Install and Configure Exchange Server 2019:become a sysadmin | Alexander Gorbunov | Skillshare

Playback Speed


  • 0.5x
  • 1x (Normal)
  • 1.25x
  • 1.5x
  • 2x

Install and Configure Exchange Server 2019:become a sysadmin

teacher avatar Alexander Gorbunov

Watch this class and thousands more

Get unlimited access to every class
Taught by industry leaders & working professionals
Topics include illustration, design, photography, and more

Watch this class and thousands more

Get unlimited access to every class
Taught by industry leaders & working professionals
Topics include illustration, design, photography, and more

Lessons in This Class

36 Lessons (3h 34m)
    • 1. Course introduction

      1:56
    • 2. Introduction to Exchange Server 2019

      2:21
    • 3. Lab setup

      1:47
    • 4. Installing Exchange Server 2019

      7:05
    • 5. Configuring DNS records and SSL certificate

      8:06
    • 6. Mailbox management

      10:28
    • 7. Group management

      7:11
    • 8. Resource mailbox management

      7:22
    • 9. Contact management

      3:16
    • 10. Shared mailbox management

      1:55
    • 11. Admin roles

      4:13
    • 12. User roles

      4:34
    • 13. Outlook on the web policies

      4:17
    • 14. In place ediscovery and hold

      7:01
    • 15. Auditing

      5:19
    • 16. Data loss prevention

      5:19
    • 17. Retention Policies and Retention Tags

      8:02
    • 18. Journal rules

      3:15
    • 19. Add ins

      6:39
    • 20. Address lists

      7:14
    • 21. Malware filter

      5:59
    • 22. Rules

      3:56
    • 23. Delivery reports

      2:48
    • 24. Accepted domains

      2:46
    • 25. Email address policies

      5:20
    • 26. Receive connectors

      8:48
    • 27. Send connectors

      6:23
    • 28. Mobile device access

      5:29
    • 29. Mobile device mailbox policies

      3:35
    • 30. Public folders

      9:54
    • 31. Public folder mailboxes

      4:36
    • 32. Servers

      10:30
    • 33. Databases

      13:01
    • 34. Virtual directories

      15:03
    • 35. Certificates

      5:32
    • 36. Installing CU

      3:27
  • --
  • Beginner level
  • Intermediate level
  • Advanced level
  • All levels
  • Beg/Int level
  • Int/Adv level

Community Generated

The level is determined by a majority opinion of students who have reviewed this class. The teacher's recommendation is shown until at least 5 student responses are collected.

144

Students

--

Projects

About This Class

This course is geared toward getting you up to speed with Exchange Server 2019. Whether you already hold a job as a helpdesk support representative, a desktop technician or are just looking to start your career in IT this course is designed to give you essential skills required to install and configure Exchange Server 2019 for a basic single server scenario that fits a majority of small to medium-sized businesses. The course will show you step by step how to perform initial installation and set up of Exchange Server 2019 along with some daily tasks you will encounter as a system administrator managing an Exchange Server organization. The main requirement for this course is basic knowledge of Windows Server and Active Directory along with fundamental understating of networking and DNS. If you are new to Windows Server and Active Directory, I would recommend checking my previous course on Windows Server 2019. It is a crash course that includes topics like Active Directory, DNS, DHCP and some other topics related to Window Server 2019. This Exchange course is structured to reflect options in the Exchange Admin Center GUI.

1. Instructor and course Introduction. This is the first section you are currently watching to get an idea of what the course is about and its instructor.

2. Introduction to Exchange server including requirements. In this section I will explain what Exchange server is and what it is for. We will go over all the requirements for it. I will introduce you to my lab set up. Then we will perform a fresh installation of Exchange Server 2019, configure necessary DNS records and install a free SSL certificate.

3. Recipients section. Here we will learn about different types of mail enabled objects like mailboxes, groups and contacts. I will create a few of them and show you how they work.

4. Permissions section. Here will take a look at the permission model with Exchange Server 2019. We will learn about admin and user roles and Outlook Web App policies.

5. Compliance management section. Here we will learn about eDiscovery and hold. We will take a look at how data loss prevention can help your company to have better control of your data. We will discuss auditing; retention polices and tags as well as journal rules.

6. Organization section. Here we will talk about add-ins. We will also take a look at address lists and create some custom address lists.

7. Protection section. Here we will take a look at the malware filter capability Exchange Server provides.

8. Mail flow section. In this section we will take a look at transport rules, delivery reports. We will also discuss send and receive connectors and create new connectors.

9. Mobile section. Here we will learn about how mobile devices connect to your Exchange server and how you can control this access.

10. Public folders section. In this section we will learn about public folders. I will create some public folders and public folder mailboxes and demonstrate how it all works.

11. Servers section. In this section we will take a look at the server settings and discuss mailbox databases. Then we will go over each virtual directory in Exchange server and lastly talk about certificates.

12. Miscellaneous section. In this section I will show you how to install cumulative updates and patches on your Exchange server to protect it from different vulnerabilities.

Meet Your Teacher

Hello, I'm Alexander.

See full profile

Class Ratings

Expectations Met?
  • Exceeded!
    0%
  • Yes
    0%
  • Somewhat
    0%
  • Not really
    0%
Reviews Archive

In October 2018, we updated our review system to improve the way we collect feedback. Below are the reviews written before that update.

Why Join Skillshare?

Take award-winning Skillshare Original Classes

Each class has short lessons, hands-on projects

Your membership supports Skillshare teachers

Learn From Anywhere

Take classes on the go with the Skillshare app. Stream or download to watch on the plane, the subway, or wherever you learn best.

Transcripts

2. Introduction to Exchange Server 2019: Exchange Server is a mail and calendar server developed by Microsoft. It runs on Windows Server and relies on Active Directory. The first version of Exchange Server was developed over 20 years ago. Nowadays, Exchange comes in both on-premise (Exchange 2019) and software as a service (Exchange Online) versions. There are advantages to each of them, but this course will be focused on Exchange 2019 on-premise. In my opinion, it is more beneficial to learn the on-premise version where you have complete access to everything and understand how it all works rather than starting with the Cloud version where Microsoft has already done a lot of work for you behind the scene. Exchange Server allows to send messages, calendar, appointments, contacts, etc. It is a server-side application that interacts with client-side applications such as Outlook or other mail clients. It supports older e-mail protocols such as POP3 or IMAP to deliver email to clients and also uses its own proprietary protocol MAPI to work with Outlook. It uses Exchange ActiveSync protocol to connect with mobile devices. When you use Outlook, you can see contact details of the person who sent you an email or even see offline/online status of people from your own or partner organization. This diagram is a very high-level overview of the mail flow for a small organization. Inside the network, you have various clients who connect to the Exchange server to send and receive email. You can use different protocols and applications for that. You can use Outlook along with other applications like Thunderbird or Mailbird. You can also utilize mobile devices or access email through your browser using Outlook on the web. The Exchange Server goes out through the firewall to the Internet to exchange email with other email servers out there using Simple Mail Transfer Protocol or SMTP, which uses port 25. Clients outside of your network can also connect to Exchange Server, given that you have forwarded the required ports and enabled appropriate protocols. If you have not used exchanged before I hope this video was helpful in providing some basic information about Exchange Server. Thank you very much and I will see you in the next chapter where we will go over Exchange Server 2019 system requirements. 8. Group management: Greetings. In this video lesson, we will talk about groups in Exchange Server 2019. Let's log into ECP. Click on Groups in the recipients tab. There are two types of groups in Active Directory, security and distribution. Distribution groups can be used only for email distribution, whereas security groups can be used to assign permissions to resources. It is possible to mail enable a security group, but that can be security risk and is not a best practice. Let's create a new distribution group. Click on the plus sign and select Distribution Group. I will create a group for my HR department. I will put it in the appropriate OU. Let's assign this group an owner. If the role assignment policy allows, owners can modify the membership of distribution groups they own. I will add Kyle as a member of this group. Here you can specify whether anyone can join or leave the group without owner approval. Click Save. Let's go through the properties of this group. It is very similar to that of a mailbox. You can hide it from the address list using this option. Here you can modify its ownership and here its membership. Membership approval gives you the ability to restrict people from joining or leaving without owner approval. Delivery management allows you to specify who is allowed to send emails to this group. Please note that by default, only internal users are allowed to send email to this group. Message approval tab allows you to specify a moderator for this group. If you have a very sensitive list of people, you can use this option to filter out unwanted messages. In email options. Just like for a mailbox, you can change the existing address or create additional ones. Mailtip lets you display a short message in Outlook when you're composing a message to this group, it only works internally. Group delegation works almost like mailbox delegation, except you can't delegate full mailbox access to a group since it does not continue any actual data. Let's check out our group in Active Directory Users and Computers snap-in. As you can see it is here and we can see its members and groups that this group is a member of, which is blank so far. On the Managed By tab, you can see the owner that we have already configured through ECP. Click this check box. This will allow the owner to modify members of this group, which I will demonstrate in a few minutes. Let's use a different way to create a distribution group this time, let's create a group through this snap-in. I will create a group for my marketing department. Right-click New Group. Type your group name. Only groups with the universal scope can be distribution groups. So, select universal and distribution. Let's add an owner to this group. Now, let's go back to ECP and refresh. As you can see, this group has not appeared in our console. That is because we have not enabled it for distribution. And frankly, it does not even have an e-mail address. This needs to be fixed through command line. Launch Exchange Management Shell. You need to use the following command. Enabled dash distribution group, put the name of your group, dash primary SMTP address, and then the email address of your group. Press enter. Our group was successfully created. Let's refresh again, and there it is. Now, let's create a dynamic distribution group. This type of group does not have a set membership. It rather queries mail enabled objects and builds the membership according to the result. I’ll create a dynamic distribution group for my sales department. Here's where you add a rule that will determine the membership of this group. As you can see there are a few options. If you're not satisfied with these pre-sets, you can choose custom attributes, but you would need to modify customer attributes on the desired mailboxes with the appropriate values. In my case, I just want everyone in my sales OU to be a member of this group. If you refresh this page, you will see the new group appear there. If you want group owners to be able to modify membership of the groups they own, you need to do one more thing. Go to Permissions tab user roles. Click on the Default Role Assignment Policy, and scroll a little bit until you see MyDistributionGroups checkbox, you need to select that and save. Click Yes to the warning. That option allows owners to modify membership of the groups they own. Let's see how this works. So, Jennifer Goodwin realized James Welsh 00:05:52.820 --> 00:05:56.915 is missing from the distribution list that was created for her department. She's now able to fix this on her own without requesting IT. Let's log in as her in open Outlook. Go to address book. Click on the HR underscore DL. Modify members. Click Add, double-click on James and click OK. James is now a member of this distribution group. Let's go back to ECP. Click on the ellipsis and see what other actions you have there. Just like with mailboxes, you can add and remove columns in this view, you can export data to a CSV file. But here you can also configure naming policies. You can create a prefix or suffix for your group names. You can also prohibit users from using certain words in their group names. And as usual, this trash bin shaped button here lets remove groups. Thank you very much for staying with me. I will see you in the next video where we will talk about resource mailboxes. 9. Resource mailbox management: Good day. In this lecture we will talk about resource mailboxes. Resource mailboxes are designed to schedule rooms and offices or equipment like cars or projectors. There are two types of resource mailboxes, room mailboxes and equipment mailboxes. In this video, I will create a couple of resource mailboxes and demonstrate how they work. First, log into ECP and go to Resources. Click on the plus sign and select room mailbox. Give it a name. I'll put mine in the resource mailboxes OU. I will add a location and capacity. Click Save. Now let's go to its properties. Double-click on the newly created mailbox. The General tab gives you pretty much the same information as you would see in a regular user mailbox. The next tab lets you set up delegates. You can select auto accept, or choose a delegate. If you choose a delegate or multiple delegates, every request will have to be approved by them. With auto accept, your request will be approved if the resource is available at the requested date and time. Let's pick a delegate. I will make Fred Morgan a delegate of this mailbox. Next, you can specify different booking options. Let's add a reply so people know that their requests well be processed in a timely manner. Next, we have contact information. I will add a little note saying that Fred is the custodian of this mailbox, meaning that users can reach out to him in case they have questions regarding this room. I will also give Fred sent on behalf and full mailbox permissions to this mailbox so he can access its calendar and see when it's booked. Let's log in this Fred and view this mailbox. Now Fred has the ability to see when this room is available and based on that, allow or deny booking requests, Let's add another delegate. I will add John Green to the list of delegates. Now let's log in as a different user and try to schedule this room. I will log as Stan White open Outlook. Go to the calendar, click on new appointment, type something in the subject, and then the body. Pick a date and time. Now click on Scheduling Assistant, click on Add rooms and select our room. Let's add an attendee, click on Add Attendees… button and pick a user. Click Okay, click on send. In a few moments you will receive a notification that your request is pending approval. Let's check out what delegates see when they receive a request. Let's login as John Green, because John is a delegate. This request was forwarded to him from the room mailbox. You can approve, deny, or propose a new time for this request. You can accept the appointment tentatively. Let's accept this request and send the response now. Now let's see what response Stan has received. As you can see, Stan’s request has been accepted and we can see it in his calendar. Now let's see how we can create and use equipment mailboxes. Go back to ECP, click on the plus sign and select equipment mailbox. I will make a mailbox for the projector in this company. Let's double-click on it and go through the properties. You have pretty much the same properties as with a room mailbox. I will choose Brian Sinclair as the delegate for this mailbox. I will login as James and try to book the projector in his outlook. Click on new items. Meeting, choose your date and time and type the subject. Click on To…, and let's find our projector mailbox here. As you can see, our global address list has not been updated yet. Click on the drop-down menu and select all users. This option provides a live lookup of all users on our servers, including those that were created recently. Select the projector mailbox and click Send. Let's send anyway. Let's see what this request looks like when Brian, being the delegate for the projector, receives it. It is very similar to the request delegates get from room mailboxes. I will accept the request and send the response now. Let's have a look at our resource mailboxes in Active Directory Users and Computers snap-in. When you create resource mailboxes, Active Directory user accounts for them are disabled. Unlike regular user mailboxes, they do not require an additional Microsoft license. Room and equipment mailboxes are not that much different. The main difference I would say is logical, meaning that room mailboxes are location specific, whereas equipment mailboxes are not. Equipment mailboxes help to book resources for your appointments, like laptops or projectors, whereas room mailboxes help to organize your meetings, reserving physical locations. Thank you very much for watching. I look forward to seeing you in the next video where we will talk about mail contacts and shared mailboxes. 10. Contact management: Welcome back. In this lecture, we will learn about contacts in Microsoft Exchange. Let's log into ECP and go to recipients contacts. There are two types of contexts you can create here. Male contact and Male user contexts are meant for email addresses outside of your company. Let's first create a male contact. This will create a new entry in your address book, so people inside your organization can easily search for external contacts in their outlook. Let's see how this works. I will login as Janice Welsh and try to find eye contact and he's address book. Here's the new contact we just created. Let's go back to our Exchange Server and create a male user. Unlike contacts, which are just mail enabled objects in Active Directory, male users are regular Active Directory user accounts with the defined email address, but without an actual mailbox. A male user has credentials that allow the person to login and use resources inside the domain. Click on the plus sign and select Male user, fill out all the unnecessary fields. Now we can use this account to login to a workstation in our domain. Let's try it. As you can see, this worked male users can be useful to give access to contractors the command or get your site and access your resources. Not need to have a mailbox. Let's check out these two accounts in Active Directory Users and Computers snap in. There another mini properties and male contact has. You can add some descriptive information here or make it a member of a distribution group, but that's about it. If you look at the properties of an emo user, you can see that it's just a regular user account that already has an email address set. And of course, it does not have a mailbox attached to it. That is it. For this short video lesson, I will see you in the next lecture where we will talk about sure of mailboxes. 11. Shared mailbox management: Greetings. In this video, we will talk about shared mailboxes, a shared mailboxes and mailbox used by multiple users to view and send e-mail messages. They can also be utilized for shared calendar axis. In our scenario, we receive a request to configure one email address that staff can use to ask for technical help. There are two common ways to do that. We can either create a distribution group and IT staff as members to that group or configure a shared mailbox and give all IT staff access to it. Let's configure a shared mailbox for I was service desk. Go to shared in the recipient step, click on the plus sign and give your mailbox and name. I will name my help and created in the IT OU. Now we'll add all members of my IT department to have access to this mailbox. Let's check out what it looks like an Active Directory Users and Computers snapping. As you can see, the count for it is disabled. Other than that is just to regular user account. Let's check the properties of this mailbox. In the mailbox delegation tab, we can see all the users give access to this mailbox while we were creating it. This will automatically add the mailbox to all three of these users outlooks so they can view and respond to technical requests and issues. Please know that shared mailboxes do not require a Microsoft license and are a good way to handle email for services like IT support in our example. The last section in the recipient stab in ECP is migration. We don't have any other servers or databases, so we cannot perform any migrations yet. We will get back to this later after we configure an additional mailbox database. Thank you very much for watching and I will see you in the next section. 12. Admin roles: Greetings and welcome to a new section. In this section we will cover Exchange Server 2019, permissions and Outlook Web App policies. Through exchange roles, you can assign different permissions and level of access to users to carry out various exchange related tasks like managing recipients, servers, or male bugs databases. Let's have a look at admin roles and the permissions tab. These are predefined groups that were created as we were installing Exchange. Double-click on the Compliance Management Group. Yeah, the name of the scope. In this brief description, you can change the default implicit scope to certain OU. Below you have a list of rows that this group has. Rows are actually what defines different permissions that a user hasn't your Exchange organization. If we wanted, we could add more rows to those group. Click on the plus sign to see a list of available roles. As you can see, there are a lot of different roles to choose from. That menu. Rosa allow you for a very granular permission assignment. You can also create your own groups and assign roles to them. In my experience, for a lot of companies, especially smaller ones, this default set of groups works just fine. And now scenario, we have a request to limit what some members of the IT staff can do with regards to our Exchange Server. Robin Blaine is a junior sysadmin in the head of IT does not want to give you a full permissions to the exchange server. Yet he wants him to be able to help users with everyday tasks. Let's demonstrate how we can accommodate this request and what the end result will look like. We'll use the help desk group to give Robin enough permissions to help end users. Let's add him to that group. Now I'm going to log into ECP is Robin using a different browser and compare with administrator. And Robin can see in their panels side-by-side. As you can see, Brian has only four taps on the left and mostly can view stuff, but he does not have permission to create or change a lot of things. He can fill out contact information or see who has full mailbox access to mailbox. He can also create distribution groups and assign members. Another useful thing he can do, which is helpful for troubleshooting, is to run, deliver reports in case someone is missing emails. He's also able to see public folders, but we have not created any public folders yet. We will definitely talk about public folders later in this course. As Brian gets more experience, he might be assigned another group that will give you more access to those Exchange environment. Let's move on to another request. Imagine that the male users that we created earlier is actually an external consultant who has been hired to assess our Exchange environment and give you suggestions on what might be improved. So here already has an idea account with no mailbox. Now we can use to be able to see how our exchanges configured. We don't want to give him any write permission. For that purpose. We will make him a member of the view only organization management. This will give him the ability to be absolutely everything without the right to change anything. Let's log in as him to ECP. Keynote can browse through our exchange and see how everything is configured. He can see where we got our SSL certificate from. He can see how many Exchange servers we have another environment. He can see mailbox databases. I encourage you to read more about permissions in Exchange Server on the Microsoft website, you can follow the link below to get there. Thank you for watching. I will see you in the next video where we will discuss user roles. 13. User roles: Hello and welcome to new video on user roles in Exchange Server 2019. So we discussed admin roles in the previous video, which specify permissions you give people to manage your Exchange organization. On the other hand, user roles defined what users can do with regards to their own mailboxes. Admin roles are assigned through group membership and user roles are assigned using your role assignment policies. Let's log into orange change and navigate to permissions user roles. There's only one role assignment policy that was created by default. Let's double-click on it and see what options we have there. You can give your user access to modify their own contact and profile information using these two options. These options defined whether users can manage their group membership or membership of the groups they own. There are several more options you can toggle. I encourage you to read up on them and experiment. You can read more about these roles here. The link is for exchange 2013, but not much has changed regarding user roles since then. In my experience, does default role assignment policy is good enough for a majority of companies out there. However, sometimes you may get a request that requires changing the default role assignment policy or even creating a new one. When I worked before the MSP onboarding a new client who already had an Exchange server. They had an issue with people changing display names on their own, which by default they should not be able to initial everyone's e-mail address was configured using the following format. First name dot last name at domain.com. After a while, some people started changing their display names to what they preferred to be called. So William Thompson changes display name to Bill, have to share in Robin's got married, she changed her last name to show as Fraser and thus are too confusing. Other people in the new mandate was that old name changes must go through IT and be reflected in both display name and e-mail address. We found out that the default role assignment policy was modified to allow users to change their names. Let me demonstrate this. I create a new user, William Thompson, who's now a member of the sales department. Let's log in as William and go to options. Now go to my account. Let's suppose William decides he wants to be seen as Bill. Let's change it and save. Now I will log in as Kyle along and try to find William in the global address book. Now William shows us bill. For the purpose of this exercise, we will fix this by creating a new role assignment policy in assigning it to this user in question. Let's create a new policy and call it no name changes. I will leave everything enabled here except this part. Now let's go ahead and apply our newly created role assignment policy, Williams mailbox. Now, William will not be able to change his name before we test it. I want to revert his name back to the standard. Now let's make sure it worked. Login is William and try to change the name again to anything else. As you can see now, users will be forced to submit a ticket to the service desk to have their name and email addresses change properly, you may need to use a different selection of permissions for other scenarios you will encounter on the job as an Exchange Administrator, please go ahead and create a few more policies with different roles and test them. Thank you very much and I will see you in the next video where we will go over Outlook web application policies. 19. Journal rules: Greetings. In this lecture, we're going to discuss the last type of the Compliance Management section, journal rules. These rules help organizations to record certain emails of individuals or groups to achieve compliance and regulatory goals. This is a part of premium journalling which requires enterprise cows. I will talk a little more about standard journaling later in the lecture on mailbox databases. Let's go ahead and create a journal rule. Click on the plus sign in the syndrome reports to will ascend reports to special drawing mailbox I've created before. Journal underscore mailbox at Alex IT dot ca. We have to use the email address. Otherwise that will produce an error. We will name it default journaling rule in the selection menu. If the message is sent or received from, we will select apply to all messages. Journal defaulting messages menu. We'll select all messages. Click Save. Check the warning message. It asked to confirm if you want to apply journal rules to all future messages. Click Okay. We can see that a new rule has been created. This rule will be applied to all the messages and old databases that is different from standard journaling, because standard journaling has to be enabled per each mailbox database. Now we will create custom rules only for specific mailboxes. Let's click on the plus sign. We will send journal reports to the same mailbox as before. Journal underscore mailbox at Alex IT dot ca. We will call it customer journaling rule for John Green in the menu, if the message is sent or received from, we will select the specific user, John Green. And in the main new journal, the following messages. Select and troll messages only. Click safe. This rule will journal all internal messages. For John Green, There's an option to disable and enable certain rules. You can uncheck it or chicken Bach. One more option on this page that we can configure is sent on deliverable journal reports to. And here we can specify an e-mail address for an deliverable journal reports for tracking purposes. Let's click on Select address. Click Browse. Let's like the administrators mailbox, click safe. Now there's a warning message reading that any messages to this mailbox 1-bit journaled and all mailbox Rules will be ignored. It is recommended to create a separate mailbox for this. I have created a separate mailbox for this called drilling underscore on D, short for unbelievable underscore mailbox at Alex IT dot c. Let's go back and select the newly created mailbox instead. These are all the options that are available on these tab. In this lecture, we discussed premium journaling in its rules. Will learn how to create new journal rules. Thank you very much for continuing to watch. I will see you in the next section. 31. Public folders: Greetings. In this new chapter, we will talk about public folders. According to Microsoft, public folders are designed for shared access and provide an easy and effective way to collect, organize, and share information with other people in your group or organization. Content in public folders is organized similarly to files and folders on a drive. You can mail enable the public folder and add it as a member of distribution group. You can easily browse and share documents using public folders. You can define granular permissions on public folders to control access to the content in these folders. In this video lesson, I will demonstrate how public folders work in Exchange Server 2019. As you can see, after you install Exchange Server, there are no public folders by default. To create a public folder, we first need to create a public folder mailbox. Let's go ahead and do it. Go to the public folder mailbox tab and click on the plus sign. I will need mine. Public folder, mailbox. You have the option what OU and mailbox database does. Mailbox and the idea account for it will be created in before it's changed 2013, public folders used to be stored in public folder databases. Starting with Exchange 2013, the architecture for public folders changed and now they're stored in mailboxes, which reside in mailbox databases. Now that we have our first public folder mailbox, we can start grading public folders. It is a common practice to reflect your company's departmental structure when creating public folders hierarchy, I will create some public folders for our departments. In this lecture, we will use the sales department and its members to practice. Let's assign permissions to the sales public folders. Click on the Manage button under a folder permissions. Kate Lauren's is the department manager and we will give her own rights, which gives her a full permission, including the ability to manage permissions to this public folder for other people. Bruschetta is also a member of the sales department and we will give him the publishing editor permission level. If you click on the ellipsis sign and go to the root permissions, you can assign permissions to the root of all public folders. You can use this, for example, to give a non-technical user the ability to create or delete public folders and the route of public folders and also manage permissions. We will make Brian Sinclair the owner or the root of the public folder hierarchy. Let's log in as Kate Lawrence to our Windows 10 VM and take a look at public folders in Outlook. Let's expand public folders. Here you can see all the public folders we have created so far. You can store emails and other items in public folders. Kid received an email from Bruce about new sales leads. She wants to share it with members of her team. She can do that by moving that email to the sales public folder so other people can see it as well. By the way, to see public folders, you need to make sure that the folders views selected here. Let's check the properties of the sales folder. You can see the type and location in the public folder hierarchy. This drop-down menu specifies the class ID of messages that are posted to this folder. Ipm dot post is used for posting notes in the folder. If this was a calendar, the class would be IPM dot appointment. You can learn more about item types and message classes if you follow the link below. Folder size, it will show the size of this folder and that sub folders. Folder assistant lets you create emote rules, which is somewhat similar to e-mail rules you would create for your own mailbox. Let's check the permissions tab. You can view and modify permissions here. William Thompson is a member of the sales team. We will give him the author level permissions. One thing to note here is these two system groups. Anonymous gets no permission by default, and that is how we prefer it. But the default user gets the author level of permission, which means any authenticated user in your organization will be able to create items in any public folder. By default. You can change it on this folder since Kate has owner permissions. But you might want to change the default user permissions have the root level. I would suggest lowering the default user permission from author to maybe reviewer at the root of public folders. This will need to be done through PowerShell. Let's go to our server and launch the Exchange Management Shell. Let's check the root permissions first, we will use the following command. Get public folder, pipe, get public folder client permission. Now let's remove permissions for the default user. We can use the following command. Get bubbly folder, pipe, get public folder client permission, user default pipe, remove public folder client permission. Now the default user has no permission to the root of public folders, just like Anonymous. Now we will use the following command to give the default user the reviewer axis and get public folder pipe. Get public folder climb permission, user default pipe at public folder client permission, access rights. Review over. Now that everyone in the company can browse all the public folders without being able to create or remove items. Please use the links below to find out more about these commands. Kate wants to create a calendar for the members of her team for meeting and sales events. She can easily accomplish this task with public folders. List, create a calendar for the sales team. Right-click on the sales folder and choose New Folder. I will name this calendar, sales team calendar. This drop-down menu that lets us select what type of content this contains. You can see there are several types to choose from. Ours will contain calendar items. For this calendar to appear under your calendars, you need to add that to favorites. Right-click and add to favorites. You can give it a different name in your favorites. Click on options. You have options regarding sub folders and how they're supposed to be added. You can also choose the location. Location option is currently grayed out because this calendar is under a top to your folder. Here, this calendar was in a sub-folder under sales, you would have a choice for this calendar to appear as a top-level favorite or is a sub folder of the folder. Let's create a test folder to create tests for members of the sales team. No kid can use this public folder to create and assign tasks. Let's create a sub folder called orders. Here's where emails regarding orders can be put in. Let's check the properties of this subfolder in Exchange Admin Center. You have some general information about this folder. On the first tab, on the statistics tab, you can see some information like size, items, count, and Last-Modified time. On the last tab, we have some storage limit settings similar to a regular user mailbox. Let's say Kate, once customers and staff to send emails regarding new orders to this public folder. So all members of the sales team can see them. To accomplish this, we need to enable this public folder. Click on the Enable button under Meal settings. Let's check the properties of this public folder. Now you have a few more tabs. On the general meal Properties tab, you can view and change the alias and display name of this public folder. You can also hide it from the Gab. Next, you can set up different email addresses. On the next tab, you can view as group membership. Delivery options and mail flow settings are very similar to those of a shared mailbox. Let's test sending email to this public folder. So I will compile a new e-mail and send it to orders at Alex, IT dot ca. In a few moments, this email should appear in the orders folder. There it is. One less thing. Let's check the calendars to make sure our newly created public folder calendar has appeared in kHz calendars. You can find it under other calendars. If it does not appear right away, you might have to go to favorites under public folders and click on the calendar there and then go back to your calendars. This is alpha public folders. I will see you in the next lecture on public folder mailboxes. Thank you very much for staying with me. 32. Public folder mailboxes: Greetings. In this lecture, we will talk about public folder mailboxes. As I mentioned in the previous lecture, in earlier versions of Exchange, public folders used to reside in public folder databases. Now they're stored in specially designed mailboxes that reside in mailbox databases. High availability is provided to public folders by utilizing a database availability group or DAG. Dogs are not covered in this course as this course is focused on the basic single server environment. There are two types of public folder mailboxes, primary hierarchy and secondary hierarchy. According to Microsoft, the primary hierarchy mailbox is the one writable copy of the public folder hierarchy. Public folder hierarchy is the logical structure of all public folders and their properties, as well as permissions. It is copied to all other public folder mailboxes as a read-only copy. When you create the first public folder mailbox, like we did in the previous lesson, it becomes the primary hierarchy mailbox. When you add more public folder mailboxes, they created a secondary hierarchy mailboxes. That means that the store content and get a read-only copy of the public folder hierarchy from the primary hierarchy mailbox. Both primary and secondary hierarchy mailboxes can store content. When you create a public folder mailbox, a user account in Active Directory gets created as well. Let's find the account for our primary hierarchy mailbox. Here it is. It is created as a disabled account, just like accounts for shared mailboxes. Let's create another public folder, mailbox. As you can see, it was created as a secondary hierarchy mailbox. Let's go to the properties of the mailbox would just created. On the General tab. You can see it's name, OU it's in and what mailbox database in resides in. Let's go to the mailbox usage tab. You get a warning because no one has logged in into this mailbox yet, and there's no data. By default, public folder mailboxes, inherited quota limits from the mailbox database. You can change the settings for this meal bucks if you wish. Here. You can move public folder mailboxes between mailbox databases. For that you need to use the Move Request command. Since we don't have another meal bugs database, we can do it right now. You can read more about this command if you follow the link below. You can also move public folders between different public folder mailboxes. We need to use PowerShell commands for that. Let's go to the server and open exchange management shell. First, we will check properties of the sales public folder. We can use the following command for that. Get public folder identity, backslash, sales, pipe, format list. You can get the identity value from ECP. Let me show you quickly. This output gives us all the properties of this public folder. We can see what mailbox at resides in. We can see it's not mail enabled. Yields have the folder path information. He can learn more about some of these properties if you follow the link below. Now, let's move the sales public folder to the secondary hierarchy mailbox would create it earlier. To do that, we need to use the following command. New public folder, move request, folders, sales, target mailbox, public folder, mailbox to. We can check the status of this move request by using the public folder move request command. The Move Request was completed. Please note that when we move a public folder, two different mailbox, we do not move itself folders. Let's check the orders folder. Get public folder, identity, sales, backslash orders, pipe format, list. It's still resides in the primary hierarchy mailbox. This concludes the section on public folders. Thank you very much and I will see you in the next section.