Exchange Server Overview and Version Planning
Why On-premises Exchange is Still Needed?
Despite Microsoft's push for cloud adoption, on-premises Exchange Server remains necessary in the following scenarios:
1. Hybrid Deployment
- Exchange Server is a required architectural component for hybrid deployments
- Managing certain M365 attributes (such as custom attributes, address lists) still requires on-premises Exchange
- Provides local control point for mail flow
2. Regulatory and Compliance Requirements
- Certain industries (finance, healthcare, government) require mail to remain on-premises
- Data sovereignty considerations
- Audit and eDiscovery requirements
3. System Integration
- Integration with legacy systems (ERP, CRM)
- Internal applications relying on MAPI/EWS connections
- Special transport rules or mail processing requirements
Exchange Server Version Strategy
Supported Versions (2025 Status)
| Version | Latest CU | Mainstream Support End | Extended Support End |
|---|---|---|---|
| Exchange 2019 | CU14 | 2024/01/09 | 2025/10/14 |
| Exchange 2016 | CU23 | 2020/10/13 | 2025/10/14 |
| Exchange 2013 | CU23 | 2018/04/10 | Ended |
Important Note
Exchange 2013 extended support ended in April 2023 and no longer receives security updates. Upgrading is strongly recommended.
CU (Cumulative Update) Strategy
Best Practice: Stay on latest or second-latest CU
# Check current Exchange version
Get-ExchangeServer | Format-List Name, Edition, AdminDisplayVersion
# Example output:
# Name : EX01
# Edition : Enterprise
# AdminDisplayVersion : Version 15.2 (Build 1544.4)
Why timely CU updates are needed?
- Security Updates (SU) typically only support the latest two CUs
- New features and performance improvements
- Hybrid deployment new features require latest CU support
Exchange Architecture Fundamentals
Basic Roles
Exchange 2016/2019 simplified to two roles:
- Mailbox Role: Mailbox databases, Client Access Services (CAS)
- Edge Transport Role (optional): Perimeter network mail gateway
High Availability
Database Availability Group (DAG)
Recommended Configuration:
- At least 3 Mailbox Servers (odd number to avoid Split-Brain)
- Witness Server located in a different site
- At least 3 copies per Database
Hybrid Deployment Architecture
Typical Hybrid Topology
Key Components
-
Hybrid Configuration Wizard (HCW)
- Automatically configures Send/Receive Connectors
- Creates OAuth trust relationship
- Configures Organization Relationship
-
Exchange Web Services (EWS)
- Calendar free/busy lookup
- MailTips
- Message tracking
-
Mailbox Replication Service (MRS)
- Mailbox migration (On-prem ↔ Cloud)
- Supports batch migration
Capacity Planning
Mailbox Server Specification Recommendations
| User Count | CPU | RAM | IOPS (per DB) |
|---|---|---|---|
| < 500 | 8 vCPU | 32 GB | 0.1-0.2 |
| 500-2000 | 16 vCPU | 64 GB | 0.08-0.15 |
| > 2000 | 24+ vCPU | 96+ GB | 0.05-0.10 |
Important Note
These are baseline recommendations. Actual requirements should be adjusted based on user behavior (mail volume, attachment size, mobile device count).
Disk I/O Calculation
Total IOPS = (User Count × IOPS per User) ÷ Number of Database Copies
Example:
- 1000 users
- 0.1 IOPS per user
- 3 Database copies
- Total requirement: (1000 × 0.1) ÷ 3 = 33.3 IOPS
Next Steps
- Certificate and TLS Practices: Learn certificate configuration and common errors
- Hybrid Deployment: Deep dive into HCW and OAuth configuration
- Troubleshooting: Common issues and solutions