Automatic redirect of clients

Migrating to Exchange Online

To migrate to Exchange Online:

Connect directory and message routing to Exchange Online

Migrate the mailboxes

11

22

Finalize the migration and remove the old Mailbox servers44

Switch the DNS MX record so that it points to Exchange Online33

Implementing a Hybrid Deployment

To connect Exchange On-Premises to Exchange Online:

Configure AD FS

• Provides centralized user management• Provides single-sign-on and security policies

Implement Active Directory Synchronization

• Eliminates the need to manage users, groups and contacts in two locations

• Provides a unified GAL• Simplifies user provisioning

11

22

Run Hybrid Configuration Wizard

• Enables hybrid deployment features such as mailbox-move, free-busy, MailTips, and so on

33

What Is the Hybrid Configuration Wizard?

Use the Hybrid Configuration Wizard to configure your on-premises Exchange organization and Exchange Online for hybrid deployment

Use the Hybrid Configuration Wizard to configure your on-premises Exchange organization and Exchange Online for hybrid deployment

The Hybrid Configuration Wizard configures the following:

Allows you to enable/disable the following features:

• Federated Delegation• Enable MRS proxy• Add <domain>.mail.onmicrosoft.com to

accepted domains• Configure secure mail flow between premises

• Free/busy sharing• Mailbox moves • Message tracking • MailTips• Online archiving• OWA redirection• Secure mail

Managing a Hybrid Deployment

A hybrid deployment is a complex configuration that needs monitoring to make sure all components work correctlyA hybrid deployment is a complex configuration that needs monitoring to make sure all components work correctly

Key areas to consider for a hybrid deployment:

• Make sure your Directory synchronization tool is reliably running• Manage your users, distribution lists and contacts from

your on-premises Exchange only• Monitor message routing between on-premises and cloud• Use monitoring software to monitor your Federated

Delegation• Regularly run Microsoft Remote Connectivity Analyzer to

verify your configuration• Monitor your middle-tier components

On-Premises

Exchange Online Management Tools

Exchange Control PanelExchange Control PanelMicrosoft Online Services PortalMicrosoft Online Services Portal

Exchange Management ConsoleExchange Management Console Exchange Management ShellExchange Management Shell

Lesson 3: Implementing Federated Delegation

• What Is Federated Delegation?

• Components Required for Federated Delegation

• How Federation Delegation Works for Exchange Online

• Configuring a Federation Trust

• Configuring Organizational Relationships and Sharing Policies

What Is Federated Delegation?

Federated Delegation:

• Requires Microsoft Federation Gateway as a trust broker

• Is supported for all messaging clients

• Requires each organization to establish and manage its trust

Federated Delegation uses standard federation technologies to establish trusted relationships between organizations Federated Delegation uses standard federation technologies to establish trusted relationships between organizations

Components Required for Federated Delegation

Federated Delegation requires:

• Organization identifier that identifies which domains areavailable for federation

• Federation trust with Microsoft Federation Gateway

• Establishment of a organizational relationship with another federated organization to enable sharing of availability information.

• Sharing relationships that define the organizations withwhich your users will share data, and the type of data theycan share

Exchange Online Contoso.com

How Federation Delegation Works for Exchange Online

Client AccessServer

Client AccessServer

MicrosoftFederationGateway

MicrosoftFederationGateway

Client AccessServer

Client AccessServer

DomainControllerDomain

Controller

DomainControllerDomain

Controller22

33

44

77

88

MailboxServer

MailboxServer

6611 55

Configuring a Federation Trust

Before configuring a federation trust:

When configuring the federation trust:

• Obtain a trusted certificate

• Configure the authoritative domains

• Configure external DNS records

• Ensure the server has Internet access

• Ensure that the server has the certificate installed

• Provide the certificate thumbprint

Configuring Organization Relationships and Sharing Policies

Organization relationships determine the organizations you want to share information with, and what types of information you will share

Organization relationships determine the organizations you want to share information with, and what types of information you will share

Sharing policies define which users can share information with other organizations, and what types of information those users can share

Sharing policies define which users can share information with other organizations, and what types of information those users can share

Can be configured to allow calendar sharing including or excluding free/busy and contacts to be shared between users

Can be configured to allow calendar sharing including or excluding free/busy and contacts to be shared between users

Can be configured to allow free/busy, MailTips and message tracking using delivery reports to be shared between two organizations

Can be configured to allow free/busy, MailTips and message tracking using delivery reports to be shared between two organizations

Module Review and Takeaways

• Review Questions

• Common Issues and Troubleshooting Tips

• Tools

Course Evaluation