User Profile
pazzoide76
Iron Contributor
Joined Jun 25, 2020
User Widgets
Recent Discussions
Exchange Server SE Hybrid License and Upgrades
Hi, I have a question about Exchange Server SE. Reading the FAQ I found this: As with previous versions, Exchange Server SE will continue to provide free licenses for qualified hybrid use via the Hybrid Configuration Wizard (HCW); however, unlike previous versions, you will need to either purchase SA for this license to get Exchange Server updates or have a cloud subscription license that satisfies the requirements. Does this mean I need to have SA to do the updates? Which cloud licenses do I need to buy to be able to update Exchange Server SE? Thanks Regards1.7KViews1like4Comments- 144Views1like0Comments
Implementing DKIM and BIMI with Exchange 2016
Hi, My customer wants to implement BIMI. His environment is composed of an exchange server 2016. To receive and send mail he uses a provider as a smarthost that also acts as an antispam. From what I read in order to implement BIMI, SPF, DKIM and DMARC must be configured correctly. The spf record is already configured correctly. For the DKIM issue, the configuration must be done by the provider and then I will insert the dns record with the correct parameters in the public area. Once the DKIM is configured, I can configure the DMARC by creating the dns record in the public area. My first question is: If the provider does not support DKIM, is it possible to install a third-party solution and then continue to use the provider as a smarthost? My second question is: I imagine that exchange does not natively support BIMI, since it does not even support dkim. In my configuration the BIMI service must be implemented by the smarthost (provider)? ThanksSolved229Views0likes2Commentsexchange 2019 license in a management machine-only environment
HI, I have a question regarding exchange licensing 2019. One of my customers currently has a hybrid infrastructure based on exchange 2016 and exchange online. He would like to migrate to exchange 2019 and then eliminate the exchange server on prem (using a machine with the management tools installed https://learn.microsoft.com/en-us/exchange/manage-hybrid-exchange-recipients-with- management-tools ) I would install a 2019 exchange in non-licensed mode, given that I have 180 days of use, I would do the migration and keep only one management machine (as per the article https://learn.microsoft.com/en-us/exchange/manage- hybrid-exchange-recipients-with-management-tools). By carrying out this procedure, is the 2019 exchange license necessary? Thank you Greetings724Views0likes0CommentsMigrate root CA from 2019 to 2022
HI, I have a question regarding migrating a root CA. Currently the CA root server is installed on a windows 2019 DC with the following roles installed: Certification Authority Certificate Enrollment Policy Server Certificate Enrollment Web Service Certification Authority Web Enrollment I should migrate these services to a new DC with Windows 2022. For the migration of the Certification Authority service there are no problems as there are many guides on the internet. However, I would like to understand how to migrate the other 3 services. Can anyone help me? Thank you GreetingsSolved2.3KViews0likes2Comments- 529Views1like0Comments
Throttling policies in a DAG
HI, I have a question regarding the exchange's throttling policies. Currently my infrastructure consists of a single exchange 2016 cu23 with all security updates. The mailboxes are on different databases. Throttling policies have been created and applied to all mailboxes. Now I want to put another exchange and do a dag to divide the db on the various exchanges. Are the throttling policies that I made previously active even if some dbs will be active on the second node of the DAG? Thank you GreetingsSolved698Views0likes2CommentsSwitch from Always On on the same subnet to a multisubnet cluster
HI, I have a question to ask you. I currently have a sql 2019 Always on cluster consisting of two nodes in the same subnet. Now, since we have taken some VMs in the cloud, we will want to see if it is possible to create an always on multisubnet cluster made up of 4 nodes (2 on prem and 2 in the cloud). My question is it possible to switch the current cluster to a multisubnet cluster and dock the two new nodes? Is there a procedure to do this configuration? Thank youSolved932Views0likes2Comments- 722Views0likes0Comments
- 736Views0likes0Comments
Best method to add a dag
HI, I have a question to ask. I currently have an exchange 2016 cu23 with the latest security patches installed. Now to guarantee continuity of service I want to install a second exchange. In this way I will be able to configure a DAG to have redundancy at the mailbox level and I will use a kemp balancer for the redundancy and balancing of CAS traffic. I would proceed like this: -Installation and configuration of the second Exchange server -Installation and configuration of the Dag. At this point I would have the redundancy of the mailboxes but not yet the one at the CAS level but in any case my clients can connect without problems with Outlook. -Kemp installation and configuration Or it would be better: -Kemp installation and configuration -Installation and configuration of the second Exchange server -Installation and configuration of the Dag Which method is better, the first or the second? Thank you GreetingsSolved1KViews0likes4Comments- 908Views1like0Comments
a question about TrustedSendersAndDomains
HI, I have a question to ask you. My company is relying on an external company for awareness campaigns against phishing. Since this external company uses around 70 domains to run awareness campaigns, I should configure these domains as trusted in exchange/outlook. I would like to know if what I want to do is correct. I would run the following command Get-Mailbox | Set-MailboxJunkEmailConfiguration -TrustedSendersAndDomains @{Add="domain name"} This way I should insert the exception for the domain on all mailboxes. And I would do this command by inserting one at a time all 70 domains for which I need to make the exception. It's correct? Is there maximum limit of TrustedSendersAndDomains in exchnage2016/outlook? Thank you GreetingsSolved1.2KViews0likes4CommentsRe: Migration to new exchange server 2016 with sophos web proxy
Dan_Snape Thanks for the reply. My customer does not install Exchange 2019 because it requires 128 GB of RAM and would need to upgrade the entire VMware cluster. it is true that mainstream support has ended but extended support lasts until October 2025 for the exchange and for windows 2016 it lasts until January 2027. So both products will still receive security patches. Also next year my customer will migrate to o365. For the topic of migration with the reverse proxy I will try to set up a laboratory to simulate the migration. Greetings843Views1like0CommentsMigration to new exchange server 2016 with sophos web proxy
HI, I currently have one of my customers who has an Exchange Server 2016 installed on Windows 2012 R2. Since support for Windows 2012 R2 ends at the end of the year, my customer wants to migrate Exchange Server 2016 to Windows Server 2016. So a windows 2016 server will be installed on which exchange 2016 will be installed and then everything will be migrated to this new machine. My doubt is that currently the exchange services are published via sophos reverse proxy with this configuration https://support.sophos.com/support/s/article/KB-000040209?language=en_US No third-party certificate is loaded on the current exchange server as the certificate has been uploaded to Sophos. At the virtual directories level the names point to the reverse proxy (except for autodiscover) and are: Owa https://webmail.pippo.it /owa Ecp https://webmail.pippo.it /ecp Ews https://webmail.pippo.it /EWS/Exchange.asmx Mapi https://webmail.pippo.it /mapi ActiveSync https://webmail.pippo.it /Microsoft-Server-ActiveSync Oab https://webmail.pippo.it /OAB Powershell http://webmail.pippo.it /powershell Autodiscover https://sever.ad.pippo.it /Autodiscover/Autodiscover.xml Since I have never done migrations to exchanges where there were reverse proxies, I wanted to understand how to do the migration. Usually the first thing you do when migrating an exchange is to set the name of the virtual directories the same as the existing server and upload the certificate. In this case, since the name of the autodiscover is the default one and the certificate used is the native one and not a third-party one, what should I do? Thank you Greetings953Views0likes2Comments
Recent Blog Articles
No content to show