131 Exchange 2003 Security Considerations Before installing Exchange Server 2003 in your organization, it is important that you are familiar with your organization's security requirements. Familiarizing yourself with these requirements helps ensure that your Exchange Server 2003 deployment is as secure as possible. For more information about planning Exchange Server 2003 security, see the following guides: Planning an Exchange Server 2003 Messaging System Exchange Server 2003 Security Hardening Guide Exchange Server Deployment Tools Exchange Server Deployment Tools are tools and documentation that lead you through the entire upgrade process. To ensure that all of the required tools and services are installed and running properly, it is recommended that you run Exchange 2003 Setup through the Exchange Server Deployment Tools. For detailed steps, see How to Start the Exchange Server Deployment Tools. 132 Note: You must download the latest version of the Exchange Server Deployment Tools before you run them. To receive the latest version of the tools, see the Downloads for Exchange 2003 Web site. After you start the tools and specify that you want to Upgrade from Exchange 2000 Native Mode, you are provided with a checklist detailing the following installation steps: Verify that your organization meets the specified requirements. Run the DCDiag tool. Run the NetDiag tool. Run ForestPrep. Run DomainPrep. Run Exchange Setup. 133 With the exception of running the DCDiag and NetDiag tools, each of these installation steps is detailed later in this topic. For more information about the DCDiag and NetDiag tools, refer to the Exchange Server Deployment Tools. It is recommended that you run the DCDiag and NetDiag tools on every server on which you plan to install Exchange Server 2003. Using Exchange Server Deployment Tools, you can run specific tools and utilities to verify that your organization is ready to install Exchange Server 2003. If you do not want to run Exchange Server Deployment Tools, read the remaining sections in this topic for information about manually installing Exchange Server 2003. System-Wide Requirements for Exchange Server 2003 Before you upgrade to Exchange Server 2003, ensure that your network and servers meet the following system-wide requirements: Domain controllers are running Windows 2000 Service Pack 3 (SP3) or Windows Server 2003. Global catalog servers are running Windows 2000 SP3 or later, or Windows Server 2003. It is recommended that you have a global catalog server in every domain where you plan to install Exchange Server 2003. 134 Servers are running Windows 2000 Server SP3 or Windows Server 2003 Active Directory. You backed up your Exchange 2000 databases. For more information about Windows Server 2003, Active Directory, and Domain Name System (DNS), see the following resources: Windows Server 2003 Help Best Practice: Active Directory Design for Exchange 2000 Server Planning an Exchange Server 2003 Messaging System Server-Specific Requirements for Exchange Server 2003 Before you upgrade to Exchange Server 2003, ensure that your Exchange Server 2003 servers meet the requirements that are described in this section. 135 Hardware Requirements The following are the minimum hardware requirements for Exchange 2003 servers: Intel Pentium or compatible 133 megahertz (MHz) or faster processor 256 megabytes (MB) of RAM recommended minimum, 128 MB supported minimum 500 MB of available disk space on the drive on which you install Exchange 200 MB of available disk space on the system drive CD-ROM drive SVGA or higher-resolution monitor Operating System Requirements Exchange Server 2003 is supported on the following operating systems: 1 36 Windows 2000 SP3 or later Note: Windows 2000 SP3 or later is available for download at the following article: Windows 2000 Service Packs. Windows 2000 SP3 or later is also a prerequisite for running the Exchange 2003 Active Directory Connector. Windows Server 2003 Exchange 2000 Server Requirements Before you upgrade your Exchange 2000 servers to Exchange Server 2003, your servers must be running Exchange 2000 SP3 or later. Exchange 2000 SP3 is available for download at the following article: Service Pack 3 for Exchange 2000 Server and Exchange 2000 Server Enterprise Edition. 137 Windows 2000 Components When upgrading to Exchange Server 2003, the current state of the Post Office Protocol version 3 (POP3), Internet Message Access Protocol version 4 (IMAP4), and Network News Transfer Protocol (NNTP) services is preserved. Furthermore, if you are upgrading to Exchange Server 2003 on a server running Windows 2000, Exchange Setup installs and enables the Microsoft .NET Framework and ASP.NET components automatically, which are prerequisites for Exchange Server 2003. Important: Unless it is necessary that you run a particular service, you should disable it. For example, if you do not use POP3, IMAP4, or NNTP, you should disable these services on all of your Exchange Server 2003 servers after you install Exchange Server 2003. For more information about installing these components, see Windows 2000 Help. Upgrading Front-End and Back-End Servers Exchange Server 2003 supports the deployment of Exchange in a manner that distributes server tasks among front-end and back-end 138 servers. Specifically, a front-end server accepts requests from POP3, IMAP4, and RPC/HTTP clients, and proxies them to the appropriate back-end server for processing. If your Exchange 2000 organization takes advantage of front-end and back-end architecture, you must upgrade your front-end servers before you upgrade your back-end servers. For more information about front-end and back-end architecture, see Configuring Exchange 2003 for Client Access. For information about front-end and back-end scenarios, configurations, and installation, see the following guides: Planning an Exchange Server 2003 Messaging System Exchange Server 2003 and Exchange 2000 Server Front-End and Back-End Server Topology Guide Pre-Upgrade Procedures Before you begin upgrading your Exchange 2000 Server organization to Exchange Server 2003, it is important that you prepare your organization 139 for the upgrade process. This section provides recommended and required pre-upgrade procedures. Upgrading the Operating Systems If you plan to upgrade your Exchange 2000 Servers running Windows 2000 SP3 (or later) to Windows Server 2003, you must first upgrade those servers to Exchange Server 2003. This upgrade sequence is required because Exchange 2000 Server is not supported on Windows Server 2003. Removing Unsupported Components The following components are not supported in Exchange Server 2003: Microsoft Mobile Information Server Instant Messaging service Exchange Chat Service Exchange 2000 Conferencing Server 140 Key Management Service cc:Mail connector MS Mail connector To successfully upgrade an Exchange 2000 Server to Exchange Server 2003, you must first use Exchange Setup to remove these components. For more information about removing these unsupported components, see Exchange 2000 Help and Mobile Information Server Help. Note: If you want to retain these components, do not upgrade the Exchange 2000 Servers that are running them. Instead, install Exchange Server 2003 on other servers in your organization. Upgrading International Versions of Exchange When upgrading from Exchange 2000 Server to Exchange Server 2003, you must upgrade to the same language version of Exchange Server 2003. For example, you cannot use Exchange Setup to upgrade a German version of Exchange 2000 Server to a French version of Exchange Server 2003. . Planning an Exchange Server 2003 Messaging System Server- Specific Requirements for Exchange Server 2003 Before you upgrade to Exchange Server 2003, ensure that your Exchange Server 2003 servers. running the Exchange 2003 Active Directory Connector. Windows Server 2003 Exchange 2000 Server Requirements Before you upgrade your Exchange 2000 servers to Exchange Server 2003, your servers. your Exchange Server 2003 deployment is as secure as possible. For more information about planning Exchange Server 2003 security, see the following guides: Planning an Exchange Server 2003