Microsoft® Exchange Server 2003 Deployment and Migration

Contents......Page 8
Foreword......Page 14
Preface......Page 16
What is This Book about?......Page 17
Intended Audience......Page 18
Acknowledgments......Page 20
1.1 Introduction......Page 24
1.2 Windows 2000/Windows 2003 Refresher......Page 25
1.3 Exchange 2003 and Its Relationship to the Forest......Page 28
1.4 The Importance of Domain Controllers and Global Catalog Servers......Page 29
1.5 Choosing an Appropriate Domain Model......Page 40
1.7 Token Augmentation......Page 42
1.8 Exchange 2003 Installation Requirements......Page 43
1.9 Exchange System Manager on Windows XP......Page 47
1.10 Exchange 2003 and Internet Information Services 6.0......Page 48
1.11 Exchange 2003 Installation Improvements......Page 49
1.12 Preparing and Planning for Deployment......Page 51
1.13 DCDiag and NetDiag Utilities......Page 52
1.14 Preparing Windows 2003 Domains for Exchange 2003......Page 54
1.15 Installing Exchange 2000......Page 59
1.16 Summary......Page 60
2.1 Introduction......Page 62
2.2 Active Directory Connector Core Technology Description......Page 63
2.3 Connection Agreements......Page 68
2.4 Active Directory Connector Schema Modifications......Page 73
2.5 Determining Which Directory Objects to Synchronize......Page 75
2.6 Active Directory Connector Block Searching......Page 76
2.7 How the Active Directory Connector Uses the Active Directory......Page 77
2.9 Object Class Mapping from Exchange 5.5 to the Active Directory......Page 78
2.10 Object Class Mapping from the Active Directory to Exchange 5.5......Page 81
2.12 Dealing with Hidden Distribution List Membership......Page 83
2.13 Object Deletion......Page 84
2.14 Connection Agreements and Authentication......Page 85
2.15 Controlling the Synchronization Schedule......Page 87
2.16 Connection Agreement Advanced Parameters......Page 89
2.17 Exchange 5.5 Mailboxes and Multiple Windows NT Accounts......Page 94
2.18 Mailbox Delegate Access......Page 95
2.19 Troubleshooting Active Directory Connector Synchronization Problems......Page 97
2.20 The New Exchange 2003 Active Directory Connector Features......Page 99
2.21 Summary......Page 100
3.1 Introduction......Page 102
3.2 Default Object-Matching Behavior......Page 103
3.3 How the Active Directory Connector Uses LDAP......Page 104
3.5 Understanding LDAP Search Filters......Page 105
3.6 Setting an LDAP Search Filter on a Connection Agreement......Page 106
3.7 Default Active Directory Connector Object-Matching Behavior......Page 107
3.8 Using Custom Object-Matching Rules on the Active Directory Connector......Page 110
3.9 The NTDSNoMatch Utility......Page 115
3.10 Summarizing Object-Matching Behavior......Page 116
3.12 Default Attribute Mapping Behavior......Page 117
3.13 Moving Beyond the Schema Mapping GUI......Page 118
3.14 Active Directory Distinguished Name Mapping with the Exchange 2000 Active Directory Connector......Page 125
3.16 Exchange 5.5 and LDAP Names......Page 127
3.17 Attribute Mapping Rule Syntax......Page 128
3.18 Summary......Page 130
4.2 Positioning the Site Replication Service and the Active Directory Connector......Page 132
4.3 Components that Comprise the Site Replication Service......Page 133
4.4 The Site Replication Service in Intrasite Replication Operation......Page 134
4.5 The Site Replication Service in Intersite Replication Operation......Page 137
4.6 What Takes Place during a Bridgehead Server Upgrade?......Page 139
4.7 Site Replication Service Management......Page 140
4.8 Site Replication Service Preference......Page 142
4.9 Summary......Page 143
5.2 Public Folder Connection Agreements......Page 146
5.3 Configuring Public Folder Connection Agreements......Page 148
5.4 Public Folder Permissions......Page 150
5.5 Exchange 5.5 and Exchange 2003 Public Folder Replication......Page 151
5.6 Permission Handling during Mixed-Version Replication......Page 153
5.7 Dealing with Zombie Users......Page 155
5.8 Exchange 5.5 Distribution Lists and Access Control Lists......Page 157
5.9 Public Folder Deployment Guidelines......Page 158
5.10 Planning and Understanding Public Folder Topologies......Page 159
5.11 Reintroducing Public Folder Affinity......Page 160
5.12 Getting Ready to Migrate Public Folders......Page 162
5.13 Moving User and System Public Folder Content......Page 163
5.14 Using the Public Folder Migration Tool......Page 165
5.15 Summary......Page 166
6.2 Why Native-Mode Windows 2000 or Windows 2003 Domains Are Best......Page 168
6.3 Scenarios that Require Multiple Connection Agreements......Page 170
6.4 Container Hierarchy Mapping......Page 172
6.5 Moving Synchronized Objects between Containers......Page 173
6.6 Using Multiple Active Directory Connectors......Page 174
6.7 Exchange 5.5 Back-Replication......Page 175
6.8 Connection Agreement Deployment Models......Page 177
6.9 Deploying Active Directory Connectors......Page 186
6.10 Network Impact from Active Directory Connector Synchronization......Page 188
6.11 Summary......Page 190
7.2 Exchange 5.5 Migration Fundamentals......Page 192
7.3 Making a Clean Break from Exchange 5.5......Page 194
7.4 Exchange 5.5 Migration Terminology Refresher......Page 195
7.5 The Importance of sID History During Exchange 5.5 Migration......Page 196
7.6 Exchange 5.5, Windows Migrations, and the ClonePrincipal Toolkit......Page 197
7.7 Requirements for Writeable Access to sIDHistory......Page 198
7.8 Running Exchange 5.5 on Windows 2000 Servers......Page 199
7.9 Exchange 5.5 to Exchange 2003 Migration Approaches......Page 200
7.10 Active Directory Account Domain Cleanup Wizard......Page 223
7.11 Summary......Page 233
8.2 Exchange 2000 to Exchange 2003 Migration Approaches......Page 234
8.3 Mixed Exchange 5.5/Exchange 2000 migrations to Exchange 2003......Page 239
8.4 The Exchange 2003 Move Mailbox Wizard......Page 240
8.5 Summary......Page 250
9.2 Deciding on an Interorganization Migration Approach......Page 252
9.3 Using the Exchange Server Migration Wizard......Page 253
9.4 Partial Organization Migrations......Page 258
9.5 Third-Party Tool Approach to Interorganization Migration......Page 264
9.6 Summary......Page 285
10.2 Using Exchange 2003 Front-End Servers in the DMZ......Page 288
10.3 Exchange, DSAccess, and Firewalls......Page 290
10.4 Should You Allow RPCs across Your DMZ?......Page 292
10.5 Generalized Internal-Facing Firewall Requirements......Page 293
10.6 Outlook Web Access Security Issues......Page 294
10.7 Secure Architectural Alternative......Page 295
10.9 Putting Components into Practice......Page 297
10.10 Using Microsoft ISA Server with OWA......Page 298
10.11 Using a Hardware-Based SSL/TLS Proxy Server with OWA......Page 301
10.12 Back-End Encryption......Page 302
10.13 Understanding OWA, Authentication, Front-End Servers, and Redirection......Page 304
10.14 Implementing Outlook RPC over HTTP......Page 311
10.15 Summary......Page 322
A Lists of Events Generated by the Active Directory Connector......Page 324
B Connection Agreement Attributes......Page 376
C Active Directory Connector Registry Keys......Page 386
A......Page 388
C......Page 389
D......Page 390
E......Page 391
I......Page 393
L......Page 394
M......Page 395
O......Page 396
Q......Page 397
S......Page 398
W......Page 400
Z......Page 401