install on DC :
powershell ( run as admin ) : ServerManagerCmd -i RSAT-ADDS

install on Exchange :
powershell ( run as admin ) : ServerManagerCmd -i RSAT-ADDS
install on exchange : 2007 Office System Converter: Microsoft Filter Pack (link)
powershell ( run as admin ) : Set-Service NetTcpPortSharing -StartupType Automatic
powershell ( run as admin ) : Import-Module ServerManager
powershell ( run as admin ) : Add-WindowsFeature NET-Framework,RSAT-ADDS,Web-Server,Web-Basic-Auth,Web-Windows-Auth,Web-Metabase,Web-Net-Ext,Web-Lgcy-Mgmt-Console,WAS-Process-Model,RSAT-Web-Server,Web-ISAPI-Ext,Web-Digest-Auth,Web-Dyn-Compression,NET-HTTP-Activation,RPC-Over-HTTP-Proxy

install client access role
install mailbox role

assign certificate :
Go to Server Configuration – Import exchange certificate
Click on imported certificate – Assign services to certifcate

Enable Outlook Anywhere :
Go to Server Configuration – Client Access – Click Enable Outlook Anywhere
Use external URL, choose Basic or ntlm

Configure OAB & Webservices :
Exchange powershell : Set-OabVirtualDirectory -Identity “WM-EX01\OAB (Default Web Site)” -ExternalUrl https://owa.domain.com/OAB -RequireSSL:$true
Exchange powershell : Set-WebServicesVirtualDirectory -Identity “WM-EX01\EWS (Default Web Site)” -ExternalUrl https://owa.domain.com/EWS/Exchange.asmx -BasicAuthentication:$true

Set product Key :
Set-ExchangeServer -Identity EX01 -ProductKey aaaaa-aaaaa-aaaaa-aaaaa-aaaaa