{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":31358,"path":"it-operations-management/service-mapping/mapping-service-exchange.md","title":"Application services with Microsoft Exchange Server","bundle":null,"doc_type":null,"release":"australia","body":"\n# Application services with Microsoft Exchange Server\n\nService Mapping can discover service instances containing a Microsoft Exchange Server and the Exchange Server components.\n\n## Discovered components\n\nIf e-mail services in your organization deploy Microsoft Exchange Server, the discovered application service includes the following components:\n\n<table id=\"SupportedApplications\"><thead><tr><th>\n\nName\n\n</th><th>\n\nPlatform\n\n</th><th>\n\nVersion\n\n</th><th>\n\nProtocol\n\n</th><th>\n\nDiscovery type\n\n</th><th>\n\nPattern \\(or probe if indicated\\)\n\n</th></tr></thead><tbody><tr><td>\n\nMicrosoft Active Directory Domain Services\n\n</td><td>\n\nWindows\n\n</td><td>\n\n13, 30, 31, 44, 47, 52, 56, 69\n\n</td><td>\n\nWMI\n\n WinRM\n\n</td><td>\n\nTop-down\n\n</td><td>\n\nActive Directory Service pattern\n\n</td></tr><tr><td>\n\n[Microsoft server \\(as a Microsoft Exchange component\\)](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/itom-visibility/r-ExchangeClientAccessServer.md)\n\n</td><td>\n\nWindows\n\n</td><td>\n\n2003, 2007, 2010, 2013, 2016\n\n</td><td>\n\nWMI\n\n WinRM\n\n</td><td>\n\nHorizontal and top-down\n\n</td><td>\n\nExchangeFrontEndServer On Windows; PatternExchangeBackEndServer On Windows pattern\n\n</td></tr><tr><td>\n\n[HUB Transport Server \\(as a Microsoft Exchange component\\)](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/itom-visibility/r-ExchangeHub.md)\n\n</td><td>\n\nWindows\n\n</td><td>\n\n2003, 2007, 2010, 2013, 2016\n\n</td><td>\n\nWMI\n\n WinRM\n\n</td><td>\n\nHorizontal and top-down\n\n</td><td>\n\nHub Transport Server On Windows pattern\n\n</td></tr><tr><td>\n\nClient Access Server \\(CAS\\) \\(as a Microsoft Exchange component\\)\n\n</td><td>\n\nWindows\n\n</td><td>\n\n2003, 2007, 2010, 2013, 2016\n\n</td><td>\n\nWMI\n\n WinRM\n\n</td><td>\n\nHorizontal and top-down\n\n</td><td>\n\nCAS On Windows pattern\n\n</td></tr></tbody>\n</table>Typically, you do not want to discover Outlook clients connected to the Exchange Server to avoid noise. If this is the case, disable the traffic-based discovery for this application service.\n\nFor information on the discovery flow, refer to pattern-based discovery in Service Mapping. Failure to provide users with required permissions may cause Service Mapping to perform [traffic-based discovery](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/service-mapping/traffic-based-discovery.md).\n\n## Limitations\n\nDiscovery and Service Mapping cannot discover the Exchange Server if its configuration does not support public folders, edge transports, and public messaging. Create a pattern or customize the existing pattern to discover the Exchange Server with such configuration.\n\n**Parent Topic:**[Map a single application service using classic Service Mapping](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/service-mapping/t_DefineNewBusinessService.md)\n\n## Map application services containing Microsoft Exchange Servers\n\nMap an application service containing an Microsoft Exchange Server and verify that Service Mapping discovered all Microsoft Exchange Server components correctly.\n\n### Before you begin\n\n-   On the ServiceNow AI Platform, configure a domain user for accessing the Windows OS as described in [Windows credentials](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/r_WindowsCredentialsForm.md). Use the Microsoft Exchange Server administrator's user name and password as Windows credentials. For example, user name: local\\\\administrator and password: Are1300.\n\n    **Note:** If you configure Windows credentials for a user different from the Microsoft Exchange Server administrator, Service Mapping uses traffic-based discovery that results in mapping all Microsoft Exchange clients.\n\n-   \\(For Exchange CAS 2010 and 2013, 2016\\) On the ServiceNow AI Platform, configure [applicative credentials](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/applicative-creds.md), setting the CI type to Exchange Mailbox.\n\n    **Warning:** Do not confuse the Exchange Mailbox CI type with the Exchange Mailbox Server CI type.\n\n    Service Mapping uses these applicative credentials to access the of/Servers/Servers.slab folder on the Key Exchange Admin Center \\(EAC\\). Service Mapping also uses the applicative credentials to run the following PowerShell commands against the MID Servers:\n\n    -   Get-ExchangeServer\n    -   Get-ExchangeServer\n    -   Get-MailboxServer\n    -   Get-ClusteredMailBoxServerStatus\n    -   Get-ExchangeServer\n    -   Get-StorageGroup\n    -   Get-MailboxDatabase\n-   \\(For Microsoft Exchange CAS 2010 and 2016\\) On the Windows Server hosting Microsoft Exchange CAS, install the Microsoft.Exchange.Management.PowerShell.E2010 module.\n-   \\(For Microsoft Exchange CAS 2007\\) On the Windows Server hosting Microsoft Exchange CAS, install the Microsoft.Exchange.Management.PowerShell.Admin module.\n-   \\(For Microsoft Exchange CAS 2007, 2010\\) On the ServiceNow AI Platform, upload the rctrlx tool for running PowerShell commands as described in [Upload the rctrlx.exe file to MID Servers](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/service-mapping/upload-rctrlx-file.md).\n-   \\(For Microsoft Exchange CAS 2007 and 2010\\) Provide an Exchange Mailbox OS user with the rights to run Exchange services on Windows and has permission to query Exchange repository:\n\n    On the ServiceNow AI Platform, configure [Windows credentials](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/r_WindowsCredentialsForm.md) setting the **Credential alias** attribute to \\[cmdb\\_ci\\_exchange\\_mailbox\\]. Configuring this attribute allows you later to use the credential for this CI in patterns.\n\n-   \\(Optional\\) For discovering using the WinRM protocol, see [Configure WinRM trusted hosts on MID Server](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/servicenow-platform/enable-winRM-MID-servers.md).\n-   Verify that you know the entry point necessary for discovering the Microsoft Exchange Server. Use the URL for the Outlook web access in the following format:\n\n    `http(s)://<hostname>:<port>/owa`\n\n    For example, `http(s)://myhost:<443>/owa`\n\n\nRole required: service\\_mapping\\_admin\n\n### Procedure\n\n1.  Create a service instance.\n\n    1.  Navigate to **All** &gt; **Service Mapping** &gt; **Service Instances**.\n\n    2.  Select **New**.\n\n        The **Discoverable by Service Mapping** option is selected by default.\n\n    3.  In the **Name** field, enter a descriptive name for the service instance.\n\n2.  Define the entry point for this service instance:\n\n    1.  Select the **Web Application** tile.\n\n        The **Discoverable by Service Mapping** option is selected by default.\n\n    2.  In the **URL** field, enter the URL of the Outlook web access.\n\n        For example, http\\(s\\)://myhost:&lt;443&gt;/owa.\n\n    3.  Click **Add**.\n\n    4.  Click **Save**.\n\n3.  Click **Additional Info** on the left and clear the **Traffic based discovery** check box.\n\n4.  Click **Update**.\n\n5.  Verify that the mapping result is satisfactory:\n\n    1.  Click **View Map** and wait until the mapping is complete.\n\n        It may take a few minutes.\n\n    2.  Review the application service map and make sure that the service layout is as in the examples below.\n\n        \\[Omitted image \"CheckResultExchangeServer.png\"\\] Alt text: Check the result of mapping an application service containing the Microsoft Exchange Server.\n\n\nIf the mapping result is not as you expected, perform basic troubleshooting.\n\n<table id=\"table_kjv_sdy_32b\"><thead><tr><th>\n\nSymptom\n\n</th><th>\n\nCause\n\n</th><th>\n\nSolution\n\n</th></tr></thead><tbody><tr><td>\n\nDiscovery failed. The discovery log displays the message that starts with the following text: You must have the Exchange Common Commands PowerShell Snapin installed to use this script.\n\n</td><td>\n\nThe indication sections of the pattern fail, because the user does not have permissions for running PowerShell commands.\n\n</td><td>\n\nMake sure that you provided a user with permissions to run PowerShell commands on servers that host Microsoft Exchange Server components, for example, CAS.\n\n</td></tr><tr><td>\n\nDiscovery failed. The discovery log displays the error message that starts with the following text:\\[servername.destination.com\\] Connecting to remote server failed with the following error message: The WinRM client can not process the request. The authentication mechanism requested by the client is not supported by the server or unencrypted traffic is disabled in the service configuration. Verify the unencrypted traffic setting in the service configuration or specify one of the authentication mechanisms supported by the server.\n\n</td><td>\n\nThe indication sections of the pattern fail, because the MID Server is not configured as a trusted host on the component you are discovering.\n\n</td><td>\n\nAdd the MID Server to the list of trusted hosts on all hosts that you want to discover.\n\n</td></tr><tr><td>\n\nThe application service map is very large, because it includes connections to all Outlook clients.\n\n</td><td>\n\n\\(In deployments using Microsoft Exchange Server 2007, 2010 or 2013\\), Service Mapping created connections using traffic-based discovery, which traces all open connections, instead of using PowerShell commands.\n\n</td><td>\n\nMake sure that you provided a user with permissions to run PowerShell commands on servers that host Microsoft Exchange Server components, for example, CAS.\n\n</td></tr></tbody>\n</table>"}}