Exchange 2016, 2019 Internal / External URL’leri (Virtual Directory) PowerShell ile Yapılandırmak

# ================== Parametreler ==================
$Servers        = @("EX01-2019")          # Birden fazla sunucu: @("EX01-2019","EX02-2019")
$Domain         = "kadirkozan.com"
$WebSubdomain   = "mail"                  # web servisi için FQDN: mail.domain
$AutoSubdomain  = "autodiscover"          # autodiscover FQDN: autodiscover.domain

# Unified namespace: içeride/dışarıda aynı adres
$ExternalFqdn   = "$WebSubdomain.$Domain"
$InternalFqdn   = "$WebSubdomain.$Domain"

$AutodiscoverUri = "https://$AutoSubdomain.$Domain/Autodiscover/Autodiscover.xml"

# ================== Yardımcı fonksiyon ==================
function Show-SetResult {
    param($Name,$Before,$After)
    Write-Host ("`n[ {0} ]" -f $Name) -ForegroundColor Cyan
    Write-Host ("  Before: {0}" -f $Before)
    Write-Host ("  After : {0}" -f $After) -ForegroundColor Green
}

foreach ($Server in $Servers) {
    Write-Host "`n=== Sunucu: $Server ===" -ForegroundColor Yellow

    # 1) Autodiscover Service Connection Point (SCP)
    try {
        $before = (Get-ClientAccessService -Identity $Server).AutoDiscoverServiceInternalUri
        Get-ClientAccessService -Identity $Server | Set-ClientAccessService -AutoDiscoverServiceInternalUri $AutodiscoverUri
        $after  = (Get-ClientAccessService -Identity $Server).AutoDiscoverServiceInternalUri
        Show-SetResult "Autodiscover (SCP)" $before $after
    } catch {
        Write-Warning "Get-ClientAccessService başarısız; eski sürümlerde CAS cmdlet'leri kullanılabilir."
        try {
            $before = (Get-ClientAccessServer -Identity $Server).AutoDiscoverServiceInternalUri
            Get-ClientAccessServer -Identity $Server | Set-ClientAccessServer -AutoDiscoverServiceInternalUri $AutodiscoverUri
            $after  = (Get-ClientAccessServer -Identity $Server).AutoDiscoverServiceInternalUri
            Show-SetResult "Autodiscover (SCP - CAS)" $before $after
        } catch { Write-Error $_ }
    }

    # Ortak URL tabanı
    $intBase = "https://$InternalFqdn"
    $extBase = "https://$ExternalFqdn"

    # 2) ECP
    Get-EcpVirtualDirectory -Server $Server | ForEach-Object {
        $before = $_ | Select-Object InternalUrl,ExternalUrl
        $_ | Set-EcpVirtualDirectory -InternalUrl "$intBase/ecp" -ExternalUrl "$extBase/ecp"
        $after  = (Get-EcpVirtualDirectory -Identity $_.Identity) | Select-Object InternalUrl,ExternalUrl
        Show-SetResult "ECP $($_.Identity)" ($before | Out-String) ($after | Out-String)
    }

    # 3) OWA
    Get-OwaVirtualDirectory -Server $Server | ForEach-Object {
        $before = $_ | Select-Object InternalUrl,ExternalUrl
        $_ | Set-OwaVirtualDirectory -InternalUrl "$intBase/owa" -ExternalUrl "$extBase/owa"
        $after  = (Get-OwaVirtualDirectory -Identity $_.Identity) | Select-Object InternalUrl,ExternalUrl
        Show-SetResult "OWA $($_.Identity)" ($before | Out-String) ($after | Out-String)
    }

    # 4) EWS
    Get-WebServicesVirtualDirectory -Server $Server | ForEach-Object {
        $before = $_ | Select-Object InternalUrl,ExternalUrl
        $_ | Set-WebServicesVirtualDirectory -InternalUrl "$intBase/EWS/Exchange.asmx" -ExternalUrl "$extBase/EWS/Exchange.asmx"
        $after  = (Get-WebServicesVirtualDirectory -Identity $_.Identity) | Select-Object InternalUrl,ExternalUrl
        Show-SetResult "EWS $($_.Identity)" ($before | Out-String) ($after | Out-String)
    }

    # 5) ActiveSync
    Get-ActiveSyncVirtualDirectory -Server $Server | ForEach-Object {
        $before = $_ | Select-Object InternalUrl,ExternalUrl
        $_ | Set-ActiveSyncVirtualDirectory -InternalUrl "$intBase/Microsoft-Server-ActiveSync" -ExternalUrl "$extBase/Microsoft-Server-ActiveSync"
        $after  = (Get-ActiveSyncVirtualDirectory -Identity $_.Identity) | Select-Object InternalUrl,ExternalUrl
        Show-SetResult "ActiveSync $($_.Identity)" ($before | Out-String) ($after | Out-String)
    }

    # 6) OAB
    Get-OabVirtualDirectory -Server $Server | ForEach-Object {
        $before = $_ | Select-Object InternalUrl,ExternalUrl
        $_ | Set-OabVirtualDirectory -InternalUrl "$intBase/OAB" -ExternalUrl "$extBase/OAB"
        $after  = (Get-OabVirtualDirectory -Identity $_.Identity) | Select-Object InternalUrl,ExternalUrl
        Show-SetResult "OAB $($_.Identity)" ($before | Out-String) ($after | Out-String)
    }

    # 7) MAPI (Outlook için kritik)
    Get-MapiVirtualDirectory -Server $Server | ForEach-Object {
        $before = $_ | Select-Object InternalUrl,ExternalUrl
        $_ | Set-MapiVirtualDirectory -InternalUrl "$intBase/mapi" -ExternalUrl "$extBase/mapi"
        $after  = (Get-MapiVirtualDirectory -Identity $_.Identity) | Select-Object InternalUrl,ExternalUrl
        Show-SetResult "MAPI $($_.Identity)" ($before | Out-String) ($after | Out-String)
    }

    # 8) PowerShell (uzaktan yönetim)
    Get-PowerShellVirtualDirectory -Server $Server | ForEach-Object {
        $before = $_ | Select-Object InternalUrl,ExternalUrl
        $_ | Set-PowerShellVirtualDirectory -InternalUrl "$intBase/powershell" -ExternalUrl "$extBase/powershell"
        $after  = (Get-PowerShellVirtualDirectory -Identity $_.Identity) | Select-Object InternalUrl,ExternalUrl
        Show-SetResult "PowerShell VDir $($_.Identity)" ($before | Out-String) ($after | Out-String)
    }

    # 9) Outlook Anywhere (eski istemciler için; modern Outlook MAPI/HTTP kullanır)
    try {
        $oa = Get-OutlookAnywhere -Server $Server -ErrorAction Stop
        $oa | ForEach-Object {
            $before = $_ | Select-Object ExternalHostname,InternalHostname,ExternalClientsRequireSsl,InternalClientsRequireSsl,DefaultAuthenticationMethod
            $_ | Set-OutlookAnywhere `
                -ExternalHostname $ExternalFqdn `
                -InternalHostname $InternalFqdn `
                -ExternalClientsRequireSsl $true `
                -InternalClientsRequireSsl $true `
                -DefaultAuthenticationMethod NTLM
            $after = (Get-OutlookAnywhere -Identity $_.Identity) | Select-Object ExternalHostname,InternalHostname,ExternalClientsRequireSsl,InternalClientsRequireSsl,DefaultAuthenticationMethod
            Show-SetResult "OutlookAnywhere $($_.Identity)" ($before | Out-String) ($after | Out-String)
        }
    } catch {
        Write-Host "OutlookAnywhere bulunamadı/uygulanmadı: modern Outlook MAPI/HTTP kullanıyor olabilir." -ForegroundColor DarkYellow
    }
}

Write-Host "`nİşlemler tamamlandı. IIS’yi geri dönüştürmek için: iisreset /noforce" -ForegroundColor Green

Get-OwaVirtualDirectory -Server EX01-2019 | fl InternalUrl,ExternalUrl
Get-EcpVirtualDirectory -Server EX01-2019 | fl InternalUrl,ExternalUrl
Get-WebServicesVirtualDirectory -Server EX01-2019 | fl InternalUrl,ExternalUrl
Get-MapiVirtualDirectory -Server EX01-2019 | fl InternalUrl,ExternalUrl
Get-ActiveSyncVirtualDirectory -Server EX01-2019 | fl InternalUrl,ExternalUrl
Get-OabVirtualDirectory -Server EX01-2019 | fl InternalUrl,ExternalUrl
Get-PowerShellVirtualDirectory -Server EX01-2019 | fl InternalUrl,ExternalUrl
(Get-ClientAccessService -Identity EX01-2019).AutoDiscoverServiceInternalUri

Test-ServiceHealth
Get-ServerComponentState EX01-2019

# İşlevsel testler (kimlik bilgisi gerekebilir)
Test-OwaConnectivity -ClientAccessServer EX01-2019 -HostName mail.kadirkozan.com -TrustAnySSLCertificate:$true
Test-WebServicesConnectivity -ClientAccessServer EX01-2019 -TrustAnySSLCertificate:$true
Test-ActiveSyncConnectivity -MailboxCredential (Get-Credential)
Test-MapiConnectivity