|
Microsoft Exchange Server
5.5
Introduction
Shared-file: All processing done
on clients who need Read and Write permission to entire file
structure, increased network traffic
Client-Server: Executable code
runs on server, processes client request. Exchange Server uses
Remote procedure calls or RPC to communicate between client and
server.
SMTP Simple Mail Transfer
Protocol POP3 Post Office Protocol version 3 IMAP4 Internet
Message Access protocol version 4 NNTP Network News Transfer
Protocol MIME Multipurpose Internet Mail Extensions LDAP
Lightweight Directory Access protocol HTTP Hypertext Transfer
protocol
SMTP mail systems Microsoft
Mail for PC Networks and Apple Networks IBM PROFS/OV (Office
Vision) SNADS X.400 systems Lotus cc:Mail networks (running
DB versions 6 and 8) Lotus Notes systems Digital’s
ALL-IN-1 Novell Mail Handling System or MHS, etc
Reroutes messages if one
connection between servers fail Server Monitors check services
running on all servers in a site Link Monitors send test messages
to and from other Exchange computers Exchange uses transaction
based architecture so data integrity is
guaranteed.
Resources are organized by
Organization level, Site Level, and Server Level. Different
permissions can be configured at each level and permissions do not
flow between levels.
Exchange uses Windows NT domain
security model. All users are validated by a computer running
Windows NT Server.
Exchange has core components and
additional components.
Core
Components
-
Directory Service –
maintains information on all objects created (users, DL’s,
etc)
-
Message Transfer Agent –
provides routing functions, expands DL’s
-
Information Store – private
and public (PRIV.EDB, PUB.EDB), public folders
-
System Attendant – service
and link monitoring, creation of e-mail addresses, routing
tables, other support functions.
Additional
Components
-
Internet Mail Service – use
with Exchange and SMTP system
-
Internet News Service –
replicate USENET newsgroups to Exchange public folder
-
Outlook Web Access –clients
can access e-mail, address book etc using standard
browser
-
Microsoft Mail Connector
–communication between Microsoft Mail 3.x system and
Exchange
-
Directory synchronization –
synchronize directories beween Exchange and Microsoft mail
system using Microsoft Mail 3.x DirSync protocol.
-
Connector for Lotus cc:Mail
– for message transfer and directory synchronization between
Exchange server and Lotus cc:Mail postoffice
-
Connector for Lotus Notes –
for message transfer and directory synchronization between
Exchange server and Lotus Notes Domino server.
Improved Scalability
unlimited message store -
required Exchange enterprise edition, not standard
backup enhancements – can back up
to 25 GB per hour
Cluster Server support – now
supports MS Cluster Server 1.0, need Enterprise
Edition
Offline user support
can use Offline Address Book to
download only items that are new or have changed since the last
download (good for remote users who don’t need consume
bandwidth)
Increased Internet
Support
-
support for IMAP4 so clients
can send and receive e-mail
-
support for LDAP 3, so clients
can manipulate many directory objects
-
support for Secure Socket
Layer encryption (SSL) and Simple Authentication
-
Security layer (SASL) to
authenticate SMTP client log on.
-
support for MHTML or MIME
E-mail Encapsulation of Aggregate Documents
-
so clients can embed HTML
pages directly into an e-mail message
Exchange Server
Management
Administrator Program on Exchange
Server
Can run on any Windows NT
computer and can administer any server in any Site as long as you
establish a RPC connection to that site.
Adminstrator program installed in
\EXCHSRVR\BIN directory on the Exchange Server (you can specify
alternate location). Shortcut to this program is put in a Program
Group.
Note: Administrator program
automatically installed if you choose Typical or Custom
Installation, but NOT
WITH MINIMUM INSTALLATION option. Install this program on multiple
computers for FAULT TOLERANCE.
Be familiar with the Views in
Administrator program
-
Organization is the root of
the directory hierarchy
-
Address Book Views (sort
recipients by attributes)
-
Folders (public folder
hierarchy)
-
Global Address List (all
recipients in organization)
-
Site (contains Configuration
containers, Servers in a Site, Recipients containers)
-
Configuration (objects for
site-level configuration)
-
Servers (configure
server-level objects)
Administrator program shows 2
views: Container pane on left and Contents pane on the
right.
Objects created are either
Containers or objects (container is like directory and object is
like a file)
Permission and Contexts
-
Permissions are rights granted
to a user or group to access an object in the organization
-
Context is a boundary of
permissions, there are 3 context levels
-
Organization
-
Site ..permissions apply to
public folder, Address book views, etc.
-
Configuration
-
Permissions don’t flow between
these contexts!
Rights and roles
-
Add Child – can create
objects
-
Modify user attribute – e.g.
can modify members of a DL
-
Modify Admin attributes –
e.g. can modify display name for a user
-
Delete
-
Send As – can send messages
with the sender’s return address
-
Log on Right – give access
to the directory; services need this right
-
Replication – replicate
directory information with other servers
-
Modify Permissions – e.g.
modify access permission on existing mailbox
-
Mailbox Owner – read and
delete messages in a mailbox
-
Search
-
Admin – has all rights
except Modify permission, replication, mailbox owner, and Send
As
-
Permissions Admin – all
rights except Replication, mailbox owner, and Send As
-
Service Account Admin – has
all rights
-
View Only Admin – Only has
Log On rights!
-
User – only has modify user
attribute, mailbox owner and send as Rights
-
Send As Role – has send as
Right
-
Search – can search
Exchange Administrator tools
Exchange is integrated with NT,
so we can user NT Server tools to administer Exchange
-
Control panel Services – check
status of Exchange services
-
Event Viewer – most components
write diagnostic information to Windows
-
NT Event Log (application
log).
-
Server manager – use to manage
services on local and remote servers
-
Performance Monitor – use
special counters to track statistical data
-
Task manager – use to monitor
programs and processes running on your computer
Note: the names in Task
manager for your Exchange services are different than the Control
panel Services: Remember the following…
-
directory service in Task Manager = DSAMAIN.EXE
-
Message Transfer Agent = EMSMTA.EXE
-
Information Store = STORE.EXE
-
System Attendant =MAD.exe
-
Internet mail service
=MSEXCIMC.exe
-
Event Service = EVENTS.exe
-
Directory Synchronization =DXA.exe
-
Registry Editor – to modify
server-specific settings like protocol binding order
-
User manger for domains – allows
connectivity to the Administrator program to create a mailbox in
Exchange and a Windows NT account for a user simultaneously.
Recipient Configuration
Types of Recipients
-
Mailboxes
-
Custom Recipients – points to
foreign address like Internet recipient with SMTP address
-
Public Folders
-
Distribution Lists – can
contain multiple DL’s as recipients
-
Agents – similar to mailbox,
but contains an active process that reads and acts on messages.
Example: Microsoft Schedule+ Free/Busy agent which communicates
with Schedule+ Free/Busy
Rule: All recipient objects must
be placed inside a "Recipients" container!
Ways to create a
mailbox
-
use Exchange Administrator
Program
-
use Windows NT User Manager
for Domains program
-
use the Administrator Extract
and Import utilities
-
use the Migration Wizard to
migrate users from existing mail systems, like Microsoft Mail for
PC Networks, Lotus cc:Mail, and Lotus Notes (if you use SP1 with
Exchange 5.5)
Setting permissions with Exchange
Administrator:
The default is to show
"permissions" tab on container objects only. You have to modify this
setting in Exchange Administrator by
Selecting Tools, then
Options, then permissions Tab, then check "SHOW PERMISSIONS PAGE FOR
ALL OBJECTS" and also check "DISPLAY RIGHTS FOR ROLES ON PERMISSION
PAGE"
Configuring E-Mail
Addresses
-
Every recipient has an "E-Mail
Addresses" tab to create their e-mail address
-
If you change a user’s ALIAS
name, the e-mail address is not updated!
-
E-mail addresses are called
PROXY ADDRESSES.
-
To globally change an address
for all FUTURE recipients created, use the Site Addressing Object
in the Configuration Container and select Site Addressing
-
Use "Delivery Options" page to
specify who has "Send on Behalf of permissions" (also do this
directly in Client program)
-
Use "Delivery Options" to
specify alternate recipient to receive your incoming mail
-
Use "Protocols" tab to enable
or disable all protocols, except LDAP, on a per-user basis.
-
Use "Limits" tab to configure
Deleted Item retention time for message storage, also configure
server to keep deleted messages until the IS has been backed up
here.
-
Use "Advanced" tab to set
trust levels, home servers, and outlook web access server
name.
Configuring Distribution Lists
for the Exam
-
You need to specify an
"expansion server" to expand the members of a DL
-
Default is "any server in a
site" can do this, but pick a high-processor machine for large
DL’s
-
Always specify an owner who
can modify members – they don’t need administrative rights
-
Configure the "Advanced" tab
to send notification reports and hide from the address book
Additional Recipient Information
on the Exam
-
Moving mailboxes within a
Site
-
Moving mailboxes BETWEEN
Sites
Cannot do this in
Administrator!!!. Steps are
-
Download all private folders
in IS to a local .PST file
-
Create new mailbox in new
site, then DELETE THE OLD MAILBOX!
-
Log on to new server, and
copy .PST file from the old IS to new
server
-
Cleaning a Mailbox
-
Does not delete the mailbox, only deletes messages in a
mailbox!
-
Select Tools, then "Clean Mailbox"
-
Use "Mailbox Cleanup Agent" from Resource Kit to maintain
consistent database size
-
Address Book Views
Why? To organize recipients
into "logical groupings"
-
displayed in the Outlook
Address Book
-
users can move between
address book view containers dynamically
-
address book view containers
are created automatically
-
must specify DIRECTORY and
DISPLAY NAME and ATTRIBUTES
SITE CONFIGURATION
Object
Description
Add-Ins container
|
Holds information for DLLs
needed for administration of connectors. No configuration is
needed here. |
Addressing container
|
For templates and E-mail
proxy address generators |
Connections container
|
For messaging connectors to
other sites or foreign systems |
Directory Replication
container |
Allow replication of
directory information between sites |
Monitors container
|
For created Link Monitor
and Server Monitors. Used to troubleshoot messaging problems.
|
Protocols container
|
Configuration of protocols
installed on a server |
Servers container
|
Holds configuration
information for each server in the site |
Certification Authority
Configuration |
Configure the default
encryption used within a site when using Key Management Server
|
DS Site Configuration
|
Set behaviors for many
directory objects, very important to know |
Information Store Site
Configuration |
Set default values which
control the Public Information Store such as who can create
top-level public folders |
MTA Site Configuration
|
Define settings for
messaging defaults like window sizes and association
parameters (VERY IMPORTANT!) |
Site Addressing
|
Controls default addresses
created when recipients are created |
Site Encryption
Configuration |
Configure parameters
related to advanced security. |
IMPORTANT SITE OBJECT
PROPERTIES FOR THE EXAM…
-
DS Site Configuration Object
-
General Page –
-
Tombstone Lifetime = how
long you want directory to keep an object before permanently
removing it from the directory. Default = 30 days.
-
Garbage collection
Interval = after 12 hours, objects with EXPIRED TOMBSTONES are
permanently deleted!
-
Anonymous Directory
Account = specify an account for anonymous access to the
Directory
-
Information Store Site
Configuration
-
General Page – Use to enable
message tracking, not enabled by default
-
Top-Level Folder Creation –
specify which users have permission to create top-level public
folders using Outlook
-
Storage Warnings – to
schedule notifications when users have exceeded their storage
limits
-
Public Folder Affinity –
allow users to make connections to replicas of public folders
that exist in other sites
-
MTA Site Configuration
-
Site Addressing Values
-
General Page – choose
"routing calculation server" and "share address space with other
X.400 systems"
-
Site Addressing page –
Exchange Enterprise Edition creates addresses for:
-
Lotus cc:Mail
-
MS Mail (PC)
-
SMTP (Internet)
-
X.400
-
Routing Calculation Schedule
-
Recalculate routing after
routing change is made
-
Schedule can be Never,
Always, or Selected Times
-
Routing Tab
-
Server Configuration objects
(Server Container on Left Side)
PUBLIC FOLDER
REVIEW
Created Two Ways
Exchange Administrator: Use
Directory Import option (cant create public folders
directly!) Outlook client: File – folder – Create
Subfolder
Components of public
folders
Public Folder Hierarchy: the
"tree-like" structure shown in Administrator that is replicated to
all Public Information Stores in an Organization (it’s "constant"
between servers)
Public Folder contents: a series
of Message Headers, message bodies, and attachments contained within
a public folder hierarchy. CONTENTS CAN BE DIFFERENT BETWEEN
SERVERS!
Rules for public
folders
-
public folders in the Public
Information Store is a recipient in the directory
-
by default, public folders are
hidden recipients, can only be viewed in Administrator
-
by default, public folders
don’t appear in the Global Address List!
-
if you want to "balance the
load" in your organization, then replicate your public folder to
another server in the site or another site.
-
you can schedule public folder
replication.
-
you can create dedicated
public folder servers:
-
Create a PUBLIC SERVER – one
with a Public information store but no private information
store.
-
Create a PRIVATE SERVER –
one with a Private information store but no public information
store
-
by default, all users can
create public folders at the root or top level
-
create public folder FAVORITES
or shortcuts to a folder to give quick access to a specific
location in a large folder hierarchy. Note: USERS CAN ACCESS A
PREVIOUSLY CREATED FAVORITE TO BYPASS ANY SECURITY THAT IS SET ON
A HIGHER-LEVEL FOLDER!
-
you can configure PUBLIC
FOLDER SITE AFFINITY to make connections to intersite public
folder servers. Default: there are no public folder site
affinities. You assign a "cost value" per site similar to Site
Connector cost values. You only set affinity values AT THE SITE
LEVEL, NOT SERVER LEVEL!
-
AFFINITY VALUES ARE ONE-WAY,
AND THE LOWEST AFFINITY VALUE WINS!!
-
you can configure public
folders at both the SITE and SERVER levels using Exchange
Administrator.
Monitoring and Maintaining
Exchange Organization
Know Database Types and
Procedures for Maintenance Purposes
-
Exchange Server 5.5 uses
Fault-tolerant Transaction based database for message
information
-
Transaction log files can
reconstruct data in cases of power outages or system failures
-
Databases based on 32-bit
Joint Engine Technology or JET format
-
Maximum size of database for
Exchange Standard Edition is 16 GB
-
Enterprise Edition size is
theoretically unlimited, limited only by hardware used
Types of Files used in
Exchange Server 5.5
Primary Transaction Log File: Hold
transactions before they’re written to the DS or the IS, only 1
current transaction log per service! Previous Log
File: Keeps older transactions, not currently being
used Reserved Log File Two Log files, RES1.log,
RES2.log, reserved for low disk space events Checkpoint
Files : A "pointer file" – keeps track of transaction logs
once they are committed to a database Patch File:
Temporary file – stores transactions during backup, used with
ISINTEG utility for the Information Store
UTILITIES Used to maintain
Exchange Servers
-
Analyzes hard disks
-
puts components on
different hard drives based on certain performance
criteria
-
modifies Registry
parameters to improve server performance
-
File name is PERFWIZ.EXE –
will affect behavior of DS, IS, MTA
-
Recommended drive
configuration: 1 disk for software, OS, and paging file; 1
disk for transaction log files; 1 disk for database files
using stripe set with multiple drives
-
Run this AFTER INITIAL
SETUP OR ANY MAJOR CHANGE TO HARDWARE!!
-
Results are stored in
\%winntroot%\SYSTEM32\PERFOPT.LOG
-
checks consistency of IS
and DS at JET engine level
-
repairs any
inconsistencies
-
located in \windir\System32
-
defragments and compacts
the IS and DS
-
use only with assistance
from Microsoft (or risk data loss!)
-
use ISINTEG –FIX to
correct any detected errors, need to specify one or more
tests
-
ISINTEG – FIX –PRI –TEST
alltests will fix all inconsistencies with Private IS
-
use this utility only with
assistance of MS Tech Support!
-
allows for "soft" recovery
of corrupt MTA database, e.g.
C:\Exchsrvr\Bin>mtacheck.exe
-
use when MTA service
doesn’t start (run only when MTA service has stopped!!)
-
defective objects put in
\Exchsrvr\MTA\Data\MTACheck.out for later review
-
will rebuild MTA queue so
MTA can start again
-
can be used on Personal
Stores (.PST) or Offline Stores (.OST) files
-
will search for "orphan"
folders and messages
-
Included on Exchange CD,
has a ‘server side’ and ‘client side’
-
verifies RPC connectivity
over a given transport
-
Three versions of the RPC
Ping Client:
-
Rpingc16.exe – to use with
Microsoft Windows 3.x
-
Rpingc32.exe – to use with
Microsoft Windows 95/98 and NT
-
Rpingdos.exe – to use with
Microsoft MS-DOS
-
Forcing Directory
Replication
-
Within a site – you PULL
information to your server, can’t broadcast this.
-
Between Sites – go to Site
Connector, Sites Tab, click "REQUEST NOW"
-
Performance Monitor in NT –
provides real-time monitoring of Exchange servers, objects
include:
Objects
|
Counter
|
Description |
MTA
|
Messages/Sec
|
Number of
messages MTA sends and receives per second
|
MTA
|
Work Queue Size
|
the number of
messages queued in the MTA for delivery to another
server
|
MTA Connections
|
Queue Length
|
If this is large, it shows
which connections are
responsible for the large queue |
Directory Service
|
Pending Replication
|
Shows how many requests for
directorySynchronization synchronization have gone
unanswered. Use this
after clicking "Synchronize Now" on the DSA General
Tab. |
MIGRATING TO EXCHANGE AND
CLIENT ISSUES REVIEW
(Final Section)
-
Exchange supports migration
from
-
Microsoft Mail for PC
networks Version 3.x
-
Microsoft Mail for AppleTalk
Networks (Quarterdeck Mail) Version 3.x
-
Lotus cc:Mail –database
version DB6 and DB8
-
IBM Professional Office
system (PROFS)
-
Digital ALL-IN-1 versions
2.3 up
-
Novell GroupWise versions
4.1 and 4.1a
-
collabra share version 1.x
and 2.x
-
Lotus Notes Release 3.x,
4.0, 4.1
-
Lotus domino server release
4.5, 4.6
-
Types of migration
-
Migration Process – using the
Migration Wizard
-
One-step migration – DON’T
CONFUSE WITH SINGLE-PHASE MIGRATION!!!
-
Two-step migration – DON’T
CONFUSE WITH MULTI-PHASE MIGRATION!!!
-
data is first exported to
migration files , then edited and imported using the Wizard.
-
use if changes are being
made to addressing scheme
-
MUST KNOW THE MIGRATION
FILES FOR EXAM!
-
Packing List Files – list
primary and secondary migration files and CODE PAGE!
-
Primary Intermediate file
– contains directory changes, message headers, pointers, etc.
-
Secondary Intermediate
File – contains message bodies and attachments!
-
packing list file is KEY
TRACKING FILE
-
primary intermediate
files can be edited using Notepad, BEFORE YOU IMPORT!
-
don’t normally edit
secondary intermediate files!
Client Issues
-
Exchange supports Outlook 98,
Outlook 97, Outlook for Windows 3.x, Outlook for Macintosh,
-
Outlook Express, Outlook Web
Access also clients
-
Outlook 97 only support POP3
and SMTP protocols
-
Outlook for Macintosh
supports S/MIME protocol
-
Installation Issues
-
The Exchange Client for
MS-DOS needs 2MB min/3MB max disk space, 1MB RAM
-
Outlook 98 client needs
22MB min / 81 MB max disk space, 8 MB RAM
-
If using TCP/IP for
Macintosh, use MacTCP version 2.06 or up
-
Latest version of Outlook
Web Access requires Exchange 5.5 with SP1 and IIS 4.0. Also
need Web browser supporting frames, java applets, and MS
Jscript on client!
-
Outlook 98 can be
installed in Corporate/Workgroup Mode or Internet Only
Mode!
-
Installing the Clients
-
use Network client
installation point – install the client to a local hard disk
-
use Shared client
installation point – run Outlook from a server
-
Outlook 98 doesn’t support
shared installations!
-
Creating Profiles for clients
-
Outlook 98 requires a
windows messaging profile listing the information services that
are used
-
users can have multiple
profiles with unique information services
-
use the Outlook Setup Wizard
to create profiles
-
use NEWPROF.EXE to create a
profile
-
Creating Profiles for Roving
Users
-
Configuring the Outlook client
-
preferences tab – e-mail
options, calendar options, tasks options, journal options, note
options
-
mail services – prompt for
profile, enable offline access
-
mail format tab – message
formats, fonts, creating signatures for outgoing mail
-
spelling tab –
self-explanatory
-
security tab – creating
digital Ids, encryption settings
-
other tab – emptying deleted
items folder, autoarchiving settings, preview pane
-
delegates tab – to configure
"send on behalf of" access, or "send as" access for another
user
-
RPC Transport Issues on the
Client
Windows
NT/95/98
|
Outlook
for windows 3.x
|
MS-DOS
based client
|
Local
RPC
|
NAMED
PIPES
|
Local
RPC
|
TCP/IP
|
SPX |
NAMED
PIPES
|
SPX
|
TCP/IP
|
SPX |
NAMED
PIPES
|
NETBIOS
|
TCP/IP
|
NETBIOS
|
VINES IP
|
NETBIOS
|
VINES IP
|
|
|
-
Create Personal Folder Stores
for Clients
-
to back up folders and
messages
-
to move messages and folders
to a portable computer if working away from office
-
to archive old messages and
create space in Information Store
-
.PST files have 2 GB limit
or 64,000 entries!!
-
users can protect their .PST
files with password but THIS IS ONLY KNOWN TO THE USER AND CANT
BE VIEWED OR CHANGED BY AN ADMINISTRATOR!!!!
-
Use the ODK or Outlook 98
Deployment Kit to create custom installations
-
replaces Office 97 Network
Installation wizard
-
replaces manual editing of
profile or .PRF file and setup or .STF files!
-
includes MS IEAK
customization features
-
uses Active Setup technology
and is installed from the ODK CD-ROM
-
need to install IE 4.0 or
later, and works with Windows 98/95, NT Server 4.0 SP3 and NT
Workstation 4.0 SP 3
|
|