Finalize Deployment Tasks

Applies to: Exchange Server 2007 SP1, Exchange Server 2007 Topic Last Modified: 2008-01-22

This topic provides a checklist of the recommended tasks to perform after you install Microsoft Exchange Server 2007 to finalize your deployment. The Finalize Deployment tab in the Exchange Management Console can guide you through these tasks. The tasks in this topic and on the Finalize Deployment tab are required to complete the deployment of your Exchange 2007 organization. The tasks apply to features that are enabled by default but require additional configuration.

All Server Roles

Task	Check
Enter the product key for Exchange 2007. To enter the product key, click Server Configuration in the Exchange Management Console, select an Exchange 2007 server, and then click Enter Product Key in the action pane. You can also enter the product key by using the Set-ExchangeServer cmdlet. For more information about how to enter the product key, see How to Enter the Product Key. For more information about the Set-ExchangeServer cmdlet, see Set-ExchangeServer. Note: The Enter Product Key wizard is available only if you installed the 64-bit version of Exchange 2007.	[ ]
After you install or upgrade Exchange, or after you make configuration changes, we recommend that you run the Exchange Server Best Practices Analyzer. You can run the Exchange Server Best Practices Analyzer from the Toolbox in the Exchange Management Console.	[ ]
We recommend that you protect your Exchange servers from viruses, worms, and other malicious software by using Microsoft Forefront Security for Exchange Server. For more information, see New Antivirus and Anti-spam Products for Exchange 2007.	[ ]

Mailbox Server Role

Task	Check
Configure offline address book (OAB) distribution for Microsoft Office Outlook 2007 clients. For more information about the OAB, see Managing Offline Address Books.	[ ]
Configure OAB distribution for Office Outlook 2003 and earlier clients. For more information about the OAB, see Managing Offline Address Books.	[ ]

Client Access Server Role

Task	Check
Configure Secure Sockets Layer (SSL) for your Client Access server. To do this, follow the steps on the Finalize Deployment tab. For more information, see Managing Client Access Security.	[ ]
Configure ActiveSync. By default, when you install the Client Access server role on a computer that is running Exchange 2007, Exchange ActiveSync is enabled. However, we recommend that you configure security, authentication, and policy settings if you plan to use ActiveSync in your environment. To configure ActiveSync, follow the steps on the Finalize Deployment tab. For more information, see Deploying Exchange ActiveSync.	[ ]

Task

Check

Configure Secure Sockets Layer (SSL) for your Client Access server. To do this, follow the steps on the Finalize Deployment tab. For more information, see Managing Client Access Security.

[ ]

Configure ActiveSync. By default, when you install the Client Access server role on a computer that is running Exchange 2007, Exchange ActiveSync is enabled. However, we recommend that you configure security, authentication, and policy settings if you plan to use ActiveSync in your environment. To configure ActiveSync, follow the steps on the Finalize Deployment tab. For more information, see Deploying Exchange ActiveSync.

[ ]

Hub Transport Server Role

Task	Check
Configure domains for which you will accept e-mail messages. To do this, follow the steps on the Finalize Deployment tab. For more information, see How to Configure Authoritative Domains for the Exchange Organization.	[ ]
Subscribe the Edge Transport server. To do this, follow the steps on the Finalize Deployment tab. For more information, see How to Configure Internet Mail Flow Through a Subscribed Edge Transport Server.	[ ]
Configure Internet mail flow. By default, a Hub Transport server is not configured for Internet mail flow. If you do not subscribe an Edge Transport server to your Exchange organization, you must use one of the following methods to configure Internet mail flow to and from your Exchange organization: Deploy an Edge Transport server and manually configure the Send connectors and Receive connectors that are required for Internet mail flow This method does not establish any replication of recipient and configuration information from the Active Directory directory service to the Edge Transport server. For more information, see How to Configure Mail Flow Between an Edge Transport Server and Hub Transport Servers Without Using EdgeSync. Manually configure Internet mail flow between your Exchange 2007 organization and Microsoft Exchange Hosted Services or other external SMTP gateway servers This method requires you to create the Send connectors and Receive connectors on one or more Hub Transport servers in your organization that are assigned to communicate with Exchange Hosted Services or the external SMTP gateway servers. For more information see How to Configure Internet Mail Flow Through Exchange Hosted Services or an External SMTP Gateway. Manually configure the Hub Transport server for direct mail flow with the Internet This method requires you to create the Send connectors and Receive connectors on one or more Hub Transport servers in your organization that are assigned to connect to the Internet. For more information, see How to Configure Internet Mail Flow Through Exchange Hosted Services or an External SMTP Gateway.	[ ]
Configure an external postmaster recipient to receive e-mail messages. The external postmaster address is used as the sender for system-generated messages and notifications that are sent to message senders that exist outside the Exchange 2007 organization. According to RFC 2821, every domain must be able to receive mail that is sent to the postmaster address. By default, no mailbox or other recipient object is configured to receive messages that are sent to the postmaster address for any accepted domains that are defined in the Exchange organization. To modify the external postmaster address on a Hub Transport server, or to configure an external postmaster recipient on a Mailbox server, follow the steps on the Finalize Deployment tab. For more information, see Managing the External Postmaster Address.	[ ]

Unified Messaging Server Role

Task	Check
Configure Unified Messaging (UM). To do this, follow the steps on the Finalize Deployment tab. For more information see the following topics: How to Create a New Unified Messaging Dial Plan How to Create a New Unified Messaging IP Gateway How to Add a Unified Messaging Server to a Dial Plan How to Enable a User for Unified Messaging Note: These tasks are required to configure the first UM server in your organization, or the first UM server in a new dial plan. To configure an additional UM server for an existing dial plan, you need to complete only the steps in How to Add a Unified Messaging Server to a Dial Plan.	[ ]
Configure UM and Office Communication Server integration. To do this, follow the steps on the Finalize Deployment tab. For more information, see Configuring Unified Messaging and Office Communications Server 2007. Note: This task is available only if you are running Exchange 2007 with Service Pack 1 (SP1).	[ ]

Task

Check

Configure Unified Messaging (UM). To do this, follow the steps on the Finalize Deployment tab. For more information see the following topics:

Note:

These tasks are required to configure the first UM server in your organization, or the first UM server in a new dial plan. To configure an additional UM server for an existing dial plan, you need to complete only the steps in How to Add a Unified Messaging Server to a Dial Plan.

[ ]

Configure UM and Office Communication Server integration. To do this, follow the steps on the Finalize Deployment tab. For more information, see Configuring Unified Messaging and Office Communications Server 2007.

Note:

This task is available only if you are running Exchange 2007 with Service Pack 1 (SP1).

[ ]

Edge Transport Server Role

Task	Check
Subscribe the Edge Transport server. To do this, follow the steps on the Finalize Deployment tab. For more information, see How to Configure Internet Mail Flow Through a Subscribed Edge Transport Server. Note: You must enter the product key prior to subscribing the Edge Transport server. Note: To subscribe the Edge Transport server manually instead of using the Edge Subscription process, see How to Configure Mail Flow Between an Edge Transport Server and Hub Transport Servers Without Using EdgeSync.	[ ]
Use the Security Configuration Wizard to reduce the susceptibility of Microsoft Windows environments to exploitation of security vulnerabilities. For more information, see Using the Security Configuration Wizard to Secure Windows for Exchange Server Roles.	[ ]
Configure an external postmaster recipient to receive mail. The external postmaster address is used as the sender for system-generated messages and notifications that are sent to message senders that exist outside the Microsoft Exchange Server 2007 organization. According to RFC 2821, every domain must be able to receive mail that is sent to the postmaster address. By default, no mailbox or other recipient object is configured to receive messages that are sent to the postmaster address for any accepted domains that are defined in the Exchange organization. If you have not subscribed this Edge Transport server to your Exchange organization, the value of the external postmaster address is postmaster@[Edge Transport server FQDN]. After you subscribe the Edge Transport server to the Exchange organization, the value of the external postmaster address is postmaster@[default accepted domain]. If you specify a custom value for the external postmaster address on the Hub Transport servers in your Exchange organization, you must manually configure the external postmaster address on the Edge Transport server. To modify the external postmaster address on an Edge Transport server, or to configure an external postmaster recipient on a Mailbox server, follow the steps on the Finalize Deployment tab. For more information, see Managing the External Postmaster Address.	[ ]
Configure Domain Name System (DNS). The Edge Transport server must be configured for internal DNS lookups within the Exchange organization and external DNS lookups for external recipients. Public DNS records must also be configured for this server to send or receive mail from the Internet. For more information, see the following topics: Configuring Transport Server Properties Configuring DNS Settings for Exchange 2007 Servers.	[ ]

For More Information

For information about the optional configuration steps on the End-to-End Scenario tab in the Exchange Management Console, see End-to-End Scenario Tasks.

For information about additional post-installation configuration tasks that are not listed on the tabs in the Exchange Management Console but are recommended after you install Exchange 2007, see Additional Post-Installation Tasks.