<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Exchange 2010 RPC Client Access Service and the ClientAccessArray</title>
	<atom:link href="http://blogs.kraftkennedy.com/index.php/2009/09/09/exchange-2010-rpc-client-access-service-and-the-clientaccessarray/feed/" rel="self" type="application/rss+xml" />
	<link>http://blogs.kraftkennedy.com/index.php/2009/09/09/exchange-2010-rpc-client-access-service-and-the-clientaccessarray/</link>
	<description>Trends and insight into legal technology, infrastructure and strategic thinking.</description>
	<lastBuildDate>Thu, 02 Feb 2012 13:59:27 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
	<item>
		<title>By: Joe Hoegler</title>
		<link>http://blogs.kraftkennedy.com/index.php/2009/09/09/exchange-2010-rpc-client-access-service-and-the-clientaccessarray/comment-page-1/#comment-1308</link>
		<dc:creator>Joe Hoegler</dc:creator>
		<pubDate>Mon, 03 Oct 2011 15:40:46 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.kraftkennedy.com/?p=564#comment-1308</guid>
		<description>Phuong,

Based on your description, it would appear that NLB is not working properly.  I&#039;ve discussed the process for configuring NLB at http://blogs.kraftkennedy.com/index.php/2009/11/25/configuring-nlb-for-exchange-2010-cas-load-balancing/ but there are also a few other articles on the Internet for how to configure this properly.</description>
		<content:encoded><![CDATA[<p>Phuong,</p>
<p>Based on your description, it would appear that NLB is not working properly.  I&#8217;ve discussed the process for configuring NLB at <a href="http://blogs.kraftkennedy.com/index.php/2009/11/25/configuring-nlb-for-exchange-2010-cas-load-balancing/" rel="nofollow">http://blogs.kraftkennedy.com/index.php/2009/11/25/configuring-nlb-for-exchange-2010-cas-load-balancing/</a> but there are also a few other articles on the Internet for how to configure this properly.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Phuong Le</title>
		<link>http://blogs.kraftkennedy.com/index.php/2009/09/09/exchange-2010-rpc-client-access-service-and-the-clientaccessarray/comment-page-1/#comment-791</link>
		<dc:creator>Phuong Le</dc:creator>
		<pubDate>Tue, 02 Aug 2011 09:21:19 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.kraftkennedy.com/?p=564#comment-791</guid>
		<description>Before configuring NLB for 2 Exchange servers 2010 (both servers connect to Active Directory 2008). I can login the emails stored on these Exchange servers. But when the NLB is running successfully, I am not able to use Outlook 2007 to login those emails.

Whenever I open Outlook, I got error...&quot;The set of folder can not be opened...&quot;</description>
		<content:encoded><![CDATA[<p>Before configuring NLB for 2 Exchange servers 2010 (both servers connect to Active Directory 2008). I can login the emails stored on these Exchange servers. But when the NLB is running successfully, I am not able to use Outlook 2007 to login those emails.</p>
<p>Whenever I open Outlook, I got error&#8230;&#8221;The set of folder can not be opened&#8230;&#8221;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Joe Hoegler</title>
		<link>http://blogs.kraftkennedy.com/index.php/2009/09/09/exchange-2010-rpc-client-access-service-and-the-clientaccessarray/comment-page-1/#comment-763</link>
		<dc:creator>Joe Hoegler</dc:creator>
		<pubDate>Fri, 22 Jul 2011 02:02:55 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.kraftkennedy.com/?p=564#comment-763</guid>
		<description>Frost-  You would need external AutoDiscover public DNS records configured for each SMTP domain used as a primary SMTP address or for which users need to be able to automatically provision devices.  If using the A record approach (my recommendation), this would be autodiscover.smtpdomain.com for each domain.  This FQDN should ultimately flow through to Exchange 2010 CAS (potentially through a load balancer, TMG publishing, etc.).  Yes, the SSL certificate installed on Exchange 2010 CAS would need to include all of your required autodiscover.smtpdomain.com names so as to avoid any security prompts.  Technically speaking, this would only be the AutoDiscover FQDNs that are actually serviced these specific CAS servers but, for simplicity, I generally encourage leveraging a single UCC/SAN certificate across the entire environment.

Frank-  If you are using NLB as your method of load balancing, yes, you would need to enable IP forwarding via netsh if you are using multiple NICs.  I discuss this in more detail in my post on NLB and Exchange 2010 CAS load balancing at http://blogs.kraftkennedy.com/index.php/2009/11/25/configuring-nlb-for-exchange-2010-cas-load-balancing/.</description>
		<content:encoded><![CDATA[<p>Frost-  You would need external AutoDiscover public DNS records configured for each SMTP domain used as a primary SMTP address or for which users need to be able to automatically provision devices.  If using the A record approach (my recommendation), this would be autodiscover.smtpdomain.com for each domain.  This FQDN should ultimately flow through to Exchange 2010 CAS (potentially through a load balancer, TMG publishing, etc.).  Yes, the SSL certificate installed on Exchange 2010 CAS would need to include all of your required autodiscover.smtpdomain.com names so as to avoid any security prompts.  Technically speaking, this would only be the AutoDiscover FQDNs that are actually serviced these specific CAS servers but, for simplicity, I generally encourage leveraging a single UCC/SAN certificate across the entire environment.</p>
<p>Frank-  If you are using NLB as your method of load balancing, yes, you would need to enable IP forwarding via netsh if you are using multiple NICs.  I discuss this in more detail in my post on NLB and Exchange 2010 CAS load balancing at <a href="http://blogs.kraftkennedy.com/index.php/2009/11/25/configuring-nlb-for-exchange-2010-cas-load-balancing/" rel="nofollow">http://blogs.kraftkennedy.com/index.php/2009/11/25/configuring-nlb-for-exchange-2010-cas-load-balancing/</a>.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Frank Little</title>
		<link>http://blogs.kraftkennedy.com/index.php/2009/09/09/exchange-2010-rpc-client-access-service-and-the-clientaccessarray/comment-page-1/#comment-754</link>
		<dc:creator>Frank Little</dc:creator>
		<pubDate>Tue, 19 Jul 2011 18:35:07 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.kraftkennedy.com/?p=564#comment-754</guid>
		<description>it seems that you must turn on forwarding before creating the cluster in 2008 R2.  netsh kept giving back &quot;element not found&quot;.  A quick look at ipconfig /all showed way.  Broke the cluster enabled forwarding then recreated the cluster and all was well.</description>
		<content:encoded><![CDATA[<p>it seems that you must turn on forwarding before creating the cluster in 2008 R2.  netsh kept giving back &#8220;element not found&#8221;.  A quick look at ipconfig /all showed way.  Broke the cluster enabled forwarding then recreated the cluster and all was well.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Frost</title>
		<link>http://blogs.kraftkennedy.com/index.php/2009/09/09/exchange-2010-rpc-client-access-service-and-the-clientaccessarray/comment-page-1/#comment-228</link>
		<dc:creator>Frost</dc:creator>
		<pubDate>Tue, 13 Jul 2010 10:54:49 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.kraftkennedy.com/?p=564#comment-228</guid>
		<description>Hi, Joe,

Thank you so much for your input.

To give you a better picture.

- a forest with multiple domain.
- Root forest in France, there is a Exchange 2007 installed
- two sub domains, UK and Germany also have Exchange 2007 installed

Recently install Exchange 2010 on Asia domain with
- 2 x hub/cas roles (configure for NLB)
- 2 x mailbox role (configure for DAG)


There is no exchange server deployed in Malaysia and other Asian AD site, Singapore Exchange 2010 will provide email for Malaysia, Brunei, Indonesia, etc...
All AD site have their own email domain.
- domainmalaysia.com
- domainbrunei.com, etc... 

All these domains will be accepted by the Exchange Server.

Correct me if I am wrong, is the procedure like this

1. user in AD site malaysia launch outlook 2007, if he is joined to the domain, the email address (user@domainmalaysia.com) will be filled automatically.
2. this will queries the autodiscover.domainmalaysia.com right?
3. then it will get all the exchange server name (should be the NLB if it is set up correctly)


Here is my questions

1. Do I have to created autodiscover DNS record in all AD Site?
2. We have to point (e.g.autodiscover.domainmalaysia.com) to be able to reach the clientAccessArray IP address right?
3. And the certificate SAN name must also include all accepted email domain above?</description>
		<content:encoded><![CDATA[<p>Hi, Joe,</p>
<p>Thank you so much for your input.</p>
<p>To give you a better picture.</p>
<p>- a forest with multiple domain.<br />
- Root forest in France, there is a Exchange 2007 installed<br />
- two sub domains, UK and Germany also have Exchange 2007 installed</p>
<p>Recently install Exchange 2010 on Asia domain with<br />
- 2 x hub/cas roles (configure for NLB)<br />
- 2 x mailbox role (configure for DAG)</p>
<p>There is no exchange server deployed in Malaysia and other Asian AD site, Singapore Exchange 2010 will provide email for Malaysia, Brunei, Indonesia, etc&#8230;<br />
All AD site have their own email domain.<br />
- domainmalaysia.com<br />
- domainbrunei.com, etc&#8230; </p>
<p>All these domains will be accepted by the Exchange Server.</p>
<p>Correct me if I am wrong, is the procedure like this</p>
<p>1. user in AD site malaysia launch outlook 2007, if he is joined to the domain, the email address (user@domainmalaysia.com) will be filled automatically.<br />
2. this will queries the autodiscover.domainmalaysia.com right?<br />
3. then it will get all the exchange server name (should be the NLB if it is set up correctly)</p>
<p>Here is my questions</p>
<p>1. Do I have to created autodiscover DNS record in all AD Site?<br />
2. We have to point (e.g.autodiscover.domainmalaysia.com) to be able to reach the clientAccessArray IP address right?<br />
3. And the certificate SAN name must also include all accepted email domain above?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Joe Hoegler</title>
		<link>http://blogs.kraftkennedy.com/index.php/2009/09/09/exchange-2010-rpc-client-access-service-and-the-clientaccessarray/comment-page-1/#comment-225</link>
		<dc:creator>Joe Hoegler</dc:creator>
		<pubDate>Fri, 09 Jul 2010 21:00:52 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.kraftkennedy.com/?p=564#comment-225</guid>
		<description>Hi Frost,

Thanks for the feedback.

Do you have Exchange 2010 servers also deployed in the Malaysia AD site such that you are asking how to ensure that users hosted in that site are referred to an appropriate CAS server in that site?  Or is Exchange only in the Singapore AD site and you are asking about users in the Malaysia site accessing Exchange in the Singapore site?

If it&#039;s the former, you would point the Internet Autodiscover record to your largest data center (e.g. Singapore) and then configure the ExternalUrls for your various CAS virtual directories in Malaysia.  When a Malaysia user queries Autodiscover (in Singapore) for an Exchange service, Autodiscover will determine the best CAS for that user to be in Malaysia and return the proper ExternalUrl (for Outlook Anywhere, ActiveSync, etc.) or InternalUrl (for Outlook RPC) for CAS in the Malaysia site.

If it&#039;s the latter, then you don&#039;t need to do anything special.  Since your Exchange infrastructure is consolidated in Singapore, that is where your users would access CAS services and, therefore, Autodiscover will return information from that site appropriately.

Alternatively, if you&#039;re asking how to make Autodiscover leverage the CAS Array you&#039;ve created, you can change the Autodiscover Internal URL value via &quot;Set-ClientAccessServer -Identity  -AutoDiscoverServiceInternalUri: https://cas.singapore.domain.com/Autodiscover/Autodiscover.xml&quot; for each CAS server in the Singapore site.  However, if you change this value, make sure that you add the CAS Array FQDN as a Subject Alternative Name on your installed SSL certificate.

I hope this helps.</description>
		<content:encoded><![CDATA[<p>Hi Frost,</p>
<p>Thanks for the feedback.</p>
<p>Do you have Exchange 2010 servers also deployed in the Malaysia AD site such that you are asking how to ensure that users hosted in that site are referred to an appropriate CAS server in that site?  Or is Exchange only in the Singapore AD site and you are asking about users in the Malaysia site accessing Exchange in the Singapore site?</p>
<p>If it&#8217;s the former, you would point the Internet Autodiscover record to your largest data center (e.g. Singapore) and then configure the ExternalUrls for your various CAS virtual directories in Malaysia.  When a Malaysia user queries Autodiscover (in Singapore) for an Exchange service, Autodiscover will determine the best CAS for that user to be in Malaysia and return the proper ExternalUrl (for Outlook Anywhere, ActiveSync, etc.) or InternalUrl (for Outlook RPC) for CAS in the Malaysia site.</p>
<p>If it&#8217;s the latter, then you don&#8217;t need to do anything special.  Since your Exchange infrastructure is consolidated in Singapore, that is where your users would access CAS services and, therefore, Autodiscover will return information from that site appropriately.</p>
<p>Alternatively, if you&#8217;re asking how to make Autodiscover leverage the CAS Array you&#8217;ve created, you can change the Autodiscover Internal URL value via &#8220;Set-ClientAccessServer -Identity  -AutoDiscoverServiceInternalUri: <a href="https://cas.singapore.domain.com/Autodiscover/Autodiscover.xml" rel="nofollow">https://cas.singapore.domain.com/Autodiscover/Autodiscover.xml</a>&#8221; for each CAS server in the Singapore site.  However, if you change this value, make sure that you add the CAS Array FQDN as a Subject Alternative Name on your installed SSL certificate.</p>
<p>I hope this helps.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Frost</title>
		<link>http://blogs.kraftkennedy.com/index.php/2009/09/09/exchange-2010-rpc-client-access-service-and-the-clientaccessarray/comment-page-1/#comment-221</link>
		<dc:creator>Frost</dc:creator>
		<pubDate>Fri, 02 Jul 2010 03:25:27 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.kraftkennedy.com/?p=564#comment-221</guid>
		<description>wonderful post.

I have a scenario now and i sincerely hope you can help me.
A forest with multiple domains and i have an exchange server 2010 in Singapore with 2 hub/cas in a NLB and 2 mailbox servers. And these Exchange servers serves the Asia Pacific region users from different AD site. i have created a new array:
new-ClientAccessArray -name SingaporeCAS -fqdn cas.singapore.domain.com -Site Singapore

However, I have Malaysia AD site (and others), what do i need to do so that they can those users can point to the server for autodiscover and automatically map those users at Malaysia to the CAS array server?

Thank you.</description>
		<content:encoded><![CDATA[<p>wonderful post.</p>
<p>I have a scenario now and i sincerely hope you can help me.<br />
A forest with multiple domains and i have an exchange server 2010 in Singapore with 2 hub/cas in a NLB and 2 mailbox servers. And these Exchange servers serves the Asia Pacific region users from different AD site. i have created a new array:<br />
new-ClientAccessArray -name SingaporeCAS -fqdn cas.singapore.domain.com -Site Singapore</p>
<p>However, I have Malaysia AD site (and others), what do i need to do so that they can those users can point to the server for autodiscover and automatically map those users at Malaysia to the CAS array server?</p>
<p>Thank you.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Joe Hoegler</title>
		<link>http://blogs.kraftkennedy.com/index.php/2009/09/09/exchange-2010-rpc-client-access-service-and-the-clientaccessarray/comment-page-1/#comment-136</link>
		<dc:creator>Joe Hoegler</dc:creator>
		<pubDate>Wed, 10 Mar 2010 21:50:01 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.kraftkennedy.com/?p=564#comment-136</guid>
		<description>Hi Elan,

In my comment, I was referring to the case where CAS and MBX were separate and the CAS selection would be random.  I almost always co-locate HTS/CAS on the same servers and separate out MBX unless there is a specific client need/limitation that requires all roles on the same server(s).

You are absolutely correct that, if you co-locate CAS and MBX on the same server, the local CAS would be chosen.</description>
		<content:encoded><![CDATA[<p>Hi Elan,</p>
<p>In my comment, I was referring to the case where CAS and MBX were separate and the CAS selection would be random.  I almost always co-locate HTS/CAS on the same servers and separate out MBX unless there is a specific client need/limitation that requires all roles on the same server(s).</p>
<p>You are absolutely correct that, if you co-locate CAS and MBX on the same server, the local CAS would be chosen.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Elan Shudnow</title>
		<link>http://blogs.kraftkennedy.com/index.php/2009/09/09/exchange-2010-rpc-client-access-service-and-the-clientaccessarray/comment-page-1/#comment-132</link>
		<dc:creator>Elan Shudnow</dc:creator>
		<pubDate>Tue, 09 Mar 2010 03:29:59 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.kraftkennedy.com/?p=564#comment-132</guid>
		<description>Just an FYI. It&#039;s not entirely random actually.  If you have CAS/MBX and you create the database, it&#039;ll actually choose itself.  If you have CAS and MBX Servers separate, it then becomes random.</description>
		<content:encoded><![CDATA[<p>Just an FYI. It&#8217;s not entirely random actually.  If you have CAS/MBX and you create the database, it&#8217;ll actually choose itself.  If you have CAS and MBX Servers separate, it then becomes random.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Joe Hoegler</title>
		<link>http://blogs.kraftkennedy.com/index.php/2009/09/09/exchange-2010-rpc-client-access-service-and-the-clientaccessarray/comment-page-1/#comment-96</link>
		<dc:creator>Joe Hoegler</dc:creator>
		<pubDate>Sun, 20 Dec 2009 23:07:20 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.kraftkennedy.com/?p=564#comment-96</guid>
		<description>Hi Derek,

I&#039;m not aware of anything special that needs to be done other than setting the RPCClientAccessServer attribute as per the instructions in this post.  If you don&#039;t set this attribute yourself, a random CAS will be used for this attribute and this would cause access issues if this CAS is ever unavailable.  Thus, even if you have only one CAS in your environment, it makes sense to leverage a ClientAccessArray and the RPCClientAccessServer attribute in case your environment grows in the future.

If you do come across any additional information, please let me know.</description>
		<content:encoded><![CDATA[<p>Hi Derek,</p>
<p>I&#8217;m not aware of anything special that needs to be done other than setting the RPCClientAccessServer attribute as per the instructions in this post.  If you don&#8217;t set this attribute yourself, a random CAS will be used for this attribute and this would cause access issues if this CAS is ever unavailable.  Thus, even if you have only one CAS in your environment, it makes sense to leverage a ClientAccessArray and the RPCClientAccessServer attribute in case your environment grows in the future.</p>
<p>If you do come across any additional information, please let me know.</p>
]]></content:encoded>
	</item>
</channel>
</rss>

