Share via


What's new in Exchange Server SE

APPLIES TO: no-img-162016 no-img-192019 yes-img-seSubscription Edition

Tip

Looking for what's new in Exchange Server 2019? See What's new in Exchange Server 2019.

Exchange Server Subscription Edition (SE) brings a new set of technologies, features, and services to Exchange Server, the messaging platform that provides email, scheduling, and tools for custom collaboration and messaging service applications. Its goal is to support people and organizations as their work habits evolve from a communication focus to a collaboration focus. At the same time, Exchange SE helps lower the total cost of ownership whether you deploy Exchange SE on-premises or provision your mailboxes in the cloud.

Note: Exchange Server Subscription Edition is not yet available.

Choose the section that matches the version of Exchange that you're upgrading from. To learn about features that were removed or replaced in Exchange Server Subscription Edition (SE), see What's discontinued in Exchange Server.

For more information about deploying Exchange SE, see Planning and deployment for Exchange Server.

What's new when upgrading from Exchange 2019 to Exchange SE?

Important

You can perform an in-place upgrade from Exchange Server 2019 CU14 or CU15 directly to Exchange Server Subscription Edition (SE). For details on supported coexistence scenarios and upgrade paths, see the Upgrading your organization from current versions to Exchange Server SE blog post.

Exchange Server Subscription Edition (SE) Release to Manufacturing (RTM) is code equivalent to Exchange Server 2019 CU15, except for the following changes:

  • The License agreement, an RTF file shown only in the GUI version of Setup, is different
  • The product changed from Microsoft Exchange Server 2019 to Microsoft Exchange Server Subscription Edition
  • The build number

New features are introduced starting with the Exchange Server SE Cumulative Update (CU) 1.

What's new when upgrading from Exchange 2016 to Exchange SE?

Important

In-place upgrades from versions of Exchange Server earlier than Exchange Server 2019 are not supported. You must first perform a legacy upgrade to Exchange Server 2019 CU14 or CU15 before upgrading to Exchange Server Subscription Edition (SE). Alternatively, a legacy upgrade to Exchange Server SE is also supported. For details on supported coexistence scenarios and upgrade paths, see the Upgrading your organization from current versions to Exchange Server SE blog post.

Setup

  • Custom configuration preservation: Exchange setup now backs up and restores the most common configuration files so that admins no longer need to manually restore them or reapply them. For more information, see Exchange Server custom configuration preservation

  • Feature Flighting: Feature Flighting provides a new way for administrators to test and roll out select new features across their Exchange Server organization. Feature Flighting is an optional cloud-based service for on-premises Exchange servers. It uses the Office Config Service (OCS) - the same endpoint used by the Emergency Mitigation service and Microsoft Office clients - to check for updates from Microsoft related to flighted features. For more information, see Feature Flighting in Exchange Server.

Security

  • Windows Server Core support: Running Exchange on a Windows deployment with less surface area means less attack surface area and fewer components to service.

  • Block external access to Exchange admin center (EAC) and the Exchange Management Shell: You can use Client Access Rules to only allow administration of Exchange from the internal network instead of using complex network and firewall rules.

  • TLS 1.2 and TLS 1.3 are the only versions which are enabled by default: Exchange Server SE includes important changes to improve the security of client and server connections. The default configuration for encryption enables TLS 1.2 and TLS 1.3 and disable support for older algorithms (namely, DES, 3DES, RC2, RC4 and MD5). It also configures elliptic curve key exchange algorithms with priority over non-elliptic curve algorithms. In Exchange Server 2016 and later, all cryptography settings are inherited from the configuration specified in the operating system. TLS 1.3 support requires Exchange Server to be installed on Windows Server 2022 or Windows Server 2025. A comprehensive list of supported Operating Systems can be found in the Exchange Server Supportability Matrix. TLS 1.3 is not yet supported for the Simple Mail Transfer Protoco (SMTP) protocol. For more information, see Exchange Server TLS Guidance.

  • Modern authentication support for pure on-premises environments: Exchange Server SE supports OAuth 2.0 (aka Modern authentication) for pure on-premises environments using Active Directory Federation Services (ADFS) as a security token service (STS). For more information and requirements, see Enabling Modern Auth in Exchange On-Premises.

  • Windows Extended Protection is enabled by default: Extended Protection is enabled by default when installing Exchange Server SE. For more information and requirements, see Configure Windows Extended Protection in Exchange Server.

Performance

  • Improved search infrastructure: The completely rebuilt search infrastructure for cloud scale and reliability in Exchange Online is now available in Exchange SE. This new search infrastructure allows for indexing of bigger files, simpler management, and better search performance.

  • Faster, more reliable failovers: The changes to the search architecture result in significantly faster and more reliable failover over between servers.

  • Metacache database: Improvements at the core of Exchange's database engine enable better overall performance and take advantage of the latest storage hardware, including larger disks and SSDs.

  • Modern hardware support: Exchange now supports up to 256 GB of memory and 48 CPU cores.

  • Dynamic database cache: The information store process employs dynamic memory cache allocation optimizing memory usage to active database usage.

Clients

  • Calendar - Do Not Forward: This is similar to Information Rights Management (IRM) for calendar items without the IRM deployment requirements. Attendees can't forward the invitation to other people, and only the organizer can invite additional attendees.

  • Calendar - Better Out of Office: Additional options when you won't be in the office. Key options include: add an event to your calendar that shows you as Away/Out of Office, and a quick option to cancel/decline meetings that will happen while you're away.

  • Calendar - Remove-CalendarEvents cmdlet: Enables administrators to cancel meetings that were organized by a user that has left the company. Previously, conference rooms or meeting attendees would have these defunct meetings permanently on their calendars.

  • Email address internationalization (EAI): Email addresses that contain non-English characters can now be routed and delivered natively.

Messaging policy and compliance

  • Additional supported file types for mail flow rule content inspection: Exchange Server SE replaces Oracle Outside In Technology (OIT) with DocParser, a Microsoft-developed library for parsing various file formats. DocParser enables text extraction during email transport, supporting Data Loss Prevention and Exchange Transport Rules. As a result, Exchange Server SE can inspect content in a broader range of file types. For more information and requirements, see Use mail flow rules to inspect message attachments and OIT module in Exchange Server is replaced by DocParser.

What's new when upgrading from Exchange 2013 to Exchange SE?

Important

In-place upgrades from versions of Exchange Server earlier than Exchange Server 2019 are not supported. If you're running Exchange Server 2013, you must first perform a legacy upgrade to Exchange Server 2019 CU14 and fully remove Exchange Server 2013 from your organization. Only then can you proceed with an in-place upgrade to Exchange Server Subscription Edition (SE). For details on supported coexistence scenarios and upgrade paths, see the Upgrading your organization from current versions to Exchange Server SE blog post.

Exchange SE architecture

Today, CPU horsepower is significantly less expensive and is no longer a constraining factor. With that constraint lifted, the primary design goal for Exchange SE is for simplicity of scale, hardware utilization, and failure isolation. With Exchange SE, we reduced the number of server roles to two: the Mailbox and Edge Transport server roles.

Unified Messaging (UM) has been removed from Exchange SE. Other than that, the Mailbox server in Exchange SE includes all of the server components from the Exchange 2013 Mailbox and Client Access server roles:

  • Client Access services provide authentication, limited redirection, and proxy services. Client Access services don't do any data rendering and offer all the usual client access protocols: HTTP, POP and IMAP, and SMTP.

  • Mailbox services include all the traditional server components found in the Exchange 2013 Mailbox server role except Unified Messaging: the backend client access protocols, Transport service, and Mailbox databases. The Mailbox server handles all activity for the active mailboxes on that server.

The Edge Transport role is typically deployed in your perimeter network, outside your internal Active Directory forest, and is designed to minimize the attack surface of your Exchange deployment. By handling all Internet-facing mail flow, it also adds additional layers of message protection and security against viruses and spam, and can apply mail flow rules (also known as transport rules) to control message flow.

For more information about the Exchange SE architecture, see Exchange architecture.

Clients

Outlook on the web (formerly known as Outlook Web App)

Outlook Web App is now known as Outlook on the web, which continues to let users access their Exchange mailbox from almost any web browser.

Note

A comprehensive list of supported Web browsers for Outlook on the web in Exchange SE can be found in the Exchange Server Supportability Matrix.

The former Outlook Web App user interface has been updated and optimized for tablets and smart phones, in addition to desktop and laptop computers. New Exchange SE features include:

  • Platform-specific experiences for phones for both iOS and Android.

  • Premium Android experience using Chrome on devices running Android version 4.2 or later.

  • Email improvements, including a new single-line view of the Inbox with an optimized reading pane, archiving, emojis, and the ability to undo mailbox actions like deleting a message or moving a message.

  • Contact linking the ability for users to add contacts from their LinkedIn accounts.

  • Calendar has an updated look and new features, including email reminders for Calendar events, ability to propose a new time in meeting invitations, improved search, and birthday calendars.

  • Search suggestions and refiners for an improved search experience that helps users find the information they want, faster. Search suggestions try to anticipate what the user's looking for and returns results that might be what the user is looking for. Search refiners will help a user more easily find the information they're looking for by providing contextually-aware filters. Filters might include date ranges, related senders, and so on.

  • New themes Thirteen new themes with graphic designs.

  • Options for individual mailboxes have been overhauled.

  • Link preview which enables users to paste a link into messages, and Outlook on the web automatically generates a rich preview to give recipients a peek into the contents of the destination. This works with video links as well.

  • Inline video player saves the user time by keeping them in the context of their conversations. An inline preview of a video automatically appears after inserting a video URL.

  • Pins and Flags which allow users to keep essential emails at the top of their inbox (Pins) and mark others for follow-up (Flags). Pins are now folder specific, great for anyone who uses folders to organize their email. Quickly find and manage flagged items with inbox filters or the new Task module, accessible from the app launcher.

  • Performance improvements in a number of areas across Outlook on the web, including creating calendar events, composing, loading messages in the reading pane, popouts, search, startup, and switching folders.

  • New Outlook on the web action pane that allows you to quickly click those actions you most commonly use such as New, Reply all, and Delete. A few new actions have been added as well including Archive, Sweep, and Undo.

MAPI over HTTP

MAPI over HTTP is now the default protocol that Outlook uses to communicate with Exchange. MAPI over HTTP improves the reliability and stability of the Outlook and Exchange connections by moving the transport layer to the industry-standard HTTP model. This allows a higher level of visibility of transport errors and enhanced recoverability. Additional functionality includes support for an explicit pause-and-resume function, which enables supported clients to change networks or resume from hibernation while maintaining the same server context.

While MAPI over HTTP is now the default communication protocol between Outlook and Exchange, clients that don't support it will fall back to Outlook Anywhere (RPC over HTTP).

For more information, see MAPI over HTTP in Exchange Server.

Document collaboration

Exchange SE, along with SharePoint Server Subscription Edition (SE), enables Outlook on the web users to link to and share documents that are stored in OneDrive for Business in an on-premises SharePoint server instead of attaching files to messages. Users in an on-premises environment can collaborate on files in the same manner.

For more information about SharePoint Server SE, see New and improved features in SharePoint Server 2019.

When an Exchange SE user receives a Word, Excel, or PowerPoint file in an email attachment, and the file is stored in OneDrive for Business or on-premises SharePoint, the user will now have the option of viewing and editing that file in Outlook on the web alongside the message. To do this, you'll need a separate computer in your on-premises organization that's running Office Online Server. For more information, see Install Office Online Server in an Exchange organization.

Exchange SE also brings the following improvements to document collaboration:

  • Saving files to OneDrive for Business.

  • Uploading a file to OneDrive for Business.

  • Most Recently Used lists populated with both local and online files.

Microsoft 365 or Office 365 hybrid

The Hybrid Configuration Wizard (HCW) has become a cloud-based application. When you choose to configure a hybrid deployment in Exchange SE, you'll be prompted to download and install the wizard as a small app. The wizard will function the same in previous versions of Exchange, with a few new benefits:

  • The wizard can be updated quickly to support changes in the Microsoft 365 or Office 365 service.

  • The wizard can be updated to account for issues detected when customers try to configure a hybrid deployment.

  • Improved troubleshooting and diagnostics to help you resolve issues that you run into when running the wizard.

  • The same wizard will be used by everyone configuring a hybrid deployment who's running Exchange 2013 or later.

In addition to Hybrid Configuration Wizard improvements, multi-forest hybrid deployments are being simplified with Azure Active Directory Connect (AADConnect). AADConnect introduces management agents that will make it significantly easier to synchronize multiple on-premises Active Directory forests with a single Microsoft 365 or Office 365 organization. For more information about AADConnect, see What is Microsoft Entra Connect?.

Exchange ActiveSync clients will be seamlessly redirected to Microsoft 365 or Office 365 when a user's mailbox is moved to Exchange Online. To support this, ActiveSync clients need to support HTTP 451 redirect. When a client is redirected, the profile on the device is updated with the URL of the Exchange Online service. This means the client will no longer attempt to contact the on-premises Exchange server when trying to find the mailbox.

Messaging policy and compliance

There are several new and updated message policy and compliance features in Exchange SE.

Data loss prevention

To comply with business standards and industry regulations, organizations need to protect sensitive information and prevent its inadvertent disclosure. Examples of sensitive information that you might want to prevent from leaking outside your organization include credit card numbers, social security numbers, health records, or other personally identifiable information (PII). With a DLP policy and mail flow rules (also known as transport rules) in Exchange SE, you can now identify, monitor, and protect 80 different types of sensitive information with new conditions and actions:

  • With the new condition Any attachment has these properties, including any of these words, a mail flow rule can match messages where the specified property of the attached Office document contains specified words. This condition makes it easy to integrate your Exchange mail flow rules and DLP policies with SharePoint, Windows Server File Classification Infrastructure (FCI), or a third-party classification system.

  • With the new action Notify the recipient with a message, a mail flow rule can send a notification to the recipient with the text you specify. For example, you can inform the recipient that the message was rejected by a mail flow rule, or that it was marked as spam and will be delivered to their Junk Email folder.

  • The action Generate incident report and send it to has been updated to enable the notification of multiple recipients by allowing a group address to be configured as the recipient.

To learn more about DLP, see Data loss prevention in Exchange Server.

In-place Archiving, retention, and eDiscovery

Exchange SE includes the following improvements to In-Place Archiving, retention, and eDiscovery to help your organization meet its compliance needs:

  • Public folder support for In-Place eDiscovery and In-Place Hold: Exchange SE integrates public folders into the In-Place eDiscovery and Hold workflow. You can use In-Place eDiscovery to search public folders in your organization, and you can put an In-Place Hold on public folders. And similar to placing a mailbox on hold, you can place a query-based and a time-based hold on public folders. Currently, you can only search and place a hold on all public folders. In later releases, you'll be able to choose specific public folders to search and place on hold. For more information, see Search and place a hold on public folders using In-Place eDiscovery.

  • Compliance Search: Compliance Search is a new eDiscovery search tool in Exchange SE with new and improved scaling and performance capabilities. You can use it to search very large numbers of mailboxes in a single search. In fact, there's no limit on the number of mailboxes that can be included in a single search, so you can search all mailboxes in your organization at once. There's also no limit on the number of searches that can run at the same time. For In-Place eDiscovery in Exchange SE, the limits are the same as in previous Exchange Server versions: you can search up to 10,000 mailboxes in a single search and your organization can run a maximum of two In-Place eDiscovery searches at the same time.

    In Exchange SE, Compliance Search is only available by using the Exchange Management Shell. For information about using the Compliance Search cmdlets, see the following topics:

    Note

    To have access to the Compliance Search cmdlets, an administrator or eDiscovery manager must be assigned the Mailbox Search management role or be a member of the Discovery Management role group.

For more information, see Messaging policy and compliance in Exchange Server.

Improved performance and scalability

In Exchange SE, the search architecture has been redesigned. Previously, search was a synchronous operation that was not very fault-tolerant. The new architecture is asynchronous and decentralized. It distributes the work across multiple servers and keeps retrying if any servers are too busy. This means that we can return results more reliability, and faster.

Another advantage of the new architecture is that search scalability is improved. The number of mailboxes you can search at once using the console has increased from 5k to 10k for both mailboxes and archive mailboxes, allowing you to search a total of 20k mailboxes at the same time.