Wharf bMail / IBM Collabserv Business Mail migrate to Office 365 (Full / Partial Migrate)

IBM bMail to Office 365 Migration (Patial Migrate)

1. Get Microsoft Office 365 ready

2. Add domain in Office 365, add DNS TXT record to verify domain (e.g. : MS=ms39095089)

3. Office 365 prepare all e-mail account
 - Get ready all user mailbox (please using @xxx.onmicrosoft.com first)
 - Get ready all distribution list is correct  (please using @xxx.onmicrosoft.com first)
 - Get ready all forward and alise is correct  (please using @xxx.onmicrosoft.com first)

4. Office 365 > Setup > Data Migration > Setup sync mailbox from IBM bMail

5. About Data Migration should waiting all Status is Synced

6. Office 365 > Exchange Admin Center > Mail flow > accepted domains
 - Change "Authoritative" to "Internal Relay"

7. Optionally, unblock the existing email server
 - Exchange Admin Center > protection > connection filter > add IBM bMail IP

8. ADD DNS record (MX, SPF)
 - Office 365 MX Priority should greater than existing one
 For Example :
MX : mys-com-hk-mx.mail.na.collabserv.com (priority: 10)
MX : mys-com-hk-mx-bk.mail.na.collabserv.com (priority: 20)
MX : mys-com-hk.mail.protection.outlook.com (priority: 30)

*** If add SPF must include bMail and ISP, this is for prevent bMail can't sent out e-mail. ***
*** You can ignore SPF first, after all migration done, then add it back ***

9. Starting Migrate e-mail account from bMail to Office 365 (Patial migrate each account)
 For Example to migrate Wincy Mailbox
 - bMail Wincy Mailbox forward e-mail to Office 365 wincy.chu@mys.onmicrosoft.com
 - Data Migration should disable wincy.chu@mys.onmicrosoft.com
 - Office 365, Change wincy.chu@mys.onmicrosoft.com to wincy.chu@mys.com.hk
 - wincy.chu@mys.onmicrosoft.com should keep here for receiving forward mail
 - After 15 mins should be all worked!

10. After few day monitoring no problem on incoming e-mail, you can remove Wincy Chu e-mail account from bMail, just create Distribution list "wincy.chu@mys.com.hk" then forward to "wincy.chu@mys.onmicrosoft.com", you can reduce one mailbox slot.

11. bMail existing distribution list, you should created on Office 365 but not using @mys.com.hk, should using @mys.onmicrosoft.com, once all mailbox migrated, you can change to @mys.com.hk.

12. If all mailbox migrated and you don't need bMail, please remove all bMail DNS record and remove all setting on IBM server, also terminate it, after done please follow Step 6. change "Internal Relay" to "Authoritative"


Q&A :   Important (Partial Migrate) Please Read
Q: Why Office 365 Distribution list should using @mys.onmicrosoft.com not @mys.com.hk
A: Because the primary server on bMail, if you using @mys.com.hk on Distribution list, Wincy sent e-mail to Distribution list may not success route to bMail

Q: What is the flow between bMail & Office 365
A: All incoming mail to @mys.com.hk, according to DNS priority should delivery to bMail first, then forward to Office 365.
 - bMail to Office 365 is forward to @mys.onmicrosoft.com so should no problem
 - Office 365 back to bMail, if any mailbox or distribution list using @mys.com.hk for e-mail, the mail will internal route to mailbox, will not forward to bMail, so Distribution list should not created on Office 365 or just using @mys.onmicrosoft.com.

Enabling TLS for Exchange Server 2010

http://terenceluk.blogspot.hk/2013/09/enabling-tls-for-exchange-server-2010.html

Configure Receive Connector Properties

Using Domain Security: Configuring Mutual TLS

Exchange Online how to setup forward e-mail to outbound recipients without e-mail account

1. Login https://portal.office.com with admin right account

2. Application Menu > Admin Icon > Admin Centers > Exchange > Recipients

3. On Contacts, create outbound contacts
 - create outbound contact first so we can configure the forward later

PS. This is outbound contact

4. On Groups, create a distribution groups and assign member for forward

 - create distribution group

- in Members, you can add the contacts on members list, previous we already create a contacts, so we can add here

5. after create a distribution group you should edit and make it work from inside and outside sender.

- in "delivery management", should click "Senders inside and outside of my organization"

 - on "email options" you can add/remove forward account.

For Example :
current is support@davidfongco.com.hk forward to support@my-system.com.hk
here you can add more address such as it@davidfongco.com.hk, so support & it @davidfong incoming mail will forward to support@my-system.com.hk.

If you want forward to outbound more recipients, you should create more outbound contacts and edit from membership page.

Exchange 2010 憑證過期

Exchange 2010 憑證過期可以直接在UI上執行更新動作
1.開啟Exchange管理主控台\伺服器組態\點選Exchange Server名稱\確認是使用哪張憑證

2.點選該憑證應該該會有一個延展或更新的選項，點下去照步驟將.req檔案匯出

3.將.req檔案用記事本開啟，並複製所有文字(包含上下引線)

4.開啟憑證伺服器網頁，點選要求憑證->進階平正要求->用Base-64編碼->輸入剛才複製的文字並選擇網頁伺服器->提交->下載憑證
(127.0.0.1/certsrv)


5.回Exchange管理畫面，這時你會發現有一張新的憑證產生點選它並點選完成擱置，這時你需要選擇剛剛在CA匯出的檔案

指令模式
A.請先開啟Exchange命令模式用以下指令確認該憑證是否為正在使用的憑證
Get-ExchangeCertificate | FL
B.如果確認是Exchange所使用的憑證請參照下列方式延展
1.開啟 Exchange 管理命令介面視窗.

2.輸入Get-ExchangeCertificate 輸入後會列出所有的憑證，前面有一堆字串的就是 Thumbprint. 若真的無法判別時, IIS 管理員中也可以在憑證項目中找到那個過期的憑證, 而且從內容也可以找到 Thumbprint.

3.輸入Get-ExchangeCertificate | New-ExchangeCertificate -Service SMTP,POP,IMAP,UM,IIS 將所有 Exchange 2010 要用的服務都設置進去，完後會問您是否要使用之前的 Thumbprint 來更新,若沒有加 -Service 的部份, 則會出現一個 Service 的標頭等待您輸入, 這時再下 SMTP,POP,IMAP,UM,IIS 也可以.

4.Enable-ExchangeCertificate 即可啟用


轉自 http://benit.pixnet.net/blog/post/61838872 痞客邦