MEC 2014 4/19/2017 7:51 PM © 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks.

Slides:



Advertisements
Similar presentations
Welcome to the Exchange 2013 Webcast Deployment & Coexistence.
Advertisements

HTTP HyperText Transfer Protocol. HTTP Uses TCP as its underlying transport protocol Uses port 80 Stateless protocol (i.e. HTTP Server maintains no information.
Web basics HTTP – – URI/L/Ns – HTML –
Chapter 9 Application Layer, HTTP Professor Rick Han University of Colorado at Boulder
How the web works: HTTP and CGI explained
TCP/IP Protocol Suite 1 Chapter 22 Upon completion you will be able to: World Wide Web: HTTP Know how HTTP accesses data on the WWW Objectives.
Web, HTTP and Web Caching
1 of 3 Open Outlook On the Tools menu, click Account Settings. 1 Enable Outlook Anywhere 2 Click your Microsoft Exchange account, and then click.
1 of 3 This document is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS DOCUMENT. © 2007 Microsoft Corporation.
HTTP Overview Vijayan Sugumaran School of Business Administration Oakland University.
Hypertext Transport Protocol CS Dick Steflik.
Client, Server, HTTP, IP Address, Domain Name. Client-Server Model Client Bob Yahoo Server yahoo.com/finance.html A text file named finance.html.
 What is it ? What is it ?  URI,URN,URL URI,URN,URL  HTTP – methods HTTP – methods  HTTP Request Packets HTTP Request Packets  HTTP Request Headers.
TechEd /20/2017 2:02 AM © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks.
1 Advanced Application and Web Filtering. 2 Common security attacks Finding a way into the network Exploiting software bugs, buffer overflows Denial of.
Managing Client Access
Module 4 Managing Client Access. Module Overview Configuring the Client Access Server Role Configuring Client Access Services for Outlook Clients Configuring.
Understanding Integrated Authentication in IIS Chris Adams IIS Supportability Lead Microsoft Corp.
Module 10: Designing an AD RMS Infrastructure in Windows Server 2008.
Web technologies and programming cse hypermedia and multimedia technology Fanis Tsandilas April 3, 2007.
HTTP; The World Wide Web Protocol
Session 11: Security with ASP.NET
Simple Web Services. Internet Basics The Internet is based on a communication protocol named TCP (Transmission Control Protocol) TCP allows programs running.
Java Technology and Applications
SUNY Polytechnic Institute CS 490 – Web Design, AJAX, jQuery Web Services A web service is a software system that supports interaction (requesting data,
Krerk Piromsopa. Web Caching Krerk Piromsopa. Department of Computer Engineering. Chulalongkorn University.
MCSE Guide to Microsoft Exchange Server 2003 Administration Chapter Four Configuring Outlook and Outlook Web Access.
User CAS DAG For any given mailbox’s connectivity, the user is always served by the server that hosts the active database copy Each CAS determines.
FTP (File Transfer Protocol) & Telnet
Simple Web Services. Internet Basics The Internet is based on a communication protocol named TCP (Transmission Control Protocol) TCP allows programs running.
CSC 2720 Building Web Applications Getting and Setting HTTP Headers (With PHP Examples)
CP476 Internet Computing Lecture 5 : HTTP, WWW and URL 1 Lecture 5. WWW, HTTP and URL Objective: to review the concepts of WWW to understand how HTTP works.
Application Layer 2 Figures from Kurose and Ross
Rensselaer Polytechnic Institute Shivkumar Kalvanaraman, Biplab Sikdar 1 The Web: the http protocol http: hypertext transfer protocol Web’s application.
Maryam Elahi University of Calgary – CPSC 441.  HTTP stands for Hypertext Transfer Protocol.  Used to deliver virtually all files and other data (collectively.
Sistem Jaringan dan Komunikasi Data #9. DNS The Internet Directory Service  the Domain Name Service (DNS) provides mapping between host name & IP address.
Browser Web Server Users DB 2a. Redirect to login page plugin 1. access a protected page Login Web Server (https) aislogin.cern.ch edh.cern.ch 3a. Set.
RPC Over HTTPS - Mailbox Access Note – OS & Outlook (2007/2010) should be fully patched with latest service pack and patches.
Scott Schnoll m Microsoft Corporation.
Exchange Server versionForest "rangeUpper" attribute of ms-Exch-Schema-Version-Pt Exchange 2000 Server RTM4397 Exchange 2000 Server SP34406.
Module 4 Planning and Deploying Client Access Services in Microsoft® Exchange Server 2010 Presentation: 120 minutes Lab: 90 minutes After completing.
Proxy Lab Recitation I Monday Nov 20, 2006.
HTTP1 Hypertext Transfer Protocol (HTTP) After this lecture, you should be able to:  Know how Web Browsers and Web Servers communicate via HTTP Protocol.
Web Server Design Week 4 Old Dominion University Department of Computer Science CS 495/595 Spring 2010 Martin Klein 2/03/10.
Module 6: Managing Client Access. Overview Implementing Client Access Servers Implementing Client Access Features Implementing Outlook Web Access Introduction.
CIS679: Lecture 13 r Review of Last Lecture r More on HTTP.
1-1 HTTP request message GET /somedir/page.html HTTP/1.1 Host: User-agent: Mozilla/4.0 Connection: close Accept-language:fr request.
WWW: an Internet application Bill Chu. © Bei-Tseng Chu Aug 2000 WWW Web and HTTP WWW web is an interconnected information servers each server maintains.
Appendix E: Overview of HTTP ©SoftMoore ConsultingSlide 1.
Operating Systems Lesson 12. HTTP vs HTML HTML: hypertext markup language ◦ Definitions of tags that are added to Web documents to control their appearance.
CITA 310 Section 2 HTTP (Selected Topics from Textbook Chapter 6)
Pertemuan #10 Secure HTTP (HTTPS) Kuliah Pengaman Jaringan.
HTTP Here, we examine the hypertext transfer protocol (http) – originally introduced around 1990 but not standardized until 1997 (version 1.0) – protocol.
Exchange Server versionForest "rangeUpper" attribute of ms-Exch-Schema-Version-Pt Exchange 2000 Server RTM4397 Exchange 2000 Server SP34406 Exchange.
EE 122: Lecture 21 (HyperText Transfer Protocol - HTTP) Ion Stoica Nov 20, 2001 (*)
Summer 2007 Florida Atlantic University Department of Computer Science & Engineering COP 4814 – Web Services Dr. Roy Levow Part 1 – Introducing Ajax.
5 th ed: Chapter 17 4 th ed: Chapter 21
Overview of Servlets and JSP
ProductExchange 2013 SP1Exchange 2013 RTMExchange 2010 SP3Exchange 2007 SP3 Outlook 2013 SP1 or later MAPI over HTTP Outlook Anywhere Outlook Anywhere.
PHP Security Ryan Dunn Jason Pack. Outline PHP Overview PHP Overview Common Security Issues Common Security Issues Advanced Security Issues Advanced Security.
World Wide Web r Most Web pages consist of: m base HTML page, and m several referenced objects addressed by a URL r URL has two components: host name and.
Week 11: Application Layer 1 Web and HTTP r Web page consists of objects r Object can be HTML file, JPEG image, Java applet, audio file,… r Web page consists.
Web Protocols: HTTP COMP6017 Topics on Web Services Dr Nicholas Gibbins –
Simple Web Services. Internet Basics The Internet is based on a communication protocol named TCP (Transmission Control Protocol) TCP allows programs running.
DEV336. demo HTTP Packet Trace GET / HTTP/1.1 Accept: text/html, application/xhtml+xml, */* Accept-Language: en-US User-Agent: Mozilla/5.0 (compatible;
Microsoft Exchange Server 2013 Security Mick Tomlinson– Technical Instructor New Horizons.
Fiddler and Your Website Robert Boedigheimer. About Me Web developer since 1995 Columnist for aspalliance.com Pluralsight Author 3 rd Degree Black Belt,
Autodiscover is Hero of Exchange Motherland!
Hypertext Transfer Protocol
Implementing Exchange Server 2013
Presentation transcript:

MEC 2014 4/19/2017 7:51 PM © 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Outlook Connectivity: Current & Future 4/19/2017 7:51 PM USX207 Outlook Connectivity: Current & Future Guy Groeneveld Principal Premier Field Engineer Rafiq El Alami Principal Program Manager Lead Venkat Ayyadevara © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Outline Protocols for Outlook to connect to Exchange Key takeaways Outlook Anywhere MAPI over HTTP Key takeaways How to configure and troubleshoot Outlook Anywhere Advantages of MAPI over HTTP and how to configure the protocol Protocol you should be using based on your environment

Outlook Anywhere 4/19/2017 7:51 PM © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Overview of Outlook Anywhere Half duplex protocol Outlook opens 1 RPC session which gets split in 2 HTTP sessions RPC_IN_DATA & RPC_OUT_DATA HTTP maintained up to the RPC Proxy server The RPC Proxy server then connects like an RPC client to the Exchange server

Outlook Anywhere Configuration Use Set-OutlookAnywhere or partly on the EAC External/Internal Hostname sets the URLs that will be used Authentication sets the authentication method used to connect SSL required or not client side SSL Offloading defines if SSL is required server side Set-OutlookProvider not needed anymore to configure certificate Since it was only needed for expired (or soon to be) versions of Windows

Autodiscover is Your Best & Only Friend MEC 2014 4/19/2017 7:51 PM Autodiscover is Your Best & Only Friend Autodiscover will advertise the configuration to the client Make sure the server side match client side © 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

sends Autodiscover Request MEC 2014 4/19/2017 7:51 PM How It Works Domain Controller Outlook Outlook sends Autodiscover Request to build profile Microsoft.Exchange.FrontEnd.Proxy.dll Consumes the remaining part of the URL Mailbox_GUID@contoso.com:6001 Retrieves the mailbox from AD and active database Generates the new URL to be used RPC Client Access Service verifies mailbox GUID and user used for SSL authentication to grant mailbox access RPCProxy Dll Parses the http header to retrieve Session GUID/User and passes it with the RPC request To the RPC Client Access Service RPC Client Access Service Handles Outlook directory Requests Based on authenticated user Autodiscover retrieves mailbox settings The CAS authenticate the user Outlook opens two sessions on Https://mail.contoso.com/RPC with Negotiate For RPC_IN_DATA and RPC_OUT_DATA Microsoft.Exchange.FrontEnd.Proxy.dll opens https connection on port 444 https://mbxserver.contoso.com:444/rpc/ The CAS proxies the autodiscover request to the Mailbox role Autodiscover sends Xml user configuration To build the profile Outlook Profile: Outlook anywhere URL mail.contoso.com Authentication to be used to access IIS Negotiate Exchange Server Mailbox_GUID@contoso.com Certificate msstd:mail.guygonprem.com Client Access Server Mailbox Server Outlook Anywhere configuration Internal/External Host Name Mail.contoso.com Client Authentication Negotiate Client Require SSL True Mbxserver.contoso.com RPC Client Access service Retrieves Mailbox content and sends it back Outlook built URL: Https://mail.contoso.com/RPC/RPCProxy.dll?Mailbox_GUID@contoso.com:6001 Target database being on mbxserver the proxy dll builds the URL: https://mbxserver.contoso.com:444/rpc/rpcproxy.dll?mbxserver.contoso.com:6001 To make this animation more understandable Only MAPI connection is described in this slide CAS and Mailbox roles were separated © 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Achieving Kerberos Authentication Uses Alternate Service Account like for Exchange 2010 Enabled when Outlook Anywhere client authentication method is set to “Negotiate” Can’t be used when needing to access Exchange 2010 or Exchange 2007 resources within pure Outlook Anywhere environment See KB2834139 For more information on Kerberos, check out recording of: Ready, set, deploy: Exchange Server 2013 http://mymec.iammec.com/Sessions/Details/14150 Monday, 1:15 PM - 2:30 PM , Ballroom DEFG

Troubleshooting Basics Follow Best Practices Apply the recommended hotfixes (See KB2625547) Always match Outlook Anywhere server configuration with client configuration Check certificates Validity Subjects When changing Outlook Anywhere settings Verify in IIS Admin that the changes got replicated Restart “Microsoft Exchange Host Service” to force IIS update Recycle the Autodiscover application pool on Mailbox role to clear its cache

Troubleshooting Tools Guided Walkthrough Outlook Connectivity Guided Walkthrough (Exchange On-Premises) http://aka.ms/A4fkkx Office 365 Outlook Guided Walkthrough http://aka.ms/Rzigwg Configuration Validation and Troubleshoot Office Configuration Analyzer Tool (OffCAT) http://aka.ms/kz3l8t https://testconnectivity.microsoft.com/ Outlook Connection Status Outlook Test E-Mail Autoconfiguration Debugging Outlook and Server logging

Outlook Anywhere Summary Keep Outlook up to date Configure Outlook Anywhere correctly Make sure client part and server part match Don’t change the server side parameters unless needed Rely on Autodiscover Autodiscover is your best friend Don’t change anything that can be configured automatically

4/19/2017 7:51 PM MAPI over HTTP © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

What's New in Authentication for Outlook 2013 MEC 2014 4/19/2017 7:51 PM Why MAPI over HTTP? Better Customer Experience Faster Connect Times to Exchange Designed for wireless and remote connectivity Faster Innovations Multi-Factor Authentication Single Sign-on Standard, Simple and Direct Simplified Architecture Uses HTTP request/response pattern + Hanging request for notifications, similar to OWA & EAS. For more info on Outlook Multi-Factor Auth, check out: What's New in Authentication for Outlook 2013 USX.303 Wednesday, 1-2:15 PM, Ballroom G © 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

What is MAPI over HTTP? Transport replacement for Outlook Anywhere MEC 2014 4/19/2017 7:51 PM What is MAPI over HTTP? Transport replacement for Outlook Anywhere Conforms to HTTP/1.1 protocol specification Based on HTTPS web requests Uses well known POST verb exclusively Connectionless, but still stateful Reduced complexity No inner/outer channels, dual channel auth No paired in/out connections Session not tied to connection Clearly defined protocol expectations and timeouts No infinitely long request/response © 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

MAPI over HTTP & Autodiscover MEC 2014 4/19/2017 7:51 PM MAPI over HTTP & Autodiscover 1. Autodiscover request w/ X-MapiHttpCapability = 1 (protocol version) 2. Autodiscover response w/ MAPI/HTTP info 3. Outlook restarted 4. Outlook connects to Exchange using MAPI/HTTP Outlook 2013 SP1 Exchange 2013 SP1 w/ MAPI/HTTP enabled © 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Sync Start for Resume from Hibernate 4/19/2017 7:51 PM Sync Start for Resume from Hibernate ❶ 80%+ of MAPI/HTTP Sync Start less than 30s compared to 40s+ for Outlook AnyWhere when resuming from hibernation ❷ New Pause/Resume Logic increases the # of syncs starting in less than 5 seconds ❸ New connections ❶ ❸ ❷ # of seconds to start Sync (cumulative) # of seconds to start sync © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Start Sync from Outlook Restart 70% of sessions started sync in less than 30s for MAPI/HTTP Vs 90s for Outlook AnyWhere # of seconds to start Sync from Outlook Restart (Cummulative)

Faster Connect Time Outlook Anywhere MAPI over HTTP 4/19/2017 7:51 PM © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

MAPI over HTTP & Outlook Anywhere 4/19/2017 7:51 PM MAPI over HTTP & Outlook Anywhere MAPI/HTTP is a long-term replacement for Outlook Anywhere. Co-existence supported with older Exchange and Outlook versions that don’t support MAPI/HTTP. Outlook Anywhere support will be removed as non-MAPI/HTTP Outlook versions are phased out. Future innovation, especially for authentication, will be centered around MAPI/HTTP. Outlook support for MAPI/HTTP Outlook 2013 SP1 Outlook 2010 support planned. Exchange support for MAPI/HTTP Shipped in Exchange 2013 SP1, OFF by default. MAPI/HTTP being rolled out in phases through Office 365. © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Demo – MAPI/HTTP Connecting using MAPI/HTTP and Outlook Anywhere Diagnostics Example

Deploying & Managing MAPI over HTTP MEC 2014 4/19/2017 7:51 PM Deploying & Managing MAPI over HTTP © 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Enabling MAPI over HTTP - Prerequisites Read this article first http://technet.microsoft.com/en-us/library/dn635177(v=exchg.150).aspx Install .NET framework 4.5.1 for optimal MAPI/HTTP perf Upgrade CAS and Mailbox servers to Exchange 2013 SP1. All CAS servers MUST be upgraded before enabling MAPI/HTTP for the org. Exchange CU5 required for Outlook to connect to same-forest legacy public folder using RPC. Upgrade Outlook clients to latest Outlook 2013 PU (SP1+) April 2014 Click-to-Run/CU or May 2014 PU eliminates restart prompt

Installing .NET 4.5.1 Really Helps … Poor Outlook user experience After 4.5.1 Installed

Enabling MAPI over HTTP - Configuration Configure MAPI/HTTP virtual directory on all Client Access servers Set-MapiVirtualDirectory -Identity "Contoso\mapi (Default Web Site)" -InternalUrl https://Contoso.com/mapi -IISAuthenticationMethods Negotiate Certificate used by Exchange must: Include InternalUrl & ExternalUrl Be trusted by Outlook. Verify load balancers, reverse proxies, and firewalls are configured to allow access to MAPI/HTTP virtual directory. UAG SP3 not compatible w/ MAPI/HTTP even w/ all filtering options disabled. Support is coming. Enable MAPI/HTTP for your organization Set-OrganizationConfig -MapiHttpEnabled $true

Enabling MAPI over HTTP - Validation Test end-to-end MAPI/HTTP connection. Test-OutlookConnectivity -RunFromServerId ContosoMail -ProbeIdentity OutlookMapiHttpSelfTestProbe Microsoft Exchange Health Manager (MSExchangeHM) service must be started. Inspect MAPI/HTTP logs CAS: %ExchangeInstallPath%Logging\HttpProxy\Mapi\ Mailbox: %ExchangeInstallPath%Logging\MAPI Client Access\ Mailbox: %ExchangeInstallPath%Logging\MAPI Address Book Service\ Check Outlook connection status dialog

Outlook Connection Status Dialog

Plan it the right way – Exchange Server 2013 sizing scenarios MAPI over HTTP – Sizing Multi-role deployment Impact minimized even w/ higher CAS CPU utilization Dedicated role deployment Recommend 3:8 ratio for CAS to Mailbox processor cores (50% increase). Multi-Role Deployment Examples Customer RTM Guidance SP1 Guidance Customer 2 94% CPU at peak 102% CPU at peak Customer 3 82% 88% Customer 4 74% 80% Customer 5 44% 47% Customer 6 42% 45% Dedicated Role Deployment Example Customer 1 23 CAS / Site 33 CAS / Site For overall info on Sizing, check out recording of: Plan it the right way – Exchange Server 2013 sizing scenarios http://mymec.iammec.com/Sessions/Details/14144 Tuesday, 1:30-2:45 PM, Ballroom E

MAPI/HTTP – Performance w/ Perfect Network Higher CPU usage due to higher request rate. 50% increase in CAS CPU requirements. Lower memory usage on CAS and Mailbox with connection optimizations. 50-60% reduction on a per-user basis observed in Microsoft environment. 128 byte buffer for 1 MAPI/HTTP long-lived connection vs. 32 KB buffer for 2 OA connections Lower connection count due to request/response + notification pattern. Connection reduction of 0-50% based on user activity. 1 connection for idle client & 2 connections for completely active Outlook per mailbox Higher bytes over wire due to MAPI/HTTP headers. 1.4% (4% vs. 2.8%) increase in packet size over Outlook Anywhere for average 50 KB packet size. 5-10% increase in bytes over wire for data transfer larger than 10MB

If You are on Office 365 … Don’t worry about server configuration or sizing Autodiscover, and only Autodiscover, will do the work Outlook and Exchange negotiate the best protocol to use Deploy latest Outlook 2013 updates Take advantage of continuous improvements to Outlook connectivity

Wrap Up

Protocols & Versions Product Exchange 2013 SP1 Exchange 2013 RTM 4/19/2017 7:51 PM Protocols & Versions Product Exchange 2013 SP1 Exchange 2013 RTM Exchange 2010 SP3 Exchange 2007 SP3 Outlook 2013 SP1 or later MAPI over HTTP Outlook Anywhere Outlook Anywhere RPC Outlook Anywhere Outlook 2013 RTM Outlook 2010 Outlook Anywhere* Outlook 2007 * MAPI over HTTP Support Planned © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

What’s Next for MAPI over HTTP Short-term (1st half of 2014) Enable Outlook to access legacy public folders using RPC (CU5) when organization is enabled for MAPI/HTTP. Eliminate Outlook restart prompt for connected clients when switching to MAPI over HTTP (Outlook 2013 May 2014 Public Update). Later … Add MAPI virtual directory management to Exchange Admin Center (EAC). Enable testconnectivity.microsoft.com to work with MAPI/HTTP. Investigate server-side per-user setting to enable MAPI/HTTP. Drive down CPU utilization by decreasing protocol chattiness. For more info on new Outlook features, check out recording of: What's New in Outlook 2013 and Beyond http://mymec.iammec.com/Sessions/Details/14140 Wednesday, 8:30-9:45 AM, Ballroom G

MAPI over HTTP Summary MAPI/HTTP is a long-term replacement for Outlook Anywhere. Added value for customers. Staying connected w/ server consolidation & increased use of wireless networks. Designed for smooth deployment – coexistence w/ Outlook Anywhere Enable MAPI/HTTP for your organization Review http://technet.microsoft.com/en-us/library/dn635177(v=exchg.150).aspx Prepare your environment per sizing guidance. Feedback welcome on your experience For Q&A on Exchange Client Access, check out Experts Unplugged: Architecture – Client Access and Connectivity ARC.UN.301-R Wednesday, 1-2:15 PM, 13ab For Q&A on Outlook 2013, check out Experts Unplugged: Outlook 2013 USX.UN.301 Wednesday, 2:45-4 PM, 18d

Appendix

Autodiscover Response for MAPI/HTTP 4/19/2017 7:51 PM Autodiscover Response for MAPI/HTTP <Protocol Type="mapiHttp" Version="1"> <MailStore> <InternalUrl>https://bos.mail.corp.contoso.com/mapi/emsmdb/?MailboxId =<guid>@contoso.com</InternalUrl> <ExternalUrl>https://bos.mail.contoso.com/mapi/emsmdb/?MailboxId =<guid>@contoso.com</ExternalUrl> </MailStore> <AddressBook> <InternalUrl>https://bos.mail.corp.contoso.com/mapi/nspi/?MailboxId <ExternalUrl>https://bos.mail.contoso.com/mapi/nspi/?MailboxId </AddressBook> </Protocol> Latest version supported by server AND client enables protocol changes without breaking Outlook Settings to connect to Mailbox Internal endpoint - URL used AS IS by Outlook External endpoint Settings to connect to Directory © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

MAPI over HTTP Request Common HTTP verb 4/19/2017 7:51 PM MAPI over HTTP Request POST /mapi/emsmdb/?MailboxId=aba9a257-88b1-401c-9db8-e395cfbce1a0@contoso.com HTTP/1.1 Cache-Control: no-cache Connection: Keep-Alive Pragma: no-cache Content-Type: application/octet-stream Accept: application/octet-stream User-Agent: Microsoft Office/15.0 (Windows NT 6.2; Microsoft Outlook 15.0.4526; Pro) X-ClientInfo: {A7A47AAD-233C-412B-9D10-DDE9108FEBD7}-5 X-RequestId: {16AC2587-EED8-48EB-8A7B-D48558B68BD7}:1 X-RequestType: Connect Content-Length: ? Host: mail.contoso.com Authorization: Basic Tm90IHJlYWxseSBhIHBhc3N3b3JkIHN0cmluZw== [REQUEST DATA] Common HTTP verb Identifies endpoint and mailbox being accessed. Tells server the type of request to perform. Connect -> EcDoConnectEx Disconnect - > EcDoDisconnect Execute -> EcDoRpcExt2 NotificationWait -> EcDoAsyncWaitEx Uniquely identifies an Outlook instance for server failure logging. Uniquely identifies a client request for server failure logging & client failure tracing. Serialized request properties. Format specific to request type header. © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

MAPI over HTTP Response 4/19/2017 7:51 PM MAPI over HTTP Response HTTP/1.1 200 OK Cache-Control: private Transfer-Encoding: chunked Content-Type: application/octet-stream X-ClientInfo: {A7A47AAD-233C-412B-9D10-DDE9108FEBD7}-5 X-RequestType: Connect X-RequestId: {16AC2587-EED8-48EB-8A7B-D48558B68BD7}:1 X-ExpirationInfo: 900000 X-ResponseCode: 0 Set-Cookie: MapiContext=iDmMObVmkEGJfzZb1M7jQbdrAAAAAAAA; path=/mapi/emsmdb/ Set-Cookie: MapiSequence=0-/Ww5Bg==; path=/mapi/emsmdb/ Persistent-Auth: false Date: Mon, 21 Jun 2013 12:13:14 GMT [RESPONSE BODY] Return a 200 HTTP status except for Auth failure. Protocol failures in X-ResponseCode header. Quickly acknowledge request, update client of pending request status periodically before sending response data. Exchange echoes what the client passed up. Successful “Connect” returns session context as cookie(s). Outlook passes them back on subsequent requests. Zero == No MAPI/HTTP protocol level failures. Response body contains PENDING markers followed by serialized response data. © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Pre-Release Programs Team Be first in line! Go to the Pre-Release Programs Booth Tell us about your Office 365 environment/or on premises plans Get selected to be in a program Try new features first and give us feedback! Start now at: http://prereleaseprograms-public.sharepoint.com/

4/19/2017 7:51 PM © 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION. © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.