Microsoft Press 70 284 training kit exchange server 2003 phần 6 ppsx

8-28 Chapter 8 Public Folders Configuring Permissions Client permissions are the type of permissions an administrator most commonly works with, and there are two ways to configure them. The first way is by using Exchange System Manager. Right-click a public folder, click Properties, then click the Permissions tab, and then click Client Permissions to open a dialog box similar to the one shown in Figure 8-16. F08es16 Figure 8-16 Configuring client permissions in Exchange System Manager Here, you can add users and groups and configure a granular level of access to the folder. You can also configure advanced Folder Rights by clicking Advanced. By default, everyone can read and write to public folders that are created. The easier way to configure client permissions is by using Outlook, which uses roles- based permissions rather than the more detailed Folder Rights. 1. Open Outlook, expand the Public Folders node in the folder list, and then expand All Public Folders. 2. Right-click a public folder and click Properties, and then click the Permissions tab, shown in Figure 8-17. Lesson 3 Public Folder Security 8-29 F08es17 Figure 8-17 Configuring client permissions in Outlook 3. By default, everyone has the Author permission level, which gives them the right to read and create items and to edit and delete their own items. Tip The Permissions tab is available only to users and groups that have been configured with the Folder Owner permission role. Non-owners cannot manipulate permissions. 4. To add users and groups, click Add and then assign each the desired role. Exam Tip Because Outlook can see only public folders in the Default public folder tree, it cannot be used to configure permissions for public folders that reside in General Purpose trees. You will have to use Exchange System Manager to configure those permissions. More client security settings can be configured by clicking the Administration tab, shown in Figure 8-18, in the public folder’s properties. ! 8-30 Chapter 8 Public Folders F08es18 Figure 8-18 Configuring additional security settings The settings on this tab that are related to security are This Folder Is Available To and Moderated Folder. You can choose whether all users with access permission can use the folder (the default) or whether only users and groups assigned the Folder Owner role can use the folder. A moderated folder is one that requires a moderator to approve all messages that get posted to the folder. This is often used in customer mailing lists or forums where it is highly desirable to limit the amount of off-topic traffic that gets posted. When you click Moderated Folder, the Moderated Folder dialog box, shown in Figure 8-19, opens. To configure a moderated folder, you must first select the check box to make the folder a moderated folder. Next, you need to assign a user or group to which new messages to the folder should be forwarded. These users will view a message for content and decide if it should be posted. Finally, you assign moderators that have the authority to move the messages into the folder upon approval. You can also have an automatically generated e-mail sent in reply to new messages to explain to the sender that the folder is moderated and that they will not see their post until it is approved. You can use a standard response or create your own custom response. Lesson 3 Public Folder Security 8-31 F08es19 Figure 8-19 Configuring moderated folder settings Configuring Directory Rights Directory rights control what users and groups have permission to change e-mail- related attributes of a mail-enabled public folder. By default, only the Administrator account and members of the Administrators, Enterprise Admins, Exchange Domain Servers, and Exchange Enterprise Servers groups have these permissions. Authenticated Users are able to read permissions but not to do anything else. Gener- ally, these settings are sufficient and don’t need to be changed. To change the directory rights, perform the following steps: 1. Right-click the public folder in Exchange System Manager and click Properties. 2. Click the Permissions tab, and then click Directory Rights. 3. Add users or groups as desired and configure the permissions you want them to have. 4. Click OK when you are done, and then click OK again to finish. Configuring Administrative Rights Administrative rights control the users and groups that can use Exchange System Manager, a custom Microsoft Management Console (MMC) console, or any other administrative utility to change the replication, storage limits, and other settings for a public folder. By default, only administrators in the Active Directory domain and enter- prise have administrative rights to a public folder. 8-32 Chapter 8 Public Folders Configuring administrative rights is similar to configuring directory rights. Both are con- figured on the Permissions page of a public folder’s properties. Practice: Public Folder Security In this practice, you will use Outlook to assign permission roles to a public folder to two Active Directory user accounts. Then, you will configure the folder as a moderated folder and assign a forwarding address and moderators to the folder. Before you begin, create user accounts for the following users: ■ Jenny Lysaker ■ Bob Gage ■ Chris Meyer Also, create the following public folders in the Default public folder tree: ■ Feedback ■ Support Exercise 1: Assign Client Permission Roles 1. Open Outlook and expand the Folders container, and then expand All Public Folders. 2. Right-click the Feedback public folder, and then click Properties. Click the Permis- sions tab. 3. Click Add, and then add Jenny Lysaker, Bob Gage, and Chris Meyer. Assign Jenny the Folder Owner permission, assign Bob the Publishing Editor role, and assign Chris the Editor role. Note the differences in permissions each role has. 4. Click OK to finish. Exercise 2: Configure a Moderated Public Folder 1. Right-click the Support public folder, and then click Properties. Click the Admin- istration tab. 2. Click Moderated Folder. 3. Select the check box to Set Folder Up As A Moderated Folder. 4. Assign Jenny Lysaker to Forward New Replies To. 5. Add Jenny Lysaker and Bob Gage as moderators to the folder. 6. Click OK to finish. Lesson 3 Public Folder Security 8-33 Lesson Review The following questions are intended to reinforce key information presented in this lesson. If you are unable to answer a question, review the lesson materials and then try the question again. You can find answers to the questions in the “Questions and Answers” section at the end of this chapter. 1. You are the senior Exchange Server administrator for Litware, Inc. You receive a call from the customer support manager, who is concerned because customers are calling to say that their e-mail messages sent to support@litwareinc.com are being returned as undeliverable. That address is associated with a public folder, so you check the folder properties and find that the e-mail address has been changed to litwaresupport@litwareinc.com. After investigating, you determine that the address was changed by your junior administrator, who normally is responsible only for setting up e-mail addresses for new users. How would you restrict him from being able to edit public folder e-mail addresses in the future? 2. You are the Exchange Server administrator for Contoso, Inc. The company has a CustomerSupport public folder that functions as a discussion forum. The folder resides in the Default public folder tree. The customer service manager, Bob, says he needs to have administrator permissions to the folder in order to configure set- tings such as limits, as needed, and to assign permissions to other support techs. However, you have concerns about giving a non-administrator administrator access. What permissions should you give Bob to ensure that he can do his job, but not give him too much authority? 3. You are the senior Exchange Server administrator for Litware, Inc., a software development company that sells a number of productivity applications. You have a General Purpose public folder tree for your Customer Support forums. There is a top-level folder called Support, which contains child folders named for each product your company sells. Those folders contain child folders for different ver- sions of each product. Support personnel regularly interact in these folders with customers who post questions. Because each support tech works only on a par- ticular product, each one is given permission to access only the parent folder and child folders of the product he or she supports. You have a junior administrator who configures the permissions to the folders for the support staff as required. 8-34 Chapter 8 Public Folders One afternoon, you receive a call from the department manager, who states that none of his support staff can access any of the public forums. You ask your junior administrator, and he tells you he made a permission change on the top-level folder but nowhere else. What did he do that is causing this problem? Lesson Summary ■ Client permissions can be configured through Exchange System Manager for any public folder and through Outlook for public folders that are in the Default public folder tree. ■ Directory rights control the permissions to configure e-mail-related properties for mail-enabled public folders. ■ Administrative rights control the permissions to run administrative utilities, such as Exchange System Manager, to configure public folder settings such as limits and replication. Case Scenario Exercise You are the Exchange Server administrator for Litware, Inc., a software development company that specializes in productivity software. Litware employs approximately 500 people worldwide and has an extensive network of clients and resellers. The Exchange organization consists of five Exchange Server 2003 computers located in different rout- ing groups for sites throughout the world. The company is growing rapidly, and an aspect of the growing pains has been that communication between internal sales and support, and clients and resellers, has deteriorated. E-mail is not as effective as it once was because often there is a need for multiple people to be involved in a project or sit- uation, with each communicating with a group of people. As a result, tracking progress is difficult. You believe a public folder infrastructure would be better suited for the type of com- munication that needs to take place, and you propose such a solution to management. They agree that public folders have the potential to solve many of the problems, but they have some requirements that they feel must be met before you can proceed. ■ Requirement 1 Management wants to ensure that the public folders for the cli- ents do not get mixed up with the folders used internally. Ideally, they don’t want internal users even to be able to see the client public folders. Chapter 8 Public Folders 8-35 ■ Requirement 2 Marketing is concerned about negative press and feedback, so it wants posts to the Customer Support forum to be screened by a support manager prior to being posted. They also do not want the Announcements folder to be cluttered with irrelevant messages; it should have only announcements posted to it. ■ Requirement 3 Accounting wants public folders set up for each client so they can post a client’s account information, such as their aging reports. It is important that this information always be available, even if one of the Exchange Server 2003 servers goes offline. Requirement 1 The first requirement involves ensuring that client public folders do not get mixed up with the company’s internal folders. 1. What is the ideal way to configure the client public folders so they will not be con- fused with Litware’s internal folders? a. Hide the public folders from the address lists. b. Use a unique identifier as part of the name for each client folder so they are easily identifiable. c. Configure a separate public folder tree for the client folders. d. Configure a separate public store for the client folders. 2. Explain why the correct answer to question 1 is the best choice. 3. Which of the following software programs would be able to access the client fold- ers? Select all that apply. a. Outlook Express b. OWA c. Outlook d. Internet Explorer 8-36 Chapter 8 Public Folders Requirement 2 The second requirement involves limiting who can post messages in certain public folders. 1. The Marketing department wants to ensure that the Announcements folder does not get cluttered with off-topic posts. What is the best way to configure this public folder? 2. What is the best way to configure the Customer Support public folder? Requirement 3 For this requirement, the Accounting department wants to be able to post confidential customer account information and ensure that the data will always be available. 1. Because the Accounting department wants to post confidential information for clients to see in public folders, what will you recommend for the solution? 2. Accounting decides to use a public folder to post nonconfidential client files, and they need to ensure that the data is always available. How will you accomplish this? Troubleshooting Lab In this lab, you will mail-enable a public folder and attempt to send an e-mail message to it. When it fails, you will correct the problem by configuring an e-mail address for the folder and then verifying it works. Before proceeding with this lab, you must have met the requirements that were out- lined at the beginning of the chapter, and you must have mailbox-enabled the Administrator account. Outlook must be installed and configured with a mail profile for the Administrator account. Chapter 8 Public Folders 8-37 Exercise 1: Create a Public Folder and Test E-Mail 1. Open Exchange System Manager and navigate to the Folders container. Expand the Folders container. 2. Expand Public Folders. Create a public folder called Feedback in the Default pub- lic folder tree. 3. Minimize Exchange System Manager and open Outlook. Send an e-mail message to the public folder feedback@contoso.com. 4. You will get a non-delivery report (NDR) almost immediately. Minimize Outlook when you do. Exercise 2: Mail-Enable and Create an Additional E-Mail Address for a Public Folder 1. Maximize Exchange System Manager. Right-click the Feedback folder, point to All Tasks, and then click Mail Enable. 2. Wait a couple of minutes, then right-click the Feedback folder and click Properties. 3. Click the E-Mail Address tab, and then click New. Click SMTP Address, and then click OK. 4. Type customerfeedback@contoso.com for the address. Click OK, and then click OK again to finish (leaving feedback@contoso.com as the primary address). Minimize Exchange System Manager. 5. Maximize Outlook. Send another e-mail to feedback@contoso.com. You should not get an NDR this time. 6. Send a second e-mail to customerfeedback@contoso.com. 7. Verify that the messages arrived in the public folder by navigating to the Feedback public folder in the All Public Folders container in the Folder List. There should be two unread messages in the folder—the ones you just sent. Chapter Summary ■ Public folders must be mail-enabled before they can receive e-mail. ■ Public folders can be moved or copied within a public folder tree but not outside of the tree. ■ Only the Default public folder tree is available to Outlook users. ■ General Purpose public folder trees can be accessed by NNTP and HTTP clients but not by MAPI (Outlook and OWA) clients. [...]... Installing Exchange Server 2003 automatically installs a default POP3 virtual server You need to ensure that the default server supports the needs of your specific POP3 clients 9 -6 Chapter 9 Virtual Servers Note The Microsoft Windows Server 2003 POP3 service is not installed on an Exchange Server 2003 server If you want to install Exchange Server 2003, then you need to uninstall the Microsoft Windows Server. .. installed on both servers Server0 1 and Server0 2 should be back-end and front-end servers, respectively ■ A Domain Name System (DNS) server needs to be available Typically, DNS is installed on the domain controller Lesson 1 Overview of Exchange Server 2003 Virtual Servers 9-3 Lesson 1: Overview of Exchange Server 2003 Virtual Servers In Chapter 6, “Installing Microsoft Exchange Server 2003 Clusters and... disks for shared storage ■ An Exchange 2003 Server System Attendant resource (this installs other Exchange resources) Client computers connect to an Exchange virtual server the same way that they connect to a standalone computer running Exchange Server 2003 Windows Server 2003 provides the IP address resource, the network name resource, and the disk resources Exchange Server 2003 provides the System Attendant... install Exchange Server 2003 It provides users with access to public and private folders Users can access data by using http:/ /server_ name/public to access to public folders and http:/ /server_ name /exchange/ mailbox_name to access mailboxes HTTP Virtual Server Configuration Exchange creates the Exchange virtual server with an IP address of (All Unassigned) As a result, the Exchange Server 2003 server s... Front-End and Back-End Servers,” you created a Windows cluster group and a load balancing cluster group and installed Exchange Server 2003 on cluster nodes Exchange Server 2003 installs on a cluster node as a logical virtual server Default HTTP and SMTP virtual servers install and are enabled as part of the Exchange Server 2003 installation process POP3, IMAP4, and NNTP virtual servers also install but... Matters In a clustering environment, Exchange Server 2003 runs as a virtual server because any node in a cluster can assume control of a virtual server If the node running the Exchange virtual server experiences problems, the virtual server goes offline for a brief period until another node takes control Exchange Server 2003 installs as a virtual server in both Microsoft Windows clusters and load balancing... NNTP virtual server? 2 Which protocol services associated with Exchange Server 2003 virtual servers are disabled by default? 3 The default HTTP virtual server is known as the Exchange virtual server What additional feature distinguishes it from all other virtual servers? Lesson Summary ■ Exchange back-end servers typically use Windows clustering for failover support ■ Exchange front-end servers typically... Windows Server 2003 POP3 service and POP3 Web Administration (if installed) Exchange uses its own Microsoft Exchange POP3 service to support POP3 clients You need to enable this service on your Exchange server before POP3 virtual servers can start POP3 Virtual Server Configuration Exchange creates the default POP3 virtual server with an IP address of (All Unassigned) As a result, the Exchange server s IP... Table 9-1 Overview of Exchange Server 2003 Virtual Servers 9-5 Exchange Server 2003 Virtual Server Resources and Dependencies Component Description Dependency POP3 Provides access to e-mail messages for POP3 clients (optional) System Attendant HTTP Provides access to Exchange mailboxes and public folders via HTTP—for example, Microsoft Outlook 2003 Web Access (OWA) System Attendant Exchange MS Search... Exchange Server 2003 server in the organization This will provide fault tolerance so that even if one server goes offline, the content will still be available on another public folder server 9 Virtual Servers Exam Objectives in this Chapter: ■ Configure and troubleshoot Microsoft Exchange Server 2003 for coexistence with other messaging systems ■ Manage and troubleshoot Internet protocol virtual servers . Servers 9-3 Lesson 1: Overview of Exchange Server 2003 Virtual Servers In Chapter 6, “Installing Microsoft Exchange Server 2003 Clusters and Front-End and Back-End Servers,” you created a Windows. anything. ■ Server0 1 should be an enterprise root certification authority (CA) server. ■ Exchange Server 2003, Enterprise Edition, should be installed on both servers. Server0 1 and Server0 2 should. cluster group and installed Exchange Server 2003 on cluster nodes. Exchange Server 2003 installs on a cluster node as a logical virtual server. Default HTTP and SMTP virtual servers install and are