Exchange 2010 SP1 with BES 5.0.2

If you are deploying Exchange 2010 SP1 and have BES you should head over and read the Installation and Configuration Guide - http://docs.blackberry.com/en/admin/deliverables/14347/Configuring_Exchange_2010_environ_962756_11.jsp.

The guide covers most steps including configuring BES to run without public folders. There is one additional step to allow BAS to retrieve user information and is described in KB24470, Cannot add users to the BlackBerry Enterprise Server 5.0 in an environment that includes Microsoft Exchange 2010 SP1 - http://www.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB24470.

The workaround for now is to set the CONNECT_IGNORE_NO_PF flag in the MAPI profile used by the BlackBerry Mail Store Service in the following registry key.

HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\BlackBerryServer\13dbb0c8aa05101a9bb000aa002fc45a

Locate the key 00036604 and change the second byte value to 80.

The examples provided are:

• If the value is currently set to 04 00 00 00, change it to 04 80 00 00 (see screen shot for example)
• If the value is currently set to 02 00 00 00, change it to 02 80 00 00

A restart of the BlackBerry Mail Store Service completes the workaround.

Daniel Noakes
http://twitter.com/dannoakes

Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2423930): November 9, 2010

A critical vulnerability for Outlook has been reported, http://www.microsoft.com/technet/security/bulletin/ms10-087.mspx. It appears to affect All Outlook versions including Outlook 2011 for Mac and Entourage.

A specially crafted RTF email message when previewed or opened could allow an attacker to gain the same rights as the logged on user. If you have followed best practice and segregated administrative roles out the risk is somewhat reduced.

Microsoft have recommended to apply the update immediately.

BES Express for Microsoft Exchange 5.0.2 MR 1

If you are using BES Express for Exchange Server you should check out, BlackBerry Enterprise Server Express for Microsoft Exchange Version 5.0 Service Pack 2 Maintenance Release 1.

This maintenance release should be tested and installed on to computers hosting BES Express, BlackBerry Administration Service, BlackBerry Attachment Service, BlackBerry MDS Connection Service or the BlackBerry Router.

 

Fixed Issues

“(DT 838289) In the initial release of BlackBerry® Enterprise Server Express 5.0 SP2, users with BlackBerry® devices running
BlackBerry® 6 are not be able to browse to their organization's intranet sites. This occurs because BlackBerry 6 handles browser
transport selection using a different method than previous versions of the BlackBerry® Device Software.”

“In BlackBerry Enterprise Server Express 5.0 SP2 MR1, the MDS Browser Domains IT policy rule has been added. You can use
this IT policy rule to specify the domain of your organization's intranet sites. After you apply the IT policy to BlackBerry devices,
users with devices running BlackBerry 6 can browse to the domains that you specified.”

Using Autodiscover During a Migration

I came across the Autodiscover and Migration Issues post on the Migrationwiz.com Blog. It discusses a few options for working around Autodiscover issues when migrating between Exchange Orgs, typically to and from Hosted providers.

 

For some time now I have been using another method, which works very well and is great for longer term co-existence.

The Procedure

1. Setup DNS (private and public) for a sub domain on target Exchange Org and mailboxes. E.G. mail2.noak.es; autodiscover.mail2.noak.es; and daniel@mail2.noak.es.

2. Migrate the data.

3. Convert daniel@noak.es to a Mail User (strip the mailbox, retain proxyaddress etc) in the source Exchange Org.

4. Add the targetaddress (“External E-mail Address”) and proxyaddress Daniel@mail2.noak.es to Daniel@noak.es in the source Exchange Org.

This works because Autodiscover will fail on SCP records, but continue with other steps until it uses the targetaddress and will successfully connect to autodiscover.mail2.noak.es.

 

Below: Outlook 2010 using Autodiscover to resolve on an premise AD user to Hosted Exchange mailbox.

 

 

Below: Outlook 2010 configuration complete resolve to Hosted Exchange.

 

It is often easier to script this and working with the right suppliers this can be done. Both Cobweb and Migrationwiz.com have API’s available which we can use to automate most of the work. When combined with taking multiple passes (initial + delta) results in minimal disruption to end users.

 

With Exchange 2010 SP1 Hosting editions beginning to appear all of this will be taken care of natively with the addition of remote PowerShell using New-RemoteMoveRequest and user federation.

Easy Migration from Google Apps to Hosted Exchange

We use Migrationwiz.com almost exclusively for on-boarding (and when the need arises off-boarding) mailboxes to the Cobweb Hosted Exchange service. I have previously blogged about this, but it makes everything a lot simpler and overcomes a number of hurdles traditional on premise or PST migrations will encounter. Our customers have noticed and often comment on how smooth the whole process is.

A sticking point has been migrating from non-Exchange servers such as Google Apps where user credentials must be supplied for each mailbox. They have a fantastic password gathering service, which although secure has raised questions about sending users to a “new” web site requesting passwords. Well, this is no more thanks to a new addition on Migrationwiz.com enabling use of the Google Apps OAUTH domain key and secret to access mailbox data.

For more information on visit the Migrationwiz.com wiki, How do I migrate from Google using administrative credentials?

If you want someone to manage the migration for you and are looking for a Hosted Exchange provider head over to http://www.cobweb.com. If you fancy migrating yourself we all Cobweb Hosted Exchange settings are already loaded in to provider list on Migrationwiz.com.

Feel free to drop me a message if you need any other advice.

Next Exchange 2010 Webinar Tuesday 26th October

I will be presenting on both shared and dedicated solutions with Exchange 2010 on Tuesday 26th October. Join me by registering here:

http://www.cobweb.com/online-learning/webinar-what-is-exchange-2010.aspx

I will have a Q&A session and invite all to ask questions.

See you there,

Oliver Moazzezi

MVP - Exchange Server

See me and Cobweb at the IP EXPO 20th-21st October 2010

Hi,

I will be representing Cobweb at the IP EXPO next week. Come and find our stand and talk to me about the Cloud, Exchange 2010 and what Exchange solutions we can provide to succesfully outsource your infrastructure.

See you there,

http://www.cobweb.com/tour.aspx

http://www.ipexpo.co.uk

Oliver Moazzezi

MVP - Exchange Server

Hosted Exchange 2010 Migration Guidance

In August I blogged about the Hosting Deployment Guide for Exchange Server 2010 SP1 Beta, which was really just an incomplete CHM file.

The Microsoft Hosting Partner Technical Advisor Blog has a new post, Hosted Exchange 2010 Migration Guide. Download the ZIP file to get conceptual architecture, migration overview, migration guidance, HMC specific migration guidance and sample scripts to support your move to an Exchange 2010 SP1 Hosting forest.

You have a few standard requirements and limitations, but you will have to upgrade your control panel or services behind it. You may choose in house development, or join the increasing numbers of hosting providers outsourcing control panels to Ensim or Parallels.

Webinar: An Overview of Microsoft Hosted Exchange 2010

Hope you all enjoyed the latest Cobweb Webinar on Hosted Exchange 2010.

Join me for the next one in October. To see availability and dates, and of course to register please follow http://www.cobweb.com/events.aspx

I take a Q&A session at the end of every one, so feel free to prepare any questions before and during should I not answer them in the presentation.

Oliver Moazzezi

MVP - Exchange Server

How to Protect Exchange with DPM 2010 White Paper

Microsoft have released a white paper on How to Protect Exchange with DPM 2010.

Gives some great information on why and how to protect Exchange data with DPM 2010


You can download the white paper from here:
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=be885d26-25e5-41ff-afc8-506414aed960

Wayne Hollomby