Microsoft Exchange Server 2003, Deployment and Migration SP1 and SP2 (eBook)

Front Cover 1
Microsoft® Exchange Server 2003 Deployment and Migration 4
Copyright Page 5
Contents 8
Foreword 14
Preface 16
Acknowledgments 20
Chapter 1. Exchange 2003 Deployment Fundamentals 24
1.1 Introduction 24
1.2 Windows 2000/Windows 2003 Refresher 25
1.3 Exchange 2003 and Its Relationship to the Forest 29
1.4 The Importance of Domain Controllers and Global Catalog Servers 30
1.5 Choosing an Appropriate Domain Model 45
1.6 Universal Security Groups and Windows Domain Mixed-Mode Membership 47
1.7 Token Augmentation 48
1.8 Exchange 2003 Installation Requirements 49
1.9 Exchange System Manager on Windows XP 53
1.10 Exchange 2003 and Internet Information Services 6.0 55
1.11 Exchange 2003 Installation Improvements 55
1.12 Preparing and Planning for Deployment 58
1.13 DCDiag and NetDiag Utilities 59
1.14 Preparing Windows 2003 Domains for Exchange 2003 61
1.15 Installing Exchange 2003 67
1.16 Summary 68
Chapter 2. Active Directory Connector Synchronization 70
2.1 Introduction 70
2.2 Active Directory Connector Core Technology Description 71
2.3 Connection Agreements 77
2.4 Active Directory Connector Schema Modifications 83
2.5 Determining Which Directory Objects to Synchronize 85
2.6 Active Directory Connector Block Searching 86
2.7 How the Active Directory Connector Uses the Active Directory 87
2.8 Mailbox-Enabled and Mail-Enabled Objects 88
2.9 Object Class Mapping from Exchange 5.5 to Active Directory 89
2.10 Object Class Mapping from Active Directory to Exchange 5.5 92
2.11 Synchronizing Hidden Objects 94
2.12 Dealing with Hidden Distribution List Membership 94
2.13 Object Deletion 95
2.14 Connection Agreements and Authentication 96
2.15 Controlling the Synchronization Schedule 99
2.16 Connection Agreement Advanced Parameters 101
2.17 Exchange 5.5 Mailboxes and Multiple Windows NT Accounts 105
2.18 Mailbox Delegate Access 107
2.19 Troubleshooting Active Directory Connector Synchronization Problems 109
2.20 New Exchange 2003 Active Directory Connector Features 111
2.21 Summary 113
Chapter 3. Advanced Active Directory Connector Configuration 114
3.1 Introduction 114
3.2 Default Object-Matching Behavior 115
3.3 How the Active Directory Connector Uses LDAP 116
3.4 Using a Customized LDAP Search Filter 117
3.5 Understanding LDAP Search Filters 118
3.6 Setting an LDAP Search Filter on a Connection Agreement 119
3.7 Default Active Directory Connector Object- Matching Behavior 121
3.8 Using Custom Object-Matching Rules on the Active Directory Connector 123
3.9 The NTDSNoMatch Utility 129
3.10 Summarizing Object-Matching Behavior 130
3.11 Introduction to Attribute Mapping 130
3.12 Default Attribute Mapping Behavior 131
3.13 Moving beyond the Schema Mapping GUI 132
3.14 Active Directory Distinguished Name Mapping with the Exchange 2000 Active Directory Connector 139
3.15 ADC Account Creation and Account Migration 141
3.16 Distinguished Name Mapping with the Exchange 2003 Active Directory Connector 143
3.17 Exchange 5.5 and LDAP Names 146
3.18 Attribute Mapping Rule Syntax 147
3.19 Exchange 2003 SP1 Enhancements to the Active Directory Connector 149
3.20 Summary 151
Chapter 4. The Site Replication Service 154
4.1 Introduction 154
4.2 Positioning the Site Replication Service and the Active Directory Connector 154
4.3 Components That Make Up the Site Replication Service 155
4.4 The Site Replication Service in Intrasite Replication Operations 156
4.5 The Site Replication Service in Intersite Replication Operations 160
4.6 What Takes Place during a Bridgehead Server Upgrade? 161
4.7 Site Replication Service Management 163
4.8 Site Replication Service Preference 165
4.9 Summary 167
Chapter 5. Public Folder Interoperability and Migration 168
5.1 Introduction 168
5.2 Public Folder Connection Agreements 168
5.3 Configuring Public Folder onnection Agreements 170
5.4 Public Folder Permissions 173
5.5 Exchange 5.5 and Exchange 2003 Public Folder Replication 174
5.6 Permission Handling during Mixed-Version Replication 175
5.7 Dealing with Zombie Users 178
5.8 Exchange 5.5 Distribution Lists and Access Control Lists 180
5.9 Public Folder Deployment Guidelines 182
5.10 Planning and Understanding Public Folder Topologies 183
5.11 Reintroducing Public Folder Affinity 184
5.12 Getting Ready to Migrate Public Folders 186
5.13 Moving User and System Public Folder Content 187
5.14 Using the Public Folder Migration Tool 190
5.15 Summary 192
Chapter 6. Deployment and Interoperability Guidelines for the Active Directory Connector 194
6.1 Introduction 194
6.2 Why Native-Mode Windows 2000 or Windows 2003 Domains Are Best 194
6.3 Scenarios That Require Multiple Connection Agreements 196
6.4 Container Hierarchy Mapping 199
6.5 Moving Synchronized Objects between Containers 200
6.6 Using Multiple Active Directory Connectors 201
6.7 Exchange 5.5 Back Replication 202
6.8 Connection Agreement Deployment Models 205
6.9 Deploying Active Directory Connectors 215
6.10 Network Impact from Active Directory Connector Synchronization 217
6.11 Summary 219
Chapter 7. Interorganizational Migrations 222
7.1 Introduction 222
7.2 Deciding on an Interorganizational Migration Approach 222
7.3 Using the Exchange Server Migration Wizard 223
7.4 Partial-Organization Migrations 228
7.5 Third-Party-Tool Approach to Interorganizational Migration 235
7.6 Summary 259
Chapter 8. Moving from Exchange 5.5 to Exchange 2003 262
8.1 Introduction 262
8.2 Exchange 5.5 Migration Fundamentals 263
8.3 Making a Clean Break from Exchange 5.5 264
8.4 Exchange 5.5 Migration Terminology Refresher 265
8.5 The Importance of SID History during Exchange 5.5 Migration 267
8.6 Exchange 5.5, Windows Migrations, and the ClonePrincipal Toolkit 267
8.7 Requirements for Writeable Access to SID History 269
8.8 Running Exchange 5.5 on Windows 2000 Servers 270
8.9 Exchange 5.5–to–Exchange 2003 Migration Approaches 272
8.10 Active Directory Account Domain Cleanup Wizard 297
8.11 Summary 308
Chapter 9. Moving from Exchange 2000 to Exchange 2003 310
9.1 Introduction 310
9.2 Exchange 2000–to–Exchange 2003 Migration Approaches 310
9.3 Mixed Exchange 5.5/Exchange 2000 Migrations to Exchange 2003 316
9.4 The Exchange 2003 Move Mailbox Wizard 316
9.5 Mixed-Mode Cross–Administrative Group Mailbox Moves with Exchange 2003 SP1 328
9.6 Dealing with Client Profiles, Custom Recipients, and Distribution Lists during Mixed-Mode Cross–Administrative Group Mailbox Moves 338
9.7 Summary 348
Chapter 10. Deploying Exchange for External Access 350
10.1 Introduction 350
10.2 Using Exchange 2003 Front-End Servers in the DMZ 350
10.3 Exchange, DSAccess, and Firewalls 354
10.4 Should You Allow RPCs across Your DMZ? 354
10.5 Generalized Internally Facing Firewall Requirements 355
10.6 Outlook Web Access Security Issues 357
10.7 A Secure Architectural Alternative 358
10.8 Tunneling and Bridging 358
10.9 Putting Components into Practice 360
10.10 Using Microsoft ISA Server with OWA 361
10.11 Using a Hardware-Based SSL/TLS Proxy Server with OWA 363
10.12 Back-End Encryption 365
10.13 Understanding OWA, Authentication, Front-End Servers, and Redirection 367
10.14 Implementing Outlook RPC over HTTP 374
10.15 Administrative Changes in Exchange 2003 SP1 for RCP over HTTP 386
10.16 Summary 393
Chapter 11. Optimizing Deployments and Configurations 396
11.1 Introduction 396
11.2 Optimized Internet E-mail Routing 396
11.3 Understanding the Exchange Best Practices Analyzer Tool 406
11.4 The Exchange Server Performance Troubleshooting Analyzer 416
11.5 Understanding the ExMon Tool 423
11.6 Exchange Database Optimization with Exchange 2003 SP2 432
11.7 Summary 443
Chapter 12. Troubleshooting Client Connections 446
12.1 Introduction 446
12.2 Problems with MAPI Client Connections 446
12.3 Troubleshooting RPC over HTTP Connections 457
12.4 Summary 466
Chapter 13. Exchange Journaling, Archiving, and Compliance 468
13.1 Introduction 468
13.2 Exchange Data-Management Guidelines for Administrators 468
13.3 Functional Requirements for a Compliance Infrastructure 479
13.4 Exchange Message Journaling 485
13.5 Advanced Exchange Journaling: Envelope Journaling 493
13.6 Summary 502
Appendix A: Lists of Events Generated by the Active Directory Connector 506
Appendix B: Connection Agreement Attributes 562
Appendix C: Active Directory Connector Registry Keys 572
Index 574