2/6/12

Remove default mailbox databases

Moving System Arbitration Mailboxes and removing the default dbs
To move the system arbitration mailboxes from the default databases to one of the DAG databases first find them and pipe to a new move request to DB1

Identify:
[PS] C:\Windows\system32>get-mailbox -Arbitration
Creating a new session for implicit remoting of "Get-Mailbox" command...

Name Alias ServerName ProhibitSendQuo
ta
---- ----- ---------- ---------------
SystemMailbox{1f05a927... SystemMailbox{1f0... ampf48-iqa1060 unlimited
SystemMailbox{e0dc1c29... SystemMailbox{e0d... ampf48-iqa1060 unlimited
FederatedEmail.4c1f4d8... FederatedEmail.4c... ampf48-iqa1060 1 MB (1,048,...

Migrate any normal mailboxes:
Get-MailboxDatabase | where{$_.name -like "*Mailbox Database*"} | get-mailbox | New-
MoveRequest -TargetDatabase db1


Migrate any arbitration mailboxes:
Get-MailboxDatabase | where{$_.name -like "*Mailbox Database*"} | get-mailbox -Arbitration | New-MoveRequest -TargetDatabase db1

Remove Default DB’s:
Get-MailboxDatabase | where{$_.name -like "*Mailbox Database*"} | get-mailbox

1/26/12

Quick Tip: Mailboxes created on...

get-mailbox | where {$_.WhenCreated -like "*1/26*"}

Addtionally, -and -or -not can be utilized as well as "*/1?/200?*" or "*1[0-3]/2012*".

1/4/12

Symantec DLP 11.1 and Exchange 2010 SP1

The send connector in Exchange 2010 SP1 will be configured with each DLP endpoint as a smart host. The authentication should be set to none. When using certificates to verify identity during a TLS sesson you will still se the Exchange send connector authentication to none.

Using the SMTP log on Exchange and DLP the certificate is exchanged during the TLS SMTP sesssion.

The DLP cert must be in the Exchange Root Trusted store
The Exchang hub selfsinged scerts must be in the DLP trusted store.

Workstations VLAN and ports for Joining and Functioning on domain.

UDP 88 Kerberos is needed, but do not forget with Win 7 and 2008 R2 DC's you need TCP 88 as well.

135,389,443,139 are needed.

UDP 389 is needed for joining the domain with Server 2008 R2 DC's

1025-5000 XP clients
42152-65535 Windows 7 clients

Addtionaly 123 NTP