###BeginCaseStudy###
Case Study: 6
Trey Research
Overview
Trey Research is a pharmaceutical company that has 10,000 users. Most of the users work remotely,
including the users in the finance department. The finance department users reside in an
organizational unit (OU) named Finance.
Trey Research purchases a partner pharmaceutical company named Fabrikam, Inc. Fabrikam has
2,000 users and hosts its own Exchange Server 2010 organization.
Existing Environment
Active Directory Environment
The network of Trey Research contains an Active Directory forest. The forest contains an empty
parent domain named treyresearch.com and a child domain named main.treyresearch.com. The
forest contains one site named DefaultSite.
The Trey Research network and the Fabrikam network connect to each other by using a WAN link. A
two-way trust exists between the Trey Research and Fabrikam networks.
Trey Research Exchange Server Organization
Trey Research has an Exchange Server 2013 organization that contains four servers. The servers are
configured as shown in the following table.
EX1 and EX2 are the members of a database availability group (DAG) named DAG1.
Trey Research has three databases named DB1, DB2, and DB3. DB1 and DB2 replicate between all of
the servers in DAG1. DB3 is mounted on EX4.
The storage on EX1 and EX2 is configured as shown in the following table.
The Exchange Server 2013 servers at Trey Research are configured as follows:
• EX3 and EX4 perform spam filtering.
• The public folder hierarchy mailbox is homed on DB3.
• Each mailbox database contains a public folder mailbox.
• HTTP traffic is load balanced by using a Layer 4 hardware
load balancer.
• The hardware load balancer uses the OWA virtual directory
for health monitoring.
• On EX1 and EX2, the mailbox database files and log files are
stored on volume mount points.
• IMAP is enabled on EX4 to download email messages for a
custom help desk application.
• Remote users access their mailbox by using Outlook Web
App and Exchange ActiveSync.
• The custom help desk application uses a service account
that has a display name of Help Desk and an SMTP address of
helpdesk@treyresearch.com.
Fabrikam Exchange Server Organization
Fabrikam has an Exchange Server 2010 organization that contains two servers. The servers are
configured as shown in the following table.
Fabrikam plans to implement the address rewrite feature to change the SMTP domain name of all
outbound email to use the treyresearch.com SMTP suffix.
Problem Statements
Trey Research identifies the following issues:
• Recently on EX2, Volumel failed for three days. Once the
volume was repaired, reseeding the database from EX1 took more
than six hours.
• You recently discovered that when the
MSExchangeOWAAppPool application pool on EX3 was in a stopped
state, the hardware load balancer marked EX3 as offline.
• Users report that during the installation of updates on the
Exchange Server 2013 servers, the users lost access to their mailbox
and were unable to modify public folders.
• Several finance department users store sensitive data on
their mobile device. The legal department requires that Exchange
ActiveSync be disabled for all of the finance department users.
• An Active Directory administrator reports that the domain
controllers in the treyresearch.com domain are overused. The
administrator requests that the Exchange Server 2013 servers only
use the domain controllers in the main.treyresearch.com domain.
Requirements
Business Goal
The legal department requires that the finance department users have a segmented view of the
global address list (GAL) that only shows recipients in the finance department
Planned Changes
Trey Research plans to implement the following spam confidence level (SCL) configurations:
• Block email messages when the SCL score is 9.
• Move the email messages to the postmaster mailbox when
the SCL score is 7.
• Block email messages and send a non-delivery report (NDR)
when the SCL score is 8.
Resource Utilization Requirements
Users report that their connection to Outlook Web App is slow since the deployment of IMAP on
EX4. The users do not report that they experience performance issues when they use their mobile
device.
Trey Research reports that the IMAP service is not business critical and must not have a higher
priority over hardware resources than Outlook Web App. On EX4, Outlook Web App has the same
priority over hardware resources as Exchange ActiveSync.
###EndCaseStudy###
DRAG DROP
You are evaluating the implementation of the address rewrite feature in the Fabrikam forest.
You need to recommend a solution for the Trey Research forest and the Fabrikam forest to share the
SMTP domain name of treyresearch.com.
Which actions should you recommend performing in each forest? (To answer, drag the appropriate
actions to the correct forests. Each action may be used once, more than once, or not at all. You may
need to drag the split bar between panes or scroll to view content)
Answer: See the explanation
Explanation:
Trey research forest
Configure authoritative accepted domain
Create send connector
Fabricam Forest
Configure an accepted domain as an internal relay domain
You don’t configure a send connector but mail-enabled contacts so the recipient filtering doesn’t block the replies of the “spoofed” emails. Domain config looks right to me.
0
0
This case study is really hard compared to the other ones I have seen!
0
0
Makes sense Guy, because if you setup an authoritative accepted domain in Trey Research Exchange won’t try to send it anywhere else externally. The mail-enabled contacts will send email over to the Fabrikam org.
0
0
Could you not set up an internal relay domain, then a send connector pointing to Fabrikam then on Fabrikam…im not 100% sure what to do here but my gut is telling me you have to configure mail enabled contacts in fabrikam for the users with a @treyresearch name since the address rewrite is still in effect otherwise Fabrikams filter will bounce them back.
Have your mail enabled contact point to the @Fabrikam address
This is a hard question really
Why would Fabrikam need an internal relay accepted domain, it is the final destination for the mail, it shouldnt be relaying anything.
0
0
This is nice mixture of all possible scenarios I have seen. As per my understanding all incoming messages will come with treyresearch.com suffix and because of that two scenarios appear in my head:
1. Fabricam edge server will do relaying and address rewriting.
2. Fabricam edge server will only do rewriting and messages will be relayed by frontend transport service on some exchange 2013 servers in trayresearch.
• http://exchangeserverpro.com/exchange-2013-configure-smtp-relay-connector/
• http://exchangeserverpro.com/exchange-2013-mail-flow/
For the first scenario we need :
Fabricam: External relay, send connector, address rewriting – too many things for the only option in the question so…lets see second one.
For the second :
Trayresearch: Internal relay, send connector to Fabricam edge server
Fabricam : AD mail-enabled contacts (or AD contacts for all mail enabled users) according:
• http://www.msexchange.org/articles-tutorials/exchange-server-2007/compliance-policies-archiving/2003-address-rewrite-feature.html
• http://messaging2day.blogspot.ba/2010/06/understanding-address-rewriting.html
So For me that is the correct one!!!
0
0
I’d vote for this:
TreyResearch would need:
Internal relay for it’s own domain
Why: https://technet.microsoft.com/en-us/library/bb676395(v=exchg.141).aspx
To support routing messages for a shared address space, you must create an accepted domain that’s configured as an internal relay domain. When you configure an accepted domain as an internal relay domain, Exchange first tries to deliver to a recipient in the Exchange organization. If the recipient isn’t found, the message is routed to the Send connector that has the closest address space match.
Then a send-connector for the same domain that points to fabricam
Fabricam would need:
Authoritative Accepted Domain (so that it doesn’t loop mails for nonexistent recipients)
0
0