24 Hours of Exchange Server 2007 24 Hours of Exchange Server 2007 (Part 10 of 24): Recipient Management, (Part 10 of 24): Recipient Management, Policies, and PermissionsPolicies, and Permissions

Harold Wongharold.wong@microsoft.comblogs.technet.com/haroldwong

For audio, please try Streaming Internet Audio firstIf that doesn’t work, use: (800) 683-9254, Pin 3148

What We Will CoverWhat We Will Cover

• Explaining the MicrosoftExplaining the Microsoft®® Exchange Server Exchange Server recipient management modelrecipient management model

• Explaining the Exchange Sever Explaining the Exchange Sever administrative permission modeladministrative permission model

AgendaAgenda

• Review: Using Windows PowerShell™ for Review: Using Windows PowerShell™ for Exchange Server ManagementExchange Server Management

• Introducing the Recipient Management ModelIntroducing the Recipient Management Model• Addressing the Administrative Permission Addressing the Administrative Permission

ModelModel

Managing Exchange Server with Managing Exchange Server with Exchange Management ShellExchange Management Shell

5.5. Create-DistributionGroupCreate-DistributionGroup

6.6. Add-DistributionGroupAdd-DistributionGroup

7.7. New-DistributionGroupNew-DistributionGroup

8.8. New-ExDistributionGroupNew-ExDistributionGroup

Which command will create a new distribution group?

Managing Exchange Server with Managing Exchange Server with Exchange Management ShellExchange Management Shell

5.5. Mail-enable mailboxesMail-enable mailboxes

6.6. Set mailbox quotasSet mailbox quotas

7.7. Get mailbox permissionsGet mailbox permissions

8.8. All of the aboveAll of the above

Which bulk operations can be performed inExchange Management Shell?

Managing Exchange Server with Managing Exchange Server with Exchange Management ShellExchange Management Shell

5.5. Read-PublicFolderRead-PublicFolder

6.6. Get-FolderInfoGet-FolderInfo

7.7. Set-PublicFolderSet-PublicFolder

8.8. Get-PublicFolderGet-PublicFolder

How do you get information about a public folder?

Windows PowerShell ScriptingWindows PowerShell Scripting

5.5. Read-HostRead-Host

6.6. Read-InputRead-Input

7.7. Get-InputGet-Input

8.8. Get-KeyboardGet-Keyboard

Which Windows PowerShell command getskeyboard input?

Windows PowerShell ScriptingWindows PowerShell Scripting

5.5. StringString

6.6. Password Password

7.7. CryptedStringCryptedString

8.8. SecureStringSecureString

To include a password as part of a script, which data type must be used?

Windows PowerShell ScriptingWindows PowerShell Scripting

5.5. HTMLHTML6.6. XMLXML7.7. CSVCSV8.8. All of the aboveAll of the above

Which of the following output formatscan Windows PowerShell produce?

AgendaAgenda

• Review: Using Windows PowerShell for Review: Using Windows PowerShell for Exchange Server ManagementExchange Server Management

• Introducing the Recipient Management ModelIntroducing the Recipient Management Model• Addressing the Administrative Permission Addressing the Administrative Permission

ModelModel

Managing RecipientsManaging Recipients

Management Console

Recipient UpdateRecipient UpdateServiceService

Instant-onRecipients

Managing RecipientsManaging Recipients

Instant-onRecipients

New RecipientTypes

Managing RecipientsManaging Recipients

Instant-onRecipients

New RecipientTypes

MailboxFiltering

Managing RecipientsManaging Recipients

Instant-onRecipients

New RecipientTypes

MailboxFiltering

ConsoleScoping

Locating Recipients

Work with recipient typesWork with recipient types Use filteringUse filtering Use domain and forest scopingUse domain and forest scoping

demonstrationdemonstration

Creating and Deleting MailboxesCreating and Deleting Mailboxes

Management ShellManagement Console

Enable Disable New RemoveSMTPCustom

MS-MAILX400

user@external.org

Mail-enabled Contact

Creating and Deleting MailboxesCreating and Deleting Mailboxes

Management Management ShellShellManagement Console

Enable Disable New RemoveSMTPCustom

MS-MAILX400

user@external.org

Mail-enabled Contact

Distribution ListsDistribution Lists

• Based on universal distribution groups• Existing non-universal groups may be

re-scoped

DistributionGroups

DistributionGroupTypes

DynamicDistribution

Groups

• MailEnabledUniversalSecurityGroup• MailEnabledUniversalDistributionGroup• MailEnabledNonUniversalGroup• MailEnabledDynamicDistributionGroup

• Based on the results of a query• Pre-defined filters included

E-mail Address PoliciesE-mail Address Policies• Known as Recipient Policies in 2003• Can be targeted with filters• Creation and application can be scheduled• RUS no longer needed

E-mailAddressPolicies

AddressLists

OfflineAddress

Lists

• Based on pre-defined filters• Custom filters created in Shell• RUS no longer needed

• Distributed via HTTP(S)• Copy to server can be forced at specific

time

Managing Recipients Managing Recipients

Create and manage mailboxesCreate and manage mailboxes Create distribution groups and dynamic Create distribution groups and dynamic

distribution groupsdistribution groups Create contactsCreate contacts

demonstrationdemonstration

Introducing the Recipient Introducing the Recipient Management ModelManagement Model

5.5. Mailbox creationMailbox creation6.6. E-mail policy updatesE-mail policy updates7.7. Co-existence with Exchange Server 2003Co-existence with Exchange Server 20038.8. Administrative permissions assignmentAdministrative permissions assignment

Q1: Which of the following scenarios uses the Recipient Update Service?

Introducing the Recipient Introducing the Recipient Management ModelManagement Model

5.5. DisableDisable

6.6. RemoveRemove

7.7. DeleteDelete

8.8. User accounts are only deleted using Active User accounts are only deleted using Active Directory users and computersDirectory users and computers

Q2: Which command immediately disables themailbox and deletes the associated Active Directoryuser account?

Introducing the Recipient Introducing the Recipient Management ModelManagement Model

5.5. MS-MAILMS-MAIL

6.6. X400X400

7.7. SMTPSMTP

8.8. Lotus notesLotus notes

Q3: Which of the following address types can be configured using the Exchange ManagementConsole?

AgendaAgenda

• Review: Using Windows PowerShell for Review: Using Windows PowerShell for Exchange Server ManagementExchange Server Management

• Introducing the Recipient Management ModelIntroducing the Recipient Management Model• Addressing the Administrative Permission Addressing the Administrative Permission

ModelModel

Property Sets avoidexcessive ACLs

GlobalData

RecipientData

ServerData

Permissions DelegationPermissions Delegation

Universal Groups

Admin roles based on UniversalSecurity Groups

Administrative RolesAdministrative RolesExchange

Organization Administrators

Exchange Recipient Administrators

Exchange Server Administrators

Exchange View-Only Administrators

GlobalData

RecipientData

ServerData

Read/Write/Create

Read/Write

Read

Read/Write/Create

Read

ReadRead/Write/Create

Read

Read/Write

Windows admin

Read/Write/Create

Delegating Administration Roles Delegating Administration Roles

Use the Delegate WizardUse the Delegate Wizard Set advanced permissions from the ShellSet advanced permissions from the Shell

demonstrationdemonstration

Addressing the Administrative Addressing the Administrative Permissions ModelPermissions Model

5.5. View-only adminView-only admin

6.6. Organization adminOrganization admin

7.7. Server adminServer admin

8.8. Recipient adminRecipient admin

Q1: Which administrative role has change rightsat the server level only?

Addressing the Administrative Addressing the Administrative Permissions ModelPermissions Model

5.5. Configure Exchange Server e-mail policyConfigure Exchange Server e-mail policy

6.6. Mailbox-enable an Active Directory userMailbox-enable an Active Directory user

7.7. Configure offline Address BooksConfigure offline Address Books

8.8. Create a new Address ListCreate a new Address List

Q2: Which of the following tasks can a domain administrator perform in Exchange Server 2007?

Addressing the Administrative Addressing the Administrative Permissions ModelPermissions Model

5.5. Reduce flexibilityReduce flexibility

6.6. Increase securityIncrease security

7.7. Increase performanceIncrease performance

8.8. Streamline administrationStreamline administration

Q3: Which of the following is the design goal of property sets?

Session SummarySession Summary

• New recipient management toolsNew recipient management tools• Split administrative permissionsSplit administrative permissions• New granular administrative rolesNew granular administrative roles

Questions and AnswersQuestions and Answers

• Submit text questions using the “Ask” button. Submit text questions using the “Ask” button. • Don’t forget to fill out the survey.Don’t forget to fill out the survey.• For upcoming and previously live webcasts: For upcoming and previously live webcasts:

www.microsoft.com/webcastswww.microsoft.com/webcasts

• Got webcast content ideas? Contact us at: Got webcast content ideas? Contact us at: http://go.microsoft.com/fwlink/?LinkId=41781http://go.microsoft.com/fwlink/?LinkId=41781

• Today's webcast was presented using MicrosoftToday's webcast was presented using Microsoft®® Office Live Meeting. Get a free 14-day trial by Office Live Meeting. Get a free 14-day trial by visiting: visiting: www.microsoft.com/presentlivewww.microsoft.com/presentlive