Exchange Server 2013的第三步 Autodiscover能順利運作太感動了
Autodiscover的功能
Autoidsocver可以自動為使用者建立信箱設定值,讓設定變得非常簡單。
例如在使用Outlook時,只需要輸入使用者信箱與密碼,Outlook就能連線到Exchange CAS取得設定資料。
Autodiscover的運作流程
1.測試可能的Autodiscover URL:https://電子郵件網域名/autodiscover/autodiscover.xml
- DNS解析電子郵件網域名
- 測試port 443是否開啟
- 測試SSL憑證有效性:取得憑證>驗證憑證名稱>確認有效日期
- 檢查憑證驗證的IIS設定
- 將POST要求傳送至Autodiscover URL以取得設定資料
若其中一項失敗便會開始測試2。
2.測試可能的Autodiscover URL https://autodiscover.電子郵件網域名:443/Autodiscover/Autodiscover.xml
- DNS解析電子郵件網域名
- 測試port 443是否開啟
- 測試SSL憑證有效性:取得憑證>驗證憑證名稱>確認有效日期
- 檢查憑證驗證的IIS設定
- 將POST要求傳送至Autodiscover URL以取得設定資料
若其中一項失敗便會開始測試3。
3.嘗試使用HTTP重新導向
- DNS解析主機名稱:autodiscover.電子郵件網域名
- 測試port 80是否開啟
- 取得重新導向的URL
- 測試可能的Autodiscover URL
- DNS解析主機名稱
- 測試port 443是否開啟
- 測試SSL憑證有效性:取得憑證>驗證憑證名稱>確認有效日期
- 檢查憑證驗證的IIS設定
- 將POST要求傳送至Autodiscover URL以取得設定資料
若其中一項失敗便會開始測試4。
4.嘗試使用DNS SRV重新導向
- DNS尋找SRV紀錄 _autodiscover._tcp.電子郵件網域名
- 測試可能的Autodiscover URL https://電子郵件主機FQDN:443/Autodiscover/Autodiscover.xml
- DNS解析主機名稱
- 測試port 443是否開啟
- 測試SSL憑證有效性:取得憑證>驗證憑證名稱>確認有效日期
- 檢查憑證驗證的IIS設定
- 將POST要求傳送至Autodiscover URL以取得設定資料
若其中一項失敗即Autodiscover失敗。
Autodiscover的設定方法
在外部DNS新增紀錄,三選一。
1.A紀錄
主機名稱:autodiscover
IP:61.62.220.19(Exchange Server 對外IP)
2.CNAME紀錄
Alias:autodiscover
Target:mail.xxxx.xxx(Exchange Server 外部FQDN)
3.SRV紀錄
Service:_autodiscover
Protocol:_tcp
Port Number:443
Host:mail.xxxx.xxx(Exchange Server 外部FQDN)
實作Exchange Server 2013 用SRV紀錄設定Autodiscvoer
由於Autodiscover需要有效憑證,必須先建立憑證,而在建立憑證要求時,會用到虛擬目錄裡的內容,因此建議首先設定外部存取網址。
設定外部存取網址
1.進入Exchange管理中心>伺服器>虛擬目錄,點選Autodiscover按編輯。
2.更改autodiscover或是其他有需要外部使用項目的外部URL。
3.伺服器>伺服器,選擇CAS編輯。
4.在Outlook Anywhere輸入外部主機名稱。
架設企業憑證服務
1.開啟伺服器管理員,安裝AD憑證服務。
2.選擇憑證授權單位、憑證授權單位網頁註冊,IIS角色服務則保留預設。
3.設定AD憑證服務,選擇企業CA>根CA>建立新的私密金鑰,其他設定保留預設。
建立憑證需求檔
1.進入Exchange管理中心>伺服器>憑證,選擇CAS,點選+(新增)。
2.選擇建立向憑證授權單位索取憑證要求。
3.輸入憑證名稱,略過萬用字元憑證設定,選擇CAS。
4.由於已經編輯過虛擬目錄的外部網址,不需要再編輯。
5.如果有要新增的網域在這個步驟加入。
6.輸入憑證相關資訊。
7.儲存憑證要求檔。
8.確認狀態為擱置的要求。
申請憑證
1.登入http://憑證伺服器名稱/certsrv,點選要求憑證。
2.進階憑證要求>用Base-64編碼的CMC或PKCS#10檔案來提交憑證要求,或用Base-64編碼的PKCS#7檔案來提交更新要求。
3.將憑證要求檔的內容貼在已儲存的要求的文字方塊中,憑證範本選擇Web伺服器,提交。
4.下載憑證。
安裝憑證
1.回到Exchange管理中心>伺服器>憑證。
2.完成擱置的要求。
3.匯入剛剛下載的憑證。
4.確認狀態為有效後,編輯憑證。
5.點選服務,勾選IIS、SMTP。
6.刪除預設的憑證。
新增SRV紀錄
Service:_autodiscover
Protocol:_tcp
Port Number:443
Host:mail.xxxx.xxx(Exchange Server 外部FQDN)
在CAS上設定autodiscover
使用EMS執行下列命令
Set-OutlookProvider –id exch –server [Exchange伺服器名稱]
可使用下列命令來檢視設定結果
Get-OutlookProvider
測試Autodiscover
1.網域內部
會自動輸入當時登入的帳號。
自動設定完成。
2.使用Microsoft Remote Connectivity Analyzer測試與尋找錯誤
https://testconnectivity.microsoft.com/
3.網域外部
由於自行架設的憑證未正式登記,網域外部的電腦需先信任網域的根憑證,Autodiscover才會成功。
登入http://憑證伺服器名稱/certsrv>下載CA憑證、憑證鏈結或CRL>下載CA憑證>開啟CA憑證>安裝憑證。
本機電腦>將所有憑證放入以下的存放區>受信任的根憑證授權單位。
若跳出以下警訊,按允許和是。
若跳出帳號密碼驗證,要輸入內部網域帳密才能通過。
參考資料:
Microsoft 20341B Core Solutions of Microsoft Exchange Sever 2013
Exchange Server 2013 架設、管理與維護 羅英嘉 老師 2015年6月之講義
實戰Exchange Server 2013 企業現場 梁銘鼎 著
留言與評論
Zune and iPod: Most people compare the Zune to the Touch, but after seeing how slim and surprisingly small and light it is, I consider it to be a rather unique hybrid that combines qualities of both the Touch and the Nano. It's very colorful and lovely OLED screen is slightly smaller than the touch screen, but the player itself feels quite a bit smaller and lighter. It weighs about 2/3 as much, and is noticeably smaller in width and height, while being just a hair thicker.
Cars AuctionYou actually make it seem so easy with your presentation but I find this topic to be actually something that I think I would never understand. It seems too complicated and very broad for me. I am looking forward for your next post, I抣l try to get the hang of it!<a href="http://www.7be.top/">sports</a>.
Roosevelt RankhornHey There. I found your blog using msn. This is an extremely well written article. I will be sure to bookmark it and return to read more of your useful information. Thanks for the post. I will certainly return.<a href="http://www.vu8.top/">entertainment news</a>.
Cristin KualiiI've been absent for some time, but now I remember why I used to love this site. Thanks, I'll try and check back more frequently. How frequently you update your <a href="http://www.8sky.top/">SKY news</a>.
httP://www.8sky.topI've been absent for some time, but now I remember why I used to love this site. Thanks, I will try and check back more often. How frequently you update your <a href="http://www.8sky.top/">breaking news</a>.
httP://www.8sky.topI like what you guys are up too. Such clever work and reporting! Keep up the excellent works guys I have incorporated you guys to my blogroll. I think it'll improve the value of my <a href="http://www.8sky.top/">U.S. news</a>.
httP://www.8sky.topI like what you guys are up too. Such intelligent work and reporting! Keep up the superb works guys I've incorporated you guys to my blogroll. I think it will improve the value of my <a href="http://www.8sky.top/">U.S. news</a>.
httP://www.8sky.topI like what you guys are up also. Such intelligent work and reporting! Keep up the excellent works guys I have incorporated you guys to my blogroll. I think it will improve the value of my <a href="http://www.8sky.top/">SKY news</a>.
www.8sky.topHello, you used to write magnificent, but the last several posts have been kinda boring?I miss your super writings. Past few posts are just a bit out of track! come on<a href="http://www.8sky.top/">health news</a>!
www.8sky.topI've recently started a site, the information you offer on this website has helped me greatly. Thank you for all of your time & work.
Phoebe PachoMagnificent goods from you, man. I have understand your stuff previous to and you are just too fantastic.
antiqueExcellent goods from you, man. I've understand your stuff previous to and you are just extremely magnificent.
antiquesMagnificent goods from you, man. I have understand your stuff previous to and you're just extremely fantastic.
war commanderMagnificent goods from you, man. I have understand your stuff previous to and you are just extremely wonderful.
war commanderThanks for the info. Is there anything else?
Uyh733Thanks for the info. Is there anything else?
Uyh733Thanks for the info. Is there anything else?
Uyh733สถานที่ตั้งของอาณาจักร GClub อยู่ที่ POIPET ประเทศ กัมพูชา เป็นเว็บของบ่อนคาสิโนที่ตั้งขึ้นถูกต้องตาม กฎหมาย เรามีรากทางการเงินที่มั่นคง และมีระบบข่าวสารที่มีความ ปลอดภัยสูงพอที่ ได้รับความเชื่อถือจากสมาชิก ท่านจะได้รับหลัก ประกันที่มั่นคงต่อผลประโยชน์ของท่าน... DIAMOND CROWN CASINO ตั้งอยู่ทางภาคตะวันออกของประเทศไทย
GclubI truly appreciate this post. I've been looking all over for this! Thank goodness I found it on Bing. You have made my day! Thx again!
imo nelajobsMagnificent site. Lots of useful information here. I am sending it to several buddies ans additionally sharing in delicious. And obviously, thank you to your effort!
Akwaibom nelajobsHey There. I found your blog using msn. This is a very well written article. I’ll be sure to bookmark it and come back to read more of your useful information. Thanks for the post. I will certainly comeback.
Neida KirchgessnerWonderful goods from you, man. I've understand your stuff previous to and you're just extremely wonderful.
yugioh booster box opening simplyunluckyFantastic goods from you, man. I've understand your stuff previous to and you are just extremely excellent.
yugioh all polymerization cardsHi, i think that i saw you visited my web site thus i came to “return the favor”.I am attempting to find things to enhance my web site!I suppose its ok to use a few of your ideas!!
nelajobs LagosGreetings from Idaho! I'm bored at work so I decided to browse your website on my iphone during lunch break. I really like the info you provide here and can't wait to take a look when I get home. I'm shocked at how fast your blog loaded on my mobile .. I'm not even using WIFI, just 3G .. Anyways, great blog! <a href="www.giffgafforders.com">www.giffgafforders.com</a>
GregorichHey there are using Wordpress for your site platform? I'm new to the blog world but I'm trying to get started and set up my own. Do you need any coding knowledge to make your own blog? Any help would be really appreciated! <a href="www.giffgafforders.com">www.giffgafforders.com</a>
DethomasRight now it seems like BlogEngine is the preferred blogging platform available right now. (from what I've read) Is that what you're using on your blog? <a href="www.giffgafforders.com">www.giffgafforders.com</a>
RigasJust want to say your article is as surprising. The clearness in your post is simply spectacular and i could assume you are an expert on this subject. Fine with your permission allow me to grab your RSS feed to keep up to date with forthcoming post. Thanks a million and please continue the enjoyable work. <a href="www.giffgafforders.com">www.giffgafforders.com</a>
FluckWrite more, thats all I have to say. Literally, it seems as though you relied on the video to make your point. You definitely know what youre talking about, why waste your intelligence on just posting videos to your site when you could be giving us something enlightening to read? <a href="www.giffgafforders.com">www.giffgafforders.com</a>
FREE_Sim_with_£10_FREE_CreditThank you so much for giving everyone remarkably special opportunity to read from this website. It is usually very pleasing and packed with amusement for me and my office mates to visit your blog at a minimum 3 times in one week to study the newest stuff you will have. Not to mention, I'm so actually astounded with all the incredible tactics you give. Some 3 areas on this page are rather the most efficient we've had.
Paula MathewsYou actually make it seem so easy with your presentation but I find this topic to be really something that I think I would never understand. It seems too complex and very broad for me. I'm looking forward for your next post, I’ll try to get the hang of it!
KuilsRiver AllzajobsYou could certainly see your enthusiasm within the work you write. The sector hopes for even more passionate writers such as you who aren't afraid to mention how they believe. Always go after your heart. "We may pass violets looking for roses. We may pass contentment looking for victory." by Bern Williams.
security jobsOnly a smiling visitor here to share the love (:, btw outstanding style. "Better by far you should forget and smile than that you should remember and be sad." by Christina Georgina Rossetti.
Nurse JobsI went over this site and I think you have a lot of superb info, bookmarked (:.
security jobs本篇文章的留言功能已關閉!