Microsoft® Exchange Online Overview Piotr Pawlik MVP Exchange Server | Redakcja WSS.pl
Business benefits of moving to the cloud Cut operational and technology costs Get up and running quickly and easily Give people the tools to beproductive
Business benefits of moving to the cloud http://www.youtube.com/watch?v=EppCXYkDjWI
Announcing Microsoft Office 365 BRINGING TOGETHER CLOUD VERSIONS OF OUR MOST-TRUSTEDCOMMUNICATIONS AND COLLABORATION PRODUCTS WITH THE LATEST VERSIONOF OUR DESKTOP SUITE FOR BUSINESSES OF ALL SIZES.
Exchange Online Subscriptions * 25 GB of storage apportioned across the user’s primary mailbox and personal archive. ** 25 GB of storage in the user’s primary mailbox, plus unlimited storage in the user’s personal archive. *** Direct access to Kiosk user mailboxes via Exchange Web Services is not permitted. However, line-of-business applications can use Exchange Web Services impersonation to access Kiosk user mailboxes.
Business Challenges How can I keep pace with the ever-growing quantity of email in my inbox? How do I give my employees access to their email and calendars from everywhere? How do we maintain the security and compliance of our messaging environment?
Business-class email, calendar, and contacts for your organization ANYWHERE ACCESS PROTECTION & COMPLIANCE VISIBILITY & CONTROL
The robust and familiar capabilities of Exchange, delivered from the cloud ANYWHERE ACCESS PROTECTION & COMPLIANCE VISIBILITY & CONTROL
Exchange Online : BPOS vs. Office 365 Client Access E-mail,Calendaring Contacts,Directory UM, Fax Security Administration Compliance/Archiving • Forefront Online Protection for Exchange (AS/AV) • Forefront for Exchange (AV) • Route inbound mail on-premises for filtering • Safe senders • Blocked senders • Forced TLS • S/MIME • Outlook 2003*, 2007, 2010 • Outlook Anywhere • Autodiscover • Outlook Web Access • Custom OWA URL • Entourage 2004*, 2008*, WS edition • POP • Windows Mobile • iPhone • Other ActiveSync devices • BlackBerry Enterprise Server (add-on) • Remote device wipe • Personal contacts • Shared contacts • Personal distribution groups • Shared distribution groups • Global address list • Offline address book • Delegates (“send on behalf of”) • Shared mailboxes (“send as”) • Server-side forwarding • Out of Office • WebReady document viewing • Conference rooms • Resource booking attendant • Conference room delegation • Tasks [not available] • Web-based management • Active Directory sync • Bulk user activation • Deleted item recovery • Deleted mailbox recovery • Journal e-mail to external archive • Journal e-mail to EHA • Forefront Online Protection for Exchange (AS/AV) • Forefront for Exchange (AV) • Route inbound mail on-premise for filtering • Safe senders • Blocked senders • Forced TLS • S/MIME • Delegates (“send on behalf of”) • Shared mailboxes (“send as”) • Server-side forwarding • Out of Office • WebReady document viewing • Conference rooms • Resource booking attendant • Conference room delegation • Tasks • Personal contacts • Shared contacts • Personal distribution groups • Shared distribution groups • Global address list • Offline address book [not available] • Outlook 2003*, 2007, 2010 • Outlook Anywhere • Autodiscover • Outlook Web Access • Custom OWA URL • Entourage 2004*, 2008*, WS edition • POP • Windows Mobile • iPhone • Other ActiveSync devices • BlackBerry Enterprise Server (add-on) • Remote device wipe • Hosted voicemail (integration with PBX) • Outlook Voice Access • “Play on phone” button • Missed call notifications • Caller ID • Company auto-attendant • Self-service PIN reset • Message waiting indicator • Voicemail preview • Call answering rules • Protected voicemail • Exchange Personal Archive • E-Discovery (Multi-Mailbox Search) • Message Retention (Archive and Delete Policies) • Message Retention (Legal Hold Policy) • Compliance Auditing • Transport rules • Custom disclaimers • Remote PowerShell • Role Based Access Controls (RBAC) • Exchange Management Console (x-premise management) • Enhanced migration tools • No OST resync after migration • Offboarding tools • Support for orgs >30,000 users • Dynamic distribution groups • Restricted distribution groups • Moderated distribution groups • Share personal contacts • Contact info update (user self-service) • Sign in using AD credentials • Route outbound mail on-premise for filtering • Multi-factor auth (smartcard, soft cert) • Integration with on-premise RMS (for search, pre-licensing) • RMS transport rules • Journal decryption of RMS messages • Outlook Protection Rules • Conversation view • Ignore/move conversation • MailTips • Mail aggregation • Shared nickname cache across OWA and mobile • Message tracking (user self-service) • Free-busy interop with on-premise • Free/busy sharing with other orgs • Share full calendar detail with other orgs • Publish calendar for anonymous access • IMAP • Customize ActiveSync security policies • Full OWA support in Firefox/Safari • IM and presence in OWA • OWA side-by-side calendar view • Mobile free/busy lookup • Mobile reply status • Mobile SMS sync • Over-the-air update for Outlook mobile • Exchange 2007-style Managed Folders • Multi-mailbox search export to PST • GUI for some features • Speech-enablement of directory and auto-attendant • Hierarchical address book • GAL segmentation • PST import and export • Provision users in multiple datacenters Applications/Developer • S/MIME in OWA • Exchange Web Services (EWS) • EWS Managed API for .NET • SMTP relay • OWA login: public/ private radio buttons • GUI for managing some features • MAPI/CDO access • Custom code/dlls • Transport agents • Custom OWA themes, colors, add-ins • Public folders
Rich client access via Outlook Premium Web e-mail experience Mobile access from a wide range of phones Voicemail in your inbox Large mailbox sizes (25GB) AnywhereAccess Email Calendar Company Directory Contacts Tasks Voicemail PCs Browsers Phones
Anywhere AccessRich and familiar Outlook experience • Gives users a full-fidelity Outlook experience • Supports Outlook 2010 features including Conversation View, MailTips, and Meeting Room Finder • Conversation View in Outlook 2010 • MailTips in Outlook 2010
Anywhere AccessPremium web experience • IE, Firefox, Safari, Chrome support • Integrated IM and presence • Enhanced search, filters, favorites • Side-by-side calendar view • IM and presence integration with Lync Online or Lync Server
Anywhere AccessMobile messaging • Seamless mobile access through Exchange ActiveSync • Support for popular mobile devices • Self-service remote device wipe Windows® Phone Apple Palm/HP Nokia
Anywhere AccessRobust collaboration features • Large mailbox sizes (25 GB) and message limits (25 MB) • Global address list and shared contacts • Restricted, moderated, and dynamic distribution groups • Shared mailboxes (email@example.com) • Moderation • Global Address List • Distribution groups
Anywhere AccessEnterprise-class calendaring • Calendar sharing and publishing • Federated free/busy sharing (org to org) • Conference rooms • Calendar delegation • Scheduling Assistant • Delegate access
Anywhere AccessHosted voicemail • Integrates with your on-premises phone system • Removes the need to manage voicemail infrastructure • Gives users a single inbox for email and voicemail • Provides the latest features of Exchange Unified Messaging • Inline player • Voicemail preview • Caller ID
Visibility and Control • Simple, web-based administration • Advanced management and automation via PowerShell • Role-based access control • Built-in auditing reports Exchange Control Panel Auditing reports Remote PowerShell
Visibility and ControlExchange Control Panel • Powerful Web-based tool for managing your online environment • Capabilities such as multi-mailbox search and group management can be delegated to non-IT users
Visibility and ControlRemote PowerShell • Allows scripting and automation of routine tasks • Lets you update settings without calling support • Gives you to access to raw data for reports • New-DynamicDistributionGroup • -Name "Florida Sales and Marketing" • -IncludedRecipientsMailboxUsers • -ConditionalDepartmentSales, Marketing • -ConditionalStateOrProvinceFlorida
Visibility and ControlRole Based Access Control • Delegate administrative tasks within IT and beyond • Granular control over scope and permissions • Andy Ryan • Systems Administrator • Joanna Rybka • Tier 1 Support (Europe) • Donna Scott • Compliance Officer • Organization Management • Help Desk • Discovery Management • Create users • Edit retention policies • Create transport rules • Configure UM • Set legal hold • Edit mobile security policies • Manage dynamic distribution lists • Track messages • View-only recipients • Mobile device wipe • Manage groups • Multi-mailbox search • Set legal hold All employees All employees in Europe All employees in the U.S.
Visibility and ControlAuditing reports • Track delegate access and see which users have logged in to shared mailboxes • Find out who changed configuration settings and administrative permissions • Extract data for long-term storage or to build custom reports • Export log data for long-term retention or custom reports • Track mailbox access: delegates, shared mailboxes, etc. • Track configuration changes: RBAC, settings, etc.
Protection and CompliancePremium anti-spam and antivirus protection • High-accuracy spam filtering • Multiple virus-scanning engines • Included with Exchange Online subscription • Admin center provides advanced policy rules and reporting • External E-mail
Protection and ComplianceNative Exchange archiving • Allows easy migration to a managed archive solution • User experience for managing mailbox does not change • Provides a way to centralize data currently stored in PST files • Archive can be searched with familiar tools • Archive appears alongside a user’s primary mailbox • Content can be dragged from PSTs to the archive
Protection and Compliance • Integrated archiving with a familiar user experience • Multi-mailbox search for efficient e-discovery • Policies to automatically preserve or expire email • Premium anti-spam and antivirus protection • Multi-mailbox search • Built-in archive
Protection and ComplianceRetention policies and legal hold • Custom policies automatically delete or archive content • Integrates with personal archive • Legal hold policy captures user edits and deletions • Policies apply to all e-mails within a folder by default • User can select retention policy for a specific e-mail • User can view expiration date
Protection and ComplianceMulti-mailbox search • Web-based search capabilities can be delegated to specialists • Empowers legal and compliance staff to conduct e-discovery • Search works across on-premises and online mailboxes • Preview of search results • Rich search criteria and targeting options • Results stored in specialized mailbox
Protection and ComplianceTransport rules • Structured like Inbox rules • Apply to all messages sent inside and outside the organization • Configured with simple Web-based GUI If the message... Is from a member of the group ‘Executives’And is sent to recipients that are 'Outside the organization' And contains the keyword‘Merger’ • Conditions • Do the following... • Redirect message to: firstname.lastname@example.org • Actions • Except if the message... • Is sent to ‘email@example.com • Exceptions
Protection and ComplianceIntegration with IRM services • Exchange Online • AD RMS Server • (On-premises) Key Import • Exchange Online can be integrated with on-premises AD RMS • This activates advanced Exchange 2010 IRM features, including: • IRM in OWA, IRM search, and Protected Voicemail • Transport Protection Rules and Outlook Protection Rules
Route outbound email through on-premises email server or other hosted service Allows use of third-party appliances for encryption and data leakage prevention (DLP) Protection and ComplianceFlexible mail routing • Internet Outbound email • Messaging Server or Appliance
Migrating to Exchange Online • Move mailboxes to Exchange Online with cloud-based tools • Users stay connected to their mailboxes while data is migrating • Switch to Exchange Online over a weekend, or move users in stages
Deployment FlexibilityWeb-based Exchange and IMAP migration tools • Free tools for rapid migration • No software to install • Migrate email from all platforms that support IMAP • Migrate email, calendar, contacts and tasks from Exchange 2003, 2007, or 2010
Deployment FlexibilityRich hybrid capabilities Connect your Exchange Server to the cloud for smooth migration or long-term coexistence • Share free/busy data between cloud and on-premises users • Migrate users to the cloud with native Exchange tools • Give users a seamless transition, with no OST re-sync • Easily move mailboxes back on-premises Exchange 2010 SP1 “coexistence” server Exchange Server 2003 or 2007
Deployment FlexibilityExchange Web Services • Flexible • Works with Exchange Online • Works with Exchange Server • Works in hybrid environments • Easy to Use • .NET-based EWS Managed API 1.0 • Full Visual Studio support • Rich Functionality • Create custom portals and applications • Enhance line of business apps with calendar data and e-mail workflow
Which Exchange Server Features Are Not Available in Exchange Online? • Client Access • Outlook 2003 support • OWA login: public/private radio buttons • Administration • Automated PST import and export • Provision users in multiple datacenters • Multiple on-premises AD forests • Resource forest topologies • Directory • Hierarchical address book • Global Address List segmentation • Compliance/Archiving • Exchange 2007-style Managed Folders • GUI for creating Retention Policies • Third-party add-ins for transport rules • Voice mail • Speech-enablement of directory and auto-attendant • Security • S/MIME in OWA • S/MIME certificate sync • Applications • MAPI/CDO access • Server-side code, .dlls, transport agents • Custom OWA themes, logos, add-ins • Public folders
Anywhere AccessHosted voicemail architecture • Session Border Controller (SBC) at customer site connects PBX to Exchange Online • Calls are securely routed from local PBX to hosted UM servers • Integration with Lync Server 2010 also available Customer owns and maintains PBX and SBC/gateway on-premises Internet Exchange Online hosts Exchange UM services PSTN PBX and Office Phones
Online Exchange UM Architecture Acme Packet Net-Net 4500 in HA config: at least 1 per datacenter SIP gateway 22.214.171.124 SBC SBC PBX SIP/TLS/SRTP SIP gateway SIP/TLS/SRTP Exchange 2010 UM Servers SIP/TLS/SRTP 126.96.36.199 Contoso Corporation (Office 365 Customer) SIP/TLS/SRTP SIP/TLS/SRTP Active Directory SIP/TLS/SRTP SIP gateway Access Edge Server Access Edge Server Edge server pool is operated by Lync Online SIP/TLS/SRTP A/V Edge Server A/V Edge Server Mediation Server Lync Server 2010 Exchange Online Fabrikam Corporation (Office 365 Customer)
Why Exchange Online? Why? Why? Why? http://www.youtube.com/watch?v=eFCSp23xl40
$LiveCred = Get-Credential$Session = New-PSSession -ConfigurationNameMicrosoft.Exchange -ConnectionUri https://ps.outlook.com/powershell/ -Credential $LiveCred -Authentication Basic –AllowRedirectionImport-PSSession $SessionRemove-PSSession $Session Remote PowerShell
ECP - Office 365 - Scenariusze Przywracanie usuniętej skrzynki