?
Solved

Exchange 2010 questions

Posted on 2010-09-01
2
Medium Priority
?
1,536 Views
Last Modified: 2012-05-10
SERVER INFO:
-2x AD Win2K8 in one site
-2x Exchange 2010 MAIL,HUB,CAS
-2x Exchange 2010 EDGE
-2x Win2K8 FileServer

QUESTIONS:
1. Usually if I create user email in Exchange that mean that user can have an email and can access my fileserver using the same a/c.
Can I create email only without allowing this user to access my fileserver
2. Whether the Exchange 2010 EDGE server must be member of domain
3. If the EDGE server are located in different subnet, and in between front and backend exchange has CISCO ASA firewall. What port need to be opened if the EDGE is member of domain

thanks
0
Comment
Question by:nbctcp
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 26

Assisted Solution

by:Tony J
Tony J earned 248 total points
ID: 33574605
1. Usually if I create user email in Exchange that mean that user can have an email and can access my fileserver using the same a/c.
Can I create email only without allowing this user to access my fileserver

Yes - if they're members of groups that have access to the share, you could always create a new group and give them the "Deny" permission to the relevant shares.

2. Whether the Exchange 2010 EDGE server must be member of domain

No - it mustn't be.

3. If the EDGE server are located in different subnet, and in between front and backend exchange has CISCO ASA firewall. What port need to be opened if the EDGE is member of domain

Edge ports for synchronisation are:

For Inbound traffic:
SMTP - TCP port 25 (from Internet)
SMTP - TCP port 25 (from Edge server to Hub server on internal network)

For Outbound traffic:
SMTP - TCP/UDP port 25 (from Edge to Internet)
SMTP - TCP/UDP port 25 (from Hub to Edge server)
LDAP for EdgeSync - TCP port 50389 (from Hub to Edge server) Secure LDAP for EdgeSync - TCP port 50636 (from Hub to Edge server)
0
 
LVL 8

Accepted Solution

by:
Mkris9 earned 252 total points
ID: 33574846
1. Usually if I create user email in Exchange that mean that user can have an email and can access my fileserver using the same a/c. Can I create email only without allowing this user to access my fileserver

If you just want to create a mailbox that is not possible. There has to be an associated Active Directory account associated with a mailbox. When you create a user, it normally gets added to the domain user group. If the domain users group has access to your shares in the file server, then he / she will be able to access shares.

2. Whether the Exchange 2010 EDGE server must be member of domain

No, Edge servers uses ADAM - which is AD Application Mode - through which it communicates with AD

3. If the EDGE server are located in different subnet, and in between front and backend exchange has CISCO ASA firewall. What port need to be opened if the EDGE is member of domain

Edge servers cannot be a member of domain. It normally sits on the DMZ between WAN and your local subnet.  This shows the ports to be opened. http://technet.microsoft.com/en-us/library/bb331973.aspx to and from Edge and WAN and HT servers.

Also one of the best articles I've used for ET is http://www.msexchange.org/articles_tutorials/exchange-server-2007/planning-architecture/uncovering-exchange-2007-edge-transport-server-part1.html. though it is for 2007, the basic principles rmains the same.
0

Featured Post

NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

During and after that shift to cloud, one area that still poses a struggle for many organizations is what to do with their department file shares.
On Feb. 28, Amazon’s Simple Storage Service (S3) went down after an employee issued the wrong command during a debugging exercise. Among those affected were big names like Netflix, Spotify and Expedia.
The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…
Suggested Courses
Course of the Month13 days, 16 hours left to enroll

801 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question