Configure DNS records for Exchange 2007 multiple-server install

Estimated time to complete: 15 to 20 minutes

Now that you've configured your Exchange 2007 and Exchange 2013 servers, it's time to change your DNS records to direct connections to your new Exchange 2013 server. You'll move the host names (for example, mail.contoso.com) users have been using to connect to Outlook Web Access, Autodiscover, and so on, from your Exchange 2007 server to your Exchange 2013 server. When an Exchange 2007 user tries to open their mailbox, the Exchange 2013 server will redirect them to the host name of the Exchange 2007 server (for example, legacy.contoso.com). Configuring DNS includes the following:

• Verify that the Exchange 2007 host name resolves to the external, publically-accessible, IP address of the Exchange 2007 Client Access server.

• Change the primary host names, such as mail.contoso.com, autodiscover.contoso.com, and owa.contoso.com (if used) to point to the external, publically-accessible, IP address of the Exchange 2013 Client Access server with your public DNS provider.

• Change the primary host names, such as mail.contoso.com (or internal.contoso.com if you're using different internal host names), autodiscover.contoso.com, and owa.contoso.com (if used) to point to the internal machine name of the Exchange 2013 Client Access server on your internal DNS servers.

How do I verify my Exchange 2007 host name is properly configured?

Earlier in the checklist, you configured the host name of the Exchange 2007 with your public Internet DNS provider. Now you need to verify that the host name of the Exchange 2007, for example legacy.contoso.com, resolves to the external IP address of the Exchange 2007 server and that you can access an Exchange 2007 mailbox.

To verify that you've successfully configured your Exchange 2007 host name with your public DNS provider, do the following:

1. Open a command prompt and run nslookup.exe.

2. Change to a DNS server that can query your public DNS zone.

3. In nslookup, look up the record for the legacy.contoso.com host name you created. Verify that the IP address that's returned matches the external IP address of your Exchange 2007 server.

Now, verify that you can access your Exchange 2007 server using the legacy host name. Using a computer outside of your internal network, open your favorite browser and browse to the Outlook Web Access URL of the Exchange 2007 server, for example, https://legacy.contoso.com/owa. Verify that you can connect to Outlook Web App, log in, and view the contents of an Exchange 2007 mailbox. Also verify that you don't receive any certificate warnings or errors.

If you can access an Exchange 2007 mailbox and don't receive any certificate warnings or errors, you can continue on with the rest of this topic.

How do I configure my public DNS records?

To send users to your Exchange 2013 Client Access server, you need to configure the existing DNS host (A) record with your external DNS provider. The public DNS records should point to the external IP address or FQDN of your Internet-facing Exchange 2013 Client Access server and use the externally accessible FQDNs that you've configured on your Client Access server. The following are examples of recommended DNS records that you should create to enable mail flow and external client connectivity.

How do I configure my internal DNS records?

You choose whether you want users to use the same URL on your intranet and on the Internet to access your Exchange server or whether they should use a different URL. What you choose depends on the addressing scheme you have in place already or that you want to implement. If you’re implementing a new addressing scheme, we recommend that you use the same URL for both internal and external URLs. Using the same URL makes it easier for users to access your Exchange server because they only have to remember one address. Regardless of the choice you make, you need to make sure you configure a private DNS zone for the address space you configure. For more information about administering DNS zones, see Administering DNS Server.

Configure internal and external URLs to be the same

To send users to your Exchange 2013 Client Access server, you need to configure the existing DNS host (A) record on your internal DNS servers. The internal DNS records should point to the internal host name and IP address of your Exchange 2013 Client Access server. The internal host names you use should match the external host names, for example, mail.contoso.com and owa.contoso.com. The following are examples of recommended DNS records that you should create to enable mail flow and external client connectivity.

Configure different internal and external URLs

To send users to your Exchange 2013 Client Access server, you need to configure the existing DNS host (A) record on your internal DNS servers. The internal DNS records should point to the internal host name and IP address of your Exchange 2013 Client Access server. The following are examples of recommended DNS records that you should create to enable mail flow and external client connectivity.

How do I know this worked?

To verify that you have successfully configured your public DNS records, do the following:

1. Open a command prompt and run nslookup.exe.

2. Change to a DNS server that can query your public DNS zone.

3. In nslookup, look up the record of each FQDN you created. Verify that the value that's returned for each FQDN is correct.

Now, verify that you can access your Exchange 2013 server using your primary host name. Using a computer outside of your internal network, open your favorite browser and browse to the Outlook Web Access URL of the Exchange 2013 server, for example, https://mail.contoso.com/owa. Perform the two following tests:

• Log into an Exchange 2013 mailbox   Log into an Exchange 2013 mailbox and verify that you can access the contents of the mailbox without any certificate warnings or other errors. Log out and close your browser. If you need to create a new Exchange 2013 mailbox, see Create user mailboxes.

• Log into an Exchange 2007 mailbox   Log into an Exchange 2007 mailbox. When you log into this mailbox, you will be redirected to your Exchange 2007 Client Access server (the URL in the browser address bar with switch from mail.contoso.com to legacy.contoso.com). Verify that you are logged in successfully, that you can access the contents of the mailbox, and that you don't receive any certificate warnings or other errors.

• Test inbound and outbound mail flow   Send a message from an external mail provider, such as outlook.com, to Exchange 2013 and Exchange 2007 mailboxes. Verify that the message is received successfully. Reply to the message from each mailbox and verify that the external recipient receives the message. You can also examine the message headers of the messages you sent and received to verify the path the message took using the Message Analyzer in the Microsoft Remote Connectivity Analyzer.

With the exception of the mail flow test, repeat the previous tests from a computer inside your network to test your internal DNS configuration. If you've configured your internal DNS records to use the same host names as your external DNS, attempt to access an Exchange 2013 and Exchange 2007 mailbox using those host names, for example mail.contoso.com or owa.contoso.com. If you've configured your internal DNS records to use a different host name, attempt to access an Exchange 2013 and Exchange 2007 mailbox using the internal host name, for example internal.contoso.com.

Having problems? Ask for help in the Exchange forums. Visit the forums at: Exchange Server, Exchange Online, or Exchange Online Protection.