Copy-ReceiveConnector & Export-ReceiveConnector Powershell Scripts
Merhaba,
Piyasada dolanan bir çok yazılmış script bulunmaktadır. En sağlıklı kullandığım ve customize yaptığım ReceiveConnector Script’leri şurda dursun 🙂
Copy-ReceiveConnector.ps1
<#
.SYNOPSIS
Copy a selected receive connector and it's configuration and permissions to other Exchange Servers
Thomas Stensitzki
THIS CODE IS MADE AVAILABLE AS IS, WITHOUT WARRANTY OF ANY KIND. THE ENTIRE
RISK OF THE USE OR THE RESULTS FROM THE USE OF THIS CODE REMAINS WITH THE USER.
Version 1.6, 2018-03-26
Please send ideas, comments and suggestions to support@granikos.eu
.LINK
http://scripts.granikos.eu
.DESCRIPTION
This script copies a receive connector from a source Exchange Server to a single target Exchange server or to all Exchange servers.
Configured permissions are copied as well, if required
.NOTES
Requirements
- Windows Server 2008 R2 SP1, Windows Server 2012 or Windows Server 2012 R2
- Exchange Server 2007/2010
- Exchange Server 2013/2016
Revision History
-------- -----------------------------------------------------------------------
1.0 Initial community release
1.1 Domain Controller parameter added, permissions group copy added
1.2 Move to FrontendTransport added, optional permission copy added, reset bindings added
1.3 Update receive connector, if receive connector exists
1.4 Fix to handle connector updates properly
1.41 Minor fixes and update for Exchange 2016
1.5 Issue #2 fixed
1.6 Issue #3 fixed
.PARAMETER ConnectorName
Name of the connector the new IP addresses should be added to
.PARAMETER SourceServer
Name of the receive connector to copy
.PARAMETER TargetServer
Target Exchange server to copy the selected receive connector to
.PARAMETER DomainController
Domain Controller name
.PARAMETER CopyToAllOther
Switch to copy to all other Exchange servers
.PARAMETER CopyPermissions
Copy non inherited source receive AD permissions to target receive connector. Inherited permissions will not be copied
.PARAMETER MoveToFrontend
Change source connector transport role to FrontendTransport. This is required when you copy a receive connector from Exchange 2007 to Exchange 2013
.PARAMETER ResetBindings
Do not copy bindings but reset receive connector network bindings to 0.0.0.0:25
.PARAMETER ViewEntireForest
View entire Active Directory forest
.EXAMPLE
Copy Exchange 2013/2016 receive connector nikos-one-RC2 from server MBX01 to server MBX2
.\Copy-ReceiveConnector.ps1 -SourceServer MBX01 -ConnectorName nikos-one-RC2 -TargetServer MBX2 -DomainController MYDC1.mcsmemail.de
.EXAMPLE
Copy Exchange 2013/2016 receive connector nikos-one-RC2 from server MBX01 to all other Exchange 2013 servers
.\Copy-ReceiveConnector.ps1 -SourceServer MBX01 -ConnectorName nikos-one-RC1 -CopyToAllOther -DomainController MYDC1.mcsmemail.de
.EXAMPLE
Copy Exchange 2013/2016 receive connector "nikos-two relay" from Exchange 2007 server MBX2007 to Exchange 2013 server MBX01 and reset network bindings
.\Copy-ReceiveConnector.ps1 -SourceServer MBX2007 -ConnectorName "nikos-two relay" -TargetServer MBX01 -MoveToFrontend -ResetBindings -DomainController MYDC1.mcsmemail.de
#>
param(
[parameter(Mandatory,HelpMessage='Source Exchange server to copy from')]
[string] $SourceServer,
[parameter(Mandatory,HelpMessage='Name of the receive connector to copy')]
[string] $ConnectorName,
[string] $TargetServer = '',
[parameter(Mandatory,HelpMessage='Domain Controller name')]
[string] $DomainController = '',
[switch] $CopyToAllOther,
[switch] $CopyPermissions,
[switch] $MoveToFrontend,
[switch] $ResetBindings,
[switch] $ViewEntireForest
)
# Set-StrictMode -Version Latest
Import-Module -Name ActiveDirectory
$sourceRC = $null
$secondsToWait = 60
### FUNCTIONS -----------------------------
function Request-Choice {
[CmdletBinding()]
param(
[string]$Caption = 'Really?'
)
$choices = [System.Management.Automation.Host.ChoiceDescription[]]@('&Yes','&No')
[int]$defaultChoice = 1
$choiceReturn = $Host.UI.PromptForChoice($Caption, '', $choices, $defaultChoice)
return $choiceReturn
}
function Copy-ToServer {
[CmdletBinding()]
param(
[string]$TargetServerName = ''
)
if ($TargetServerName -ne '') {
$sourceRC = Get-ReceiveConnector -Server $SourceServer | Where-Object{$_.Name -eq $ConnectorName} -ErrorAction SilentlyContinue
$targetRC = Get-ReceiveConnector -Server $TargetServerName | Where-Object{$_.Name -eq $ConnectorName} -ErrorAction SilentlyContinue
if(($sourceRC -ne $null) -and ($targetRC -eq $null)){
Write-Host
Write-Host ('Working on {0} and receive connector {1}' -f $TargetServerName, $ConnectorName)
# clear permission groups for Exchange Server 2013 (thanks to Jeffery Land, https://jefferyland.wordpress.com)
$tempPermissionGroups = @($sourceRC.PermissionGroups) -split ', ' | Select-String -Pattern 'Custom' -NotMatch
$temp = ("$($tempPermissionGroups)").Replace(' ', ', ').Replace(' ','')
if($temp -ne '') {
$sourceRC.PermissionGroups = $temp
}
if($MoveToFrontend) {
# Move receive connector to FrontEnd Transpport
$sourceRC.TransportRole = 'FrontendTransport'
}
if($ResetBindings) {
# Reset network bindungs to listen on all adapters using port 25
$sourceRC.Bindings = '0.0.0.0:25'
}
# create new Receive Connector
New-ReceiveConnector -Name $sourceRC.Name `
-TransportRole $sourceRC.TransportRole `
-RemoteIPRanges $sourceRC.RemoteIPRanges `
-Bindings $sourceRC.Bindings `
-Banner $sourceRC.Banner `
-ChunkingEnabled $sourceRC.ChunkingEnabled `
-DefaultDomain $sourceRC.DefaultDomain `
-DeliveryStatusNotificationEnabled $sourceRC.DeliveryStatusNotificationEnabled `
-EightBitMimeEnabled $sourceRC.EightBitMimeEnabled `
-DomainSecureEnabled $sourceRC.DomainSecureEnabled `
-LongAddressesEnabled $sourceRC.LongAddressesEnabled `
-OrarEnabled $sourceRC.OrarEnabled `
-Comment $sourceRC.Comment `
-Enabled $sourceRC.Enabled `
-ConnectionTimeout $sourceRC.ConnectionTimeout `
-ConnectionInactivityTimeout $sourceRC.ConnectionInactivityTimeout `
-MessageRateLimit $sourceRC.MessageRateLimit `
-MaxInboundConnection $sourceRC.MaxInboundConnection `
-MaxInboundConnectionPerSource $sourceRC.MaxInboundConnectionPerSource `
-MaxInboundConnectionPercentagePerSource $sourceRC.MaxInboundConnectionPercentagePerSource `
-MaxHeaderSize $sourceRC.MaxHeaderSize `
-MaxHopCount $sourceRC.MaxHopCount `
-MaxLocalHopCount $sourceRC.MaxLocalHopCount `
-MaxLogonFailures $sourceRC.MaxLogonFailures `
-MaxMessageSize $sourceRC.MaxMessageSize `
-MaxProtocolErrors $sourceRC.MaxProtocolErrors `
-MaxRecipientsPerMessage $sourceRC.MaxRecipientsPerMessage `
-PermissionGroups $sourceRC.PermissionGroups `
-PipeliningEnabled $sourceRC.PipeLiningEnabled `
-ProtocolLoggingLevel $sourceRC.ProtocolLoggingLevel `
-RequireEHLODomain $sourceRC.RequireEHLODomain `
-RequireTLS $sourceRC.RequireTLS `
-EnableAuthGSSAPI $sourceRC.EnableAuthGSSAPI `
-ExtendedProtectionPolicy $sourceRC.ExtendedProtectionPolicy `
-SizeEnabled $sourceRC.SizeEnabled `
-TarpitInterval $sourceRC.TarpitInterval `
-EnhancedStatusCodesEnabled $sourceRC.EnhancedStatusCodesEnabled `
-Server $TargetServerName `
-AuthMechanism $sourceRC.AuthMechanism `
-Fqdn $sourceRC.Fqdn
if($CopyPermissions) {
# fetch non inherited permissons from source connector
$sourcePermissions = Get-ReceiveConnector -Identity $sourceRC | Get-ADPermission | Where-Object {$_.IsInherited -eq $false}
# we wait some time for domain controller to get stuff done
Write-Host ('Wait {0} seconds for domain controller to update' -f $secondsToWait)
Start-Sleep -Seconds $secondsToWait
Write-Verbose -Message 'Adding AD permissions'
# set access rights on target connector
$sourcePermissions | ForEach-Object {
Get-ReceiveConnector "$($TargetServerName)\$($sourceRC.Name)" -DomainController $DomainController | Add-ADPermission -DomainController $DomainController -User $_.User -Deny:$_.Deny -AccessRights $_.AccessRights -ExtendedRights $_.ExtendedRights | Out-Null
}
}
}
elseif($sourceRC -ne $null) {
Write-Output 'Target connector already exists.'
if((Request-Choice -Caption ('Do you want to UPDATE the receive connector {0} on server {1}?' -f $ConnectorName, $TargetServerName)) -eq 0) {
Write-Host ('Updating server {0}' -f $TargetServerName)
# clear permission groups for Exchange Server 2013 (thanks to Jeffery Land, https://jefferyland.wordpress.com)
$tempPermissionGroups = @($sourceRC.PermissionGroups) -split ', ' | Select-String -Pattern 'Custom' -NotMatch
$temp = ("$($tempPermissionGroups)").Replace(' ', ', ').Replace(' ','')
if($temp -ne '') {
$sourceRC.PermissionGroups = $temp
}
Get-ReceiveConnector "$($TargetServerName)\$($sourceRC.Name)" | Set-ReceiveConnector `
-RemoteIPRanges $sourceRC.RemoteIPRanges `
-Banner $sourceRC.Banner `
-ChunkingEnabled $sourceRC.ChunkingEnabled `
-DefaultDomain $sourceRC.DefaultDomain `
-DeliveryStatusNotificationEnabled $sourceRC.DeliveryStatusNotificationEnabled `
-EightBitMimeEnabled $sourceRC.EightBitMimeEnabled `
-DomainSecureEnabled $sourceRC.DomainSecureEnabled `
-LongAddressesEnabled $sourceRC.LongAddressesEnabled `
-OrarEnabled $sourceRC.OrarEnabled `
-Comment $sourceRC.Comment `
-Enabled $sourceRC.Enabled `
-ConnectionTimeout $sourceRC.ConnectionTimeout `
-ConnectionInactivityTimeout $sourceRC.ConnectionInactivityTimeout `
-MessageRateLimit $sourceRC.MessageRateLimit `
-MaxInboundConnection $sourceRC.MaxInboundConnection `
-MaxInboundConnectionPerSource $sourceRC.MaxInboundConnectionPerSource `
-MaxInboundConnectionPercentagePerSource $sourceRC.MaxInboundConnectionPercentagePerSource `
-MaxHeaderSize $sourceRC.MaxHeaderSize `
-MaxHopCount $sourceRC.MaxHopCount `
-MaxLocalHopCount $sourceRC.MaxLocalHopCount `
-MaxLogonFailures $sourceRC.MaxLogonFailures `
-MaxMessageSize $sourceRC.MaxMessageSize `
-MaxProtocolErrors $sourceRC.MaxProtocolErrors `
-MaxRecipientsPerMessage $sourceRC.MaxRecipientsPerMessage `
-PermissionGroups $sourceRC.PermissionGroups `
-PipeliningEnabled $sourceRC.PipeLiningEnabled `
-ProtocolLoggingLevel $sourceRC.ProtocolLoggingLevel `
-RequireEHLODomain $sourceRC.RequireEHLODomain `
-RequireTLS $sourceRC.RequireTLS `
-EnableAuthGSSAPI $sourceRC.EnableAuthGSSAPI `
-ExtendedProtectionPolicy $sourceRC.ExtendedProtectionPolicy `
-SizeEnabled $sourceRC.SizeEnabled `
-TarpitInterval $sourceRC.TarpitInterval `
-EnhancedStatusCodesEnabled $sourceRC.EnhancedStatusCodesEnabled `
-AuthMechanism $sourceRC.AuthMechanism `
-Fqdn $sourceRC.Fqdn
# -Bindings $targetRC.Bindings `
# -TransportRole $sourceRC.TransportRole `
if($CopyPermissions) {
# fetch non inherited permissons from source connector
$sourcePermissions = Get-ReceiveConnector -Identity $sourceRC | Get-ADPermission | Where-Object {$_.IsInherited -eq $false}
# we wait some time for domain controller to get stuff done
Write-Host ('Wait {0} seconds for domain controller to update' -f $secondsToWait)
Start-Sleep -Seconds $secondsToWait
Write-Verbose 'Adding AD permissions'
# set access rights on target connector
$sourcePermissions | ForEach-Object {
Get-ReceiveConnector "$($TargetServerName)\$($sourceRC.Name)" -DomainController $DomainController | Add-ADPermission -DomainController $DomainController -User $_.User -Deny:$_.Deny -AccessRights $_.AccessRights -ExtendedRights $_.ExtendedRights | Out-Null
}
}
}
}
else {
Write-Host 'There seems to be an issue with the source connector information provided.'
Write-Host ('Source connector {0}\{1} cannot be accessed or does not exist!' -f $SourceServer, $ConnectorName)
}
}
else {
Write-Host 'No target server name specified'
}
}
function Copy-ToAllServers {
Write-Verbose 'Copy receive connector to all other Exchange 2013+ servers'
# Quick fix for issue #3, assuming that you've deployed Exchange 2013 multi-role
$frontendServers = Get-ExchangeServer | Where-Object{($_.AdminDisplayVersion.Major -eq 15) -and (([string]$_.ServerRole).Contains('Mailbox')) -and ($_.Name -ne $SourceServer)} | Sort-Object Name
foreach($server in $frontendServers){
Write-Output -InputObject ('Working on server: {0}' -f $server)
Copy-ToServer -TargetServerName $server
}
Write-Verbose 'Copying to all Exchange servers done'
}
### MAIN ----------------------------------
if($ViewEntireForest) {
Write-Verbose -Message ('Setting ADServerSettings -ViewEntireForest {0}' -f $true)
Set-ADServerSettings -ViewEntireForest $true
}
if((-not $CopyToAllOther) -and ($TargetServer -eq '')){
Write-Output 'You need to either specific a dedicated target server using the -TargetServer '
Write-Output 'attribute or select the -CopyToAllOther switch'
break
}
elseif($TargetServer -ne ''){
# Copy to a single Exchange server
Copy-ToServer -TargetServerName $TargetServer
}
elseif($CopyToAllOther){
# Copy to all other Exchange 2013/2016 servers
Copy-ToAllServers
}
Export-ReceiveConnector
Add-PSSnapin *exchange*
Function Export-ReceiveConnector {
Param ([string] $RCAction,
[string] $RCServer,
[string] $RCConnector,
[string] $RCFilePath)
$connector_info = Get-ReceiveConnector -Identity "$RCConnector"
$connector_server = $connector_info.Server
$ip_addresses = $connector_info.RemoteIPRanges | Select-Object RangeFormat, LowerBound, UpperBound, CIDRLength, @{Name='IPAddress';Expression={[string]::join(';',($_.LowerBound))}} | Sort-Object LowerBound
$connector_name = $connector_info.Name
$connector_counter = 0
$ip_counter = $ip_addresses.Count
If ($ip_counter -lt 2) {
$ip_counter = 2
}
$ip_addresses | ForEach {
$connector_counter++
Write-Progress -Activity "Exporting Receive Connector $connector_info.Identity" -Status "Processing..." -PercentComplete (($connector_counter/$ip_counter)*100)
If ($_.RangeFormat -eq "SingleAddress") {
$ip_address = $_.IPAddress
"$connector_server; $connector_name; $ip_address" | Out-File "$RCFilePath" -Append -Encoding Ascii
}
If ($_.RangeFormat -eq "CIDR") {
$ip_address= $_.IPAddress
$ip_cidr = $_.CIDRLength
"$connector_server; $connector_name; $ip_address/$ip_cidr" | Out-File "$RCFilePath" -Append -Encoding Ascii
}
If ($_.RangeFormat -eq "LoHi") {
$lower_address = $_.LowerBound
$upper_address = $_.UpperBound
$ip_address= "$lower_address-$upper_address"
"$connector_server; $connector_name; $ip_address" | Out-File "$RCFilePath" -Append -Encoding Ascii
}
}
}
İyi çalışmalar,
Erdem AYYILDIZ
Tags :
