24 Hours of Exchange Server 2007 24 Hours of Exchange Server 2007 (Part 6 of 24): Configuring (Part 6 of 24): Configuring Exchange Server IntroductionExchange Server Introduction

Harold Wongharold.wong@microsoft.comblogs.technet.com/haroldwong

For audio, please try Streaming Internet Audio firstIf that doesn’t work, use: (800) 229-0449, Pin 3915

What We Will CoverWhat We Will Cover

• Managing and securing a MicrosoftManaging and securing a Microsoft®® Exchange Server 2007 installationExchange Server 2007 installation

• Exchange Management Console (ECM)Exchange Management Console (ECM)

• Delegating permissions in Exchange ServerDelegating permissions in Exchange Server

AgendaAgenda

• ReviewReview

• Managing Exchange Server 2007Managing Exchange Server 2007

• Delegating Administrative PermissionsDelegating Administrative Permissions

Review: Transitioning and Migrating Review: Transitioning and Migrating to Exchange Server 2007to Exchange Server 2007

• Exchange Transition PathsExchange Transition Paths

• Exchange Migration PathsExchange Migration Paths

• Coexistence with Legacy ServersCoexistence with Legacy Servers

Review: Upgrading to Exchange Review: Upgrading to Exchange Server 2007Server 2007

1.1. Exchange 2000 Server native organizationExchange 2000 Server native organization

2.2. Exchange Server 2003 native organizationExchange Server 2003 native organization

3.3. Exchange 2000/2003 mixed modeExchange 2000/2003 mixed mode

4.4. None of the aboveNone of the above

Which Exchange Server organization cannotbe transitioned to Exchange Server 2007?

Review: Upgrading to Exchange Review: Upgrading to Exchange Server 2007Server 2007

1.1. A new Exchange Server organization is A new Exchange Server organization is createdcreated

2.2. Exchange Server 2007 coexists with previous Exchange Server 2007 coexists with previous Exchange servers in the organizationExchange servers in the organization

3.3. Mailboxes are moved to Exchange Server Mailboxes are moved to Exchange Server 2007 using the Exchange System Manager2007 using the Exchange System Manager

4.4. All of the aboveAll of the above

What happens during an Exchange Server 2007 migration?

Review: Upgrading to Exchange Review: Upgrading to Exchange Server 2007Server 2007

1.1. Run setup.exe / PrepareADRun setup.exe / PrepareAD

2.2. Install Exchange Server 2007 on a new serverInstall Exchange Server 2007 on a new server

3.3. Run the Move-Mailbox cmdletRun the Move-Mailbox cmdlet

4.4. Migrate Mailboxes to an Exchange 2000 or Migrate Mailboxes to an Exchange 2000 or Exchange Server 2003 organizationExchange Server 2003 organization

What is the first task in the Exchange Server 5.5migration to Exchange Server 2007?

Review: Exploring Transition Review: Exploring Transition ScenariosScenarios

1.1. Mailbox server roleMailbox server role

2.2. Hub Transport server roleHub Transport server role

3.3. Client Access server roleClient Access server role

4.4. Unified Messaging server roleUnified Messaging server role

When installing server roles separately during the Exchange Server 2007 transition, which server role should be introduced first?

Review: Exploring Transition Review: Exploring Transition ScenariosScenarios

1.1. Yes, this installs the Client Access, Hub Yes, this installs the Client Access, Hub Transport, and Mailbox server rolesTransport, and Mailbox server roles

2.2. No, a custom installation is requiredNo, a custom installation is required

3.3. No, an unattended installation is requiredNo, an unattended installation is required

4.4. Both 2 and 3 are correctBoth 2 and 3 are correct

Can you use the typical installation when introducing the first Exchange Server 2007server during transition?

Review: Exploring Transition Review: Exploring Transition ScenariosScenarios

1.1. Using Exchange System ManagerUsing Exchange System Manager

2.2. Running the Move-Mailbox CmdletRunning the Move-Mailbox Cmdlet

3.3. Using Active Directory Users and Computers Using Active Directory Users and Computers MMCMMC

4.4. Running the Move-ExchMailbox CmdletRunning the Move-ExchMailbox Cmdlet

How are mailboxes moved from previousversions of Exchange Servers to theExchange Server 2007 Mailbox server role?

AgendaAgenda

• ReviewReview

• Managing Exchange Server 2007Managing Exchange Server 2007

• Delegating Administrative PermissionsDelegating Administrative Permissions

Exchange Server 2007 Exchange Server 2007 Management Interfaces Management Interfaces

Processboundary

E2007Database

RegistryFiles

ActiveDirectory®

Exchange Management Console

Exchange Management Shell

PowerShell Engine

Exchange cmdlets

Navigation Tree ComparisonNavigation Tree ComparisonExchange 2003

Console Tree Work Pane

Results Pane

Action Pane

Exchange Management ConsoleExchange Management Console

Console Tree

Organization Configuration

Console Tree OrganizationConsole Tree Organization

Server Configuration

Recipient Configuration

Toolbox

Microsoft Exchange

Exchange Management Console Exchange Management Console ToolboxToolboxConfiguration management

Disaster recovery tools

Mail flow tools

Performance tools

Exchange Server 2007 ToolsExchange Server 2007 Tools

Exchange Load GeneratorExchange Load Generator

Exchange Server Profile AnalyzerExchange Server Profile Analyzer

Exchange JetstressExchange Jetstress

Exchange Server Stress and PerformanceExchange Server Stress and Performance

Exploring the Exchange ConsoleExploring the Exchange Console

Tour the basic features of the EMCTour the basic features of the EMC Discover the ToolboxDiscover the Toolbox Access Exchange Management Shell™Access Exchange Management Shell™

demonstrationdemonstration

Review: Managing Exchange Review: Managing Exchange Server 2007Server 2007

1.1. OneOne

2.2. TwoTwo

3.3. ThreeThree

4.4. Four or moreFour or more

Q1: The console tree in Exchange Server 2003contained six or more levels. How many levelsbeyond the root are available in Exchange Server2007?

Review: Managing Exchange Review: Managing Exchange Server 2007Server 2007

1.1. Organization configuration child nodesOrganization configuration child nodes

2.2. Server configuration child nodesServer configuration child nodes

3.3. Recipient configuration child nodesRecipient configuration child nodes

4.4. All of the aboveAll of the above

Q2: The Exchange Management Console work panewill only display when selecting which of thefollowing objects in the console tree?

Review: Managing Exchange Review: Managing Exchange Server 2007Server 2007

1.1. Active Directory users and computersActive Directory users and computers

2.2. Organization configuration | MailboxOrganization configuration | Mailbox

3.3. Server configuration | MailboxServer configuration | Mailbox

4.4. Recipient configuration | MailboxRecipient configuration | Mailbox

Q3: Where are user mailbox settings configured inExchange Server 2007?

AgendaAgenda

• ReviewReview

• Managing Exchange Server 2007Managing Exchange Server 2007

• Delegating Administrative PermissionsDelegating Administrative Permissions

Exchange Server Security and Exchange Server Security and PermissionsPermissions

Exchange Server 2003

• Predefined security roles• Lack of specificity• Little difference between roles• No clear separation between Exchange administrative roles and Active Directory admins

Exchange Server 2007

• New administrator roles• Managed from either the Exchange Management Console or the Exchange Management Shell• No need to alter ACL settings

Split Permissions ModelSplit Permissions Model

Administrator Roles in Exchange Administrator Roles in Exchange ServerServer

Exchange Organization Administrator

Exchange Recipient Administrator

Exchange Server Administrator

Exchange View-Only Administrator

GlobalData

RecipientData

ServerData

Administrator Roles in Exchange Administrator Roles in Exchange ServerServer

Owners of the Exchange organizationRead access to all domain user containersWrite access to all Exchange-specific attributesOwner of all local server configuration data

Must run Setup /PrepareDomain for eachdomain for this group to be applicableRead access to all the Domain User containers  Write access to all the Exchange specific attributes

Owner of all local server configuration data.Local administrator on the computer on which Exchange Server is installed.Members of Exchange View-Only Administrators

Read-only access to the entire Exchange Server organization tree

Exchange Organization Administrator

Exchange Recipient Administrator

Exchange Server Administrator

Exchange View-Only Administrator

Delegating Exchange Server Delegating Exchange Server PermissionsPermissions

Add and remove administrator rolesAdd and remove administrator roles

demonstrationdemonstration

Review: Delegating Review: Delegating Administrative PermissionsAdministrative Permissions

1.1. Exchange organization administratorExchange organization administrator

2.2. Exchange recipient administratorExchange recipient administrator

3.3. Exchange full administratorExchange full administrator

4.4. Exchange view-only administratorExchange view-only administrator

Q1: Which of the following is not an Exchange Server 2007 administrative role?

Review: Delegating Review: Delegating Administrative PermissionsAdministrative Permissions

1.1. Exchange administrator rolesExchange administrator roles

2.2. Split permissions modelSplit permissions model

3.3. Recipient dataRecipient data

4.4. Server dataServer data

Q2: What allows you to configure specificpermissions in Active Directory for variousadministrative roles in your organization?

Review: Delegating Review: Delegating Administrative PermissionsAdministrative Permissions

1.1. Global dataGlobal data

2.2. Recipient dataRecipient data

3.3. Exchange server dataExchange server data

4.4. All of the aboveAll of the above

Q3: What types of Exchange Server data can bemanaged by the four predefined ExchangeServer 2007 administrative roles?

Session SummarySession Summary

• Exchange Server 2007 provides two Exchange Server 2007 provides two interfaces for managing the systeminterfaces for managing the system

• The Exchange Management Console The Exchange Management Console features four major management work features four major management work centerscenters

• Exchange Server enables delegation of Exchange Server enables delegation of management responsibility to an individual or management responsibility to an individual or groupgroup

Questions and AnswersQuestions and Answers

• Submit text questions using the “Ask” button. Submit text questions using the “Ask” button. • Don’t forget to fill out the survey.Don’t forget to fill out the survey.• For upcoming and previously live webcasts: For upcoming and previously live webcasts:

www.microsoft.com/webcasts

• Got webcast content ideas? Contact us at: Got webcast content ideas? Contact us at: http://go.microsoft.com/fwlink/?LinkId=41781

• Today's webcast was presented using MicrosoftToday's webcast was presented using Microsoft®® Office Live Meeting. Get a free 14-day trial by Office Live Meeting. Get a free 14-day trial by visiting: visiting: www.microsoft.com/presentlive