安装 Intune On-Premises Exchange ConnectorInstall the Intune On-premises Exchange Connector

适用于:经典控制台中的 IntuneApplies to: Intune in the classic console
正在查找有关 Azure 中的 Intune 的文档?Looking for documentation about Intune on Azure? 请转到此处Go here.

若要设置连接以使 Microsoft Intune 能够与托管移动设备邮箱的 Exchange Server 通信,则必须从 Intune 管理控制台下载和配置本地 Exchange Connector。To set up a connection that enables Microsoft Intune to communicate with the Exchange Server that hosts the mailboxes for the mobile devices, you must download and configure the On-premises Exchange Connector from the Intune administration console. Intune 仅支持每个订阅中存在一个 Exchange Connector 连接(任意类型)。Intune only supports one Exchange Connector connection of any type per subscription.

本地 Exchange Connector 的要求On-premises Exchange Connector requirements

下表列出了你在其中安装本地 Exchange Connector 的计算机的要求。The following table lists the requirements for the computer on which you install the On-premises Exchange Connector.

要求Requirement 更多信息More information
操作系统Operating systems Intune 支持在运行任何版本的 Windows Server 2008 SP2 64 位、Windows Server 2008 R2、Windows Server 2012 或 Windows Server 2012 R2 的计算机上安装 本地 Exchange Connector。Intune supports the On-premises Exchange Connector on a computer that runs any edition of Windows Server 2008 SP2 64-bit, Windows Server 2008 R2, Windows Server 2012, or Windows Server 2012 R2.

该连接器在任何 Server Core 安装上都不受支持。The Connector is not supported on any Server Core installation.
Microsoft ExchangeMicrosoft Exchange 本地连接器需要 Microsoft Exchange 2010 SP1 或更高版本或旧版 Exchange Online Dedicated。On-premises Connectors require Microsoft Exchange 2010 SP1 or later or legacy Exchange Online Dedicated. 若要确定 Exchange Online Dedicated 环境采用的是配置还是配置,请与帐户管理员联系。To determine if your Exchange Online Dedicated environment is in the new or legacy configuration, contact your account manager.
移动设备管理机构Mobile device management authority 将移动设备管理机构设置为 IntuneSet the mobile device management authority to Intune.
硬件Hardware 安装连接器的计算机需要 1.6 GHz CPU、2 GB RAM 和 10 GB 可用磁盘空间。The computer on which you install the connector requires a 1.6 GHz CPU with 2 GB of RAM and 10 GB of free disk space.
Active Directory 同步Active Directory synchronization 必须设置 Active Directory 同步,以便将本地用户和安全组与 Azure Active Directory 的实例同步,然后才能使用连接器将 Intune 连接到 Exchange Server。Before you can use Connector to connect Intune to your Exchange Server, you must set up Active Directory synchronization so that your local users and security groups are synchronized with your instance of Azure Active Directory.
其他软件Additional software Microsoft .NET Framework 4.5 和 Windows PowerShell 2.0 的完全安装必须安装在托管连接器的计算机上。A full installation of Microsoft .NET Framework 4.5 and Windows PowerShell 2.0 must be installed on the computer that hosts the connector.
网络Network 在其中安装连接器的计算机必须位于与托管 Exchange Server 的域具有信任关系的域中。The computer on which you install the connector must be in a domain that has a trust relationship to the domain that hosts your Exchange Server.

计算机需要配置才能使其通过防火墙和代理服务器在端口 80 和 443 上访问 Intune 服务。The computer requires configurations to enable it to access the Intune service through firewalls and proxy servers over Ports 80 and 443. Intune 使用的域包括 manage.microsoft.com、*manage.microsoft.com 和 *.manage.microsoft.com。Domains that are used by Intune include manage.microsoft.com, *manage.microsoft.com, and *.manage.microsoft.com.

Exchange cmdlet 要求Exchange cmdlet requirements

你必须创建 Intune Exchange Connector 使用的 Active Directory 用户帐户。You must create an Active Directory user account that is used by the Intune Exchange Connector. 帐户必须具有运行以下要求的 Windows PowerShell Exchange cmdlets 的权限:The account must have permission to run the following required Windows PowerShell Exchange cmdlets:

  • Get-ActiveSyncOrganizationSettings、Set-ActiveSyncOrganizationSettingsGet-ActiveSyncOrganizationSettings, Set-ActiveSyncOrganizationSettings
  • Get-CasMailbox、Set-CasMailboxGet-CasMailbox, Set-CasMailbox
  • Get-ActiveSyncMailboxPolicy、Set-ActiveSyncMailboxPolicy、New-ActiveSyncMailboxPolicy、Remove-ActiveSyncMailboxPolicyGet-ActiveSyncMailboxPolicy, Set-ActiveSyncMailboxPolicy, New-ActiveSyncMailboxPolicy, Remove-ActiveSyncMailboxPolicy
  • Get-ActiveSyncDeviceAccessRule、Set-ActiveSyncDeviceAccessRule、New-ActiveSyncDeviceAccessRule、Remove-ActiveSyncDeviceAccessRuleGet-ActiveSyncDeviceAccessRule, Set-ActiveSyncDeviceAccessRule, New-ActiveSyncDeviceAccessRule, Remove-ActiveSyncDeviceAccessRule
  • Get-ActiveSyncDeviceStatisticsGet-ActiveSyncDeviceStatistics
  • Get-ActiveSyncDeviceGet-ActiveSyncDevice
  • Get-ExchangeServerGet-ExchangeServer
  • Get-ActiveSyncDeviceClassGet-ActiveSyncDeviceClass
  • Get-RecipientGet-Recipient
  • Clear-ActiveSyncDevice、Remove-ActiveSyncDeviceClear-ActiveSyncDevice, Remove-ActiveSyncDevice
  • Set-ADServerSettingsSet-ADServerSettings
  • Get-CommandGet-Command

下载本地 Exchange Connector 软件安装包Download the On-premises Exchange Connector software installation package

  1. 在支持本地 Exchange Connector 的 Windows Server 操作系统上,使用用户帐户(该帐户是 Exchange 租户中的管理员且有权使用 Exchange Server)打开 Microsoft Intune 管理控制台 (https://manage.microsoft.com) 。On a supported Windows Server operating system for the On-premises Exchange Connector, open the Microsoft Intune administration console (https://manage.microsoft.com) with a user account that is an administrator in the Exchange tenant and that has a license to use Exchange Server. 打开“设置 Exchange 连接”Open set up Exchange Connection

  2. 在工作区快捷方式窗格中,选择“管理”>“移动设备管理” > “Microsoft Exchange”>“设置 Exchange 连接”。In the workspace shortcuts pane, choose Admin>Mobile Device Management > Microsoft Exchange>Setup Exchange Connection.

  3. 在“设置 Exchange 连接”页上,选择“下载本地连接器”。On the Setup Exchange Connection page, choose Download On-Premises Connector.

  4. 本地 Exchange Connector 包含在可以打开或保存的压缩 (.zip) 文件夹中。The On-premises Exchange Connector is contained in a compressed (.zip) folder that can be opened or saved. 在“文件下载”对话框中,选择“保存”以将压缩的文件夹存储到安全位置。In the File Download dialog box, choose Save to store the compressed folder to a secure location.

重要

请勿重命名或移动本地 Exchange Connector 文件夹中的文件。Do not rename or move the files that are in the On-premises Exchange Connector folder. 移动或重命名该文件夹的内容将导致安装失败。Moving or renaming the folder's contents will cause the installation to fail.

安装和配置 Intune On-Premises Exchange ConnectorInstall and configure the Intune On-premises Exchange Connector

执行下列步骤以安装 Intune On-Premises Exchange Connector。Perform the following steps to install the Intune On-premises Exchange Connector. 每个 Intune 订阅只能安装一次本地 Exchange Connector,并且只能安装在一台计算机上。The On-premises Exchange Connector can only be installed once per Intune subscription, and only on one computer. 如果尝试配置其他本地 Exchange Connector,新连接将替换原始连接。If you try to configure an additional On-premises Exchange Connector, the new connection will replace the original one.

  1. 在支持本地连接器的操作系统上,将 Exchange_Connector_Setup.zip 中的文件提取到安全位置。On a supported operating system for the On-premises Connector, extract the files in Exchange_Connector_Setup.zip to a secure location.

  2. 提取文件后,打开提取的文件夹并双击 Exchange_Connector_Setup.exe 安装本地 Exchange Connector。After the files are extracted, open the extracted folder and double-click Exchange_Connector_Setup.exe to install the On-premises Exchange Connector.

    重要

    如果目标文件夹不是安全位置,则应该在安装本地连接器之后删除证书文件 WindowsIntune.accountcertIf the destination folder is not a secure location, you should delete the certificate file WindowsIntune.accountcert after you install the On-premises Connector.

  3. 在“Microsoft Intune Exchange Connector”对话框中,选择“本地 Microsoft Exchange Server” 或“托管 Microsoft Exchange Server”。In the Microsoft Intune Exchange Connector dialog box, select either On-premises Microsoft Exchange Server or Hosted Microsoft Exchange Server.

    选择 Exchange 服务器类型

    对于本地 Exchange 服务器,请提供托管客户端访问服务器角色的 Exchange 服务器的服务器名称或完全限定的域名。For an On-premises Exchange server, provide either the server name or the fully-qualified domain name of the Exchange server that hosts the Client Access Server role.

    对于托管 Exchange 服务器,请提供 Exchange 服务器地址。For a hosted Exchange server, provide the Exchange server address. 查找托管 Exchange 服务器 URL:To find the hosted Exchange server URL:

    1. 打开 Outlook Web App for Office 365。Open the Outlook Web App for Office 365.

    2. 选择左上角的 ? 图标Choose the ? 然后选择“关于”。icon at the upper left, and then select About.

    3. 找到“POP 外部服务器” 值。Locate the POP External Server value.

    4. 选择“代理服务器”以指定托管 Exchange 服务器的代理服务器设置。Choose Proxy Server to specify proxy server settings for your hosted Exchange server.

      1. 选择“同步移动设备信息时使用代理服务器” 。Select Use a proxy server when synchronizing mobile device information.

      2. 输入要用于访问服务器的 代理服务器名称端口号Enter the proxy server name and the port number to be used to access the server.

      3. 如果必须提供用户凭据来访问代理服务器,请选择“使用凭据连接到代理服务器”。If it's necessary to provide user credentials to access the proxy server, select Use credentials to connect to the proxy server. 然后输入“域\用户”和“密码”。Then enter the domain\user and the password.

      4. 选择“确定”。Choose OK.

    5. 在“用户(域\用户)”和“密码”字段中,输入连接到 Exchange 服务器所需的凭据。In the User (Domain\user) and Password fields, enter the credentials that are necessary to connect to your Exchange server.

    6. 提供必要的管理凭据将通知发送到用户的 Exchange Server 邮箱。Provide the necessary administrative credentials to send notifications to a user’s Exchange Server mailbox. 可使用 Intune 中的条件访问策略配置这些通知。You can configure these notifications with Conditional Access policies in Intune.

      确保在 Exchange 客户端访问服务器上配置 Autodiscover 服务和 Exchange Web 服务。Ensure that the Autodiscover service and Exchange Web Services are configured on the Exchange Client Access Server. 有关详细信息,请参阅客户端访问服务器For more information, see Client Access server.

    7. 在“密码”字段中提供此帐户的密码,使 Intune 能够访问 Exchange 服务器。In the Password field, provide the password for this account to enable Intune to access the Exchange Server.

    8. 选择“连接”。Choose Connect.

可能需要几分钟时间才能完成配置该连接。It might take a few minutes for the connection to be configured.

在配置期间,Exchange Connector 会存储你的代理设置以便能够访问 Internet。During configuration, the Exchange Connector stores your proxy settings to enable access to the Internet. 如果代理设置发生更改,则必须重新配置 Exchange Connector 才能将更新的代理设置应用于 Exchange Connector。If your proxy settings change, you will have to reconfigure the Exchange Connector to apply the updated proxy settings to the Exchange Connector.

Exchange Connector 设置连接后,与在 Exchange Connector 中管理的用户关联的移动设备会自动同步并添加到 Exchange Connector 中。After the Exchange Connector sets up the connection, mobile devices that are associated with users that are managed in Exchange Connector are automatically synchronized and added to the Exchange Connector. 此同步可能需要一些时间才能完成。This synchronization might take some time to complete.

备注

如果已经安装了本地 Exchange Connector 并且在某一时刻删除 Exchange 连接,则必须从安装了本地 Exchange Connector 的计算机中卸载此软件。If you have installed the On-premises Exchange Connector, and if at some point you delete the Exchange connection, you must uninstall the On-premises Exchange Connector from the computer onto which it was installed.

验证 Exchange 连接Validate the Exchange connection

在成功配置 Exchange Connector 之后,可以查看连接的状态和最后一次成功同步尝试的状态。After you have successfully configured the Exchange Connector, you can view the status of the connection and the last successful synchronization attempt. Microsoft Intune 管理控制台中,选择“管理”工作区。In the Microsoft Intune administration console, choose the ADMIN workspace. 在“移动设备管理”下选择“Microsoft Exchange”,然后验证你提供的详细信息是否出现在“Exchange 连接信息”下。Under Mobile Device Management, choose Microsoft Exchange, and then validate that the details you provided appear under Exchange Connection Information.

你也可以检查最后一次成功同步尝试的时间和日期。You can also check the time and date of the last successful synchronization attempt.

要提交产品反馈,请访问 Intune Feedback