v Technical Editors Rodney Buike (MCSE) is an IT Pro Advisor with Microsoft Canada. As an IT Pro Advisor, Rodney spends his day helping IT professionals in Canada with issues and challenges they face in their environment and careers. He also advocates for a stronger community presence and shares knowledge through blogging, podcasts, and in-person events. Rodney’s specialties include Exchange Server, virtualization, and core infrastructure technologies on the Windows platform. Rodney worked as a LAN administrator, system engineer, and consultant and has acted as a reviewer on many popular technical books. Rodney is also the founder and principal content provider for Thelazyadmin.com and a former author for MSExchange.org. Rodney enjoys all his personal and professional activities and is up-front about the support he gets from his family and especially his wife, Lisa. Without her support, what he does would not be possible. Kirk Vigil (MCSE, MCSA), coauthor of MCSA/MSCE Exam 70-291: Implementing, Managing, and Maintaining a Windows Server 2003 Network Infrastructure and How to Cheat at Managing Windows Server Update Services is a senior systems consultant for NetBank, Inc. in Columbia, SC. He has worked in the IT integration industry for over 13 years, specializing in Microsoft messaging and network operating system infrastructures. He has worked with Microsoft Exchange since its inception and continues to focus on its advancements with the current release of Exchange 2007 as well as its integration with the Windows Server line of products. Kirk holds a bachelor’s degree from the University of South Carolina. He also works as an independent consultant for a privately owned integration company, lending technical direction to local business practices. He is a contributing author to Microsoft Certifi ed Professional Magazine. Kirk would fi rst like to thank God, for without Him nothing is possible. Kirk would also like to thank his beautiful girlfriend, Kimberley Paige, for her continued and loving support as Kirk’s takes on more “bookwork” as she likes to call it. She is irreplaceable and loved very much. Kirk thanks his family for their unconditional love and support. Lastly, Kirk is grateful to the owners, editors, and writers of Syngress/Elsevier Publishing for the opportunity to continue working with them as a technical writer/editor. vi Robert J. Shimonski (MCSE) is an Entrepreneur and best-selling author and editor of hundreds of published books and thousands of magazine and industry articles. Rob consults within today’s most challenging business and technology environments and brings frontline industry knowledge to the reader in every page he writes. Rob is always on top of the latest trends and reporting the state of the business and technology industry from a real-world perspective. As of the writing of this book, Rob is currently on assignment testing and developing secure Vista images and designing a Longhorn upgrade for a large global fi rm. Mark Horninger (A+, Net+, Security+, MCSE+I, MCSD, MCAD, MCDBA, MCTS, MCITP, MCPD) is president and founder of Haverford Consultants Inc. (www.haverford- consultants.com), located in the suburbs of Philadelphia, PA. He develops custom applications and system engineering solutions, specializing primarily in Microsoft .Net Technology and Microsoft SQL Server. He was a contributing author to Confi guring and Troubleshooting Windows XP Professional; MCSA/MCSE Exam 70-292 Study Guide & DVD Training System: Managing and Maintaining a Windows Server 2003 Environment for an MCSA Certifi ed on Windows 2000; and Designing SQL Server 2000 Databases for .NET Enterprise Servers, all of which were published by Syngress, an imprint of Elsevier Inc. Mark is also an adjunct professor teaching Web design at Kaplan University. Mark has over 15 years of computer consulting experience and has passed 50+ Microsoft Certifi cation Exams. He lives with his wife, Debbie, and son, Robby, in the Philadelphia area. Mark would like to thank his wife, Debbie, for her infi nite patience, love, and support during this project. Chris Adams is a Program Manager for Microsoft Corp. Focused heavily on “customer experience,” Chris spends his time working closely with customers to ensure that their voices are heard for current and shipped products. He spends most of his time focusing on building and reviewing technical content for IIS, working with IIS most valuable profes- sionals (MVPs), and spearheading new and exciting programs to best reach customers for the IIS team. Chris has owned such things as www.iis.net, the IIS Webcast Series, and the IIS Diagnostics Tools releases while at Microsoft. Chris was formally a Microsoft Product Support Services (PSS) engineer, technical lead, and supportability lead for the IIS product and has deep technical experience in the use and functionality of IIS 4.0, 5.0, 5.1, 6.0, and 7.0. Chris is currently Microsoft certifi ed as an MCP, MCSA, and MCSE. vii Conrad H. Agramont Jr. is a Partner Technology Specialist with Microsoft, where he focuses on technical readiness for Microsoft Infrastructure Partners focusing on the small to midmarket enterprises. Conrad was previously the Senior Architect for a Microsoft Gold Partner, where he was responsible for product planning, software architecture, and technical evangelism, focusing on service providers worldwide. He was also a Program Manager at Microsoft, driving hosting scenarios and architecting components for the Microsoft Provisioning System, Microsoft Solutions for Hosted Messaging and Collaboration, and Windows-Based Hosting 3.0. Conrad has more than 10 years of experience working in the Microsoft automation and hosting space, speaking at public events, and publishing articles in magazines. He is also an active blogger, focusing on many Microsoft-related topics. His blog can be found at http://agramont.net/ Timothy Blum (MCDBA, MCTS, MCITP) is the senior database administrator at HighPoint Solutions, LLC, which provides business and technology solutions to the pharmaceutical and life sciences industry. He currently provides senior-level strategic and technical consulting to HighPoint Solutions’ clients in the northeast region of the U.S. His specialties include Microsoft SQL Server design and implementation, Integration Services, Data Transformation Services, Analysis Services, business intelligence architecture and design, and database tuning. During his 15 years working in the IT industry, Timothy has held positions as a senior SQL Server database administrator, PICK database administrator, Oracle database developer, and a C++, VB, ASP, and UNIX Business Basic programmer for companies such as CEI Network, DDS Ltd, and ECC Management Services. Kevvie Fowler is the manager of managed security services at Emergis Inc., where he is responsible for the delivery of specialized security and incident response services. Kevvie has more than 10 years of professional information security and IT experience within Contributing Authors viii development, database, and host/network platforms. In 2007, Kevvie was a featured presenter at the Black Hat USA security conference, where he presented his ground-breaking research on SQL Server database forensics. Kevvie is a GIAC Gold Certified Forensic Analyst, and he holds several other certifications, including CISSP, MCTS, MCSD, MCDBA, and MCSE. Raymond Arthur Gabriel (MCSD, MCAD, MCSD .Net) formed a consulting practice, Integrated MicroSystems Design Corp. (www.imicrodev. net), in 1989 to provide technical consulting services as an application architect and solution developer. He has 20 years of experience in IT, including full life-cycle experience with multitier Windows and Web application development. Raymond holds an associate’s degree in electronic engineering from the Cleveland Institute of Electronics and is a member of the IEEE. He currently resides in Chester County, PA, with his wife, Sharon, whose support is an eternal source of great encouragement. Twan Grotenhuis (MCT, MCSE NT4, 2000 and 2003, MCSE+messaging 2000 and 2003, MCSE+security 2000 and 2003, CCNA) is a consultant with Sylis Netherlands. He currently provides strategic and technical consulting to several customers of Sylis in the Netherlands. His specialties include Microsoft Exchange and ISA architecture, design, implementation, troubleshooting, and optimization. Twan has been involved in several major Exchange implementation and migration projects where designing the new messaging infrastructure was his main focus. K. Brian Kelley (MCSE, GSEC, Security+) is a systems architect for AgFirst Farm Credit Bank. At AgFirst he provides infrastructure and security guidance with respect to Windows-based technologies, including Active Directory, Internet Information Server, and Microsoft SQL Server. Brian, author of Start to Finish Guide to SQL Server Performance Monitoring, is a regular columnist and blogger at SQLServerCentral.com, where he focuses primarily on SQL Server security. He is also a frequent contributor to SQL Server Standard Magazine. Brian’s background includes stints with BellSouth as a systems administrator and with the United States Air Force as a communications/computer systems offi cer in a multitude of IT-related roles. ix Brian holds bachelor’s degrees from The Citadel, the Military College of South Carolina, and is a member of the Professional Association of SQL Server (PASS), the SQL Server Worldwide Users Group, the Information Systems Audit and Control Association (ISACA), and the Association for Computing Machinery. He is also active in the Midlands PASS chapter, an offi cial PASS chapter for South Carolina. Brian currently resides in Columbia, SC, with his family. Matt Shepherd (CISSP, MCSE, MCDBA, GCFW, CEH) is a consultant in the Security and Privacy Division at Project Performance Corporation of McLean, VA. Matt uses his experience as a network administrator, IT manager, and security architect to deliver high-quality solutions for Project Performance Corporation’s clients in the public and private sector. Matt holds bachelor’s degrees from St. Mary’s College of Maryland, and he is currently working on his master’s of science in information assurance. Robert McLaws is a technology writer from Mesa, AZ. He currently resides in northern Phoenix, where he works as a contract software consultant. He started a Web site called LonghornBlogs.com in October 2003. The site, now called Windows-Now (www.windows-now.com/ default.aspx), has received several awards, including PC Magazine’s To p 100 Sites of 2004 and CMP Media’s Top 10 Tech Blogs of 2005. Henrik Walther (Exchange MVP, MCSE Messaging/Security) is a senior consultant working for Interprise Consulting A/S (a Microsoft Gold Partner) based in Copenhagen, Denmark. Henrik has more than 14 years of experience in the IT business, where he primarily works with Microsoft Exchange, ISA Server, MOM, IIS, clustering, Active Directory, and virtual server technologies. In addition to his job as a senior consultant, Henrik runs the Danish Web site Exchange-faq.dk. He is also the primary content creator, forums moderator, and newsletter editor at the leading Microsoft Exchange site, MSExchange.org. Henrik is the author of CYA: Securing Exchange Server 2003 & Outlook Web Access (Syngress Publishing), and he has been a reviewer on several other messaging books (including another Exchange 2007 book). . author and editor of hundreds of published books and thousands of magazine and industry articles. Rob consults within today’s most challenging business and technology environments and brings. (MCT, MCSE NT4, 2000 and 2003, MCSE+messaging 2000 and 2003, MCSE+security 2000 and 2003, CCNA) is a consultant with Sylis Netherlands. He currently provides strategic and technical consulting. to SQL Server Performance Monitoring, is a regular columnist and blogger at SQLServerCentral.com, where he focuses primarily on SQL Server security. He is also a frequent contributor to SQL