1. Twingate

In testing a lot of the solutions today for remote access, I have settled on Twingate for secure remote access for home lab. It is really easy to setup and they have a free account which is great for home labs. With the free account, it is free for 5 users, you get the enterprise connectors, split tunneling, and conditional access policies.

Some may not like the fact that it is a paid solution with a proprietary cloud dashboard, but so far, this has not been a show stopper for me. The cloud dashboard actually makes it easier to manage from wherever you are and since it is free as part of the solution, this is an added bonus in my opinion.

Also, since you can spin up the connectors that you run on-premises using Docker, Raspberry Pi or many other options that are available. I have these spread out through my network on different devices, including:

• Running a connector on my Synology NAS.
• Running a connector on one of my Docker hosts.
• I have one also running in a dedicated virtual machine.
• A Raspberry Pi which I can plug into any network with an internet connection.

What is Twingate?

Twingate is more of a hybrid of VPN and proxy technology. Compared to traditional VPN solutions, it has a much more modern approach to segmentation, access control, and other features like zero-trust.

Reasons I use it:

• No open ports on my firewall – How? Well, the traffic is established from the connector so as long as it can egress, it can establish the tunnel
• Granular access control per user and device
• Easy to deploy on Docker, VMs, or Raspberry Pi
• Works great with dynamic IPs or CGNAT
• Built-in DNS resolution for internal services you may be hosting

Even when I am traveling, I can hit any internal service in my home lab. This includes Proxmox dashboard, pfSense, Netdata, Gitea, Portainer, etc, just like I was local on the LAN.

Twingate also lets me separate services. I can restrict certain resources to certain devices or accounts. This is perfect if I want to allow read-only access to others (or segment off something sensitive).

2. Tailscale mesh VPN built on Wireguard

One of the other very popular choices in this space is Tailscale. It is a mesh VPN that is built on Wireguard. Home labbers love the solution because it is dead simple. You install the agent on your devices, sign into it, and when you do, everything is connected with each other. Each device that is on the Tailscale network gets a private IP address in the 100.x.x.x range. Using this IP address, between devices, you can talk to other devices directly.

What makes Tailscale awesome to use:

• No port forwarding is required
• It works behind NAT, CGNAT, double NAT
• It supports ACLs, MagicDNS, subnet routers
• Free for up to 100 devices at this time

Tailscale is great if you want an always-on private network where your laptop, phone, Raspberry Pi, and server all “see” each other like they’re on the same LAN.

I’ve used Tailscale to:

• Connect remote machines together without hassle
• Connect to Home Assistant remotely
• Access Proxmox web GUI on my phone

It just works and the WireGuard-based performance is excellent. The main trade-off is that all devices must use Tailscale to communicate.

3. Plain WireGuard

For those that want a totally vanilla VPN solution, WireGuard is a great option. It’s the leanest, fastest VPN protocol out there. In fact many of the other solutions that we know and love are using Wireguard under the hood. And the great thing is that it is totally free and open-source.

You can use it to:

• Install it on Linux, routers, Docker containers
• Set up point-to-site or site-to-site tunnels
• Build roaming VPNs with static peers or dynamic endpoints

Why choose vanilla WireGuard:

• Full control over the config
• Zero cloud dependencies
• Extremely fast and secure
• Tiny footprint

WireGuard is the most “bare metal” of the solutions here. If you’re comfortable editing config files and managing keys, it’s rock solid. WG-Easy is a solution I have written about before that makes configuring Wireguard much easier.

4. Cloudflare Tunnel

If you have a web service that you want to make available over the public Internet but you want to do this securely, Cloudflare tunnel is probably the right tool to use. Instead of opening ports like we have always done through the firewall, Cloudflare tunnels has you run a lightweight agent inside your home network (much like Twingate) that establishes a websockets over HTTPS tunnel outbound.

The cool thing is Cloudflare Tunnel can connect more than just HTTP web servers. It can connect SSH servers, remote desktops, and other protocols. Your “origin” servers serve the traffic through Cloudflare without being vulnerable to attacks that bypass Cloudflare. It then handles all the incoming requests made and routes them back to your internal network service.

If you want to make a service accessible via the public Internet, Cloudflare Tunnel is probably the right tool.

Why it’s awesome to use:

• No open ports, no NAT config
• Built-in DDoS protection behind Cloudflare’s network
• Automatic SSL with Let’s Encrypt
• Supports access rules with Cloudflare Access

With Cloudflare Tunnel, you can expose a service like Gitea, Portainer, or Grafana at https://myapp.mydomain.com, but only allow access to certain users or IPs. You can even integrate it with identity providers like GitHub or Google.

I’ve used this to:

• Share dashboards with others
• Demos
• Access services from mobile without VPN connections
• Test webhooks or third-party integrations

Just remember, with Cloudflare tunnels, this is still exposing your service to the public, but through a heavily protected proxy. It’s better than port-forwarding, but not as private as Twingate or Tailscale.

Conclusion

Exposing your home lab to the Internet is sometimes a sledgehammer approach that can work to get your services out there quickly, but from a security perspective, it is not worth it. I have self-hosted a few things that I have exposed directly to the Internet with firewall rules and other hardening, but given enough time and persistence, attackers can find a way to get into a machine, especially for dangerous services like RDP, etc.

Since there are great tools available out there for secure remote access for home lab, this is why I stopped exposing my home lab entirely. The services we have covered are what I think are some of the best and each has its strong suite. Whatever tool you choose, stop punching holes in your firewall and start using one of these modern solutions.

If you’re struggling to keep track of your online passwords, you’re not alone. Almost everything you do on the internet beyond simple web browsing requires a login. Some people use easy-to-remember passwords, while others have one complex password for all their accounts. Neither option is recommended since they make it easy for identity thieves and other criminals to steal your credentials. A much better option is a password manager – but what are they, how do they work, and are they safe?

What is a password manager?

A password manager is software that helps users create strong passwords, store them in a digital vault protected by a single master password, and then retrieve them as needed when logging into accounts.

Should you use a password manager?

Using a password manager certainly offers benefits. Password leaks have become common – that is, when websites are hacked, and user data such as usernames and passwords fall into the hands of criminals. If hackers obtain your login credentials, they can try them on other websites. If you use the same credentials across multiple websites, then a leak of one website’s data could enable criminals to access all your online accounts. That is why it’s essential to use strong and unique passwords for each website. A strong password comprises at least 12 characters – ideally more – and is a mix of upper- and lower-case letters, numbers, and symbols. It also avoids obvious or commonly-known information about you, such as your date of birth or names of family members.

However, most of us have many online accounts – one 2020 study suggested the average internet user has around 100 – so keeping tracking of numerous, long, complex passwords become difficult. That’s where password managers come in – they simplify the process by generating secure, random passwords for you and remembering them, so you don’t have to. Ultimately, the only password you need to remember is for the password manager itself.

How does a password manager work?

There are various password managers on the market. Once you’ve decided which one is right for you, the first thing to do is set it up and protect it with a master password. You will be keeping all your passwords in one place – i.e., in your digital vault – and your master password will be your key to that vault. Since your master password encrypts the contents of your vault, the password you choose must be a strong one. It’s also important not to lose it – otherwise, you will need to reset the passwords for all your online accounts – so make sure it’s something you won’t forget. On mobile devices, some password managers allow access via fingerprint or face ID.

Once the password manager is installed, it will capture your username and passwords and save them in your digital vault whenever you log into an app or site. A good password manager should keep track of any changes made to usernames and passwords within the vault and offer to update the stored information for that website or app. Many password managers use auto-fill – that is, they automatically fill in your login credentials on websites and apps when you visit the relevant pages.

As well as saving time, the autofill function can help alert you to phishing – for example, if you find yourself on a site that resembles your normal banking site, but the form fields don’t automatically populate with your login information, it could be a sign that you’re on a phishing website with a different URL, potentially using a typo squatting domain.

Password managers don’t just remember password information either: most password managers will also remember your personal information, such as name, address, and credit card details, and autofill these where appropriate on web forms. This saves time when carrying out a transaction like online shopping. A good password manager will also store documents, medical records, and photos in an encrypted vault which only you can unlock.

When creating new accounts, a password manager will offer to generate a new secure random password for you, which saves the hassle of creating new passwords each time. Good password managers should also let you know if existing passwords are weak or have been compromised in a data breach.

One way that users can maximize the security of their password manager is by enabling multi-factor authentication (MFA) to their accounts. MFA means that unlocking your password manager requires something in addition to your master password. This might be a fingerprint, facial recognition, a code sent to a mobile authenticator app, or a hardware security key.

Once you have created your master password and set up multi-factor authentication on your account, you can make your password manager easier to use by installing a browser extension. A good password manager will offer extensions for popular browsers.

Are password managers safe?

Given the information they hold – all your passwords, contact details, credit card details, and potentially other important documents – it’s reasonable to ask, how safe are password managers, and are password managers secure?

Some password managers can be hacked. But in those cases, there’s an important caveat: the information contained within your password manager should be encrypted. Assuming your password manager uses industry-standard encryption such as Advanced Encryption Standard (AES), it should be almost impossible for criminals to decipher the contents. While each password manager offers different features, it is generally true to say that password managers are safe to use.

The password managers themselves do not store or access your master password or the encrypted information in your password database. This provides an additional layer of security. A key aspect of password manager security lies in the strength of your master password – so it’s essential to choose something strong (and to keep it safe).

Tips for choosing a password manager

Here are some useful tips on choosing the right password manager for you:

• Choose software that has strong encryption.
• Check for a lockout feature, which is helpful in case you forget your password.
• Should something go wrong, be prepared to understand how the vendor will reach out to help you — telephone, email, or chat.
• Check whether the software offers identity theft protection and whether it takes other measures to protect against other malicious behaviours.
• Be comfortable using the software. Look into the usability of any password manager you are considering and ensure you will be able to integrate it with whatever devices or browsers you typically use.
• Calculate the costs and benefits. A full-featured password management suite certainly brings the best value, but there are also free password manager applications that you can download as a trial to test your interest.

A word on browser-based password managers. Some web browsers have integrated password managers. These tend not to compare favourably with dedicated password managers since they usually store passwords on your computer in an unencrypted form. This means that, unless you encrypt your computer’s hard drive, people could access the password files on your computer and view them. In addition, some browser-based passwords don’t automatically generate random passwords, and they may not offer cross-platform syncing.

FAQs about password managers

How do password managers work?

Password managers store all your passwords in a digital encrypted vault. When using a password manager, when you visit websites, the password manager will auto-fill the appropriate login information for that website. This means that you don’t have to remember your username, password, and email address for each website – the password manager does it for you.

Why use a password manager?

It’s recommended to use strong, unique passwords for each site you log into. But most of us have numerous passwords, and keeping track of them can be difficult. A password manager simplifies the process by generating secure, random passwords and remembering them, so you don’t have to. Ultimately, the only password you need to remember is for the password manager itself. In addition, most password managers will allow you to store documents, medical records, and photos in an encrypted vault that only you can unlock.

How safe are cloud-based password managers?

Most cybersecurity experts agree that cloud-based password managers are safe to use and, in fact, are the most secure way to store your passwords. A password manager with AES-256 encryption – that is, military-grade encryption – is almost impossible to crack. A good password manager should operate from a zero-knowledge principle – that is, the software creator should not know anything at all about your data, nor should anyone else. In addition, the ability to enable multi-factor authentication (MFA) on your password manager provides an additional layer of security. No matter which password manager you choose, avoid accessing it on public networks because your data can still be captured at any time.

A password manager helps protect your data online

When used daily, password managers are a convenient solution that can help secure your most private and sensitive information on the internet. There are various password managers on the market, and it’s worth taking the time to find one that is right for you. The right password manager will help to protect your data online.

Microsoft, as per its product roadmap for Exchange Server, has released the Microsoft Exchange Server SE (Subscription Edition) to meet the needs of on-premises customers. As the name states, this new iteration of Exchange Server will be subscription-based, similar to the SharePoint Server Subscription Edition. This means that it will require subscription licenses or active Software Assurance (SA) licenses, and licenses for users. The Exchange Server subscription will include access updates, security patches, and support.

Features and Changes in Exchange Server SE

Although the Exchange Server SE is based on the Exchange Server 2019, there are a number of improvements and new features in the new edition. These are:

• One of the major new features is the support for the new operating system of Microsoft, which is Windows Server 2025.
• With regards to product key or license, if you are upgrading from a previous Exchange Server version, a new product key will be needed.
• There is an exception to hybrid setups, where a free license will be available via the Hybrid Configuration Wizard (HCW).
• To improve security, support for Transport Layer Security (TLS) 1.3 is added in the Subscription Edition.

However, there are a few features that will not be available in Exchange Server SE, such as:

• It will not support Outlook Anywhere (RPC/ HTTP protocol) service. So, if you have any systems which are dependent on the protocol, you need to upgrade the systems or change the integration part with the Exchange Server.
• The new version will not support the Unified Communications Managed API (UCMA 4.0) and instant messaging in Outlook.

Upgrading to Exchange Server SE

Exchange Server SE (Subscription Edition) will block the coexistence support with Exchange Server 2013. With Cumulative Update 1 (CU) for the Subscription Edition, coexistence will be blocked with all the unsupported versions of Exchange Server, i.e., Exchange Server 2013, 2016, and 2019. This means that if you’re running an older version of Exchange Server (Exchange Server 2013 or earlier), you need to decommission it prior to upgrade. After the release of Cumulative Update (CU) 1, you need to decommission any other older version of Exchange Server.

If you are running an Exchange Server 2016 or 2019, you should consider to first upgrade to the latest Cumulative Update (Exchange Server 2016 CU23 or Exchange Server 2019 CU13/CU14).

 To upgrade from Exchange 2016 or 2019 to the new Exchange Server SE, there are two methods:

• Legacy Upgrade: In this, you need to introduce the new Exchange Server version in the organization, move all the mailboxes and other resources to the new server, and then uninstall the old server. This type of upgrade is suitable when migrating from Exchange 2016 to Exchange 2019 or from Exchange 2016 to Exchange Server SE.

• In-Place Upgrade: It is similar to installing a cumulative update (CU). This method is available only for upgrading from Exchange Server 2019 (with CU14 or CU15) to Exchange Server SE.

Things to Consider before Upgrading to Exchange Server SE

If you’re planning to upgrade to the Exchange Server Subscription Edition, you must ensure that all the requirements and guidelines set by Microsoft are fulfilled beforehand. Here are some things you should consider before upgrade:

• Check the Compatibility and Guidelines: It’s important to follow the coexistence guidelines and check compatibility of the operating system. If you’ve Exchange Server 2019, it’s important to update it to the Cumulative Update (CU) 15.
• Backup the Infrastructure: It’s a best practice to take backup of the servers, along with the mailbox databases prior to upgrade. If something happens, this will come in handy.
• Maintenance Window: The upgrade operation should be scheduled outside office hours. Also, inform the involved parties accordingly.
• Obtain the License: You should have the Subscription Edition license in hand so that you can activate the system once it has been fully upgraded. You can obtain the license from Microsoft or through their respective vendor.
• Post Upgrade Tasks: Post upgrade, you should perform tests (mail flow tests and other tests) to ensure that everything is working correctly.

Conclusion

So, if you’re running the Exchange Server 2013/2016, it is suggested you can upgrade to Exchange 2019. This will allow you to perform the legacy upgrade (from Exchange Server 2016 to 2019). For this, you need to install the Exchange Server 2019 in the organization and move all the databases and other resources to the newer version. Once complete run the in-place upgrade and follow the wizards

Install Exchange Server step by step on Windows Server. Before you start installing Exchange Server, make sure to install Exchange Server prerequisites first. After that, prepare Active Directory and domains for Exchange Server. After doing both tasks, you are ready to install Exchange Server. In this article, you will learn how to install Exchange Server.

Download Exchange Server

Go to the Exchange Server build numbers and release dates page. The page lists all Exchange Server build numbers and release dates. Download and save the Exchange Server ISO image.

Note: We recommend downloading the latest Exchange Server build version.

In File Explorer, right-click on the Exchange Server CU ISO image file and select Mount. It will mount the ISO to a drive. For example, the E:\ drive. The E:\ drive contains the Exchange installation files.

Mount the Exchange ISO image before proceeding to the next step.

Before installing Exchange Server

Before you can proceed further with the Exchange Server installation you must complete the following:

1. Install Exchange Server prerequisites
2. Prepare Active Directory and domains for Exchange Server

After you have walked through the above configuration, install the Exchange Mailbox Server Role.

Install Exchange Server prerequisites

Install Exchange Server prerequisites before you start to install Exchange Server. Ensure you have an operating system that supports the Exchange Server version that you want to install. In this article, we will look at how to install Exchange Server prerequisites on Windows Server.

Mailbox and Edge Transport server roles

The Mailbox server contains:

• Transport services that are used to route mail
• Mailbox databases that process, render, and store data
• Client Access services that accept client connections for all protocols

The Edge Transport server is:

• An optional role that handles all external mail flow for the Exchange organization
• Protecting the Exchange organization from viruses and spam as mail enters and leaves
• Installed in an Exchange organization perimeter (DMZ) network

Supported operating systems

Have a look at which operating systems support Exchange Server 2016 and Exchange Server 2019.

Exchange Server 2016

• Windows Server 2016 Standard or Datacenter (Exchange Server 2016 CU3 or later)
• Windows Server 2012 R2 Standard or Datacenter
• Windows Server 2012 Standard or Datacenter
• Windows Server Desktop Experience

Exchange Server 2019

• Windows Server 2022 Standard or Datacenter (Exchange Server 2019 CU12 or later)
• Windows Server 2019 Standard or Datacenter
• Windows Server Desktop Experience
• Windows Server Core

Install Exchange Mailbox server prerequisites

Follow the steps below to install Exchange Mailbox server prerequisites for Windows Server.

Step 1. Run PowerShell as administrator. Run the following command to install the required Windows components.

Install-WindowsFeature Server-Media-Foundation, NET-Framework-45-Core, NET-Framework-45-ASPNET, NET-WCF-HTTP-Activation45, NET-WCF-Pipe-Activation45, NET-WCF-TCP-Activation45, NET-WCF-TCP-PortSharing45, RPC-over-HTTP-proxy, RSAT-Clustering, RSAT-Clustering-CmdInterface, RSAT-Clustering-Mgmt, RSAT-Clustering-PowerShell, WAS-Process-Model, Web-Asp-Net45, Web-Basic-Auth, Web-Client-Auth, Web-Digest-Auth, Web-Dir-Browsing, Web-Dyn-Compression, Web-Http-Errors, Web-Http-Logging, Web-Http-Redirect, Web-Http-Tracing, Web-ISAPI-Ext, Web-ISAPI-Filter, Web-Metabase, Web-Mgmt-Console, Web-Mgmt-Service, Web-Net-Ext45, Web-Request-Monitor, Web-Server, Web-Stat-Compression, Web-Static-Content, Web-Windows-Auth, Web-WMI, Windows-Identity-Foundation, RSAT-ADDS

Step 2. Install .NET Framework 4.8 (restart required).

Step 3. Install Visual C++ Redistributable for Visual Studio 2012.

Step 4. Install Visual C++ Redistributable Packages for Visual Studio 2013.

Step 5. Install IIS URL Rewrite Module.

Note: The IIS URL Rewrite Module is required with Exchange Server 2016 CU22 and Exchange Server 2019 CU11 or later.

Step 6. Install Unified Communications Managed API 4.0 Runtime.

Install Exchange Edge Transport server prerequisites

Follow the steps below to install Exchange Edge Transport server prerequisites for Windows Server.

Step 1. Run PowerShell as administrator. Run the following command to install the required Windows components.

Install-WindowsFeature ADLDS

Step 2. Install .NET Framework 4.8 (restart required).

Step 3. Install Visual C++ Redistributable for Visual Studio 2012.

Install Exchange Management tools prerequisites

Follow the steps below to install Exchange Management tools prerequisites:

Step 1. Install Visual C++ Redistributable for Visual Studio 2012.

Step 2. Run PowerShell as administrator and run the following command to install the required Windows components.

Windows Server OS:

Install-WindowsFeature -Name Web-Mgmt-Console, Web-Metabase

Windows 10 and Windows 11 OS:

Enable-WindowsOptionalFeature -Online -FeatureName IIS-ManagementConsole, IIS-Metabase -All

Prepare Active Directory and domains for Exchange Server

You want to prepare Active Directory (AD) schema and domains for Exchange Server. Before you prepare Active Directory and domains for Exchange, install Exchange Server prerequisites. After that, you can install Exchange Server in the organization.

Information

Before you start, sign in to the Windows Server that will be the Exchange Server, and go through these steps:

• Install the latest Windows Updates
• Restart after installing Windows Updates
• Join the server to the domain

Prerequisites extending the Active Directory

Before extending the Active Directory schema, the following needs to be installed on the Exchange Server:

• .NET Framework must be installed
• The RSAT-ADDS feature must be installed
• Account needs to be added to the Schema Admins and Enterprise Admins security groups

Install .NET Framework

.NET Framework is already installed if you have followed Install Exchange Server prerequisites. If you didn’t, find the correct .NET Framework version on the Exchange Server supportability matrix. Go to the download page of .NET Framework and download the appropriate version.

In our example, we have to install .NET Framework 4.8. If the download finishes, right-click the file and choose run as administrator. Install the .NET Framework on the Exchange Server. Restart when the installation completes.

Note: You can extend the Active Directory Schema from the domain controller or any other server in the organization. The feature RSAT-ADDS is already installed on the domain controller. If you want to prepare the schema on the Domain Controller, you only need to install the .NET Framework. Some organizations have different teams because of different administrative responsibilities in the environment.

Install RSAT-ADDS feature

RSAT-ADDS feature is already installed if you have followed Install Exchange Server prerequisites. Suppose you didn’t install the RSAT-ADDS feature. Run PowerShell as administrator. Run the Install-WindowsFeature cmdlet, including the RSAT-ADDS feature.

Install-WindowsFeature RSAT-ADDS

The output below appears.

Success Restart Needed Exit Code Feature Result

——- ————– ——— ————–

True    No             Success   {Remote Server Administration Tools, Activ…

Schema Admins and Enterprise Admins security groups

Before you can extend the schema, your account needs to be a member of the Schema Admins and Enterprise Admins security groups. Open Active Directory and add both groups to your account if it’s not set already. These are high privilege groups. We recommend removing your account from the groups when you’re done with this task.

Note: If you’ve just added yourself to these groups, you’ll need to log out and back into the server for the new group membership to take effect.

Prepare Active Directory Schema

The first step in getting your organization ready for Exchange Server is to extend the Active Directory schema. Exchange stores a lot of information in Active Directory, but before it can do that, it needs to add/update classes and attributes.

In File Explorer, right-click on the Exchange Server CU ISO image file and select Mount. It will mount the ISO image to a drive. For example, the E:\ drive. The E:\ drive contains the Exchange installation files. Make sure to mount the Exchange ISO image before proceeding to the next step.

Run Command Prompt as administrator. Run the following command to extend/prepare the schema for Exchange Server.

E:\Setup.exe /IAcceptExchangeServerLicenseTerms_DiagnosticDataOFF /PrepareSchema

You will see the COMPLETED messages in the output. The extend/prepare schema for Exchange Server went successfully.

Prepare Active Directory

After the Active Directory schema has been extended, you can prepare other parts of Active Directory for Exchange Server. During this step, Exchange will create containers, objects, and other items in Active Directory to store information. The collection of the Exchange containers, objects, attributes, and so on is called the Exchange organization.

If you followed the article, you are already a member of the Schema Admins and Enterprise Admins security groups. Open Active Directory and add both groups to your account if it’s not set already. These are high privilege groups. We recommend you to remove your account from the groups when you’re done with this task.

Note: If you’ve just added yourself to these groups, you’ll need to log out and back into the Server for the new group membership to take effect.

If you do not already have an Exchange organization, you’ll need to provide a name for the organization.

Note: You need to select a name for the Exchange organization. The organization name is used internally by Exchange. It isn’t typically seen by users and doesn’t affect the functionality of Exchange. Also, it doesn’t determine what you can use for email addresses. The organization name can’t contain more than 64 characters and can’t be blank. Valid characters are A to Z, a to z, 0 to 9, hyphen or dash (-), and space, but leading or trailing spaces aren’t allowed. You can’t change the organization name after it’s set.

Run Command Prompt as administrator. Run the following command to prepare Active Directory for Exchange Server.

E:\Setup.exe /IAcceptExchangeServerLicenseTerms_DiagnosticDataOFF /PrepareAD /OrganizationName:”EXOIP”

The output will then display “The Exchange Server setup operation completed.

If you’re installing Exchange Server into an existing Exchange organization, you do not need to specify the organization name.

Run Command Prompt as administrator. Run the following command to prepare Active Directory for Exchange Server.

E:\Setup.exe /IAcceptExchangeServerLicenseTerms_DiagnosticDataOFF /PrepareAD

Prepare Active Directory domains

The final step to get Active Directory ready for Exchange is to prepare each of the Active Directory domains where Exchange will be installed. This step creates additional containers, security groups and sets permissions so that Exchange can access them.

If you have more than one domain, you can run the following command in Command Prompt to prepare all the domains for Exchange Server.

Note: If you have only one domain, you can skip this step because the /PrepareAD command in the previous step has already prepared the domain for you.

E:\Setup.exe /IAcceptExchangeServerLicenseTerms_DiagnosticDataOFF /PrepareAllDomains

You will get this at the end “The Exchange Server setup operation completed successfully.”

Check Exchange Active Directory versions

After you prepare AD for Exchange Server, you like to check if the Active Directory is updated. Run PowerShell as administrator. Make sure that you set the Execution Policy to Unrestricted. If you don’t, the script will not run.

Set-ExecutionPolicy Unrestricted -Force

Run the following commands one by one.

# Exchange Schema Version

$sc = (Get-ADRootDSE).SchemaNamingContext

$ob = “CN=ms-Exch-Schema-Version-Pt,” + $sc

Write-Output “RangeUpper: $((Get-ADObject $ob -pr rangeUpper).rangeUpper)”

# Exchange Object Version (domain)

$dc = (Get-ADRootDSE).DefaultNamingContext

$ob = “CN=Microsoft Exchange System Objects,” + $dc

Write-Output “ObjectVersion (Default): $((Get-ADObject $ob -pr objectVersion).objectVersion)”

# Exchange Object Version (forest)

$cc = (Get-ADRootDSE).ConfigurationNamingContext

$fl = “(objectClass=msExchOrganizationContainer)”

Write-Output “ObjectVersion (Configuration): $((Get-ADObject -LDAPFilter $fl -SearchBase $cc -pr objectVersion).objectVersion)”

Important: After you install Exchange on a server, you must not change the server’s name. Renaming a server after you’ve installed an Exchange server role is not supported.

Install Exchange Server with command line

There are two options for installing Exchange server. You can choose to:

1. Install Exchange Mailbox server using the setup wizard
2. Install Exchange Mailbox server using unattended mode (this article)

The Exchange setup wizard will guide you to install Exchange Server with GUI. The Exchange unattended mode will install Exchange Server with the command line.

Note: The Exchange Server installation will fail if there is a pending reboot available on the system. We recommend restarting the Windows Server before you start the installation.

Run Command Prompt as administrator. Install the Mailbox Server Role and the management tools in the default folder on the local server.

Exchange Server Mailbox Role finished installing. Reboot the server.

Sign in to Exchange Admin Center (EAC)

Sign in to Exchange Admin Center (EAC). Start your favourite browser and go to https://hostname/ecp. Change the hostname to yours. Another way is to use https://localhost/ecp.

You will get a certificate warning in your browser. Accept the risk and continue.

In our example, the Exchange Server hostname is EX01-2016.

Fill in the domain and administrator credentials. Then, click sign in.

The mailboxes area is almost empty, except for one mailbox that shows up. That’s the account that you used for installing Exchange Server.

Conclusion

You learned how to install Exchange Server step by step on Windows Server. An excellent way to install the Mailbox Server Role is with the command line. After a reboot, verify that you can sign in to the Exchange Admin Center.

Advantages and Disadvantages

In an increasingly digital and remote-first world, IT service providers and internal IT departments need efficient ways to monitor, maintain, and manage networks and endpoints. Remote Monitoring and Management (RMM) software has become an essential tool in achieving this, enabling IT professionals to proactively support systems without being physically present.

RMM tools have become especially vital in the wake of hybrid and remote work models. They provide IT teams with the visibility and control necessary to support a distributed workforce, manage endpoints across different geographies, and maintain strong cybersecurity hygiene from a central console.

What is RMM?

RMM stands for Remote Monitoring and Management. It is a type of software designed to help IT professionals monitor client endpoints, networks, and computers remotely. With RMM tools, administrators can track performance, deploy updates, manage patches, automate maintenance tasks, and address issues before they impact users.

Commonly used by Managed Service Providers (MSPs), RMM platforms are also increasingly adopted by internal IT teams to improve efficiency and reduce downtime.

At its core, RMM software acts as the digital eyes and hands of IT professionals. It not only monitors the health and performance of systems but also provides the ability to apply patches, reboot machines, install software, and run scripts — all without interrupting the end-user experience. This makes it an indispensable tool for both reactive troubleshooting and proactive system health management.

Advantages of RMM

• Proactive Maintenance: RMM tools allow for continuous monitoring of systems, enabling issues to be detected and resolved before they cause significant disruption.
• Increased Efficiency: Automation of tasks like software updates, patch management, and system scans saves time and reduces manual workload.
• Remote Access and Support: Technicians can troubleshoot and resolve problems without needing to be on-site, speeding up resolution times.
• Improved Security: RMM software helps ensure that devices are always updated and compliant with security standards, reducing vulnerability exposure.
• Scalability: As businesses grow, RMM tools make it easier to manage a larger number of endpoints without a proportional increase in IT staff.
• Cost Savings: Reduces the need for on-site visits, travel costs, and reactive fixes — leading to long-term savings.

Disadvantages of RMM

• Initial Setup Complexity: Deploying RMM tools can be technically complex and time-consuming, especially in larger or more diverse environments.
• Cost of Licensing: High-quality RMM platforms often come with significant subscription or licensing costs.
• Learning Curve: IT teams may need training to fully utilize all the features and capabilities of the RMM solution.
• Potential Privacy Concerns: Remote access capabilities may raise concerns among employees about monitoring and data privacy.
• False Positives and Alert Fatigue: Misconfigured alerts can result in excessive notifications, making it difficult to identify genuine threats or issues.

Conclusion

RMM solutions are a cornerstone of modern IT support strategies, offering a range of benefits from proactive monitoring to cost savings. However, they are not without challenges, and organisations should weigh the pros and cons carefully. When implemented correctly and with the right training, RMM tools can dramatically improve IT service delivery, reduce downtime, and enhance user satisfaction.

RMM tools are particularly beneficial for Managed Service Providers (MSPs), allowing them to support dozens or hundreds of client environments efficiently. For internal IT departments, RMM systems help manage infrastructure with minimal resources, which is crucial in today’s landscape where many teams are expected to do more with less.

Before implementing an RMM solution, it’s important to assess your specific needs, compare feature sets, ensure integration with existing tools, and provide adequate training. Done right, an RMM strategy can future-proof your IT operations, improve service levels, and enable more strategic use of technical resources.