Exchange Server Deployment Assistant - Single Sign On Question

I'm running through the Exchange Server Deployment Assistant to help with a Hybrid deployment and for
right now, I don't want to be bothered with SSO. In the Assistant, when I answer
No to the Do you want all users to use their on-premises credentials when they log on to their Exchange Online mailbox? question when I get to the
Before You Begin section it always shows my answer to that question as being
Yes.
Any ideas? Can I simply ignore the sections that relate to AD FS as I work through the steps?
Thanks!

Hi Adare,
I have tested on Exchange Server Deployment Assistant with "Hybrid"->"Exchange 2010 based hybrid", and get the same result as yours.
Information on "Do you want all users to use their on-premises credentials when they log on to their Exchange Online mailbox?" as below:
Single sign-on allows users in both the on-premises organization and the Exchange Online organization to access resources and features across the two organizations without being prompted for additional user credentials. Single sign-on is configured for
a hybrid deployment using identity federation and Active Directory synchronization. If you're planning to have on-premises users access Exchange Online accounts using the Outlook mail client or planning to implement Exchange Online Archiving,
we strongly recommend selecting Yes for this question and deploying single sign-on in your on-premises organization.
It seems that this is the reason why Yes has been selected.
Thanks
Mavis Huang
TechNet Community Support

Similar Messages

How to configure Exchange 2013 OWA with Single Sign On

Hi All ,
How to configure Exchange 2013 OWA with Single Sign On ?
Thanks .

Hi,
From your description, I am not quite sure what you really want to achieve. Could you explain it furthermore? If you need to set up Exchange 2013 OWA single sign on with Exchange 2010, here is a helpful thread for your reference.
Exchange 2013 OWA Single Sign on with Exchange 2010
https://social.technet.microsoft.com/Forums/en-US/2899ebfc-8622-4cdc-8d77-d76b607618f7/exchange-2013-owa-single-sign-on-with-exchange-2010?forum=exchangesvrdeploy
If that is not your case, please feel free to tell me.
Best regards,
If you have feedback for TechNet Subscriber Support, contact
[email protected]
Amy Wang
TechNet Community Support

Deploying OracleAS Single Sign-On Server Cluster setup with a Proxy Server

I have a question regarding setting up a OracleAS Single Sign-On Server in a cluster mode along with a Apache Proxy Server.
Step1 - I'm planning to install OracleAS Single Sign-On Server on two nodes sso1.oracle.com and sso2.oracle.com in a Cluster. Both the nodes in the cluster accesed via Load balancer i.e sso.oracle.com.
Step2 - Then I'm planning to setup two Apache Servers as Proxy Server i.e apache1.oracle.com and apache2.oracle.com. These two apache servers are accessed via Load balancer i.e apache.oracle.com
The question I have is
1)while setting up OracleAS Single Sign-On cluster I would provide Load balancer host i.e sso.oracle.com as part of the install. So that all the user requests coming to sso1.oracle.com/sso2.oracle.com get redirected back to Load balancer.
2)But as part of the Apache Server proxy setup I am also supposed to redirect from SSO server to apache.oracle.com
But using ssocfg.sh I can only provide either sso.oracle.com or apache.oracle.com NOT BOTH.
In this case what I should
1) avoid redirecting to sso.oracle.com instead redirect only to apache server OR are there any other methods to configure.
I have above setup working fine in DEV environment, where there is only one sso server and one apache proxy server. Problem really comes when I go for setting OSSO server as a cluster in this case I have to redirect to load balancer as well as proxy server?

why not using webcacheclustering between the apache and the 2 sso's?

Mail, Exchange, Acitve Directory and Single-Sign On Issues

I have a brand new MacBook Air with Mavericks. 10.9.3.
We are using a single sign on account setup for our machines. I enter my exchange log in details to access my account on my computer. It's labeled as a managed mobile account. When I open Mail, it takes forever to connect with the exchange server and download and sync new email. The activity monitor shows it constantly running. I send an email and it takes minutes until it actually sends. When I try to shut down mail I usually have to force quit it to close the app because it's doing some kind of syncing with the server.
I have all the same settings on a Mac Mini running 10.9.3 except I'm using a local user/admin sign-on. No issue there. So I think it's something with the single sign on on my Air. Any help would be appreciated!

Try a restart.
Do a backup, using either Time Machine or a cloning program, to ensure files/data can be recovered. Two backups are better than one.
Try setting up another admin user account to see if the same problem continues. If Back-to-My Mac is selected in System Preferences, the Guest account will not work. The intent is to see if it is specific to one account or a system wide problem. This account can be deleted later.
Isolating an issue by using another user account
If the problem is still there, try booting into the Safe Mode using your normal account. Disconnect all peripherals except those needed for the test. Shut down the computer and then power it back up after waiting 10 seconds. Immediately after hearing the startup chime, hold down the shift key and continue to hold it until the gray Apple icon and a progress bar appear. The boot up is significantly slower than normal. This will reset some caches, forces a directory check, and disables all startup and login items, among other things. When you reboot normally, the initial reboot may be slower than normal. If the system operates normally, there may be 3rd party applications which are causing a problem. Try deleting/disabling the third party applications after a restart by using the application un-installer. For each disable/delete, you will need to restart if you don't do them all at once.
Safe Mode
Safe Mode - About
General information.
Isolating issues in Mac OS X
Step by Step to Fix Your Mac
You also have 90 day telephone support from Apple Support.
Apple Support Contact
Apple Support contact - Telephone

Install Exchange server 2010 in Single forest Multiple AD domain Scenario

Hello Folks,
I am trying to install a new exchange 2010 server in an enviroment which never had exchange.
Below is the env details
1 Forest
3 AD domains
Coustmer's requirement is that he wants to install exchange in only domain and other domain will not have exchange server the domain A which has server install should host the exchange mailbox's for other 2 domains and also capable enough to handle
the mailflow of each domain with diffrent SMTP domain. Have done research but havent got the exact scenario.
Now i am confused on how to start with this project any feedback inputs would be of great help to me.
BR/Deepak

Exchange server is forest wide role, so it does not depend much on number of domains in the same forest. Usually, you install Exchange in forest root domain in your forest, and Exchange will host mailboxes from any user from entire forest. So, actually,
your scenario is supported by default :). Just go and install Exchange in one domain. As soon as you prepare other domains for Exchange recipients, you will be able to create mailboxes from all domains in your forest.
Please mark as helpful if you find my contribution useful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you. Thank you! Damir

Single Sign On Question

Hi All,
My Company has a couple of Divisions. But lets work with two divisions, Corporate and Government Divisions.
I'm currently workin on the Govmn Division. Our Intranet is protected by a firewall and users from Corporate are required to Athenticate through the Sun One Directory (LDAP). We restrict the top level directory with by the IP. If the IP is from Corp, they get the sign on request.
Before they do that though, they go through some proxy server that will feed them the pages. It's some tool by iGate (Rainbow Technologies).
My question is, what would the best solution to by pass these two sign ons? Is there anyway to send credentials to the ACL so it does not prompt the user for a login and password. I've read about the Identity server and I'm a bit confused.
Any tips, help, advice would be appreciated.
Thanks,
Tony

Hi All,
My Company has a couple of Divisions. But lets work with two divisions, Corporate and Government Divisions.
I'm currently workin on the Govmn Division. Our Intranet is protected by a firewall and users from Corporate are required to Athenticate through the Sun One Directory (LDAP). We restrict the top level directory with by the IP. If the IP is from Corp, they get the sign on request.
Before they do that though, they go through some proxy server that will feed them the pages. It's some tool by iGate (Rainbow Technologies).
My question is, what would the best solution to by pass these two sign ons? Is there anyway to send credentials to the ACL so it does not prompt the user for a login and password. I've read about the Identity server and I'm a bit confused.
Any tips, help, advice would be appreciated.
Thanks,
Tony

EXCHANGE SERVER 2013 CLIENT ACCESS ROLE BASED QUESTION

In my environment,i have to install two CAS in two different host machines and mailbox server on a different host machine.can it be possible?if possible then please tell me the procedure how can these communicate with each other?and is this a cas array?please
help me,i am confused.
trainee

Yes you can always go ahead and do this . Having 2 cas and one mailbox is not going to harm in anyways but one cas can handle all the connections as far as you have less number of users and you can have equal number of mailbox servers as well so that
you can manage the DB's btw 2 mbx servers by setting up DAG.
Please mark as helpful if you find my contribution useful or as an answer if it does answer your question.That
will encourage me - and others - to take time out to help you.
Regards,
Sathish

Single Sign On Questions

We are using Active Directory as the user store and SSO works as advertised. There is a single set of AD groups that define membership in the roles being used for security. The problem is that this means that if someone is in the financial group they can get to the financial data in all environments: dev, test and production. I am trying to figure out a way to limit access in the dev and test environments. I thought I could do it by adding a filter for a particular group on the All Users Filter in the AD provider. While this does limit the users in the security realm it doesn't prevent users not in that list from connecting to OBI through SSO. Any Ideas?
Another issue is that every instance that I have put SSO on it has broken the validateAnalysisCriteria logic that had been implemented in Answers. The system can no longer find the mycriteriablocking.js file where the code is. If you put the code into the answerstemplates.xml file it works. But I have run into problems with the size of the code that can embedded like that. If it gets over a certain size it no longer works. Putting it in an external file allows more code and thus a more complex query. But after implementing SSO it can't find the file referenced in the answerstemplates.xml. And if you roll SSO back off it still does not work. We use the validateAnalysisCriteria to prevent the combination of certain fields in a query. Perhaps there is another way to implement that kind of logic?
OBIEE 11.1.1.6.2 BP2
Windows 2008 R2 SP1

dirkt wrote:
We are using Active Directory as the user store and SSO works as advertised. There is a single set of AD groups that define membership in the roles being used for security. The problem is that this means that if someone is in the financial group they can get to the financial data in all environments: dev, test and production. I am trying to figure out a way to limit access in the dev and test environments. I thought I could do it by adding a filter for a particular group on the All Users Filter in the AD provider. While this does limit the users in the security realm it doesn't prevent users not in that list from connecting to OBI through SSO. Any Ideas?Log an SR with O. Quick workaround to stop other AD groups from accessing BI is by restricting access to OBIEE for that authenticated-role (which is everyone) who is a valid user in LDAP, you can restrict Access Home Page from Manage Privileges screen in OBIEE Administration screen.
Give Access to Home access only to the Roles you want to give access to OBIEE, who ever is not part of these roles cannot access OBIEE.
Another issue is that every instance that I have put SSO on it has broken the validateAnalysisCriteria logic that had been implemented in Answers. The system can no longer find the mycriteriablocking.js file where the code is. If you put the code into the answerstemplates.xml file it works. But I have run into problems with the size of the code that can embedded like that. If it gets over a certain size it no longer works. Putting it in an external file allows more code and thus a more complex query. But after implementing SSO it can't find the file referenced in the answerstemplates.xml. And if you roll SSO back off it still does not work. We use the validateAnalysisCriteria to prevent the combination of certain fields in a query. Perhaps there is another way to implement that kind of logic?
OBIEE 11.1.1.6.2 BP2
Windows 2008 R2 SP1Check the below links by Shahed:
http://deliverbi.blogspot.com/2013/03/obiee-11g-blocking-analysis-enforcing.html
OBIEE 11.1.1.6.8 Analysis Blocking if (!tValidator.dependentColumnExists("
HTH,
SVS

How To Setup A Local Exchange Server Integrated With Office365 For A Single Mailbox

Hello,
We recently migrated to Office365 but had an issue since we need more than 16 simultaneous connections to a single mailbox. Because of this, we need to deploy a local Exchange Server that will be used to host a single mailbox that requires up to 500 simultaneous
connections for a Contact Center application. I'm looking for information on how to setup the local Exchange Server to basically create a local instance of a mailbox hosted on Office 365. So we can have our application open the numerous simultaneous connections
to our local server which will then connection to Office 365 to send/receive email through the mailbox hosted on Office365.
Please let me know if you have any information or resources you can direct me toward.
Thanks,
Chris

Hi,
To deploy local Exchange server integrated with Office 365, we can depend on Exchange Server Deployment Assistant:
http://technet.microsoft.com/en-us/exdeploy2013/Checklist?state=2419-W-AAAAAAAAQAAAAAEAAAAAAAA%7e
Please note that there may be 9646 error if there are many simultaneous connections at the same time.
Thanks,
Angela Shi
TechNet Community Support

Fresh install of Exchange Server 2013 on Windows Server 2012 R2 Blank screen after install

Attempting to log in to the OWA I get a white screen immediately after entering credentials
When I open the Exchange Management Shell I get the error
+ New-PSSession -ConnectionURI "$connectionUri" -ConfigurationName Microsoft.Excha ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : OpenError: (System.Manageme....RemoteRunspace:RemoteRunspace) [New-PSSession], PSRemotin
gTransportException
+ FullyQualifiedErrorId : AccessDenied,PSSessionOpenFailed
Along with the above error it also says Access is denied
Im running the Exchange shell as admin
There were no errors during the install and I did everything according to the Exchange Server Deployment Assistant
At first when I attempted to log in it would say my credentials were incorrect
This is part of a active directory set up and I fulfilled all of the active directory piece.

Hi,
According your post, I understand that open EMS with error “AccessDenied,PSSessionOpenFailed” after fresh install Exchange 2013.
If I misunderstand your concern, please do not hesitate to let me know.
Please follow below steps for troubleshooting:
1. Reboot the server, usually fixes this error.
2. Make sure your authentication settings on your virtual directory for PowerShell is correct.
Internet Information Services (IIS) Manager, <Servername>, Sites, Default Web Site, PowerShell and in the right panel, scroll down to the Authentication module, then make sure that Anonymous access is disabled and Windows Authentication is
enabled.
3. Double check the configuration of HTTP binding on Default Web Site in Internet Information Services (IIS).
4. Run Get-User Identity | FL *power* to check whether the current logged in user has remote powershell enabled.
If the issue persists, please try to remove the PowerShell virtual directory and renew for testing.
Additional, I find an similar thread about your question, for your reference:
https://social.technet.microsoft.com/Forums/windows/en-US/29b3284a-36e1-43b0-87b8-63ee4500f265/exchange-2013-ems-throwing-access-denied-error-and-toolbox-giving-mmc-error?forum=exchangesvradmin
Thanks
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
Allen Wang
TechNet Community Support

Exchange Server Installation

Good day Sir/ Mam
Based on installing Exchange Server 2013 on Windows Server 2012. What are the prerequisites if one wants to install it on the member server?

Hi Simtandile,
It depends basically which role you are deploying.
Considerting its the first Exchange Server in your environment, below are the generic requirements.
The computer you want to use to prepare Active Directory for Exchange 2013 has specific prerequisites that must be met.
Install the following software on the computer that will be used to prepare Active Directory:
Microsoft .NET Framework 4.5
The version of Windows Management Framework that corresponds to the version of Exchange 2013 you're installing.
Exchange 2013 CU3
Windows Management Framework 3.0
Exchange 2013 SP1 or later
Windows Management Framework 4.0
Note:
.NET Framework 4.5 and Windows Management Framework 3.0 are included with Windows Server 2012 and don't need to be installed separately.
.NET Framework 4.5 and Windows Management Framework 4.0 are included with Windows Server 2012 R2 and don't need to be installed separately.
NOTE:- WindowsServer2012R2 would require minimum ExchangeServer2013SP1 to work properly.
Exchange 2013 prerequisites
http://technet.microsoft.com/en-us/library/bb691354(v=exchg.150).aspx
I would recommend you using the
Exchange Server Deployment Assistant for deploying it.
Regards,
Satyajit
Please “Vote As Helpful”
if you find my contribution useful or “Mark As Answer” if it does answer your question. That will encourage me - and others - to take time out to help you.

Sizing a very small Exchange 2013 deployment

Hi,
I'm currently running Exchange 2007 SP3 on Windows 2003 so I'm starting the process of migrating to Exchange 2013. Our current Exchange 2007 configuration is very small with 31 users and an Exchange mailbox size of around 100 GB right now. Our current
Exchange 2007 box has a Xeon CPU with hyper-threading so I've got two CPUs and it has 6 GB of memory. I've got two Raided drives for the C and D with the Exchange 2007 software and mailbox on the D drive. The performance of this server is adequate though it's
beginning to get a little slow. We also have an SCR replica server that is virtualized.
So I'm trying to figure out what would be an appropriate new server size should be and I've looked at all the server sizing information and looked at the Microsoft provided sizing calculator workbook but even the smallest example is for a server with 1000
users which is clearly way more than what I have.
Given what I've read, I was going to go with the following hardware:
- New very fast Xeon CPU with at least 8 cores
- 16 GB of memory, possibly 24 GB
- Raided drives for the C, and D, and possibly an E drive to separate the database and log files. Probably 250 GB for the OS and 1 TB each for the data drives.
Any thoughts on this? Also if anyone has any links for sizing that are a little more specific to smaller deployments that would be very helpful.
Thanks
Nick

Nike,
CUP & Memory (24GB) should be good as you only have very few users to handle.
On the Disk, Make sure they are Fast & The recommended RAID configuration for mailbox drive is RAID-1/0
I would recommend you to take a look at the below links
Exchange 2013 system requirements
https://technet.microsoft.com/en-us/library/aa996719%28v=exchg.150%29.aspx
Exchange Server Deployment Assistant
https://technet.microsoft.com/en-us/exdeploy2013/Checklist?state=2419-W-AAAAAAAAQAAAAAEAAAAAAAA~
Shekhar.K - Microsoft Exchange Admin.

No Exchange Pre Deployment Analyzer?

Hi
I am looking to deploy Exchange 2013 and I cannot see any evidence of an exPDA package. Is there not one for 2013?
This was really useful for Exchange 2003 to 2010 and highlighted three issues which were resolved pre-install.
Kind Regards
Steven

Hi,
Currently, there is no official documents about the Exchange Pre-Deployment Analyzer for Exchange 2013.
The tools that we can use when we decide to install Exchange 2013 have been suggested above.
Microsoft Exchange Server Jetstress 2013 Tool
Microsoft Exchange Server Deployment Assistant
Office 365 Best Practices Analyzer
Besides, here is a blog about Office 365 Best Practices Analyzer for Exchange 2013.
http://blogs.technet.com/b/exchange/archive/2013/10/01/beta-of-microsoft-office-365-best-practices-analyzer-for-exchange-server-2013-now-available.aspx
Thanks for understanding.
Best regards,
Belinda Ma
TechNet Community Support

Public Folder in exchange server 2013

We are using an legacy application developed in Classic ASP. In this application we are rendering the message items in the public folder on the exchange server 2003.
Now we are going to migrate our exchange server 2003 to exchange server 2013.
Do exchange server 2013 have public folder? Is this migration have impact on the public folders usage.
Please let me know for any clarifications.

There will be no co-existence support for Exchange Server 2003. In your scenario, you will have to migrate twice, once from Exchange 2003 to Exchange 2007 or 2010, then again to Exchange 2013 or another option you have to proceed that by using any third-party
migration tool to accomplish this task in one go. When you preparing to migrate mailbox, you can have a look at
exchange server deployment assistant to see the current recommended steps for your configuration. A good resource for swing migration direct from exchange 2003 to 2013 can be explored at
here.
In the same way, You cannot migrate public folders directly from Exchange 2003. You will have to move all public folder databases and replicas to Exchange 2007 SP3 RU10 or later. No public folder replicas can remain on Exchange 2003.
I would like to refer on couple of links mentioned below. It will help you better to clarify the scenario further :
Understanding the public folder architecture
Public folder migration

Preparing Lab for Exchange hybrid deployment

Dear All,
I would like to practice Exchange 2013 with office 365 lab environment(Hybrid deployment). I need
to prepare this lab setup without having internet connection.
Note :
Please find the below Hyper V servers which i am planning to use for hybrid deployment:
Onpremise servers:
1 Dc
1 Exch 2013
2 Adfs server
2 Adfs Proxy server
1 DRSync server & 1 TMG server
I need to create a Virtual Exchange online office 365 domain to make a hybrid connection with the onpremise servers.
How to acheive this setup.
Kindly Advise
Regards
kamparth

Follow the Exchange server deployment assistant(reference is mentioned above) that is available from Microsoft team and would be an appropriate approach for you.
Meanwhile, you may also walk through this another informative article that covers all the required aspects and provides step-wise instructions to accomplish this job :
http://www.msexchange.org/articles-tutorials/office-365/exchange-online/configuring-exchange-2013-hybrid-deployment-migrating-office-365-exchange-online-part1.html
Moreover, if you are still concerned about the data security, you may consider on this automated solution (http://www.exchangemailboxmigration.com/) that could be an appropriate solution to get this
job done in a hassle-free manner without having any interruption.

Exchange Server Deployment Assistant - Single Sign On Question

Similar Messages

Maybe you are looking for