Post on 18-Mar-2018
transcript
HMC-Roadmap und neue Technologien
Volker MössingerPartner Technologie Berater
Microsoft Deutschland GmbH
Agenda
∙ Exchange 2010 Hosting Roadmap
• HMC High-Level Migration Planning
• HMC support
∙ BPOS Überblick
∙ Hosting Szenarien
Exchange 2010 Hosting Roadmap
Commitment to Partner Hosting
• Evolution of Hosting: From HMC to native support in
Exchange 2010.
• Hosting Deployment Accelerator (HDA)
• Hosting Partner Eco-system (Private-Label providers,
ISVs, SIs)
Leverage MS Online
• Today: Service Advisor Model (MOSPA)
• CY2011: Syndication, select partners only.
Grow Hosting
HMC Provisioning System
Mandantenfähig
Automatisierung
Selbstprovisioning
Produktkatalog
Ressourcen
OSS / BSS Anbindung
Exchange 2010 servers natively multi-tenant.Products include basic Provisioning and Delegation tools to support core partner hosting scenarios.
Hosting Deployment Accelerators:Common architecture, provisioning and orchestration, recommendations, and best practices to deploy partner hosted scenarios.
Private-label Hosters, ISVs and SIs can provide:• Control panel• User, benefits mgmt, service plan creation• Multi-service orchestration, workflow• Integration layers on top of Wave 14• Integration with MS and non-MS products• Deployment and migration planning and assistance
Enable Partner Hosting in Exchange 2010
• Less complex deployment• Products are multi-tenant natively• Most commands are multi-tenant aware• Wider set of supported features and scenarios for hosted deployments• Scale testing by product engineering team.
Exchange 2007
HMC /MPS
Portal/Control Panel/
Dashboard etc
Exchange 2010
Portal/Control Panel/
Dashboard etc
Evolution of Hosting
Hosting Future Architecture View
The Hosting Deployment Accelerator is a one stop shop for guidance for hosting on the Microsoft platform which includes documentation, scenario-based licensing guidance and tools to:
• Build: Plan, Architect, Deploy and Manage hosting platform
• Sell: Position, Market, Sell, and Grow the hosting business
HDA
• Pre-sales Technical collateral
• Project planning tools
• Hosting Reference Architecture
• Sizing & Scalability guidance
• Provisioning
• Deployment best practices
• Install and Configure• Migration• Security
• Systems management• Configuration
Management• Monitoring &
Reporting• High Availability• Disaster Recovery
• Address technology trends and customer demands for specific solution
Plan Architect & Design Deploy Operate & Manage Remain Current
• Positioning
• Demos
• Sample Web Sites
• Case Studies
• Sales Kit
• Training guides
• Competitive Information
• Telesales Guidance
• Licensing scenarios, Whitepapers & Presentations
Marketing Materials Sales Licensing
Hosting Deployment Accelerator (HDA)
Hosting Deployment Accelerator
http://windowshda.comhttp://www.microsoft.com/hosting/dynamicdatacenter/Resources.html
Hosting Support in Exchange 2010
∙ Exchange Server RTM (on-prem build)◉ Can be used for single-tenant hosted scenarios. (Available on SPLA)
◉ No support for multi-tenant Hosting.
◉ Control Panel Hosting solutions are not supported by Microsoft.
∙ Exchange Server Partner Hosted Build◉ Natively Support Multi-tenant hosted scenarios.
◉ Offer New/improved features that were only supported for On-prem deployments (e.g. Transport Rules, Archiving, RBAC, Shared Calendar, shared Contacts, shared Free/Busy, Online move Mailbox)
◉ Support for Control Panel Hosting solutions.
• +50% Reduction in Storage Costs
• Simplifies high-availability through DB level failover (DAG)
•Online Move Mailbox
•Backup-less org, with new enhancements in E14 storage and availability.
• If Backup is required, you can backup from any copy of the DB
•Optimize for +10GB Mailboxes
Service Provider
•Conversation View
• Faster more responsive to end users
• Faster Search
• Voice Mail preview
• Mail Tips
End User
Benefits of Hosted Exchange 2010
∙ Exchange 2010 for Hosters
◉ H2 CY 2010 (Q3/Q4)
Updated Roadmap
HMC High-Level Migration Planning
Migration Planning
HostingScenario 1
Hosting Scenario 2
Exchange 2007 Exchange 2010
3rd Party Control
Panel
3rd Party Control Panel
Or
Custom Control Panel
HMC /MPS
3rd Party Control
Panel
HMC /MPS
Custom Control
Panel
Upgrade Control Panel
Option 1: Migrate to 3rd party CPOption 2: Update your control panel:- New AD tenant structure- Use new Exchange cmdlets
Current Migration Activity Future
Exchange 2007
Active Directory
Identity & Authentication
Exchange 2010
Active Directory
Identity & AuthenticationMigrate User IDs
Migrate User Mailboxes
HMC Migration – Exchange view
HMC 4.5 Exchange 2010 Plan
User Identities Active Directory Active Directory
Enable & Configure Multi-
tenant logic, orgs
MPS
Configure with MPS
Stored in AD/SQL DB
Exchange Server 2010
Configure with PowerShell
Stored in AD
Service Provisioning & Config MPS Exchange Server 2010
Delegation & Roles MPS Exchange Server 2010+RBAC
Multi-service orchestration MPS 3rd party or Hoster Solution
Service Plans management MPS 3rd party or Hoster Solution
Resource Management MPS 3rd party or Hoster Solution
Monitoring , reporting &
health
HMC+ System Center + SQL
reporting + 3rd party solutionSystem Center +
Control Panel 3rd party or hoster 3rd party or Hoster Solution
Deployment documentation HMC documentation Product Documentation + HDA
Migration Assistance
∙ Control Panel Vendors
∙ System Integrators
∙ HDA high level guidance from Microsoft
HMC Support
HMC Support
• HMC 4.5 will be the last version of the HMC solution line.
• HMC 4.5 will be supported until June 2013
• MPS will remain in SPLA until further notice
BPOS Überblick
Microsoft ermöglicht Ihnen, selbst über das Betriebsmodell zu entscheiden
Softwarebeim Hoster
Softwarein der Cloud
Server Softwarebeim Kunden
• Compliance
• Vertrauen
• Offline-Szenarien
• Customizing
• Einfluss auf die Server-Konfiguration möglich
• Individuelle Anforderungen
• Kurze Time-to-Market
• Vereinbarung von Service Level
• Massive Skalierbarkeit
• Self-Service Management von Anwendungen
• Kürzeste Time-to-Market
• VorgegebeneServiceLevel
Client Softwarebeim Kunden
Software Services
Customizing Skalierbarkeit
Microsoft Online Services - BPOS
Vier Dienste:
• Kalender
• Kontakte
• Intranet-Portale
• Dokumentenverwaltung
• Teamarbeit
• Webkonferenzen
• Online-Schulungen
• Virtuelle Meetings
• Instant Messaging
• Präsenz
• Audio/Video (intern)
Drei Pakete:
Business Productivity Online Suite (BPOS) Standard
• Mindestens 5 bis mehrere 10.000 Nutzer
• Mehrere Kunden auf einer Umgebung
• Kurzfristig eingerichtet
Business Productivity Online Suite (BPOS) Dedicated
• Mindestens 5.000 Nutzer
• Ein Kunde pro Umgebung
• Erweiterter Funktions-umfang
Deskless Worker Suite
• Für Mitarbeiter ohne eigenen PC-Arbeitsplatz
• Funktional eingeschränkter Zugriff auf Exchange und SharePoint
• Preislich sehr attraktiv
Sicherheit der Microsoft-Rechenzentren
• Wesentliche Sicherheitsmerkmale:
• Geographisch verteilte und sich gegenseitigabsichernde Rechenzentren (in Europa: Dublin in Irland und Amsterdam in den Niederlanden)
• Redundante Systeme innerhalb der Rechenzentren
• 9 Ebenen von Datensicherheit
• Verschlüsselte Datenkommunikation über SSL
• Betriebsprozesse an etablierten Konzepten(ITIL/MOF) ausgerichtet und laufend überprüft
• Permanenter Support, 24 Stunden am Tag, 365 Tage im Jahr
• Dienstgütevereinbarung (SLA) mit 99,9% garantierterVerfügbarkeit
• CyberTrust- und ISO 27001-Zertifizierung für die Rechenzentren, CyberTrust-Zertifizierung für die Onlinedienste
24
Exchange Online Summary
Outlook 2003*, 2007,
2010
Outlook Anywhere
Autodiscover
Outlook Web Access
Custom OWA URL
Entourage 2004*,
2008*, WS edition
POP
• Windows Mobile
• iPhone
• Other ActiveSync
devices
• BlackBerry Enterprise
Server (add-on)
• ActiveSync security
policies
• Remote device wipe
• Delegates (“send on
behalf of”)
• Shared mailboxes
(“send as”)
• Address rewrite
• Server-side
forwarding
• Out of Office
• WebReady document
viewing
• Conference rooms
• Resource booking
attendant
• Conference room
delegation
• Tasks
Personal contacts
Shared contacts
Personal distribution
groups
Shared distribution
groups
Global address list
Offline address book
[not available] Forefront Online
Protection for
Exchange (AS/AV)
Forefront for
Exchange (AV)
Route inbound mail
on-prem for filtering
Safe senders
Blocked senders
On-Premises OnlyOnline Today
• LinkAccess (internal
Sharepoint and file
shares accessible via
OWA and mobile)
• Native personal
archive
• Transport rules
• Custom disclaimers
• Retention and
expiration policies
• E-discovery (cross-
mailbox search)
• Legal hold
• Multi-factor auth
(RSA, Swivel, etc)
• Forced TLS
• Advanced
auditing/logging
• Integration with OCS
voice services on-
premises
• Fax receiving
• GUI for some features
• Conversation view
• Ignore/move
conversation
• MailTips
• POP aggregation
• Shared nickname
cache across Outlook
and OWA
• Message tracking
(user self-service)
• Free-busy interop
with on-premises
• Free/busy sharing
with other orgs
• Share full calendar
detail with other orgs
• Publish calendar for
anonymous access
Dynamic distribution
groups
Restricted
distribution groups
Moderated
distribution groups
Share personal
contacts
Contact info update
(user self-service)
Hosted voicemail
(integration with
PBX)
Outlook Voice Access
“Play on phone”
button
Missed call
notifications
Caller ID
Company auto-
attendant
Self-service PIN reset
Message waiting
indicator
Voicemail preview
Call answering rules
Protected voicemail
• Route outbound mail
on-prem for filtering
• Multi-factor auth
(smartcard, soft cert)
• S/MIME
• Integration with on-
premises RMS (for
search, pre-licensing)
• RMS-enabled
transport rules
• Journal decryption of
RMS messages
• Outlook Protection
Rules• Improved service and
data continuity (RPO and RTO)
New in W14
Client AccessE-mail,
CalendaringContacts,Directory
UM, Fax SecurityCompliance/
Archiving
Applications/Developer
Administration
Journal e-mail to
external archive
Journal e-mail to EHA
• Mailbox PST export
by administrator
• Provision users in
multiple datacenters
Exchange Web
Services (EWS)
EWS Managed API
for .NET
SMTP relay
• Public folders
• MAPI/CDO access
• Custom code/dlls
• Transport agents
• Custom OWA themes,
colors, add-ins
Web-based
management
Active Directory sync
Bulk user activation
Deleted item
recovery
Deleted mailbox
recovery
Remote PowerShell
Role Based Access
Controls (RBAC)
Exchange
Management Console
(x-premises
management)
Enhanced migration
tools
No OST resync after
migration
Offboarding tools
Support for orgs
>50,000 users
Customize OWA login
page
Customize ActiveSync
security policies
Full OWA support in
Firefox/Safari
IM and presence in
OWA
OWA side-by-side
calendar view
• Mobile free/busy
lookup
• Mobile read/reply
status
• Mobile SMS sync
• Over-the-air update
for Outlook mobile
• MAPI
• BES management and
reporting
• GUI for some features
* Capability is not carried forward in Online wave 14
Directory Synchronization
Microsoft Online
Directory Service
(MSODS)
SharePoint Online
Active Directory
Exchange Online
OC Online
DirSync tool runs on local server
Simplify administration by synchronizing Active Directory with Online Services
Today’s robust sync capabilities are carried forward in the 2010 update:
• Eliminates the need to manage users and groups in two places
• Powers unified global address list
• Simplifies user provisioning
Authentication and Sign-On
Active Directory Federation Services powers enterprise
single sign-on
• Users don’t need to remember separate cloud passwords• Administrators can retain existing domain security policies• Supports multi-factor authentication for OWA• Allows you to block access to services by IP address
Windows Server 2008
Users are authenticated
by local Geneva server
No Outlook sign-in tool
required
ADFS 2.0 (Geneva)
ADFS - Authentication Flow
Remote PowerShell
• Allows scripting and automation of routine tasks
• Lets you update settings and policies without calling support
• Gives you to access to raw data for reports
> New-DynamicDistributionGroup -Name "Florida Sales and Marketing" -IncludedRecipients MailboxUsers -ConditionalDepartment Sales, Marketing -ConditionalStateOrProvince Florida
Manage your Exchange Online environment via remote
command line shell
Full Exchange Coexistence
ActiveDirectory
Exchange 2003/2007
Exchange 2010
CAS/HT server
ADFS v2
Directory Sync
• Manage cloud and on-premises users from one place
• Migrate users to the cloud with native Exchange tools
• Share free/busy data between cloud and on-premises users
• Configure secure, high-fidelity cross-premises mail flow
• Easily move mailboxes back on-premises
Exchange 2010 server on-premises enables smooth
transition to the cloud
Exchange 2003/2007 users can
be moved directly to the cloud
(no upgrade to 2010 required)
Advanced Data Migration
Exchange 2007
Exchange 2010
Exchange 2010 CAS
Exchange 2003
∙ Uses same replication engine as on-premises mailbox moves
∙ Migration support is built into Exchange Management Console and Remote PowerShell
∙ No Outlook resync required after mailbox move
∙ Easy to migrate mailboxes back to on-premises server
Native support for moving Exchange Server mailboxes to the
cloud
Exchange Online user
Exchange Online user
Cross-premises Calendaring
• Federation powers free/busy sharing in mixed environments
• Maintains consistent user experience during migration and coexistence
• No special client configuration or plug-in required
Free/busy data can be shared between on-premises and
online users
Smoother migration and coexistence
Better administration and control
Federated identityusing ADFS (Geneva)
Enhanced Web administration portal
Remote PowerShell
Choose between server, service, or a seamless mix of both
Transport Rules
Retention Policies
Unified Messaging
New features from Exchange Server 2010
Cross-premises management
Native migration tools
Calendar coexistence (shared free/busy)
Exchange Online
Summary of new capabilities powered by Exchange 2010
New server features available online
Hosting Szenarien
SSO / Single Identity: DA +UAG + ADFS
Partner Hosting BPOS-S
Customer
AD
AD AD
ADFSAccount
DA
UAG
ADFSRessourceUAG ADFS
Ressource
- Exchange - Sharepoint- OC- Livemeeting
No domain joined Clients- external Partners- ...
Branch Officewith Win7 Clients
- Exchange - Sharepoint- Remote Desktop- CRM- File Services- Backup
Appxyz
FileserverDFS
FileserverDFS
domain joined Clients- external Partners
FileserverDFS
User
Azure
ADFSRessource
Partner Hosting Presales Unterstützung
Tel.: +49 (1805) 24 09 24
Livemeeting mit Hosting Partner Technologie Berater
+49 (89) 3176 5566
© 2009 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date ofthis presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation.
MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.