We Engineers move the world

Braindump

Favorites

Email: Webmaster

Exchange 5.5

Shared-file: All processing done on clients who need Read and Write
permission to entire file structure, increased network traffic

Client-Server: Executable code runs on server, processes client request.
Exchange Server uses Remote procedure calls or RPC to communicate
between client and server.

SMTP Simple Mail Transfer Protocol
POP3 Post Office Protocol version 3
IMAP4 Internet Message Access protocol version 4
NNTP Network News Transfer Protocol
MIME Multipurpose Internet Mail Extensions
LDAP Lightweight Directory Access protocol
HTTP Hypertext Transfer protocol

SMTP mail systems
Microsoft Mail for PC Networks and Apple Networks
IBM PROFS/OV (Office Vision)
SNADS
X.400 systems
Lotus cc:Mail networks (running DB versions 6 and 8)
Lotus Notes systems
Digital’s ALL-IN-1
Novell Mail Handling System or MHS, etc

Reroutes messages if one connection between servers fail
Server Monitors check services running on all servers in a site
Link Monitors send test messages to and from other Exchange computers
Exchange uses transaction based architecture so data integrity is guaranteed.

Resources are organized by Organization level, Site Level, and Server Level.
Different permissions can be configured at each level and permissions do not flow between levels.

Exchange uses Windows NT domain security model. All users are validated by a computer running Windows NT Server.

Exchange has core components and additional components.

Core Components:

a.       Directory Service – maintains information on all objects created (users, DL’s, etc)

b.       Message Transfer Agent – provides routing functions, expands DL’s

c.       Information Store – private and public (PRIV.EDB, PUB.EDB), public folders

d.       System Attendant – service and link monitoring, creation of e-mail addresses, routing tables, other support functions.

Additional Components:

a.       Internet Mail Service – use with Exchange and SMTP system

b.       Internet News Service – replicate USENET newsgroups to Exchange public folder

c.       Outlook Web Access –clients can access e-mail, address book etc using standard browser

d.       Microsoft Mail Connector –communication between Microsoft Mail 3.x system and Exchange

e.       Directory synchronization – synchronize directories beween Exchange and Microsoft mail system using Microsoft Mail 3.x DirSync protocol.

f.         Connector for Lotus cc:Mail – for message transfer and directory synchronization between Exchange server and Lotus cc:Mail postoffice

g.       Connector for Lotus Notes – for message transfer and directory synchronization between Exchange server and Lotus Notes Domino server.

Improved Scalability

unlimited message store - required Exchange enterprise edition, not standard

backup enhancements – can back up to 25 GB per hour

Cluster Server support – now supports MS Cluster Server 1.0, need Enterprise Edition

Offline user support

can use Offline Address Book to download only items that are new or have changed

since the last download (good for remote users who don’t need consume bandwidth)

Increased Internet Support

·         support for IMAP4 so clients can send and receive e-mail

·         support for LDAP 3, so clients can manipulate many directory objects

·         support for Secure Socket Layer encryption (SSL) and Simple Authentication

·         Security layer (SASL) to authenticate SMTP client log on.

·         support for MHTML or MIME E-mail Encapsulation of Aggregate Documents

·         so clients can embed HTML pages directly into an e-mail message

Exchange Server Management

Administrator Program on Exchange Server

Can run on any Windows NT computer and can administer any server in any Site as long as you establish a RPC connection to that site.

Adminstrator program installed in \EXCHSRVR\BIN directory on the Exchange Server (you can specify alternate location). Shortcut to this program is put in a Program Group.

Note: Administrator program automatically installed if you choose Typical or Custom Installation, but NOT WITH MINIMUM INSTALLATION option. Install this program on multiple computers for FAULT TOLERANCE.

Be familiar with the Views in Administrator program:

·         Organization is the root of the directory hierarchy

·         Address Book Views (sort recipients by attributes)

·         Folders (public folder hierarchy)

·         Global Address List (all recipients in organization)

·         Site (contains Configuration containers, Servers in a Site, Recipients containers)

·         Configuration (objects for site-level configuration)

·         Servers (configure server-level objects)

Administrator program shows 2 views: Container pane on left and Contents pane on the right.

Objects created are either Containers or objects (container is like directory and object is like a file)

Permission and Contexts:

·         Permissions are rights granted to a user or group to access an object in the organization

·         Context is a boundary of permissions, there are 3 context levels:

o        Organization

o        Site ..permissions apply to public folder, Address book views, etc.

o        Configuration

·         Permissions don’t flow between these contexts!

Rights and roles:

·         there are 10 different rights that can be assigned to a user or group

o        Add Child – can create objects

o        Modify user attribute – e.g. can modify members of a DL

o        Modify Admin attributes – e.g. can modify display name for a user

o        Delete

o        Send As – can send messages with the sender’s return address

o        Log on Right – give access to the directory; services need this right

o        Replication – replicate directory information with other servers

o        Modify Permissions – e.g. modify access permission on existing mailbox

o        Mailbox Owner – read and delete messages in a mailbox

o        Search

·         there are 7 different default roles or predefined sets of rights

o        Admin – has all rights except Modify permission, replication, mailbox owner, and Send As

o        Permissions Admin – all rights except Replication, mailbox owner, and Send As

o        Service Account Admin – has all rights

o        View Only Admin – Only has Log On rights!

o        User – only has modify user attribute, mailbox owner and send as Rights

o        Send As Role – has send as Right

o        Search – can search

Exchange Administrator tools:

Exchange is integrated with NT, so we can user NT Server tools to administer Exchange!

·         Control panel Services – check status of Exchange services

·         Event Viewer – most components write diagnostic information to Windows

·         NT Event Log (application log).

·         Server manager – use to manage services on local and remote servers

·         Performance Monitor – use special counters to track statistical data

·         Task manager – use to monitor programs and processes running on your computer

o        Note: the names in Task manager for your Exchange services are different than the Control panel Services: Remember the following…
directory service in Task Manager = DSAMAIN.EXE
Message Transfer Agent = EMSMTA.EXE
Information Store = STORE.EXE
System Attendant =MAD.exe
Internet mail service =MSEXCIMC.exe
Event Service = EVENTS.exe
Directory Synchronization =DXA.exe

·         Registry Editor – to modify server-specific settings like protocol binding order

·         User manger for domains – allows connectivity to the Administrator program to create a mailbox in Exchange and a Windows NT account for a user simultaneously.

Recipient Configuration

Types of Recipients:

·         Mailboxes

·         Custom Recipients – points to foreign address like Internet recipient with SMTP address

·         Public Folders

·         Distribution Lists – can contain multiple DL’s as recipients

·         Agents – similar to mailbox, but contains an active process that reads and acts on messages. Example: Microsoft Schedule+ Free/Busy agent which communicates with Schedule+ Free/Busy

Rule: All recipient objects must be placed inside a "Recipients" container!

Ways to create a mailbox:

·         use Exchange Administrator Program

·         use Windows NT User Manager for Domains program

·         use the Administrator Extract and Import utilities

·         use the Migration Wizard to migrate users from existing mail systems, like Microsoft Mail for PC Networks, Lotus cc:Mail, and Lotus Notes (if you use SP1 with Exchange 5.5)

Setting permissions with Exchange Administrator:

The default is to show "permissions" tab on container objects only. You have to modify this setting in Exchange Administrator by:

Selecting Tools, then Options, then permissions Tab, then check "SHOW PERMISSIONS PAGE FOR ALL OBJECTS" and also check "DISPLAY RIGHTS FOR ROLES ON PERMISSION PAGE"

Configuring E-Mail Addresses

·         Every recipient has an "E-Mail Addresses" tab to create their e-mail address

·         If you change a user’s ALIAS name, the e-mail address is not updated!

·         E-mail addresses are called PROXY ADDRESSES.

·         To globally change an address for all FUTURE recipients created, use the Site Addressing Object in the Configuration Container and select Site Addressing

·         Use "Delivery Options" page to specify who has "Send on Behalf of permissions" (also do this directly in Client program)

·         Use "Delivery Options" to specify alternate recipient to receive your incoming mail

·         Use "Protocols" tab to enable or disable all protocols, except LDAP, on a per-user basis.

·         Use "Limits" tab to configure Deleted Item retention time for message storage, also configure server to keep deleted messages until the IS has been backed up here.

·         Use "Advanced" tab to set trust levels, home servers, and outlook web access server name.

Configuring Distribution Lists for the Exam:

·         You need to specify an "expansion server" to expand the members of a DL

·         Default is "any server in a site" can do this, but pick a high-processor machine for large DL’s

·         Always specify an owner who can modify members – they don’t need administrative rights

·         Configure the "Advanced" tab to send notification reports and hide from the address book

Additional Recipient Information on the Exam

·         Moving mailboxes within a Site

Use the "move mailbox" option on the Tools menu to move to a different server

Alternate method: "Rehome" a mailbox on the "Advanced" option of the mailbox object

·         Moving mailboxes BETWEEN Sites

Cannot do this in Administrator!!!. Steps are:

o        Download all private folders in IS to a local .PST file

o        Create new mailbox in new site, then DELETE THE OLD MAILBOX!

o        Log on to new server, and copy .PST file from the old IS to new server

·         Cleaning a Mailbox

Does not delete the mailbox, only deletes messages in a mailbox!
Select Tools, then "Clean Mailbox"
Use "Mailbox Cleanup Agent" from Resource Kit to maintain consistent database size

·         Address Book Views

Why? To organize recipients into "logical groupings"

o        displayed in the Outlook Address Book

o        users can move between address book view containers dynamically

o        address book view containers are created automatically

o        must specify DIRECTORY and DISPLAY NAME and ATTRIBUTES

SITE CONFIGURATION

Object Description

IMPORTANT SITE OBJECT PROPERTIES FOR THE EXAM…