06 | Planning Exchange Online and Configuring DNS Records Anthony Steven | Principal Technologist, Content Master Martin Coetzer | Portfolio Architect, Microsoft

Module Overview Configure DNS Records for Services

Plan for Exchange Online Plan for Data Loss Prevention Plan for Exchange Online Administration

Exchange Online Feature Requirements 6: Planning Exchange Online and Configuring DNS Records   Architecture Current email system Features User requirements Usability Reliability Security Manageability Regulatory

Common Exchange Online Planning Factors 6: Planning Exchange Online and Configuring DNS Records Mailbox sizes Bandwidth Directory health Mail delivery Domain Name System Communications and Training Blocked file types This slide is not meant to provide detailed planning guidance, but to identify the common factors with all email migration or coexistence plans.

Plan Client Requirements 6: Planning Exchange Online and Configuring DNS Records Consider the following general issues when planning client requirements: Go through the different planning factors and the table in the topic. Explain that this is an overview of the different client options and some of these are covered in the Office 365 ProPlus module as well. Versions Platform type Operating system or mobile operating system Client type Browser type User requirements User location Connection type Bandwidth Deployment Training Management

Plan for Outlook Web Access 6: Planning Exchange Online and Configuring DNS Records Do you want OWA enabled or disabled globally? Do you want to enable or disable it by user? Do you want to enable or disable OWA on mobile devices? How many different OWA policies do you need and with what settings? Which features do you want to enable or disable by default? What browsers will users have to access OWA? Do you want to enable or disable offline usage? Highlight how OWA is automatically set up and easy to configure through the Admin console or EMC.

Plan for Exchange ActiveSync 6: Planning Exchange Online and Configuring DNS Records Do you want EAS enabled or disabled globally? Do you want to enable or disable it by user? How do you want to control security on mobile devices? How many different EAS policies do you need and with what settings? Which settings do you want to enable or disable by default? What policies will apply to users’ personal devices? Run through the planning decisions about EAS that they need to consider.

Plan for eDiscovery and In-Place Hold 6: Planning Exchange Online and Configuring DNS Records Are eDiscovery and in-place hold policies required? On which mailboxes? What information should be harvested? How many discovery mailboxes are required? Is legal hold supported in the subscription? How many days should items be held? Who will have rights to view eDiscovery items? Explain that this topic is just intended to be a summary of the feature, not an in-depth explanation. Keep the highlight on the planning factors and point students to the URL. There will be more on implementing this feature in the next module.

Plan for Data Loss Prevention 6: Planning Exchange Online and Configuring DNS Records What information must we protect? How can be best protect that information? How is the data formatted? What do we want users to be able to do if there is a policy match? What levels of auditing must we apply? Does the DLP policy need timings defined? Explain that this topic is just intended to be a summary of the feature, not an in-depth explanation. Keep the highlight on the planning factors and point students to the URL. There will be more on implementing this feature in the next module.

Plan for Retention Do we need retention policies? 6: Planning Exchange Online and Configuring DNS Records Do we need retention policies? Can we just use the default settings? Do we need additional policies and tags? To which users should retention polices apply? Explain that this topic is just intended to be a summary of the feature, not an in-depth explanation. Keep the highlight on the planning factors and point students to the URL. There will be more on implementing this feature in the next module.

Plan for Journaling Who to journal What to journal 6: Planning Exchange Online and Configuring DNS Records Who to journal What to journal Where to send the journal messages to Where to send journal NDRs Explain that this topic is just intended to be a summary of the feature, not an in-depth explanation. Keep the highlight on the planning factors and point students to the URL. There will be more on implementing this feature in the next module.

Plan for Archiving Client compatibility Availability Compliance 6: Planning Exchange Online and Configuring DNS Records Client compatibility Availability Compliance Training Policies Again, explain that this topic is just intended to be a summary of the feature, not an in-depth explanation. Keep the highlight on the planning factors and point students to the URL. There will be more on implementing this feature in the next module.

Plan for Mail Delivery with Hybrid Exchange 6: Planning Exchange Online and Configuring DNS Records Incoming routing Through on-premises – no change to DNS MX records and on-premises forwards messages to online mailboxes Through EOP – process depends on whether centralized message handling is enabled Outgoing routing Direct to recipient – when centralized message handling is disabled Through on-premises - when centralized message handling is enabled  

Plan for Exchange Online Protection 6: Planning Exchange Online and Configuring DNS Records External global email domains Cloud-only Hybrid On-premises only EOP with Exchange Online EOP Standalone Incoming and outgoing Centralized Mail Handling MX=EOP MX=EOP or on-premises Go through the delivery options for the three scenarios. Explain that the slide does not show all those options but trace out the possible paths.

Plan for Exchange Online Administration 6: Planning Exchange Online and Configuring DNS Records Confirm you know what you want Exchange Online to achieve Create or apply a change management framework Set up a change log system to record changes Record any changes to the environment to the documentation system Identify administrative roles and tasks Map roles and tasks to existing role groups Define additional administrative role groups as required Identify training requirements for administrators and deliver training Assign users to administrative role groups Monitor the environment Go through each of the stages and ensure the students understand the flow.

Configure DNS Records for Services Recommendations for Configuring DNS Records

DNS and Office 365 Services 6: Planning Exchange Online and Configuring DNS Records Service Record Function Office 365 CNAME Directs authentication to the right identity platform. Speeds up authentication, otherwise clients will authenticate to Office 365 in the USA. Domain verification TXT Verifies domain ownership. No other function. Exchange Online Enables autodiscover for Outlook clients MX Routes incoming mail to Exchange online SPF (TXT) Sender Policy Framework anti-spam Exchange Federation Enables Exchange federation in hybrid environments Provides mail delivery with Exchange federation Provides autodiscover for easy client connection with Exchange federation SharePoint Redirects to public web site for domain Lync SRV Enables SIP federation Coordinates information flow between clients Redirects Lync online client sign-in Redirects Lync online mobile client sign-in SSO Host (A) Publishes SSO ADFS server address Take some time to explain the functionality that DNS provides for the Office 365 services.

DNS Record Changes Document the planned changes 6: Planning Exchange Online and Configuring DNS Records Document the planned changes Have someone else review the planned change Use a low TTL value Remember to inform your users of possible service disruption Carry out the proposed change on a Friday evening You might want to demonstrate some online tools here, such as dnscheck.pingdom.com. Explain what is happening and note that you may get reverse DNS errors with default domains.

Hosting Multiple Domains 6: Planning Exchange Online and Configuring DNS Records Option Process Single Default Domain Use the domain you get when you sign up for the service Single custom domain Add a single external domain that you add after signup or as part of the Deploy Phase of the FastTrack process Single custom root domain with subdomains Add the root domain then the subdomains Multiple custom domains, no subdomains Add the root domains independently Multiple root domains with multiple subdomains Add the root domain then the subdomains from that root. Add other root domains independently followed by their subdomains Take a while to explain the different options in this topic. You might want to use the whiteboard to draw out the domain/subdomain relationships and identify where user accounts might reside.

Demo: Regisitering a DNS Domain

Troubleshoot DNS Records 20346A Troubleshoot DNS Records 6: Planning Exchange Online and Configuring DNS Records Changing DNS records too soon Typographical errors on records Port errors in DNS records Replication timings Review the possible errors and identify mechanisms to check for DNS errors.

Recommendations for Configuring DNS Records 6: Planning Exchange Online and Configuring DNS Records Plan every change to DNS in detail Take extra care with MX records Work with a reliable cloud partner Communicate with users Summarize the best practice recommendations and add any further ones of your own.

Module Review Configure DNS Records for Services