Exchange Server 2013 部署（二）部署&常规配置命令[二]

继续使用命令设置Exchange Server 2013 的常规配置。
1.使用命令创建证书请求文件
New-ExchangeCertificate -GenerateRequest -FriendlyName "Mail-Cert" -DomainName mail.msftlearn.com,autodiscover.msftlearn.com -PrivateKeyExportable $true -KeySize 2048 -RequestFile C:\mailcert.req

2.在IE浏览器中输入证书服务器IP地址/certsrv

3.输入有权限颁发证书的用户名及密码，确定

4.选择申请证书

5.选择高级证书申请

6.选择使用base64编码的CMC或PKCS#10文件提交

7.Copy 二进制的证书请求内容

8.粘贴到Base-64文本框中，证书模板选择Web服务器，提交

9.选择Base64 编码，下载证书

10.保存证书位置

11.使用命令导入证书并分配服务
Import-ExchangeCertificate -FileName C:\mailcert.cer | Enable-ExchangeCertificate -Services "iis,smtp,pop,imap"

12.选择全是

Exchange Server 2013 的基本配置已经完成。
以下是用到的Exchange PowerShell 脚本，请参考：
先决条件脚本

Install-WindowsFeature RSAT-ADDSImport-Module ServerManagerInstall-WindowsFeature AS-HTTP-Activation, Desktop-Experience, NET-Framework-45-Features, RPC-over-HTTP-proxy, RSAT-Clustering, RSAT-Clustering-CmdInterface, RSAT-Clustering-Mgmt, RSAT-Clustering-PowerShell, Web-Mgmt-Console, WAS-Process-Model, Web-Asp-Net45, Web-Basic-Auth, Web-Client-Auth, Web-Digest-Auth, Web-Dir-Browsing, Web-Dyn-Compression, Web-Http-Errors, Web-Http-Logging, Web-Http-Redirect, Web-Http-Tracing, Web-ISAPI-Ext, Web-ISAPI-Filter, Web-Lgcy-Mgmt-Console, Web-Metabase, Web-Mgmt-Console, Web-Mgmt-Service, Web-Net-Ext45, Web-Request-Monitor, Web-Server, Web-Stat-Compression, Web-Static-Content, Web-Windows-Auth, Web-WMI, Windows-Identity-Foundation, RSAT-ADDSRestart-ComputerD:.\setup /PrepareSchema /IAcceptExchangeServerLicenseTerms.\setup /Preparead /IAcceptExchangeServerLicenseTerms /OrganizationName:Msftlearn.\setup /Preparealldomains /IAcceptExchangeServerLicenseTermsAdd-DnsServerResourceRecordA -ZoneName msftlearn.com -Name mail -IPv4Address 192.168.10.200Add-DnsServerResourceRecordA -ZoneName msftlearn.com -Name autodiscover -IPv4Address 192.168.10.200

基本配置脚本

#加载Exchange 模块Add-PSSnapin microsoft.exchange.*#新建接受域New-AcceptedDomain -Name msftlearn.com -DomainName msftlearn.com -DomainType Authoritative#新建电子邮件地址策略New-EmailAddressPolicy -Name EmailAddress -IncludedRecipients MailboxUsers -EnabledPrimarySMTPAddressTemplate %m@msftlearn.com#应用电子邮件地址策略Update-EmailAddressPolicy -Identity EmailAddress#设置组织传输大小Set-TransportConfig -MaxReceiveSize 30MB -MaxSendSize 30MB -MaxRecipientEnvelopeLimit 200#设置接收连接器的大小限制Get-ReceiveConnector | Set-ReceiveConnector -MaxMessageSize 30MB#去掉匿名Get-ReceiveConnector "Default Frontend SRV12-EX1301" | Set-ReceiveConnector -PermissionGroups ExchangeLegacyServers,ExchangeServers#新建发送连接器New-SendConnector -Name "To Internet" -Internet -MaxMessageSize 30MB -AddressSpaces * -SourceTransportServers "Srv12-ex1301.msftlearn.local"#设置Exchange 服务器许可Set-ExchangeServer -Identity Srv12-ex1301 -ProductKey XXXX-XXXX-XXXX-XXXX#设置Outlook Anywhere Get-OutlookAnywhere | Set-OutlookAnywhere -SSLOffloading $true -InternalHostname "mail.msftlearn.com" -ExternalClientsRequireSsl $true -ExternalHostname "mail.msftlearn.com" -InternalClientsRequireSsl $true -InternalClientAuthenticationMethod Basic -ExternalClientAuthenticationMethod Basic#设置POP服务Set-PopSettings -Server Srv12-ex1301 -LoginType PlainTextLogin#设置pop服务为自动启动并运行pop服务Set-Service MSExchangePop3 -StartupType AutomaticSet-Service MSExchangePOP3BE -StartupType AutomaticStart-Service MSExchangePop3* #设置IMAP服务Set-ImapSettings -Server Srv12-ex1301 -LoginType PlainTextLogin#设置IMAP服务为自动启动并运行pop服务Set-Service MSExchangeImap4 -StartupType Automaticset-service MSExchangeIMAP4BE -StartupType AutomaticStart-Service MSExchangeImap4*#新建数据库并设置脱机地址簿New-MailboxDatabase -Name DB01 -Server Srv12-ex1301 -EdbFilePath C:\DB\DB01.edb -LogFolderPath C:\DB -OfflineAddressBook "Default Offline Address Book"Mount-Database -Identity DB01#设置虚拟目录Get-OwaVirtualDirectory | Set-OwaVirtualDirectory -InternalUrl https://mail.msftlearn.com/owa -ExternalUrl https://mail.msftlearn.com/owa -LogonFormat UserName -DefaultDomain msftlearn.localGet-EcpVirtualDirectory | Set-EcpVirtualDirectory -InternalUrl https://mail.msftlearn.com/ecp -ExternalUrl https://mail.msftlearn.com/ecpGet-ActiveSyncVirtualDirectory | Set-ActiveSyncVirtualDirectory -InternalUrl https://mail.msftlearn.com/Microsoft-Server-ActiveSync -ExternalUrl https://mail.msftlearn.com/Microsoft-Server-ActiveSyncGet-WebServicesVirtualDirectory | Set-WebServicesVirtualDirectory -InternalUrl https://mail.msftlearn.com/EWS/Exchange.asmx -ExternalUrl https://mail.msftlearn.com/EWS/Exchange.asmxGet-OabVirtualDirectory | Set-OabVirtualDirectory -InternalUrl https://mail.msftlearn.com/oab -ExternalUrl https://mail.msftlearn.com/oabGet-PowerShellVirtualDirectory | Set-PowerShellVirtualDirectory -InternalUrl http://mail.msftlearn.com/powershell -ExternalUrl https://mail.msftlearn.com/powershellGet-ClientAccessServer | Set-ClientAccessServer -AutoDiscoverServiceInternalUri https://mail.msftlearn.local/Autodiscover/Autodiscover.xml#申请证书New-ExchangeCertificate -GenerateRequest -FriendlyName "Mail-Cert" -DomainName mail.msftlearn.com,autodiscover.msftlearn.com -PrivateKeyExportable $true -KeySize 2048 -RequestFile C:\mailcert.reqImport-ExchangeCertificate -FileName C:\mailcert.cer | Enable-ExchangeCertificate -Services "iis,smtp,pop,imap"