24 Hours of Exchange Server 2007 (Part 6 of 24): Configuring Exchange Server Introduction Harold Wong [email_address] blogs.technet.com/haroldwong For audio, please try Streaming Internet Audio first If that doesn’t work, use: (800) 229-0449, Pin 3915

What We Will Cover Managing and securing a Microsoft ® Exchange Server 2007 installation Exchange Management Console (ECM) Delegating permissions in Exchange Server

Managing and securing a Microsoft ® Exchange Server 2007 installation

Exchange Management Console (ECM)

Delegating permissions in Exchange Server

Agenda Review Managing Exchange Server 2007 Delegating Administrative Permissions

Review

Managing Exchange Server 2007

Delegating Administrative Permissions

Review: Transitioning and Migrating to Exchange Server 2007 Exchange Transition Paths Exchange Migration Paths Coexistence with Legacy Servers

Exchange Transition Paths

Exchange Migration Paths

Coexistence with Legacy Servers

Review: Upgrading to Exchange Server 2007 Exchange 2000 Server native organization Exchange Server 2003 native organization Exchange 2000/2003 mixed mode None of the above Which Exchange Server organization cannot be transitioned to Exchange Server 2007?

Exchange 2000 Server native organization

Exchange Server 2003 native organization

Exchange 2000/2003 mixed mode

None of the above

Review: Upgrading to Exchange Server 2007 A new Exchange Server organization is created Exchange Server 2007 coexists with previous Exchange servers in the organization Mailboxes are moved to Exchange Server 2007 using the Exchange System Manager All of the above What happens during an Exchange Server 2007 migration?

A new Exchange Server organization is created

Exchange Server 2007 coexists with previous Exchange servers in the organization

Mailboxes are moved to Exchange Server 2007 using the Exchange System Manager

All of the above

Review: Upgrading to Exchange Server 2007 Run setup.exe / PrepareAD Install Exchange Server 2007 on a new server Run the Move-Mailbox cmdlet Migrate Mailboxes to an Exchange 2000 or Exchange Server 2003 organization What is the first task in the Exchange Server 5.5 migration to Exchange Server 2007?

Run setup.exe / PrepareAD

Install Exchange Server 2007 on a new server

Run the Move-Mailbox cmdlet

Migrate Mailboxes to an Exchange 2000 or Exchange Server 2003 organization

Review: Exploring Transition Scenarios Mailbox server role Hub Transport server role Client Access server role Unified Messaging server role When installing server roles separately during the Exchange Server 2007 transition, which server role should be introduced first?

Mailbox server role

Hub Transport server role

Client Access server role

Unified Messaging server role

Review: Exploring Transition Scenarios Yes, this installs the Client Access, Hub Transport, and Mailbox server roles No, a custom installation is required No, an unattended installation is required Both 2 and 3 are correct Can you use the typical installation when introducing the first Exchange Server 2007 server during transition?

Yes, this installs the Client Access, Hub Transport, and Mailbox server roles

No, a custom installation is required

No, an unattended installation is required

Both 2 and 3 are correct

Review: Exploring Transition Scenarios Using Exchange System Manager Running the Move-Mailbox Cmdlet Using Active Directory Users and Computers MMC Running the Move-ExchMailbox Cmdlet How are mailboxes moved from previous versions of Exchange Servers to the Exchange Server 2007 Mailbox server role?

Using Exchange System Manager

Running the Move-Mailbox Cmdlet

Using Active Directory Users and Computers MMC

Running the Move-ExchMailbox Cmdlet

Agenda Review Managing Exchange Server 2007 Delegating Administrative Permissions

Review

Managing Exchange Server 2007

Delegating Administrative Permissions

Exchange Server 2007 Management Interfaces Process boundary E2007 Database Registry Files Active Directory ® Exchange Management Console Exchange Management Shell PowerShell Engine Exchange cmdlets

Navigation Tree Comparison Exchange 2003

Exchange Management Console Console Tree Work Pane Results Pane Action Pane

Console Tree Organization Organization Configuration Server Configuration Recipient Configuration Toolbox Console Tree Microsoft Exchange

Exchange Management Console Toolbox Configuration management Disaster recovery tools Mail flow tools Performance tools

Exchange Server 2007 Tools Exchange Load Generator Exchange Server Profile Analyzer Exchange Jetstress Exchange Server Stress and Performance

Exchange Load Generator

Exchange Server Profile Analyzer

Exchange Jetstress

Exchange Server Stress and Performance

Exploring the Exchange Console Tour the basic features of the EMC Discover the Toolbox Access Exchange Management Shell™ demonstration

Exploring the Exchange Console

Tour the basic features of the EMC

Discover the Toolbox

Access Exchange Management Shell™

Review: Managing Exchange Server 2007 One Two Three Four or more Q1: The console tree in Exchange Server 2003 contained six or more levels. How many levels beyond the root are available in Exchange Server 2007?

One

Two

Three

Four or more

Review: Managing Exchange Server 2007 Organization configuration child nodes Server configuration child nodes Recipient configuration child nodes All of the above Q2: The Exchange Management Console work pane will only display when selecting which of the following objects in the console tree?

Organization configuration child nodes

Server configuration child nodes

Recipient configuration child nodes

All of the above

Review: Managing Exchange Server 2007 Active Directory users and computers Organization configuration | Mailbox Server configuration | Mailbox Recipient configuration | Mailbox Q3: Where are user mailbox settings configured in Exchange Server 2007?

Active Directory users and computers

Organization configuration | Mailbox

Server configuration | Mailbox

Recipient configuration | Mailbox

Agenda Review Managing Exchange Server 2007 Delegating Administrative Permissions

Review

Managing Exchange Server 2007

Delegating Administrative Permissions

Exchange Server Security and Permissions Exchange Server 2003 Predefined security roles Lack of specificity Little difference between roles No clear separation between Exchange administrative roles and Active Directory admins Exchange Server 2007 New administrator roles Managed from either the Exchange Management Console or the Exchange Management Shell No need to alter ACL settings

Exchange Server 2003

Predefined security roles

Lack of specificity

Little difference between roles

No clear separation between Exchange administrative roles and Active Directory admins

Exchange Server 2007

New administrator roles

Managed from either the Exchange Management Console or the Exchange Management Shell

No need to alter ACL settings

Split Permissions Model

Administrator Roles in Exchange Server Exchange Organization Administrator Exchange Recipient Administrator Exchange Server Administrator Exchange View-Only Administrator Global Data Recipient Data Server Data

Administrator Roles in Exchange Server Exchange Organization Administrator Exchange Recipient Administrator Exchange Server Administrator Exchange View-Only Administrator Owners of the Exchange organization Read access to all domain user containers Write access to all Exchange-specific attributes Owner of all local server configuration data Must run Setup /PrepareDomain for each domain for this group to be applicable Read access to all the Domain User containers Write access to all the Exchange specific attributes Owner of all local server configuration data. Local administrator on the computer on which Exchange Server is installed. Members of Exchange View-Only Administrators Read-only access to the entire Exchange Server organization tree

Owners of the Exchange organization

Read access to all domain user containers

Write access to all Exchange-specific attributes

Owner of all local server configuration data

Must run Setup /PrepareDomain for each domain for this group to be applicable

Read access to all the Domain User containers

Write access to all the Exchange specific attributes

Owner of all local server configuration data.

Local administrator on the computer on which Exchange Server is installed.

Members of Exchange View-Only Administrators

Read-only access to the entire Exchange Server organization tree

Delegating Exchange Server Permissions Add and remove administrator roles demonstration

Delegating Exchange Server Permissions

Add and remove administrator roles

Review: Delegating Administrative Permissions Exchange organization administrator Exchange recipient administrator Exchange full administrator Exchange view-only administrator Q1: Which of the following is not an Exchange Server 2007 administrative role?

Exchange organization administrator

Exchange recipient administrator

Exchange full administrator

Exchange view-only administrator

Review: Delegating Administrative Permissions Exchange administrator roles Split permissions model Recipient data Server data Q2: What allows you to configure specific permissions in Active Directory for various administrative roles in your organization?

Exchange administrator roles

Split permissions model

Recipient data

Server data

Review: Delegating Administrative Permissions Global data Recipient data Exchange server data All of the above Q3: What types of Exchange Server data can be managed by the four predefined Exchange Server 2007 administrative roles?

Global data

Recipient data

Exchange server data

All of the above

Session Summary Exchange Server 2007 provides two interfaces for managing the system The Exchange Management Console features four major management work centers Exchange Server enables delegation of management responsibility to an individual or group

Exchange Server 2007 provides two interfaces for managing the system

The Exchange Management Console features four major management work centers

Exchange Server enables delegation of management responsibility to an individual or group

Questions and Answers Submit text questions using the “Ask” button. Don’t forget to fill out the survey. For upcoming and previously live webcasts: www.microsoft.com/webcasts Got webcast content ideas? Contact us at: http://go.microsoft.com/fwlink/?LinkId=41781 Today's webcast was presented using Microsoft ® Office Live Meeting. Get a free 14-day trial by visiting: www.microsoft.com/presentlive

Submit text questions using the “Ask” button.

Don’t forget to fill out the survey.

For upcoming and previously live webcasts: www.microsoft.com/webcasts

Got webcast content ideas? Contact us at: http://go.microsoft.com/fwlink/?LinkId=41781

Today's webcast was presented using Microsoft ® Office Live Meeting. Get a free 14-day trial by visiting: www.microsoft.com/presentlive