M

C
T

U
S
E

O
N
L
Y
.

S
T
U
D
E
N
T

U
S
E

P
R
O
H
I
B
I
T
E
D
4-26 Planning and Deploying Client Access Servers
Lab: Deploying and Configuring a Client Access Server
Role
Scenario
You are working as a messaging administrator in A. Datum Corporation. Your organization has decided to
deploy Client Access servers so that the servers are accessible from the Internet for a variety of messaging
clients. To ensure that the deployment is as secure as possible, you must secure the Client Access server,
and also configure a certificate on the server that will support the messaging client connections. In
addition, you have to verify options on the Client Access server, and configure Mailtips for a few users.
Objectives
At the end of this lab, you will be able to:
Configure certificates on the Client Access server.
Configure Client Access server options.
Configure MailTips.
Lab Setup
Estimated time: 50 minutes

Virtual machines 20341A-LON-DC1
20341A-LON-CAS1
20341A-LON-MBX1
User Name Adatum\Administrator
Password Pa$$w0rd
For this lab, you will use the available virtual machine environment. Before you begin the lab, you must
complete the following steps:
1. On the host computer, click Start, point to Administrative Tools, and then click Hyper-V Manager.
2. In Hyper-V Manager, click 20341A-LON-DC1, and in the Actions pane, click Start.
3. In the Actions pane, click Connect. Wait until the virtual machine starts.
4. Log on using the following credentials:
a. User name: Adatum\Administrator
b. Password: Pa$$w0rd
5. Repeat steps 2 and 3 for the rest of virtual machines.
M
C
T

U
S
E

O
N
L
Y
.

S
T
U
D
E
N
T

U
S
E

P
R
O
H
I
B
I
T
E
D
Microsoft

Exchange Server 2013, Core Solutions 4-27

Exercise 1: Configuring Certificates for the Client Access Server
Scenario
As a messaging administrator in A. Datum Corporation, you have deployed the Exchange Server
environment, and you are now working on configuring the Client Access servers. The organization has
decided to use a certificate from the internal CA to secure all client connections to the server. You need to
enable this configuration, and then you must ensure that Outlook clients can still connect to the server.
The main tasks for this exercise are as follows:
1. Make a certificate request on Exchange Server.
2. Issue a certificate from internal CA.
3. Assign certificate to Exchange services.
Task 1: Make a certificate request on Exchange Server
1. On LON-CAS1, open Internet Explorer, type https://lon-cas1.adatum.com/ecp and press Enter.
2. Sign in as Adatum\administrator with the password Pa$$w0rd.
3. Click the servers node, click on Certificates and start the wizard for creating a certificate request.
4. Provide mail.adatum.com as a friendly name for a certificate.
5. Do not use wildcard certificates.
6. Provide the name mail.adatum.com for all values that are not defined.
7. Ensure that the certificate request contains the following domain names: mail.adatum.com,
lon-cas1.adatum, autodiscover.adatum.com, LON-CAS1, and Adatum.com.
8. Fill in additional data as follows:
a. Organization name: A.Datum
b. Department name: IT
c. Country/Region name: United States
d. City/Locality: Seattle
e. State/Province: WA
9. Save certificate request to \\lon-cas1\C$\windows\temp\certreq.req.
Task 2: Issue a certificate from internal CA
1. On LON-CAS1, open File Explorer and navigate to C:\windows\temp.
2. Open the certificate request file with Notepad, and copy all content to the clipboard.
3. Connect to http://lon-dc1.adatum.com/certsrv as Adatum\Administrator with the password of
Pa$$w0rd.
4. Choose to perform an advanced certificate request.
5. Paste the certificate request content (from step 2) in to the appropriate field, and select Web Server
template.
6. Save the certificate.
7. Open File Explorer, and create a new folder called cert on the C:\ drive. Share the folder, and give
Read permission to Everyone.
8. Copy the certificate file to the cert folder.
M
C
T

U
S
E

O
N
L
Y
.

S
T
U
D
E
N
T

U
S
E

P
R
O
H
I
B
I
T
E
D
4-28 Planning and Deploying Client Access Servers
Task 3: Assign certificate to Exchange services
1. On the LON-CAS1, open the Exchange admin center.
2. Import the mail.adatum.com Exchange certificate that you issued in Task2. Import the certificate to
LON-CAS1.Adatum.com.
3. Assign the certificate to IIS service.

Results: After completing this exercise, the students will have a certificate installed on the Exchange
Server Client Access server.
Exercise 2: Configuring Client Access Services Options
Scenario
To prepare the Client Access server, you need to perform several configuration tasks, such as configuring
the external access domain and POP3 service. The external email domain name should be
mail.adatum.com. You need to ensure that POP3 users can connect securely, and that connection limits
should be applied as well as proper message formatting You also need to verify authentication options for
virtual directories on the Client Access server.
The main tasks for this exercise are as follows:
1. Configure Client Access.
2. Verify authentication options on Client Access server.
Task 1: Configure Client Access
1. In the Exchange admin center, set the external domain name to mail.adatum.com for LON-CAS1.
2. Open LON-CAS1 settings, and set the following for POP3 users:
a. Maximum connections: 100
b. Maximum connections from a single IP address: 20
c. Maximum connections from a single user: 2.
Task 2: Verify authentication options on Client Access server
1. On LON-CAS1 in Exchange admin center, navigate to servers, and then click virtual directories.
2. Verify authentication options for the following virtual directories:
a. Autodiscover
b. ecp
c. PowerShell
d. Microsoft-Server-ActiveSync
e. OAB
3. Do not make any changes.

Results: After completing this exercise, the students will have Client Access server configured.
M
C
T

U
S
E

O
N
L
Y
.

S
T
U
D
E
N
T

U
S
E

P
R
O
H
I
B
I
T
E
D
Microsoft

Exchange Server 2013, Core Solutions 4-29

Exercise 3: Configuring Custom Mail Tips
Scenario
As a method for reducing the number of that require support, A. Datum is evaluating implementation of
MailTips. You have been given the task of configuring some test deployments that implement MailTips,
and you must verify that MailTips can be enabled in multiple languages.
The main tasks for this exercise are as follows:
1. Configuring Mail Tips.
2. Testing Mail Tips.
3. To prepare for the next module.
Task 1: Configuring Mail Tips
1. On LON-CAS1, open Exchange Administration Center, and navigate to Mailboxes.
2. Select April Reagan mailbox object.
3. Set the MailTip text for April to be Test e-mail tip for April.
4. Open Exchange Management Shell, and set an email tip for Aidan by executing the following:
Set-Mailbox Identity Aidan Mailtip this is english mail tip MailtipTranslation
(FR: Cest la lague francaise)
Task 2: Testing Mail Tips
1. Open Internet Explorer, and type https://lon-cas1.adatum.com/owa
2. Sign in as Adatum\Don with the password of Pa$$w0rd.
3. Accept defaults for time and language.
4. Open new mail window, and type April Reagan in the To text box.
5. Verify that email tip appears.
6. Open new mail window and type Aidan Delaney in the To text box.
7. Verify that email tip appears in English.
8. Sign out from Outlook Web App, and sign in as Adatum\Amr.
9. Select to Francais (France) as OWA language.
10. Open new mail window, and type Aidan Delaney in the To text box.
11. Verify that e-mail tip appears in French.