Exchange Server relationship with Active Directory and DNS

Posted: January 17, 2012 in Exchange Server

Exchange Server and Active Directory

Exchange Server requires Active Directory. Exchange Roles (HT, CA, MB) use AD DS except the Edge Transport Role that uses AD LDS. An Exchange Server Organization and an Active Directory Forest is a one-to-one relationship. Despite that last fact, many exchange organizations can be managed from the same exchange management console. Exchange installation modifies the schema and creates exchange server specific objects and adds exchange server specific attributes to already existing objects. The configuration partition includes Exchange Server configuration objects: global settings, e-mail address policies, transport rules, and address lists. The domain partition includes recipient objects, mailbox-enabled users, mail-enabled users, groups, and contacts. The email attributes of the mail-enabled and mailbox-enabled recipients replicate to the Global Catalog. The GAL is generated from the GC. HT Servers access the GC in order to locate a recipients mailbox for delivery. CA servers access the GC to locate the user’s MB server and to display the GAL to clients. For this reason we need at least one GC server to each AD site. The new RODC of Windows Server 2008 cannot be used with Exchange server.

Exchange Server and the Domain Name System

Exchange uses DNS to locate AD and GC servers. Exchange is site-aware so it tries to contact the servers on the same site.  When Netlogon Service is started on the DC, it updates the DNS with SRV records that describe it as DC and GC. For Exchange to function, an internal DNS that supports dynamic updates is needed. SRV records in DNS identify servers that provide specific services.

SRV Records use the following format:

_Service._Protocol.Name    TTL    Class    SRV    Priority    Weight    Port    Target

Explanation:

_Service=Service Name like LDAP, Kerberos, etc.

_Protocol=TCP or UDP

TTL=Time to Live in sec

Class=IN (Internet)

Priority=Clients attempt to access servers with the lowest priority number

Weight=complementary mechanism to priority that provides Load Balancing. Clients access randomly servers that have the same priority and higher weights

Port=Listening TCP or UDP port

Target=FQDN of the system that provides the service

After that, exchange queries the DNS for the A or AAAA (Quad-A) record of the server to obtain it’s IP Address.

When Exchange Server authenticates with the domain it stores the site name in the registry, so when it queries AD it will ask for local AD site first.

Exchange also makes use of MX (Mail Exchanger) Records in order to deliver Internet messages when using the SMTP Protocol. The MX record contains the host name that accepts inbound e-mail for a specific domain and a preference value. When deploying multiple SMTP servers the one with the lowest preference value routes all messages unless it is not available. If equal preference values are used, load balancing is applied.

To support spam mail filtering, SPF (Sender Policy Records) for acceptable domain names and Reverse Lookup Records  for SMTP Servers can be configured.

Advertisement

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Connecting to %s