Subscribe to Windows IT Pro
June 09, 2011 03:00 PM

A New Wrinkle in Exchange 2010 Licensing

Windows IT Pro
InstantDoc ID #136425
Rating: (3)
I love getting reader mail, and often the messages you send point out things I didn't know or highlight viewpoints I hadn't considered. This week, I got an email message from Alf Flowers, a reader who's planning an upgrade to Microsoft Exchange Server 2010 from Exchange 2003 for a small business of around 300 users. He writes:

For a small company on a tight budget, our goal was to gradually introduce Microsoft Exchange into our domain. That would allow me to migrate our users from Exchange Server 2003 to Exchange Server 2010 as we could purchase the CALs. The server license cost is negligible. The CAL cost is what counts. The problem is, as soon as I introduce the first Exchange Server 2010 box into the domain, I immediately have to purchase 2010 CALs for my 300 users! So, even if I move only 20 or so to the Exchange 2010 mailbox server, I still have to have 300 CALs for Exchange 2010. Grrrr . . .

The reason given is, "Since all incoming mail must go through the Exchange 2010 Client Access Server, it uses Exchange 2010. Therefore, the new CAL is required". What a cheap shot! It would have been easy for Microsoft, and a great service to their user base, to require the new CAL for each mailbox user. Then, I could have purchased the CALs as I moved the users.

This reasoning didn't seem right to me, so I decided to investigate. I started with the Microsoft Exchange Server Licensing page. The language on that page seems pretty clear: "Exchange requires a CAL for each user or device that accesses the server software." Problem solved, right? If you're migrating to Exchange 2010 and you've followed Microsoft's recommendation of deploying the roles in alphabetical order, you'd start with a Client Access server and a Hub Transport server. (Of course, these roles could be on the same server.) Inbound mail will flow through the Hub Transport (or Edge Transport) server, but that doesn't require a CAL.

However, if your users are going to access their Exchange 2003 mailboxes through the Exchange 2010 Client Access server, things get a little less clear. You could make an argument that a CAL is needed for each user in this scenario, and apparently that's what someone told Alf. I asked some folks at Microsoft for a definitive answer, but I didn't receive an official answer by press time. The language on Microsoft's own licensing page seems to clearly indicate that mailbox access requires a CAL, and that mail flow through the Hub Transport server doesn’t. It’s not clear whether accessing the Client Access server requires a license or not. In Exchange 2010, clients generally communicate only with the Client Access server, not directly with the Mailbox server, thanks to the new RPC Client Access service. I’d lean toward Microsoft’s position here and say that clients communicating with a Client Access server would need a CAL as well.

The typical scenario for coexistence between Exchange 2003 and Exchange 2010 is to configure a 2010 Client Access server with a legacy URL that points to the Exchange 2003 front-end server. Any client can hit the Client Access server and either get their mailbox data (for an Exchange 2010 mailbox) or be redirected to the Exchange 2003 front-end server. It doesn't seem likely that Microsoft would require a CAL just for the redirection, but even if it did, you could simply use two completely different URLs. Tell Exchange 2003 users to use "oldmail.mycompany.com" and Exchange 2010 users to use "mail.mycompany.com" and you'll never run the risk of crossing the streams.

I could go on at length about how complicated Microsoft's licensing is (though I should point out that Microsoft's licensing model is simplicity itself compared to those of IBM or Oracle), but it's probably more interesting to consider that the whole issue of server licenses and CALs goes away in cloud-based systems. You pay a flat per-user fee, without regard to the number of devices from which the user accesses the service or any of the other modifiers that affect how many licenses you have to buy for on-premises solutions. This simplification is supposed to save money, and it often does, but it's a bit of a different mindset that you have to get used to.

So, Alf, my advice is to buy Exchange 2010 CALs only for those users who actually have Exchange 2010 mailboxes. If Microsoft's licensing folks object, please feel free to send them my way. In the meantime, if I get more explicit guidance from Microsoft, I'll be happy to share it here.

Related Reading:

Related Content:

ARTICLE TOOLS

Comments
  • AFlowers
    11 months ago
    Jun 28, 2011

    Hi Paul.

    Did Microsoft ever comment?

  • Paul
    11 months ago
    Jun 17, 2011

    AFlowers has correctly outlined Microsoft's policy in this instance. However, I presume he/she has internal information on this, because this policy, and particularly its rationale--pooling and multiplexing--is not, to my knowledge, publicly documented.
    I have described this policy in depth in a licensing note at http://www.picacommunications.com/notes/worms.html.
    As a licensing analyst, I heard this explanation directly from Microsoft. It does not make sense to me, and never has.
    In every other case, when Microsoft's licensing rules say you need a CAL to access the software, they mean a particular instance of the software. The notion that customers are somehow "indirectly" accessing some other instance of the software is completely opaque to users and IT pros, so they have no idea in many cases of what they are touching. The language in the Product Use Rights document that Microsoft cites as defining this rule also applies to SharePoint and Lync, but Microsoft has never applied it to those products.
    AFlowers does not mention this, but in my discussions with Microsoft they said it was possible to isolate the Exchange 2010 server from other servers on the network by limiting it to using the SMTP protocol. I'm guessing that MAPI is the multiplexing mechanism here, although that does not explain why Microsoft also applies this rule to Windows Server--according to some Microsoft documentation (but not any of the official licensing documentation), running a single updated instance of Windows Server (say Windows Server 2008R2 in an environment where all other servers are Windows Server 2003), similarly requires upgrading all CALs to the latest version.

  • AFlowers
    11 months ago
    Jun 13, 2011

    Hi Paul,

    I still hope you can get the "official" Microsoft position.

  • AdolfoM
    11 months ago
    Jun 13, 2011

    Hi Paul,

    This can hardly be considered as a new wrinkle since the licensing rules on this subject haven't changed in ages and are pretty similar on most of MS Server/Client products. If you have access to one SQL 2008 db and 20 SQL 2003 db you Have to have your user or device CAL up-to-date i.e. it must be an SQL 2008 CAL. The issue has been fairly simple ever since and if Mr. Flowers is planning on upgrading it just doesn't make sense to set this as the obstacle as he must do it on what will likely be a short period of time...
    Also, there are various licensing models provided by MS that entitle him to upgrade as he wishes without having to worry about the cost of each individual software upgrade iteration, through the signing into a Software Assurance covered program, which, given his companies size, would make perfect sense...

    Sorry for my english.

    Best regards from Portugal,

    Adolfo Martins

  • AFlowers
    11 months ago
    Jun 10, 2011

    From my vendor:

    Your customer is correct, once they introduce an Exchange Server 2010 server into their environment, all of their CALs are required to be Exchange 2010 as well. The reason behind this is that once an Exchange 2010 Server is introduced into the customers Exchange network even if a particular user/device does not directly access the Exchange 2010 Server, it will indirectly access the server since the Exchange 2010 Server is part of the overall Exchange network (the entire network of servers is multiplexing or pooling resources to process the mail for all users/devices, thus creating the need for Exchange 2010 CALs. I am not aware of any concessions or allowances being made by Microsoft to permit a gradual license rollout from a software licensing standpoint (although the customer could from an operational standpoint gradually move users from Exchange 2003 to Exchange 2010 ).

You must log on before posting a comment.

Are you a new visitor? Register Here

advertisement

advertisement

Windows is a trademark of the Microsoft group of companies. Windows IT Pro is used by Penton Media Inc. under license from owner.